WanderRouter Standard (WanderVerse-native) — Full Spec
Device ID: WV-NET-ROUTER-STD Family: WanderRouter · Tier: Primary Gateway (Standard) Chassis: Medium (shared with WanderBridge) Status: spec v1.0 · SOP v2 compressed · 2026-04-24 Supersedes: ~/Downloads/Claude/wandersafe/specs/WANDERROUTER-BUILD-SPEC.md (April 2026, Flint 3-based — retired as "bridge SKU" option, not primary product direction) Ship target: Q2 2027 Shared-family docs: ../_WORKFLOW-SOP.md, ../_HARDWARE-TOOLCHAIN.md, ../_FAMILY-EXPANSION-REVIEW.md, ../../WANDERROUTER-DESIGN-RESEARCH.md
---
Brief
WanderRouter Standard is the primary household gateway — the one box that connects your home to the internet, broadcasts Wi-Fi, runs the ad/tracker blocking, routes VPN traffic, hosts small-scale NAS storage, enforces family + privacy policies, integrates with every other WanderVerse product. 60-70% of router-family revenue projected.
This is the WanderVerse-native redesign that replaces the April 2026 Flint-3-based plan. Reasons to go native instead of OEM: 1. Own the chassis (STL files, repair discipline, Ambassador assembly) 2. Free to add WanderVerse-specific features (USB NAS, DoH server, DOCSIS module, UPS, voice integration) 3. FCC DA-26-278 regulatory posture — US-manufactured path 4. Shared Medium chassis with WanderBridge and Standard-5G = tooling amortization
Target buyer: every WanderVerse hardware customer's first network purchase. Replaces Eero/Orbi/Deco/Asus/Netgear boxes for privacy-conscious / repair-conscious / identity-aware households.
Target price: $209 (Standard, 4-port, base WiFi 7, Standard cover) → $499 (full-options + 4TB NAS + DOCSIS + UPS + Solar + Pro cover).
---
Platform architecture
SoC: MediaTek MT7988A (same as Bridge — shared BSP + software stack across Medium chassis devices) OR upgrade to Qualcomm QCN9274/IPQ9574 at Pro-tier for households needing more WiFi 7 stream count. Spec v1.0 ships MT7988A.
RAM: 2 GB DDR4 SODIMM (user-upgradable to 4GB / 8GB via send-back) — Medium chassis fits SODIMM slot, first WanderVerse router to honor full Standard 2 RAM-upgradeability at-tier.
Storage:
- 32 GB eMMC (boot + configs)
- M.2 NVMe slot (platform-installed, 500 GB base, user-upgradable to 4 TB)
- 2.5" SATA bay (optional, for bulk NAS — max 8 TB)
WiFi 7: Dual WiFi 7 tri-band — client AP (MT7996AX AP-class preferred per Perplexity 2026-04-24) + dedicated backhaul (MT7996AX) — both platform-included on Standard (the Standard distinction from Bridge is integrated dual-radio, not optional). MLO = optional feature-flag, not guaranteed across client devices in 2026-Q1 ship window. Single-link WiFi 7 is the platform guarantee; MLO enables via firmware after field validation.
Ethernet:
- 1× 2.5 GbE WAN
- 4× 2.5 GbE LAN
- 1× 10 GbE SFP+ (platform, for fiber upstream or NAS cluster)
USB: 2× USB 3.0 host (NAS bay + accessories) + 1× USB-C service
Cellular fallback: USB LTE modem slot (optional module; Standard-5G has integrated 5G instead)
Chassis: Medium (same as Bridge) — 180 × 120 × 35 mm, aluminum base + polymer/CNC/Lux cover.
