Private Provider
xyz.privateprovider
Private Provider Private, attested AI chat — plus build, sign and publish from the phone.
Private Provider is an Android app that runs a full ARM64 Linux runtime — `routstrd`, Node, Bun, the Pi coding agent, git, ngit and a real shell toolchain — sandboxed inside the app. No root, nothing to stand up on a server, no laptop. Then it makes your phone a place you can ship from. **Build it, sign it, publish it.** Install the optional pinned toolchain (JDK, aapt, apksigner, R8) and Pi builds an unsigned APK on the device; the app signs it with an app-private keystore and the agent never sees the key. **Your repos, on Nostr.** Clone any ngit project from a `nostr://` URL, then work with pull requests, issues and releases — with publishing targets beyond git: Blossom storage, GRASP servers, Zapstore catalogues, NIP-5A static sites and OCI container images. **Private AI you can audit.** Attested `tinfoil-*` models are served by `privateprovider.xyz`, and the attestation shown comes from the daemon's real TEE verification events, not a badge the UI painted on. Choosing any other model requires explicit "Not private" approval. **Your money, your keys.** A self-custodial Cashu/Lightning wallet behind a mandatory recovery-phrase backup, with provider API-key escrow and NPC usernames. Five windows — Chat, Pi Agent, Files, Wallet, Monitor — over one sandboxed runtime. Plain Java, no AndroidX, no Compose.
First release: Oct 7, 2026, 7 total releases.
Most recent release: Oct 19, 2026.
Appears in 0 app stacks.
0 sats / 0 zaps received in the past year.
Sats Received
Underlying data available via MCP: app_zaps, app_releases.
Zap Count
Underlying data available via MCP: app_zaps, app_releases.
Releases
- Oct 19, 2026 0.7.10# Private Provider 0.7.10 This release refreshes the bundled ARM64 Linux runtime that powers Private Provider's on-device AI agent and development tools. ## What's changed - **A newer runtime:** Node.js 24.22.0 LTS, Bun 1.4.3, routstrd 0.4.17, and Pi Agent 1.3.0. The bundled runtime is now version 0.1.9. - **Pi refreshes its model setup after a runtime upgrade.** It reconciles its
More…
registered daemon client and model configuration before starting, rather than carrying an older runtime's model setup forward. - **The wallet reset safety check remains in place.** The updated routstrd retains the read-only check for paid NPC quotes that have not been claimed; an unavailable check must not be treated as zero pending funds. ngit remains at version 3.0.3. This release does not speed up project-page checks; that work is separate. - Oct 15, 2026 0.7.9# Private Provider 0.7.9 Private Provider is a phone-first AI workspace for Android (ARM64). It runs a bundled local runtime with `routstrd` and the Pi coding agent, pays for inference with a built-in Cashu wallet, and publishes projects through ngit with an external Amber signer. ## What's changed - **On-device apps can now use Private Provider's local inference.** An
More…
authorized companion app on the same phone can request inference through a bound Service, so a second app no longer needs its own runtime or its own funding. - **A read-only wallet balance is available over that seam**, so a companion app can show funds without any ability to spend them. - **A relayed response that mislabels itself as gzip no longer hides the real error.** The daemon is now asked for an uncompressed body, so what you see is what the provider actually said. - **A VPN no longer blocks setup.** With Tailscale — or any VPN that keeps DNS off its interface — setup failed with a DNS error while the screen said "Verifying runtime" or "Preparing storage". The guest now takes its resolvers from every network the device has, and setup completes. - **When the daemon fails to become healthy, the error now shows what it printed**, instead of only "health did not become ready". - Oct 11, 2026 0.7.8# Private Provider 0.7.8 Private Provider is a phone-first AI workspace for Android (ARM64). It runs a bundled local runtime with `routstrd` and the Pi coding agent, pays for inference with a built-in Cashu wallet, and publishes projects through ngit with an external Amber signer. ## What's changed - **Pasted text no longer stalls the Pi agent.** A tab or other control
More…
