Draw.io diagrams
Five high-level views of the whole system, and eleven mid-technical ones of its mechanisms.
Open any diagram to pan and zoom, or download its .drawio source and edit it in diagrams.net.
Who writes policy, where it lives and where it is enforced — the whole system on one page.
The eight permission categories — view, interact or extend, over npubs, relays and events — plus restrictions, deny gates and the global set.
Input and output evaluation side by side, and one thread seen from both directions.
How the guardian set changes: offer, poll, validate, prompt, ratify, settle.
Via peer, via curator, or through a relay's operator — with the map, the four restriction sets, the routing law and the rules that keep it safe.
The association, the two offers, the two policy carriers and the restriction profile; binding coordinates and the sealed address blind(G,S).
global, deny and permissions; the permission card; restriction entries; list references; strict parsing and how failures degrade.
How a restriction set resolves to allow or deny, and why a deny in the global set blocks while a deny on a permission voids only that permission's entry (interact/relay aside).
Immutable, public, content-addressed rule sets; their two roles; how a reference resolves; the six starter profiles and a week under the starter composite.
The ten steps from the stored known world to one construct; the loading rule; the contradictions that refuse, and the unbound state.
Authenticity, reduction, the global gate, the layer-0 deny check, the hit, the fall-through and the render walk; the four hits; the kind 0 clause.
Sanity, reduction, the gate, the deny sweep, coverage, the one edit and destinations — with a worked reply.
Peeling a NIP-17 message, the three oracles of a TEPP signer, the policy read, and the regime of private messaging.
TEPP signer, TEPP client with or without the key, relays and spaces — and what each enforces, axis by axis.
Initialization, background refresh, anti-rollback marks, construct age, and what happens to material that has not loaded.
What a trace carries, the fifteen layers, findings, determinism, and what never leaves the device.
Colours mean the same thing in every diagram: amber for guardians, blue for the subject, purple for curators, peers and operators, teal for the engine, red for deny, green for permit, yellow for restrictions and profiles, slate for sealed material. Each diagram's footer lists the specification statements it draws on.
