WanderReader — Product Spec
A reader you actually own. No DRM. No kill-switch. No Amazon. No surveillance. 7-year parts including the panel.
Status: Stage 10 · Version v1.0-candidate · 2026-04-24 Owner: Michael Eisinger Family: Reading / Knowledge surfaces Device IDs: WV-READ-STD · WV-READ-PRO Ship target: Standard + Pro both 2027-Q3 (parallel ship)
---
1. Mission
In May 2026, Amazon remotely disabled approximately 2 million pre-2012 Kindles via an AWS TLS deprecation that those devices could not update past. Books bought legally became inaccessible. Notes and highlights stranded in proprietary formats. The phrase "we don't really own anything anymore" trended for three weeks. WanderReader is the answer for everyone who said never again.
WanderReader is a 6-inch e-ink ebook reader designed around five charter rules: 1. No DRM by default. Sideload EPUB / PDF / CBZ-CBR / TXT / MOBI / FB2 / DOCX / RTF / HTML / Markdown — formats you can copy, back up, read on any device, and pass down to your kids. 2. No kill-switch. Firmware is signed but not phone-home dependent. The reader works forever offline. Cert-pinning failures degrade gracefully — they NEVER brick the device. Written into the warranty. 3. No Amazon dependency. Send-to-WanderReader replaces Send-to-Kindle. Calibre + OPDS + WanderNode Hub replace Amazon's library cloud. Standard Notes (E2E encrypted) replaces Goodreads for annotation export. 4. No surveillance. Reading habits stay local. No telemetry. No cloud analytics. No "what page you stopped on" snitching. Optional Standard Notes annotation export is the only outbound path and it's E2E user-controlled. 5. 7-year parts including the e-ink panel. When E Ink Holdings deprecates a controller IC, we will have stocked enough spares to honor the commitment for the full window.
Every other design decision below follows from those five rules.
---
2. Who it's for
Primary audiences:
1. The "I refuse to be bricked again" buyer. Direct addressable market = the ~30M people who read the May 2026 Kindle bricking story and felt the pit-of-stomach realization they don't own their library. Conversion rate doesn't need to be high; the audience is large, qualified, and motivated. 2. Privacy-first readers. Reading is one of the most intimate analytic surfaces in consumer technology — what you read, where you stopped, what you highlighted, what you abandoned. WanderReader keeps all of that local. No Goodreads. No Amazon X-Ray cross-correlation. No reading-pace surveillance. 3. Border-crossing / hostile-environment readers. Identity-aware covert library protects readers crossing into hostile jurisdictions (LGBTQ+ content, abortion-access guides, political philosophy, religious deconstruction texts, banned books, transition resources) by hiding a second library behind a duress-PIN. 4. Library + nonprofit deployments. Mission Partner pricing makes WanderReader the cheapest "give me 50 e-readers for the prison literacy program" solution that doesn't require Amazon accounts, doesn't expire, doesn't surveil readers, and doesn't impose DRM. 5. WanderVerse households. Mode 3 with WanderNode Hub gives automatic LAN-side Calibre Server sync. New books on Hub appear on Reader within seconds. No cloud round-trip. The household already running a Hub gets a "Send-to-WanderReader" experience that's strictly better than what Amazon offered. 6. Right-to-repair reading enthusiasts. Aluminum body, T5 Torx back cover, replaceable battery, 7-year parts including the panel, open STLs for accessories. The Framework-Laptop-pattern e-reader.
Who it's NOT for:
- Buyers whose only priority is the cheapest e-reader — Kindle Basic is $109 and is fine for them, with the trust caveat
- Audiobook listeners — v1.0 has no BT audio + no Audible (deliberate scope cut, see §12)
- Comic book / graphic novel readers — v1.0 is monochrome only (color e-ink reconsidered for v2.0)
- Buyers locked into Kindle DRM library who can't migrate — we provide a migration guide, but if they can't migrate, they can't use us
- Tablet users wanting a multi-app reader — Onyx Boox runs Android; we don't (we're 6-week-battery, they're 4-week)
---
3. Tiers
| Tier | Tagline | Price (standard / founding / Mission Partner) | Key delta |
|---|
| **Reader Standard** | "The basics, beautifully. No frontlight, no compromise on what matters." | $179 / $159 / $129 | 6.0" Carta 1300 e-ink; no frontlight; 16 GB; 1500 mAh / ~6wk; cream aluminum chassis; page-turn buttons |
| **Reader Pro** | "Frontlight, warm light, more storage, longer battery. Same charter rules." | $279 / $249 / $199 | 6.0" Carta 1300 e-ink; **24-LED warm+cool frontlight**; **32 GB**; **2000 mAh / ~8wk**; same chassis + page-turn buttons |
The chassis is identical between tiers — same machined cream anodized aluminum slab, same chamfered edges, same recessed page-turn buttons, same USB-C, same saffron pinstripe along the top bezel. Pro adds the frontlight stack (24-LED bar + light guide + diffuser, OCA-bonded) + upgraded battery + doubled storage. That preserves shared tooling, shared STLs, shared Ambassador training curriculum, shared service flow.
