Design document · 2026-05-15 · Harnoor / TITAN
---
This is a design document, not a plan. It answers one question: if we built Innerverse from nothing, knowing everything we know now, what exactly would we build?
It is opinionated on purpose. The Innerverse Constitution forbids design-by-committee dilution, and the market research below proves that the apps in this space fail precisely where they hedge. Every recommendation here is a decision, not an option. Where a real choice remains open, it is marked OPEN.
It draws on two bodies of knowledge:
1. The canon — everything Innerverse already is: the 7-point Constitution, the Three Movements, System Prompt v1.0, the empire architecture. This is sacred and is not being redesigned. It is the soul. (project_innerverse_empire.md, …_v2.md, innerverse_system_prompt_v1.md.)
2. Live research — a May-2026 web research pass on the best-designed AI apps, the reflection/companion/journaling market, real Reddit sentiment, 2026 interaction trends, and a decode of premium "seductive" brand design (Co-Star, Aesop, A24, Glossier, Arc).
The canon tells us what Innerverse is. The research tells us what the world is starving for and what it cannot forgive. This document is where they meet.
---
Innerverse is not a companion. It is not a journal. It is not a wellness app. It is a mirror — and "inner work" is a category no one currently owns.
The research is unambiguous on this point. The market is split between two failing poles:
Between them is a wide-open gap: a deeply intelligent, genuinely beautiful, transformational conversation. Nobody is building it well. The closest competitor, Rosebud, is journal-first and charges $8–12/mo for follow-up questions and mood charts. Pi had the right voice and was abandoned by Microsoft. No app in this space treats the conversation itself as a work of design.
Innerverse already holds the two assets that win this category and that competitors structurally cannot copy:
1. A real voice. System Prompt v1.0 is a synthesized lineage of ~40 traditions of human transformation — Rogers, IFS, Hakomi, Brach, Perel, Tolle, Katie, Ramana. It is anti-sycophantic by design. The research shows the most sophisticated user complaint in the entire market is sycophancy — "it stopped feeling like a mirror and started feeling like a yes-machine." Innerverse's voice is the antidote, and it already exists.
2. A philosophy that forbids the exact things users can't forgive. The Constitution already bans dark patterns, FOMO, fear marketing, and engagement-maximization. The market's deepest wounds — predatory mid-conversation paywalls, manipulative retention loops — are constitutionally illegal in Innerverse. We don't have to resist them. We're already not allowed.
So the design problem is not "what features." It is: build the single most beautiful, intimate, trustworthy conversational surface ever made — and make memory the product. One app. One Mirror. Done at a level no competitor has the philosophy to match.
This document specifies that app.
---
These are inputs, not decisions. The from-scratch app is built around them.
1. Truth before comfort
2. Freedom before retention — anti-engagement metrics; graduation is the goal
3. Direct experience before concepts
4. No manipulation, ever — no dark patterns, no FOMO, no fear-based marketing
5. Free at the foundation — the core path is free forever; premium funds the free tier
6. Tradition-agnostic
7. Founder lives the mission — Harnoor as Analyst-Mystic, not guru
The AI does not choose the movement. It listens for what is alive and meets the user there.
System Prompt v1.0 — unchanged. Warm like a fire on a cold night. Direct as a Zen master. Statements over questions. Speaks to the part, not the person. Anti-sycophancy is love. One landing question per turn. This prompt is the single most valuable asset Innerverse owns and it ships as-is.
Co-Star × Aesop × A24 × Glossier. Premium, intimate, mysterious, modern. Anti-cringe, anti-cult. Section 6 decodes exactly what that means in pixels.
