The public design notes behind StandMeet: motivation, architecture, key designs and trade-offs, served straight from the author’s StandMeet corpus wiki.https://standmeet.com/enhttps://standmeet.com/en/blog/architecture/https://standmeet.com/en/blog/architecture/Each pillar is a node under key-designs, carrying its components, code paths, status, and design pages:Sat, 26 Sep 2026 06:57:48 GMThttps://standmeet.com/en/blog/architecture/deployment/https://standmeet.com/en/blog/architecture/deployment/StandMeet deploys as a self-hosted, single-tenant, single-box app. This is the shape the product demands, not a limitation to fix later — and the code's lack o…Sat, 26 Sep 2026 06:57:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/global-asset-pool/https://standmeet.com/en/blog/architecture/key-designs/corpus/global-asset-pool/Motivating problem. Before 2026-09-05 an asset belonged to its holder — storage_key = <holder_id>/<asset_id>, "delete holder → delete its assets in the same tr…Sat, 26 Sep 2026 06:57:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/access-control/https://standmeet.com/en/blog/architecture/key-designs/access-control/Who may see and do what — the most heavily tested pillar (the acl-* e2e matrices). Entry is by access code (= invitation, QR); a code issues against a role who…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/access-control/coded-landing-and-code-rotation/https://standmeet.com/en/blog/architecture/key-designs/access-control/coded-landing-and-code-rotation/Motivating problem. The résumé PDF (resume-composer-one-renderer) prints <public_url>/?code=<code> in its QR. That is a credential in a URL: it lands in browse…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/access-control/owner-sessions-and-abuse-controls/https://standmeet.com/en/blog/architecture/key-designs/access-control/owner-sessions-and-abuse-controls/The big valves have pages — the three-layer ACL (access-control list, acl-and-quota-granularity), Sigv1 (owner-keypair-auth), the embed JWT (JSON Web Token, em…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/agent-core/https://standmeet.com/en/blog/architecture/key-designs/agent-core/The interpretation engine — where the product thesis (same corpus, per-audience presentation) executes. inference (backend/internal/conversation/inference/) wr…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/agent-core/ghost-steering/https://standmeet.com/en/blog/architecture/key-designs/agent-core/ghost-steering/The owner wants visitor conversations to converge toward per-role destinations (see project X, grasp the differentiation, book a call) — but the agenda is the …Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/capabilities/https://standmeet.com/en/blog/architecture/key-designs/capabilities/The agent's hands, organized as plugins on the MCP standard (copied verbatim — no private protocol). capreg is the registry: deterministic assembly order (the …Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/capabilities/capabilities-diagram-coverage/https://standmeet.com/en/blog/architecture/key-designs/capabilities/capabilities-diagram-coverage/Same two-sided cut as connector-diagram-coverage: the assembly side (how capabilities register and get exposed per session) and the consumption side (what the …Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/capabilities/capability-owns-quota-config-and-store/https://standmeet.com/en/blog/architecture/key-designs/capabilities/capability-owns-quota-config-and-store/mcp-capability-plugins explains that a builtin is a manifest plus an MCP process in a sandbox. This page is about the part the host used to hand-write for each…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/capabilities/capsocket/https://standmeet.com/en/blog/architecture/key-designs/capabilities/capsocket/Sandboxed builtin plugins (summarize / retrieval / booker / mail-sender; ask-visitor is sandboxed too but declares no host ops, so it gets no socket at all) ru…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/capabilities/feature-floor/https://standmeet.com/en/blog/architecture/key-designs/capabilities/feature-floor/The contract governing the externalization migration — moving a capability out of the core must not drop any of these cross-cutting behaviors. The floor items …Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/capabilities/mcp-capability-plugins/https://standmeet.com/en/blog/architecture/key-designs/capabilities/mcp-capability-plugins/This page is the capability plane — StandMeet as MCP host (see confusables). The agent's external tools / skills (retrieval, booker, summarize, ask_visitor + o…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/capabilities/skills-progressive-disclosure/https://standmeet.com/en/blog/architecture/key-designs/capabilities/skills-progressive-disclosure/A