Web Civics mark Web Civics Databox Worksite hazard symbol IN DEVELOPMENT Site & contents contain errors

Open-Standards Read-Write Web Server & Symbolic AI Rights Architecture

Web Civics Databox

Semantic knowledge management and rights infrastructure you own and govern.

Digital information is defined legally as Intellectual Property. Web Civics Databox is an open-standards Read-Write Web server built on Node ≥ 24 (refactoring Community Solid Server). Rooted in the foundational architecture defined by the inventors of the Semantic Web and the computer science discipline of Symbolic AI, the server's semantic structure translates this legal reality into practical computing—establishing both a machine-computable rights ontology and the decentralised infrastructure to support it.

Through independent storage locations and associative infrastructure, the Databox directly connects the entities who hold a meaningful right, relationship, moral right, or fundamental right to that Intellectual Property. This natively supports use cases where rights are shared between two or more entities—such as transaction records and digital receipts—giving each party an unalterable, cryptographically signed copy under their own control, governed by fine-grained attribute-based permission controls rather than corporate cloud monopolies.

Explore Setup Modes See Rights & Infrastructure Architecture

Deployment Flexibility

Two ways to install and run the software.

Because digital information is defined legally as Intellectual Property, the software is designed so that both parties in a relationship retain ownership and control of their records. It can be installed as an independent personal and family knowledge vault, or as an operational knowledge management system for organisations of any kind or size.

Mode 1

For an Individual or Family

Personal Knowledge Management: An independent storage location to hold your family's records, intellectual property, and moral rights, with attribute-based controls to share and receive verified information.

  • Your family's independent storage location: Manage health notes, asset titles, receipts, warranties, trade qualifications, and creative IP in an isolated personal vault under your own private key.
  • Protected IP & moral rights: Formal rights ontologies ensure your family's accumulated knowledge, records, and personal history remain your property, with moral provenance protected from automated scraping or corporate enclosure.
  • Shared-rights receipt custody: When you buy goods or services, your vault receives and stores an independent, identical copy of the transaction record, ensuring your warranty and accounting rights cannot be revoked by the seller.
  • Attribute-controlled sharing: When interacting with outside parties, share only specific knowledge attributes (e.g. dietary constraints, clothing sizes, concession status) rather than handing over entire documents or your full knowledge graph.
  • Generational continuity: Open W3C standards ensure your family's accumulated knowledge can be passed down intact to future generations without obsolete proprietary software or subscription paywalls.
Mode 2

For a Business, Shop, Farm, Club or Organisation

Business & Operational Knowledge Management: Built to support various types and levels of implementation for organisations of any kind or size—whether a sole-trader shop, family farm, local sports club, community group, cooperative, or independent trade.

  • Flexible implementation levels: Deploys at any operational scale—from an offline single-appliance counter register or farm computer running local Oxigraph, to multi-site networks, producer cooperatives, and shared community programs with declared Institution Profiles.
  • Operational business knowledge graph: Model the organisation's entire operational domain—product catalogues, ingredient declarations, stock variants, table sessions, invoices, delivery routes, and work orders—as linked, computable knowledge.
  • Shared-rights transaction records: Issues cryptographically signed transaction records and digital receipts that honor the shared rights of both buyer and seller, binding both independent storage locations through associative infrastructure.
  • Existing database & software connectors: Ingests events and data from existing SQL databases, POS registers, accounting records, or directory services via sidecar bridges (ODBC, LDAP, R2RML) without forcing disruptive rip-and-replace migrations.
  • Smarter, privacy-respecting customer service: Query and match customer needs against your business knowledge (e.g. allergy safety matching, sizing lookups, membership verification) directly at the counter without hoarding invasive customer dossiers.
  • Internal attribute & role governance: Govern staff access to specific knowledge domains (cash register reconciliation, compliance review, inventory reordering) based on verified role attributes and W3C ODRL policies.
  • Local countertop resilience: Runs locally on physical hardware, queries knowledge graphs at sub-millisecond speed via Oxigraph, and keeps trading smoothly even if the internet drops.

Practical Everyday Scenarios

Everyday knowledge management in action.

