Research Workspace methods and privacy
Workspace data, private notes, and collections are stored locally in the user's browser and are not uploaded to WS Musings.
Open Workspace Inspect Open Data
Four distinct states
Canonical public data
Versioned WS Musings records with stable IDs and public routes.
Deterministic analysis
Reproducible Observatory, Studio, and Decision Lens configurations and findings.
Private local state
Collections, notes, tags, ordering, saved names, and the local Workspace identifier.
Browser-session selections remain distinct from persistent Workspace state and public share URLs. Nothing is saved persistently merely because a page was visited.
Storage and recovery
IndexedDB stores one versioned Workspace object. localStorage is reserved for bounded migration pointers or small preferences. Schema v1 supports deterministic v0→v1 migration; migrations are idempotent, lossless, local, and tested. Storage quota failures never claim success or evict notes. Malformed state fails closed with local recovery options.
Offline workspace persistence means locally stored state remains available. Full offline public-record retrieval is not implemented; no broad service worker or whole-site cache was added.
Import, export, and private notes
Private Workspace exports use .wsm-workspace.json, bounded JSON validation, a content hash, explicit counts, and a visible privacy warning. Import rejects malformed JSON, unsupported versions, oversized input, unsafe keys, excessive depth, and hash mismatches. Merge and confirmed Replace are supported.
Private notes are plain text, escaped before rendering, excluded from public URLs and public briefs by default, and never alter analytical outputs.
Changes since your last visit
Stable release identities and versioned diff registries distinguish application, canonical-corpus, method, presentation, and correction changes. Two snapshots are never called a trend. If no governed corpus changed, the Workspace says so explicitly. Saved display snapshots are not silently overwritten.
Briefs and citations
The Brief Builder assembles selected public records and deterministic results; it is not an AI writer and does not generate unsupported research prose. Public research briefs exclude private notes by default. Private working briefs include notes only after an explicit choice. Citations retain record type, title, canonical ID and URL, releases, method IDs where available, evidence IDs where available, and a local access date. Unknown fields remain UNKNOWN.
Public share-state privacy
Share URLs accept only validated public IDs and analytical configuration. Workspace IDs, collection names, notes, tags, local labels, private titles, and local timestamps are prohibited. Ordering is canonicalized and URL length is bounded.
Network and analytics boundary
Workspace operations perform no fetch, XMLHttpRequest, Beacon, form submission, third-party storage, hosted AI, or custom telemetry. The existing authorized GA4 loader remains once and receives no saved records, notes, collection names, tags, local search, imports, exports, or workspace identifiers.
Reproduction
Run the v7.32 engine tests, source validator, site validator, performance benchmark, browser workflow suite, two deterministic candidate builds, and fresh-extraction qualification. Open Data hashes resolve to the exact downloadable bytes.
Interpretation boundary. The data describes the published governed corpus. Relationship absence is not proof of real-world absence, edge counts are not measures of influence, stakeholder coverage is incomplete, and evidence metadata may contain missing dates or normalized geography.