character inside a Pi prompt — tab-indented code, a snippet copied from a terminal — made the agent reject the prompt and stop the session with "Pi did not start the turn". Prompts are now encoded so anything you can paste survives the wire, and the turn starts normally. - Oct 9, 2026 0.7.7# Private Provider 0.7.7 Private Provider is a phone-first AI workspace for Android (ARM64). It runs a bundled local runtime with `routstrd` and the Pi coding agent, pays for inference with a built-in Cashu wallet, and publishes projects through ngit with an external Amber signer. ## What's changed - Internal security and reliability improvements across signing, key handling
More…
and the full-reset process. Nothing changes in how you use the app. - Oct 8, 2026 0.7.6# Private Provider 0.7.6 Private Provider is a phone-first AI workspace for Android (ARM64). It runs a bundled local runtime with `routstrd` and the Pi coding agent, pays for inference with a built-in Cashu wallet, and publishes projects through ngit with an external Amber signer. ## What's changed - **A private model now really is the model that answers.** When you pick an
More…
attested (`tinfoil-*`) model, the app confirms with the runtime that the model is actually applied before it sends anything — and if it cannot confirm it, it stops that session and refuses to prompt rather than quietly running a different one. The green "attested" indicator now means what it says. - **One private request at a time.** Chat and Pi can no longer run a private model at the same time; the second request is refused with a clear message. This is deliberate: the runtime reports attestation by model and time only, so two simultaneous private requests were indistinguishable and one could show a green check for the other's evidence. - **The first-run splash tells you what it is doing.** While the runtime installs, the splash now shows the step it is on; if setup fails it shows the operating system's own error and the last output lines, with a Copy and Share button so the details can be sent on for support. - **Backup confirmation is tied to the wallet.** If the wallet is ever recreated without a full reset, the app no longer treats the old recovery-phrase backup as valid — it asks you to back up the new phrase. - **Clearing the workspace reports the truth.** If some files cannot be deleted, the result now says how many were left behind instead of reporting success. - Oct 7, 2026 0.7.5# Private Provider 0.7.5 Private Provider is a phone-first AI workspace for Android (ARM64). It runs a bundled local runtime with `routstrd` and the Pi coding agent, pays for inference with a built-in Cashu wallet, and publishes projects through ngit with an external Amber signer. ## What's changed - **The first-run splash now shows which build you are running.** The app version
More…
and the bundled runtime version appear under the app name while the runtime installs, so a support conversation or a bug report can start from the exact version without digging through settings. - **Release publishing is more reliable and reproducible.** The Blossom servers, the Zapstore relay and the release asset name are now fixed in a committed manifest instead of being discovered at publish time, and the publish step refuses to run against a tag that does not match the commit being released. - Oct 7, 2026 0.7.4# Private Provider 0.7.4 Private Provider is a phone-first AI workspace for Android (ARM64). It runs a bundled local runtime with `routstrd` and the Pi coding agent, pays for inference with a built-in Cashu wallet, and publishes projects through ngit with an external Amber signer. ## What's changed - **The app no longer freezes on long sessions.** Switching Pi sessions,
More…
long conversations and thinking toggles could previously block the interface past Android's limit and close the app. Rendering is now bounded and linear, session switches are fast again, and the view keeps more history (32k characters) while staying responsive. - **Chat replies that were cut off mid-reasoning now finish.** A reasoning model that spent its whole output budget on thinking gets one visible continuation turn with a larger budget, instead of ending with "reasoning only" and no answer. - **Crashes and unexpected exits now leave evidence.** The last two uncaught exceptions are saved and shown in Monitor → Logs, and a session that ended while the app was in the foreground (an ANR you closed, or a system kill) is reported on the next launch. - **A quick relaunch is warm.** The runtime stops a couple of minutes after the last window closes instead of immediately, so closing and reopening the app reuses the running daemon instead of paying the bring-up again. - **Menus load off the interface thread.** The chat and Pi session lists no longer read and decrypt every stored conversation on the main thread, so the menus open without a hitch.