Roles
daftar decides who you are; fihrist decides whether you come in, and as what. Four roles, and one rule that no role changes.
How access works
Every user of fihrist has a daftar account — fihrist holds no passkey and sends no email, so it cannot sign anyone in on its own. An admin adds your email address to fihrist's list of users; the first time you sign in, your daftar identity is bound to that entry, and from then on you are you. Switching a user off ends their sessions at once. Nobody is added by accident, and nobody is added by a machine.
Four roles
| partner | researcher | reviewer | admin | |
|---|---|---|---|---|
| Find a book — the books we hold, their volumes, and how good our copy of each is | ✅ | ✅ | ✅ | ✅ |
| Home, Search, Library, Corpus, a book, a page, Help, Changelog, Connect | ✅ | ✅ | ✅ | |
| Notebook — your own notes, private by default; Shared notebooks; sharing your own | ✅ | ✅ | ✅ | |
| Tokens — your own read and notes tokens for an assistant | ✅ | ✅ | ✅ (and admin) | |
| Glyph and honorific decisions — is each glyph the letter it was given; what is on the page where a machine wrote ﷺ? Signed with your name | ✅ | ✅ | ||
| Add books, Maintenance, Readability, the catalogue review, Users | ✅ | |||
| 🔴 Promote anything above not quotable | never | never | never | never — that decision is made by a named person outside any role |
What a partner does
A publisher, or a research centre, that sends us books. A partner opens one page: Find a book, which shows the books we hold, their volumes, and how good our copy of each is — so a partner can see what to send. Nothing else of fihrist opens to a partner: no search, no page, no token.
What a researcher does
Searches, opens pages, reads, and files loci into their notebook — which book, which page, what was searched. Never the text: the notebook holds signposts, not quotations. A note can be shared with the team; only its author can change it.
What a reviewer does
Everything a researcher does, and one thing more: decides on the glyphs the decoder is unsure of. For each glyph the sheet shows the shape beside the letter it was given, and real lines it appears in; the reviewer says whether the letter is right, and if not, what it should be. Every decision is signed with the reviewer's own name and kept.
What an admin does
Adds and switches off users. Adds books to the library and runs the maintenance that makes them searchable. Reviews the catalogue — which work a file is, which volume, whose — one decision per work, under their own name. Decides on the glyphs the decoder is unsure of. Every one of these acts is written to an audit log with the admin's name.
Your assistant acts as you
A token from your Tokens page lets Cowork, Claude or any assistant that speaks MCP search the library as you, within a scope you chose — read finds pages, notes also files loci in your notebook. It receives the same 🔴 answers you do: it can tell you where to look, and it cannot quote a page either. A token is shown once and can be revoked at any time; a revoked token stops working immediately.
What taking part involves, beyond searching
The library needs readers. Naming its works — the catalogue holds hundreds of entries a model suggested and nobody has vouched for — and, one day, typing a page by hand so that the machine's reading can be measured against a human's. If that is you, tell us.