The Phantom Phonemanifesto.
A short set of principles that dictate every device we assemble, every line of shipped configuration, and every conversation we have with the people who buy from us.
The device is the perimeter.
You cannot defend a network if the endpoint has already been compromised at the manufacturer. GrapheneOS is the only phone stack that we will bet a threat model on.
Trust the boot, not the vendor.
Verified boot with your own key. Locked bootloader. Hardware attestation confirms the OS is exactly what we shipped. No signed blob from Mountain View touches the storage.
Silence is a system property.
Microphones can be muted, then re-enabled. In the Phantom tier we remove them. If it is not physically present, it cannot be socially engineered back on.
Sydney sovereignty.
We hardware-harden in Australia. Chain of custody documented, batch numbers signed, Faraday-shipped where requested. Owned outright by Australians, no offshore silent partners.
Zero-knowledge, all the way down.
We never see your data, and we do not want to. Our infrastructure holds order metadata only. Devices are wiped after final QA and delivered locked to your fingerprint alone.