Nishi FamilyCompare › Share-Hub: Publishing and Sharing Platforms the Estate Emits

Nishi Compare · measured, not asserted

Share-Hub: Publishing and Sharing Platforms the Estate Emits

Nishi vs the field — every Nishi cell is measured against real organ source at emit time; each gap names the watch contract that will close it.

Nishi hub (content-addressed publish + own BitTorrent + safe-harbour + zero-JS reader and VN + sovereign wasm games + first-party ads) vs Civitai and Hugging Face and itch.io and Syosetu -- Aug-2026 field

Layer 1 · Executive

Where we are. MEASURED 2026-08-24 against source: a content-addressed publish enabler (SHA-256 CID, BitTorrent v2 magnet, /dist URL, API row in one call), a sovereign BitTorrent stack end to end (seeder gate-proven by a real leecher, .torrent originator, DHT, MSE wire, ip-filter), a who-has-what index, a chunked resumable upload door, the safe-harbour mechanism (attest, takedown, flag, ACTIVE = attested and not taken down and under threshold, gate 8/8) and the DMCA-512 class router (NCII 48h, CSAM preserve-and-report, repeat-infringer strikes), membership gating and SFW/NSFW areas by OPAQUE-authenticated level, the gallery (PNG generation metadata, favourites, ratings, tags, BM25, LoRA manifest export, super-resolution, video streaming with keyframe index and seekbar markers), the zero-JS branching VN engine live at /vn with clean URLs, a reader library with position sync and shared/personal tiers, sovereign wasm games as one self-contained page behind the fit guard with bit-exact atomic saves and turn-based multiplayer, comment and forum moderation on-box, the first-party ad slot with self-serve intake and advertiser reports, OPAQUE login as the one wall, atomic CAS publish and the site factory. NOT on the request path yet: the safe-harbour mechanism (the /dist daemon does not call sh_active). ABSENT: WebSeed, upload-time malware and pickle scan, the model acquisition pipeline, follow/notify, user-chosen feeds, an author dashboard, windowed popularity rankings, the Ren'Py script converter and .rpa ingest, the offline bundle link, creator payouts, an ABR ladder. Many live organs are REGISTERED-DARK or PROMOTED-UNREGISTERED (nx_torrent_seed's gate, nx_game_page_emit, nx_games_page, nx_site_build, nx_game_chat, nx_takedown BUILT-UNPROMOTED) -- present in the tree, unreachable from the MCP surface; the adoption ladder on the page says which.

Where we need to go. THE OPERATOR'S ASK (2026-08-24): a /compare on building the estate to emit sites like Civitai, the site Shangri-La Frontier was published on, legal torrent sharing like Hugging Face, game-clip and video sharing like itch and YouTube but better, replacement social sites that do not mine your data, brought-to-you-by advertising, and feelex.fun-class game loading with Ren'Py converted to run natively on Nishi with an offline download link. THE ANSWER: the distribution, legal, gallery, reader, game and ad substrates exist and are measured; what is missing is (1) wiring the safe-harbour onto the live path, (2) the swarm-side and scan-side pieces that make legal sharing cheap and safe, (3) the serial-author surface, (4) the Ren'Py converter that makes native hosting real, (5) the social layer's follow and feed choice, (6) the creator economy. Sovereignty is the standing exceed: index-not-host with peer attestation, own BitTorrent, bit-exact saves, canon-bounded living stories, zero tracking by construction.

The unit. 1 u = one measured session-leg (organ + gate + live flip), the mangagen/comms/video calibration; comms measured about 2x pessimism on organ-class estimates. Estimates below are pre-recalibration and republish as rungs land.
Cost to make the legal posture LIVE: 1 u. SH0 alone: the /dist daemon calls sh_active before serving; an un-attested or taken-down cid is refused. Independent of every other rung and first because a safe-harbour that is not on the request path is a document.
Cost to legal sharing that is cheap and safe: 6.5 u more. SH1 WebSeed + SH2 upload scan + SH3 the acquisition pipeline (debt 1784643034). 7.5 u cumulative = version 0.1: a Hugging-Face-class legal hub whose swarm carries the bandwidth.
Cost to a Syosetu-class serial site: 4 u more. SH4 author dashboard + SH5 windowed rankings + SH6 follow and notify. 11.5 u cumulative.
Cost to native Ren'Py hosting with an offline link: 7 u more. SH8 the .rpy converter (keystone) + SH9 .rpa ingest + SH10 the offline bundle. 18.5 u cumulative = version 1.0: the feelex.fun class served natively, no emulation.
Cost to the social layer and the creator economy: 8 u more. SH7 user-chosen feeds and labelers + SH11 creator payouts + SH12 the ABR ladder (media lane). 26.5 u cumulative = version 2.0 with the sovereign exceeds intact.

