NotMagic · Blueprint

Surveyable index of every live surface, machine endpoint, native client, and reference document in the system. Greyed cards are surfaces that exist in design or staged code but are not yet live in this gateway.
notmagic.io
Status legend: LIVE = serves now · INPUT = needs a block_id / candidate_id · EXTERNAL = lives elsewhere (real link) · PLANNED = surface exists in design but not yet wired

Mobile Web · where humans act

Mobile-first witness surface. Native iOS is the hardware-proof authority client; this is the browser surface for fast demos.
/mobile-web
demo
Mobile SPA · queue list + focused decision card + press-and-hold authorize. Honesty banner pinned at the top. (Also reachable at /cockpit for back-compat.)
https://notmagic.io/mobile-web
iOS · the ratifier
external
Native authority client (App Attest + Face ID). Hardware-sealed admissions are live on this chain — a Sign-in-with-Apple human cross landed 2026-08-11 (block 6134). Ships from the notmagic-ios repo (private); TestFlight distribution pending.
Mac desktop · the cockpit
external
The steward cockpit (mac-steward, SwiftPM, same repo): decision queue (hold/reject on the desktop; approve routes to the phone by law), orientation strip over three chains, refusal feed, and the Receipt Wall — content-addressed block weave with typed strands and in-place organelle unfold. Landed 2026-08-17.

The wall · proof and audit

Read-only surfaces that let you verify the system's claims directly.
/health
live
Serve-last-verdict deep audit: the last completed walk, instantly, with freshness stamps (age, walk duration, chain length). Staleness is stamped, never laundered. Binary attestation in strict mode.
https://notmagic.io/health
/refusals
bearer
The wall's NOs, recorded: kernel admission refusals and binary-attestation refusals with the exact reason bytes, the law cited, and what would satisfy each. Witness records, never chain entries. Authed — refusal reasons carry internals.
GET /refusals (user or admin bearer)
/chain
live
Full read-only dump of the admitted chain. Every entry signed by the kernel's Ed25519 key.
https://notmagic.io/chain
/chain/verify
live
Verify the whole chain integrity (signature + linkage + sealed-block custody) on demand. JSON.
https://notmagic.io/chain/verify
/wall
live
The Receipt Wall — content-addressed block weave with typed strands (custody · provenance · authority). Strand-select emphasizes, never re-lays-out; a block unfolds in place into its eight organelles; absences are stated, never blank.
https://notmagic.io/wall
/chain/view
live
HTML rendering of the chain — admitted blocks in admission order.
https://notmagic.io/chain/view
/report
live
System verdict report. Verdict + counts + per-scope tiles. The legacy home page.
https://notmagic.io/report
/flow
live
Live flow view — recent activity across surfaces.
https://notmagic.io/flow

The garden · signals being cultivated

The Nose's scoreboard. Detector signals, review-quality, and the beds the system cultivates.
/garden/view
live
Smell Garden HTML — auth_bypass, idempotency_drift, trust_label_leak, review-quality beds.
https://notmagic.io/garden/view
/garden
live
Garden projection JSON. Same data; machine-consumable.
https://notmagic.io/garden

The flow · live activity

What's moving through the system right now.
/candidates
live
Pending candidates (all kinds) — the queue behind /cockpit.
https://notmagic.io/candidates
/candidates · pr_review_finding
live
Filtered to bot-minted PR review findings.
/candidates?candidate_kind=pr_review_finding
/admitted/artifacts
live
Post-admit artifact ledger — the bot's pending/posted PR inline comments.
https://notmagic.io/admitted/artifacts
/boundary/recent
live
Recent boundary-ingest records. Tamper-evident JSONL chain.
https://notmagic.io/boundary/recent
/gates/pending
live
Open human-approval gates waiting on someone authorized.
https://notmagic.io/gates/pending

Streams · server-sent events (curl)

SSE endpoints. Candidate updates require an actor bearer; boundary observations remain public.
/candidates/stream
live
Actor-scoped SSE of candidate-queue updates.
curl -N -H 'Authorization: Bearer …' https://notmagic.io/candidates/stream
/farm/stream
live
SSE of boundary observations + ingest signals.
curl -N https://notmagic.io/farm/stream

Drill into a specific block

Per-block deep views. Pre-baked demo links use a live judgment block (#138) and its companion edge_contract (#139). Replace the block_id segment with any block_id from /chain.
/blocks/{id}/view · judgment
input
"What this relies on" tile view. Source, Transform, Receipt, Gate, Scope tiles for a kernel_judgment.
/blocks/63e68bd0…/view
/blocks/{id}/view · edge_contract
input
Same tile view, edge_contract / handoff variant: scope grants + downstream rely-on.
/blocks/613a36e2…/view
/reliance/{id}
input
Live Reliance Route HTML — the Reliance Fabric projection of a block.
/reliance/63e68bd0…
/reliance/{id}.json
input
JSON companion to /reliance — for machine consumers (iOS, chain visualizers).
/reliance/63e68bd0….json
/graph/block/{id}/view
input
Block lineage / topology view. Upstream declared_inputs + downstream references.
/graph/block/63e68bd0…/view
/blocks/{id}
input
Raw block JSON (the canonical sealed content).
/blocks/63e68bd0…