skill is not one-tool-per-script (that explodes the tool list and bloats the system prompt) — and a skill is not a capability either: it's an authored artifa…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/capabilities/ui-cards/https://standmeet.com/en/blog/architecture/key-designs/capabilities/ui-cards/Per-tool interactive cards in the chat, delivered as MCP-Apps ui:// resources, rendered in a sandboxed iframe talking to the host via postMessage. All per-tool…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/connector/https://standmeet.com/en/blog/architecture/key-designs/connector/Every credentialed contact with the outside world goes through one layer: connector.Hub + category slots. Consumers (agent capabilities, platform features, the…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/connector/connector-deps/https://standmeet.com/en/blog/architecture/key-designs/connector/connector-deps/The formal interface between the capabilities pillar and the connector pillar — fail-closed and consumer-agnostic by design. A plugin manifest declares Require…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/connector/connector-diagram-coverage/https://standmeet.com/en/blog/architecture/key-designs/connector/connector-diagram-coverage/The connector module is two designs sharing one package: the registry side (how a connector gets installed, credentialed, activated) and the caller side (how a…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/connector/connector-egress-guard/https://standmeet.com/en/blog/architecture/key-designs/connector/connector-egress-guard/Once an owner can upload an arbitrary OpenAPI connector, the target URL is attacker-influenceable — a classic SSRF surface (point it at 169.254.169.254 or an i…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/connector/connector-plugins/https://standmeet.com/en/blog/architecture/key-designs/connector/connector-plugins/A connector is NOT MCP — it speaks category contracts, not the MCP wire protocol; the two plugin axes touch only at connector-deps (confusables, incl. action v…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/connector/idempotent-booking/https://standmeet.com/en/blog/architecture/key-designs/connector/idempotent-booking/Calendar events.insert is non-idempotent: if the connection drops after Google created the event but before the response, a blind retry double-books. So the id…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/https://standmeet.com/en/blog/architecture/key-designs/corpus/The owner's knowledge base — the moat. One table, corpus_notes, with a genre column (raw / wiki / output / subjectivity / writing) — the three tiers are still …Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/corpus-retrieval/https://standmeet.com/en/blog/architecture/key-designs/corpus/corpus-retrieval/Today (landed): corpus_search / corpus_read / corpus_list / corpus_links / corpus_grep / corpus_map / corpus_peek / corpus_resolve — eight tools over a Meilise…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/obsidian-sync-mechanism/https://standmeet.com/en/blog/architecture/key-designs/corpus/obsidian-sync-mechanism/Bidirectional sync between StandMeet and an Obsidian vault. Shaped like Quartz / obsidian-importer: two buttons, each a batch job, owner-triggered manually — n…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/obsidian-sync-mechanism/vault-ingestion/https://standmeet.com/en/blog/architecture/key-designs/corpus/obsidian-sync-mechanism/vault-ingestion/StandMeet's account syncs a single Obsidian vault as its live source — Option A. The two alternatives are deferred:Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/writings-import-export/https://standmeet.com/en/blog/architecture/key-designs/corpus/writings-import-export/Today (landed): manual, owner-triggered, batch architecture. GET /api/admin/obsidian/export streams a standmeet-vault.zip (no temp file); POST /api/admin/obsid…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/eight-controls-applied/https://standmeet.com/en/blog/architecture/key-designs/eight-controls-applied/Read as a cybernetic machine, StandMeet is a control apparatus that destroys a stochastic LLM's variety and converges it onto one goal G = "answer as the owner…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/embed-credential-never-carries-the-code/https://standmeet.com/en/blog/architecture/key-designs/embed-credential-never-carries-the-code/Motivating problem. A <standmeet-chat> widget runs on a site StandMeet does not control, and its session must land on an access code — the code is what carries…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/microsites/https://standmeet.com/en/blog/architecture/key-designs/microsites/The instance root is the reserved slug