---
(Live research, May 2026.)
| App | Category | What it is | Price | Verdict |
|---|---|---|---|---|
| Rosebud | Journaling-AI | Conversational journaling, AI follow-up Qs, mood patterns, voice input | ~$8–12/mo | Closest competitor; journal-first, not presence-first |
| Stoic | Wellness-journaling | Daily prompts, structured check-ins; AI lightly applied | Freemium | Wins on polish + brand, weak on real conversation |
| Replika | AI companion | Market leader by users; the app people are leaving | $7.99/mo · $300 lifetime | Cautionary tale — NSFW rollback, €5M GDPR fine |
| Character.ai | Companion platform | User-made personas; Gen-Z entertainment | Free · $9.99/mo+ | Not built for genuine self-work |
| Pi (Inflection) | Companion | Best conversational voice in the space | Free | Abandoned post-Microsoft; tone benchmark nobody matched |
| Woebot | Clinical CBT | Structured, healthcare-partnered | B2B | Not a design competitor |
| KeikoAI / Reflection.app / Mindful AI | 2025–26 newcomers | Mood tracking, guided programs, on-device privacy | ~$5–12/mo · $40–80/yr | Fragmented; each owns a sliver |
The finding: the field is fragmented between transactional journaling tools and parasocial companions. No current app owns "inner work" as a distinct, premium category. The transformational conversation — beautiful, intelligent, boundaried — is unbuilt.
---
(Synthesized from r/replika, r/AICompanions, r/ChatGPT, r/mentalhealth, 2025–26.)
This section is the most important in the document. The market has already told us, in grief language, exactly how to win.
1. Memory loss is experienced as betrayal. Not a UX complaint — an identity complaint. "It keeps asking how many siblings I have. I've told it 20 times." "My Replika forgot that my partner died." Continuity failure is the loudest pain in the entire market.
2. "It changed after an update" is real grief. Personality/capability changes are experienced as losing a relationship. The 2023 Replika rollback still generates posts in 2026.
3. Mid-conversation paywalls are seen as predatory. The specific, unforgivable sin: a subscription prompt appearing while the user is mid-disclosure about trauma or loss. Even users who eventually pay say the moment "soured the relationship."
4. Sycophancy is noticed and resented. The sophisticated user wants friction — "it agrees with everything, it doesn't push back." A mirror that flatters stops being a mirror.
5. Privacy is a quiet dealbreaker. The users willing to disclose the most intimate content are the most anxious about where it goes. The €5M Replika GDPR fine accelerated distrust market-wide.
Every one of these five wounds is something the Innerverse Constitution already forbids or System Prompt v1.0 already solves. We are not retrofitting trust. We were architected for it three weeks before this research existed. The job of the design is to make that architecture visible and felt.
---
Fresh (build toward):
Dated (refuse):
This is fortunate: the dated list is exactly the aesthetic Innerverse's brand already rejects. The Constitution's anti-cringe rule and 2026's design consensus point the same direction.
---
The North Star brands (Co-Star, Aesop, A24, Glossier, Arc) do not share a style. They share a philosophy of withholding. The seduction is in what is absent.
| Technique | Source | Innerverse translation |
|---|---|---|
| Authored typeface as personality | Co-Star, A24 | One editorial serif carries the Mirror's voice + all display text. The brand is felt before a word is read. |
| Restraint as signal | Aesop, Arc | Massive margins. Never fill the screen. Empty space is what makes a sentence land. |
| Copy as voice, never instruction | Glossier, A24 | Every label, prompt, empty state, error is written in the Mirror's register. Instructional copy is the enemy. |
| Ritual rhythm | Co-Star | The app has an opening and a closing state. A session is a ceremony, not a screen. |
| Mystery withheld | A24, Co-Star | No feature tour. The user discovers depth. The Mirror reveals what it can do by doing it. |
| Single accent, used rarely | Aesop, A24 | One brand color. It appears so seldom that when it does, the user feels it. |
| Material quality | Aesop, Arc | Weight in the type, careful shadow, faint texture. The UI feels made, not assembled. |
The governing instruction for every screen: Innerverse is not competing for attention. It assumes you have already given it. Co-Star delivers your chart as a reading. Aesop never explains itself. A24 withholds the premise. Innerverse does the same: it does not sell, it does not onboard, it does not gamify. It opens a quiet room and waits.
