◊FallPhoneAI-Native Solutions
v1 · MIT

Sovereign phone in thirty minutes.

A guided recipe. Pick the hardware, flash the OS, carry your identity across, install your tools, verify the posture. No paranoia. Just less rented territory.

Step 1 · Pick the hardware.

Three lanes, three trade-offs. Google's Pixel line is the mainstream sweet spot — GrapheneOS was written for it, verified boot works end to end. PinePhone Pro is the fully sovereign option with real hardware kill switches. /e/OS ships pre-installed if you want no flashing at all.

RECOMMENDED · GRAPHENEOS

Pixel 8a / 8 / 9

TBA – TBA · new · UK
Pros: best GrapheneOS target · 7 yrs security updates · Titan M2 secure element · web installer
Cons: still Google hardware · pay upfront for update longevity
Google Store UK →
BUDGET · GRAPHENEOS

Pixel 6a / 7a (used)

TBA – TBA · refurb
Pros: cheapest way in · works with same web installer · same Titan M2
Cons: shorter update runway · 6a support ends July 2027
BackMarket refurb →
FULL SOVEREIGNTY

PinePhone Pro

TBA · Pine Store
Pros: hardware kill switches (mic · cam · modem · wifi · GPS) · runs mainline Linux · Mobian / postmarketOS
Cons: daily-driver rough edges · slower CPU · fewer PWAs work smoothly
Pine Store →
NO FLASHING

Murena / Fairphone (/e/OS)

TBA – TBA · Murena EU
Pros: arrives de-Googled · Fairphone 5 is repairable / ethical · no reflash needed
Cons: weaker hardening than GrapheneOS · larger trust surface
Murena Store →
The 90% pick: a used Pixel 7a for around TBA + GrapheneOS. Same protection as an TBA flagship, one afternoon of your time.

Step 2 · Flash GrapheneOS.

The GrapheneOS web installer runs in any Chromium browser (Chrome, Edge, Brave). No root, no Android tools, no command line. It uses WebUSB to talk to your Pixel over cable. About 15 minutes end-to-end.

Before you start
· A USB-C cable that actually carries data (charging-only cables will fail silently)
· A charged Pixel with all setup skipped — do not sign into a Google account
· A desktop Chromium browser on Windows / macOS / Linux

The five things you will do

Two common pitfalls
· "No device" — try a different cable first, not a different port.
· "Bootloader unlock failed" — carrier-locked Pixels (US networks especially) cannot be unlocked. Buy unlocked or SIM-free UK stock.
When it's done — the Pixel reboots into a clean GrapheneOS. Skip cellular setup for now. Connect to WiFi. Then come back to Step 3.

Step 3 · Carry your identity across.

Your FallID keypair lives in this desktop browser's IndexedDB. To keep the same DID across devices, we encrypt it with a passphrase you type once, wrap it in a QR, and let the phone scan it. The keypair never touches a server.

What gets encoded: your Ed25519 secret key + FallSync peer address, encrypted with AES-GCM under a key derived from your passphrase (PBKDF2 · 200k iterations). The QR carries a payload starting fallid-transfer://v1?
Not stored. If you forget it the QR becomes useless — that's the point.
Helps FallSync recognise the desktop as your paired peer.
Fill in the passphrase and press Generate. QR appears here.

On the phone

Step 4 · Install the estate.

Every AI-Native Solutions tool ships as a Progressive Web App — one tap to add to home screen, works offline after first load, no app-store review board deciding what you may run. This list comes live from the FallHarbor manifest.

On the phone: tap each Install button in Vanadium → the site opens → tap the ⋮ menu → Install app or Add to Home screen. Come back here and mark it done.
·
Loading FallHarbor manifest…
https://sjgant80-hub.github.io/fallharbor/manifest.json

Step 5 · Verify the posture.

Six checks. Tap each one after you've done it on the phone. The final ceremony — you're not "trusting" the setup, you're witnessing it.

0 / 6
Sovereign posture

Location off by default

Settings → Location → toggle off. Apps that need it can ask per-session.

Cellular modem sandboxed

GrapheneOS runs the baseband firmware inside its own sandbox with no filesystem access. Confirm you're on a stock GrapheneOS build (Settings → About).

Google Play (if any) is sandboxed

If you installed sandboxed Play Services for banking apps, it runs as a regular app with no special privileges. If you skipped Play entirely, tick this anyway.

Vanadium is the default browser

Hardened Chromium. Settings → Apps → Default apps → Browser → Vanadium.

FallShell installed as PWA

Your estate portal lives on the home screen. Opens offline. First launch after install to prime the cache.

FallID DID matches desktop

Open FallID on the phone → copy DID → compare to desktop's DID. Identical string means the QR transfer worked.

◊ FallPhone v1 · MIT · source on github · part of the AI-Native Solutions estate