---
Feature inventory (vs family expansion superset)
Storage & media serving
- USB 3.0 NAS-lite (SMB/NFS/AFP/Time Machine) ✅
- Platform M.2 NVMe slot ✅ (500 GB base, upgradable to 4 TB)
- Optional 2.5" SATA bay ✅ (up to 8 TB bulk)
- Jellyfin direct-stream ✅
- USB printer sharing (CUPS / AirPrint) ✅
- Automatic photo backup from phones over WiFi ✅
Smart home
- Matter controller platform feature ✅ (not delegated — Standard is smart-home-capable OR delegates to Hub)
- Thread border router (platform via USB dongle or M.2) ✅
- Zigbee coordinator (optional module via USB) ✅
- BLE onboarding ✅
- mDNS/Bonjour repeater across VLANs ✅
- HomeKit Secure Video relay ✅
- UPnP with audit ✅
Connectivity / WAN
- Ethernet WAN (2.5G) ✅
- Fiber SFP+ direct (10G) ✅
- Integrated DOCSIS 3.1/4.0 cable modem (optional module) ✅ opt — skips rented ISP modem
- Cellular failover (USB LTE modem) ✅ opt
- Multi-WAN active load balance ✅
- Phone tethering WAN ✅
LAN
- Full VLAN (7+ zones — beyond Bridge's 3) ✅
- Per-VLAN DNS filtering ✅
- LACP link aggregation ✅
- WoL triggers ✅
- Static DHCP + friendly names ✅
- Per-device bandwidth throttling ✅
- Port forwarding with UPnP audit ✅
- mDNS repeater ✅
- IPv6 full ✅
VPN & remote access
- WireGuard client + SERVER ✅ (key addition — road-warriors tunnel back home)
- Tailscale exit + subnet router ✅
- OpenVPN client + server ✅
- IKEv2/IPsec ✅ (iOS native, no app needed)
- Per-device split-tunnel + kill-switch ✅
- Opt-in Tor relay ✅ (middle relay, not exit — no legal exposure)
Privacy & security
- DoH server ✅ (all devices get encrypted DNS locally)
- DoT server ✅
- AdGuard Home + Unbound + identity-aware blocklists ✅
- CrowdSec IDS ✅
- Per-device DoH enforcement ✅
- Encrypted SNI (ECH) passthrough ✅
- MAC randomization stability tracking ✅
- Emergency kill-switch ✅
- LGBTQ+/trans/undocumented data-broker blocklists ✅
Family / child safety
- Per-device time-of-day rules ✅
- Age-rated content filters (K-5 / 6-12 / 13-17 / 18+ / off) ✅
- SafeSearch force-on per device ✅
- Screen-time quotas per family member ✅
- Emergency contacts always-allowed ✅
- Guest network with QR + expiry (24h / 1wk / permanent) ✅
- Voice prompts for setup (accessibility) ✅
Observability
- Per-device bandwidth charts (day/week/month/year) ✅
- DNS query log (opt-in, configurable retention) ✅
- Anomaly detection (local ML) ✅
- LAN speed-test server ✅
- IPv6 leak detection ✅
- DNSSEC validation stats ✅
- Prometheus metrics endpoint ✅ opt
- Syslog collector ✅
- External alerting (email/SMS/webhook/Matrix) ✅
Resilience
- Internal UPS module (optional, 3-hour) ✅ opt
- Solar DC input (optional) ✅ opt
- Config snapshot + rollback ✅
- Dual-partition firmware rollback ✅
- Watchdog ✅
Travel / HAVEN
- Hotel captive portal auto-handling ✅
- Always-VPN on public WiFi ✅
- Emergency evacuation mode ✅
- HAVEN LoRa mesh relay (optional module) ✅ opt
Voice & accessibility
- Local voice control via WanderSpeaker ✅
- Audio prompts for setup (low-vision) ✅
- Screen-reader admin UI ✅
Ecosystem