By representing information as semantic knowledge graphs rather than flat files, Web Civics Databox enables intelligent, privacy-preserving interactions with attribute-based permission controls.

Knowledge Domain: Food & Health

1. Food Offerings & Personal Health

The knowledge: A cafe publishes its menu as a semantic knowledge graph with explicit ingredient declarations and allergen ontologies. A family maintains a private health knowledge graph of dietary needs and allergies.

The interaction: The customer's device executes a semantic graph query locally against the cafe's public menu graph. Safe dishes are identified instantly with zero disclosure of private health records to external servers.

Knowledge Domain: Product & Sizing

2. Clothing & Footwear Sizing

The knowledge: A retailer models clothing, work boots, and school shoes with multi-dimensional sizing attributes (width, instep, length standards). A parent maintains sizing records for their growing children.

The interaction: The shopper queries the retailer's inventory knowledge graph using only the specific sizing attributes needed for the purchase, eliminating sizing guesswork and returns without broadcasting personal body measurements.

Knowledge Domain: Shared Intellectual Property

3. Digital Receipts & Shared Transaction Rights

The shared rights: A transaction is an event where both merchant and customer hold meaningful, inalienable legal, financial, and warranty rights. Neither party owns the record exclusively.

The infrastructure: Built on independent storage locations and associative infrastructure: the register commits the exact transaction bytes and deposits an identical, SHA-256 signed record into both the shop's system and the customer's personal vault. Neither party can alter or erase the other's copy, securing proof of purchase for warranties, insurance, and tax.

Knowledge Domain: Community & Governance

4. Local Club & Community Memberships

The knowledge: A local sports club, RSL, or agricultural cooperative maintains its member register, operational rules, and voting eligibility as an open knowledge graph.

The interaction: Members verify their active financial standing attribute for club entry or AGM ballots without exposing or circulating their private contact directory.

Knowledge Domain: Entitlements & Concessions

5. Coupons & Concession Considerations

The knowledge: Concession entitlements (pensioner, student, senior, veteran) are held as verified attributes within the individual's knowledge store.

The interaction: The register confirms valid concession eligibility in one second without photocopying pension cards, recording Centrelink numbers, or creating identity theft risks.

Institutional Ecosystem Dependency: The software is fully capable of supporting and verifying these instruments. However, automated verification can only occur if the government or an authorised community organisation creates and issues the verifiable credential instruments. Local community groups, clubs, and co-ops can issue their own local concession cards today, while broader statutory concessions activate as public agencies adopt open standards.

Knowledge Domain: Agriculture & Trades

6. Farm Deliveries & Trade Work Orders

The knowledge: Farmers, transport operators, and trades maintain linked records of grain tonnages, livestock custody, machinery maintenance, and job orders.

The interaction: Work orders, delivery dockets, and compliance certificates link directly into both parties' knowledge graphs on-site, syncing accurately even in rural areas with patchy coverage.

Core Capabilities

What the software implements.

Web Civics Databox gives organisations of any kind or size—along with individuals and households—the tools to model and govern their knowledge and keep records under their own roof, built on open W3C standards.

1. Semantic Web Knowledge Graphs & Solid Spaces

Builds on the foundational architecture of the Semantic Web to organize information into interconnected, machine-computable knowledge graphs. Uses W3C Solid LDP and open RDF standards (Turtle, JSON-LD) so data is never trapped in proprietary vendor silos.

2. Intellectual Property Rights Ontology (W3C ODRL)

Defines Intellectual Property rights as an explicit, machine-computable semantic ontology. Governs permissions, prohibitions, duties, and moral provenance, replacing all-or-nothing data sharing with fine-grained attribute-based permission controls (ABAC) across knowledge graphs.

3. Decentralised Storage Locations & Associative Infrastructure

Maintains records across physically and logically separated storage locations governed by distinct Web Access Control (WAC) controllers. Links entities and shared records through associative infrastructure—exact-byte SHA-256 payload digests, ES256 signatures, and an append-only commit ledger.

4. Everyday Operational Suite (60+ Modules)

A comprehensive operational toolkit for local businesses and community operations: point-of-sale (POS) counter cart, cash register, inventory, quotes, job orders, table sessions, and booking schedules—operating directly over linked semantic data.

