Everything our engineering, sourcing, and compliance work produced for this product. Nothing here is marketing — it's the actual document we'd hand a contract manufacturer.
Product family: WanderCar — vehicle-interface device that plugs into OBD-II, adds crash/cabin safety, and meshes into WanderVerse via LTE + LoRa. Device IDs: WV-AUTO-CAR-BASIC · WV-AUTO-CAR-PLUS · WV-AUTO-CAR-PRO (feature layer: WV-AUTO-LOJACK-FEATURE) Chassis: new — Auto-OBD (angled OBD-II body) + Auto-Dash (optional surface-mount puck for Plus/Pro) Status: spec v2.0 — SOP v2.4 native, post-validation, dual-mode (standalone + industry-integrated + WanderVerse-native), automotive-grade silicon, Ambassador-assembled, 7-year parts Supersedes / extends: ~/Downloads/Claude/wandersafe/specs/WANDERCAR-BUILD-SPEC.md v1.0 (2026-04-19). That doc defined the in-car computing + screen + compute-heavy vision (Layer 1-4 with Pi/Jetson). This doc is the complementary vehicle-interface family — the OBD-plugged privacy-first telemetry + safety + mesh device. The two products co-exist: WanderCar-Family (this) is the always-plugged OBD brain; WanderCar Screen (original spec) is the dash-mounted head-unit. They can ship together or separately. See "Relationship to WanderCar Screen" below. Ship target: Basic 2027-Q4 · Plus 2028-Q2 · Pro 2028-Q4 Date: 2026-04-24
Shared family docs: ../_WORKFLOW-SOP.md · ../_HARDWARE-TOOLCHAIN.md · ../_FAMILY-EXPANSION-REVIEW.md · ../_STANDALONE-AND-PLATFORM-INTEGRATION.md · _COMPETITIVE-AUDIT-2026-04-24.md
---
The original WanderCar build spec (April 2026) describes a CarPlay-replacement head-unit — 10-15" dashboard screen + Pi/Jetson compute + cameras + mmWave cabin radar + LoRa. That remains canonical for the screen product.
This spec is for the vehicle-interface device — the OBD-II puck. Small automotive-grade MCU board that plugs into the OBD port, optionally lives under the dash forever, draws from the car's 12V rail, and serves as the always-on telemetry + safety + mesh endpoint. In the original spec's terms, this device is an enabler for Layer 1-4 features even in cars without a WanderCar Screen.
Mapping the original spec to this family:
| Original WanderCar Layer | Where it ships |
|---|---|
| Layer 1 — WanderCar Screen (dash head-unit) | Separate product, different chassis. Consumes data from WanderCar-Basic/Plus/Pro via BLE/Wi-Fi. |
| Layer 2 — WanderCar Kit (sensors + OBD + LoRa) | **This family — WanderCar Plus** covers cabin + OBD + LoRa. Cabin radar optionally available on Plus via module slot (see `CONFIGURATOR.md`). |
| Layer 3 — WanderCar Pro (AI-heavy compute) | Jetson-class compute lives on the **Screen** product, not this puck. This family's Pro tier adds GPS RTK + LoRa mesh relay + Z-Wave/Matter garage automations. |
| Layer 4 — WanderCar Network (community mesh) | **LoRa V2V hazard sharing is enabled from the OBD puck** on all tiers (Basic+). Pro becomes a mesh **relay** (higher duty cycle, larger antenna). |
No conflict. The original spec's compute-heavy features (LLM, dashcam, display, Organic Maps, Auren-in-car voice) belong on the Screen product. This family handles the always-plugged, cabin-protection, vehicle-telemetry, community-mesh endpoint. A buyer can have either, both, or just this one.
WanderLoJack — the original spec lists LoJack replacement use cases (crash detection, geo-fence, hot car alert, find-my-car). In this family those are repackaged as the WanderLoJack feature layer: software bundle available on Basic/Plus/Pro (no additional hardware cost), free for all buyers (Standard 3), requiring only a WanderNode Hub or WanderStation in LoRa range (or cellular-carrier data if the user activates it).
---
WanderCar-Family is a privacy-first, automotive-grade vehicle-interface device that replaces Hum / Bouncie / Vyncs / Automatic / OnStar-style trackers with a local-data, mesh-capable, identity-aware alternative. It plugs into the OBD-II port of any 1996+ ICE/hybrid (OBD-II) or 2008+ EV (OBD-II-equivalent SAE J1939 / CCS), draws ≤10 mA parked, and keeps your car connected to your home network + the WanderMesh without routing your driving data through a corporate surveillance cloud.
