Commit graph

929 commits

Author SHA1 Message Date
TheFlow
8a92eba92f feat(landing): feature EU Policy Brief in What's New and Research Papers
Added the newly-published EU Policy Brief (EN + DE) to both the "What's
New" section and the "Research Papers" section of the tractatus landing
page, using the clean URL /whitepapers/eu-policy-brief so the card
continues to resolve regardless of HTML extension handling.

- What's New: new featured card positioned between Distributive Equity
  whitepaper and the AI Governance series, styled with the blue-cyan
  palette to differentiate from the parent paper's indigo-purple
- Research Papers: second-featured entry under Distributive Equity
- Locale keys added to homepage.json for EN, DE, FR, MI
  (NL not present as a tractatus locale; DeepL-translated for the
  three non-English ones — DE/FR/MI, pending human review)
2026-04-18 07:50:01 +12:00
TheFlow
f6be654573 fix(server): enable clean URLs (/whitepapers/foo → foo.html)
Add extensions: ['html'] to express.static so the .html-less URLs resolve
to their matching files. Affects every static HTML route including
/whitepapers/distributive-equity, /whitepapers/eu-policy-brief, etc.

.html-suffixed URLs continue to work unchanged. Non-existent paths still
return the friendly 404 via the notFound middleware.
2026-04-18 07:41:29 +12:00
TheFlow
2480d73d6f feat(whitepapers): add EU Policy Brief (EN + DE) derived from Distributive Equity
Policy-audience derivative of the V1.0 Distributive Equity whitepaper:

- Three mechanisms (SLL, Guardian Agents, Federation) mapped to EU
  regulatory hooks (AI Act Arts 2/50, EMFA, GDPR Art 9, DSA, CLOUD Act)
- Structural audit criteria (5), transferability section (3 levels),
  three open research questions
- Licensing posture stated accurately: Tractatus Framework is Apache 2.0
  and public on Codeberg; Village platform codebase is proprietary with
  specific modules scoped for progressive open-source release under the
  pending NLnet Fediversity grant, subject to Board + Advisory Committee
  approval
- Carpool timeline stated as "in build, expected operational early May
  2026" — matches user's written commitment

EN and DE HTML reuse the distributive-equity.html template wrapper with
CSP-compliant class-based styling (no inline styles). PDFs generated via
pandoc + xelatex.

Parent paper DOI: 10.5281/zenodo.19600614
Brief Zenodo deposit is pending (will receive its own DOI).
2026-04-18 07:36:57 +12:00
TheFlow
861f38d666 feat: add /blog index route + friendly HTML 404 page
Previously /blog returned JSON 404 because only /blog/:slug was wired;
now app.get('/blog') serves the existing public/blog.html.

notFound middleware now detects browser GETs (Accept: text/html,
path not /api/*) and serves public/404.html; API clients keep JSON.
Added public/404.html styled to match the site theme.

Also cleaned up 11 pre-existing lint errors in src/server.js (unused
rate-limit/csrf imports, brace-style on the cache-control chain) while
editing the file.
2026-04-17 14:46:49 +12:00
TheFlow
a2d027c07a fix: What's New badge March → April 2026 in all locale files
Locale files had stale "March 2026" badge. HTML fallback said April
but i18n system overwrites with locale value. Fixed EN/DE/FR/MI.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-17 12:21:23 +12:00
TheFlow
64dd237628 feat: reading-mode toggle on all 3 architectural-alignment papers
Overview/Standard/Deep density modes applied to academic, community, and
policymakers editions. Reuses existing reading-mode.js component.
Pre-existing inline-style CSP warnings in licence sections unchanged.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-17 08:21:58 +12:00
TheFlow
f8169c4d50 terminology: standardise SLL as "Situated Language Layer"
Replace all instances of "Sovereign Locally-trained Language Model" with
"Situated Language Layer" across village-ai.html, all 3 architectural-alignment
papers, and the EN locale file. Canonical definition: an architectural layer
comprising a small language model that is sovereign (locally trained, locally
deployed, community-controlled) and situated (shaped by the specific context,
values, and vocabulary of the community it serves).

