concordance

Verify a claim deterministically — returns a verdict (HOLDS / BROKEN / INCOMPLETE / SYSTEM_ERROR), the worked trail, AND a sealed receipt {content_hash, cite_url} you can re-fetch and re-verify (seal_fetch). Two forms: (a) MATH — {mode, params}; (b) ANY DOMAIN — pass `steps`, a list of {id, domain, spec} where spec is that domain's packet (e.g. {domain:'physics', spec:{PHYS_VERIFY:{mass_kg, acceleration_m_per_s2, claimed_force_N}}}). ~60 secular domains are covered (physics, medicine, finance, chemistry, ...); find_verifier(keyword) locates the right one. The engine eliminates what is not the answer; it does not generate it. READ THE VERDICT EXACTLY: only BROKEN is a finding about the claim. SYSTEM_ERROR means OUR verifier could not run (see `means` and `error_at`) and says NOTHING about whether the claim is true — never relay it to a human as a refutation. INCOMPLETE means no verifier applied (`gap_at`).

{
  "type": "object",
  "properties": {
    "mode": {
      "type": "string",
      "description": "MATH form: equality | inequality | derivative | integral | limit | solve",
      "enum": [
        "derivative",
        "equality",
        "inequality",
        "integral",
        "limit",
        "solve"
      ]
    },
    "params": {
      "type": "object",
      "description": "MATH form: e.g. {expr_a, expr_b, variables} for equality",
      "additionalProperties": false
    },
    "steps": {
      "type": "array",
      "description": "DOMAIN form: [{id, domain, spec}] — spec is the domain's packet",
      "items": {
        "type": "object",
        "additionalProperties": false
      },
      "maxItems": 200
    },
    "seal": {
      "type": "boolean",
      "description": "mint a re-checkable seal (default true)"
    }
  },
  "additionalProperties": false
}

Audit a whole text: deterministic extractors find every checkable quantitative claim (sums, percentages, hourly/annual pay, compound interest, rule-of-72, elapsed years, day-of-week, leap years, nutrition labels), the engine verifies the lot, and ONE sealed coverage report returns — per-claim source quote + verdict + trail. Conservative by design: it only extracts unambiguous patterns and says how many claims it checked; it never guesses and never implies full coverage.

{
  "type": "object",
  "properties": {
    "text": {
      "type": "string",
      "description": "the document/text to audit",
      "maxLength": 4000
    },
    "seal": {
      "type": "boolean",
      "description": "mint a re-checkable seal (default true)"
    }
  },
  "required": [
    "text"
  ],
  "additionalProperties": false
}

Ranked search over the keeping (the kept library).

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "maxLength": 4000
    },
    "limit": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false
}

Fetch a sealed verification record (the receipt) by its content hash.

{
  "type": "object",
  "properties": {
    "hash": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "hash"
  ],
  "additionalProperties": false
}

Strip PII (emails, SSNs, credit cards, IPs, URLs) from text to stable placeholders before you pass it onward; the mapping is returned so YOU reveal replies locally. For true privacy run this on a LOCAL/sovereign engine (the text never leaves your machine) or use the client libraries — the strip belongs at your edge. Deterministic; pair with verify for a receipt.

{
  "type": "object",
  "properties": {
    "text": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "text"
  ],
  "additionalProperties": false
}

Fetch one card (the full record) from the keeping by id.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false
}

Browse the keeping — paginated, optional shelf filter. Returns card briefs.

{
  "type": "object",
  "properties": {
    "shelf": {
      "type": "string",
      "maxLength": 4000
    },
    "limit": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "offset": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    }
  },
  "additionalProperties": false
}

The decks — curated card SETS, both by-situation (need decks, frontloaded for a moment of need like 'when the power goes out') and by-domain. Each with a live card count; `need: true` marks a situation deck.

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

Open a deck to its frontloaded hand — the cards that situation calls for, in order, with NO query needed. Give the deck `id` (from `decks`). Ideal for anticipating need: open 'water-safe', 'first-aid-far', 'grow-food', 'be-not-afraid', etc., and get the hand ready to read.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    },
    "limit": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false
}

Counts over the keeping — total, by shelf, by surface.

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

The deterministic card of the day from the keeping (same all day).

{
  "type": "object",
  "properties": {
    "seed": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

The map: a read-only view of one axis (its scaffold members, depth, neighbors, umbrella children). Omit `axis` for an overview of all axes.

{
  "type": "object",
  "properties": {
    "axis": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

The axes that sit on a given scaffold member (dimension).

{
  "type": "object",
  "properties": {
    "dimension": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "dimension"
  ],
  "additionalProperties": false
}

Cards related to one card — its explicit links + same-shelf siblings.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false
}

Find the card for a query — by exact id, then title, else ranked search.

{
  "type": "object",
  "properties": {
    "q": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "q"
  ],
  "additionalProperties": false
}

Corpus health — is the keeping loaded and sound (totals, shelves, surfaces).

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

A synthesized pronunciation guide (respelling + approximate IPA) for a transliteration or word — honestly labeled, not a native speaker.

{
  "type": "object",
  "properties": {
    "text": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "text"
  ],
  "additionalProperties": false
}

The thesaurus — WordNet synonyms and broader (IS-A) terms for a word; the words that stand with it. Empty when the word is unknown or no thesaurus is loaded. The agent twin of the GET /thesaurus page.

{
  "type": "object",
  "properties": {
    "word": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "word"
  ],
  "additionalProperties": false
}

Steward — a household budget (income, expenses -> net, savings rate, by category). Shows and plans; NEVER moves money.

