Every layer here encodes a real thing. The reader's device holds the session; the edge serves the canon; a thin set of functions do the rest, each service behind a switch that stays dark until it is needed. This is the map.
The browser keeps all session state until the Wire phase. The server is stateless per request; canon is served from the edge. Every record body block carries a permanent locator (s1 · s2 · …): an address, once issued, never renumbers, so a citation holds for as long as the node does.
The operator's AI runs on the app's keys. Everyone else runs on the keys they brought. No visitor ever spends the app's budget.
Visitors bring their own provider keys. Each is encrypted before it touches the database, opened only for the instant of a request, and never logged or shown back.
Never logged. Never returned to the browser. Deletable at once.
The node watches itself. It pages the owner for exactly four things and handles the rest quietly.
Full detail lives in the repo: docs/ARCHITECTURE.md, docs/STACK_V4.md, KNOWLEDGE_BASE.md.