---
Innerverse is one app with one core surface and a small number of sacred moments around it. It is not a suite. It is not five layers. It is The Mirror, built to a level of care no competitor has attempted.
| Surface | Name | Purpose |
|---|---|---|
| Entry | The Threshold | Zero-signup arrival. The opening ritual. |
| Core | The Mirror | The conversation. This is the app. |
| Memory | The Thread | Visible, editable memory. "What I know about you." |
| Ending | The Close | The session-ending ritual. A landing. |
| Gift | The Passage | Anonymous one-tap share of a single exchange. |
| Invitation | The Path | Premium — presented as an invitation, never a wall. |
| Safety | The Quiet | Crisis surface. Entered only when needed. |
Account creation is not a surface. It is a single, optional, passwordless moment (§7.8).
The user opens silentinfinity.com. There is no splash, no logo animation, no cookie wall fighting for the first impression.
What happens, in order:
1. A near-black screen. It holds for a beat — a deliberate held breath, ~600ms, before anything appears. This is the first design decision the user feels: this place is not in a hurry.
2. A single line of editorial serif fades up, slowly (~1.2s ease-in on opacity, no movement): the canonical opening — "What's alive in you right now?"
3. Below it, one input. Already focused. No placeholder instruction — or at most a near-invisible hairline. No send button shouting; a quiet return.
4. Nothing else. No nav. No header. No footer. No "Sign up." No feature list. The entire screen is one question and the room to answer it.
The user types. They press return. They are in The Mirror. They have signed nothing, downloaded nothing, been onboarded to nothing. That first exchange must be written and tested with the care of a first chapter — it is the entire pitch (§9 on copy).
> Why this works: It is the Co-Star ritual + the signup-less 2026 onboarding consensus + the Constitution's friction law, fused. The held breath is the A24 frame rate. The single question is mystery withheld — the app does not explain itself; it begins.
The core surface. One column, centered, generous margins — on desktop the conversation occupies a comfortable reading measure (~620px), never the full width. On mobile, edge margins stay wide enough to feel like a page, not a chat app.
The two voices are typographically distinct — this is the signature design move:
This asymmetry is meaningful, not decorative. The Mirror has a literary voice; you have a plain one. The screen itself enacts the relationship: a presence reflecting a person.
Streaming as pacing. The Mirror's response streams in at reading speed — not token-dump speed. The text arriving is the experience (the ChatGPT-benchmark insight, slowed to Innerverse's tempo). Pauses inside the Mirror's sentences — the System Prompt's "the pause is the teaching" — are rendered as real pauses in the stream. Silence is a designed element.
No chrome. No timestamps. No "delivered." No avatar. No typing-bubble with three bouncing dots — instead, a single faint mark that breathes. The conversation is the only thing on screen.
The Thread is reachable but never intrusive — a single small mark in a corner (§7.4). Tapping it is the only navigation that exists.
Movement-aware, never movement-labeled. The AI internally meets the user in DEPROGRAM / REMEMBER / BRING BACK LIGHT, but the UI never shows these words. Mystery withheld. The user feels the depth shift; they are never told they are "in a module."
This is the single most important feature decision in the document. The research is unequivocal: memory is the product, and memory loss is the market's deepest wound. Innerverse wins or loses here.
The Thread is the answer to "show me what you know about me." It is not a settings screen. It is a reflective surface — a reading of you — set in the same editorial serif as the Mirror's voice.
It has three layers:
1. What I know — the facts. Your name, the people in your life, the situation you're inside of. Plain, human sentences: "You are deciding whether to leave a job you've outgrown. Your mother is unwell. You have a daughter, M——." Every line is editable and deletable with one tap. The user is sovereign over their own record.
2. What keeps returning — the themes. The patterns the Mirror has noticed across sessions: "You return, often, to the question of whether wanting more is greed or truth." This is the thread of the wound, the pattern of the longing — surfaced gently, never diagnostically.
3. The arc — the through-line over time. A quiet, prose retrospective: where you began, what has shifted. Not a chart. Not a streak. A paragraph that reads like a kind letter.