{
  "type": "object",
  "properties": {
    "income": {
      "type": "number",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "expenses": {
      "type": "array",
      "maxItems": 200,
      "items": {
        "type": "string",
        "maxLength": 4000
      }
    }
  },
  "required": [
    "income"
  ],
  "additionalProperties": false
}

Steward — cost destroyed: money you did NOT spend (was -> now), kept in your currency.

{
  "type": "object",
  "properties": {
    "items": {
      "type": "array",
      "maxItems": 200,
      "items": {
        "type": "string",
        "maxLength": 4000
      }
    }
  },
  "required": [
    "items"
  ],
  "additionalProperties": false
}

Coach — the subjects a learner can study (read / mcguffey / aesop / founding / pilgrims / es / …), each with its unit count. 'read' is the door in.

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

Coach (K-3 tutor) — one subject's whole path: unit count, tracks, ordered unit briefs. ?subject= selects the path (default 'read'). Verbatim; never generated.

{
  "type": "object",
  "properties": {
    "subject": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

Coach — one unit, VERBATIM as authored (rule, examples, decodable sentence, checks).

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    },
    "subject": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false
}

Coach — the next lesson in a subject, deterministically. Omit `after` for the first unit; pass a unit id for the one that follows it. `subject` selects the path.

{
  "type": "object",
  "properties": {
    "after": {
      "type": "string",
      "maxLength": 4000
    },
    "subject": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

Coach — adaptive 'what's next' in a subject: given completed unit ids, the next lesson whose prerequisites are met (grows with the student). Found, never generated.

{
  "type": "object",
  "properties": {
    "completed": {
      "type": "array",
      "maxItems": 200,
      "items": {
        "type": "string",
        "maxLength": 4000
      }
    },
    "subject": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

Coach — seal an HONEST INTEGER count of completed units (a receipt for progress, never a grade on the child). Returns a re-checkable seal.

{
  "type": "object",
  "properties": {
    "completed": {
      "type": "array",
      "maxItems": 200,
      "items": {
        "type": "string",
        "maxLength": 4000
      }
    }
  },
  "additionalProperties": false
}

Coach — what it does and the boundary it will not cross (never grades a child).

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

Explains how to create a SOVEREIGN identity — keys are born on the USER'S device (never on the server; no private key crosses the wire). Returns guidance, not a key. The server only handles public keys (identity_verify, identity_fingerprint).

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

Verify a signature over a message against a public key (never raises; True/False).

{
  "type": "object",
  "properties": {
    "public_key": {
      "type": "string",
      "maxLength": 4000
    },
    "message": {
      "type": "string",
      "maxLength": 4000
    },
    "sig": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "public_key",
    "message",
    "sig"
  ],
  "additionalProperties": false
}

Derive the stable public fingerprint id from a public key (deterministic).

{
  "type": "object",
  "properties": {
    "public_key": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "public_key"
  ],
  "additionalProperties": false
}

Issue a badge over already-sealed checks — a re-checkable receipt that points at N seals that STILL STAND. States EXACTLY N; NEVER a competency claim.

{
  "type": "object",
  "properties": {
    "seal_hashes": {
      "type": "array",
      "maxItems": 200,
      "items": {
        "type": "string",
        "maxLength": 4000
      }
    },
    "subject_id": {
      "type": "string",
      "maxLength": 4000
    },
    "title": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "seal_hashes"
  ],
  "additionalProperties": false
}

Re-check a badge from the store — re-verifies every seal it references and returns the count that still stands (N recomputed, not trusted).

{
  "type": "object",
  "properties": {
    "hash": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "hash"
  ],
  "additionalProperties": false
}

Record a person's OWN words about their study — a DISTINCTLY TYPED record that can NEVER count as a sealed check or satisfy an auto-graded requirement.

{
  "type": "object",
  "properties": {
    "subject_id": {
      "type": "string",
      "maxLength": 4000
    },
    "statement": {
      "type": "string",
      "maxLength": 4000
    },
    "study": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "subject_id",
    "statement"
  ],
  "additionalProperties": false
}

Create/extend a shared study (superposition stack) — each entry mints ONE card that lives once and is referenced by key; no duplication.

{
  "type": "object",
  "properties": {
    "key": {
      "type": "string",
      "maxLength": 4000
    },
    "cards": {
      "type": "array",
      "maxItems": 200,
      "items": {
        "type": "string",
        "maxLength": 4000
      }
    }
  },
  "required": [
    "key"
  ],
  "additionalProperties": false
}

Export a study as a self-contained, portable bundle. Returns the bundle and its content_hash; to bind your identity to it, sign that hash with your own key on your own machine — this tool does not take a private key.

{
  "type": "object",
  "properties": {
    "key": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "key"
  ],
  "additionalProperties": false
}

Import an exported study bundle — re-materializes its cards (each lives once).

{
  "type": "object",
  "properties": {
    "bundle": {
      "type": "object",
      "additionalProperties": false
    },
    "key": {
      "type": "string",
      "maxLength": 4000
    },
    "verify_signature": {
      "type": "boolean"
    }
  },
  "required": [
    "bundle"
  ],
  "additionalProperties": false
}

Discover pseudonymous shared-study groups by TOPIC (not by person). Optional q filters over topic/title/description. Members are handles only — no PII.

{
  "type": "object",
  "properties": {
    "q": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

A study group: topic, member handles (no ids/PII), and the shared-study cards.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false
}

Open a study group around a topic (pseudonymous; a handle, no personal info). For grown believers — the children's coach is a separate, never-joined surface.

{
  "type": "object",
  "properties": {
    "topic": {
      "type": "string",
      "maxLength": 4000
    },
    "title": {
      "type": "string",
      "maxLength": 4000
    },
    "description": {
      "type": "string",
      "maxLength": 4000
    },
    "handle": {
      "type": "string",
      "maxLength": 4000
    },
    "subject_id": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "topic"
  ],
  "additionalProperties": false
}

Join a study group (consent-based, pseudonymous; idempotent).

