Skip to content
woven
CoreTandemHomePrivacyOn a MacShop
SupportSign in

The box

  • Woven Core
  • Woven Core+
  • Woven Core Pro
  • Compare
  • Tech specs
  • Reserve

What it does

  • Tandem
  • Home and TV
  • Privacy and the Gate
  • Run it on a Mac
  • For developers

Honestly

  • What is real
  • Founding Homes
  • Support
  • Privacy and legal

Woven

  • Press
  • Careers
  • Contact
woven

Woven © 2026

The box is not built. Prices, dates, specifications and performance figures on this site are engineering targets for a reference design, not shipping specifications, and the figures drawn on the phone and television screens are illustrations rather than measurements. What the software does today, and what it does not, is listed claim by claim.

This site sets no cookies and runs no analytics.

Written by the people building it

What is real, and what is not.

Woven is software that runs today and a box that does not exist yet. Selling the second by describing it in the present tense is the ordinary way to do this, and we would rather not. Everything this site claims is below, in one of three piles.

Available now
10
Running today on a Mac. You can install it and check every word.
With the box
10
Designed and specified, waiting on hardware that has not been built yet.
Engineering target
8
A number we are designing towards. Nothing has been measured.

The software is open to inspection: run a Core on a Mac and check any line in the first pile yourself.

Running today

Available now

Running today on a Mac. You can install it and check every word.

  • Nothing leaves without a crossing you approved, and every crossing is recorded

    Built and tested. The Core has no network egress of its own: a separate Gate process is the only way out, it holds an allow list, it can be closed, and each crossing writes a receipt naming the host, what was sent and who approved it. On the box the Gate is also a hardware boundary; on a Mac it is a process boundary.

  • Every consequential action leaves a receipt in a ledger that cannot be edited quietly

    Built and tested. Receipts form a hash chain; changing or removing one breaks the chain, and the box checks it nightly and on demand.

  • Everything on the drive is encrypted at rest

    Built and tested. The database, every stored file and the box's private keys are encrypted under a household key. On a Mac that key lives in the login Keychain; on the box it will live in a secure element. A copied drive is unreadable without it.

  • Passkeys, per-person spaces and roles

    Built and tested. Personal, health, financial and work spaces are one person's, the owner included. Recovery codes and a trusted-adult rescue code are the way back in.

  • Reach your house from anywhere with no open ports

    Built and tested. The box holds one outbound connection to a relay; a browser you paired at home encrypts every request end to end. The relay carries ciphertext and keeps nothing. The relay service is not deployed yet, so this needs one you run.

  • One switch stops everything

    Built and tested. Off closes the Gate, drops the relay, stops every scheduled job and refuses every request but the switch itself. It survives a restart.

  • Nightly snapshots, a second copy, and a restore you can rehearse

    Built and tested. The restore drill rebuilds the newest snapshot in a scratch folder, verifies the chain and the files, and reports, without touching what is live.

  • Search your files, memory and routines on the box

    Built and tested. Names, paths, memories and routines are indexed on the box. Reading inside documents needs the model, which is not here yet.

  • Search photos by what is in them, on the box

    Built and tested. A vision model runs on the box; it arrives as a download you approve at the Gate, pinned by hash. No faces are recognised.

  • This site sets no cookies and runs no analytics

    True and checkable. There are no analytics packages in this site's dependencies and no third-party scripts. Your sign-in lives in this browser's own storage.

Waiting on the box

With the box

Designed and specified, waiting on hardware that has not been built yet.

  • Tandem answers from the household's own files, calendar and home

    Not built. Today the assistant is a rule engine over what the box already holds, and it says so on every screen: it can find a file by name, count your photos, switch a light and read the receipts. There is no language model on the box and no calendar yet. The 20B to 70B class models on the specification sheet need the box's memory.

  • Speech and the wake word are processed on the box

    Not built. There is no microphone path, no wake word and no speech model in the software today.

  • Matter, Thread and Zigbee radios, with devices answering in under a second

    Not built. Home control runs today against a simulated set of devices so the permissions, approvals and receipts can be exercised honestly. No radio has been fitted and no real device has been switched.

  • Cameras with detection on the box and clips that never leave

    Not built. There is no camera capture in the software. The dashboard says so when it is connected to a real Core.

  • The router runs on its own processor that cannot see inside

    Not built. The Network page reads what the Mac can see of the network it is on. There is no router and no second processor.

  • Your television, over one HDMI cable

    Partly built. Photos, video and music play from the box in a browser today. The HDMI output, the living-room interface and the remote arrive with the box.

  • Agents run sandboxed, as themselves, with scoped credentials

    Not built. There is no agent runtime. The permission engine, the receipts and the Gate that agents would run inside are built and tested; the sandbox is not. The dashboard's Agents page says so when it is connected.

  • Home Assistant runs inside Woven, with your configuration and Zigbee network intact

    Not built. No integration exists yet, and no migration has been attempted.

  • Keys live in a secure element and storage unlocks only for an attested module

    Not built. Encryption at rest is real and running; the secure element, the attestation and the module that would hold them are hardware that does not exist yet.

  • The compute module swaps in about a minute, with nothing to re-pair

    Not built. No chassis or module has been manufactured, so nothing has been swapped or timed.

Numbers we are aiming at

Engineering target

A number we are designing towards. Nothing has been measured.

  • Core $899, Core+ $1,499, Core Pro $2,499

    A target, not a price. No bill of materials has been costed at volume and nothing is for sale. A reservation takes no money and is not an order.

  • Pilot in late 2026, pre-orders in early 2027, shipping in the second half of 2027

    A plan, not a commitment. No supplier has been engaged and no tooling has been ordered. Treat every date as the earliest it could happen if everything goes well.

  • Answers in under a second

    Not measured. There is no model on the box to measure. The figures on the rendered screens throughout this site are illustrations, not measurements.

  • Almost everything stays inside

    Not measured. The share of work that stays inside will be measured during the pilot and published. Any percentage shown on a screen here is drawn, not counted. Your own box counts the real figure and shows it on the Privacy page.

  • Wi-Fi 7 and 10 GbE

    A target. The radio and network parts have not been selected, certified or measured.

  • 8 to 22 W idle, under 25 dBA

    A target from the reference design. Nothing has been measured in a chassis, because there is no chassis.

  • Updates for the life of the box, security support to at least 2031

    An intention, not yet a written policy. Signed updates with automatic rollback are built and tested in the software today.

  • Two-year warranty, 30-day returns

    Drafted, not reviewed by counsel, and not in force. There is nothing to return.

How this page stays honest

  • Every claim here is one row in a file the site renders from. Marketing copy cannot make a measurable statement without adding a row.
  • A row moves out of the first pile only when the software does the thing and a test proves it. The tests run on every change.
  • Figures drawn on the phone and television screens elsewhere on this site are illustrations. Where one appears, the page says so.
  • When the box exists, the middle pile moves up one by one, and this page will show the date each one moved.
Run it on your MacFounding Homes