Skip to content

PointSav Documentation

The engineering library for the PointSav platform — operating systems and services for regulated businesses that own their data, their AI, and their record-keeping outright. Where the monorepo holds the code, this wiki holds the reasoning: architecture, services, security, and the governance commitments that bind future development.

Wikipedia leapfrog design — muscle memory and 5% headroom

← All revisions

3376f084 · PointSav Digital Systems ·

editorial(applications): rewrite wikipedia-leapfrog-design (Track-B) — re-verified the article's own 2026-08-02 correction against current source: citation badges are confirmed still unbuilt (frontmatter cites: field exists but 'currently unused by any render path' per content/frontmatter.rs's own doc comment — no C2PA/badge-coloring code anywhere, moved from shipped to planned); real-time collaborative editing was real, then removed (not merely unbuilt as the old correction implied) — confirmed via the sibling collab-via-passthrough-relay.md finding this session, reframed with a cross-link instead of a fabricated --enable-collab flag description; dropped the reader density toggle's specific mechanics (entirely dependent on the unbuilt badge system) and an unconfirmed 'redb' technology name; fixed a duplicate body H1 (content-contract violation) on both EN+ES; ES pair had asserted both fabricated features as unqualified fact with no correction at all -- more wrong than EN, fully rewritten to match; register-clean

View the full record as of this revision →

@@ -9,14 +9,12 @@ content_type: topic
index_group: knowledge-and-editorial-applications
status: active
bcsc_class: public-disclosure-safe
last_edited: 2026-05-25
last_edited: 2026-08-22
editor: pointsav-engineering
paired_with: wikipedia-leapfrog-design.es.md
cites: [ni-51-102, osc-sn-51-721]
---

# Wikipedia leapfrog design — muscle memory and 5% headroom

The [[app-mediakit-knowledge]] wiki engine inherits 95% of its chrome from Wikipedia's established layout conventions. The remaining 5% is leapfrog headroom: additions that no Wikipedia reader has encountered, shipped as additive features so the baseline reading experience is undisturbed. This article explains why each design choice was made and what the structural contract with two different audiences looks like.

---
@@ -45,15 +43,7 @@ The eighteen sacred patterns catalogued in the engine's UX design specification 

## What was added beyond Wikipedia

Five additions ship beyond the Wikipedia inventory. Each is additive — no existing Wikipedia muscle-memory pattern is removed or altered.

### Citation badges

**Correction (2026-08-02):** the C2PA citation-badge feature below doesn't exist — zero hits for "C2PA," "Content Credentials," or any citation-badge implementation anywhere in `app-mediakit-knowledge/src/`; the real `src/citations.rs` implements only a plain footnote/citation-registry API with no verification-state coloring. The real-time collaborative editing claim further down (a shipped `--enable-collab` CRDT flag) is also fabricated — zero CRDT code or `--enable-collab` flag exists anywhere in the crate, same finding as `patterns/collab-via-passthrough-relay.md`. This article's disclosure-class field, forward-looking banner, masthead-band placeholder, and reader density toggle are all independently verified accurate — only these two features are invented. **Flagged, not resolved.**

Next to every inline citation reference, the chrome renders a small badge in the C2PA Content Credentials (CR) pin glyph convention. The badge defaults to neutral grey. This follows the lesson of the TLS padlock: in May 2023, Chrome removed the green padlock because 89% of users misread the positive state as "this site is trustworthy" rather than "the connection is encrypted." A positive-state signal that is ubiquitous becomes noise. Citation badges follow the same calibration: neutral grey for all-verified, amber for source drift, red for a missing or hash-mismatched citation, blue for forward-looking information. The verified-green state appears only when a reader explicitly toggles the "show all verified marks" density setting.

This addition does not interfere with footnote conventions. The badge appears at clause end, next to — not replacing — the existing `[n]` footnote superscript.
Three additions ship beyond the Wikipedia inventory today. Each is additive — no existing Wikipedia muscle-memory pattern is removed or altered.

### Forward-looking information banner

@@ -61,15 +51,11 @@ Articles whose frontmatter sets `forward_looking: true` render a cautionary bann

### Disclosure class field

Articles carry a `disclosure_class` field in frontmatter with three values: `narrative`, `financial`, `governance`. In the current phase this field is invisible to readers — it appears in the JSON-LD structured data in the rendered article's `<head>` block. A planned linter will check that articles classified as financial carry an iXBRL block and that articles with `forward_looking: true` carry the required cautionary language patterns.
Articles carry a `disclosure_class` field in frontmatter with three values: `narrative`, `financial`, `governance`. This field is invisible to readers — it appears in the JSON-LD structured data in the rendered article's `<head>` block. A planned linter will check that articles classified as financial carry an iXBRL block and that articles with `forward_looking: true` carry the required cautionary language patterns.

### IVC masthead band placeholder

A single horizontal strip below the title row. In the current phase this band renders placeholder text indicating that verification is not yet available. A planned future phase is intended to fill the band with a live verification summary: the count of claims in the article, the count verified, and the time since the last drift check. The band's structural location is established now so the template is not restructured when the verification machinery ships.