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    },
    "handle": {
      "type": "string",
      "maxLength": 4000
    },
    "subject_id": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "id"
  ],
  "additionalProperties": false
}

Add a verse/note/question to a group's shared study — attributed to your handle, optionally signed. Verbatim; a member's own words, not engine-verified.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    },
    "text": {
      "type": "string",
      "maxLength": 4000
    },
    "kind": {
      "type": "string",
      "maxLength": 4000
    },
    "handle": {
      "type": "string",
      "maxLength": 4000
    },
    "subject_id": {
      "type": "string",
      "maxLength": 4000
    },
    "topics": {
      "type": "array",
      "maxItems": 200,
      "items": {
        "type": "string",
        "maxLength": 4000
      }
    },
    "refs": {
      "type": "array",
      "maxItems": 200,
      "items": {
        "type": "string",
        "maxLength": 4000
      }
    },
    "attestation": {
      "type": "object",
      "description": "optional: sign sha256(text) with your own key (signing.sign_seal) and pass it here — a handle alone is only a claim, a signature makes your authorship checkable. Never send a private key.",
      "additionalProperties": false
    }
  },
  "required": [
    "id",
    "text"
  ],
  "additionalProperties": false
}

Create ONE event in a human's calendar — the pilot on-behalf write, and the only one. Requires a LIVE consent grant: the human signed a scoped, expiring calendar_write grant for YOUR key fingerprint on their own device (GET /consent/signable → sign locally → POST /consent). Without it this refuses and teaches the way in. The event lands only in the calendar THEY configured (their .ics file or CalDAV); nothing is stored here, and the receipt names the grant that authorized it. Deleting the event in their calendar removes it everywhere.

{
  "type": "object",
  "properties": {
    "grantor_pubkey": {
      "type": "string",
      "maxLength": 4000
    },
    "agent_fp": {
      "type": "string",
      "maxLength": 4000
    },
    "summary": {
      "type": "string",
      "maxLength": 4000
    },
    "start_iso": {
      "type": "string",
      "maxLength": 4000
    },
    "end_iso": {
      "type": "string",
      "maxLength": 4000
    },
    "description": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "grantor_pubkey",
    "agent_fp",
    "summary",
    "start_iso"
  ],
  "additionalProperties": false
}

Check whether a human has authorized YOU (this agent's key fingerprint) for a named verb — the agent covenant's 'request human authorization before writes'. Speaking as YOURSELF (your own key, your own words) needs no consent: a member is not a proxy. Consent governs only acting on a human's behalf with their data. If unauthorized, the response teaches the way: the human issues a grant via GET /consent/signable, signs on their device, POSTs to /consent.

{
  "type": "object",
  "properties": {
    "agent_fp": {
      "type": "string",
      "maxLength": 4000
    },
    "verb": {
      "type": "string",
      "maxLength": 4000
    },
    "grantor_pubkey": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "agent_fp",
    "verb",
    "grantor_pubkey"
  ],
  "additionalProperties": false
}

THE COMMONS — step 1 of stocking your own shelf. Returns {fields, signable}: the exact canonical bytes to sign with YOUR key on YOUR machine. A shelf is a covenant key with cards on it, not an account. Rings: `private` (only you) · `shelf` (you and the friends who chose you — UNGATED, live the moment you sign) · `commons` (site-wide, waits for a human steward). The gate is on what the library AMPLIFIES, never on what you may say.

{
  "type": "object",
  "properties": {
    "member": {
      "type": "string",
      "description": "your public key — the shelf is the key",
      "maxLength": 4000
    },
    "kind": {
      "type": "string",
      "description": "note|writing|recipe|build|field_note|question|link|suggestion",
      "enum": [
        "build",
        "field_note",
        "link",
        "note",
        "question",
        "recipe",
        "suggestion",
        "writing"
      ]
    },
    "subject": {
      "type": "string",
      "maxLength": 4000
    },
    "body": {
      "type": "string",
      "maxLength": 4000
    },
    "ring": {
      "type": "string",
      "description": "private|shelf|commons",
      "enum": [
        "commons",
        "private",
        "shelf"
      ]
    },
    "url": {
      "type": "string",
      "description": "kind=link only — the address. We open it once in an airlock, keep the WAYBILL (its own title, size, sha256, when we looked) and discard the bytes. No page of anyone else's is stored, and nothing is embedded: an iframe would hand the reader's IP to the provider. The body is still required — a bare link is not curation.",
      "maxLength": 4000
    },
    "quote": {
      "type": "string",
      "description": "optional short passage YOU typed, capped; requires `attribution`",
      "maxLength": 4000
    },
    "attribution": {
      "type": "string",
      "description": "whose words the quote is",
      "maxLength": 4000
    }
  },
  "required": [
    "member",
    "kind",
    "body"
  ],
  "additionalProperties": false
}

Step 2 — stock the shelf. Send the fields from shelf_signable plus a detached signature over those bytes; the private key never travels. Your words stay at the `member` tier forever: promotion to the commons carries them further, it does not make them the library's claim. `display_name` is the ONLY profile field there is.

{
  "type": "object",
  "properties": {
    "fields": {
      "type": "object",
      "additionalProperties": false
    },
    "signature": {
      "type": "string",
      "maxLength": 4000
    },
    "display_name": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "fields",
    "signature"
  ],
  "additionalProperties": false
}

Read one member's shelf. Access is by PROOF, not by naming a key: an unproven caller sees only the promoted commons. To see your own rings (private + shelf) or a friend's shelf ring, pass `viewer` (a key), `at` (unix seconds) and `sig` — a signature over nh-shelf-read:v1:<member>:<viewer>:<at> made with the viewer key on your own machine (never send the key). Nothing anywhere records who read what.