5. Native Rust Hardware Edge

Native binary components interfacing directly with physical shop equipment: ESC/POS thermal receipt printers, cash drawers, barcode and QR scanners, ensuring continuous local operation even when internet drops.

6. In-Process Symbolic AI & Graph Reasoning

Leverages deterministic Symbolic AI—the formal branch of artificial intelligence underpinning the Semantic Web. Combines in-process Oxigraph for sub-millisecond SPARQL 1.1 queries with Web Civics Qualia for rule-based logical inference, policy validation, and semantic schema migrations without cloud dependencies or probabilistic hallucinations.

Intellectual Property & Systems Architecture

Rights ontology, independent storage locations, and associative infrastructure.

Digital information is defined legally as Intellectual Property. The semantic structure translates this principle directly into software architecture: combining a formal rights ontology with a decentralised infrastructure of physically distinct storage locations and associative cryptographic links. This ensures the entities who hold a meaningful right, relationship, moral right, or fundamental right to information retain direct ownership and safe custody of their property.

Decentralised Storage Locations

Physical and logical segregation under independent Web Access Control (WAC) ensures no central platform or counterparty holds unilateral custody or remote-wipe powers.

  • Mode 1 Personal Storage Location (Family Vault): Governed exclusively by the individual's private key and WAC controller. Contains personal knowledge, credentials, and independent copies of transaction receipts.
  • Mode 2 Organisational Storage Location (Business, Farm or Co-op Pod): Governed by the organisation's WAC controller. Contains operational knowledge, product ontologies, and commercial ledgers.
  • Relationship Databox Containers: Purpose-bound, isolated containers (1 Natural Person × 1 Program × 1 Opaque Container) provisioning clean bilateral channels without exposing global directories.
  • Connector Sidecars (Shop & Farm Edge): Bridges existing registers, accounting tools, and field sensors (ODBC, LDAP, R2RML) directly into local linked data without cloud exfiltration.
  • Two-Copy Invariant (ADR-0017): Shared records reside in both locations independently; neither party can remotely alter, inspect, or delete the other's storage.

Rights Ontology & Associative Infrastructure

Legal Grounding: Digital Info is IP
Digital information is defined legally as Intellectual Property with creators, owners, and moral rights—not unowned platform exhaust subject to unilateral corporate cloud agreements.
Symbolic AI & Provable Logic
Operates on deterministic Symbolic AI (formal ontologies and explicit inference rules) rather than black-box probabilistic models, ensuring rights, tax compliance, and trade agreements are provably auditable.
Rights Ontology (W3C ODRL)
Intellectual Property rights, licenses, duties, and moral provenance are expressed as machine-computable semantic graphs, not buried in opaque legal PDFs.
Associative Infrastructure
Exact-byte SHA-256 payload digests and ES256 asymmetric signatures associatively bind the two independent storage locations to the identical, immutable event.
Shared Rights Between Entities
Everyday trade creates shared rights (e.g. transaction records + digital receipts). Both merchant and consumer hold inalienable legal, tax, and warranty standing, guaranteed by identical cryptographically linked records.
Attribute-Based Permission Controls (ABAC)
Information distribution is scoped by explicit verified attributes and ODRL constraints, eliminating bulk data harvesting.
Tamper-Evident Historical Ledger
Append-only audit ledger with cryptographic supersession links; past transactions, warranties, and agreements are never silently overwritten.
Zero Vendor Lock-in
All stored records conform to standard W3C RDF serialisations, giving you complete freedom to export, back up, or migrate your records to any read-write web server at any time.

Bilateral Exchange Pipeline

Four-step verified record transaction.

How shared-rights records and receipts move safely between independent storage locations without third-party surveillance or vendor interference.

  1. 1

    Open Relationship Space

    Business sets up an opaque, purpose-bound relationship space tied to the specific service, trade, or account.

  2. 2

    Connect Securely

    Issues a secure, rotatable connection credential for the customer or supplier, authenticated via Solid-OIDC and clear permissions.

