Six things we won’t trade away.

Yours, on your machine. There is no hosted Mandala. One small server is enough, and your files stay files.

Every change is kept as a signed fact and the present is worked out from the history. Undo and audit come with it.

Declare what is allowed and what follows. State, screens, API and search are derived, and replay gives the same answer.

Signatures and delegation say who acted, for whom, when. Each side decides whom it trusts. No chain is needed.

Your accomplice can only do what the rules allow. What goes out waits for approval, and every action is traced.

Local-first: your devices work apart and merge when they meet. Realtime collaboration is where it is going.