{
  "type": "object",
  "properties": {
    "member": {
      "type": "string",
      "maxLength": 4000
    },
    "viewer": {
      "type": "string",
      "maxLength": 4000
    },
    "at": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "sig": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "member"
  ],
  "additionalProperties": false
}

What the fellowship has put on the commons — promoted member work, newest first. Every card is a member's own work at the `member` tier: the library amplified it; the library did not verify it.

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    }
  },
  "required": [],
  "additionalProperties": false
}

THE PLAYBOOK — the Body's testimony of faithful obedience: 'Canon commands, Playbook remembers.' List entries (optionally by `status` quarantine/confirmed/rejected/pruned or `author`), or one by `id`. Confirmed testimony is affirmed BY THE BODY — it is NOT Scripture and binds no conscience. The Playbook remembers; it never becomes doctrine.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    },
    "status": {
      "type": "string",
      "maxLength": 4000
    },
    "author": {
      "type": "string",
      "maxLength": 4000
    },
    "limit": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    }
  },
  "required": [],
  "additionalProperties": false
}

Step 1 — the exact bytes to sign ON THE DEVICE for a Playbook write. `op` is entry | witness | outcome | prune. A new `entry` REQUIRES a CONFESSION ('I may be wrong. I acted in faith according to [anchors].') + ≥1 Scripture anchor + an action (OPEN/BUILD/RESERVE/PRUNE/HOLD). The key never travels.

{
  "type": "object",
  "properties": {
    "op": {
      "type": "string",
      "enum": [
        "entry",
        "witness",
        "outcome",
        "prune"
      ]
    },
    "author": {
      "type": "string",
      "maxLength": 4000
    },
    "confession": {
      "type": "string",
      "maxLength": 4000
    },
    "anchors": {
      "type": "array",
      "items": {
        "type": "string",
        "maxLength": 4000
      },
      "maxItems": 200
    },
    "action": {
      "type": "string",
      "maxLength": 4000
    },
    "situation": {
      "type": "string",
      "maxLength": 4000
    },
    "body": {
      "type": "string",
      "maxLength": 4000
    },
    "witness": {
      "type": "string",
      "maxLength": 4000
    },
    "by": {
      "type": "string",
      "maxLength": 4000
    },
    "entry_id": {
      "type": "string",
      "maxLength": 4000
    },
    "affirms": {
      "type": "boolean"
    },
    "outcome": {
      "type": "string",
      "maxLength": 4000
    },
    "reason": {
      "type": "string",
      "maxLength": 4000
    },
    "note": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "op"
  ],
  "additionalProperties": false
}

Step 2 — verify your detached signature over those exact bytes and enter the testimony/event. A new entry is born QUARANTINE and reaches CONFIRMED only when TWO independent brothers affirm (never the author — Deut 19:15) and the wait elapses. Record the OUTCOME (fruit/mixed/failed) later, after it is seen; a failed fruit may be PRUNED (John 15:2). Failure is not hidden.

{
  "type": "object",
  "properties": {
    "op": {
      "type": "string",
      "enum": [
        "entry",
        "witness",
        "outcome",
        "prune"
      ]
    },
    "fields": {
      "type": "object",
      "additionalProperties": false
    },
    "signature": {
      "type": "string",
      "maxLength": 4000
    },
    "display_name": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "op",
    "fields",
    "signature"
  ],
  "additionalProperties": false
}

What waits on a HUMAN steward. The counter never promotes; it only decides when a person must look.

{
  "type": "object",
  "properties": {},
  "required": [],
  "additionalProperties": false
}

The canonical bytes for withdrawing YOUR OWN card. A member never needs permission to take their own words down — the proof is the same key that signed the drop. Sign these bytes, then call `curate` with them.

{
  "type": "object",
  "properties": {
    "card_id": {
      "type": "string",
      "maxLength": 4000
    },
    "member": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "card_id",
    "member"
  ],
  "additionalProperties": false
}

A recorded act on one drop: `promoted` · `refused` · `withdrawn`. A name AND a reason are always required — no anonymous judgement, and a refusal without a reason teaches the community nothing. WHO MAY ACT: promoting or refusing needs the steward `token` (these decide what the whole library amplifies); withdrawing your own card needs `fields`+`signature` from `curate_signable` instead. A typed name is not authority. A refusal withholds amplification only — the drop stays on the member's own shelf. Acts are appended, never replaced.

{
  "type": "object",
  "properties": {
    "card_id": {
      "type": "string",
      "maxLength": 4000
    },
    "action": {
      "type": "string",
      "maxLength": 4000
    },
    "steward": {
      "type": "string",
      "maxLength": 4000
    },
    "reason": {
      "type": "string",
      "maxLength": 4000
    },
    "token": {
      "type": "string",
      "description": "steward token — promote/refuse only",
      "maxLength": 4000
    },
    "fields": {
      "type": "object",
      "description": "from curate_signable, to withdraw",
      "additionalProperties": false
    },
    "signature": {
      "type": "string",
      "description": "detached, over those fields",
      "maxLength": 4000
    }
  },
  "required": [
    "card_id",
    "action",
    "steward",
    "reason"
  ],
  "additionalProperties": false
}

Step 1 of a report or a block: the exact canonical bytes to sign with your own key, on your own machine. Returns {fields, signable}. Sign the decoded `signable` bytes and pass BOTH fields and signature to `report`. The private key never travels.