  3. 3

    Commit Exact Record Bytes

    Payloads are checked against schemas and ODRL policies. The exact byte sequence is locked with SHA-256 and committed to the append-only evidence ledger.

  4. 4

    Deliver Dual Signed Receipts

    Identical cryptographic receipts (payload hash, timestamp, signature, ODRL duties) are deposited into both independent storage locations, preserving shared rights under independent WAC control.

Shared Intellectual Property: The Two-Copy Invariant (ADR-0017)

When an everyday transaction occurs, rights are inherently shared between two entities. The business requires proof for tax, warranty fulfillment, and audit compliance; the customer holds an inalienable moral and legal right to proof of purchase, warranty coverage, and personal accounting. Web Civics Databox enforces this through two independent storage locations governed by two separate WAC controllers, joined by associative infrastructure (exact-byte SHA-256 digests and ES256 signatures). Neither party can manipulate, revoke, or delete the other's record, ensuring permanent, tamper-evident legal standing for both without relying on any external vendor's cloud.

Everyday Operational Tools

60+ practical modules for local business and community life.

The IPMS suite provides ready-to-run business modules with simple on/off switches, designed to handle everyday trade across retail, hospitality, trades, and services.

Commerce & Counter Retail

Point-of-sale cart, cash register, customer ordering, table sessions, promotions, tickets, discounts, barcodes, and physical hardware connections.

Operations, Farm & Logistics

Stock inventory, delivery driver dispatch, equipment bookings, job work orders, quotations, and supply-chain custody tracking.

Food, Produce & Hospitality

Menu catalogues, allergen profile matching, ingredient declarations, table-side ordering, and emergency break-glass protocols.

Governance & Family Stewardship

Role bindings, policy rules, consumer access and correction workflows, and transparent record dispositions.

Credentials & Entitlements

Built-in support for W3C Verifiable Credentials for trade licenses, supplier quality checks, staff roles, and concessions (noting that statutory verification relies on issuing governments or community bodies providing the digital instruments).

Connectors & Local Backups

Direct database bridges, automated local backups, and secure Cloudflare tunnel support for remote access without open ports.

Deployment & Hardware

Where and how you can run Web Civics Databox.

Small Farm & Shop Appliance

Runs on an inexpensive mini-PC or Raspberry Pi in the farm shed, home office, or shop counter for local resilience and private backups.

Countertop Retail / POS Edge

Connected directly to thermal receipt printers, cash drawers, and barcode scanners, keeping the counter moving even during internet outages.

Hosted or Regional Server

For cooperatives, regional councils, or enterprise programs managing multi-tenant relationship spaces.

Family Vault & Generational Handover

An independent personal vault that family elders can maintain, back up to physical storage, and pass down securely to the next generation.

Fast Local Queries (Oxigraph)

High-performance in-process SPARQL engine for instant stock lookups and business reporting right on your machine without cloud latency.

Deterministic Symbolic AI (Qualia)

In-process symbolic reasoning engine ensuring trade agreements, licensing duties, and statutory compliance rules are proven deterministically without cloud latency or external dependencies.

Developer & Operator Reference

Explore Web Civics Databox documentation and tools.

Interactive Smithy Sandbox

Experience how organisations configure Institution Profiles, manage mappings, and provision bilateral Relationship Databoxes in real time.

Launch Smithy Demo

Technical Documentation Hub

Deep dive into architecture blueprints, the Mapping Smithy control plane, bilateral exchange pipelines, IPMS modules, and CKAN bridges.

Read Tech Docs

System Architecture Blueprint

Comprehensive system topology, control vs. data plane separation, opaque resource layouts, and security invariants.

Read Architecture

Compare Query & Symbolic AI Engines

Understand how Oxigraph (WASM SPARQL 1.1) and Web Civics Qualia (deterministic symbolic reasoning and migration) power Databox operations.

Compare Engines

Full Capability Catalogue

Review the comprehensive matrix of implemented capabilities across core Solid, Databox extensions, edge runtimes, and business modules.

Browse Capabilities

Open Source Codebase

Inspect the complete codebase, review the Component.js configurations, or run your own Databox instance locally or in production.

GitHub Repository