- WanderOS management ✅
- JARVIS dashboard ✅
- WanderNode Hub coordination (both paths supported — Hub delegated OR Router handles smart-home) ✅
- WanderSense occupancy-driven IoT VLAN ✅
- WanderSpeaker voice ✅
- WanderVault encrypted backup target ✅
- WanderID/WanderCrypt secure element (TPM integration) ✅
- WanderCar/SOS LoRa backhaul ✅ opt
Not on Standard (Pro-tier discipline)
- ❌ Docker/k3s multi-container host (Pro-only)
- ❌ BGP (Pro-only)
- ❌ Suricata IPS / pfBlockerNG (Pro-only)
- ❌ 60 GHz WiGig (Pro-only)
- ❌ Wi-Fi sensing (Pro-only)
- ❌ E-ink panel (Pro-only)
- ❌ NetFlow/sFlow enterprise export (Pro-only)
---
BOM-platform (in every Standard unit)
| Component | Part | Qty | Price 1k |
|---|
| SoC | MediaTek MT7988A | 1 | $18 |
| RAM | 2 GB DDR4 SODIMM | 1 | $8 |
| Boot storage | 32 GB eMMC 5.1 | 1 | $8 |
| M.2 NVMe slot + base 500 GB drive | Samsung 980 500 GB | 1 | $45 |
| Client WiFi 7 radio | MT7996AX tri-band module | 1 | $38 |
| Backhaul WiFi 7 radio | MT7996AX tri-band module | 1 | $38 |
| 4× 2.5G LAN PHY | 4× RTL8261N | 4 | $12.40 |
| 1× 2.5G WAN PHY | RTL8261N | 1 | $3.10 |
| 10G SFP+ cage | Amphenol SFP+ | 1 | $6 |
| 5× RJ45 magjack | Bel Fuse SI-46001-F ×5 | 5 | $12 |
| TPM 2.0 | Infineon SLB 9670 | 1 | $6 |
| Hardware RNG | TrueRNG-chip integrated in SoC | 0 | $0 |
| PSU (internal 60W) | Mean Well IRM-60-12 | 1 | $18 |
| Buck regulators + PMIC | TPS54332 + TPS62133 + TPS65086 | 3 | $4.50 |
| Crystal + clock gen | Epson + Si5351 | 2 | $1.10 |
| Status LED bar | 4× Cree + drivers | 8 | $0.80 |
| Front OLED (1.3") | SSD1306 I²C, larger than Bridge | 1 | $12 |
| Reset + mode buttons | ×2 tactile | 2 | $0.50 |
| USB 3.0 × 2 + USB-C service | — | 3 | $2.50 |
| Thermal | pad + aluminum heatsink + 40 mm fan | 1 | $6 |
| Main PCB | 6-layer ENIG 150×100 | 1 | $8 |
| Chassis Medium aluminum base | shared with Bridge | 1 | $12 |
| Chassis Medium cover (Std polymer) | shared | 1 | $3 |
| 8× RP-SMA bulkhead (dual-radio WiFi 7) | 8 | — | $14.40 |
| 8× WiFi 7 antennas | Taoglas FXUB70 ×8 | 8 | $52 |
| Fasteners + internals | T10 + M3 + thermal | — | $1.20 |
| Packaging + tool pouch | | 1 | $3.50 |
| **Platform subtotal** | | | **~$331** |
PCBA at 1k: +$40 → ~$371 FOB platform.
Retail floor: $209 (Std config base). Margin starts negative on platform alone — we'd need ~$380-420 retail just to cover platform. This means:
- SODIMM RAM + NVMe + dual WiFi 7 radios + TPM are LUX-tier features at this price, not base.
- Either raise base price to $299-349 (realistic), or descope platform to single-radio + 512 MB + 8 GB eMMC.
Decision (2026-04-24): Ship base Standard at $299 retail (not $209). The $209 target came from comparing to Flint 3 retail, but Flint 3 is a single-radio OEM device — not what we're building. WanderRouter Standard native ships with dual-radio as a differentiator.
Alternative Standard Lite tier at $199 retail — single WiFi radio, 1 GB RAM, 128 GB eMMC-only, no M.2 NVMe, Standard cover only. Simpler config, budget-conscious buyers.