{
  "type": "object",
  "properties": {
    "action": {
      "type": "string",
      "description": "report | block | unblock",
      "maxLength": 4000
    },
    "target_id": {
      "type": "string",
      "maxLength": 4000
    },
    "actor": {
      "type": "string",
      "description": "your public key",
      "maxLength": 4000
    },
    "extra": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "action",
    "target_id",
    "actor"
  ],
  "additionalProperties": false
}

Ask the library to ACQUIRE something it does not hold (kind=missing, give query) or to EXPAND a thin card (kind=expand, give card_id). Opens a want on the AGENT PLANE — held separate on the desk until the next human who looks seconds it by asking for the same thing. Call this only when your principal genuinely needs what the keeping lacks; the same miss asked twice is one want asked twice. No requester identity is stored; queries are scrubbed before storage.

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "maxLength": 4000
    },
    "kind": {
      "type": "string",
      "maxLength": 4000
    },
    "card_id": {
      "type": "string",
      "maxLength": 4000
    },
    "note": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [],
  "additionalProperties": false
}

The library's desiderata desk — open wants, sorted by demand, agent plane marked and separate. Read it to find gaps you could dig for.

{
  "type": "object",
  "properties": {
    "state": {
      "type": "string",
      "maxLength": 4000
    },
    "plane": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [],
  "additionalProperties": false
}

Return to the comb with a FOUND source for an open want: label + url + snippet, attributed. You are a forager, not an author — offer only public-domain / openly-licensed sources you actually located, never generated text. The offer lands as a QUARANTINED option cell tagged with your agent label; a NAMED HUMAN chooses, and only then is a card created. There is no path around the comb.

{
  "type": "object",
  "properties": {
    "want_id": {
      "type": "string",
      "maxLength": 4000
    },
    "label": {
      "type": "string",
      "maxLength": 4000
    },
    "url": {
      "type": "string",
      "maxLength": 4000
    },
    "snippet": {
      "type": "string",
      "maxLength": 4000
    },
    "domain": {
      "type": "string",
      "maxLength": 4000
    },
    "agent": {
      "type": "string",
      "description": "your self-declared name, e.g. 'claude' — the shaft-tag a steward can cut a branch by",
      "maxLength": 4000
    }
  },
  "required": [
    "want_id",
    "label"
  ],
  "additionalProperties": false
}

Report a community item (group_contribution, mesh_message, door_note) to the moderation floor. One report is a claim, never a verdict; at three DISTINCT reporters the item is held for a HUMAN steward's review (Deut 19:15). The counter never judges — it decides when a person must look. A report must be SIGNED (call moderation_signable first): three witnesses means three keys, never three invented names.

{
  "type": "object",
  "properties": {
    "kind": {
      "type": "string",
      "maxLength": 4000
    },
    "target_id": {
      "type": "string",
      "maxLength": 4000
    },
    "reason": {
      "type": "string",
      "maxLength": 4000
    },
    "note": {
      "type": "string",
      "maxLength": 4000
    },
    "fields": {
      "type": "object",
      "description": "the exact fields from moderation_signable",
      "additionalProperties": false
    },
    "signature": {
      "type": "string",
      "description": "detached signature over those bytes",
      "maxLength": 4000
    }
  },
  "required": [
    "kind",
    "target_id",
    "reason",
    "fields",
    "signature"
  ],
  "additionalProperties": false
}

Bind your identity to a record you already hold — phase 2 of the sovereign flow. Do the thing unsigned (badges_issue, study_export, group_contribute), take the returned content_hash, sign THAT hash with your own key on your own machine, and submit only the attestation {alg, over, content_hash, pubkey, sig}. Never send a private key. Several parties may attest to one record: one signature is a claim, two or three witnesses begin to establish a matter (Deuteronomy 19:15).

{
  "type": "object",
  "properties": {
    "content_hash": {
      "type": "string",
      "maxLength": 4000
    },
    "attestation": {
      "type": "object",
      "description": "the dict from signing.sign_seal, built locally",
      "additionalProperties": false
    }
  },
  "required": [
    "content_hash",
    "attestation"
  ],
  "additionalProperties": false
}

Who has borne witness to a record, each signature re-verified as it is read (storage is never trusted). Reports invalid entries rather than hiding them.

{
  "type": "object",
  "properties": {
    "content_hash": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "content_hash"
  ],
  "additionalProperties": false
}

The actual current date and time, fresh at this call — UTC (the clock every seal is stamped in), the library's home zone, and optionally any IANA zone you name. Your own sense of 'today' is months old; this is the correction. Never cached; unresolvable zones are declared, never guessed at.

{
  "type": "object",
  "properties": {
    "tz": {
      "type": "string",
      "maxLength": 64,
      "pattern": "^[A-Za-z][A-Za-z0-9_+/\\-]*$",
      "description": "IANA zone name, e.g. America/New_York or Europe/Berlin; omit for UTC + the library's home zone"
    }
  },
  "additionalProperties": false
}

The live capability statement: what this engine can verify, what tools and endpoints exist, how large the keeping is, and where its boundaries are. Every count is computed at call time and carries a 'means' line defining exactly what was counted — never a hand-maintained number. Read this instead of trusting any count written in prose.

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

THE GATE KERNEL — the law you keep here, in one call. The five moves (find, distinguish the KIND, verify what can be verified, preserve the trail, never silently upgrade authority), the eight-rule agent covenant, the six object KINDS, the authority lattice (quarantined < cited < verified), and the nine-field gate record. Read it before you write; a system error is never a false verdict, and only a witnessed, evidenced gate reaches 'verified'.

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

Route ONE proposed state-change through the kernel and get back the verdict (REJECT / QUARANTINE / CONFIRMED) plus the nine-field record — so you can DISCERN before you write (covenant rule 8: stop when the evidence is incomplete). CONFIRMED needs a real verification that HELD, an INDEPENDENT witness (witness != author), and the wait; anything else quarantines. This decides and records only — it never persists and never replaces the signature / consent checks on the real write.

