Encrypted Capsule
A 699-byte AXC2 Capsule was delivered in a physical Samsung test without exposing the message to the transport intermediary.
OBSERVED · NOT AUDITED
The current alpha has physical-device evidence for one encrypted nearby route. That is meaningful — and smaller than a claim of complete messenger security.

A 699-byte AXC2 Capsule was delivered in a physical Samsung test without exposing the message to the transport intermediary.
The same accepted Capsule was not accepted a second time in the recorded proof path.
A production request was attested on the physical device. App Check is one abuse signal, not a substitute for encryption or authorization.
Key-change warnings, recovery, revocation, and multi-device behavior must pass explicit product and protocol tests before public accounts.
Three-device store-and-forward, online relay, iPhone parity, and long-lived delivery remain separate gates.
Axon is not described as independently audited, untraceable, surveillance-proof, or impossible to block. External review remains required.
Public capability language changes only after the corresponding route and failure cases are reproduced.
See release status