Three tiers serving three buyer profiles:
| Tier | Price | Who | Killer features |
|---|---|---|---|
| **Basic** | $199 | Privacy-first driver who wants crash detection + theft recovery + OBD diagnostics without monthly fees | OBD + IMU crash + LTE + LoRa uplink + WanderLoJack free |
| **Plus** | $399 | Cabin-safety-first buyer — parent, person in IPV context, elder who wants hot-car + driver-ID + local dashcam | Basic + cabin mic + BLE band-as-key + forward + inward dashcam (local-only) |
| **Pro** | $649 | Fleet / pro / safehouse deployment — high-precision location, home-automation triggers | Plus + GPS RTK + LoRa mesh relay + Z-Wave/Matter garage-on-arrival |
WanderLoJack feature layer — software, free on all tiers. Theft recovery with LoRa fallback if cellular is jammed. No monthly fee. No third-party tracking network. Works off the same hardware.
All tiers ship with:
All tiers feed the 60/30/10 Community Pool (Standard 1 + WANDERVERSE-COMMUNITY-POOL-SPEC). Ambassador-placement revenue routes 30% to the Pool.
---
Primary audiences:
1. Privacy-first drivers fleeing the Hum / Automatic / connected-car data ecosystem — every one of those products phones home to a corporate cloud; this one doesn't. 2. LGBTQ+ / trans / undocumented / IPV-survivor drivers where the car's location history becoming searchable (via subpoena, breach, or abuser access) is a safety threat. Data stays on-device + user-chosen backup. 3. Parents worried about hot-car deaths — Plus cabin mic + Pro mmWave slot detect cabin presence + cabin temp rise → immediate local alert + cellular escalation. 4. Teen-driver and shared-vehicle households — geo-fence + speed alerts without installing a Life360-class surveillance app on the kid's phone. 5. Small fleets (food trucks, community-nonprofit vans, rideshare side-hustle drivers) — GPS RTK + local analytics + no per-vehicle monthly fee. 6. Theft-recovery buyers disillusioned with LoJack's $695 + $30/month model — WanderLoJack is free, uses LoRa mesh when cellular is jammed (actual anti-theft pros jam cell signals; they can't jam LoRa mesh without massive RF footprint). 7. Safehouse / HAVEN / off-grid deployments where cars need to stay connected without exposing their location via cellular-only tracking.
Who it's NOT for:
---
No competitor (Hum, Bouncie, Vyncs, Automatic, OnStar, Tesla-app-only) ships any of these, let alone the combination:
---
Form factor: OBD-II puck with 15° angled entry body (clears steering columns + knee airbags) + optional tether-extension cable for cars where the OBD port is obstructed. 62 × 48 × 22 mm body behind the OBD-II Type A male connector. Case material: PC+ABS polymer (UL 94 V-0 flame-rated), automotive-grade, textured finish. MCU: STMicro STM32H723VGT6 (Cortex-M7, 550 MHz, 1 MB Flash, 564 KB RAM, dual CAN-FD, Ethernet MAC optional) CAN bus: Microchip MCP2518FD (SPI CAN-FD controller) + NXP TJA1463ATK/1 (CAN-FD signal-improvement transceiver, auto-qualified). Classical CAN-HS + CAN-LS fallback transceivers on same CAN lines. GNSS: u-blox MAX-M10S module + Taoglas passive ceramic patch antenna (internal). Supports GPS L1, Galileo E1, BeiDou B1, GLONASS L1. Dead-reckoning fusion with IMU for tunnels + urban canyons. IMU: TDK ICM-42688-P (6-axis, 32 kHz ODR, ±16 g / ±2000 dps). Crash detection algorithm: >4 g sustained + >90° rollover + >15 g impulse. Cellular: Quectel BG95-M3 module (LTE Cat-M1 + NB-IoT + GSM fallback + integrated GNSS redundancy). Nano-SIM + eSIM (eUICC). Airalo + Holafly + Nomad multi-profile support. FCC/PTCRB/GCF certified — we inherit. LoRa: Semtech SX1262 on a small M.2 2230 sub-module + u.FL → RP-SMA pigtail to an external stub antenna (optional; internal antenna is standard). 915 MHz (US) or 868 MHz (EU) per SKU variant. Class-A LoRaWAN or direct WanderMesh Meshtastic-compatible PHY. Power: Full 12V automotive protection stack — SM8S30CA TVS (load dump), reverse-polarity P-channel MOSFET (Infineon IPB072N15N3 G), Littelfuse PTC polyfuse 1.5A, LM5166 wide-input buck (7.5-42V → 5V), TPS62840 LDO to 3.3V. Quiescent current <8 mA measured at 13.8V (parked target). Secure element: NXP SE051 (Plug & Trust, EAL6+). Stores device identity keys, signs telemetry, never leaves the chip. BLE: Nordic nRF52840 (BLE 5.3) for phone pairing + onboarding + WanderBand proximity detection. Storage: 128 MB SPI NOR (Macronix MX25L1006E) for firmware + rolling-log buffer + OTA dual-partition. Ports: OBD-II Type A male (primary power + CAN); USB-C service port (data + firmware update + factory provisioning); front LED bar (2 status indicators). What Basic does NOT have: cabin mic, BLE band-as-key pairing ceremony (BLE is there for setup only), dashcam inputs, RTK GPS, Z-Wave/Matter radio.
