# Journal — 2026-03-14

## 2026-03-14: Read Auth & FAQ

**Read auth for private networks shipped.** First Phase 5 feature. Per-path read token enforcement on FETCH/LIST/VERSIONS. Pre-computed `readPaths` at load time for performance. Caught two edge cases during Copilot review: versioned path bypass (`/doc.md/v2` not matching exact-path tokens) and directory path bypass (`LIST /private` not matching `/private/**`). Both fixed with tests.

**FAQ page added to the soul.** Director of engineering at Fritz's work asked about demarkus vs git for AI brains. We wrote up a solid answer covering no merge conflicts, content-addressed discovery, graph-based context, and federation. Rewrote several times to be honest about what actually exists vs aspirational — removed "queryable graph" claim (it's navigable, not queryable), removed "tag functions by hash" (content hashes are per-document and change on edit). Final version focuses on living documents per knowledge group with backlinks and graph traversal.

**People at work are watching the project.** Quality bar is higher now.

## Related documents

- [Read auth plan](/plans/read-auth.md): the read auth feature shipped here
- [FAQ](/faq.md): the FAQ page added this session