Mission Partner pricing requires verified 501(c)(3) status, HAVEN deployment, LGBTQ+ clinic, DV shelter, public library, prison-reading program, immigrant literacy program, refugee resettlement nonprofit, or Ambassador-voted grant eligibility.
---
4. Hardware platform
Primary silicon
| Component | Choice | Library reuse | Why |
|---|
| SoC | **ESP32-S3-WROOM-1** with 8MB PSRAM | YES (5+ products) | Power-sipping (deep sleep <50µA → 6-week battery), integrated WiFi 4 + BLE 5.0, FCC modular cert passthrough, ~$3.50/unit at 1k volume |
| Power management | **TI TPS65086100** PMIC | YES (5+ products) | Multi-rail: 3.3V SoC + 1.8V flash + e-ink panel rails (positive + negative + boost for waveform generation) + 5V boost for USB-C |
| Battery charger | **TI BQ25180** | YES (3+ products) | Single-cell linear charger, integrated fuel gauge, well-vetted across the catalog |
| RTC crystal | **Epson FC-135** 32.768kHz | YES (3+ products) | Low-power RTC for sleep timer + wake scheduling |
| Main crystal | TXC 26MHz | NO (commodity) | ESP32-S3 reference clock |
| E-ink controller | **IT8951** (Solomon Systech, integrated on Carta 1300 timing controller) | NO | Standard for 6" e-ink panels; ESP32-S3 drives via parallel + SPI |
| Storage flash | Macronix MX25L25635F 32MB NOR (Standard) / 256MB SPI flash (Pro) | YES on 32MB | Library + book metadata + UI assets |
| Storage eMMC | Kioxia 16GB eMMC 5.1 (Standard) / 32GB (Pro) | NO (commodity) | User library |
Display
- Panel: E Ink Carta 1300 6.0" 1448×1072 (300 ppi), glass-free flex carrier
- Refresh: 350ms typical full refresh, ~120ms partial (for page turns); 16-level grayscale
- Drop-tough: flex carrier survives 1m drops onto hardwood (vs glass-substrate panels which crack at ~30cm)
- Backup panel: E Ink Carta 1200 qualified as fallback if Carta 1300 supply constrained at PVT — same form factor, slightly slower refresh, slightly less contrast
Frontlight (Pro tier only)
- 24-LED bar along top edge of panel (12 warm white 2700K + 12 cool white 6500K, alternating, independent PWM channels)
- LED choice: Lumileds LUXEON 3014 (multi-source via Cree, Osram, Samsung) — white-light variants
- Light guide: acrylic, OCA-bonded to back of e-ink panel
- Diffuser: uniformity layer above LEDs
- Driver: TPS61169 boost driver + ESP32-S3 GPIO PWM (one channel per warm/cool pair)
- Range: 0-100% software brightness, 0-100% warm/cool blend, software color-temp curves (sunrise to sunset presets)
Input / output
- USB-C (Amphenol 12401610E2): bottom-center, USB 2.0 high-speed, mass-storage mode for sideload, charging at 5V/2A — library reuse from 3+ products
- Page-turn buttons (TE Connectivity 1825910-6, library reuse): 2× recessed tactile on right edge, machined aluminum caps default, 1M+ cycle rated
- Power button (TE same family): bottom-right, single-press wake / 3s-hold sleep / 10s-hold force-off
- Reset pinhole: back cover, paperclip access
- No physical home button — touch UI on the e-ink panel handles navigation; minimalist exterior matches the image
- No microSD slot — preserves case waterproofness + thinness; 16/32GB exceeds addressable buyer's needs
Connectivity
- WiFi 4 (802.11n 2.4 GHz) via ESP32-S3 integrated radio — sufficient for OTA + Calibre Server sync + OPDS browsing; WiFi 6 unnecessary for an e-reader
- BLE 5.0 via ESP32-S3 — for BT keyboard pairing (Pro tier supports keyboard-as-input for note-taking and library search)