Target buyer: privacy-first driver who wants crash detection + theft recovery + OBD diagnostics + LoRa community mesh. Competes with Hum+ ($10/month), Bouncie ($8/month), Vyncs (~$100 device + $5/month). We undercut all of them on total cost of ownership (no monthly fee for core functionality).
Form factor: Two-piece — OBD-II puck (same Auto-OBD chassis as Basic) tethered via shielded CAT6A cable (18 AWG, 2 m) to a dash-mounted "Auto-Dash" puck (78 × 78 × 18 mm, magnetic mount or adhesive pad). Case material: Same as Basic (OBD side) + anodized aluminum front + polymer back (dash puck).
Everything in Basic + these additions:
Cabin audio: Knowles SPH0645LM4H MEMS digital microphone (I²S) × 2 — one on Auto-Dash puck facing occupants, one directional to driver. Audio processing local-only on STM32H7 (wake-word, voice-command, no cloud STT). All audio destroyed on device unless explicitly recorded for evidence during Emergency Evacuation Mode. Local voice assistant: lightweight on-device keyword-spotter + command parser (Sensory TrulyHandsfree-class, MIT-licensed fallback Porcupine). 40-command local vocabulary in v1.0. NOT a cloud LLM — if users want that they pair with WanderCar Screen (Jetson-based) or their phone. BLE beacon (band-as-key): Nordic nRF52840 on the Auto-Dash puck supports the WanderBand BLE pairing dance. HR-pattern second factor + proximity + duration threshold identifies which WanderBand-wearing household member is driving. Passenger bands detected-but-not-tracked per Standard 3. Forward dashcam: IMX335 (5MP, Sony STARVIS 2) in Auto-Dash puck, 140° wide-angle aspheric, f/1.8. H.265 encode on MCU-adjacent companion chip (ESP32-S3 + camera SPI). 30 fps 1080p continuous loop; 4K on event. Inward dashcam: OV2311 (2MP, IR-sensitive, 940 nm IR LED illumination for night). 120° wide-angle. H.265 encoded. Hardware privacy switch on Auto-Dash puck slide-covers the inward lens AND electrically disconnects the sensor (Standard 3 — hardware-level modular consent). Storage: 256 GB NVMe M.2 2230 (Samsung PM991a or Kingston OM3PDP3256B) in the Auto-Dash puck. Encrypted at rest (LUKS2 via companion ESP32-S3 Linux overlay). Restic backup to WanderNode Hub when home + charging. Companion app overlay: the ESP32-S3 in Auto-Dash runs a minimal Linux (via Yocto + Zephyr interop on the STM32H7 — see HW-FW.md) to handle H.265 + Restic + ML audio classification.
Target buyer: parent worried about hot-car / cabin events; household wanting band-as-key driver ID; anyone who wants a privacy-first dashcam (Ring Car Cam / Tesla Sentry alternative) without cloud capture. Competes with Ring Car Cam ($249.99 + $8/mo cloud), Tesla Sentry Mode (free, cloud-only on Teslas), Nexar One ($319 + subscription).
Everything in Plus + these additions:
GNSS upgrade: u-blox ZED-F9P (multi-band L1/L2/L5, centimeter-level with RTK corrections). Fleet tracking, precision routing, geofence boundaries at meter-precision. Supports SAPOS / NTRIP for public-corrections networks. Downgrades gracefully to 1 m single-frequency when corrections unavailable. LoRa mesh relay: SX1262 runs at higher duty cycle + larger external antenna (RP-SMA bulkhead, external stub or magnetic-mount mag-loop antenna on roof). Pro-tier nodes become WanderMesh backbone contributors — relay adjacent bands, cars, stations. Explicit opt-in (Standard 3). Z-Wave + Matter radio: Silicon Labs ZGM230S dual-band (Zigbee + Thread + Matter-over-Thread) + Silicon Labs ZGM130S (Z-Wave 800 series). When the car arrives home (geo-fence + LoRa proximity + phone BLE confirm), Pro directly commands home-automation endpoints: garage door (Z-Wave), porch light (Matter), HVAC (Matter), alarm disarm (Matter). All local — no cloud hop to Google / Apple / SmartThings. Works through Home Assistant, Apple Home, Google Home, or WanderNode Hub indifferently. Expanded storage: 512 GB NVMe (vs Plus's 256 GB) for fleet longer-retention. Roof-antenna bundle: weatherproof magnetic-mount combined LTE + GNSS + LoRa antenna (Taoglas MA850 class) for vehicles where internal antenna performance is insufficient (trucks, vans, high-metal-content cabins).
