Cognielo isn't a monolith and isn't a bundle. It's an AIOS — Artificial Intelligence Operating System with four layers, each blind to the one below. Data Sovereignty by construction. WebRTC operator-blind connectors. Breachless cryptographic substrate. The more you understand how the pieces fit, the more valuable the whole thing becomes.
Each layer is open to the one above it and blind to the one below. That's not a slogan — it's enforced by HKDF key separation and grant-gated reads at every boundary.
HealthKit samples, Plaid transactions, mail from Gmail/Outlook/iCloud, calendar events, photos metadata, location, contacts, scanned documents. 500 connectors absorbed once, encrypted with AES-256-GCM under a per-domain key, never re-fetched without your action. Your data never becomes our data.
Browselo (browser that holds the keys), Compelo (signed archive with multi-recipient grants), Passelo (password manager with your key, not ours), Chatelo (WebRTC operator-blind voice/video/chat). Each tool runs on-device and participates in the grant table — so their reads and writes to your vault are auditable just like a life-domain app.
One shared data plane where every kit writes normalized rows — UnifiedHealthSample, UnifiedFinancialTransaction, UnifiedMessage, LifeEvent, and more. Grant-gated reads mean Savelo can't see Healthelo's data unless you've granted that cross-domain view. The correlation engine runs here — because all 8 life-domain apps live in one substrate, cross-app insights are possible on-device for the first time. This is Data Sovereignty by construction.
Cognielo Hub is where Life Score, cross-app insights, the Timeline, and the Coach live. The 21 dials × 8 life-domain apps (3 feedback × 6 weight × 6 influence positions per app) decide how your data shapes the Coach's replies. Run on-device with the model of your choice — Claude Haiku, Sonnet, Opus, or on-device fallback. Provider-agnostic by architecture.
Every Cognielo surface lands at least one of these. The architecture lands all four. Read the longer explanation at brand-quartet.
The user is the constitutional authority over their own data. Stronger than GDPR. Not a promise, a construction — Cognielo cannot read what's stored, even if subpoenaed.
Artificial Intelligence Operating System. Not an app, not a SaaS, not a chatbot wrapper. One substrate hosts 20 surfaces (8 life-domain + 11 ecosystem & utility + Hub orchestrator).
Operator-blind peer-to-peer for sharing. The conversation never touches Cognielo's infrastructure — STUN-only, no Cognielo-controlled hosts in defaultStunServers. CI gates the build against regression. Patent claim 1.14.
Substrate locality + multi-profile cryptographic isolation + LLM-bound HKDF entropy. The threat model accepts breach as possible and makes it useless. ML-DSA-Dilithium signing tree + ML-KEM-Kyber key encapsulation hybrid (NIST FIPS 203/204). Patent claims 1.15 + 1.25–1.28.
The canonical roster lives in Packages/EloShared/Sources/EloShared/Models/AppIdentity.swift — 20 user-visible surfaces. Here's the honest count as of today.
| Layer | What ships today | Dial-participating? |
|---|---|---|
| Hub · cross-app orchestrator | Cognielo Hub (Life Score, Coach, Insights, Timeline, Privacy dashboard) | — |
| Life-domain apps (8) | Savelo, Healthelo, Legelo, Workelo, Homelo, Learnelo, Miscelo, Socielo | Yes — drive the cross-app dial math |
| Ecosystem apps (7) | Calelo, Petelo, Drivelo, Walletelo, Cryptelo, Shopelo, Muselo | Partial — bridge into substrate via grant table |
| Utility apps (4) | Browselo, Compelo, Passelo, Chatelo | Participate in grant table; not in Life Score dials |
21 dials × 8 life-domain apps = 2.4 × 10¹⁴ distinct Elosystem configurations today. Adding ecosystem-app dial participation expands the exponent. The day those apps emit enough signal to be meaningful weights, the math updates itself.
Each layer uses HKDF-derived keys with distinct context strings (RFC 5869). Compromise of one layer never cascades. Patent claim 1.
Cross-app correlation runs where the data lives. No cloud round-trips for insights. Works offline, works on airplane mode, works in a Faraday cage.
You set Hub Feedback, Domain Weight, and Cross-App Influence per app. The math shifts with you across all 8 life-domain apps — your Elosystem is yours.