Note: pre-existing inline-style CSP warnings in alignment paper licence
sections (pandoc-generated) — not introduced by this commit.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-17 07:37:34 +12:00
TheFlow
11fa072999 chore: bump cache version for deployment 2026-04-17 07:15:45 +12:00
TheFlow
240cc7d3a9 feat: reading-mode toggle for long research papers
Three density modes: Overview (~3 min), Standard (~12 min), Deep (~25 min).
Applied to researcher.html — 7 sections tagged with data-reading-level.
Persists user preference in localStorage. Auto-injects toggle UI.
Reusable component for architectural-alignment papers.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-17 07:15:44 +12:00
TheFlow
2909ab98fe feat: whitepaper integration + i18n + hero CTA cleanup
- Add Distributive Equity whitepaper to Publications modal (first in Recent Papers)
- Add whitepaper featured card to Research Papers section (homepage)
- i18n: whitepaper card + AI Governance card translations (DE/FR/MI)
- i18n: Research Papers section heading + subtitle translations
- Remove "See It in Production" hero CTA (misleading for research site)
- Sync whitepapers/ directory from server (prevents deletion on next deploy)
- researcher.html: whitepaper as lead section, Alexander demoted
- timeline: April 2026 entry added

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-16 21:28:12 +12:00
TheFlow
ff7f22afdf chore: bump cache version for deployment 2026-04-16 21:23:45 +12:00
TheFlow
f3e7dfdbae chore: bump cache version for deployment 2026-04-16 21:18:26 +12:00
TheFlow
8d5dde1c27 feat: add AI Governance Series featured card to landing page
Full-width featured card in the What's New section linking to the
AI Governance series hub at mysovereignty.digital/ai-governance.html.
Positioned above the existing 3-column grid (Mythos, Tenant Isolation,
Encryption) for maximum visibility. Links to external domain (opens
in new tab).

The series covers philosophy, philanthropy, sovereignty, Māori data
governance frameworks, and practical action — written for community
leaders, published under CC BY 4.0.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-12 17:52:03 +12:00
TheFlow
b7f2245ec4 fix: update village-ai.html — replace stale 3B/8B architecture with current
Replaced Two-Model Architecture (3B/8B) with Specialized Model Architecture
(five production 14B models by community type). Updated Training Tiers:
Tier 2 now describes product-type specialization, not per-tenant adapters.
Fixed infrastructure section: WireGuard inference is live not planned,
model size corrected to 14B. Updated limitations and production timeline.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-09 17:29:41 +12:00
TheFlow
36122fadfb docs: sanitise draft research notes — remove internal details
Removed: specific GPU models/VRAM, throughput numbers, training
hyperparameters, network topology, FAQ layer size, grant amounts,
cost breakdowns, named internal dependencies, database sizes,
document counts, key escrow topology.

Retained: research findings, accuracy metrics, architecture principles,
methodology descriptions at appropriate abstraction level.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-09 17:06:31 +12:00
TheFlow
f72a5ce041 feat: April 2026 research content — Mythos analysis, tenant isolation, security posture
- Mythos threat analysis PDF added to downloads
- Two blog posts seeded: Mythos/cyberattack economics, physical tenant isolation research
- Homepage "What's New" updated from March to April 2026 (Mythos, Sovereign Database, encryption)
- Draft research notes: SLL model specialization, security posture assessment
- Seed script for blog post creation

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-09 14:56:38 +12:00
TheFlow
7064eacdcc fix(security): remove internal tooling from public repo
Some checks failed
CI / Run Tests (push) Has been cancelled
CI / Lint Code (push) Has been cancelled
CI / CSP Compliance Check (push) Has been cancelled
Removed .claude/ (session archives, hooks, instruction history),
.credential-vault/ (internal tooling), .memory/ (governance state),
.stripe-ids.json (test Stripe IDs), .migration-backup/.

Added all to .gitignore to prevent future commits.
2026-03-27 13:16:00 +13:00
TheFlow
9e6ed86342 feat: source-code page links to live Forgejo instance
Forgejo is now running at git.mysovereignty.digital.
Updated source-code.html: "Request Access" → direct link to Forgejo,
infrastructure section updated from "planned" to live link.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 21:36:16 +13:00
TheFlow
cb37ccdc1c chore: bump cache version for deployment 2026-03-26 18:36:00 +13:00
TheFlow
3f2cd142ed feat: self-host all CDN assets — zero external dependencies
- Self-hosted: highlight.js (core + 5 language packs), marked.js, Chart.js
- CSP cleaned: removed cdn.jsdelivr.net, cdnjs.cloudflare.com,
  fonts.googleapis.com, fonts.gstatic.com
- Koha transparency page: Chart.js now self-hosted
- Tractatus now loads zero assets from external CDNs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 18:35:49 +13:00
TheFlow
7ed150dc10 chore: bump cache version for deployment 2026-03-26 18:14:36 +13:00
TheFlow
d8f8829635 feat: eliminate all GitHub references from agenticgovernance.digital
- Created /source-code.html — sovereign hosting landing page explaining
  why we left GitHub, how to access the code, and the sovereignty model
- Navbar: GitHub link → Source Code link (desktop + mobile)
- Footer: GitHub link → Source Code link
- Docs sidebar: GitHub section → Source Code section with sovereign repo
- Implementer page: all repository links point to /source-code.html,
  clone instructions updated, CI/CD code example genericised
- FAQ: GitHub Discussions button → Contact Us with email icon
- FAQ content: all 4 locales (en/de/fr/mi) rewritten to remove
  GitHub Actions YAML, GitHub URLs, and GitHub-specific patterns
- faq.js fallback content: same changes as locale files
- agent-lightning integration page: updated to source-code.html
- Project model: example URL changed from GitHub to Codeberg
- All locale files updated: navbar.github → navbar.source_code,
  footer GitHub → source_code, FAQ button text updated in 4 languages