Target buyer: small-fleet owner, safehouse operator, power-user with HomeKit/Home Assistant who wants the car to trigger house on arrival, privacy-first driver who wants everything. Competes with Samsara small-fleet telematics (but $20-40/vehicle/month), OnStar Business Fleet ($30/mo/vehicle), Verizon Connect ($26/mo/vehicle). We charge zero monthly; buyer owns the data.
Software bundle. No hardware cost. Included in every WanderCar purchase (Basic+). Per Standard 3 (safety features are not subscription features).
Triggers:
Response chain: 1. Cellular push: immediate SMS + push-notification to phone + WanderNode Hub dashboard 2. LoRa broadcast: coordinates every 30s via WanderMesh (if cellular jammed) 3. Local data preservation: device switches to write-only log mode (no remote wipe possible) 4. Family-contact cascade: optional — if user doesn't acknowledge within 10 min, alert spouse/partner/emergency-contact-list from phone 5. Police-report packet: on user request, device generates an encrypted, timestamped, signed packet with location history + IMU + OBD — user's choice to hand to police, never auto-submitted
No third-party network subscription. No annual LoJack-style fee. The feature works as long as the device has power and is in range of cellular OR a WanderVerse LoRa node.
---
Every OBD-plugged puck uses the same chassis:
STL-OPEN-FILES/ — users can print alternate colors, alternate angles, tethered-cable variantsEvery WanderCar has an Ambassador plate visible on opening the case back (T10 Torx, 4 captive screws):
Permanent, weatherproof (inside the case), part of the car forever.
---
Mapped against _FAMILY-EXPANSION-REVIEW.md 17-category superset adapted for vehicle-interface devices:
| Feature | Basic | Plus | Pro | Notes |
|---|---|---|---|---|
| OBD-II PID read (~150 standard PIDs) | ✅ | ✅ | ✅ | Speed, RPM, fuel %, coolant, battery, etc. |
| Manufacturer-specific PIDs (via UDS 0x22) | ✅ | ✅ | ✅ | Ford/GM/Toyota/VW mode-22 extensions |
| DTC read + clear | ✅ | ✅ | ✅ | |
| DTC plain-language explanation (offline DB) | ✅ | ✅ | ✅ | 10k+ code database on-device |
| Freeze-frame data | ✅ | ✅ | ✅ | |
| CAN-FD + classical CAN + CAN-LS | ✅ | ✅ | ✅ | Modern 2020+ + legacy |
| SAE J1939 (heavy-duty / commercial) | opt | opt | ✅ | Fleet-grade |
| EV-specific (SAE J1772 / CCS / NACS diag) | — | opt | ✅ | Tesla, Nissan, Ford Lightning |
| LIN-bus passive listen | — | — | opt | Body-control networks |
| Battery-health algorithmic estimation | ✅ | ✅ | ✅ | IMU + alternator-signature fusion |
| Oil-life prediction | ✅ | ✅ | ✅ | OEM algorithm + driving-style ML |
| Trip logging (local only) | ✅ | ✅ | ✅ | |
| Predictive maintenance alerts | ✅ | ✅ | ✅ |
| Feature | Basic | Plus | Pro |
|---|---|---|---|
| IMU crash detection (>4g sustained) | ✅ | ✅ | ✅ |
| Rollover detection (>90° tilt + IMU) | ✅ | ✅ | ✅ |
| Hard-brake / aggressive-driving logging | ✅ | ✅ | ✅ |
| Parking-impact detection (quiescent IMU threshold) | ✅ | ✅ | ✅ |
| Cabin occupancy detection | — | ✅ (acoustic) | ✅ (acoustic + optional mmWave) |
