Dina — your sovereign AI, your open network. Your vaults, approvals, services, reviews, and private messaging, all under one identity you own.
From the founder

A world of possibilities with sovereign AI

A novel published in 2017, brought to life in 2026.

In 2017, I wrote UTOPAI, a novella which imagined a world after AGI through the eyes of a reborn Don Quixote and Sancho Panza. Available on Amazon and also as open source.

One of the things I explored in this book was the importance of sovereign AI (I named it Dina in the story).

What is a sovereign AI?
With sovereign AI, you create and own your identity. You own and control your data. Your AI acts as you, and acts for you. When interacting with other systems, services, or broader networks, it serves as your personal envoy.

Ask Dina Ask a Service Ask Around

Ask Dina

First, you can ask your own AI.

You decide what you want it to know. Dina stores this information in separate encrypted vaults. You choose which data can be used freely, which data needs permission, and what data should always be sealed from others.

Not only that, you can modify or delete the data as you choose. Maybe even delete the whole vault, or export your data to another system.

Now, when you ask or tell your AI anything, the answers are enriched from this context.

You tell your AI about your daughter's birthday, and a reminder will be created automatically one week before. The AI will add context. Maybe you usually buy gifts late, maybe your daughter likes books, maybe you want to call your parents before the celebration.

The important point is that your AI knows you because you chose to tell it, under rules you control.

Let agents act safely

The encrypted vaults we discussed earlier unlock another capability: supporting task agents like OpenClaw, Claude Cowork, Hermes, or Codex. These agents are very powerful, so boundaries are very useful.

Dina can act as the gate between your private data and the agent. If an agent needs sensitive information, Dina can ask for your approval first. If an agent wants to take a sensitive action, Dina can require approval before allowing it.

You can even get these agents to do complex actions, because Dina connects to these agents too.

Ask a Service

Another capability which sovereign AI unlocks is publishing and accessing services.

Because a sovereign AI has a permanent identity, it can talk to other sovereign AIs through encrypted channels. But unlike us talking to another person in normal chat applications, here it is two or more AIs talking to each other. This means a service does not need to have a website, an app, or a platform.

A service can simply be something your AI knows how to provide.

Suppose you are a salon owner, and you want to publish a service which provides the customer with a salon booking interface.

With a communication interface between the provider and customer being their own respective AIs, it now becomes a very simple mechanism.

As the salon owner, you know your schedule: when you are free, which service takes 20 minutes, which ones take an hour, what type of customers will take extra time, your cancellation policy, and many other small details that make your business work.

To publish this as a service, you create a Salon Vault in Dina. You add your working hours, services, prices, booking rules, available slots, and cancellation policy. Then you publish this as a public service.

A salon owner tells Dina their hours in plain language: my salon is open Tuesday to Saturday, 10am to 6pm, last slot 5pm. Taking the salon service live to the open network from your phone.
Set up the service in plain language, then take it live to the network from your phone.

We made it a public service, so any customer's Dina can discover it. You could have made it private, so only selected customers can reach it. You can also make it unlisted or provider-specific based on your requirements.

Please note that, today, the network is still small. Dina is in technical preview, and while the services functionality is available, people might not have published enough services yet.

Coming back to the main topic: the service can only read and write the Salon Vault. It cannot touch your other data.

A customer asks their Dina:

Book me a salon appointment for Saturday at 5 PM.

The customer's Dina looks for nearby salons that match their preferences: price, quality, location, reviews. It finds your salon because your service matches what the customer actually wants.

The customer's Dina asks the salon owner's Dina whether Saturday at 5 PM is free, and if so, to please create an appointment.

The salon owner's (your) Dina finds that the vault is write-protected, and sends an approval request. If you approve, the customer now gets an Appointment Booked.

A customer's Dina asks the salon for a 4pm Thursday opening; the owner approves, the booking is confirmed, and the reply is sent: see you at 4pm Thursday.
A customer's Dina asks, you approve, the appointment is booked and the reply goes back. Two Dinas, no platform in the middle.

The customer didn't have to do anything. Everything was handled by their respective AIs. Without any non-sovereign platform or marketplace in the middle, two sovereign AIs talked to each other to set up a real-world service.

In a way, your knowledge now becomes a service. Your Dina became the API.

While this was a simple scenario, a service could ask task agents to do work and respond too.

This could be the basis of a different kind of economy: a real, AI-based pull economy.

Ask Around

Another capability which sovereign AI unlocks is ranked reviews.

While reviews are quite abundant now, they face some issues that a sovereign AI can help solve.

Currently, while reviews are everywhere, they are not related to any user identity. Also, reviews are mostly created by either very happy or very unhappy customers. The majority of customers do not create reviews. There is also the question of fake or bought reviews.

But with sovereign AI, every AI has a permanent identity. So reviews can be signed by a user-controlled identity. They are public, editable, and deletable by the person who created them.

With permission, AI can write reviews which reflect the user's actual experience. Because the effort from the user's perspective is negligible, even the middle-of-the-road customer can now leave useful reviews.

The most important functionality this unlocks is personalised ranking of reviews.

A review from someone close to me may matter more than a random review. A review from someone with similar interests may matter more than a generic review (even by a famous person). Reviews created without much provenance could be ranked lower.

This means recommendations can become more personal and better grounded.

A user might ask their Dina to search for an office chair. Dina will search for an ergonomic chair which helps with back pain (because it knows I have back pain), and within a budget of $500 (my budget is known). The search will be done on the personalised ranked-review system, ensuring the recommendation is much more relevant to the user.

Asked to find a good office chair, Dina answers from the user's lower-back pain and 500 dollar budget, recommending a chair rated well by trusted reviewers. A review published to the network, signed by the author's own identity and ranked by trust.
Dina answers from your real context and your trusted network, and anyone can publish a review signed by their own identity.

This is another aspect of the pull economy that a sovereign AI allows to happen.

Pull Economy

Today, businesses reach customers in many ways: websites, apps, ads, search results, and word of mouth. All of them are very important and useful.

Sovereign AI adds an additional path. Dina can pull the right options from the network based on customer queries. It can find and invoke services. Dina can look at ranked reviews to decide how good a product or service is. And since it uses the customer's own context, it can come up with a good choice for the customer.

A new channel, supported by AI, where discovery begins with the customer's intent.

Dina, the App

In 2017, this was a fictional concept in a novella.

Today, I have built the first working implementation of Dina.

The Dina app, live on iOS. Get it on the App Store ›

Dina is available as both an iOS mobile application and a server which you can run locally. I will release the Android version soon.

Dina is fully open source under the MIT License. Dina Ranked Reviews and Dina Services are open protocols.

It is currently in technical preview, with more than 10,500 tests backing the application.

Please try it out. And let us build an open protocol, an open network, and an open world.

Try Dina