---
BOM-modules (configurable)
| Module | Part(s) | Price 1k | Axis | Retail delta |
|---|
| NVMe upgrade 1 TB | Samsung 980 1 TB | +$25 | storage | +$40 |
| NVMe upgrade 2 TB | Samsung 980 2 TB | +$60 | storage | +$95 |
| NVMe upgrade 4 TB | Samsung 980 Pro 4 TB | +$150 | storage | +$220 |
| 2.5" SATA bay | interface + cable + tray | +$6 | bulk_storage | +$15 (empty) |
| 2.5" SATA 4 TB SSD | Samsung 870 QVO | +$140 | bulk_storage | +$200 |
| 2.5" SATA 8 TB SSD | Samsung 870 QVO | +$340 | bulk_storage | +$480 |
| DOCSIS 3.1 modem module | Broadcom BCM3390 daughterboard | +$45 | wan_modem | +$100 |
| DOCSIS 4.0 modem module | Broadcom BCM3412 daughterboard (~2027) | +$85 | wan_modem | +$180 |
| USB LTE fallback | Huawei MS2372h or Quectel EG25 | +$35 | cellular_failover | +$65 |
| Thread border router | nRF52840 USB dongle | +$12 | smart_home | +$25 |
| Zigbee coord | Sonoff ZBDongle-E | +$18 | smart_home | +$30 |
| LoRa HAVEN mesh | Heltec LoRa32 via USB | +$28 | lora | +$50 |
| Internal UPS 3-hour | 5× 18650 + BMS | +$40 | ups | +$85 |
| Solar MPPT DC input | integrated with UPS or standalone | +$12 | solar | +$25 |
| Pro CNC cover | 6061-T6 anodized | +$35 | enclosure_cover | +$60 |
| Lux Artisan cover | walnut+brass Ambassador-made | +$120 | enclosure_cover | +$195 |
| Lux signature glyph plate | etched Ambassador | +$5 | signature_tier | +$40 |
| RAM upgrade 4 GB SODIMM | Crucial CT4G4SFS8266 | +$12 | ram | +$25 |
| RAM upgrade 8 GB SODIMM | Crucial CT8G4SFS8266 | +$22 | ram | +$45 |
---
Configurator axes (16)
1. Base tier: Standard Lite ($199) / Standard ($299) / Standard Plus (+$60 for 2nd radio included) 2. RAM: 2 GB / 4 GB / 8 GB SODIMM (socketed, user-upgradable) 3. NVMe storage: 500 GB / 1 TB / 2 TB / 4 TB 4. Bulk SATA bay: none / empty bay / 4 TB SSD / 8 TB SSD 5. Primary WAN: Ethernet / +DOCSIS 3.1 / +DOCSIS 4.0 / +USB LTE 6. Cellular failover: none / USB LTE added 7. Thread border router: none / included 8. Zigbee coordinator: none / included 9. LoRa (HAVEN): none / included 10. Internal UPS: none / 3-hour 11. Solar DC input: none / installed (req. UPS) 12. Enclosure cover: Standard polymer / Pro CNC / Lux Artisan 13. Color (Standard/Pro): Black / Champagne / Deep-Teal / Custom-Lux 14. Ambassador signature: Standard card / Lux glyph plate 15. Ambassador choice: Auto / Choose from roster 16. Software tier: Standard WanderOS / +WanderAssist sub
---
Example configurations
| Config | Axes | Retail |
|---|
| **Standard Lite** (budget) | single radio, 1GB, 128GB, Std cover | **$199** |
| **Base Standard** (typical) | dual radio, 2GB, 500GB NVMe, Std cover | **$299** |
| **Household w/ Matter** | Base + Thread + Zigbee | **$354** |
| **Cord-cutter** | Base + DOCSIS 3.1 (replaces ISP modem) | **$399** |
| **Small-household NAS** | Base + 2 TB NVMe + SATA bay empty | **$409** |
| **Full household (power)** | Base + 4 TB NVMe + 4 TB SATA + Thread + Zigbee + UPS 3-hr | **$549** |
| **HAVEN gateway** | Base + DOCSIS 3.1 + UPS + Solar + LoRa + Pro cover | **$629** |