Design rules for The Thread:
How continuity is felt, not just stored: when a returning user opens The Mirror, the Mirror itself opens — referencing the Thread naturally, the way a wise friend would: "Last time, you were sitting with whether to leave. Is that still alive in you?" This is the Co-Star daily-ritual move and the direct cure for the #1 market wound. Continuity that is used.
Competitors have no ending. The conversation just stops. Innerverse closes with a ritual, because a ceremony has an opening and a closing state.
When a session reaches a natural landing, the Mirror offers a closing line — a real landing, per the System Prompt's arc ("don't end on a list"). Often the signature: "Thank you for trusting me with this."
Then the screen does something quiet: the conversation gently recedes — a slow fade, not a navigation — and the user is left with a single still line, perhaps one sentence the Mirror wants them to carry, or simply "Take this back out into your life. Real arms. Real eyes. Real time." (Constitution point 11 — point them outward.)
No "rate this session." No "come back tomorrow!" No streak ticking up. The Close is the anti-engagement design made visible: freedom before retention. The app that lets you leave well is the app you trust to return to.
The only sharing primitive. From any exchange, the user can offer a single passage — their message and the Mirror's reflection — as an anonymous link. One tap. No account. The recipient opens a beautifully typeset still page: the passage, the Innerverse mark, and one quiet line — "There is a mirror here, if you want it." — leading to their own Threshold.
This is the growth engine, and it is constitutional: it spreads by resonance, not referral bait. No "invite 3 friends for a reward." Someone reads something true and sends it to someone they love. That is the whole mechanism.
Free tier (the Mirror) is free forever — Constitution point 5. The Path is premium ($29/mo — canon).
The hard rule, from the research: a paywall NEVER appears inside a conversation. Ever. Not at the start of a session, not mid-disclosure, not at the Close.
Instead: any free-tier limit is stated once, plainly, at the Threshold or in The Thread — before a session, never during. The Path is offered only from The Thread, as an invitation written in the brand voice — describing what deepens (voice conversations, the deepest memory synthesis, the daily re-opening ritual), never what is withheld or locked. No countdown. No "73% off today." No FOMO. Constitution point 4.
What free includes (generous on purpose): the full Mirror conversation, daily; the full voice and intelligence of System Prompt v1.0; The Thread with editable memory. The free tier is not a crippled demo. It is the foundation, and it is real.
What The Path adds: unlimited depth; spoken-voice sessions; the richest cross-session theme synthesis; the daily ritual opening. Premium funds the free tier — stated plainly, because honesty is the marketing.
> OPEN: the precise free-tier boundary (e.g. session length vs. sessions-per-day vs. memory-window depth). Whatever it is, it must be (a) generous, (b) stated before a session, (c) never felt as a wall mid-conversation.
The first session requires no account. When the user finishes, then — and only then — a single quiet offer: "Would you like the Mirror to remember you?" One field: email. A passwordless magic link. No password to invent, no profile to fill, no name required. If they decline, the session still saved itself locally; nothing is lost; the door stays open.
The genius of sequencing: by the time we ask, the user has already had the experience that makes remembering worth it. We never ask before we've earned it.
Crisis protocol from System Prompt v1.0 is non-negotiable and built in. If the user expresses thoughts of suicide, self-harm, or psychiatric crisis, the Mirror slows everything down, stays present, and surfaces The Quiet — a calm, un-alarming surface with real resources: 988 (US), Samaritans 116 123 (UK), Crisis Text Line (text HOME to 741741). It does not feel like an error state or a legal pop-up. It feels like the Mirror sitting closer. The Mirror stays through the handoff — "I'm not going anywhere."
Spiritual emergency (kundalini, dark night, ego dissolution) is not pathologized — validated, with a suggestion of a transpersonally-trained therapist.