home (HomepageSlug, owner/usecase/microsite.go:34; a5e1cada9 on 2026-09-04, template 77aee7dc6). The app middleware prob…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/monitor/https://standmeet.com/en/blog/architecture/key-designs/monitor/Call-time telemetry of the running system: the host's second cross-cutting controller, distinct in timing from ACL — ACL acts at session establishment (via "no…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/product-owned-upgrade/https://standmeet.com/en/blog/architecture/key-designs/product-owned-upgrade/Motivating problem. In the image-based stack the backend deliberately has no docker.sock (deployment) — it cannot pull images or recreate its own containers. U…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/resume-composer-one-renderer/https://standmeet.com/en/blog/architecture/key-designs/resume-composer-one-renderer/Motivating problem. The résumé is the outbound half of chain-hiring: the PDF carries a QR (quick-response) code whose URL admits the recruiter under an access …Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/service-handle/https://standmeet.com/en/blog/architecture/key-designs/service-handle/Not a pillar — the outward face. This node is deliberately separate from capabilities because the two are the easiest concepts in the system to conflate (confu…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/https://standmeet.com/en/blog/architecture/key-designs/structure/The ground the other six pillars stand on. Code shape: Go packaged by domain (internal/<domain>/{entity,usecase,repo,db,ops,facade} — the by-layer domain → use…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/backend-domain-modules/https://standmeet.com/en/blog/architecture/key-designs/structure/backend-domain-modules/The backend was packaged by layer, not by domain (until 2026-07-27). That was the root debt behind a whole class of tangles (a connector importing capabilities…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/convergence-inbound-and-outbound/https://standmeet.com/en/blog/architecture/key-designs/structure/convergence-inbound-and-outbound/The deepest structural idea in the backend, and the one that had no note. Everything a capability can do, and everything it can ask back for, passes through ex…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/display-error-surfacing/https://standmeet.com/en/blog/architecture/key-designs/structure/display-error-surfacing/Errors that reach the user are wrapped in a single envelope shape; the cause is audited separately in logs, never exposed to the client.Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/domain-facade-and-ddd-layout/https://standmeet.com/en/blog/architecture/key-designs/structure/domain-facade-and-ddd-layout/The domains under internal/<domain>/ have no outward-facing exposure layer. To use a domain you must read the whole thing to find its methods — there is no sin…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/external-means-fully-external/https://standmeet.com/en/blog/architecture/key-designs/structure/external-means-fully-external/An externalized capability owns its own storage too. If the kernel still holds the table, the capability was relocated, not externalized — and a tidier address…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/mechanical-guardrails/https://standmeet.com/en/blog/architecture/key-designs/structure/mechanical-guardrails/"Mechanical constraint over social argument" made literal. It has grown from a handful of linters into 55 check-* entries under infra/scripts/ — 45 guards plus…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/one-source-per-ui-primitive/https://standmeet.com/en/blog/architecture/key-designs/structure/one-source-per-ui-primitive/Twelve gates, one doctrine: every visual primitive has exactly one definition, and a build-time guard makes the second one impossible. This is where the produc…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/ordering-depended-upon-first/https://standmeet.com/en/blog/architecture/key-designs/structure/ordering-depended-upon-first/A rollout rule, and a rule about who decides the rollout.Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/owner-facade-from-registry/https://standmeet.com/en/blog/architecture/key-designs/structure/owner-facade-from-registry/The owner's agent (owner's own MCP client / Claude Code) must reach capabilities the same generic way the visitor agent does: discover from the container, invo…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/sandbox-js-hardening/https://standmeet.com/en/blog/architecture/key-designs/structure/sandbox-js-hardening/Owner-authored skill scripts (skill_run_script, see skills-progressive-disclosure) are untrusted, so they run hard-sandboxed: --network=none (can't exfiltrate)…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/subjectivity-record-notes-acl/https://standmeet.com/en/blog/architecture/key-designs/subjectivity-record-notes-acl/(was "Subjectivity owner-visibility (gate-one tightening)" — renamed: "owner" was the wrong frame. Nothing varies about owner visibility; the whole corpus is t…Wed, 23 Sep 2026 10:42:48 GMThttps://standmeet.com/en/blog/architecture/key-designs/https://standmeet.com/en/blog/architecture/key-designs/The non-obvious, load-bearing design decisions, organized as seven pillar nodes (each a folder with its design pages as children). The through-line: StandMeet …Wed, 23 Sep 2026 10:42:47 GMThttps://standmeet.com/en/blog/requirements-to-design/https://standmeet.com/en/blog/requirements-to-design/The missing middle between product and architecture — how the product surface decomposes into the seven pillars, traced BOTH ways: every promise to its enginee…Wed, 23 Sep 2026 10:42:47 GMThttps://standmeet.com/en/blog/requirements-to-design/chain-hiring/https://standmeet.com/en/blog/requirements-to-design/chain-hiring/boundaries — hiring is an application on the foundation, explicitly NOT the product. transaction-needs-difference — a transaction needs difference; the résumé …Wed, 23 Sep 2026 10:42:47 GMThttps://standmeet.com/en/blog/requirements-to-design/chain-machine-readable/https://standmeet.com/en/blog/requirements-to-design/chain-machine-readable/interpretation-economy — the web shifts from attention to interpretation economy: "they don't ask you — they ask an AI"; an agent won't fill gaps charitably, i…Wed, 23 Sep 2026 10:42:47 GMThttps://standmeet.com/en/blog/requirements-to-design/chain-owner-first/https://standmeet.com/en/blog/requirements-to-design/chain-owner-first/introduction — "the first user is you — an external brain over your own thinking; others querying is a second surface". boundaries — "not a job-seeking tool; t…Wed, 23 Sep 2026 10:42:47 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/facade-directions/https://standmeet.com/en/blog/architecture/key-designs/structure/facade-directions/facade-parity made every facade a projection of one registry. That model had no direction axis — its only base reaches were OwnerRead() / OwnerAction(), and it…Wed, 23 Sep 2026 08:05:25 GMThttps://standmeet.com/en/blog/architecture/key-designs/agent-core/agent-core-diagram-coverage/https://standmeet.com/en/blog/architecture/key-designs/agent-core/agent-core-diagram-coverage/The module's class diagrams live on the design pages they belong to; this page is the coverage gate — what's diagrammed, what isn't yet.Wed, 23 Sep 2026 08:02:13 GMThttps://standmeet.com/en/blog/architecture/key-designs/agent-core/detached-turn-persist-at-completion/https://standmeet.com/en/blog/architecture/key-designs/agent-core/detached-turn-persist-at-completion/The agent turn runs on context.WithoutCancel — a client disconnect (refresh / close) doesn't cancel it; the stream completes and lands in the DB (only a WithTi…Wed, 23 Sep 2026 08:02:13 GMThttps://standmeet.com/en/blog/architecture/key-designs/agent-core/entry-agnostic-agent/https://standmeet.com/en/blog/architecture/key-designs/agent-core/entry-agnostic-agent/The agent is entry-agnostic: entries are just consumers that fill a neutral session context and invoke it.Wed, 23 Sep 2026 08:02:13 GMThttps://standmeet.com/en/blog/architecture/key-designs/agent-core/eval-harness-on-prod-loop/https://standmeet.com/en/blog/architecture/key-designs/agent-core/eval-harness-on-prod-loop/The eval-harness imports only the public agentcore facade (never internal/) and runs the byte-for-byte same agent loop as prod — so a bug found in eval is a re…Wed, 23 Sep 2026 08:02:13 GMThttps://standmeet.com/en/blog/architecture/key-designs/agent-core/force-final-answer/https://standmeet.com/en/blog/architecture/key-designs/agent-core/force-final-answer/If the agent loop ends in an error having produced zero assistant text (max iterations hit, hallucinated tool name, etc.), instead of surfacing an error it mak…Wed, 23 Sep 2026 08:02:13 GMThttps://standmeet.com/en/blog/architecture/key-designs/agent-core/system-prompt-hash-regression/https://standmeet.com/en/blog/architecture/key-designs/agent-core/system-prompt-hash-regression/The composed system prompt is SHA-256 hashed; an invariants check builds it 3× and asserts the hash is identical (backend/internal/capabilities/capreg/system_p…Wed, 23 Sep 2026 08:02:13 GMThttps://standmeet.com/en/blog/architecture/key-designs/agent-core/unbuffered-sse-passthrough/https://standmeet.com/en/blog/architecture/key-designs/agent-core/unbuffered-sse-passthrough/The /api/v1/agent/turn Next route does not go through next.config rewrites — those buffer the upstream SSE, so the browser would receive every frame at once at…Wed, 23 Sep 2026 08:02:13 