Zero GitHub references remain in any HTML, JS, or JSON file
(only github-dark.min.css theme name in highlight.js CDN reference).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 18:14:26 +13:00
TheFlow
b5673c1ecf chore: bump cache version for deployment 2026-03-24 18:41:26 +13:00
TheFlow
f913a1d166 chore: bump cache version for deployment 2026-03-17 07:20:18 +13:00
TheFlow
5e981db9d7 chore: bump cache version for deployment 2026-03-14 18:22:11 +13:00
TheFlow
b655c8f568 chore: bump cache version for deployment 2026-03-14 17:58:08 +13:00
TheFlow
fdee84044a chore: bump cache version for deployment 2026-03-13 20:50:13 +13:00
TheFlow
d3807ed58a fix: add visibility check to getDocument/getTranslations endpoints
Non-public documents (internal, archived, confidential) were accessible
to unauthenticated users via direct slug/ID lookup. List and search
endpoints already filtered for visibility: 'public', but the individual
document endpoints did not. Added optionalAuth middleware and visibility
checks so non-public docs return 404 to public users while remaining
accessible to admin users.

Also adds Guardian Agents translations to village-case-study locale
files (DE, FR, MI) — 8 new keys per locale, flow step renumbered
6→7→8 with new Guardian Agents verification step at position 6.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 17:27:48 +13:00
TheFlow
53cc472247 feat: add Guardian Agents to village-case-study.html
- Add Guardian Agents verification as step 6 in governance flow (8 steps, was 7)
- Add Guardian Agents featured card in features section
- Update deployment facts: 5 governed features (was 4)
- Add verification evidence to "What This Demonstrates"
- Add Guardian Agents Philosophy paper link to CTA section
- Update EN locale to match

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 15:27:10 +13:00
TheFlow
d1950d3a4d chore: bump cache version for deployment 2026-03-13 15:21:07 +13:00
TheFlow
8ecb0505f5 feat: rewrite architecture.html — Guardian Agents, defence in depth, i18n refresh
- Rewrite architecture.html from 1112 to 481 lines
- Add Guardian Agents section (4-phase verification, philosophical foundations)
- Add defence in depth narrative (3 layers with honest limitations)
- Compress five principles (remove examples, keep descriptions)
- Remove redundant sections (Six Core Services grid, Interactive SVG,
  Data Visualizations, Two Implementations, Applied to Training)
- Add Guardian Agents Philosophy paper to research-papers-modal.js
- Retranslate all locales (de, fr, mi) via DeepL with brand preservation

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 15:21:01 +13:00
TheFlow
55c1838836 chore: bump cache version for deployment 2026-03-13 14:01:01 +13:00
TheFlow
aa2858037e fix: replace incorrect beta pilot card with Village case study
The third "What's New" card incorrectly linked to /blog.html with product
pricing — wrong site, wrong audience. Replaced with Village case study link
appropriate for the research site.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 14:01:00 +13:00
TheFlow
c1d5016381 chore: bump cache version for deployment 2026-03-13 13:58:03 +13:00
TheFlow
2d0cef684e feat: refresh landing page — What's New section, Guardian Agents, updated timeline
Landing page restructured:
- New "What's New" section after hero (philosophy article, Guardian Agents, beta pilot)
- Problem section condensed (27027 story kept, corollary collapsed to summary)
- Guardian Agents featured prominently in architecture section with 4-phase grid
- Production Evidence updated: 4 stats including Guardian verification phases, 17 months
- Timeline extended to Mar 2026 (steering vectors, Guardian Agents, beta)
- Deploy script improved: CSP check, automated health check, file count verification

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 13:57:56 +13:00
TheFlow
2c14c91c16 chore: bump cache version for deployment 2026-03-13 13:18:51 +13:00
TheFlow
f43e31f63d feat: add Guardian Agents section to village-ai.html with philosophy blog link
- New Guardian Agents section between What's Live Today and Limitations
- Four verification phases (response, claim-level, anomaly, adaptive learning)
- Philosophical foundations grid (Wittgenstein, Berlin, Ostrom, Te Ao Māori)
- Guardian Agents card added to What's Live Today grid
- Philosophy blog post link added to Further Reading
- All i18n keys added to en/village-ai.json