Try it yourself · public tools

Hands-on surfaces that don't need an auth token.
/preflight
live
Paste a thread / spec / claim text → classification + proposed Chamber transitions.
https://notmagic.io/preflight
/smell-check
live
Smell-check home / interactive analyzer landing.
https://notmagic.io/smell-check

Source repos · open the code

The product estate: three repos at github.com/fentonbuttonshop, three at github.com/fentonbenjamin. Live links; auth required to view.
notmagic-kernel
external
Ratification Chamber + signed semantic edges (Rust trust kernel). The wall mechanism lives here.
github.com/fentonbuttonshop/notmagic-kernel
notmagic-services
external
Farm, Garden backend, projections, proposal routing (Python). This gateway lives here.
github.com/fentonbuttonshop/notmagic-services
notmagic-web
external
Reliance Fabric, Garden UI, ChainView (HTML).
github.com/fentonbuttonshop/notmagic-web
notmagic-ios
external
Human ratification client (Swift Package: iOS + macOS). Hardware-sealed admissions.
github.com/fentonbenjamin/notmagic-ios
notmagic-github-app
external
Developer-workflow proposal surface (in extraction). PR webhook → bot detectors → candidates.
github.com/fentonbenjamin/notmagic-github-app
notmagic-filing-private
external
IP / counsel materials. Private.
github.com/fentonbenjamin/notmagic-filing-private

Admission machinery · POST endpoints (auth-gated)

Listed for completeness. Not clickable from the browser — they take JSON bodies and need the admin bearer token or an active session.
POST /threads/analyze
input
Boundary intake → smell-check analyzer. Pure GET-equivalent via /preflight.
curl -X POST .../threads/analyze
POST /candidates/{id}/decision
input
The cockpit's decision endpoint. action=approve|hold|reject. Approve is the authority lane (hardware seal); hold/reject record concurrence. Bearer required.
curl -X POST .../candidates/{id}/decision
POST /candidates/announce-ratification
input
The stew-announces pipe: a local steward announces a tested, PR'd change so settle surfaces can present it for ratification. Mints a proposal; moves no authority.
curl -X POST .../candidates/announce-ratification
POST /candidates/announce-design
input
The queue's second cargo: a design decision as a first-class typed candidate (digest computed from the exact decision bytes; edited text is a new candidate). Drives md-files-per-design-decision toward zero.
curl -X POST .../candidates/announce-design
POST /seal/challenge
input
Issue a fresh challenge for an iOS App Attest seal envelope (PROOF-SEAL-001.7).
curl -X POST .../seal/challenge
POST /seal/register-app-attest
input
Register an iOS App Attest seal. Requires real Apple Root CA pinned in env.
curl -X POST .../seal/register-app-attest
POST /review/submit
input
Submit a CandidateTransition proposal as a review_proposal block. Bearer admin token.
curl -X POST .../review/submit
POST /gates/respond
input
Generic human-approval gate: action=admit|hold|reject + source_block_id. Bearer gate token.
curl -X POST .../gates/respond
POST /farm/observe
input
Boundary observation push. Inputs land in the intake-record chain.
curl -X POST .../farm/observe
POST /gh-bot/webhook
input
Canonical GitHub App webhook receiver. Mints the Card → Lease → Effect → Receipt → Finding shape. (Legacy /github/webhook is retired per task #22 — returns 410 Gone.)
.../gh-bot/webhook (configured in GitHub App settings)

Operator + future surfaces

What's in the staging area or in design.
Apple App Attest · Root CA pinned
planned
Operator task: drop Apple's published Root CA in /etc/chamber/, set APPLE_APP_ATTEST_ROOT_CA_PEM_FILE. Pre-deploy validator lives at scripts/validate_apple_app_attest_root_ca.py.
Native iOS App Attest seals
planned
Cockpit Phase B: iOS sends typed seal_envelope. Wires Face ID Tandem → kernel-verified admission, end to end.
Wild Nose · self-seeded candidates
planned
Autonomous detector that drafts candidate packets from observed regressions. v0 shipped 2026-05-10; ongoing detector additions.
Mac desktop · Secure Enclave seals
planned
Cockpit inspector + admission client backed by Mac Secure Enclave keys. Separate trust tier from iOS App Attest.