Omarchy: Exposed

Checked 13 October 2026

Money

On 13 October 2026 the homepage said $23,500,000 pledged to the Omacom Foundation. The foundation launched on 21 August 2026 at $8 million. The number is a pile of promises: one-time gifts, three-year corporate commitments, and model tokens priced by the donors. What a company logo on that wall is attached to is collected in For the logo.

What the number counts

DHH announces each new patron on the Omarchy news blog and the homepage counter moves. The Register, writing on 17 September 2026 when the published total was about $18.5 million, noted that the figure includes multi-year commitments and AI tokens. The project's own posts confirm the mix:

A pledge of $1 million a year for three years is entered as $3 million today. A gift of tokens is entered as dollars today. The small-donor tiers on the patrons page ($16, $256, $2,048, $8,192) are real money from a long list of individuals. They are not what moves the counter. The homepage caption under the portraits says the billionaires, millionaires, and corporations fund "the lion's share."

The project says it intends to spend what it raises, on a three-year horizon. That is a choice. The headline is a spending plan attached to names. The patrons page does not publish a financial statement or a bank balance.

The wall

Founding patrons, at the $1 million tier the homepage states, have included Tobi Lütke (Shopify), Patrick Collison (Stripe), Michael Dell (Dell Technologies), Jack Dorsey (Block), Matthew Prince (Cloudflare), Brendan Iribe (Sesame), Jason Fried (37signals), Drew Houston (Dropbox), Peter Steinberger (OpenClaw), Brian Armstrong (Coinbase), Yunjie Dai (TapTap), and DHH (37signals). Later corporate and token names on the same page include Meta Superintelligence Labs, DigitalOcean, Alibaba Cloud, SpaceXAI, 1Password, 37signals again, OpenAI, Fireworks, OpenRouter, OrcaRouter, Namespace, and Four Technologies. The page changes. The patrons page is the current list.

37signals appears three times in that story. Jason Fried pledged as a founding patron. DHH pledged as a founding patron. 37signals, the company the two of them own, pledged $100,000 a year for three years as a distinguished corporate patron. DHH's Hyprland announcement thanks 37signals for earlier sponsorship and adds "hello self!"

Tobi Lütke is a founding patron and, on the homepage, a member of Omarchy Core, the group that "sets the direction." DHH sits on Shopify's board. The person who writes the doctrine, the chief executive of the company that employs a large part of Rails Core, and the co-founder who wrote the Basecamp speech rules are all on the same wall. The doctrine's name for this arrangement is a benevolent dictatorship. The homepage's name for the donors is the oligarchy.

Elite capital. Public code.

oligarchy.fyi is one line: "Elite capital. Public code." It links back to Omarchy. The doctrine points at it from the word "billionaires." The patrons page prints the same line under DHH. The QA harness ThePrimeagen brought with him in September 2026 is also named Oligarchy. The joke is theirs, repeated until it is the brand.

The project's posts say a patron does not buy a feature. Recognition is the product: a portrait, a tier, a sentence in the news. That is a coherent offer. It is also the offer. The MIT license means a stranger can fork the scripts. The trademark, the homepage, the default apps, and the decision about what "Omarchy" means sit with the foundation and with the person the doctrine describes.

What the announcements say the money buys

Arch Linux is the distribution the manual calls the underlying system. The published spending posts name Hyprland, Quickshell, mise, Omarchy's own kernel work, Omarchy's infrastructure, and Omarchy's contests. They do not name a grant to Arch. The packages that make the ISO boot are still Arch's packages.

The project's posts say a patron buys recognition: a portrait, a tier, a sentence in the news. The homepage places those portraits under "Backed by the oligarchy." The consideration on offer is the sponsor's name, printed in public. The table names that sponsor, then the facts now attached to the name. A person in the sponsor column means the pledge this page can document is the person's. The company after the person is the affiliation the homepage prints.