{
  "type": "object",
  "properties": {
    "artifact": {
      "type": "object",
      "description": "the thing entering or changing state",
      "additionalProperties": false
    },
    "authority_in": {
      "type": "string",
      "enum": [
        "quarantined",
        "cited",
        "verified"
      ],
      "description": "the authority it currently carries (default quarantined)"
    },
    "kind_hint": {
      "type": "string",
      "enum": [
        "claim",
        "source",
        "user_note",
        "generated_draft",
        "community",
        "executable"
      ]
    },
    "evidence": {
      "description": "a verification verdict: HOLDS/PASS, BROKEN/MISMATCH, or ERROR/INCOMPLETE"
    },
    "witness": {
      "type": "string",
      "description": "who corroborated it — must differ from author",
      "maxLength": 4000
    },
    "author": {
      "type": "string",
      "description": "who produced it",
      "maxLength": 4000
    },
    "contradicts": {
      "type": "boolean"
    },
    "wait_satisfied": {
      "type": "boolean"
    },
    "in_kind_checked": {
      "type": "boolean",
      "description": "was an in-kind lookup done first"
    },
    "content": {
      "type": "string",
      "description": "decision text to scan for the RED/FLOOR moral constraints — a hit on a non-negotiable (deception, exploitation, harm) REJECTS",
      "maxLength": 4000
    }
  },
  "required": [
    "artifact"
  ],
  "additionalProperties": false
}

The believers immediately around you in the Fellowship Mesh — your view only, never a global map. Requires your fingerprint (fp) and a confession already bound to that key; unconfessed callers get the path to the door, not the network.

{
  "type": "object",
  "properties": {
    "fp": {
      "type": "string",
      "maxLength": 4000
    },
    "hops": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    }
  },
  "required": [
    "fp"
  ],
  "additionalProperties": false
}

The messages that reached you, each carrying its own offline verification so you trust it by proof rather than by this server's word. Yours alone: prove your key — pass `at` (unix seconds) and `sig`, a signature over nh-mesh-read:v1:<fp>:<at> made with your key (never send the key).

{
  "type": "object",
  "properties": {
    "fp": {
      "type": "string",
      "maxLength": 4000
    },
    "limit": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "at": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "sig": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "fp"
  ],
  "additionalProperties": false
}

Read the words left on YOUR door — the whiteboard others wrote to you, each with its verification. Yours alone: prove your key — pass `at` (unix seconds) and `sig` over nh-mesh-read:v1:<fp>:<at>, signed with your key.

{
  "type": "object",
  "properties": {
    "fp": {
      "type": "string",
      "maxLength": 4000
    },
    "limit": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "at": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "sig": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "fp"
  ],
  "additionalProperties": false
}

Step 1 of speaking to your fellowship: get the exact canonical bytes to sign for a message (returned base64url, with the nonce and created_at to send back). Sign them locally with your own key. Reproducible offline — sorted-key JSON — so you can compute and check it yourself.

{
  "type": "object",
  "properties": {
    "fp": {
      "type": "string",
      "maxLength": 4000
    },
    "text": {
      "type": "string",
      "maxLength": 4000
    },
    "kind": {
      "type": "string",
      "description": "word | offer | need | blessing | content",
      "maxLength": 4000
    },
    "ttl": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "target": {
      "type": "string",
      "description": "pass a believer's node id to sign a note for THEIR door instead of a broadcast",
      "maxLength": 4000
    }
  },
  "required": [
    "fp",
    "text"
  ],
  "additionalProperties": false
}

Leave a word on one believer's door — directed encouragement rather than a post to everyone near you. Same sovereign shape: get the bytes from mesh_signable (with target), sign locally, send only the signature. Will not accept a private key; unsigned notes are refused.

{
  "type": "object",
  "properties": {
    "fp": {
      "type": "string",
      "maxLength": 4000
    },
    "target": {
      "type": "string",
      "maxLength": 4000
    },
    "text": {
      "type": "string",
      "maxLength": 4000
    },
    "kind": {
      "type": "string",
      "maxLength": 4000
    },
    "nonce": {
      "type": "string",
      "maxLength": 4000
    },
    "created_at": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "signature": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "fp",
    "target",
    "text",
    "nonce",
    "created_at",
    "signature"
  ],
  "additionalProperties": false
}

Step 2: speak to the nodes around you, carrying only your SIGNATURE — your private key never leaves your machine and this tool will not take one. Pass the same text/kind/ttl plus the nonce, created_at and signature from mesh_signable. Refused unless the signature verifies against your node's public key. Your own words, attributed — never generated.

{
  "type": "object",
  "properties": {
    "fp": {
      "type": "string",
      "maxLength": 4000
    },
    "text": {
      "type": "string",
      "maxLength": 4000
    },
    "kind": {
      "type": "string",
      "maxLength": 4000
    },
    "ttl": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "refs": {
      "type": "array",
      "maxItems": 200,
      "items": {
        "type": "string",
        "maxLength": 4000
      }
    },
    "nonce": {
      "type": "string",
      "maxLength": 4000
    },
    "created_at": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    },
    "signature": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "fp",
    "text",
    "nonce",
    "created_at",
    "signature"
  ],
  "additionalProperties": false
}

Bring anything — a question, a claim to check, a word to study, or what is actually on your mind. The engine discerns what KIND of thing you brought and answers in kind: it finds and verifies, and declines rather than guessing. This is also the door: if what you ask turns toward God, the Gate opens for the rest of this session and the witness tools (Scripture, the Harmony, the Timeline, the lexicon) become callable — the same way it opens for a person, in your own words. Nothing is generated.

