Frappuccino

Project intro

Frappuccino turns an Android phone into a transmitter of end-to-end encrypted video testimony. Footage is split into fragments, encrypted, and uploaded to a blind relay while it is still being recorded — the relay cannot decrypt it and keeps no IP logs. Seizing the phone before, during, or after recording yields nothing readable. The only key that can ever decrypt a video is a twelve-word mnemonic written on paper, kept in the witness's pocket. It is built by a solo developer, therealshulgin, with AI as the primary pair programmer — including for the cryptographic code and the internal audits. The crypto core is 100% Rust and has been through formal verification with Tamarin, TLA+, and Kani. His own words from the project showcase: "Claude was a huge help, designed the big picture, Opus and Fable converted Tella-FOSS's Java and Kotlin to Rust and did most of the coding. I built Frappuccino to see how far AI has come and how well it can work in an interactive setup where agents act like super-specialized helpers." The site's own honesty is the point: it labels itself "Field-test ready · Audit-ready · Not production-ready." A field-tested relay is already online, and the audit plan is public. If you film in high-risk situations, this is the tool that assumes the camera gets taken.