End-to-End Encrypted Sharing

By default a consortium is private: invite-only. An owner creates the consortium, emails invite tokens, and approves each new member, so there is no accidental exposure. When you want reach instead of secrecy, an owner can list a consortium in the public directory, with joins either owner-approved or open. The default is closed; opening up is a deliberate choice.

When you share data through a consortium, it is end-to-end encrypted with X25519 ECDH + AES-256-GCM before it leaves your instance. The relay broker that moves ciphertext between members cannot read it. Each organization holds its own encryption keys, so even the platform operator sees only opaque bytes.

Post and share BOLOs to alert your consortium when you see a critical indicator. Members that also observe it in their own network can reply with additional context.