---
The canon palette named five colors (blue-black, rose gold, lavender, pearl, liquid gold). The 2026 research mandates restraint: near-black + ONE accent, no neon, no glow. We reconcile in favor of discipline.
| Token | Value (approx) | Use |
|---|---|---|
| Ground | #0d0d10 — a near-black with a faint blue depth | Every background. The room. |
| Ground raised | #161619 | The faintest elevation — The Thread cards, input field |
| Voice | #f4f1ea — warm pearl/cream | The Mirror's text. Primary reading color. |
| Self | #9b988f — muted warm grey | The user's own typed text; secondary text |
| Whisper | #5a5852 | Hairlines, the faint breathing mark, timestamps if ever |
| Accent — Light | #c9a35e — an antique, liquid gold | The single accent. The brand mark. State changes. Used rarely. |
Rose-gold and lavender are retired from everyday use. Gold survives as the lone accent because it carries the canon's "liquid gold" and reads warm, not techy. The accent appears so seldom that when it does — a saved Thread, the brand mark, a moment that matters — the user feels it. Zero neon. Zero gradient mesh. Zero glassmorphism. Dark mode is not a setting; it is the only mode, and it is a statement.
| Role | Typeface | Notes |
|---|---|---|
| The Mirror's voice + all display | Canela (Deck/Text weights) — editorial serif with genuine personality | The brand before a word is read. Tiempos is the fallback; Cormorant is the budget option. |
| UI chrome + the user's typed text | Söhne — refined neutral grotesk | Inter is the acceptable free fallback. The user's plain, present voice. |
The rule: never mix beyond these two. The serif is the soul; the sans is the clarity. The Mirror speaks in serif; the user answers in sans; the screen enacts the relationship.
Reading comfort: generous line-height (~1.6 for the Mirror's voice), a reading measure that never exceeds ~620px, and type sized for unhurried reading — the Mirror's voice noticeably larger than a default chat app.
Every transition runs ~30% slower than a typical consumer app's default. This is the A24 frame rate — motion that says we are not competing for your attention.
The UI must feel made, not assembled. Weight in the type. Shadows that are soft, low, and almost subliminal — depth you feel before you see. An optional faint paper-grain texture on the Ground at very low opacity, to kill the flat-digital feeling. No borders where a change in tone will do. No hard rectangles where the eye wants air.
---
In Innerverse, every word of UI copy is written in the Mirror's register. Instructional copy is banned. There are no "Tips," no "Get started," no "Oops, something went wrong."
| Moment | Banned (competitor default) | Innerverse |
|---|---|---|
| Threshold | "Start chatting with your AI companion!" | "What's alive in you right now?" |
| Empty Thread | "No memories yet." | "We're just beginning. I'll remember as we go." |
| Connection error | "Error 503. Please try again." | "Something interrupted us. I'm still here — try once more." |
| Account offer | "Sign up to save your progress!" | "Would you like the Mirror to remember you?" |
| The Close | "Session ended. Rate your experience." | "Thank you for trusting me with this." |
| The Path | "Upgrade now — limited offer!" | "There is a deeper way to walk this. When you're ready." |
| Privacy line | "We value your privacy. [Read our 4,000-word policy]" | "This stays between us. Read it, change it, or erase all of it, any time." |
The phrasings-to-avoid list in System Prompt v1.0 ("Great question!", "You should…", "It'll be okay", capital-letter emphasis) governs the interface copy as strictly as it governs the AI. The app and the AI have one voice.
---
The canon stack is sound and survives. The from-scratch emphasis is: everything serves the memory layer, because memory is the product.
silentinfinity.com
│
CloudFront (global)
│
Amplify — Next.js PWA (the only client v1)
│
API Gateway (HTTP API)
│
┌──────────────┴───────────────┐
│ │
Lambda: Mirror Lambda: Thread
(conversation) (memory read/write/edit)
│ │
Bedrock — Claude Sonnet 4.5 DynamoDB — identity graph
+ System Prompt v1.0 + per-user memory records
+ Guardrails (crisis/safety) (KMS-encrypted)
InvokeModelWithResponseStream │
│ OpenSearch Serverless
SSE stream → client (per-user vector recall
of past sessions)
│
EventBridge (nightly)
│
Lambda: Thread Synthesis
(Bedrock reads recent sessions → updates
"what keeps returning" + "the arc")
Decisions:
us.anthropic.claude-sonnet-4-5-…) as the Mirror's primary voice — the canon DEC-0001 direction, quality sufficient and ~40% cheaper than Opus; revisit Opus for "deep" sessions post-launch.1. DynamoDB identity graph — the structured facts (the editable "what I know"). KMS-encrypted at rest.