| **Lux showcase** | Base + 4 TB NVMe + Thread + Zigbee + UPS + Lux walnut+glyph | **$739** |
---
Compatibility highlights
- MT7988A + 2× MT7996AX WiFi 7 radios: both PCIe 3.0 x1 — SoC has 2× PCIe lanes, fits exactly
- TPM 2.0 on SPI bus (shared with RTC + any I²C peripherals)
- DOCSIS module connects via PCIe 2.0 x1 (reuses a PCIe lane when selected; requires one WiFi radio to be USB-attached — Stage 3 architectural tradeoff)
- 10G SFP+ direct from SoC's 10G MAC (separate from the 2× PCIe lanes)
- LoRa module via USB 2.0
- Internal UPS via dedicated 12V + I²C for BMS
---
DFM / DFA / Thermal / EMC / Compliance
Similar framework to Bridge but with added considerations:
- 6-layer PCB required for signal integrity on 10G SFP+ + dual WiFi 7 + DOCSIS (if installed)
- Active cooling (40 mm fan) required under full-config load (~35W sustained)
- UL 62368-1 cert required if DOCSIS cable modem or internal UPS selected (mains connection) — adds $18-35k cert cost
- FCC Part 15 C — dual-radio co-existence + intermodulation testing beyond Bridge Mini
- DOCSIS cert (CableLabs) — separate cert path if we ship the DOCSIS module, estimated $25-40k
Cert budget full-config: ~$60-90k (FCC + CE + UL + DOCSIS). Cert budget base Standard: ~$10-15k.
Recommendation: ship base Standard (no UPS, no DOCSIS) for initial cert, add UPS/DOCSIS as post-cert modules that trigger re-cert (handled in v1.1 / v1.2).
---
HW ↔ FW binding + service flow
- OpenWrt 24.10 + WanderOS-Router v1 overlay (superset of Bridge overlay)
- Shared kernel + divergent package set
- 7-year parts guarantee
- DIY: NVMe, RAM, cover (all socketed/slotted)
- Send-back: TPM, DOCSIS module, PoE circuitry, UPS install
- Ambassador signature same as Bridge family
---
Gate + timeline
- 2027-Q1: Bridge Mini + Bridge first ship (done)
- 2027-Q2: Standard EVT → DVT → first customer ship
- 2027-Q3: Standard v1.1 adds DOCSIS 3.1 module option
- 2027-Q4: Standard v1.2 adds UPS 3-hour option
Staging cert work reduces risk.
---
Differentiators vs every other gateway on the market
- Dual-radio WiFi 7 standard (not optional) — beats Eero/Orbi/Deco who have single-radio APs
- SODIMM-upgradeable RAM — no other consumer router offers this
- M.2 NVMe user-upgradable to 4 TB — Firewalla Gold Pro is closest ($559)
- Platform USB NAS + Time Machine + Jellyfin — nobody at $299 ships this
- Integrated DOCSIS modem option — cable-subscribers skip the $15/mo ISP rental
- Opt-in Tor relay — unheard of in consumer mesh
- Voice setup prompts for accessibility — no competitor has this
- Identity-aware defaults + 7-year parts + Ambassador — WanderVerse DNA
---
v1.1 AMENDMENTS — Dual-mode + Community Pool + Companion App (back-fix 2026-04-24)
Per ../_STANDALONE-AND-PLATFORM-INTEGRATION.md canonical principle (2026-04-24) and for feature parity with WanderBand v2.1 + WanderStore + WanderNode Hub v2, this spec now explicitly commits to dual-mode architecture + Community Pool integration + shipped companion apps. These amendments do not change BOM or physical design; they formalize software + revenue + integration posture.