| Hot-car alert (cabin temp + occupant) | — | ✅ | ✅ |
| Child-in-vehicle reminder (seat-BLE or band) | — | ✅ | ✅ |
| Driver-drowsiness (audio pattern + IMU steering microvib) | — | ✅ | ✅ |
| Forward dashcam (continuous loop) | — | ✅ | ✅ |
| Inward dashcam (hardware privacy switch) | — | ✅ | ✅ |
| Event auto-lock (crash clips saved) | — | ✅ | ✅ |
| Tow / impound detection (IMU hoist signature) | ✅ | ✅ | ✅ |
| Feature | Basic | Plus | Pro |
|---|---|---|---|
| LTE Cat-M1 + NB-IoT | ✅ | ✅ | ✅ |
| eSIM (eUICC) multi-profile | ✅ | ✅ | ✅ |
| Nano-SIM slot | ✅ | ✅ | ✅ |
| BYO-SIM (any carrier) | ✅ | ✅ | ✅ |
| 5G RedCap upgrade path (module swap 2029+) | ✅ | ✅ | ✅ |
| GPS single-band L1 | ✅ | ✅ | — (has RTK instead) |
| GPS multi-band L1/L2/L5 with RTK | — | — | ✅ |
| NTRIP corrections client | — | — | ✅ |
| GLONASS/Galileo/BeiDou | ✅ | ✅ | ✅ |
| BLE 5.3 | ✅ | ✅ | ✅ |
| WiFi 2.4 GHz (service + onboarding) | ✅ | ✅ | ✅ |
| LoRa 915/868 MHz | ✅ | ✅ | ✅ |
| LoRa mesh-relay duty cycle | limited | limited | ✅ high |
| Z-Wave 800 | — | — | ✅ |
| Thread + Matter | — | — | ✅ |
| Zigbee | — | — | ✅ |
| Feature | Basic | Plus | Pro |
|---|---|---|---|
| WanderNode Hub BLE pairing | ✅ | ✅ | ✅ |
| WanderNode Hub LoRa status | ✅ | ✅ | ✅ |
| WanderStation / HAVEN mesh | ✅ | ✅ | ✅ |
| WanderBand driver-ID (band-as-key) | — | ✅ | ✅ |
| WanderBand passenger-not-tracked | — | ✅ | ✅ |
| WanderDash vehicle status card | ✅ | ✅ | ✅ |
| WanderBackup dashcam restic target | — | ✅ | ✅ |
| WanderOS device-map | ✅ | ✅ | ✅ |
| Home-automation-on-arrival (local) | via Hub | via Hub | ✅ direct |
| Apple HomeKit arrival scene | via Hub | via Hub | ✅ direct |
| Apple Find My (opt-in network) | ✅ | ✅ | ✅ |
| Google Find My Device (opt-in) | ✅ | ✅ | ✅ |
| Feature | Basic | Plus | Pro |
|---|---|---|---|
| No cloud account required | ✅ | ✅ | ✅ |
| No telemetry by default | ✅ | ✅ | ✅ |
| Location data local-only (no cloud) | ✅ | ✅ | ✅ |
| User-chosen backup target | ✅ | ✅ | ✅ |
| Encrypted at rest | ✅ | ✅ | ✅ |
| Secure element (SE051) | ✅ | ✅ | ✅ |
| No law-enforcement backdoor | ✅ | ✅ | ✅ |
| Subpoena-proof architecture (we can't decrypt) | ✅ | ✅ | ✅ |
| Passenger-not-tracked (band-level) | — | ✅ | ✅ |
| Hardware privacy switch (inward camera) | — | ✅ | ✅ |
| Audit log (every data flow) | ✅ | ✅ | ✅ |
| Safe-passage mode (hide from shared-car app) | ✅ | ✅ | ✅ |
| Duress wipe (coded pattern) | ✅ | ✅ | ✅ |
| WanderLoJack included (no subscription) | ✅ | ✅ | ✅ |
| Feature | Basic | Plus | Pro |
|---|---|---|---|
| Operating temp -40°C to +85°C | ✅ | ✅ | ✅ |
| Storage temp -50°C to +105°C | ✅ | ✅ | ✅ |
| ISO 7637-2 pulses 1/2a/3a/3b/5a | ✅ | ✅ | ✅ |
| IEC 61000-4-4 EFT ±4 kV | ✅ | ✅ | ✅ |
| IEC 61000-4-2 ESD ±8 kV contact | ✅ | ✅ | ✅ |
| EN 60068-2-6 vibration 5-2000 Hz | ✅ | ✅ | ✅ |
| IP40 (interior mount) | ✅ | ✅ | ✅ |
| Quiescent current <10 mA | ✅ (8 mA) | ✅ (9 mA) | ✅ (9.5 mA) |
| Load-dump survival (ISO 7637-2 pulse 5a) | ✅ | ✅ | ✅ |
| Reverse-polarity protection | ✅ | ✅ | ✅ |
| 12V / 24V vehicle rail compatible | ✅ (7.5-42V in) | ✅ | ✅ |
See CONFIGURATOR.md for full per-axis pricing.
