Speaks plymouthd's protocol
It listens on plymouthd's socket and answers to plymouth's command line, so systemd, its password agents and cryptsetup's scripts talk to it unchanged.
One static Go binary that starts in the initrd, draws on every output, asks for disk passwords, survives the switch to the real root and leaves its last frame for the greeter.