Cittadelle — Manifesto

Power leaves traces.
We follow them.

Cittadelle is an invite-only platform for documenting, verifying and debating the sources of history and politics. Not a forum. Not an archive. A structured space where every claim traces back to a document — and every document can be challenged.

Everywhere else, a claim and its evidence are separate things: the claim travels, the evidence stays behind. Here they are the same object.

…as the Chilean cables show — SRC-0034 ✓ Verified · 3 notes

Every document, entity, contestation and argument on Cittadelle has a code. Write that code anywhere — a post, a note, a Brief, a rebuttal — and it becomes a live citation that carries the document's verification status with it, at the moment you read it. You cannot quote a source without also quoting how well the community has established that it says what you claim it says. If it is later contested, everywhere it was ever cited says so.

Sources

Members submit documents — archival, academic, journalistic, financial, legal, audiovisual, photographic — and the community establishes them. A document with an official URL or a DOI is authenticated by three members confirming the reference. Everything else is verified by three argued notes, each bringing its own distinct evidence.

Chambers

Persistent communities where the work happens, divided into strands of enquiry. Moderators keep them tidy; nobody adjudicates what is true. Disagreement is not settled by a moderator but by contestation — a formal procedure with its own page, its participants on the record, and an explicit rule for how it ends.

Proposals

Nothing enters the shared maps unilaterally, and nothing requires permission from an authority. You propose a connection with your reasoning and your sources; three members endorse it, each with their own reasoning; then it migrates into the global graph — permanently, publicly, and traceable back to the case that put it there.

Graphs

Three maps of the same world, each answering a different question. Octopus: who is connected to whom. Follow the Money: who gave what to whom. Pyramid: who owns what, and how much — computing the ultimate beneficiary behind a chain of shell companies.

Briefs

Where a line of enquiry ends: a short documented argument, written by at least two members, citing its sources by code and embedding the graph connections it relies on. Briefs are not contested — they are interpretations. Answer a reading with a reading.

The archive

Everything survives the discussion that produced it. Sources belong to the platform, not to the Chamber that found them. Contested notes stay as history. Superseded ownership figures stay queryable. When a member leaves, their contributions remain, reattributed — the record does not lose evidence because a person did.

Sources Chambers Proposals Graphs Briefs
The Method
The mechanics in detail — the seven kinds of source and why they are established differently, what a verification note must contain, how the three contestations resolve, and when a connection is direct rather than structural.
Read The Method →
No karma, no scores, no gamification. A grade exists, but it is invisible in the feed — so that an argument outweighs a reputation.
No arbiter of truth. No moderator, no editor, no committee decides whether a document is genuine.
No algorithmic feed. Nothing is ranked by engagement. What is recent and what is active, nothing else.
No advertising, no investors, no data sold. Running costs are covered by voluntary support.
Money buys nothing inside. No badge, no visibility, no priority. A note must never be suspected of carrying weight because its author pays.
No private group channels. If more than two people need to talk, that is what a Chamber is.
No read receipts, no presence, no last-seen. Nothing that turns attention into an obligation.
No deletion of the record. A contested note stays visible. Being proved wrong is part of the history, not something to erase.

Most of what a platform is gets decided by what it declines to build.

