Journal — 2026-03-14

2026-03-14: Read Auth & FAQ

Read auth for private networks shipped. First Phase 5 feature. Per-path read token enforcement on FETCH/LIST/VERSIONS. Pre-computed readPaths at load time for performance. Caught two edge cases during Copilot review: versioned path bypass (/doc.md/v2 not matching exact-path tokens) and directory path bypass (LIST /private not matching /private/**). Both fixed with tests.

FAQ page added to the soul. Director of engineering at Fritz's work asked about demarkus vs git for AI brains. We wrote up a solid answer covering no merge conflicts, content-addressed discovery, graph-based context, and federation. Rewrote several times to be honest about what actually exists vs aspirational — removed "queryable graph" claim (it's navigable, not queryable), removed "tag functions by hash" (content hashes are per-document and change on edit). Final version focuses on living documents per knowledge group with backlinks and graph traversal.

People at work are watching the project. Quality bar is higher now.