Skip to content

PointSav Documentation

The engineering library for the PointSav platform — operating systems and services for regulated businesses that own their data, their AI, and their record-keeping outright. Where the monorepo holds the code, this wiki holds the reasoning: architecture, services, security, and the governance commitments that bind future development.

PointSav Digital Systems

Revision as of · ef5c8db7

Historical revision — this record as it stood on 23 August 2026, not the current version. View the current record →

Sovereign desktop

os-workplace is planned as the free desktop tier in the PointSav family. What exists today is a family of independent Rust and Tauri desktop applications — the workplace apps — that an operator downloads and runs directly on their own computer. The os-workplace crate that would bind them into one unified, branded environment is still a one-line placeholder, not built infrastructure. The strategy behind the free tier is deliberate: an operator installs the workplace apps because they are fast and cost nothing; once daily work happens inside the PointSav ecosystem, the commercial os-orchestration aggregator becomes a logical next step. This article covers the real applications that exist today, the ratified plan for how a workplace machine joins the network, and the strategic rationale for a free desktop tier.

The workplace apps

The apps are Tauri desktop applications — a Rust backend paired with an HTML/JS/CSS WebView, targeting macOS 10.13 High Sierra and later. Two of the nine crates below are pure Rust with no WebView. Each app is independent: an operator can install one without the others, and none require the unified os-workplace shell to run.

App State What it does
app-workplace-memo Active Document editor; produces a self-contained .html file with fonts embedded, printing to a flawless PDF via the OS print dialogue 1
app-workplace-presentation Active Slide editor, built on the same offline-first, no-cloud design as Memo
app-workplace-workbench Active A thin WebView window onto the locally running app-privategit-workbench HTTP server; it does not itself start, stop, or manage that server
app-workplace-proforma Active Spreadsheet for institutional financial analysis; produces a self-contained .json file carrying formulas, formatting, and an audit chain
app-workplace-pdf Scaffold-coded PDF viewer and print tool using the pdfium-render crate (Google PDFium, Apache-2.0)
app-workplace-gis Scaffold-coded Desktop viewer for location-intelligence data; loads a MapLibre GL tile viewer against gis.woodfinegroup.com or a local tile server over the PPN
app-workplace-bim Reserved-folder Planned BIM authoring editor (Revit/AutoCAD muscle memory); a research document only today — no Cargo.toml or source exists yet
app-workplace-aibridge Built, not yet registry-tracked The AI section-edit bridge core — lets an operator hand one section of a document to an external AI session and apply only that section's result; enforces SYS-ADR-07 by refusing structured schemas (proforma, GIS, BIM data) at every entry point
app-workplace-http-prototype Built, not yet registry-tracked An axum server exposing the workplace apps over the WireGuard PPN while native Tauri builds await a macOS build host; the Memo editor is the only surface it currently serves, the rest are listed pending

Deployment: joining the network

Ratified 2026-05-23 (DOCTRINE.md §IV.f); implementation pending. os-workplace runs on the operator's own personal computer — today, a MacBook — and is planned to deliver app-workplace-desktop, the unified operator desktop surface that would bind the apps above into one environment. It hosts os-console as a co-resident application, not through Type 2 virtualization — the two are independent layers sharing the same machine. The machine joins the PointSav Private Network as a direct WireGuard peer in the 10.42.20.0/24 range; the node-* instance of os-console it hosts inherits that membership rather than getting a separate address. Deployment instances use the station-* prefix. The first two planned are station-workplace-jennifer-1 and station-workplace-mathew-1, both awaiting the WireGuard network rollout and the app-workplace-desktop build. os-workplace does not connect to the orchestration gateway directly — only indirectly, through the os-console instance it hosts.

Pairing with the Totebox

os-workplace is the operator's local environment. Data lives in the operator's os-totebox. Machine-based pairing establishes hardware-bound trust between the workstation and the archive — see Machine-based authorization for the mechanism. There are no usernames or passwords; the pairing is the permission.

Why a free desktop is strategic

Three reasons make os-workplace a structural commitment rather than a marketing gesture:

  1. Adoption funnel. A free, fast set of desktop apps is intended to introduce the operator to the F-key discipline of os-console and the security model of the Diode, so the commercial products feel familiar from day one.
  2. Reference implementation. Every line of code written for the workplace apps is reviewable in the public monorepo. Customers can audit the substrate before they buy commercial aggregation against it.
  3. Ecosystem gravity. A growing community of workplace-app users is intended to create an independent constituency of contributors, packagers, and translators that no commercial-only product can replicate. The contributor model describes the roles and rights for community participation.

See also

  1. ISO 19005-1:2005 — Document management — Electronic document file format for long-term preservation — Part 1: Use of PDF 1.4 (PDF/A-1). https://www.iso.org/standard/38920.html ↩

Important Information

Corporate structure. PointSav Digital Systems ("PointSav") is currently a trade name of Woodfine Capital Projects Inc. ("Woodfine"), planned to become a wholly-owned Woodfine subsidiary upon incorporation. PointSav does not itself offer, sell, or solicit any security. Any securities offering associated with Woodfine's real-property direct-hold solutions is made exclusively by Woodfine, and only by means of the applicable Private Placement Memorandum.

No investment advice. This wiki's content is provided for engineering, operational, research, and development purposes. Nothing on this wiki constitutes investment advice or a solicitation to invest in any Woodfine partnership or direct-hold solution.

Intellectual property. The PointSav name, trade name, wordmark, and marks, together with all current and future PointSav- and Totebox-branded products, services, and offerings — and the software, source code, documentation, design system, and all related materials — are proprietary to Woodfine and its affiliates, except for components identified as open source. No rights are granted except as expressly set out in a written license or agreement. The full trademark notice appears in the footer of every page on this site.

Open source components. Portions of the platform are made available under permissive open-source licenses identified in the accompanying repository. Use of those components is governed by their respective license terms.

No warranty; informational use. Content on this wiki is provided for general informational purposes only and does not constitute a representation, warranty, or commitment with respect to product functionality, availability, pricing, or roadmap. Some articles describe planned or intended features, capabilities, and milestones — language such as "planned," "intended," "targeted," "may," and "expected" marks this forward-looking content, which is subject to change and does not constitute a commitment regarding future performance.

Confidentiality. Where an article describes an operational or deployment detail that is not intended for public disclosure, that article is not published on this wiki. Content here is general-purpose engineering documentation, not customer-specific configuration.

Jurisdiction. Woodfine Capital Projects Inc. is organized in British Columbia, Canada. References to the Sovereign Data Foundation on this wiki describe a planned or intended initiative only, not a current equity holder or active governance body.

Changes to this notice. PointSav may update this notice from time to time; the version posted on this page governs.

Not a filing system. This wiki is not a securities filing system, an electronic disclosure repository, or a substitute for SEDAR+ or any other regulatory filing system. Formal securities filings are made through the applicable regulatory filing system, not through this wiki.

Full disclaimer. This notice supplements, and does not replace, the full Disclaimers article. In the event of any conflict, the full Disclaimers article governs.

Read the full disclaimer →