Skip to content

PointSav Documentation

The engineering library for the PointSav platform — operating systems and services for regulated businesses that own their data, their AI, and their record-keeping outright. Where the monorepo holds the code, this wiki holds the reasoning: architecture, services, security, and the governance commitments that bind future development.

Collaboration via passthrough relay — a removed substrate pattern

The passthrough relay is a collaborative-editing design in which the collaboration server holds no document state at all: it forwards CRDT update messages between connected clients over a per-document WebSocket channel without ever decoding or storing what those messages encode. The canonical git tree stays the sole authoritative record of an article's content, and every edit that reaches it travels the same save path a single-author edit would.

The design was implemented in the wiki engine, shipped behind an opt-in flag, and later removed outright — the engine today has no collaborative-editing code path. This article is a historical record of a pattern that was built and withdrawn, kept because the question it answers recurs for any collaborative surface the platform builds later.

The pattern in one paragraph

The passthrough relay pattern was a real-time collaborative editing design implemented in the wiki engine and later removed. It inverted the normal assumption about where authority sits in a collaborative editing system: the relay server held no document state at all, so the canonical git tree remained the sole authoritative record of every article's content at every point in time. Concurrent editors connected over WebSocket to a per-document broadcast channel, and the server's only job was to forward CRDT update messages between those clients — it never decoded or stored the document state those messages encoded. The design is documented here because the reasoning behind it is worth understanding even though the implementation is gone: it is a clean answer to a question any collaborative-editing feature has to answer eventually.

Why it matters: a design that never stores document state on the server has nothing to lose if the server crashes mid-session — the worst case is a dropped connection, never a corrupted or lost document.

Why a passthrough relay rather than a CRDT server

Server-authoritative collaborative editors operate on a different model: the collaborative editing server holds a live, mutable document object, and that object is the primary record of current content. A git export is a snapshot taken from that server record, not the other way around. The consequence is a permanent second authoritative state — two places in the system hold an answer to "what is the current text of this document," and they can drift if the export mechanism fails or the server crashes before a save.

The passthrough design eliminates that second record entirely. The server acts as a message conduit, not a store — it relays update messages between clients without ever deserializing or persisting the document state they carry. The only document state the server knows in this design is whatever a client sends through the ordinary save path.

A reader saving an article never depends on the collaboration server having done anything right. Every edit that reaches the canonical record does so through the same save path a single-author edit would use — collaboration is additive to that path, never a second route into it.

What this meant for disclosure posture

This mattered for the disclosure-substrate posture the wiki engine follows. The canonical disclosure record is the git tree: every article's content history is a sequence of signed commits, and that sequence is what an audit would produce. A server-authoritative CRDT store would exist in parallel with that sequence, unsigned, representing content states that never appeared in git. Under the passthrough design, no such parallel record existed — in-flight CRDT state was never written anywhere, so it was never part of the disclosure record to begin with. The record closed at save time, not before.

Why it matters: an auditor reconstructing what a document said at any point in time never has to reconcile two competing records — there was only ever one, the signed git history.

Current status

The collaboration feature this pattern describes has been removed from the wiki engine. It shipped gated behind an opt-in flag, was never enabled by default, and was later deleted outright rather than left dormant — the engine today has no collaborative-editing code path at all. This article documents the design as a historical record of a pattern that was built, worked as designed, and was subsequently withdrawn; it does not describe current wiki-engine behavior.

Why it matters: a reader evaluating the wiki engine today should not expect real-time co-editing to be available — this article explains a design the platform tried and retired, not a currently shipping feature.

Generalising beyond the wiki

The passthrough relay is a substrate pattern, not a wiki-specific feature, and the underlying design question outlives this particular implementation. Any service that wants concurrent-editing semantics faces the same question: does the collaboration infrastructure need to hold document state on the server, or can that state live entirely on the clients and in canonical storage? The passthrough answer applies cleanly when the collaborative document type maps directly onto the canonical storage type — a text document collaboratively edited into a git-committed Markdown file, for instance. It applies less cleanly where the canonical storage is a different shape than the live editing session's document model, and where mapping one onto the other would require an adapter layer the passthrough design does not itself provide.

Why it matters: the design is a reusable answer, not a one-off wiki feature — any future collaborative surface the platform builds can reuse this reasoning instead of re-deriving it from scratch.

See also

Cite this record: /wiki/collab-via-passthrough-relay — revision a8a729bc, last updated 22 August 2026.

Important Information

Corporate structure. PointSav Digital Systems ("PointSav") is currently a trade name of Woodfine Capital Projects Inc. ("Woodfine"), planned to become a wholly-owned Woodfine subsidiary upon incorporation. PointSav does not itself offer, sell, or solicit any security. Any securities offering associated with Woodfine's real-property direct-hold solutions is made exclusively by Woodfine, and only by means of the applicable Private Placement Memorandum.

No investment advice. This wiki's content is provided for engineering, operational, research, and development purposes. Nothing on this wiki constitutes investment advice or a solicitation to invest in any Woodfine partnership or direct-hold solution.

Intellectual property. The PointSav name, trade name, wordmark, and marks, together with all current and future PointSav- and Totebox-branded products, services, and offerings — and the software, source code, documentation, design system, and all related materials — are proprietary to Woodfine and its affiliates, except for components identified as open source. No rights are granted except as expressly set out in a written license or agreement. The full trademark notice appears in the footer of every page on this site.

Open source components. Portions of the platform are made available under permissive open-source licenses identified in the accompanying repository. Use of those components is governed by their respective license terms.

No warranty; informational use. Content on this wiki is provided for general informational purposes only and does not constitute a representation, warranty, or commitment with respect to product functionality, availability, pricing, or roadmap. Some articles describe planned or intended features, capabilities, and milestones — language such as "planned," "intended," "targeted," "may," and "expected" marks this forward-looking content, which is subject to change and does not constitute a commitment regarding future performance.

Confidentiality. Where an article describes an operational or deployment detail that is not intended for public disclosure, that article is not published on this wiki. Content here is general-purpose engineering documentation, not customer-specific configuration.

Jurisdiction. Woodfine Capital Projects Inc. is organized in British Columbia, Canada. References to the Sovereign Data Foundation on this wiki describe a planned or intended initiative only, not a current equity holder or active governance body.

Changes to this notice. PointSav may update this notice from time to time; the version posted on this page governs.

Not a filing system. This wiki is not a securities filing system, an electronic disclosure repository, or a substitute for SEDAR+ or any other regulatory filing system. Formal securities filings are made through the applicable regulatory filing system, not through this wiki.

Full disclaimer. This notice supplements, and does not replace, the full Disclaimers article. In the event of any conflict, the full Disclaimers article governs.

Read the full disclaimer →