---
| Year | Module | Tier target | Effect |
|---|---|---|---|
| 2027-Q4 | Basic ship — MAX-M10S + BG95-M3 + SX1262 + ICM-42688-P | Basic | |
| 2028-Q2 | Plus ship — adds Auto-Dash puck (NVMe + mic + camera) | Plus | |
| 2028-Q4 | Pro ship — adds ZED-F9P + mesh-relay LoRa + Z-Wave/Matter | Pro | |
| 2029-Q1 | 5G RedCap cellular module upgrade (Quectel RG620Q-EU) | module-upgrade | |
| 2029-Q3 | mmWave cabin radar (TI IWR6843 or Infineon BGT60TR13C) as Plus/Pro opt | module-option | Adds child + pet presence + vital signs |
| 2030-Q1 | Automotive Ethernet (100BASE-T1) option for DoIP on 2022+ vehicles | module-option | Fleet-grade diagnostics on modern cars |
| 2030-Q3 | Satellite IoT uplink (Skylo / Iridium Certus / Globalstar via 3GPP NTN BG95-S5) | module-option |
The promise (Standard 4): your 2027 Basic becomes a 2029 5G Basic becomes a 2030 mmWave-cabin Plus. Same chassis, same Ambassador, same encrypted keys. Every other telematics dongle on the market is e-waste in 3-5 years.
---
Platform FOB: ~$60 (STM32H7 + BG95-M3 + MAX-M10S + MCP2518FD + TJA1463 + SX1262 + full 12V protection + chassis + antennas) PCBA at 1k: +$12 FOB total: ~$72 Retail: $199. Margin: ~64% — high enough to fund Community Pool + Ambassador assembly + 7-year parts reserve.
Platform FOB: ~$135 (Basic + Auto-Dash puck: ESP32-S3 + IMX335 + OV2311 + Knowles mic × 2 + 256GB NVMe + aluminum front chassis + CAT6A tether) PCBA at 1k: +$20 FOB total: ~$155 Retail: $399. Margin: ~61%.
Platform FOB: ~$235 (Plus + ZED-F9P + higher-power LoRa SX1262 + roof-antenna bundle + ZGM230S + ZGM130S + 512GB NVMe upgrade) PCBA at 1k: +$30 FOB total: ~$265 Retail: $649. Margin: ~59%.
Community Pool feed — 30% of gross placement revenue (Ambassador service channel) routes to the Pool. At target mix (60% Basic / 30% Plus / 10% Pro) the first 18-month revenue projection below funds meaningful Pool inflow.
---
Cert budget:
Total family cert budget: ~$75k over 18 months.
---
esp32-camera + ML audio classification via ESP-DL.Companion-app engineering budget: $180-280k NRE across iOS + Android + web + SDK, amortized across the family.
---
If you buy Plus in 2028 for $399 and use WanderVerse's upgrade service over 7 years:
| Year | Upgrade | Cost | Your car has... |
|---|---|---|---|
| 2028 | Initial purchase | $399 | OBD + crash + LTE + LoRa + cabin-audio + dashcam |
| 2029 | 5G RedCap cellular module | +$90 | + 5G fallback when carriers shut down Cat-M1 (they won't for 15 years but optionally available) |
| 2029 | mmWave cabin radar module | +$75 | + child/pet presence + vital signs + hot-car precision |
| 2030 | ZED-F9P RTK GNSS upgrade (Plus → Pro-GNSS) | +$120 | + centimeter-precision positioning |
| 2031 | Z-Wave/Matter radio retrofit | +$55 | + garage-on-arrival home automation |
| 2033 | Battery-pack replacement (cellular modem backup) | +$25 | + fresh carrier-independent backup |
| 2034 | Ambassador re-signature on anniversary | +$20 | + new Ambassador glyph |
Total 7-year cost: $784.
Versus subscribing to Hum+ for 7 years: $250 device + $120/year × 7 = $1,090 — and Hum's hardware is cloud-dependent, so when Verizon shuts the service down (2028 estimated per roadmap rumors) you have e-waste. WanderVerse commits to 10-year cellular support + 7-year parts + open firmware.
---
All Ambassador-assembled. All user-DIY-repairable or send-back-swappable:
| Service | Cost | Who | Time |
|---|---|---|---|
| Module swap (cellular / GNSS / LoRa) DIY | $25 + module | user | 15 min, T10 Torx |
| Module swap (send-back) | $25 service + module + shipping | Ambassador | 5 days |
| Cellular modem upgrade (Cat-M1 → 5G RedCap) | $90 module + $25 service | Ambassador | 5 days |
| GNSS upgrade (M10 → F9P RTK, Plus → Pro-GNSS) | $120 module + $25 service | Ambassador | 5 days |
| Auto-Dash puck NVMe replacement | $30 drive + $25 service | Ambassador | 5 days |
| OBD cable replacement (frayed / chewed) | $12 cable (DIY swap) | user | 2 min |
| Case / chassis refresh (Standard → Pro CNC) | $75 chassis swap + $25 service | Ambassador | 7 days |
| Firmware update (WanderOS-Car) | free | user | OTA or USB |
| End-of-life recycling | free + $15 credit | WanderVerse | — |
Repair culture concretely: every WanderCar ships with T10 Torx bit + ESD spudger + module swap tutorial link. No warranty-void-if-opened. Full Framework-laptop-style user-first discipline.