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/facade-parity/https://standmeet.com/en/blog/architecture/key-designs/structure/facade-parity/One registry; every facade is generated from it or verified against it. Never a second hand-written description of the same capability.Wed, 23 Sep 2026 08:01:45 GMThttps://standmeet.com/en/blog/requirements-to-design/chain-interpretation/https://standmeet.com/en/blog/requirements-to-design/chain-interpretation/Anyone can ask a specific question and receive a specific answer phrased in the owner's voice, grounded and cited, framed for their role — one corpus, lineariz…Wed, 23 Sep 2026 08:00:03 GMThttps://standmeet.com/en/blog/requirements-to-design/chain-selective-access/https://standmeet.com/en/blog/requirements-to-design/chain-selective-access/Status: DEEPEST CHAIN — design finalized, heaviest tests.Wed, 23 Sep 2026 08:00:03 GMThttps://standmeet.com/en/blog/requirements-to-design/chain-sovereignty/https://standmeet.com/en/blog/requirements-to-design/chain-sovereignty/introduction — the corpus is yours to curate and push, never scraped; the act of attaching it is the trust boundary. design-principles — architectural predicti…Wed, 23 Sep 2026 08:00:03 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/obsidian-sync-mechanism/protocol/https://standmeet.com/en/blog/architecture/key-designs/corpus/obsidian-sync-mechanism/protocol/For every field, two questions: where does its value really come from, and who reads it — Obsidian, StandMeet, both, or neither. Anything whose source is more …Wed, 23 Sep 2026 07:59:22 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/obsidian-sync-mechanism/rendering-and-extensibility/https://standmeet.com/en/blog/architecture/key-designs/corpus/obsidian-sync-mechanism/rendering-and-extensibility/How StandMeet supports the presentation / extensibility layer of the notes it syncs (theorem callouts, math, diagrams, dynamic widgets) — the settled design.Wed, 23 Sep 2026 07:59:22 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/judgment-audit/https://standmeet.com/en/blog/architecture/key-designs/structure/judgment-audit/The split: lint / type / test guard mechanical correctness (mechanical-guardrails); the audit guide guards judgment quality — "mechanical correctness ≠ clean a…Wed, 23 Sep 2026 07:58:31 GMThttps://standmeet.com/en/blog/architecture/key-designs/agent-core/agent-as-injectable-driver/https://standmeet.com/en/blog/architecture/key-designs/agent-core/agent-as-injectable-driver/Agent core = independently launchable module via Bridge/Driver.Wed, 23 Sep 2026 07:58:01 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/ephemeral-over-stateful/https://standmeet.com/en/blog/architecture/key-designs/structure/ephemeral-over-stateful/A recurring taste across the codebase: don't keep mutable state you can derive or append.Wed, 23 Sep 2026 07:56:02 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/structure-diagram-coverage/https://standmeet.com/en/blog/architecture/key-designs/structure/structure-diagram-coverage/The pillar's class diagrams live on the design pages they belong to; this page is the coverage gate.Wed, 23 Sep 2026 07:56:02 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/builder-claim-skip-locked/https://standmeet.com/en/blog/architecture/key-designs/structure/builder-claim-skip-locked/Microsite builds (the surface was called "custom pages" until the rename, e7fe80e91, 2026-09-05) run in a separate builder service, not the main app — so the A…Wed, 23 Sep 2026 07:54:29 GMThttps://standmeet.com/en/blog/architecture/key-designs/service-handle/as-mcp-facade/https://standmeet.com/en/blog/architecture/key-designs/service-handle/as-mcp-facade/This page is the service handle — StandMeet as an MCP server (the outward plane), not the capability plane where our own agent consumes plugins as host — see c…Wed, 23 Sep 2026 07:49:49 GMThttps://standmeet.com/en/blog/architecture/key-designs/service-handle/ui-mcp-parity/https://standmeet.com/en/blog/architecture/key-designs/service-handle/ui-mcp-parity/Every owner operation reachable through the admin UI is also reachable through the service handle (StandMeet-as-MCP-server) — so the owner's AI session is neve…Wed, 23 Sep 2026 07:49:49 GMThttps://standmeet.com/en/blog/architecture/key-designs/access-control/owner-keypair-auth/https://standmeet.com/en/blog/architecture/key-designs/access-control/owner-keypair-auth/The owner MCP handle (/mcp/*) gates every HTTP request with a valid Sigv1 signature — legacy Bearer PAT was removed when keypair auth replaced PATs (routes/mcp…Wed, 23 Sep 2026 07:48:42 GMThttps://standmeet.com/en/blog/architecture/confusables/https://standmeet.com/en/blog/architecture/confusables/The vocabulary collisions in this system, each split precisely. When a doc says one of these words unqualified, check here.Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/https://standmeet.com/en/blog/product/What it's for, what it is, and the lines around it.Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/boundaries/https://standmeet.com/en/blog/product/boundaries/StandMeet is not a job-seeking tool. Hiring is an obvious application (a recruiter pre-reads, then asks better follow-ups), but the owner's own use comes first…Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/design-principles/https://standmeet.com/en/blog/product/design-principles/Every design choice traces back to an articulated stance — that internal consistency is a hard requirement, not decoration.Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/differentiation/https://standmeet.com/en/blog/product/differentiation/vs input tools (Notion / Glasp / Readwise). They solve input — highlighter, note-taker, journal. They don't solve retrieval-by-others-in-your-voice. A Notion p…Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/introduction/https://standmeet.com/en/blog/product/introduction/StandMeet inverts the compression. You curate a knowledge base of who you are and what you've actually done; then you — or a visitor — query it, and an AI answ…Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/motivation/https://standmeet.com/en/blog/product/motivation/Why StandMeet has to exist — the problem, the seed insight, the timing, and the fit.Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/motivation/ai-conversation-is-the-substrate/https://standmeet.com/en/blog/product/motivation/ai-conversation-is-the-substrate/The seed insight, from lived experience: conversation with an LLM is now where substantive thinking actually happens. Explaining a complex view to Claude, you …Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/motivation/dont-repeat-myself/https://standmeet.com/en/blog/product/motivation/dont-repeat-myself/The sharpest, most concrete pain — and the strongest evidence the product is real. An articulated thinker pays a steep cost being asked the same thing over and…Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/motivation/founder-product-fit/https://standmeet.com/en/blog/product/motivation/founder-product-fit/Sijie is the product's target user — not a marketing claim, an architectural advantage. Years of AI-conversation substance lost; LinkedIn under-represents him;…Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/motivation/interpretation-economy/https://standmeet.com/en/blog/product/motivation/interpretation-economy/For 25 years the internet ran on an attention economy — shout, get eyeballs, perform on LinkedIn. It's shifting to an interpretation economy: the whole web is …Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/motivation/lossy-self-presentation/https://standmeet.com/en/blog/product/motivation/lossy-self-presentation/This bites hardest for a networked thinker — someone whose ideas live in a dense graph while every capture-and-delivery channel is stubbornly linear. Three los…Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/motivation/stiff-questions-soft-capture/https://standmeet.com/en/blog/product/motivation/stiff-questions-soft-capture/Interview-shaped questions — "tell me about a time you…" — are stiff: they retrieve episodes, and episodes cannot be crammed. Asked cold, even a person rich in…Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/motivation/transaction-needs-difference/https://standmeet.com/en/blog/product/motivation/transaction-needs-difference/Hiring — and most high-stakes first contact — is at bottom a transaction, and a transaction needs difference: a reason to pick you over the alternative. The ré…Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/motivation/why-now/https://standmeet.com/en/blog/product/motivation/why-now/Three enablers converge:Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/product/thesis/https://standmeet.com/en/blog/product/thesis/The loop: the user agentically curates the good parts of an AI conversation → pushes them to StandMeet via MCP → the corpus accumulates → the corpus serves mul…Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/requirements-to-design/chain-explicit-push/https://standmeet.com/en/blog/requirements-to-design/chain-explicit-push/Nothing enters except what the owner deliberately curated and pushed; the private substrate becomes a durable public-facing layer only through deliberate acts.Wed, 23 Sep 2026 07:46:34 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/rendering-engines/https://standmeet.com/en/blog/architecture/key-designs/corpus/rendering-engines/StandMeet's markdown pipeline renders rich content across chat answers, wiki/output pages, and writings (app/src/components/page/markdown.tsx): remark-gfm + re…Wed, 