The work,
as it lands.

• Replaced all interface arrow glyphs with SVG vectors and added a reusable source and rendered-page glyph check.

• Stabilized the mobile first paint and replaced API playground arrows with consistent inline SVG icons.

• Replaced device-dependent interface symbols with inline SVG vectors and added a rendered-page emoji regression.

• Reframed the public website around RURAL as a database, synchronized its implementation status, and added interactive write, graph, recovery and data-flow diagrams.

• Package the public Go website for Dokploy, with explicit public binding and a canonical www.rural.internet.technology redirect.

• Deterministic two-plan comparison and durable local task proposals with separate consent grants, explicit apply and restart quarantine.

• Native TEST_CREDIT wallet controls with principal-bound pending7 recovery; no real-money rails.

Durable test-credit wallet

• Add explicit profile4 wallet activation, conserved TEST_CREDIT reservations/capture/release and scoped intention reads.

• Hold unknown outcomes and quarantine unfinished intentions after restart/restore until explicit local reconciliation.

Native mandates

• Inspect personal/shared terms and explicitly create, consent, revoke or retire mandates in the Zig client.

• Preserve principal-bound control commands across uncertain replies and restart without moving document navigation to control storage.

Explicit mandate consent

• Add consent format2 with authenticated self-consent, revocation and owner retirement; historical participant records remain passive.

• Bind eligibility to current canonical Compass state, disclosure, expiry and complete consent; retain original receipts through restart. No dispatch or real-money endpoint is introduced.

Native Compass interaction

• Add personal/shared fixture Compass views and explicit create, priority edit/retire, state and disclosure commands.

• Bind pending native commands to their authenticated principal across restart; clear private projections on identity changes.

Scoped local Compass service

• Add explicit profile3 activation, fresh fixed fixture credentials, and durable owner-scoped Compass commands.

• Restrict shared views to disclosed shared-project records; preserve original receipts across retries and restarts.

• Mandate consent, proposal execution and native V06 remain pending.

Durable intent foundation

• Add strict versioned Compass and mandate record codecs that retain exact values, stable identities and explicit canonical-main references.

• Add priority replacement and retirement with retained history; reject revision overflow before any state change and preserve revisions for semantic no-ops.

• These are domain and persistence foundations; profile3, shared-principal service operations and native V06 remain pending.

Standalone local bundle

• Add a Zig launcher that authenticates existing local services and owns only the children it starts.

• Add an exclusive-output bundle with bounded source copies, retained notices and a sorted SHA-256 inventory; compiler, SDK and populated dependency cache remain explicit rebuild prerequisites.

Live backup and offline restore

• Add owner-authenticated, bounded live backups with stable artifact identities and explicit publication uncertainty.

• Restore a validated backup into a new directory without starting services or copying runtime credentials; preserve the original store.

In-process authority and credit corrections

• Bind mandate permission to an exact nonempty action, matching Compass owner/context and an unexpired deadline.

• Preserve simulated-credit operation identity across retries and check bounded capacity before effects; funding cannot spend held credit.

• Make the Compass presentation reuse the mandate permission predicate so expiry and owner/context mismatches cannot appear current.

• These corrections harden the existing models; durable wallets and shared-principal service authorization remain unimplemented.

Native merge decisions

• Add native three-way body previews, explicit conflict choices and target confirmation from the branch panel.

• Preserve the original pending merge through uncertain delivery and validate the target receipt while retaining active branch selection.

Bounded document merge

• Add authenticated comparison and atomic body-only merge for an existing collection from a descendant branch into its ancestor, with durable fork bases and explicit conflict choices.

• Preserve exact merge intentions in pending format4 and expose a strict owned comparison client; native conflict controls use the same frozen comparison and pending formats.

• Refuse unsupported membership, metadata, schema, relationship and unique-field changes without writes.

Merge prerequisites

• Add caller-bounded, fully validated durable history capture and isolated historical snapshot reconstruction; used by the bounded document merge integration.

• Omit identical source/target changes and reject extraneous or duplicate conflict resolutions in the pure merge decision module.

Native recursive branches

• Add bounded durable branch lineage inventory and explicit native selection, fork and drop controls over journal-backed data branches.

• Preserve pending fork/drop identity through restart and validate receipts against the fork target. Branch merges remain separate work.

Native Sky view

• Add a native analytics panel over the local service, with snapshot-pinned catalog pagination, exact metric totals and explicit observed-source coverage.

• Refresh rolling views through a separate background reader, retain visibly historical results across failures, and reject stale selections or foreign store identities.

Local Sky service

• Add immutable source and metric configuration, durable raw-event batches, stable event deduplication and exact scalar analytics to the local owner service. Original batch counts survive request replay and restart; observed source coverage remains distinct from exhaustive delivery.

• Upgrade the service control profile to format2 on first configuration; preserve format1 initialization receipts and reject unknown control records. Older binaries cannot open format2 profiles.

• Add a Zig fixture producer with a pinned store, lifetime spool lock, synchronized pending requests and receipt-verified acknowledgements. Only a proven stale-head rejection permits a fresh transport identity; uncertain delivery preserves the original request.

• Public intake, event correction/deletion and sustained-load qualification remain pending.

• Add native outgoing-relation inspection, creation and deletion through the shared service and retained-intent workflow.

• Correct analytical observed-source coverage, bounded bucket allocation cleanup and timestamp overflow.

• Preserve precise JSON decimals in relation properties through encoding, reads and restart.

• Add immutable shared field semantics, schema discovery and authoritative outgoing relation reads; unsupported critical semantics block document writes.

• Add a schema-derived native editor for custom collections, exact typed fields and hidden-field-preserving patches, including explicit restart retry.

• Prove pre-commit rejection after receipt absence so invalid native intents can be cleared without discarding uncertain commits.

