0004 The layer 1 store is arkive alone; secretary moves over together with its encryption
The Korean version is authoritative. This page was translated by AI (Claude) and has not yet been checked by a person. 한국어 원문
This settles the “one discrepancy” in 04-layer section 3 (the secretary server also stores originals).
- The layer 1 store that keeps originals for the long term is arkive alone. There is no separate store for recordings.
- Until arkive has an intake, an app server’s originals folder is a staging store. The ledger field
storesaysstaging, and after the move,arkive. - When: together with secretary’s encryption (v0.2, target November 16). The app hands originals encrypted with the depositor’s key to arkive.
- A
storefield is added to 03-manifest (the same name secretary already uses). - 04-layer records that the “HGP recorder v0.1” of the September Hahoe Genesis Protocol (HGP) specification became secretary (secretary decision 0008: there was no code, and it was written anew in secretary).
Documents updated: 04-layer sections 3 and 4 (v0.2), 03-manifest sections 3 and 11.
- It had already been decided: in Nodeone’s common rules (“originals are not stored directly; they are entrusted to arkive”) and in secretary decision 0009 (originals adapter, staging store, migration script). Only hgp’s 04-layer wrongly said “not decided yet”.
- The timing of the move is a decision of the head of Nodeone (2026-10-12): together with encryption. The storage method changes at that point anyway, so we change it in one go. If unencrypted originals moved to arkive first, they would have to move again when encrypted.
- If the app encrypts before handing over, arkive only holds the files without the key. “The administrator cannot see the original” in 01-Permissions is then kept automatically.
Other options
Section titled “Other options”| Option | Why not chosen |
|---|---|
| Two stores (arkive for old documents, secretary for recordings) | As apps multiply, so do the places to protect. It goes against the common rules and secretary 0009 |
| Move right now | arkive has no intake. Moving before encryption means moving twice |
Where it has effect
Section titled “Where it has effect”- arkive: needs an intake for originals before November 16. It receives encrypted files and checks them with
sha256_stored(stored fingerprint), and keeps in the ledger the original fingerprint (sha256_store) as written by the app. It also needs per-depositor partitions and login. - secretary: already preparing through 0009 and T23 (originals adapter). Bundle v0.2 encryption and the move into the same version.
0 won. arkive work (intake, login) moves forward to before November 16.