- No cellular — reading happens at home, on the train, in bed; cellular would add $150 BOM + cert burden for negligible benefit
- No NFC — no payment use case, no cert-cost benefit
Power
- Battery: Li-ion pouch, replaceable
- Standard: 1500 mAh (Samsung / Sony / LG via multi-source distributor)
- Pro: 2000 mAh (same supply chain)
- Battery life:
- Standard typical: ~6 weeks (30 min/day reading, no frontlight)
- Pro typical: ~8 weeks (30 min/day reading, frontlight at 30%)
- Edge case heavy: 3 weeks Standard / 4 weeks Pro
- Charging: USB-C PD compatible (5V/2A nominal; 9V/15W if PD adapter present); empty-to-full in ~3 hours
- Cycle life: 1500 cycles to 80% (industry standard); replaceable at year 4-5
- Solar charging: none — out of scope for indoor-primary device
Enclosure
- Material: 6061-T6 aluminum, CNC-machined from extrusion
- Finish: matte cream anodized (#F7F5F1 per WanderVerse visual identity)
- Dimensions: 160mm × 110mm × 8mm (slab proportions match the image)
- Weight: 175g (Standard) / 195g (Pro)
- Edges: precision-machined chamfered (matches the image)
- Saffron pinstripe: along the top bezel only — Type II Class 2 sulfuric anodize accent (#d99a2b), single visible saffron element per WanderVerse family-mark rule
- No visible wordmark. Only branding is the Ambassador signature inside (under the back cover)
- Service panel: entire back cover comes off with 4× M1.4 captive T5 Torx screws
- Fastener discipline: no proprietary fasteners, no glued structural joints
- IP rating: IPX4 (splash-resistant — not submersible). Mostly because we do not want to bond glass over the e-ink panel (inflexible, drop-fragile, anti-repair). The flex panel + matte aluminum chassis tolerate splashes + rain; we do not market as IPX8.
- Optional accessories: charcoal black leather book-style cover with cream contrast stitching (matches the image); vegan microfiber alternative; felt+leather sleeve; rigid travel case
---
5. Software
WanderReaderOS
- Base firmware: WanderReaderOS = KOReader-derived fork on ESP32-S3 (Xtensa LX7) + LVGL UI overlay + WanderVerse identity-aware layer
- License: MIT-equivalent — same as upstream KOReader
- Source: public on GitHub, signed releases, build-from-source documented
- Boot chain: ESP32-S3 secure boot v2 (signed bootloader) → KOReader fork (signed) → user library (unencrypted by default; per-library encryption available for Library 2 covert library)
- Bootloader unlock: documented procedure for users who want to flash custom firmware. Unlock wipes user data (so a forensic adversary cannot unlock-then-recover). Custom firmware works fully; warranty on firmware-related issues lapses if unlocked.
Format support (v1.0)
- EPUB 3.x — primary format, full CSS support, embedded fonts, footnote inlining
- PDF — text reflow + zoom + scroll modes, table of contents, annotation
- CBZ / CBR — comics, manga (monochrome optimized; color comics readable but not optimal)
- TXT — plain text, paragraph reflow
- MOBI — sideload-only (no Kindle DRM support)
- FB2 — common Russian-format e-book
- DOCX — converted on-device via libre-licensed converter
- RTF / HTML / Markdown — rendered
DRM (charter rule — none)
- No Adobe ADEPT support — charter rule
- No Kindle KFX/AZW3 support — charter rule
- No Apple FairPlay — irrelevant
- Adobe ADEPT debate: v1.1 may add ADEPT support IF we can do it in a way that doesn't compromise the no-kill-switch architecture (i.e., we will likely never add it; library DRM is itself a kill-switch). Charter amendment required before v1.1 ships ADEPT.