Standalone + industry-integration + WanderVerse-native mode
Mode 1 — Standalone:
- Works with just: WanderRouter Standard + any phone (iOS or Android) + upstream ISP (cable/fiber/DSL)
- Setup: scan QR on box → BLE pair → configure via iOS/Android/web PWA in under 5 minutes
- Core features work with ZERO other WanderVerse products — dual-radio WiFi 7, 4-port 2.5G LAN, 10G SFP+ uplink, platform M.2 NVMe NAS, USB NAS, DOCSIS modem (optional), PPPoE/DHCP/static WAN, DoH/DoT/DoQ server, ad/tracker blocking, family filtering, guest QR, Tor relay opt-in, UPS module (optional), voice setup for accessibility
- Companion apps: iOS (App Store) + Android (Play Store) + web PWA on wanderverse.com
- No WanderVerse cloud required — all management is local (LAN + BLE + web admin + optional ZeroTier/Tailscale for remote access)
Mode 2 — Industry-integrated (at or above industry standard):
- Apple: HomeKit accessory, HomeKit Secure Video relay (NAS stores recordings locally, HomeKit handles playback/notification), Find My Network opt-in, Shortcuts, Wallet (guest passes), Siri intents ("turn off Wi-Fi radios", "open guest network")
- Google: Google Home scenes (radios, guest, kids-mode, bedtime), Assistant, Matter 1.3+ controller capability (Standard has the compute to act as Matter controller if WanderNode Hub is absent), Health Connect (N/A — placeholder for family parity)
- Samsung: SmartThings scenes + guest-network toggle + family-mode triggers
- Home Assistant: first-class via MQTT + HTTP API + HA Discovery; every Router feature exposed as HA entity (switch, sensor, scene, device_tracker)
- Matter 1.3+: can act as Matter controller OR passthrough (configurable; controller role is secondary to WanderNode Hub when paired)
- VPN: WireGuard, Tailscale, OpenVPN, ZeroTier — client + server modes
- Router ecosystem compat: Ubiquiti UniFi-compatible discovery protocols (so UniFi APs can be managed downstream if user has existing UniFi hardware); Eero/Orbi mesh roaming compat in AP mode
- NAS compat: SMB, NFS, AFP, Time Machine, WebDAV — coexists with Synology/QNAP/Netgear NAS
- Media servers: Plex, Jellyfin, Emby, Navidrome, DLNA
- What we MATCH: Eero Pro 7's WiFi 7 dual-band, Netgear Orbi's mesh AP, ASUS AiMesh's cross-vendor, Firewalla Gold Pro's firewall/IDS, Ubiquiti UDR's comprehensive
- What we BEAT: no required cloud account (Eero forces Amazon account; Netgear pushes cloud; ASUS analytics-on-by-default); SODIMM RAM upgrade (nobody offers this); DOCSIS modem option (no competitor integrates cable modem); Ambassador assembly + 7-year parts (no competitor)
- What we lag (honest): we do NOT have Eero's mass-market brand recognition or 1-click onboarding; we do NOT have Ubiquiti's Site Manager for multi-site admin (not target use case); we do NOT have Google Nest's voice-first setup flow in v1.0 (voice prompts exist but not the full Nest pairing dance)
Mode 3 — WanderVerse-native:
- WanderBridge (Mini / Full): Router auto-orchestrates Bridge RF coordination, mesh topology, PoE budget; single WanderOS pane
- WanderBand: Router RF-power auto-adjusts down when band-worn-and-home; band-as-key for WiFi client trust; occupancy-driven guest VLAN; panic-button triggers Router to radio-silent + LoRa-only mode
- WanderNode Hub: Router delegates Matter/Thread controller role to Hub (Hub's stronger radio + dedicated purpose); Router routes Matter traffic to Hub
- WanderCam / WanderBell / WanderLock: Router's PoE-adjacent plane + WanderBridge's PoE-out manage these; Router applies identity-aware access policies
- WanderStation (HAVEN LoRa): Router is LoRa mesh endpoint when HAVEN-enabled; can originate emergency relay text during internet outage
- WanderCar: Router is home-endpoint for Car's Tailscale tunnel (car-to-home private link); Router pushes updates to Car when home-parked
