23: Shipping Violently w/ Justin Moon

“I want to optimize for hackability and customization.” Justin Moon & Gigi take a walk in Madeira. Recorded during SEC-07. Listen on sovereignengineering.io In this dialogue: Justin’s new obsession: building Shadow, a hackable mobile operating system for people who want full control over the stack Why Android is interesting again: not because it’s clean, but because it is at least open enough to fight with One wallet, one relay connection, one shared set of primitives at the OS level, instead of every app reinventing the same mess Booting a phone with less Android, then turning Android off piece by piece once the system is running From 13-second button clicks to instant GPU rendering, and why that counts as real progress Why Justin chose TypeScript apps on top of a Rust core: make the parts you should not vibe-code solid, and let users vibe-code the rest Apps as source code, almost like DMs, instead of a permissioned app store pipeline The app store tax, DUNS numbers, LLC theater, and why Justin would rather build a parallel thing than beg Apple and Google for approval Permissionless alternatives at every layer: phone OS, payments, relays, networking, app distribution, and compute GrapheneOS as the security-maximalist trade-off, versus Shadow as the hackability-maximalist trade-off “I want a 3D printed gun of phones” as Justin’s deliberately unhinged way of describing maximum user freedom and minimum guardrails “I want to optimize for shooting yourself in the foot” as the sharper version of the same trade-off: less safety theater, more user agency Why many Linux phones failed: server people building for phone users, without a real vision for what a phone should become The Nostr opportunity: a community weird enough to flash devices, test strange tools, and actually use them Why the future may look like one agent per project, each with its own identity, memory, and full machine to operate Personal clouds, bare-metal boxes, ephemeral VMs, and feeding your agents compute instead of feeding SaaS subscriptions Why local-first and self-hosted agent setups matter if you want real sovereignty, durable memory, and no surprise bans FIPS as a path toward permissionless networking, cryptographic addressing, and small resilient parallel internets Nostr VPN, tailscale-like overlays, and why overlay networks beat waiting for the whole world to rewire itself Messaging trade-offs: Marmot, MLS coordination pain, chat relays, double ratchets, and what actually works for small groups Pika, identity, signaling, and why Justin wants to stop theory-crafting and start shipping Sovereign Engineering as a high-bandwidth filter for crazy ideas, where most things die, a few things bloom, and that is the point Why Bitcoin, Nostr, and projects like FIPS feel Amish-compatible: the goal is not rejecting technology, it is rejecting dependence Justin’s closing promise: less talking, more shipping, and yes, shipping violently People mentioned: Steve Lee (early sounding board for Lightning-at-the-OS-level ideas) Johnathan Corgan (creator of FIPS, pulled out of retirement by the right kind of weird) Martti Malmi (Nostr VPN, offline-friendly networking, also on #21: Hashtree, Nostr VPN, and Iris) UTXO the webmaster (creator of the Wisp Nostr client) Pablo (app-as-chat-box idea, Pika, general agentic mischief) Arjen (mesh instincts