Library management
- Local library (default): browse by collection / tag / author / title / recent / not-yet-read
- OPDS catalog browsing: any open or password-protected OPDS server (Calibre Server, Standard Ebooks, Project Gutenberg, public library OverDrive-replacement OPDS endpoints if user has them)
- Calibre Server sync (Mode 3 with WanderNode Hub): automatic LAN-side library sync; new books on Hub → on Reader within seconds
- Send-to-WanderReader email gateway (Mode 2, optional):
@wanderreader.io receives EPUB / PDF / DOCX, encrypts at rest with user's public key, Reader pulls when on WiFi
- USB-C sideload (Mode 1, default): plug into computer, mass-storage mode mounts library volume, drag + drop
Annotation + notes
- Highlights: color-coded (visualized as light-medium-dark gray on monochrome panel)
- Notes: typed on touch keyboard or BT keyboard (Pro)
- Bookmarks: unlimited per book
- Export formats:
- Markdown via USB-C (default; universal; plain text with metadata)
- Standard Notes E2E sync (optional; user provides Standard Notes account)
- Direct OPDS write-back (rare; advanced users)
- Goodreads integration: none. Deliberate. The post-Goodreads alternative is federated reading log on Mastodon (optional, opt-in).
Reading log + privacy
- Local-only by default — pages-read-today, time-spent-reading, books-finished-this-year all stored on device
- Optional federated reading log (Mastodon-style) for users who want to share their shelf with a privacy-respecting community without Amazon owning the social graph
- No cloud telemetry — we do not phone home with reading metrics, ever
- No reading-pace correlation — your reading speed is not data we store, transmit, or analyze
Voice + accessibility
- Text-to-speech: local-only via Piper (open-source TTS engine) — reads to BT headphones
- Note: this is the closest we get to "audiobook playback" in v1.0; it's TTS-of-EPUB, not Audible-style narration
- Dyslexia-friendly fonts: OpenDyslexic + Atkinson Hyperlegible bundled by default
- Adjustable line spacing + character spacing + margin — full typography controls
- Screen reader for menus: TalkBack-compatible accessibility tree
- High-contrast UI mode
OTA updates
- Optional, user-triggered. Never automatic. Never required.
- Signature-verified locally; no required server check
- Last-known-good firmware on backup partition (auto-revert on boot failure)
- Custom OTA endpoint configurable (point at user-controlled server)
Platform-standard: WanderReader complies with the WanderVerse charter — privacy, identity-aware, dual-mode, no kill-switch, 7-year parts.
---
6. Identity-aware features
Covert Library (the marquee identity-aware feature)
For users where casual inspection of the device is a real threat:
- Default boot mounts Library 1 (curated benign fiction, looks like a normal e-reader)
- Long-press cover icon for 5s + enter PIN to switch to Library 2 (the user's actual library — may include anything: queer theory, abortion-access guides, political philosophy, religious deconstruction texts, banned books, transition resources)
- Library 2 contents do NOT appear in Library 1 search, recent reads, or library lists — partition-level separation
- Three PIN modes:
1. Standard PIN — reveals Library 2 2. Duress PIN — looks like a wrong PIN; locks device into Library 1 mode for 4 hours; cannot be overridden until timeout 3. Wipe PIN — instantly crypto-erases Library 2 partition; appears to forensic inspection as if Library 2 never existed
- Switch back to Library 1 is automatic on idle timeout (configurable, default 5 min)
Quiet Mode
For households where a visible status LED is unsafe — not applicable to WanderReader v1.0 because the device has no status LED. The device is silent by default. (This is a unique property of e-ink readers — they don't have always-on indicators that leak status.)
Duress PIN integration with WanderVerse ecosystem
- WanderBand silent panic → triggers Reader to switch to Library 1 + lock for 4 hours
- WanderDash covert mode → if Reader is paired with a Dash on the same household, Dash covert-mode trigger automatically lock-flips Reader to Library 1
- WanderNode Hub identity-aware default → first-boot pairing imports user's privacy posture (max-privacy default)
Trust-contact-only sharing
- Annotation export is opt-in per Standard Notes account — user explicitly enables
- Mastodon reading log is opt-in per server — user explicitly chooses where to publish
- Calibre Server sync is per-Hub — user pairs each Hub explicitly
- No path exists to share data without explicit user opt-in. Period.
Advisory review (required pre-EVT)
Stage 10 gate blocks until completion of advisory-panel review with:
- HAVEN deployment team (DV survivor + safehouse practitioners)
- Trans community advisors (border-crossing experience)
- Immigrant rights advisors (ICE encounter experience)
- Prison literacy partners (incarcerated reader experience)
- Legal counsel (review of "what is plausible deniability" by jurisdiction)
---
7. Dual-mode architecture
Mode 1 — Standalone
The reader works the moment you power it up. No account, no internet, no external dependency.