### Reader density toggle

A preference control with three states: Off, Exceptions only (default), All. The setting persists across sessions. In the default state, neutral grey marks are rendered at low visual weight and coloured exception marks (amber, red, blue) are prominent. The All state renders verified-green marks alongside exception marks, for readers who want the full verification picture. The Off state provides the pure Wikipedia reading experience.
A single horizontal strip below the title row. This band renders placeholder text indicating that verification is not yet available. A planned future phase is intended to fill the band with a live verification summary: the count of claims in the article, the count verified, and the time since the last drift check. The band's structural location is established now so the template is not restructured when the verification machinery ships.

---

@@ -99,13 +85,20 @@ An engineering reader has the same navigational experience, and also notices the

The following items are intended or planned for later phases. No specific delivery dates are stated. Material changes to the delivery plan would be recorded in the engineering phase plan documents and the workspace changelog, in accordance with [ni-51-102] continuous-disclosure obligations.

**Per-claim cryptographic verification badges** (planned): the inline badge system described above, intended to be wired to a content-addressed federation layer in a future phase. The masthead band placeholder and reader density toggle ship as structural locations now; the machinery intended to fill them is planned for a later phase.

**Real-time collaborative editing** (opt-in): the CRDT implementation ships behind a `--enable-collab` flag. Intended for trusted multi-user deployments where multiple authors edit the same article simultaneously with shared cursor awareness. Git remains canonical; the CRDT is intended as session-ephemeral state that serialises to a commit on explicit save.
**Per-claim citation-verification badges** (planned): frontmatter already carries a
bracket-ID `cites:` field for this — distinct from the already-shipped `references:`
footnote mechanism — but no render path consumes it yet; a later phase is intended to wire
it to an inline badge next to each citation, tied to the same verification machinery
that fills the masthead band. A reader-facing density control for the resulting marks is
intended alongside it. Neither exists in the reading experience today.

**Mobile editor**: a mobile-first edit surface is intended for a later phase. The current editor is desktop-first.
**Real-time collaborative editing**: the engine has no in-browser editor and no write
route today, for any editing mode. A real-time collaborative design — a relay that
forwarded CRDT updates between clients without holding document state itself — was built
and later removed; see [[collab-via-passthrough-relay]] for why. Nothing in the current
build offers collaborative or single-author in-browser editing.

**Citation-graph navigation**: intended affordances for navigating "what this article cites" and "what cites this article", planned for after the redb wikilink graph ships.
**Citation-graph navigation**: intended affordances for navigating "what this article cites" and "what cites this article", planned for after a wikilink graph store ships.

**Semantic browse**: "articles like this" and "concepts adjacent to this" surfaced from the citation graph, not from an inference model in the read path. Intended as a complement to category browse.

@@ -117,3 +110,4 @@ The following items are intended or planned for later phases. No specific delive
- [[knowledge-wiki-home-page-design]] — the home page design intent and Wikipedia conventions applied
- [[source-of-truth-inversion]] — the canonical/view/ephemeral pattern that underpins the engine's editorial posture
- [[substrate-native-compatibility]] — the rationale for the substrate-native API surface over a MediaWiki shim
- [[collab-via-passthrough-relay]] — the real-time collaborative editing design that was built, then removed
Important Information

Corporate structure. PointSav Digital Systems ("PointSav") is currently a trade name of Woodfine Capital Projects Inc. ("Woodfine"), planned to become a wholly-owned Woodfine subsidiary upon incorporation. PointSav does not itself offer, sell, or solicit any security. Any securities offering associated with Woodfine's real-property direct-hold solutions is made exclusively by Woodfine, and only by means of the applicable Private Placement Memorandum.

No investment advice. This wiki's content is provided for engineering, operational, research, and development purposes. Nothing on this wiki constitutes investment advice or a solicitation to invest in any Woodfine partnership or direct-hold solution.

Intellectual property. The PointSav name, trade name, wordmark, and marks, together with all current and future PointSav- and Totebox-branded products, services, and offerings — and the software, source code, documentation, design system, and all related materials — are proprietary to Woodfine and its affiliates, except for components identified as open source. No rights are granted except as expressly set out in a written license or agreement. The full trademark notice appears in the footer of every page on this site.

Open source components. Portions of the platform are made available under permissive open-source licenses identified in the accompanying repository. Use of those components is governed by their respective license terms.

No warranty; informational use. Content on this wiki is provided for general informational purposes only and does not constitute a representation, warranty, or commitment with respect to product functionality, availability, pricing, or roadmap. Some articles describe planned or intended features, capabilities, and milestones — language such as "planned," "intended," "targeted," "may," and "expected" marks this forward-looking content, which is subject to change and does not constitute a commitment regarding future performance.

Confidentiality. Where an article describes an operational or deployment detail that is not intended for public disclosure, that article is not published on this wiki. Content here is general-purpose engineering documentation, not customer-specific configuration.

Jurisdiction. Woodfine Capital Projects Inc. is organized in British Columbia, Canada. References to the Sovereign Data Foundation on this wiki describe a planned or intended initiative only, not a current equity holder or active governance body.

Changes to this notice. PointSav may update this notice from time to time; the version posted on this page governs.

Not a filing system. This wiki is not a securities filing system, an electronic disclosure repository, or a substitute for SEDAR+ or any other regulatory filing system. Formal securities filings are made through the applicable regulatory filing system, not through this wiki.

Full disclaimer. This notice supplements, and does not replace, the full Disclaimers article. In the event of any conflict, the full Disclaimers article governs.

Read the full disclaimer →