Access
Cittadelle is invite-only. Members invite people they expect to contribute seriously, and who invited whom is recorded and visible on both profiles. Inviting is an act with your name attached — which is the whole mechanism. There is no public registration form.
Yes. The source archive, all three graphs, entity pages, Briefs, Search, this Manifesto and The Method are open to anyone. Chambers, discussion threads, The Roll and anything personal are for members. The knowledge is public; the ability to add to it is not.
Three when you arrive, one more for every ten contributions, and one on first reaching certain grades. Each code works once. Everything counts as a contribution — submitting a source, writing a verification note, opening or defending a contestation, proposing a connection or endorsing someone else's, co-authoring a Brief. The Method lists what each is worth →
You can delete your account from Settings. Your sources, notes and posts stay in the archive, reattributed to a member called [Departed] — deliberately not "[deleted]". The record does not lose evidence because a person left.
Sources
Seven kinds: archival and official documents, academic research, journalism, financial records, legal documents, audiovisual material, and images. Each has its own page shape and its own metadata fields — a court ruling needs a case number, a paper needs a DOI, a photograph needs a place and a photographer.
A title, a URL or an uploaded file, and a note explaining what the document is and why it matters. Everything else is optional and can be completed later by anyone. Video and audio are always linked, never uploaded.
A specific category, not a compliment. A source is primary when it authenticates itself: an official URL or a DOI that lets anyone check it immediately — a court ruling, a parliamentary act, a paper with a DOI, an official filing. Primary sources take a different verification path from everything else. The Method explains both →
An empty field can be filled by anyone — that is how the archive improves. A field that is already filled can be edited only by the uploader, and once a source is verified it is effectively frozen. Errors in a verified source are handled by contestation, not by quiet overwriting.
Sources with a URL are submitted to the Internet Archive when saved, and the page links to the archived copy. That copy is what keeps a source checkable years later.
Verification
It depends on the kind of source, and this is the single most important thing to understand. A primary source is authenticated: three members confirm the reference is genuine — no argument required, because there is nothing to argue about, only something to check. Everything else is verified: three argued notes, each carrying its own distinct reference. Three notes citing the same thing do not count as three. Full detail in The Method →
An argument, and a reference: an internal source code, an external URL, or an uploaded file. The reference must differ from the ones already used on that source. If you cite external material, you will be prompted to add it to the archive as a source in its own right — which is how the archive grows sideways.
Unsubmitted, Reviewed (one note), Verified (three notes), Authenticated (a confirmed primary source), In Review (one contestation open), Contested (three or more), and Dismissed (a contestation rejected). See them laid out →
Yes. The independence requirement is on the references, not on the people. What stops a source being waved through is that three genuinely distinct pieces of evidence are hard to fabricate — not a rule about who may click.
No, and this distinction is the foundation of the whole platform. Verification asks whether the document is authentic and is what it claims to be. Whether its contents are true, and what they mean, is argued in Chambers and settled — provisionally — in Briefs.
Contestation
One contester moves it to In Review immediately, visibly. Three make it Contested. The ratio of contesters to defenders is always on display, so the community can weigh it. It resolves as Dismissed when defenders outnumber contesters — the contesters do not have to withdraw for that to happen.
Nobody. There is no moderator, editor or committee with that power, by design. There is a procedure with an explicit rule, running in public with every participant's argument on the record. The alternative — someone trusted to adjudicate — is exactly what Cittadelle exists to avoid.
Yes, on non-primary sources. The contested note stops counting toward the threshold, so the source may drop a status. It resolves when a new valid note replaces it or the contester withdraws. The contested note is never removed — it stays as history.
Yes, on the same mechanism. A contested connection is drawn differently in the graph and its panel links to the contestation. It does not reach back and reopen the proposal that created it: history stays frozen, the dispute is about the present claim.
Graphs and proposals
Three maps of the same world answering different questions. Octopus: who is connected to whom. Follow the Money: who gave what to whom. Pyramid: who owns what, and how much — including the computation of effective ownership through chains of holdings, which is how you find the person behind three shell companies.
You propose it inside a Chamber, with your reasoning and your sources. It appears as a provisional element in that Chamber's working map. Three members endorse it, each with their own reasoning. Then it migrates into the global graph in one irreversible step, permanently linked back to the proposal that created it.
A direct connection is stated plainly by the source: endorsers only confirm it. A structural connection — control, influence, infiltration, parallel structure — is an inference, and every endorser must deposit a note explaining the inferential chain. Pyramid has no structural option at all: a shareholding is either documented or it is not. The Method walks through it →
No. A revised claim is a new proposal that supersedes the old connection; the old one stays queryable as history. In Pyramid this is explicit — ownership is stated "as of" a date, and a slider moves the whole graph back in time.
Briefs
Any member, but publication requires at least two contributors. A Brief is not a personal essay — the minimum is structural, not decorative.
A short documented argument. The name carries both senses: a brief document, and a brief argued in front of a court. Not an encyclopaedia entry — a mini-thesis about connections found inside one strand of enquiry.
Because they are interpretations, not documents. Contestation is a procedure for establishing whether a thing is what it claims to be, and a reading of the evidence is not that kind of claim. If you disagree, write your own Brief or open a Chamber.
That you think the argument holds. It is a count, not a score, and it confers nothing on the author.
You and your privacy
Regard replaces "follow". It is an editorial signal — an interest in someone's work — not agreement with their positions. It puts their recent publications on your Desk, and if it is mutual it opens a direct channel between you. There is no feed of friends.
Someone you regard back can write to you freely. Anyone else gets exactly one message, which is a request: until you accept it, nothing further can arrive. Ignoring it is a complete defence, and declining is silent — the sender is never told. You can also block, one-sidedly and invisibly, or close messages entirely.
No, deliberately. They are the one thing on Cittadelle with no code, which means they cannot be cited, anchored or introduced as evidence anywhere. There are no read receipts.
Only on your profile and in The Roll. It never appears in a feed, on a post, or beside a verification note — so that a newcomer's well-referenced note outweighs a veteran's assertion. Grades confer no powers at all.
Yes. Settings exports your sources, notes and Briefs as JSON, CSV or Markdown.
Community and philosophy
Any member. You become its first moderator and can invite others to moderate. Moderation is housekeeping — structure, strands, tidiness — never deciding what is true.
Yes, and it stays free. No subscriptions, no advertising, no investors, no data sold. Running costs are covered by voluntary support, and support buys nothing inside the platform — no badge, no visibility, no priority.
Because the mechanism that decides what is established here is the composition of the membership. There is no moderator to correct a drift, by design. That makes admission the real quality control, and the visible chain of who vouched for whom the thing that keeps it honest.
Three ways, none of them a guarantee. Every claim must survive documents that other members can check and contest. Nothing is ranked by engagement, so agreement gains no distribution. And grade is hidden from the feed, so consensus cannot be manufactured by seniority. It remains a real risk, and the honest answer is that it depends on who is invited.
History, geopolitics, war and conflict, intelligence and covert operations, financial networks, law and justice, propaganda and information, economics, political thought. The common thread is that all of them leave documents behind.
A Brief is as close as it gets, and it is explicitly provisional: an argued reading, endorsed by some, open to a better one. Cittadelle establishes what the documents say. What they mean stays open.
No account required Visit as guest →

Read the source archive, the three graphs and published Briefs without an account. Or read The Method first, to see how the work is actually done.