Sideload your library via USB-C (mass-storage mode), read EPUB / PDF / CBZ / TXT / MOBI / FB2 / DOCX / RTF / HTML / Markdown. Set up a covert library. Use the dictionary. Highlight, take notes, export to markdown via USB-C. Charge via any USB-C cable. Battery lasts weeks. The reader works without ever joining a WiFi network.
This is the default experience. ~30% of buyers will live entirely in Mode 1.
Mode 2 — Industry-integrated
The reader works with the standards you already use:
- Calibre (open-source library manager) — USB-C sideload + wireless sync if you run Calibre Content Server on your desktop
- OPDS — browse any open or password-protected OPDS server (Standard Ebooks, Project Gutenberg, your private nginx-hosted OPDS catalog, public library OPDS endpoints where they exist)
- Send-to-WanderReader email gateway — drop-in replacement for Send-to-Kindle, fully E2E
- Pocket / Wallabag — read-later integration (sync articles, read on-device, mark read, sync back)
- Standard Notes — annotation export (E2E encrypted, user-controlled)
- Mastodon-style federated reading log — optional, opt-in shelf-sharing without Amazon owning the social graph
- OverDrive / library lending — supported via OPDS endpoints where libraries publish them; Adobe ADEPT NOT supported (charter rule), so DRM-encumbered library books require user de-DRM workflow on desktop before sideload
Mode 3 — WanderVerse-native
Pair with a WanderNode Hub and:
- Calibre Server runs on Hub — Reader auto-syncs library over local WiFi within seconds of new book arriving on Hub
- Identity-aware defaults — first-boot pairing imports user's WanderOS privacy profile from Hub or WanderBand; covert library, max-privacy defaults inherited
- Cross-product behavior:
- WanderBand silent panic → Reader auto-switches to Library 1 + locks for 4 hours
- WanderDash covert-mode → if Dash and Reader are on the same household, Dash covert-mode trigger lock-flips Reader to Library 1
- WanderRouter privacy posture → if Router is in "high privacy mode" (e.g., entering hostile network), Reader stops Calibre sync until posture clears
- Send-to-WanderReader gateway runs on Hub (advanced users) — full self-hosted email-to-Reader pipeline, no WWP infrastructure dependency
---
8. Repair & open hardware
Seven-year parts commitment
Every spare part for WanderReader is available from ship date (2027-Q3) for at least seven years (until 2034-Q3+), via the Ambassador network, at cost + 10%. Including the e-ink panel.
What "parts" means:
- The e-ink panel module (Carta 1300 with backup Carta 1200)
- The frontlight assembly (Pro tier — LED bar + light guide + diffuser as a single replaceable module)
- The mainboard PCB
- The battery (Standard 1500 mAh, Pro 2000 mAh)
- The case (front + back covers, separately)
- The chamfered side rails
- The page-turn button switches + caps
- The USB-C connector
- The internal PCB-to-panel flex cable
- Every fastener (M1.4 T5 Torx screws)
- The leather + sleeve covers (accessory line)
What "parts" does NOT mean:
- Battery cells past their 1500-cycle rated life (sourced as commodity Li-ion pouches even after our stocked supply runs)
- USB-C cables (commodity item; users source from any aftermarket)
- 3D-printed accessories (publishe STLs let users print their own)
At year 8: we publish full schematics + every STL + KOReader fork source as fully open under MIT/CC-BY-SA. You are not dependent on us in perpetuity.
User-DIY service categories
| Category | Cost | Tool | Time |
|---|
| Battery replacement | $25 + shipping | T5 Torx | 8 min |
| Page-turn button cap swap | $5-15 (depending on material) | none (snap-fit) | 30s |
| Cover swap (color or material) | $30-60 (depending on accessory) | none | 0s |
| E-ink screen protector overlay | $12 | none | 60s |
| OTA firmware update | $0 | none | 5 min |
| Custom firmware flash | $0 (advanced) | USB-C cable | 30 min |
Ambassador-only service
| Category | Cost | Turnaround |
|---|
| E-ink panel replacement | $45 panel + $25 service + shipping | 5 days |
| Frontlight assembly replacement (Pro) | $35 frontlight + $25 service + shipping | 5 days |
| Mainboard repair / replacement | varies + $25 service + shipping | 5-7 days |
| Cosmetic refresh (anodize redo) | $35-60 + $25 service | 7-10 days |
See SERVICE-FLOW.md for the full repair tier matrix.
