Desktop app. Metadata audit server.
The supported workflow uses a Windows capture app, signed device requests and the existing Supabase account for private metadata storage.
Capture locally
The app owns manuscript text, source matching and passage lineage. Its Windows-protected recovery files also retain the retry queue. Source details are minimized before upload.
Verify and store metadata
The server checks linked-device signatures and a closed metadata schema. A gateway-protected database function independently checks privacy bounds, ownership, sequence continuity and conflicts. Checkpoints receive an Ed25519 server signature.
Review a fixed version
Owners inspect private reports and publish chosen checkpoints. The browser matches a locally opened text file by its exact fingerprint before applying highlights. Manuscript content is never sent by that file picker.
API and setup documentation →