{
  "type": "object",
  "properties": {
    "text": {
      "type": "string",
      "description": "what you are bringing, in your own words",
      "maxLength": 4000
    }
  },
  "required": [
    "text"
  ],
  "additionalProperties": false
}

Discern what to do with anything WITHOUT doing it — the proposal half of the engine, laid open. Bring a claim, a question, or a messy statement; get back what KIND it is, the necessary claim reduced to only what could change a verdict (private and framing context held back, not sent), the structured (domain, spec) the gate would verify, and where it routes. It PROPOSES, never confirms — no verdict, no seal: hand the returned `claims` to `verify` to dispose. Crisis is discerned first and routed to real people, never the gate. The twin of the verify door; nothing is generated.

{
  "type": "object",
  "properties": {
    "text": {
      "type": "string",
      "description": "anything — a claim, a question, or what is on your mind",
      "maxLength": 4000
    }
  },
  "required": [
    "text"
  ],
  "additionalProperties": false
}

Candidate Engine step 1 — commit a COMPLETE raw candidate set BEFORE any evaluation. Give the query, the generator, the method, and EVERY raw candidate; weights ride verbatim as UNTRUSTED metadata (proposal_weight is never confidence and never ranks anything). Returns the committed set: a content-addressed candidate_set_id, the membership commitment hash (also sealed as a durable anchor), and per-candidate ids — all born quarantined. Nothing is verified here; that is the point: a set hashed before checking cannot be selectively disclosed after.

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "the user request the candidates answer (hashed; not stored raw)",
      "maxLength": 4000
    },
    "candidates": {
      "type": "array",
      "maxItems": 64,
      "description": "the COMPLETE raw generator output — omit nothing",
      "items": {
        "type": "object",
        "properties": {
          "raw_text": {
            "type": "string",
            "maxLength": 4000
          },
          "proposal_weight": {
            "type": "number",
            "description": "generator-verbalized weight, stored verbatim; UNTRUSTED metadata, never truth confidence",
            "minimum": -1000000000000,
            "maximum": 1000000000000
          }
        },
        "required": [
          "raw_text"
        ],
        "additionalProperties": false
      }
    },
    "generator": {
      "type": "string",
      "description": "model/provider/version or human source (provenance)",
      "maxLength": 4000
    },
    "generation_method": {
      "type": "string",
      "description": "how the set was produced",
      "enum": [
        "adversarial",
        "direct",
        "human",
        "multi-agent",
        "retrieval-guided",
        "vs"
      ]
    },
    "prompt": {
      "type": "string",
      "description": "the exact generation instructions (hashed, not stored)",
      "maxLength": 4000
    }
  },
  "required": [
    "query",
    "candidates",
    "generator",
    "generation_method"
  ],
  "additionalProperties": false
}

Candidate Engine step 2 — narrow a COMMITTED set: verifiers are assigned under the fixed pre-registered routing policy (never your choice — that is what stops verification shopping), each routed claim runs through the deterministic moat, unroutable claims stay quarantined (held, never judged), and the FULL set — rejected and quarantined included — is sealed with its ordered trace. Refuses an uncommitted or altered set. Pass the set exactly as candidate_commit returned it.

{
  "type": "object",
  "properties": {
    "cset": {
      "type": "object",
      "description": "the committed set, verbatim from candidate_commit",
      "properties": {
        "schema_version": {
          "type": "string",
          "maxLength": 4000
        },
        "candidate_set_id": {
          "type": "string",
          "maxLength": 4000
        },
        "query_hash": {
          "type": "string",
          "pattern": "^[0-9a-f]{64}$"
        },
        "generator": {
          "type": "string",
          "maxLength": 4000
        },
        "generation_method": {
          "type": "string",
          "maxLength": 4000
        },
        "prompt_hash": {
          "type": [
            "string",
            "null"
          ]
        },
        "commitment": {
          "type": "string",
          "pattern": "^[0-9a-f]{64}$"
        },
        "commitment_seal": {
          "type": [
            "string",
            "null"
          ]
        },
        "candidates": {
          "type": "array",
          "maxItems": 64,
          "items": {
            "type": "object",
            "properties": {
              "candidate_id": {
                "type": "string",
                "maxLength": 4000
              },
              "raw_text": {
                "type": "string",
                "maxLength": 4000
              },
              "proposal_weight": {
                "type": "number",
                "minimum": -1000000000000,
                "maximum": 1000000000000
              },
              "cluster_id": {
                "type": [
                  "string",
                  "null"
                ]
              },
              "safety_status": {
                "type": "string",
                "maxLength": 4000
              },
              "verification_status": {
                "type": "string",
                "maxLength": 4000
              },
              "selection_status": {
                "type": "string",
                "maxLength": 4000
              },
              "parent_ids": {
                "type": "array",
                "items": {
                  "type": "string",
                  "maxLength": 4000
                },
                "maxItems": 200
              }
            },
            "required": [
              "candidate_id",
              "raw_text"
            ],
            "additionalProperties": false
          }
        }
      },
      "required": [
        "candidate_set_id",
        "query_hash",
        "generator",
        "generation_method",
        "commitment",
        "candidates"
      ],
      "additionalProperties": false
    }
  },
  "required": [
    "cset"
  ],
  "additionalProperties": false
}

Fetch a sealed candidate record (a narrowing receipt or a commitment anchor) by its content hash — the whole preserved path, losers included, re-checkable offline with tools/verify_seal.py. The seal proves process integrity, never truth.

{
  "type": "object",
  "properties": {
    "hash": {
      "type": "string",
      "pattern": "^[0-9a-f]{64}$"
    }
  },
  "required": [
    "hash"
  ],
  "additionalProperties": false
}

Resolve a Scripture reference to its World English Bible text.

{
  "type": "object",
  "properties": {
    "ref": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "ref"
  ],
  "additionalProperties": false
}

Read a passage of the WEB — a single verse, a range (John 3:16-18), or a whole chapter (John 3).