- WanderVault: Router hosts optional WanderVault backup target on M.2 NVMe; cross-device snapshot coordination via WanderOS
- Cross-device unlocks:
- Identity-aware defaults inherited across all household devices (one WanderOS profile = unified experience)
- Emergency Evacuation Mode: panic → router radios silent + LoRa relay + WanderVault encrypted backup + HAVEN alert + location share (all coordinated from Router)
- Occupancy-driven home automation: who's home (via WanderBand presence) drives lighting, HVAC, network policy, guest VLAN
- Band-roaming: a second household member arriving with band triggers automatic VLAN join without captive portal
Community Pool Integration
Per ~/Downloads/Claude/wandersafe/specs/WANDERVERSE-COMMUNITY-POOL-SPEC.md:
- Router Standard hardware revenue feeds existing 60/30/10 Ambassador split:
- 60% Ambassador wages (every Router carries assembling Ambassador's signature)
- 10% PrideFund (HYSA auto-deposit, Ambassador's money)
- 30% WWP Community Pool (Layer 1 operations cap 65%; Layer 2 Ambassador-voted min 35%)
- Layer 2 categories (Ambassador-voted annually): Scholarships · Emergency Grants · HAVEN Expansion · New Ambassador Seeding · Open Community Grants · Program Reinvestment
- Governance: 1 Ambassador = 1 vote, Annual Assembly each January, 25% quorum, Board veto for 501(c)(3) legal/ethics only, 60% supermajority overrides
- Standard is the highest-volume Router SKU (projected 60-70% of Router-family revenue) — its contribution to the Community Pool is the single largest hardware-channel feed
- Secondary revenue: Router accessories (Lux covers, NVMe upgrades, DOCSIS modules, UPS upgrades, solar-assist modules, STL printables, repair parts) flow through WanderStore tiered 10/15/25 model (
../wanderstore/_REVENUE-MODEL-FINAL.md); WanderStore platform take feeds the same Community Pool
- Router Standard is NOT a separate revenue silo — every sale routes through the democratic pool already designed April 2026
Companion App Spec
- iOS app — Swift + SwiftUI, App Store
- HomeKit accessory registration, HomeKit Secure Video relay admin, Shortcuts automation actions, Wallet guest passes, Find My Network opt-in
- Full router admin surface: WAN config, WiFi, VLANs, VPN, firewall rules, NAS/media server, DoH/ad-block, family filtering, guest QR, UPS status, Tor relay toggle
- App Store privacy label: local-only data collection, no trackers, no cloud dependency
- iPhone + iPad + Mac Catalyst (Apple Silicon native)
- Android app — Kotlin + Jetpack Compose, Play Store
- Google Home scenes, Assistant intents, Matter controller delegation, Material 3 design
- Phone + tablet + Wear OS companion (simple RF-off toggle only)
- Web app (PWA) — wanderverse.com/router-standard, installable, any browser (Chrome/Safari/Firefox/Edge)
- Desktop-first admin flows (advanced config, LuCI passthrough for power users, Docker management, Jellyfin admin)
- Mobile-responsive for on-the-go
- API layer — REST + WebSocket + MQTT; OpenAPI 3.0 spec; MIT-licensed SDK for third-party extensions; OAuth-free auth via per-device passcode + certificate
- Engineering budget estimate: ~$200-300k NRE per Router-family amortized (shared app codebase across Mini/Bridge/Standard/Standard-5G/Pro-v2/Ultra with per-SKU feature flags)
- Accessibility: full Apple Accessibility API (VoiceOver, Dynamic Type, Switch Control, AssistiveTouch, Reduce Motion, High Contrast), full Android Accessibility API (TalkBack, Switch Access, Live Caption, Select to Speak), web WCAG 2.2 AA compliance
- Voice setup prompts for accessibility (standard-differentiator, TTS-first wizard for visually-impaired users) — callable via iOS VoiceOver + Android TalkBack + web screen readers
- Languages: 10 at launch, community-contributed additions via MIT-licensed i18n repo