See SERVICE-FLOW.md for the detailed choreography.
---
See _COMPETITIVE-AUDIT-2026-04-24.md for the full audit. Summary:
| Feature | WanderCar | Hum+ | Bouncie | Vyncs | Automatic | OnStar | Tesla app |
|---|---|---|---|---|---|---|---|
| No cloud account required | ✅ | ❌ | ❌ | ❌ | ❌ (EOL'd) | ❌ | ❌ |
| No monthly subscription (core features) | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ built-in |
| LoRa mesh fallback | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Automotive-grade silicon | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ |
| Modular upgrade path | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
| User-replaceable modules | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
| 7-year parts guarantee | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Band-as-key driver ID | ✅ Plus+ | ❌ | ❌ | ❌ | ❌ | ❌ | app-based |
| Hot-car cabin alert | ✅ Plus+ | ❌ | ❌ | ❌ | ❌ | limited | ✅ (Sentry) |
| Local-only dashcam | ✅ Plus+ | ❌ | ❌ | ❌ | ❌ | cloud | cloud |
| Z-Wave/Matter home-on-arrival | ✅ Pro | ❌ | ❌ | ❌ | ❌ | cloud Alexa only | cloud IFTTT |
| WanderLoJack included free | ✅ | ❌ | limited | ❌ | ❌ | $30/mo | ❌ |
| Open firmware + STL | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Ambassador-signed assembly | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Identity-aware defaults (trans/undoc/IPV) | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
| No law-enforcement backdoor | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ |
The moat: automotive-grade + privacy-first + LoRa-mesh-resilient + modular-upgradable + identity-aware + Ambassador-assembled. No competitor touches 3 of these, let alone 8.
---
1. Automotive-grade STM32H7 availability — STM32H723ZGT6-A (AEC-Q100 Grade 2) has ~16-week lead times from STMicro. If OEM-fleet buyer requires strict AEC qualification, we need to commit to the -A variant early. Default commercial-grade path has ~8-week leads. 2. Carrier activation (eSIM) for Quectel BG95-M3 — PTCRB + GCF + T-Mobile + Verizon + AT&T + Google Fi approvals take 8-16 weeks each. Parallel to Plus/Pro certs. 3. LoRa regulatory variants — US 915 MHz vs EU 868 MHz vs AU 915 MHz (different power limits) means 3 SKU variants or 1 SKU with firmware-locked regional profile + buyer-selectable-at-order. Decision at Stage 4. 4. Wide-angle lens distortion correction on forward dashcam — IMX335 + 140° aspheric needs software dewarp for evidentiary use; reference open-source (OpenCV fisheye) available but ML alternative (for license-plate readability) is better. Stage 9 decision. 5. Inward dashcam privacy + IPV context — for IPV survivors, inward camera is a threat surface (abusive partner could review footage). Hardware switch mitigates; software-level "no inward recording during [specific driver BLE ID]" is implemented but needs threat-model review. Stage 10 pre-ship review. 6. Pricing sensitivity — is $199 Basic achievable with BG95-M3 + SX1262 + ZED-not-included + full AEC-Q100 discipline? Validates at Stage 4 CM quote. Fallback: $229 Basic. 7. RTK NTRIP service — Pro's centimeter accuracy depends on NTRIP corrections. Free public networks (SAPOS, RTKRef) exist but coverage is patchy. Paid (Trimble RTX, Point One, Swift Skylark) adds $15-30/month. Decision: ship with multi-caster support; user chooses their source; no WanderVerse-operated service (aligns with privacy posture). 8. OBD-II port exposure — some vehicles have the OBD port in an exposed footwell; device can be stepped on. Chassis design at Stage 5 includes 15° angled body + tether-cable option. Validate at EVT. 9. RV / semi-truck compatibility — 24V electrical systems (heavy-duty trucks, RVs). 7.5-42V input range covers 24V directly. J1939 CAN is supported on Pro. Validate at Stage 3. 10. Cellular jammer-threat model — WanderLoJack's LoRa fallback assumes a WanderVerse mesh node within ~5 km. Rural coverage gaps initially. Mitigation: every WanderStation doubles as a LoRa gateway; HAVEN deployments include them; density improves over 3 years.
