Version 1 · last updated 2026-10-13

August 2026

The record

One page per person made of facts with provenance and an affirmation date. Facts are never edited in place; a change supersedes.

Machine-readable surfaces

Every page ships as JSON and Markdown beside the HTML, with Person structured data, declared as alternates in the head.

Consent per class of machine reader

Owners grant, scope, or withdraw each class; a withdrawn class gets 403 and a do-not-index hint. Every change is logged.

Readership by class, never by who

Owners see which kinds of readers, including AI systems, read their record, with no addresses stored.

Export and deletion

Everything in one file at any moment; deletion from an email address alone, with a stated grace window.

Enforcement that cannot be silent

The database refuses to store a suspension without the violating element; data is retained for the appeal window.

Spam defence before indexing

Pages publish immediately but are held out of search until they pass a quality floor; refused publishes name their reasons.

Onboarding without an account

Build the page first; the account is created at publish.

Contact card and QR code

From the Bitly teardown.

Operator console

People, handles, links by domain, flagged pages, reports, verifications, enforcement log, settings with a signup kill switch, and a list of what was deliberately not built, with reasons.

All months: /changelog.