MANIFESTO · FROM THE FOUNDER · MAY 2026

The release window era is ending.

An honest letter about why mobile development has been broken for fifteen years — why the fix took this long to arrive — and why I built the thing that ends it.

Founder, Ejenix Spring 2026 ♥ Patent in flight
HARDWARE PROOF
Production-grade matrix
Real iPhone & Android arm64
LIFECYCLE SOAK
Continuously soaked
Install · materialize · rollback
LEGAL MOAT
Patent filed
Multi-mode dispatch architecture
YEARS DEEP
Engine layer
Not a wrapper. Not a shim.
I · THE STATUS QUO

The release window is the central organizing fact of mobile engineering.

For fifteen years, mobile development has operated under what I’ll call the release window. You write code. You wait. You wait some more. You wait for Apple. You wait for Google. You wait for the cohort to update. By the time your fix reaches the user, the user has either moved on or churned.

The release window is why we have release captains. It’s why we have hotfix branches. It’s why the on-call rotation dreads Fridays. It’s why a one-line fix budgets five days. It’s why regulated industries treat mobile as a second-class compliance surface. It’s why “mobile-first” companies still treat the web as the place where they actually ship.

We have spent fifteen years engineering around the queue. We will not spend the next fifteen the same way.

The release window is also structurally over. It survived this long because the alternative was hot-loading JavaScript into a WebView, which was worse. But the alternative is no longer hot-loading JavaScript. The alternative is the architecture I’ve spent the last several years building — an engine-layer integration that lets Flutter apps receive native-grade code changes without giving up platform review posture, cold-start latency, or auditor trust.

When that alternative becomes the standard, the release window era ends. I don’t mean it slowly dilutes. I mean every serious mobile-engineering team converges on it within five years and starts asking the same question they started asking about CI/CD a decade ago: “Why is anyone still doing it the old way?”

II · WHY NOW

Three forces are converging. None of them are subtle.

The platforms themselves have been engineering toward it for years. Apple shipped App Thinning. They shipped Code Signing changes that made the security envelope tighter and more granular. They shipped on-device compilation for App Store apps. Google shipped App Bundles. Both platforms have spent the last five years making the bundle smaller, the install faster, and review more granular. The architectural direction is unmistakable: the mobile platform is becoming a substrate for runtime composition. Someone is going to provide the operating layer for that. The platforms themselves won’t — they don’t want the operational liability.

Regulation has caught up to mobile. The EU Digital Markets Act. India’s DPDP Act. Finance authorities in the UK, Singapore, and Australia. Healthcare frameworks in the US and EU. All of them expect bug fixes in hours, not weeks. All of them expect locally-verifiable audit trails, not vendor attestations. None of these requirements fit the release window. The compliance window is closing on the old model right now.

The Flutter ecosystem is at the inflection point. Flutter passed 12% of new mobile app starts in 2025. It’s the only cross-platform framework that ships native code paths without compromising on UI quality. The tooling has matured. And the single most-requested feature in every Flutter survey for three years running has been an OTA story. The category is forming right now. The first credible player to provide an engine-layer OTA for Flutter will define the next decade of mobile shipping.

Any platform engineer who has shipped under regulation, navigated an Apple review queue, and watched their Flutter usage grow knows this is the moment.

III · THE OBVIOUS OBJECTION

“But code-push tools already exist.”

Yes. And every one of them is a wrapper around the same conceptual move: swap one opaque blob for another opaque blob. They treat the patch as a black box. They don’t classify the change. They don’t pick the execution mode. They don’t produce a reviewer-verifiable record of what shipped. They give you speed at the cost of trust — which is exactly the trade your auditor will not let you make.

This is why off-the-shelf code-push tools have lived for years in the “startup demo” corner of the market and never crossed over into regulated mobile. The architecture wasn’t deep enough to be trusted, the operations weren’t signed enough to be audited, and the platform posture was always borrowed, never engineered.

A serious mobile platform should not require a customer to choose between speed and trust. The combination is the whole product.

Ejenix doesn’t end the release window by sidestepping platform review. It ends it by being built deep enough to satisfy platform review — with a classifier, a mode picker, a compliance gate, and a signed record under every operation. That is the difference between a clever bundle trick and an operating layer.

IV · WHAT I BELIEVE

Seven beliefs that shaped the architecture.

Each of these is a design constraint as much as a belief. If the architecture violated any of them, I would have started over. I did, more than once.

01

Mobile development should not be gated on third-party queues.

Apple and Google are excellent platform stewards. They are not your release manager. A platform whose primary failure mode is “your fix is stuck in review” is a platform that has not finished growing up.

02

The execution mode should pick itself.

A customer writing Dart code should never debug AOT versus interpreter versus anything else. They wrote a change; the system decides how to land it safely. The customer never touches the engine.