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 13:18:43 +13:00
TheFlow
871ea0df27 chore: bump cache version for deployment 2026-02-27 13:42:34 +13:00
TheFlow
608f843798 fix: Resolve 4 of 5 Dependabot security vulnerabilities
- axios ^1.12.2 → ^1.13.5 (CVE-2026-25639, high: DoS via __proto__)
- pa11y ^9.0.1 → ^9.1.0 (pulls bfj 9.1.3 which drops jsonpath,
  fixing CVE-2026-1615, high: arbitrary code injection)
- ajv 6.12.6 → 6.14.0 via npm audit fix (CVE-2025-69873, medium: ReDoS)
- qs 6.14.1 → 6.14.2 via npm audit fix (CVE-2026-2391, low: DoS)

Remaining: minimatch <10.2.1 (CVE-2026-26996, high) — dev-only
dependency in eslint 8.x and jest 29.x. Fix requires eslint 10.x
migration (breaking config change). No production exposure.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 12:32:44 +13:00
TheFlow
82e07cbfe2 fix: Remove confidential details from Village AI page translations
Matches village-ai.html corrections across EN/DE/FR/MI:
- Remove specific run numbers, metrics, hardware model, base model name
- Replace DPO references with QLoRA fine-tuning (actual method used)
- Add Operational/Planned badges to 3B/8B model cards
- Fix Catalyst NZ presented as active (shelved)
- Add 7th bias category (Confidence-Correctness)
- Change "four federated tenants" to "multiple tenants"

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 10:31:09 +13:00
TheFlow
302bf516f3 chore: bump cache version for deployment 2026-02-24 10:29:57 +13:00
TheFlow
1b1d955c89 fix: Update Village AI page — training status is now factual
Training has completed 7 runs (Run 006 is production model).
Hardware is installed and operational. Training-time governance
is empirically validated. Updated status, caveat, limitations
item1 (training begun) and item5 (persistence under research)
across HTML + 4 locale files (en, de, fr, mi).

Translations via DeepL. Brand names preserved.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 09:54:49 +13:00
TheFlow
0893e4979d chore: bump cache version for deployment 2026-02-23 22:10:36 +13:00
TheFlow
2238547344 refactor: Rename "Home AI" → "Village AI" across entire codebase
- 57 files modified, 5 files renamed (home-ai → village-ai)
- HTML pages: all user-facing text, data-i18n attributes, anchor IDs, CSS classes
- i18n JSON: keys (home_ai → village_ai) and values across en/de/fr/mi
- Locale files renamed: home-ai.json → village-ai.json (4 languages)
- Main page renamed: home-ai.html → village-ai.html
- Research downloads: translated terms updated (French "IA domestique",
  Māori "AI ā-whare"/"AI kāinga" → "Village AI" per brand name rule)
- JavaScript: navbar component, blog post scripts
- Markdown: research timeline, steering vectors paper, taonga paper

Aligns with community codebase rename (commit 21ab7bc0).
"Village" is a brand name — stays untranslated in all languages.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 22:09:44 +13:00
TheFlow
ec7ab968ea docs: Session handoff — mobile docs UX + cross-project skills
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 13:00:17 +13:00
TheFlow
7e0938f841 feat(docs): mobile UX improvements for docs page
On mobile (<1024px), skip auto-loading first document so users see the
sidebar category browser. Add sticky blue navigation bar showing current
document title. Expand all categories by default on mobile initial view.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 07:44:25 +13:00
TheFlow
8323cca70a chore: bump cache version for deployment 2026-02-23 07:43:29 +13:00
TheFlow
4557f4b420 fix(docs): require document_type and audience before publishing
Documents could be set to visibility: 'public' without document_type,
audience, or status fields — either via bulk migration scripts or the
upload-document.js script. This allowed internal session logs to appear
in the public docs UI.

Safeguards added:
- Document.publish() now rejects if document_type or audience is missing
- Document.publish() now sets status: 'current' automatically
- upload-document.js requires --type and --category flags (was optional)
- upload-document.js sets status: 'current' and document_type on insert

Also archived 2 internal Phase 5 PoC session documents that were
incorrectly public, and set status: 'current' on 4 legitimate public
documents that were missing it.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-22 18:48:48 +13:00
TheFlow
4c6c72847d fix: Use long slugs for document links matching API list response
The docs.html ?doc= parameter matches against the document list from
the API, which returns only long slugs. The short slug for STO-RES-0009
wasn't found, showing "Select a Document" instead. Also fixes two
docs-viewer.html links in home-ai.html to use docs.html routing.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-22 18:18:20 +13:00
TheFlow
f145f52329 chore: Cache-bust index.html scripts for research modal link fix
Bumps version parameter so browsers fetch the updated
research-papers-modal.js with docs.html routing.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-22 17:52:18 +13:00