How an entry earns its place. The register admits nothing it cannot prove, and the method is printed in full so that anyone can hold the house to it.
Kwetchi never cites a page: it captures one. Every claim in the ledger resolves to a copy of the source as it stood on the day we read it: the raw file, a PDF facsimile, a SHA-256 fingerprint computed the same day, a UTC timestamp, one row in the register. If the page changes, we hold what it said. If it disappears, we hold the fact that it existed. The archive depends on none of the institutions it observes.
The machine register is a single flat file at the root of this site, ledger.json, documented in full on the machine register page. Each entry carries its identifier, the date of the fact, the funder, the recipient scope, the source family, the theme, the announced and disbursed amounts, the status, the exact quote, the source, the facsimile file name, the fingerprint and the archival timestamp. What the file does not yet carry, it says so: a pending fingerprint prints as pending. The consultable form of the register, with its ask bar, lives at Ledger.
Five source families: official aid, philanthropy, diaspora, AI and data capital, mixed or other. Climate, education and health are themes, never source families: no figure is counted twice. Three statuses govern every entry. SOURCED: verified against its archived facsimile. SPECIMEN: illustrative scale, printed only with the SPECIMEN label and in grey. REVISED: a sourced entry later corrected, the superseded figure struck through beside the correction, the revision note saying what changed.
An announcement is recorded as an announcement; only evidence of arrival fills the disbursed column. The two amounts are printed side by side, and the distance between them is the finding. Wherever a source publishes commitments, the register says commitments; wherever it publishes payments, the register says payments.
A source figure is bound to one captured facsimile and carries its fingerprint. A derived figure, an aggregate or a gap, has no single facsimile: it is bound instead to a named vintage of the register, and the computation is reproducible from the same file anyone can fetch. Every figure printed by this house belongs to one of the two classes and says which.
ledger.json stays canonical at the root and is refreshed with the Sunday publication. At each refresh the outgoing state deposits unchanged as /data/ledger-vYYYYMMDD.json. Vintages are immutable and chained: each carries the SHA-256 of its predecessor, so a silent revision anywhere in the history is detectable by any third party holding an earlier file. The first vintage deposits with Brief N° 001 on 30 August 2026. Each Brief prints, in its colophon, the full fingerprint of that week's vintage: email is an archive the house cannot silently amend.
No row is deleted and no facsimile is replaced. A superseded row receives the status REVISED in a new vintage, with a pointer to the correcting row; both chains are preserved and listed in the corrections register. Corrections are printed where everyone can read them.
No advertising. No trackers: this site sets none. No popups, no countdowns, no scarcity claims, no subscriber counters. No figure without its class, no claim without its proof, no correction without its printed record. Commissioned research is accepted under disclosed terms only: the commissioning party is named, the method is this method, and the house keeps the right to publish the corrections the data demands.