Roles
daftar decides who you are; fihrist decides whether you come in, and as what. Two roles, and one rule that no role changes.
How membership works
Every member of fihrist has a daftar account — fihrist holds no passkey and sends no email, so it cannot sign anyone in on its own. An admin adds your email address to fihrist's list of people; the first time you sign in, your daftar identity is bound to that entry, and from then on you are you. Switching a member off ends their sessions at once. Nobody is added by accident, and nobody is added by a machine.
Two roles
| researcher | admin | |
|---|---|---|
| Home, Search, Library, Corpus, a book, a page, Help, Changelog, Connect | ✅ | ✅ |
| Notebook — your own notes, private by default; Shared notebooks; sharing your own | ✅ | ✅ |
| Tokens — your own read and notes tokens for an assistant | ✅ | ✅ (and admin) |
| Add books, Maintenance, Readability, Glyph decisions, the catalogue review, People | ✅ | |
| 🔴 Promote anything above not quotable | never | never — that decision is made by a named person outside any role |
What a researcher does
Searches, opens pages, reads, and files loci into their notebook — which book, which page, what was searched. Never the text: the notebook holds signposts, not quotations. A note can be shared with the team; only its author can change it.
What an admin does
Adds and switches off members. Adds books to the library and runs the maintenance that makes them searchable. Reviews the catalogue — which work a file is, which volume, whose — one decision per work, under their own name. Decides on the glyphs the decoder is unsure of. Every one of these acts is written to an audit log with the admin's name.
Your assistant acts as you
A token from your Tokens page lets Cowork, Claude or any assistant that speaks MCP search the library as you, within a scope you chose — read finds pages, notes also files loci in your notebook. It receives the same 🔴 answers you do: it can tell you where to look, and it cannot quote a page either. A token is shown once and can be revoked at any time; a revoked token stops working immediately.
What taking part involves, beyond searching
The library needs readers. Naming its works — the catalogue holds hundreds of entries a model suggested and nobody has vouched for — and, one day, typing a page by hand so that the machine's reading can be measured against a human's. If that is you, tell us.