---
9. Ambassador assembly
Tier of certification: Tier 1 (consumer assembly)
8-hour Ambassador training curriculum + 2 hours specialized e-ink lamination training + 3 hours frontlight bonding training (Pro tier only). Total ~13 hours for a full WanderReader-certified Ambassador.
Station investment
~$800 incremental over a baseline WanderVerse Ambassador station:
- Lamination jig (for e-ink panel + frontlight bonding): ~$300
- Frontlight alignment fixture: ~$200
- Light leak-test light box: ~$150
- Pressure-test rig (for panel-to-cover-glass mating): ~$150
A full Ambassador station serving WanderReader (and WanderDash + WanderBand sharing) costs ~$5-7k total.
Per-unit assembly time
- Standard: 30 minutes typical
- Pro: 35 minutes typical (frontlight bonding + alignment adds ~5 min)
- Lux Ambassador signature option: +5 minutes for hand-engraved glyph plate
- Throughput: one Ambassador can assemble 14-16 Standard or 12-14 Pro units per day at DVT yield
The Signature Mark
Every assembled WanderReader carries an engraved or stamped signature of the Ambassador who built it, located on the inside surface of the back cover (visible only when the back cover is removed for service). The signature includes:
- Ambassador ID (pseudo-random alphanumeric)
- Assembly date
- Unit serial number
- Station calibration reference number
The Mark is permanent — etched into the aluminum cover via laser. It survives re-anodization. It cannot be tampered without destroying the cover.
At refurbishment
When a unit returns for Ambassador refurb, a second signature is added beneath the first. Provenance accumulates. The device's service history is physically readable.
See SERVICE-FLOW.md for full refurb decision matrix.
---
10. Community Pool
Every sale of WanderReader is divided three ways:
- 60% pays the Ambassador who assembled the unit — a living wage for skilled hardware assembly work, paid on an hourly basis with a per-unit bonus structure.
- 10% seeds PrideFund, a community-held high-yield savings account that accrues interest for Ambassador-voted initiatives.
- 30% funds the WWP Community Pool — the 501(c)(3) nonprofit arm (Wandering With Pride Inc). Pool funds are subject to the 60%/35% charter rule: Layer 1 operations claim ≤65% of a year's inflow, Layer 2 Ambassador-voted community programs receive ≥35%. Programs funded by the pool include LGBTQ+ scholarships, device donations to survivors and undocumented users, translator-community grants, and harm-reduction device reach.
Marquee Community Pool program for Reader: book donation matching. For every Reader sold at Mission Partner pricing to a prison-reading program / immigrant literacy nonprofit / DV shelter, the Pool funds a starter library of 100 DRM-free public-domain + open-license titles per device, curated by community + literacy advisors.
None of these go to Michael Eisinger personally. Founder compensation is a W-2 salary from Eisinger Holdings LLC, bounded by a public-posted cap tied to living-wage calculators for the founder's geography.
A quarterly transparency report publishes Community Pool inflows and outflows, Ambassador wages paid, devices manufactured, compliance certs in flight, books funded for Mission Partner programs, and an anonymized aggregate covert-library-feature-activation count.
---
11. Visual identity
Render brief — WanderReader Pro on bedside table
Studio product photograph of WanderReader Pro — a 6-inch e-ink ebook reader in a slim slab form factor, approximately 160×110×8mm. Matte cream anodized aluminum body (#F7F5F1) with precision-machined chamfered edges. Two recessed tactile page-turn buttons on the right edge. USB-C connector on the bottom. A single saffron pinstripe (#d99a2b) running along the top bezel as the only visible saffron element. No visible wordmark. The e-ink display shows a page from a novel — clean serif typography on a paper-white background. Accompanying optional accessory: a charcoal black book-style leather cover with cream contrast stitching, opened slightly to reveal the device. Seamless slate blue-gray backdrop (#2A3042 gradient to warmer #3A4258 upper-left), warm editorial rim light from upper-left with soft saffron-amber highlights on case edges, three-quarter front angle 5 degrees above horizon. Reference aesthetic: Teenage Engineering OP-1 × Nothing × Muji × the long-discontinued Kindle Oasis aluminum body × Kobo Libra Colour. Camera: Sony full-frame 90mm macro, f/5.6, tack-sharp. Commercial product photography, magazine-polish editorial. 16:9 landscape. Generous negative space. No brand logos, no text overlays, no watermarks.
