Product · II of III A book the field can carry Plate 03 · MMXXVI

Carry the record
across the middle.

Evidence accrues at 03:14 in São Paulo. A KYC file. A counterparty's portal screenshot. An attestation. Fieldbook is the unit of work, the unit of transfer, and the unit of audit: a single .fieldbook file — a ZIP wrapping an AES-encrypted SQLite database, hash-chained oplog and audit, and the documents it speaks of.

.fieldbook · v1.1File format
AES-256-GCMPBKDF2-SHA512 · 256,000 iters
9 statesCDD passport lifecycle
/ 01The containerOne file

A single ZIP. Everything inside is signed, hashed, or encrypted.

Open it in the desktop app, mail it to a colleague, archive it for seven years — it remains a single verifiable object. Tread carefully; keep the field notes.

.fieldbookZIP archive · format version 1.1 · minimum reader 1.0container
/ manifest.jsonfile metadata · versioning · integrity hashes · sync statemeta
/ schema.jsontable & field definitions · validation rules · RLS policy bindingsschema
/ database.sqliteprimary store · AES-256-GCM encrypted (on by default)store
/ oplog.jsonCRDT-merged operation log · hash-chained · replayableops
/ audit.jsonappend-only audit trail · hash-chained · never edited in placeaudit
/ documents/embedded source documents (originals + derivatives)docs
encryptionAES-256-GCM · key derived via PBKDF2-SHA512 · 256,000 iterationscrypto
id scheme{prefix}_{base36} — fb_ · tbl_ · fld_ · doc_ids
/ 02CDD passportNine states

Client Due Diligence, built into the file.

A nine-state lifecycle from collection through certification. Cryptographic attestation. Chinese-Wall isolation across firms inside one file. Every transition is logged.

S1Pending

Passport created; no documents collected yet.

S2Collecting

One or more mandatory documents uploaded; collection in progress.

S3Complete

All mandatory documents collected; verification not yet performed.

S4Verifying

Documents under review by a verifier; cryptographic attestations being collected.

S5Verified

All mandatory documents verified; passport may now be certified.

S6Certified

Certification issued. Passport is operational and may be exposed to authorised counterparties.

S7Grace period

A document has expired; replacement must be supplied within configured grace window.

S8Expired

Grace window elapsed without replacement. Passport temporarily unusable until refreshed.

S9Legal hold

Passport frozen for investigation or litigation; no modifications permitted until released.

/ 03What's in the kitSix pieces

The load-bearing details.

F.01

Cryptographic attestation

SHA-256 document fingerprints + HMAC-signed attestation statements bound to verifier identity, document, time, and method.

F.02

Signature framework

HMAC for internal signing, PKCS7 for external, QES (Qualified Electronic Signature) for regulated jurisdictions.

F.03

Chinese Wall isolation

Information barriers across firms inside the same file. Cross-wall access requires explicit authoriser approval, logged to audit.

F.04

GDPR built in

Right-to-erasure, data-subject requests, cross-border transfer logging — implemented at the format level, not bolted on.

F.05

Row-Level Security

Policy-driven row filtering. The same file shown to different users yields different rows — enforced by the engine, not by the UI.

F.06

Redline bridge

Obligations extracted by Redline Ledger flow into Fieldbook for evidence collection and auto-satisfaction tracking.

/ 04The containerSpecification

The under-side of the format.

file format.fieldbook · ZIP container · version 1.1 · min reader 1.0format
contentsmanifest.json · schema.json · database.sqlite · oplog.json · audit.json · documents/format
encryptionAES-256-GCM at rest · PBKDF2-SHA512 · 256,000 iterationscrypto
attestationSHA-256 fingerprint · HMAC-signed verifier statement (identity, hash, method, ts)crypto
audit logappend-only · hash-chained · GDPR erasure via tokenisationaudit
cdd passport9-state lifecycle · mandatory/optional document tracking · Chinese Wall · QESworkflow
core engineRust · fieldbook-core · 113 source files · UniFFI · 19 exported functionsruntime
clientsTauri desktop · macOS native · iOS · 27-command CLI · Axum server · Chrome & Safari extdeploy
access controlPrincipal-based RBAC · row-level security · policy editor · enforced in engineauthz
interopBridges: Redline Ledger (obligation evidence) · Atrium (claim ingest)integration

Send a single file. Survive the audit.

Request a pilot Back to the crossing