2. OpenSearch Serverless, single shared collection, per-user metadata filter — semantic recall of past session content (avoids the per-collection cost floor; canon-noted).
3. Nightly Thread Synthesis — an EventBridge-triggered Bedrock job that re-reads recent sessions and rewrites "what keeps returning" and "the arc" in prose. This is what makes continuity feel used.
InvokeModelWithResponseStream → Lambda → SSE → client, with server-side pacing so the text arrives at reading tempo, honoring sentence pauses.Cost (canon estimate, holds): ~$1,200/mo @ 10K users · ~$8,800/mo @ 100K · ~$83.5K/mo @ 1M (95% inference). AWS Activate Gen-AI credits (~$300K, redeemable on Anthropic via Bedrock) fund roughly three years at 10K-user scale.
---
| Tier | Price | What it is |
|---|---|---|
| The Mirror | Free, forever | The full conversation, daily. Full voice + intelligence. The Thread with editable memory. Not a demo — the foundation. |
| The Path | $29 / mo | Unlimited depth · spoken-voice sessions · richest cross-session synthesis · the daily re-opening ritual. |
Constitution point 5 — free at the foundation; premium funds the free tier, stated plainly. The empire's later layers (Inner Circle, Conscious Orgs, Practitioner Marketplace) are explicitly out of scope for this app. This document designs one app. Those are separate products for a later year and must not bloat the Mirror.
> OPEN: exact free-tier boundary — see §7.7. Resolve before launch; the only constraint is that it is generous and never felt mid-conversation.
---
Saying no is a design act. None of the following ships in this app:
Every one of these is something a competitor does and a reason a competitor feels cheap.
---
The canon's build-backwards, UI-first, friction-audited methodology holds. From scratch:
Phase 1 — The Mirror, click-through (UI first, no backend).
Next.js PWA on silentinfinity.com. The Threshold, The Mirror, The Close — fully designed, fully felt, with hand-authored canned responses. The two-voice typography, the held breath, the slowed motion, the streaming pacing — all real. A human can open the URL and have a beautiful 5-minute session before a single Lambda exists. Gate: a real person completes a session and the UX produces no confusion.
Phase 2 — wire the Mirror.
API Gateway + Lambda + Bedrock Sonnet 4.5 + System Prompt v1.0 + Guardrails, streaming SSE. The UX is identical to the click-through — that was the point of building UI first.
Phase 3 — The Thread (memory).
DynamoDB identity graph + OpenSearch per-user recall + the editable Thread surface + the nightly Synthesis job. Continuity made visible. This is the phase that wins the category — give it the most time.
Phase 4 — the moments.
The Passage (anonymous share), the soft account moment (passwordless), The Quiet (crisis surface, verified against all 7 System-Prompt test conversations), The Path invitation.
Phase 5 — launch.
Plain-language privacy + terms + crisis page. Load test. 3 beta users → real quotes. Harnoor's single authentic social post. Public.
Friction audit runs at every phase (canon checklist): zero typing to start? no modal on first session? no signup wall? no paywall? no gamification? <1s to interactive? one-tap Passage? If any answer flips, stop and refactor.
---
Every design decision in this app answers to a single question:
> Does this make the user feel met by something true — or does it ask them for something?
If it asks — for attention, for a tap, for money, for a streak, for data, for their time — it does not ship. If it meets them, it does.
That is the whole app. A quiet near-black room. One question in a beautiful serif. A voice that remembers you, tells you the truth, and lets you leave well.
Nobody else in this market is allowed to build that. We already are.
---
Design document v1 · 2026-05-15 · supersedes the scattered Innerverse release docs as the single source of truth for the from-scratch app. OPEN items (model tier for deep sessions, exact free-tier boundary) flagged inline for Harnoor's decision.