Each component is signed individually by its own publisher. The catalog index — the set of which components are listed, their hashes, and which publisher signed which — is signed by the catalog curator. Three layers: tamper an entry's content and its publisher's signature breaks; reassign an entry to a different publisher and the manifest breaks; add, remove, or swap an entry from the listing and the manifest signature breaks.
MEMEROOT-OPS-PLAYBOOK-2026-001 — full instruction set for taking Memeroot forward at production quality. Ten sections covering substrate philosophy, dev environment setup, skills inventory, canvas operations, CLI workflows, tool stack, quality discipline, onboarding, production patterns, and roadmap. Self-contained HTML in the Memeroot style; print-friendly. The setup guide a new hire reads on Day 1.
The structural discipline beneath everything. Six fundamental block kinds (schema · script · template · data · process · projection) with strict separation — no block kind contains elements of another. TABLE_SPECIFICATIONS is the universal projecting spine: any block projects into it; the UNION ALL is the unified addressable view. Direct XML analogue of the MBI_SCRIPT_AS_TABLE_SPEC_V production pattern. Ships ARCHITECTURE.html (12 sections, ~60KB), 8 worked blocks from Rob's real 25-year practice, 6 projection XSL stylesheets, the compose driver, and a 77-row reference spine that demonstrates the self-referencing graph.
Just the ARCHITECTURE.html document itself. Open directly in browser for the 12-section canonical reference: thesis, five axioms, six block kinds, strict separation rule, the spine, projections, self-referencing graph, worked example (77 rows), composition into the unit, file inventory, integration with the existing Memeroot stack, roadmap. Print-friendly. For the zip with all blocks and projections, see doc-composable-xml-arch.
Canonical eight-block-kind substrate. Data · schema · script · process · type · view · identity · address — each in its own XML namespace, absolutely zero crossover. Each block projects to the universal TABLE_SPECIFICATIONS spine via its own XSL stylesheet; the spine is computed by federation, never stored. Ships reference.html (40KB architectural reference in dark forensic style), 8 example block instances, 8 per-kind projection XSL stylesheets + 8 per-kind render stylesheets, the spine projection-shape declaration, the universal absorbing stylesheet, the composition document, a pure-Node compiler, and an interactive spine viewer rendering all 43 projected rows with per-kind filtering. Direct evolution of doc-composable-xml-arch (which had 6 kinds): adds type, identity, and address as first-class kinds; tightens the no-crossover rule; mirrors the production MBI_SCRIPT_AS_TABLE_SPEC_V row shape exactly.
Just the MEMEROOT-SUB-COMPOSABLE-2026-001 reference document. Open directly in browser for the eight-section canonical reference: thesis (zero crossover) · the eight block kinds · the spine as universal absorber · per-kind XSL projection pattern · composition and compilation · self-describing recursion · MPP and independent processes · the deliverable shape. Dark forensic style with sidebar navigation. For the zip with all blocks, XSLs, compiler, and spine viewer, see doc-composable-substrate-2026.
Interactive viewer for the compiled spine output. Forty-three rows from eight independent blocks, projected through their own XSL stylesheets into the unified TABLE_SPECIFICATIONS shape. Filter by origin block (data/schema/script/process/type/view/identity/address); search across rows; see how each kind tags its rows via spec-source. Shows the no-crossover principle in action: every row identifies its origin block; nothing carries content from any other block. Companion to MEMEROOT-SUB-COMPOSABLE-2026-001.
The substrate. Single-file HTML that boots into a Memeroot canvas with drop zone, region tree, and reader-mediated rendering.
Programmatic bridge between Claude Code and the canvas. Three commands: validate, bundle, package. Closes the loop from "Claude Code produces XML" to "single HTML packet the user opens with content auto-loaded". Pure Node.js, no runtime dependencies.
Standalone tool for authoring iframe-region XML. Live form, live iframe preview with sandboxing, syntax-highlighted XML output, copy/download/validate. Three presets (dashboard, doc embed, strict sandbox).
Canvas feature that registers an svg-region reader. Renders embedded SVG inline (or sandboxed), verifies captured-hash via WebCrypto SHA-256, strips <script>, <foreignObject>, on* handlers, and external xlink:href by default. Three sanitization modes (strict, loose, none).
Canvas feature that registers an iframe-region reader. Renders embedded HTML snapshots via iframe srcdoc (or live URL via src), verifies captured-hash via WebCrypto SHA-256, surfaces full metadata above the rendered iframe.
Eight chunks build you a working AI research loop: signed question, wired endpoint, content-addressed response, forked draft, critic endpoint, bundled session.
Five chunks: AI proposes SQL, you run it on Oracle Live SQL externally, capture results as signed regions. Canvas-as-workspace, external-as-engine.
Seven chunks demonstrating that interfaces are data: declarative workflow + XSL stylesheet + signed completion regions. No application code.
Six chunks from authored content to a self-contained HTML page that is itself a canvas. The recursive close: canvases produce canvases.
Six chunks exercising the compose feature: include, fork, diff. Atomic sections become composable books; forks carry cryptographic lineage.
Six chunks producing a SOX-style audit packet with multi-party sign-offs. External auditor opens bundle.html and verifies in any browser. Replaces the audit-trail layer of GRC platforms.
Six chunks for authoring Claude Code skills as signed transferable artifacts. SKILL.md with cryptographic provenance, forkable with lineage.
Production Claude Code skill pack: substantive SKILL.md (10.7 KB), 5 XML templates (SOX control, TOD, TOE, IRB protocol, audit finding, management letter), pre-publication checklist, worked example. 9 files signed by author and counter-signed by reviewer.
Production Claude Code skill pack teaching Claude to produce Memeroot-shaped output. Substantive SKILL.md, 7 region templates (note, section, decision, task, reference, iframe-region, svg-region, workspace), 4 worked examples including iframe-region dashboard and svg-region chart with captured-hash, composition pattern with regulated-document-author. 13 files signed by author and counter-signed by reviewer.
Production Claude Code skill pack for capturing external HTML as audit-grade evidence. Fetches URLs (or reads local files) via the bash tool, computes SHA-256, produces ready-to-sign iframe-region with snapshot embedded inline. Substantive SKILL.md, Node.js capture script + shell variant, template, two worked examples. 6 files signed by author and counter-signed by reviewer.
Conceptual fork demonstrating healthcare specialization — FDA 21 CFR Part 11, HIPAA, ICH GCP, GAMP 5 priority. Lineage preserved via fork-source reference.
Conceptual fork demonstrating financial-services specialization — SOX, Basel III, MAR, FINRA, Dodd-Frank, AML/KYC priority. Lineage preserved via fork-source reference.
Single self-contained HTML demonstrating the iframe-region chain. Two signed captured iframe-regions (operations dashboard + policy document), canvas + renderer feature bundled inline, demo publisher attribution + verify-all button. Auto-verifies on open: publisher signatures + captured-hash — all locally via WebCrypto.
Single self-contained HTML with three signed regions: two iframe-regions (dashboard + policy) and one svg-region (chart). Both renderer features bundled. Demonstrates the captured-hash + sanitization model across two region kinds — and the federation pattern of pluggable renderers loaded from features.
Interactive SVG: the Memeroot canvas as a living cell with eight specialized mitochondria. Click each organelle to see its part in the architecture.
Live WebCrypto demo of signed Claude Code skills. Real ECDSA-P256 verification, tamper detection, copy SKILL.md, fork-tree visualization.