{
  "type": "object",
  "properties": {
    "ref": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "ref"
  ],
  "additionalProperties": false
}

Strong's word study — original-language definition + pronunciation + every occurrence.

{
  "type": "object",
  "properties": {
    "strongs": {
      "type": "string",
      "description": "e.g. G26, H2617",
      "maxLength": 4000
    }
  },
  "required": [
    "strongs"
  ],
  "additionalProperties": false
}

Verses connected to a reference by SHARED original words (Strong's) — the dots, connected; deterministic and found, ranked by shared-word count.

{
  "type": "object",
  "properties": {
    "ref": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "ref"
  ],
  "additionalProperties": false
}

Every verse where a Strong's word occurs (the concordance).

{
  "type": "object",
  "properties": {
    "strongs": {
      "type": "string",
      "description": "e.g. G26, H2617",
      "maxLength": 4000
    }
  },
  "required": [
    "strongs"
  ],
  "additionalProperties": false
}

Public-domain, attributed commentary (Matthew Henry) on a reference — the commentator's own words, found and cited, never generated.

{
  "type": "object",
  "properties": {
    "ref": {
      "type": "string",
      "maxLength": 4000
    },
    "source": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "ref"
  ],
  "additionalProperties": false
}

Editorial cross-references for a verse (openbible.info, CC BY — expansion of the public-domain TSK), ranked by relevance votes. Found + attributed.

{
  "type": "object",
  "properties": {
    "ref": {
      "type": "string",
      "maxLength": 4000
    },
    "limit": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    }
  },
  "required": [
    "ref"
  ],
  "additionalProperties": false
}

A Bible figure from Easton's Bible Dictionary (1897, PD) — summary + every verse that speaks of them (found + attributed; category tag is imperfect).

{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "name"
  ],
  "additionalProperties": false
}

Browse/search Easton's Bible Dictionary (people, places, terms).

{
  "type": "object",
  "properties": {
    "letter": {
      "type": "string",
      "maxLength": 4000
    },
    "search": {
      "type": "string",
      "maxLength": 4000
    },
    "limit": {
      "type": "integer",
      "minimum": -1000000000000,
      "maximum": 1000000000000
    }
  },
  "additionalProperties": false
}

Christ-signpost traces (prophecy/cross-cultural pointers to Jesus) — attributed, verdict CONCORDANT/MIXED, NEVER HOLDS (a signpost, not a proof). Pass id for one trace, q to search, else lists all.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    },
    "q": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

Harmony of the Gospels — one event of Christ's life, every gospel that records it, side by side (found, verbatim WEB text, never generated). Pass id for one event; else lists every event grouped by phase of the ministry.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

Timeline — Old Testament, New Testament (Acts onward), and Church History, one spine from creation to today. Genuinely disputed dates (early/late Exodus, the date of Revelation, etc.) carry both positions, never one verdict. Pass id for one event; else lists every event grouped by era and period.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

Back-matter reference tables: weights_measures, names_of_god, parables, miracles, book_intros, topical_index. Disputes carried (a cubit's two lengths, a book's two datings), refs verified against the corpus, names of God carry Strong's numbers that open in word_study. Pass table for one table; else the index of all six.

{
  "type": "object",
  "properties": {
    "table": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

The Atlas — biblical places with REAL coordinates, honestly held: located places carry lat/lon (cross-checked against an independent gazetteer); disputed sites (Mount Sinai, Cana, Golgotha) NAME their candidates instead of planting one flag; unlocatable places (Eden, Emmaus, Tarshish, Ophir) are honest blanks with no coordinates. Pass name for one place; else all places with by_status counts.

{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

The storyboards — the common narratives charted in the Bible FIRST (exile-and-return, the barren woman bears, down-to-the-pit-raised, the great reversal...), each instance real people with verified refs. The 17 movements are one shared vocabulary, so components isolate and recombine: pass movement='testing' to walk it across every storyboard. Pass id for one storyboard; else the index. FRAMING, always: a person may display characteristics of many of these at times of their life — a reference point, NEVER an identity assignment.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    },
    "movement": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

The quick-find index — ONE lookup across the whole reference section: archetypes, storyboards, movements, the six study tables, the atlas, harmony, timeline, and the encyclopedia. Each hit is a pointer to the real entry, which carries its own refs and its own honesty. The index finds; it never ranks truth.

{
  "type": "object",
  "properties": {
    "q": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "q"
  ],
  "additionalProperties": false
}

The original-language words behind a verse (Hebrew/Greek, with Strong's where known) — FOUND in the lexicon, never generated. Pass ref, e.g. 'John 3:16'.

{
  "type": "object",
  "properties": {
    "ref": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "required": [
    "ref"
  ],
  "additionalProperties": false
}

The canon as concentric layers — the undisputed 66 that all major traditions share, plus the books held BEYOND it by particular traditions, each framed on its own layer and never merged. REPORTS who holds what with the history; does not judge which canon is correct. Pass book for one book's status; else the overview.

{
  "type": "object",
  "properties": {
    "book": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

The teachings of Christ (Words in Red) — the frozen Greek anchor plus the history that ALIGNS to each teaching, gathered and attributed, never authored. Pass id for one teaching; else the queue.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}

Seeds of the Word (the Areopagus / logos spermatikos pass) — true fragments mined from the nations, ATTRIBUTED, CONCORDANT/signpost NEVER HOLDS; each names the idol it refuses and points to Christ (Acts 17; 1 John 4:1-3). Pass id for one seed, q to search, tradition to filter, else lists all with Paul's 7-step method.

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "maxLength": 4000
    },
    "q": {
      "type": "string",
      "maxLength": 4000
    },
    "tradition": {
      "type": "string",
      "maxLength": 4000
    }
  },
  "additionalProperties": false
}