Latest release: v1.3.0 · Sovereign Core now unifies profile, audit, and commitment flows
Was a human there?
A calm, respectful human-first framework that helps ordinary people ask one question wherever a system has processed them: did a real human being actually look at my specific case? Start instantly in the hosted site, or switch to Sovereign Local Mode for on-device claim flows backed by the shared Sovereign Core.
Every finding under the Burgess Principle resolves to one of two outcomes. Before any system acted on you — institution, platform, or otherwise — was a human there?
SOVEREIGN
A human mind was individually applied to the specific facts. The action was considered. It may still be wrong — but it was human.
NULL
No individual human review took place. The instrument carries no lawful authority from inception. The system processed — nobody decided.
How It Works
Three layers of protection
From a simple question to cryptographic proof — choose the level that suits your situation.
📝
Templates & Letters
35+ ready-to-send templates for disputes, DSARs, FOI requests, Equality Act adjustments, and more. No legal training needed.
🔒
Sovereign Personal Vault
On-device encryption, SHA-256 commitments, Ed25519-signed receipts, and optional Mirror Mode so Iris can reuse your local sovereign profile on your hardware.
⛓️
On-Chain Claims
Post a compact commitment fingerprint to an EVM L2. Global timestamping and verifiability — no personal data touches the blockchain.
Get Started
Templates for every situation
Pick the template that matches your situation. Or ask Iris to write a personalised letter for you.
Iris helps you apply the Burgess Principle — calmly, practically, and on your terms. She is human-first and only becomes real when a person brings a specific case. Use the hosted site instantly or enable Mirror Mode locally so your device identity carries into new claim flows.
I'm here to help you apply the Burgess Principle — calmly, practically, and on your terms.
🛡️ All conversation history stays in your browser. Nothing is stored on any server unless you explicitly send a message for model processing. Full claim details never leave your device.
Voice ready when your browser supports on-device speech recognition.
Claim profile & phone settings
Stored locally on this device so the phone can generate, sign, save, export, restore, and optionally mirror sovereign claims offline from your local identity.
No personal sovereign profile loaded yet.
Mirror Mode is available after you set up your identity on this device.
Profile and phone settings stay only on this device.
The PWA shell is local-first. Updates require explicit verification and your consent before activation.
Extension packs stay local, manifest-based, and advisory. They can add template shortcuts, trigger presets, and export adapters without turning Iris into a plugin marketplace.
⚡ Sovereign Local Triggers
Define encrypted, local-only rules that can spot patterns, queue gentle checks, and open a Burgess review flow. Every trigger event creates a fresh SHA-256 + Ed25519 commitment on this device.
Trigger rules stay encrypted. Background checks need either this passphrase in the foreground or explicit device-only unlock consent.
Clipboard and page scans only run when you press the button here, and the scanned text stays on this device unless you export a signed receipt yourself.
Notification preview: Potential Burgess review needed. Human review required before any SOVEREIGN/NULL decision.
Triggers stay encrypted on this device, use calm local notifications, and can support user-defined frequency balancing or personal environmental reviews without making any medical claim. On iPhone, full background reliability is best after Add to Home Screen and still depends on Safari limits.
🛰️ Sovereign Hub Mode
Connect to your own self-hosted Sovereign Hub across Starlink hardwired, fiber hardwired, or other assistive connectivity configurations for end-to-end encrypted sync of commitments and receipts. This can support user-defined frequency balancing while keeping Iris local-first.
Hub Mode is off. All data stays on this device only unless you later choose a manual commitment sync.
🤝 Peer-to-Peer Human Handoff
Open a direct, encrypted device-to-device channel with a trusted person. Both sides must opt in. No central server holds content — WebRTC DataChannel only.
Both devices must explicitly opt in. Every session is logged with a cryptographic commitment.
Local claim actions
After Iris drafts your next step, the phone can generate the sovereign claim package, encrypt a local vault copy, queue the fingerprint for later posting, and remind you in 14 days.
Claim tools stay hidden until Iris finishes a local draft.
Iris is sovereign by design — your conversation, mobile vault, reminders, and voice controls stay on this device unless you explicitly choose a local action.