---
| Qtr | Milestone |
|---|---|
| 2026-Q2 | Stage 0-1 (brief + manifest + feature matrix + competitive audit) — this document set |
| 2026-Q3 | Stage 2-5 (BOM + compatibility + DFM/DFA) for Basic |
| 2026-Q4 | Stage 6-7 (thermal + EMC + compliance pre-scan) for Basic; Stage 0-2 for Plus |
| 2027-Q1 | **Basic EVT** — 250 units, bench + on-vehicle testing (5 test vehicles: Toyota Camry, Ford F-150, Tesla Model 3, Honda Civic, RAM 1500) |
| 2027-Q2 | Basic DVT + PTCRB/FCC/CE cert runs |
| 2027-Q4 | **Basic first customer ship** |
| 2028-Q1 | Plus EVT |
| 2028-Q2 | **Plus first customer ship** |
| 2028-Q3 | Pro EVT |
| 2028-Q4 | **Pro first customer ship** |
30 months from spec completion to full family shipping. Aligns with the 2027-2028 WanderVerse hardware ecosystem readiness (WanderBand Lite/Std ship 2027-Q3; WanderRouter family ships 2027-Q2-Q4; WanderCar-Basic timed to follow).
---
| Tier | Volume est. (Basic 2027-Q4 through 2029-Q1) | FOB avg | Retail avg | Revenue |
|---|---|---|---|---|
| Basic | 3,500 | $72 | $199 | $697k |
| Plus (ship start 2028-Q2) | 1,200 | $155 | $399 | $479k |
| Pro (ship start 2028-Q4) | 250 | $265 | $649 | $162k |
| Sensor-puck / module upgrade revenue (year 2+ modest) | — | — | $60 avg | $40k |
| **Total** | **4,950** | — | — | **~$1.38M / 18 months** |
Community Pool feed: 30% × gross Ambassador placement revenue — ~$414k over first 18 months shipping (if Ambassador-placement channel at full density). This is the Basic + Plus + Pro Community Pool contribution alone. Alongside WanderBand + WanderRouter family contributions the Pool becomes self-sustaining by 2029.
Insurance partnership (opt-in revenue stream, user-controlled):
---
---
wandercar_family/
├── WANDERCAR-FAMILY-SPEC.md (this doc — the anchor)
├── _COMPETITIVE-AUDIT-2026-04-24.md (vs Hum/Bouncie/Vyncs/Automatic/OnStar/Tesla)
├── _MANIFEST.md (device IDs, revisions, stage log)
├── DECISIONS.md (running log of every keep/swap/drop decision)
├── BOM-normalized.csv (Stage 2 — all parts, classified)
├── BOM-platform.csv (Stage 8 — parts in every unit of a tier)
├── BOM-modules.csv (Stage 8 — configurable parts with axis references)
├── CONFIGURATOR.md (Stage 2b — axes × options × price × upgrade-path)
├── COMPATIBILITY.md (Stage 3 — CAN/OBD/12V/cellular SAR)
├── SOURCING.csv (Stage 4 — supplier research)
├── DFM-DFA-DFT.md (Stage 5 — shock/vibe/temp cycling, bring-up)
├── THERMAL-EMC.md (Stage 6 — automotive EMC + ISO 7637-2 + IEC 61000-4-4)
├── COMPLIANCE.md (Stage 7 — FCC + CE + AEC-Q100 + FMVSS + OBD-II PHY)
├── GUIDE.md (Stage 8 — install + dashboard mount + antenna routing)
├── HW-FW.md (Stage 9 — Zephyr/FreeRTOS + WanderOS-Car)
├── SERVICE-FLOW.md (Stage 10 — Ambassador-service + DIY-friendly)
├── GATE.md (Stage 10 — EVT/DVT/PVT with vehicle-testing)
└── STL-OPEN-FILES/
└── README.md (STL manifest — Auto-OBD + Auto-Dash + antenna mounts)
---
WanderCar-Family is a genuinely new product category combining:
1. Automotive-grade hardware at consumer-dongle pricing 2. Zero-cloud architecture nobody else in the OBD tracker category offers 3. LoRa mesh fallback that defeats cellular jammers (real anti-theft threat) 4. Identity-aware defaults (trans/undoc/IPV threat models) 5. Modular upgrade path — buy once in 2027, still relevant in 2034 6. Ambassador-assembled with named builder + signature 7. Standalone Mode 1 (works with zero other WanderVerse purchases) 8. Dual-mode discipline — iOS + Android + web + Matter + HomeKit + Home Assistant + Find My all supported 9. WanderLoJack free on every tier — no subscription ever for theft recovery 10. 7-year parts + 10-year cellular support — Framework-level longevity in a category that usually EOLs at 3 years
Three tiers from $199 Basic to $649 Pro. Ambassador-engraved case backs. LoRa mesh to WanderMesh network. Cellular + satellite upgrade path through 2030.
No other OBD-tracker / telematics dongle in 2026-2028 has even 3 of these. WanderCar has all 10.
Ready for implementation engineering + compliance path + first RFQ cycle.