os-infrastructure and os-network-admin: Distribution Model
os-network-admin is catalogued for distribution at software.pointsav.com today, currently priced at $0 USDC while in beta — no non-zero price has been ratified for it yet. os-infrastructure, the sovereign OS for PPN infrastructure nodes described below, is planned but not yet a catalogued product; its distribution model is the intended design, not a live listing.
| Product | Status | Price | What it provides |
|---|---|---|---|
os-network-admin |
Catalogued (beta) | $0 USDC | Mesh control plane; also available as a Linux daemon for existing systems |
os-infrastructure |
Planned, not yet catalogued | Not yet set | Sovereign OS for PPN infrastructure nodes — runs on bare metal, cloud VMs, or QEMU |
Pricing is denominated in USDC on Polygon PoS. No subscription billing. No customer account required. The on-chain transaction is the receipt.
Three artifacts per product
The design intends up to three signed artifacts per product per version, the same Ed25519 key signing all three so artifact authenticity is verifiable independently of the distribution server. os-network-admin's catalogued beta ships as the daemon artifact today; the .iso/.qcow2 bare-metal and cloud-VM paths described below are part of os-infrastructure's planned distribution model, not yet a live listing.
.iso — Bare metal
ISO 9660 image with El Torito and GRUB2 multiboot loader. Writes to USB with standard tools. Boots on any x86-64 machine with hardware virtualisation support (Intel VT-x or AMD-V), or AArch64 when the AArch64 target is published.
Target hardware: retired laptops and desktops, leased servers, decommissioned enterprise kit — any x86-64 machine from approximately 2011 onwards.
.qcow2 — Cloud VM import
QCOW2 image (QEMU native format). Importable to major cloud providers as a custom image, then launched as a standard cloud instance. A single platform= boot argument selects the runtime behaviour — bare metal and cloud VM use the same kernel image.
Daemon AppImage / .deb — Linux daemon (os-network-admin only)
A standalone Linux binary for os-network-admin. No seL4 boot required. Installs on any Linux x86-64 system with WireGuard available, joining the PPN mesh without reimaging the host. This is the primary path for existing Linux workstations — including machines that hold physical key custody for the mesh.
License model
Payment flow:
- Operator selects a product at
software.pointsav.comand initiates a USDC transaction on Polygon PoS. - The payment watcher detects the confirmed on-chain transfer and writes a receipt.
- The operator provides the transaction hash; the storefront issues an Ed25519-signed download token.
- The download token unlocks all three artifact formats for the purchased version.
- On subsequent use, the installed binary can re-verify its token against the storefront's public key without contacting the storefront again.
Source code is available on GitHub. Payment, where a price is set, is intended to cover the pre-built binary, the Ed25519 signature from the PointSav signing key, and the commercial license token.
Two-click install principle
The target market is small and medium businesses with limited IT staff. Installation complexity is designed to stay within three operator decisions or fewer.
For os-infrastructure on bare metal, once catalogued: download the .iso, write it to USB, boot the machine, and answer three setup questions (node name, genesis endpoint, pairing code). The node is designed to appear in the fleet within thirty seconds of completing the pairing sequence.
For os-network-admin in daemon mode: download the AppImage, mark it executable, run it, and configure the WireGuard endpoint through the guided terminal interface. The daemon joins the mesh and registers in the fleet without requiring any system reimaging.
Any installation step that adds complexity beyond this model is product scope reduction work, not a feature addition.
See also
- PointSav software distribution substrate — the technical architecture of the payment, license issuance, and binary delivery system
- PPN Three-Path seL4 Architecture — the three seL4 architecture options for os-infrastructure nodes
- Sovereign mesh — the WireGuard mesh the daemon and node join on first boot
- Genesis protocol — the autonomous first-boot sequence for bare-metal os-infrastructure nodes