PRODUCT / 02 · FIELDBOOK

Fieldbook.

A portable, encrypted, offline-first data platform built on a self-contained file format: .fieldbook — a ZIP archive containing an AES-encrypted SQLite database, schema, hash-chained operation log, hash-chained audit trail, and embedded documents.

Inspect the file format CDD Passport
EngineRust · 113 source files · fieldbook-core
ClientsTauri · macOS · iOS · CLI · server · browser ext
EncryptionAES-256-GCM · PBKDF2-SHA512 · 256,000 iters
FIG. 03 · Fieldbook desktop · CDD dashboard PLATE / 03
FILE FORMAT

A single ZIP. Everything inside it is signed, hashed, or encrypted.

A .fieldbook file is the unit of work, the unit of transfer, and the unit of audit. Open it in the desktop app, mail it to a colleague, archive it for seven years — it remains a single verifiable object.

.fieldbook ZIP archive · format version 1.1 · minimum reader version 1.0
/ manifest.json file metadata, versioning, integrity hashes, sync state
/ schema.json table and field definitions, validation rules, RLS policy bindings
/ database.sqlite primary store, AES-256-GCM encrypted (optional, on by default)
/ oplog.json CRDT-merged operation log, hash-chained, replayable
/ audit.json append-only audit trail, hash-chained, never edited in place
/ documents/ embedded source documents (originals + derivatives)
encryption AES-256-GCM · key derived via PBKDF2-SHA512 · 256,000 iterations
ID scheme {prefix}_{base36} — fb_ · tbl_ · fld_ · etc.
CDD PASSPORT

A Client Due Diligence framework, built into the file.

Fieldbook ships with a complete KYC / CDD framework: cryptographic attestation of documents, a nine-state lifecycle from collection through certification, and Chinese Wall information barriers for multi-firm engagements.

Passport lifecycle · nine-state machine

S1Pending

Passport created, no documents collected yet.

S2Collecting

One or more mandatory documents uploaded; collection in progress.

S3Complete

All mandatory documents collected; verification not yet performed.

S4Verifying

Documents under review by a verifier; cryptographic attestations being collected.

S5Verified

All mandatory documents verified; passport may now be certified.

S6Certified

Certification issued. Passport is operational and may be exposed to authorised counterparties.

S7Grace period

A document has expired; replacement must be supplied within configured grace window.

S8Expired

Grace window elapsed without replacement. Passport temporarily unusable until refreshed.

S9Legal hold

Passport frozen for investigation or litigation; no modifications permitted until released.

F.01

Cryptographic attestation

SHA-256 document fingerprints + signed attestation statements (HMAC) bound to verifier identity, document, time, and method.

F.02

Signature framework

HMAC for internal signing, PKCS7 for external, QES (Qualified Electronic Signature) framework for regulated jurisdictions.

F.03

Chinese Wall isolation

Information barriers across firms inside the same file. Cross-wall access requires explicit authoriser approval, logged to audit.

F.04

GDPR built-in

Right-to-erasure, data subject requests, cross-border transfer logging — implemented at the format level, not bolted on.

F.05

Row-Level Security

Policy-driven row filtering. The same file shown to different users yields different rows — enforced by the engine, not by the UI.

F.06

Redline bridge

Obligations extracted by Redline Ledger flow into Fieldbook for evidence collection and auto-satisfaction tracking.

CLIENTS

One engine. Every surface your team already works on.

A.01

Desktop · Tauri

Tauri 2 + React 18 + TypeScript. Primary cross-platform client. 84 UI components, 80+ core modules, 43 test files.

A.02

macOS · native

Native SwiftUI app with modular store pattern. Direct FFI to fieldbook-core; full feature parity with desktop.

A.03

iOS

SwiftUI + UniFFI bindings to the Rust core. Same .fieldbook files open identically across all clients.

A.04

CLI

27 subcommands. Open, inspect, query, export, validate, encrypt, sync. Pipe-friendly. CI/CD ready.

A.05

Server

Axum HTTP API with PostgreSQL backend for centrally-hosted deployments. Drop-in replacement for local file mode.

A.06

Browser extension

Chrome and Safari. Captures structured evidence directly from the web into the active .fieldbook.

SPECIFICATION

The container.

file format.fieldbook · ZIP container · format version 1.1 · minimum reader version 1.0format
contentsmanifest.json · schema.json · database.sqlite · oplog.json · audit.json · documents/format
encryptionAES-256-GCM at rest · PBKDF2-SHA512 with 256,000 iterations for key derivationcrypto
attestationSHA-256 document fingerprint · HMAC-signed verifier statement bound to identity, doc hash, method, tscrypto
audit logappend-only · hash-chained · never edited in place · GDPR erasure via tokenisationaudit
cdd passport9-state lifecycle · mandatory/optional document tracking · Chinese Wall isolation · QES frameworkworkflow
core engineRust · fieldbook-core · 113 source files · UniFFI bindings, 19 exported functionsruntime
clientsTauri desktop · native macOS · iOS · 27-command CLI · Axum server · Chrome & Safari extensiondeploy
access controlPrincipal-based RBAC · row-level security with policy editor · RLS enforced in engineauthz
interopBridges: Redline Ledger (obligation evidence) · Atrium (claim ingest)integration

Send a single file. Survive the audit.