Beth's Library System

and AI multi-agent chat · provenance by construction · catalog card no. 001 · rev 3



The reading room

live: the only part you wait for

Beth ↔ Opus, the performer drafts, decides when to look things up

consult_research: the index answers first, so "no holdings" is a fact from the filesystem, never a model's guess

Push retrieval is default-on: the index runs every turn and holdings arrive unrequested; toggle per room. REV 3

Every packet opens with machine-computed time: elapsed since last deposit, cadence context, record age. Code does the math; models read durations. REV 3

Fable, closed-book librarian cites retrieved passages or declines

Every model call logs its context manifest: which turns, map files, retrievals, and prompt version it was shown. What it knew, and when, forever. REV 2

Every turn is committed to disk before any model wakes.

↓reply renders first, review runs after

The back office

async: nothing here blocks you

Fable, verifier truth score under each reply; quiet when the score is high

Sonnet, scribe proposes map edges: nodes, operator, mechanism

Sonnet, auditor staggered behind, checks the map: accuracy and recall

badge (code) findings count up; reading the log resets; spikes interrupt

The missed edge is the amnesia, so recall gets the auditor's weight.

↓every write passes the validator gate: regex + legend + registry, or it never lands
and every mutating commit carries its reason: no reason, no commit, any actor REV 2
MODELS PROPOSE
CODE WRITES

The stacks: one git repository

ground truth
transcript/verbatim turns
byte exact
stays private
store/PDF masters
md access copies
hash is identity
map/edge files
grammar in names
pointers in bodies
artifacts/drafts, packets
reliance edges
what reviewers see
legendtyped operators
registrynouns and Dewey
manifestIDs and tombstones
findingsdated, silenceable

Append-only. Everything points at IDs, never at paths.

One work, many copies; the catalog is edges, the shelf is coarse Dewey.

Changes only through you: legend, registry, deletions.

Protected core: no agent change path exists. Certified checkpoints mark known-good states; the restore tool is deliberately dumber than the system. REV 3

⇅intake files in; the crawler checks nightly

Services

code only: zero tokens, zero opinions

Intake ladder

drop zone→ hash→ identifier→ page text→ Sonnet proposes→ quarantine

Cheapest rung wins. Genre and topic flag, never block. Delete is not an output.

Renames are safe: labels move, IDs and old names live in the manifest.

Night crawler

moved: heals itself    untracked: sent to intake

altered: alarm, git shows the culprit

missing: logged with date; you silence it or restore it

Ruler questions get ruler answers.

↓copies leave on a schedule, never by hand

Off-site: three copies, three jobs


git remote full history, disaster recovery, the collaborator door

Drive mirror one-way copy on a schedule; the transcript never leaves home

chat-side agents read the mirror, never the original