• Extend native intents to a versioned general-command envelope while preserving exact legacy retry bytes.

• Bound MCP startup probing to one record so large default pages do not prevent smaller valid queries.

• Add a local read-only MCP process for one configured collection, with pinned session identity and supported-tool discovery.

• Embed a licensed Latin font for native Croatian text and disable the graphics library’s automatic F12 screenshot capture.

• Add native service title create/patch/delete, receipt display and explicit retry of synchronized pending commands after client restart.

• Add atomic relation creation/deletion and bounded graph queries to the local service and CLI.

• Added read-only native --connect service lenses with background reads, pinned store identity and shared CLI session handling.

Reliability and verification

• Add an executable owner-only loopback service with private runtime credentials, session/store binding, durable create-only schemas, document and branch commands, bounded queries, and a first-party HTTP request client. Scoped grants, migrations, intake routing and native-client integration remain unqualified.

• Encode document address components without slash collisions and reject stored-envelope/address mismatches; legacy ambiguous slash keys require a separately qualified migration.

• Add cooperative query cancellation through bounded evaluation/sort checkpoints and same-service mutation admission, preserving immutable query snapshots during writes.

• Unify document lowering with ordered batch validation, tombstone restoration/hiding, required replacement revisions, incident-edge deletion protection, metadata preservation and pre-lowering logical receipt replay.

• Validate integer schemas without float conversion, constrain schema definitions and uniqueness scans, and share literal field-name/numeric rules across queries and schemas.

• Write versioned RURALTX3 optional logical hashes with an explicit presence tag; read strict legacy TX2 and mixed journals without rewriting prior records. Old binaries cannot read TX3 writes.

• Add executable progress accounting that separates packet labels from reviewed acceptance evidence; neither count estimates remaining development effort.

• Execute query projection and stable scalar sorting, compare supported integer values numerically, reject snapshot/plan branch mismatches, count every traversed record against the visit budget, and bound retained candidates before allocation; unsupported numeric query operands fail explicitly.

• Release the encoded document buffer when complete envelope size exceeds 64 KiB; preserve exact-limit acceptance.

• Save producer outboxes by synchronized atomic replacement, retain published files on uncertain directory sync, and reject oversized or torn spools.

• Separate generated package caches and named local stores from source listings while retaining verification logs and all existing local data.

• Count backup framing in artifact limits; clean operation-owned unpublished staging after failed capture while preserving existing files and uncertain published captures.

• Release partially constructed query, graph, branch, outbox and visual results on allocation failure. Query/graph allocation failures now report errors rather than silently omitting valid results.

• Reclaim expired cursor snapshots with caller-supplied time and exhaust tokens safely without consuming tokens on failed retention.

• Select exact registered test roots; reject empty selections and detect unregistered test files. Add one verification entry point and executable dependency-boundary checks.

• Adopt compact repository governance with explicit ownership, lock release, cancellation/drain and memory cleanup obligations.

Portable cells research

• Explored local-file RURAL cells that carry schemas, relationships and declarative lenses, with separate embedded, served, replicated and federated roles.

• Added a sourced comparison, architecture diagram, clone/authority rules, proposed mathematical obligations and future delivery gates. The active prototype contracts and task statuses are unchanged; no cell synchronization, embedded edition or distributed guarantee is implemented by this research.

• Corrected the documentation index's stale planning-only status to follow the authorized implementation and task registry.

Formal foundation

• Added six TLA+ specifications, pinned SANY/TLC tooling, seven bounded positive checks and nine deliberate counterexamples.

• Documented mathematical assumptions, conditional progress and mapping to Zig implementation acceptance.

• Reproduced an optional logical-hash receipt encoding mismatch in a focused Zig regression witness; the later TX3 repair is recorded above. These checks do not establish a fully verified database implementation.

Prototype planning

• Defined 30 dependency-ordered Zig prototype packets, shared contracts and native visual/runtime acceptance, with a separate gate for integration into an existing application.

• Adopted compact project governance, low-reasoning worker dispatch and pinned third-party prototype dependencies; archived superseded policies and elaboration.

• Recorded the current failing engine baseline. This planning revision does not implement or release a working prototype.

Website and documentation

• Added conceptual research chapters on storage, privacy, visible operations, agent wallets and batched external settlement.

• Read and retained the official Quilibrium whitepaper; compared current primary documentation and pinned source with AO and Morpheus, proposing owned world capsules, typed situations and explicit remote-effect contracts.

• Added the Go + HTMX product website and public documentation workspace.

• Introduced RURAL's connected-fields identity, original visual assets and locally hosted typography.

• Connected version, changelog and allowlisted documentation to repository sources.

• Added five selectable homepage mechanism diagrams and the Why RURAL guide.

• Added interactive technology walkthroughs for immutable branches, durable intake progress and Oracle computation with inspectable evidence.

• Added automatic in-view motion, visible pause/manual controls, reduced-motion alternatives and an animated six-stage transaction story.

• Added the browser-only API playground with editable JSON, CRUD, isolated branches, atomic failure, event retry identities and bounded Oracle results.

• Expanded the database philosophy and original visual design; retained responsive layouts, static explanations, HTMX navigation and browser-asset regression coverage.

Database foundations

• Added immutable persistent maps, checksummed log frames, bounded protocol parsing and prepared branch transactions.

• Added a local journal with exclusive ownership, synchronization before success and explicit recovery states.

• Began durable integration and a development protocol. Local application integration and a product release remain unfinished.

• Paused database-engine development at the Operator's request while the website is completed.

• Adopted the MDAAI repository foundation with project-specific research scope.

• Investigated a dependency-free Zig alternative to SurrealDB.

• Initial research baseline; no database product release.