Corporate pledges this page can document are 1Password, 37signals, DigitalOcean, Alibaba Cloud, SpaceXAI, Namespace, Meta Superintelligence Labs, and the other token names on the wall (OpenAI, Fireworks, OpenRouter, OrcaRouter, Four Technologies). Stripe, Dell Technologies, Dropbox, Block, Cloudflare, Coinbase, TapTap, Sesame, and Shopify appear because a founder or an executive pledged as a person, or sits on Omarchy Core. The homepage prints the affiliation either way. 37signals is the founders' own company. The rows below are the ones an outside counsel, a communications lead, or a board is looking at. The documents in front of them are the patron page, the manual, the changelog, and the posts.

Risk Sponsor Public facts now attached to the sponsor's name
REPUTATION Every patron the foundation has announced. Corporate pledges: 1Password, 37signals, DigitalOcean, Alibaba Cloud, SpaceXAI, Namespace, Meta Superintelligence Labs, OpenAI, Fireworks, OpenRouter, OrcaRouter, Four Technologies. Individual pledges printed with an employer: Tobi Lütke (Shopify), Patrick Collison (Stripe), Michael Dell (Dell Technologies), Jack Dorsey (Block), Matthew Prince (Cloudflare), Brendan Iribe (Sesame), Jason Fried (37signals), Drew Houston (Dropbox), Peter Steinberger (OpenClaw), Brian Armstrong (Coinbase), Yunjie Dai (TapTap), DHH (37signals). The London essay is dated 15 September 2025. The wolves post is dated 21 July 2026. The foundation did not exist until 21 August 2026. Both posts are older than the foundation, and older than every pledge it has announced. The sentence he published: "When wolves get out of control, you shoot them. When gypsies take over public spaces, you deport them. This isn't hard, it isn't cruel. It's the basic logic of self-preservation." The record page has the London fractions, the Tommy Robinson lines, and the titles 1Password's customers circulated on the company forum.
REPUTATION 1Password, whose chief executive and paying customers already answered. Still listed after that: 37signals, DigitalOcean, Alibaba Cloud, SpaceXAI, Namespace, Meta Superintelligence Labs, OpenAI, Fireworks, OpenRouter, OrcaRouter, Four Technologies. Anthropic left the token list. It is not a current patron. Two peers have already answered, in opposite directions. 1Password pledged on 31 August 2026, $100,000 a year for three years. Chief executive David Faugno then told employees the company "does not condone hateful, dehumanizing, or exclusionary opinions, including those DHH is publicly sharing." Romea.cz attributes that sentence to internal mail The Verge acquired. The logo stayed. Anthropic was on the 3 September token list and gone by the morning of 18 September. The Register compared the archived announcement with the live page. The coverage does not explain the removal. The counter kept rising. A company that stays has the same internal sentence available to it, and the same exit Anthropic used.
REPUTATION The corporate pledges: 1Password, 37signals, DigitalOcean, Alibaba Cloud, SpaceXAI, Namespace, Meta Superintelligence Labs, OpenAI, Fireworks, OpenRouter, OrcaRouter, Four Technologies. 37signals is the company whose Basecamp subscription Duke ended. Institutions have already paid to leave his orbit, before this foundation existed. Mike Perham withdrew Sidekiq's $250,000-a-year sponsorship of Ruby Central because RailsConf platformed DHH. Duke University Libraries dropped Basecamp after almost a decade and published the reason. Both are on the record page. A 2026 corporate patron is making the association those two already paid to end.
REPUTATION The whole wall. The Hyprland post is dated 21 August 2026, with the launch, and the sponsorship runs for years. Later pledges fund the same deal: 1Password, 37signals, DigitalOcean, Alibaba Cloud, SpaceXAI, Namespace, Meta Superintelligence Labs, OpenAI, Fireworks, OpenRouter, OrcaRouter, Four Technologies, and the individual portraits. The first spending post the foundation published is an exclusive, multi-year sponsorship of Hyprland's author, Vaxry. In April 2024 freedesktop.org banned him after a conduct dispute. Drew DeVault's writeup of the published email thread includes a threat of legal action against the conduct team. The Omarchy announcement called him "the most cracked Linux kid in Poland" and added that the deal does not include help getting him a girlfriend. The doctrine, in the same season, drops codes of conduct. Sponsor money is what that announcement spends. The quotes are on the security page.