Photography rules
- Single saffron pinstripe = the only visible saffron element (per WanderVerse family-mark rule)
- Matte finish only — no glossy reflections off the cream aluminum
- Chamfered edges catch the warm rim light in a soft saffron-amber highlight
- E-ink display shows real readable type (not lorem ipsum) — picks readers up emotionally
- Leather cover (when shown) demonstrates the "book-like" intent — the device is a book that doesn't run out of pages
What we never ship
- A black aluminum variant in v1.0 — the saffron pinstripe disappears against black
- A glossy finish — defeats the matte family standard
- A wordmark — no exterior branding on any WanderVerse product
- RGB lighting — there is no light on the WanderReader exterior at all
- A glass-backed variant — flex panel + matte aluminum is the spec
---
12. Anti-patterns (what we won't do)
1. We won't ship DRM support by default. Charter rule. Adobe ADEPT debate is open for v1.1 but the bias is no. 2. We won't ship a kill-switch. Cert pinning + signed firmware is local. Device works forever offline. Written into the warranty. Period. 3. We won't ship telemetry. No reading-pace tracking, no abandonment metrics, no "what page you're on" sync to a cloud, no Goodreads-style social graph. 4. We won't ship audiobook playback in v1.0. TTS-of-EPUB via Piper is the closest we get; Audible-style narration is out of scope. Reconsider for v2.0 if audiobook listener segment is actually a meaningful WanderReader-buyer overlap (we suspect it isn't). 5. We won't ship color e-ink in v1.0. Color is too slow, too expensive, too washed-out in 2026. Reconsider for v2.0 (2029-2030) when Kaleido 4 or successor closes the gap. 6. We won't ship a microSD slot. Compromises waterproofness + thinness + repair-flow. 16/32GB is enough.
---
13. Open questions for next iteration
1. Adobe ADEPT support for v1.1? — would unlock library lending (OverDrive) and Adobe-DRM-protected indie publisher catalogs. But ADEPT itself is a kill-switch (Adobe controls activation). Charter amendment required. Bias: no. 2. Color e-ink Reader Color SKU for v2.0? — depends on Kaleido 4 / E Ink Spectra performance + cost in 2029. Track quarterly. 3. 7-inch Reader Pro+ SKU for v2.0? — fills the gap left by Kindle Oasis discontinuation + Kobo Libra Colour. Would require new chassis tooling. Track interest. 4. WanderReader Mini (5" pocket reader)? — ergonomic outlier; useful for transit; probably NOT addressed for v1.0 / v2.0. 5. Audiobook playback for v2.0? — depends on user-research finding that the WanderReader-buyer audience overlaps meaningfully with the audiobook-listener segment. Bias: probably not unless data says otherwise. 6. Federated reading log (WanderShelf?) — Mastodon-style alternative to Goodreads. Would launch as a separate WanderVerse product with WanderReader integration as its anchor. 7. WanderReader for K-12 schools? — Mission Partner pricing + curated educational title libraries. Would require dedicated MDM-style fleet management. Reconsider 2028+.
---
End of WanderReader spec v1.0-candidate. Charter-locked. Five thesis points (no DRM, no kill-switch, no Amazon, no surveillance, 7-year parts including the panel) require charter amendment to weaken. The image already exists; this spec matches it.
Cross-reference:
_MANIFEST.md — family scope + stage log
DECISIONS.md — full decision log
_COMPETITIVE-AUDIT-2026-04-24.md — vs Kindle / Kobo / Onyx / PocketBook
_VALIDATION-AND-SENSOR-EXPANSION.md — panel + frontlight + KOReader validation
BOM-platform.csv / BOM-modules.csv / BOM-normalized.csv / SOURCING.csv
CONFIGURATOR.md / COMPATIBILITY.md / DFM-DFA-DFT.md / THERMAL-EMC.md / COMPLIANCE.md
GUIDE.md / HW-FW.md / SERVICE-FLOW.md / GATE.md
STL-OPEN-FILES/README.md