23 Sep 2026 07:45:56 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/rendering-engines/katex/https://standmeet.com/en/blog/architecture/key-designs/corpus/rendering-engines/katex/Math rendering. StandMeet: remark-math → rehype-katex (katex ^0.16). Obsidian: MathJax.Wed, 23 Sep 2026 07:45:56 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/rendering-engines/mermaid/https://standmeet.com/en/blog/architecture/key-designs/corpus/rendering-engines/mermaid/Text-based diagrams. Obsidian: built-in. StandMeet: a code component override detects mermaid (isMermaidCode / mermaidSource, app/src/components/page/markdown-…Wed, 23 Sep 2026 07:45:56 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/rendering-engines/tikzjax/https://standmeet.com/en/blog/architecture/key-designs/corpus/rendering-engines/tikzjax/Fills the gap mermaid can't: precise mathematical figures — geometry constructions, commutative diagrams, coordinate/labeled boxes, function curves. A ```tikz …Wed, 23 Sep 2026 07:45:56 GMThttps://standmeet.com/en/blog/architecture/key-designs/access-control/acl-and-quota-granularity/https://standmeet.com/en/blog/architecture/key-designs/access-control/acl-and-quota-granularity/Notation:Wed, 23 Sep 2026 07:42:33 GMThttps://standmeet.com/en/blog/architecture/key-designs/access-control/byoai-browser-vault/https://standmeet.com/en/blog/architecture/key-designs/access-control/byoai-browser-vault/The visitor's own key is XSS-resistant on the browser side: a non-extractable AES-GCM CryptoKey lives in IndexedDB (JS can call encrypt/decrypt but never read …Wed, 23 Sep 2026 07:42:33 GMThttps://standmeet.com/en/blog/architecture/key-designs/access-control/byoai-envelope/https://standmeet.com/en/blog/architecture/key-designs/access-control/byoai-envelope/A visitor's own model key (BYOAI) never touches server storage or Redis. The browser keeps it and wraps it per request in an X-Byoai-Key header: AES-256-GCM, w…Wed, 23 Sep 2026 07:42:33 GMThttps://standmeet.com/en/blog/architecture/key-designs/access-control/role-snapshot-frozen/https://standmeet.com/en/blog/architecture/key-designs/access-control/role-snapshot-frozen/When a session is issued, the entire role state (corpus URIs, prompt body, skill prompts, allowed tools, denied capabilities, denied corpus globs, waypoints, p…Wed, 23 Sep 2026 07:42:33 GMThttps://standmeet.com/en/blog/architecture/key-designs/access-control/trusted-identity-via-meta/https://standmeet.com/en/blog/architecture/key-designs/access-control/trusted-identity-via-meta/The session's trusted identity — OwnerID, Subject{Kind, ID} (an access code or an outbound key; it was CodeID until 2026-08-20, 162f09833, when key-path sessio…Wed, 23 Sep 2026 07:42:33 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/derived-path-corpus-as-filesystem/https://standmeet.com/en/blog/architecture/key-designs/corpus/derived-path-corpus-as-filesystem/corpus_notes (every genre — wiki / output / subjectivity, and raw too since d925d9081, 2026-07-09) has a parent_id self-ref tree but no path column. The addres…Wed, 23 Sep 2026 07:41:12 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/three-tier-corpus-promotion/https://standmeet.com/en/blog/architecture/key-designs/corpus/three-tier-corpus-promotion/raw → wiki → output: draft → curated → polished. Entries are promoted, not copied — since the tiers folded into one corpus_notes table (d925d9081, 2026-07-09) …Wed, 23 Sep 2026 07:41:12 GMThttps://standmeet.com/en/blog/architecture/key-designs/access-control/access-control-diagram-coverage/https://standmeet.com/en/blog/architecture/key-designs/access-control/access-control-diagram-coverage/The pillar's class diagrams live on the design pages they belong to; this page is the coverage gate.Wed, 23 Sep 2026 07:38:31 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/backlinks-as-rebuilt-edge-tables/https://standmeet.com/en/blog/architecture/key-designs/corpus/backlinks-as-rebuilt-edge-tables/[[X]] lives literally in the body (never rewritten at storage). On every save, the code extracts all [[X]], resolves them to ids, and deletes all out-edges the…Wed, 23 Sep 2026 07:37:44 GMThttps://standmeet.com/en/blog/architecture/key-designs/corpus/corpus-diagram-coverage/https://standmeet.com/en/blog/architecture/key-designs/corpus/corpus-diagram-coverage/The pillar's class diagrams live on the design pages they belong to; this page is the coverage gate.Wed, 23 Sep 2026 07:37:44 GMThttps://standmeet.com/en/blog/architecture/key-designs/structure/a-gate-that-cannot-go-red/https://standmeet.com/en/blog/architecture/key-designs/structure/a-gate-that-cannot-go-red/Ten of the fifty-five check-* entries under infra/scripts/ (counted 2026-09-07) exist only to attack the other forty-five. Their shared opening line is the doc…Wed, 23 Sep 2026 07:37:09 GMT