PRODUCT Every name on the wall, because the logo sits on this operating system. The token pledges are the ones the 3 September post ties to the agents: Meta Superintelligence Labs, OpenAI, Fireworks, OpenRouter, OrcaRouter, and later SpaceXAI's Grok tokens. 1Password sells secrets. DigitalOcean and Alibaba Cloud are hosting companies. Namespace pledged compute. The security manual still says Omarchy takes security extremely seriously, and that losing a laptop cannot lead to a security emergency. The same chapter documents passwordless sudo, 15 minutes by default and up to 1,440, most often so an AI agent can do system work. While the switch is on, anything running as the user can do anything as root. On 25 August 2026, version 4.0.1 fixed a video title that became a shell command, a notification click that ran a shell string, a USB device name executed as Hyprland Lua, a theme install that could run code, and a default docker group that meant root from 1 June 2025 through ISO 3.8.4. Plugin terms say third-party plugins run as unsandboxed code and that automated checks are not a security audit. Menu launches run in don't-stop-to-ask modes. The 4.0.1 commit leaves Grok on bypassPermissions. On 3 September 2026 DHH wrote that Quattro was almost exclusively built by agents because they are good at bash, and that the token pledges exist so the agents can keep going. The bash is the 4.0.1 list. The security page has each pull request.
PRODUCT 1Password. SpaceXAI. DigitalOcean. Alibaba Cloud. 1Password sells the claim that secrets stay secrets. Marius's inventory of a 3.x install lists 1Password among the default menu entries, beside Basecamp and HEY. This page does not claim the 4.0.4 menu still ships that icon. Customers of the password manager already treated the gift as a product statement, on the company's own forum, and they attached the security writeups. SpaceXAI's founding corporate pledge on 8 October 2026 is $1.5 million in Grok tokens. The commit that narrowed Claude and Codex leaves Grok on bypassPermissions. DigitalOcean announced $1 million a year for three years on 9 September 2026, twelve days after the 0xcc writeup of the docker-group root path. Alibaba Cloud matched that $3 million shape on 22 September 2026, after 4.0.1 and after Faugno's sentence had been reported.
PRODUCT Matthew Prince, as a person. Cloudflare is the employer printed beside him, and the product named in the manual. This page has no corporate pledge from Cloudflare. Matthew Prince pledged as a person. Cloudflare the network appears in the security chapter as one of five items under "takes security extremely seriously." The item is a DDoS shield in front of the ISO and package hosts. The sentence above it is about a lost laptop. A company that sells infrastructure protection has its product counted as a laptop-security claim.
GOVERNANCE Every corporate pledge: 1Password, 37signals, DigitalOcean, Alibaba Cloud, SpaceXAI, Namespace, Meta Superintelligence Labs, OpenAI, Fireworks, OpenRouter, OrcaRouter, Four Technologies. The Basecamp rule in this row was imposed by Jason Fried and DHH, the two founders behind the 37signals pledge. The doctrine says Omarchy is a benevolent dictatorship, one person makes the call, and codes of conduct are out. The replacement line is "Just be nice and sincere." A corporate sponsor gets no seat and no veto over the next post. The record page is what the public posts have looked like since 2021, including the Basecamp rule Jason Fried and DHH imposed after employees objected to a list of customer names.
GOVERNANCE Every patron whose name was bought as recognition. Same corporate pledges and the same individual portraits as the first row. The code is MIT. The Omacom Foundation holds the trademarks and the name. A fork can keep the scripts. The brand the sponsor paid to appear on stays with the foundation and with the person the doctrine describes.
GOVERNANCE The corporate pledges, the names a board, a works council, or an outside shareholder would be asking about: 1Password, 37signals, DigitalOcean, Alibaba Cloud, SpaceXAI, Namespace, Meta Superintelligence Labs, OpenAI, Fireworks, OpenRouter, OrcaRouter, Four Technologies. The patrons page publishes no financial statement and no bank balance. A three-year pledge is added to the homepage counter on the day it is announced. A gift of tokens is entered as dollars, at the donor's price, the same day. A board, a works council, or an outside shareholder who asks where the wire went can be shown a portrait.
LEGAL 1Password. The document in public is the logo. 1Password's condemnation of the posts exists, in the reporting, as internal mail. The patron page kept the company. The Verge already acquired that mail. The customer thread, the employee note, and the reporter are the channels this pledge has already traveled. A filed case is not among the sources on this site. The page a journalist has already used is the homepage, with the name still on it.
