Private cloud storage on the mesh: folders, previews, share links, trash, and starred items. Images and video publish to the 0trust.social CDN — content-addressed hot blobs at /c/{id}.
Browse like a desktop library. Sync like a product barge. Keep ownership on 0Trust.
Nested folders, quick search, starred items, and soft-delete trash — hot index in ultimate_db for snappy browsing.
Markdown-style previews and in-browser editing. Text is stored as CRDT documents so multi-device edits merge cleanly.
Issue token links for specific files when you want controlled access without making a whole bucket public.
Each user gets a private S3-compatible bucket on 0trust.social (u-{login}). Owner-only ACL by default.
Drive + social barges snapshot upstream to 0trust.services for same-hostname rollover — no DNS surgery.
Sign in with Social SSO (social.0trust.cloud) or domain identity — the same passkey plane as the rest of 0Trust.
Upload a JPEG, PNG, GIF, or MP4 in Drive. Preview is not a same-origin blob — it is live 0trust.social delivery.
Each media upload is hashed and stored on the social hot tier. Same bytes, same id — dedupe free across the mesh.
Previews and share pages load https://0trust.social/c/{id} directly. Range requests for video. Embed-ready CSP.
Originator + share tokens travel with content so embeds on Williwaw, Bandy, and MotionKB stay verifiable.
Touch keeps media hot; idle content ages into cold archive without breaking the stable /c/{id} path.
Drive publishes over trusted mesh headers on loopback — DBSC-bound subject, consumer id drive.
The same node serves chat media, CMS assets, and your Drive library. One plane. Zero third-party file hosts.
Same controls you already trust on the control plane.
Device-bound sessions on protected app routes — not just a cookie.
First-party IdP client with redirect https://drive.0trust.cloud/auth/callback.
Content-addressed blobs, cold archive, and full-barge snapshots when binaries change.
One product face, two durable layers, one CDN.