WORKTRACE / PROOF OF WORK
Local-first action evidence

Record what was handled.
Do not invent what happened.

Worktrace is a Python CLI and local SQLite provenance ledger that separates observed evidence, declared context and derived projections. It stores bounded metadata, not file contents, prompts, transcripts or raw terminal output.

Python 3.10+SQLite + FTS5Stdlib runtimeEnvelope version 2Schema 6Local-first
Interactive synthetic proof

Build an evidence ledger without storing content

Add fictional evidence and inspect how the envelope states source, temporal certainty and privacy receipts. Secret-shaped input is refused rather than silently redacted.

Ready. Nothing leaves this browser.
No synthetic evidence recorded yet.

This demonstration models Worktrace semantics but does not use SQLite, install hooks, read shell history, access a filesystem or contact Personal RAG. All events disappear when the page is closed.

Implemented architecture

Canonical ledger, derived surfaces

explicit record or bounded collector
  -> input normalization and secret screening
  -> event envelope with source + temporal semantics
  -> local SQLite ledger (canonical)
  -> search / show / Markdown report / JSONL export
  -> explicit Personal RAG projection and admission boundary

separate lane:
declared project context -> attribution claim -> reconcile with observed evidence
Temporal honestyExact source time, collection time, bounded source interval and order-only evidence remain distinct. An empty timestamp can be correct.
Privacy by omissionURL queries are removed unless allowlisted, path forms are canonicalized, raw shell output is not stored and secret-like input fails loudly.
Evidence is not effectReferenced or invoked means the evidence was present. It does not claim that a command succeeded or that a desired result occurred.
Evidence and limits

What the source supports

ClaimEvidence classBoundary
Local-first Python CLI and SQLite ledgerImplemented in private sourceNo system-wide or cloud telemetry claim
Envelope version 2 with explicit temporal semanticsNormative event contractConsumers must reject unknown or contradictory versions
Automatic Claude Code observation and RAG outbox recoveryImplemented and documented in v0.4.2No daemon, scheduler or browser-history collector
962 tests, 0 skipped, CI on Python 3.10–3.13Source-reported at implementation receiptNot re-run during this static publication change
Native Windows runtimeDeclared dependency supportSource explicitly says execution was verified on WSL/Linux, not native Windows