LEGAL The pledges that fund the Hyprland deal. Same names as the Hyprland row above: the corporate pledges and the individual portraits. The Hyprland deal attaches the money to a published legal threat. DeVault's account of the freedesktop.org emails records Vaxry threatening legal action against the conduct team that banned him. That dispute is his, from April 2024. The foundation's first announced use of sponsor money is his full-time pay, inside a project whose doctrine then rejects codes of conduct.
SUPPLY 37signals, the corporate pledge from the company that ships Rails. Tobi Lütke, personal pledge, listed on Omarchy Core, with Shopify printed beside him. DHH sits on Shopify's board. Shopify itself has no corporate pledge on this page. In October 2024 DHH wrote that it would be "totally crazy" if the operators of rubygems.org expropriated the official Rails gems and locked the core team out. In September 2025 he amplified Ruby Central's removal of the RubyGems and Bundler maintainers as "the right moves." Perham had already pulled Sidekiq's money over platforming him. Joel Drapper reports that Shopify used funding as the lever. He discloses that he worked at Shopify from 2017 to 2022 and that he is not a professional journalist. Jean Boussier replied. The record page keeps those two accounts separate. DHH sits on Shopify's board. Any company that ships Rails is one news cycle from that paragraph.
BRAND Tobi Lütke (Shopify printed beside a personal pledge). The other employers printed on individual portraits, with no corporate pledge from the company: Patrick Collison (Stripe), Michael Dell (Dell Technologies), Jack Dorsey (Block), Matthew Prince (Cloudflare), Brendan Iribe (Sesame), Drew Houston (Dropbox), Peter Steinberger (OpenClaw), Brian Armstrong (Coinbase), Yunjie Dai (TapTap). Every corporate logo shares that page with the core team: 1Password, 37signals, DigitalOcean, Alibaba Cloud, SpaceXAI, Namespace, Meta Superintelligence Labs, OpenAI, Fireworks, OpenRouter, OrcaRouter, Four Technologies. Shopify the company did not pledge. Tobi Lütke did, and the homepage lists him on Omarchy Core. The record page also carries PressProgress's reporting on Kaz Nejatian, Shopify's chief operating officer: he is a director of the True North Centre for Public Policy, and in July 2024 True North published, then deleted, an interview with Proud Boys founder Gavin McInnes. Public Safety Canada lists the Proud Boys as a terrorist entity. The Omarchy donor from Shopify is Lütke. The True North director in that story is Nejatian. A roundup that starts from the Omarchy core team reaches both, because both are public and both use the word Shopify. Sponsors with no Shopify relationship still sit on a wall that includes that core team. The parenthetical employers on the individual portraits (Stripe, Dell Technologies, Block, Dropbox, Coinbase, and the others) are in the same position: this page has no corporate pledge from them, and the homepage does not pause to explain the difference.

1Password

On 31 August 2026 Omarchy announced that 1Password and 37signals would each contribute $100,000 a year for three years. 1Password is also a name in the application menu: Marius's inventory of a 3.x install lists it among the default entries, next to Basecamp and HEY. Users on 1Password's own forum asked the company to pull the pledge. The thread is still there, with the security writeups and DHH's posts linked by the people who pay for the password manager.

Romea.cz, covering the pledge, reported that 1Password's chief executive, David Faugno, told employees: "1Password does not condone hateful, dehumanizing, or exclusionary opinions, including those DHH is publicly sharing." The sentence is attributed to internal communications acquired by The Verge. The patron page kept 1Password. A company can disclaim a man's posts and still wire his foundation $300,000. Both halves of that sentence are the record.

One forum user said a support reply justified the gift by Omarchy's popularity with developers, and also described it as patronage separate from product decisions. The user posted that summary on 4 September 2026. 1Password has not, on its own site, published a matching explanation next to the dollar figure.

The removed name

Anthropic was listed among the token patrons on 3 September 2026 and was gone by the morning of 18 September, according to The Register, which compared the archived announcement with the live page. The foundation did not, in the coverage, explain the removal. The other labs stayed. The counter kept rising.