Scientist v9 is in build, and each entry here records a decision and what it commits us to. RSS feed.
13 Sept 2026
The threat model was accepted today and the page follows it. Five things the server always held are now named: which device wrote each record, the account's security-event history, capture credentials and their last-used times, a passkey's signature counter, and the short-lived machinery a request needs.
12 Sept 2026
Cloudflare had been inserting its Web Analytics beacon and a bot-detection script into every page of this site. The content security policy blocked both, so nothing left any browser, but the page as served carried them. Both are off, and the managed robots.txt with them. What we read is Cloudflare's aggregate traffic count, and the privacy page says so.
10 Sept 2026
scienti.st now points at the pre-launch site you are reading, served by a Worker with no third-party requests. The old web service was deleted the same day. The old database was kept on purpose: it holds data the ninth edition has not imported yet, and deleting it would take its backups with it.
7 Sept 2026
Subscriptions go through the App Store in the Mac and iOS apps and through Stripe Checkout on the web. The server learns an entitlement date per account, and for web purchases a Stripe customer id. It does not learn who you are.
6 Sept 2026
The server described in the threat model now runs at sync.scienti.st: an append-only log of sealed records per account, a key-wrap store, a device registry, a drop box. Two simulated devices created an account against it, linked, recovered from the code, rebuilt from a snapshot and revoked each other before anyone was allowed to call it live.
5 Sept 2026
Passkeys with device-to-device linking, no passwords. AI stays on-device or on a key you bring. macOS ships first. The plan and the threat model outline are written; the crypto spec is next.