Moonshot initiatives

@@ -4,11 +4,11 @@ title: "Moonshot initiatives"
slug: moonshot-initiatives
category: governance
type: topic
quality: stub
quality: complete
short_description: "Moonshot initiatives are active engineering programs that build native replacements for quarantined third-party dependencies, with the goal of eliminating vendor lock-in and reducing the platform's external attack surface over time."
status: active
bcsc_class: public-disclosure-safe
last_edited: 2026-04-30
last_edited: 2026-05-19
editor: pointsav-engineering
cites: []
paired_with: moonshot-initiatives.es.md
@@ -55,12 +55,28 @@ reaches structural parity with its quarantined counterpart, it
replaces the isolated directory. The ledger entry closes at that
point.

## Active initiative areas

Each moonshot targets a distinct dependency class. The following classes have open initiatives in the engineering platform:

| Initiative | Target dependency | Rationale |
|---|---|---|
| `moonshot-database` | External database engine | Data layer sovereignty; replace foreign engine with a formally verified flat-file or embedded store |
| `moonshot-gpu` | Cloud GPU inference services | Inference sovereignty; platform-local GPU capacity removes reliance on cloud inference APIs |
| `moonshot-hypervisor` | External hypervisor layer | Substrate sovereignty; a verified hypervisor closes the gap between the seL4 microkernel and commodity hardware |
| `moonshot-index` | External search and index backends | Search sovereignty; a platform-native index eliminates dependency on third-party search infrastructure |
| `moonshot-kernel` | Commodity Linux kernel | Kernel sovereignty; the seL4 formally verified microkernel replaces the quarantined systemd/Linux dependency recorded in ADR-08 |
| `moonshot-network` | External network control plane | Network sovereignty; a native WireGuard-native mesh eliminates reliance on managed network services |
| `moonshot-protocol` | Proprietary communication protocols | Protocol sovereignty; replace proprietary wire protocols with open, formally specified equivalents |
| `moonshot-sel4-vmm` | Commodity virtual machine monitor | Verification layer; a seL4-native VMM closes the verified boundary below all guest operating systems |
| `moonshot-toolkit` | External build and CI tooling | Build sovereignty; a Rust-native build orchestrator replaces reliance on external CI infrastructure |

Completion status of each initiative is tracked in the [[sovereign-replacement-initiative|Sovereign Replacement Initiative]] ledger.

## Vendor and customer roles

- The Vendor (PointSav Digital Systems) maintains the moonshot
 ledgers and engineers the native replacements.
- The Customer (Woodfine Management Corp.) audits the pipeline to
 verify progress toward operational independence.
- The Vendor (PointSav Digital Systems) maintains the moonshot ledgers and engineers the native replacements.
- The Customer (Woodfine Management Corp.) audits the pipeline to verify progress toward operational independence.

## See also