03

Compliance is the floor, not the ceiling.

Reviewer-safe by default. Auditor-verifiable by design. If the architecture has to argue with platform review, the architecture is wrong. We did the hard work before legal asked.

04

Hardware is the only honest demo.

Anyone can demo on an emulator. Real arm64 hardware, full lifecycle, signed gates, continuous lifecycle validation — or it doesn’t count. Hardware-validated on real iPhone and Android silicon, or we don’t ship.

05

Speed without trust is theater.

Trust without speed is what mobile has now. The combination is the only product worth shipping. Every shortcut to one at the cost of the other is a shortcut we have already refused.

06

The chain is the proof.

Every operation hash-chained, signed, and locally verifiable. A reviewer should not need us in the room. An auditor should not need our cooperation. The math should hold without the founder.

07

The receipts are the product.

Demos are easy. The product is what holds at 38 million live devices, in regulated verticals, on Friday afternoons. The product was never going to be the demo. The product was going to be the receipts.

V · WHAT I REFUSE TO DO

A short list. Non-negotiable.

Every platform with a real architecture is defined as much by what it refuses to do as by what it ships. These are mine.

NO.

I will not ship code to a device I cannot prove is safe.

NO.

I will not put a customer in a position where they have to choose between speed and trust.

NO.

I will not give up the App Store and Play Store posture. Reviewer-safe, or not at all.

NO.

I will not ship a black box. Every operation must be verifiable locally, by anyone.

NO.

I will not compete on price. We compete on architectural depth.

VI · WHAT I BUILT

I went to the engine layer. I stayed for years.

Years deep inside the Flutter engine, the Dart runtime, and the platform code-signing surfaces that decide what a mobile app is allowed to do at runtime. The architecture that came out of it is the one Ejenix ships now — an engine-layer integration where patches do things that off-the-shelf code-push physically can’t do, while staying inside the platform’s review posture by design.

The receipts are concrete and signed. Hardware-validated on real iPhone and Android arm64 silicon. A continuous install / materialize / rollback lifecycle under production-class load. The first system in the category capable of adding genuinely new functions to a running mobile app — not just modifying existing ones. A patent application protecting the multi-mode dispatch architecture is filed. The reviewer disclosure packet is published. The audit chain is locally verifiable, without us.

Everything I claim about Ejenix is something I personally verified on real hardware before letting any customer touch it. Those numbers exist because I refused to ship a product until they did.

This is not a wrapper. It’s not a shim. It’s not a clever bundle trick. It’s a complete operating layer: engine-level integration, a patent-protected multi-mode dispatch architecture, a cohort-aware rollout engine, a boot-loop guard with last-known-good fallback, a tamper-evident audit chain, and a reviewer disclosure packet that platform reviewers can verify on their own laptops. Every layer of the stack. Built deeper than anyone else in the category — and protected at the legal layer too.

VII · WHAT COMES NEXT

The category will consolidate. It always does.

Within twelve months, every serious Flutter team in a regulated vertical will be evaluating engine-layer OTA. Within thirty-six, it will be a default expectation in mobile RFPs. Within sixty, the question won’t be “do you offer OTA” — it’ll be “do you offer engine-layer OTA, or are you still doing it the old way.”

The category will consolidate around one or two winners. That’s how every infrastructure category goes — payments has Stripe, deployment has Vercel, observability has Datadog. The first credible player with the deepest technology, the strongest legal moat, and the longest customer relationships defines the category and rules it for a decade. We intend to be that player.

We intend it because the architecture is already won. The hardware proof is already signed. The patent is already filed. The reviewer disclosure is already published. What’s left is the part of the race that compounds: customer relationships. Each customer makes the next one easier. Each accumulated audit chain raises the switching cost. Each signed reviewer packet builds platform-level trust. We will compound this faster than anyone else — because we started with the architecture they don’t have.

VIII · THE INVITATION

We are looking for the first ten.

Design partners. Mobile platform leads at regulated companies — fintech, healthcare, government, retail with global cohorts — who are tired of the release window and ready to be the first ten companies on the post-release operating layer for Flutter.

The pilot terms are clear. Signed customer logo shared at your discretion. Co-developed compliance documentation. Dedicated solutions engineer. Founder access. We respond inside one business day.

If you’ve read this far, you already know whether this is the operational pain you live with. If it is, write to me directly: withlove@ejenix.com. The next paragraph of this story is one we write together.

We didn’t build Ejenix because OTA is interesting. We built it because the release window is about to break — and someone is going to provide the operating layer for what comes after. We intend that someone to be us.

— Founder, Ejenix · Spring 2026

Ejenix

From the founder

Three doors. Pick the one that matches your patience.

Write to the founder Read the architecture See the proof