Research bar. Syosetu ranking formula (the documented serial-discovery bar) is measured on ranking points = stars times two plus bookmarks times two, over daily, weekly, monthly, quarterly and yearly windows. Theirs: Published formula and windows, read 2026-08-24. Ours: SH5 computes the same class of windowed points over our rating and favourite logs; SH4 gives authors the run of chapters the windows rank [@syosetu-rank].

Research bar. itch.io HTML5 embed limits (the documented browser-game bar) is measured on a ZIP with index.html, at most 1,000 files, 500 MB total, 200 MB per file, embedded or launched fullscreen. Theirs: Documented caps, read 2026-08-24. Ours: Our game page is ONE file emitted from the wasm behind wf_guard; SH10 adds the download link beside it [@itch-html5].

Research bar. Hugging Face upload scanning (the documented safety bar) is measured on every file of every repository run through a malware scanner at each commit, plus a pickle import scan. Theirs: Documented process, read 2026-08-24. Ours: SH2 refuses at the upload door what the sovereign reader cannot prove safe [@hf-malware] [@hf-pickle].

Research bar. Ren'Py web export (the documented in-browser VN bar) is measured on the engine and Python compiled to WebAssembly via Emscripten; no threads, no networking, no Live2D, files over 50 MB not cached, progressive download of assets. Theirs: Documented limits, read 2026-08-24. Ours: SH8 runs the SCRIPT on the sovereign engine instead of shipping the engine, so none of those limits apply and the page stays one self-contained file [@renpy-web].

Research bar. BEP 19 WebSeed (the standard the legal-torrent class relies on) is measured on an HTTP url-list beside the swarm so a torrent with zero peers still completes and verifies. Theirs: Standard, read 2026-08-24. Ours: SH1 makes the hub a web seed for every registered cid [@bep19].

57 of 70 capabilities measured|19 of them measured exceeds|13 open|coverage 814/1000|adoption 31 full / 26 partial

Layer 2 · Roadmap

Do this next — computed by the ranker, never chosen by a seat

Order from nx_compare_rank (nx_dr_ocm: (deficit + cost-of-delay + option + enables) x sponsor x self-sufficiency x momentum / cost). FINISH rows are rungs whose symbol is present but whose organ is short of full adoption: the cheapest closures on this board, listed before any new work. Stamp: # asof=1787883578 domain=sharehub target_version=0.1 rungs=13 done=0 open=13 finish=0 ranker=nx_dr_ocm

#StageRungPriorityDerivation
#10.1Safe-harbour on the live /dist path (SH0) ds_cid_active200v=2 m=1 c=10
#20.1Malware and pickle scan at the upload door (SH2) stl_header_audit200v=3 m=1 c=15
#30.1WebSeed (BEP-19) from the hub (SH1) ts_webseed_serve50v=1 m=1 c=20
#40.1Acquisition pipeline: pull, verify, archive, host, seed (SH3) me_acquire33v=1 m=1 c=30
#5laterRankings by window from reader points (SH5) gr_rank_window600v=6 m=1 c=10
#6laterAuthor dashboard: serialise chapters (SH4) vn_author_publish400v=8 m=1 c=20
#7laterFollow a creator and be notified (SH6) gs_follow300v=3 m=1 c=10
#8laterOffline bundle beside every playable page (SH10) gpe_offline_bundle200v=2 m=1 c=10
#9laterCreator economy on the billing lane (SH11) ab_creator_payout100v=3 m=1 c=30
#10laterUser-chosen feeds and stackable labelers (SH7) forum_feed_custom50v=1 m=1 c=20
#11laterRen'Py script to sovereign bytecode (KEYSTONE) (SH8) nx_vn_from_rpy50v=2 m=1 c=40
#12laterRen'Py archive and image ingest (SH9) vsp_from_rpa50v=1 m=1 c=20
#13laterAdaptive-bitrate ladder for clips (SH12) abr_ladder33v=1 m=1 c=30

Critical path — contract, done-rule, executor, cost

RungCloses withDefinition of done (pre-declared)ExecutorEst.
Safe-harbour on the live /dist path (SH0)ds_cid_activenx_dist_serve composes sh_active before streaming: an attested, not-taken-down, under-threshold cid serves 200 with its bytes; a taken-down cid answers 410 and is not listed; an un-attested cid is never listed; a neg-control proves a forged attestation for a different cid does not unlock it. Not legal advice -- the operator engages counsel on the posture; this rung only puts the mechanism where requests arriveOrgan1 u
WebSeed (BEP-19) from the hub (SH1)
after SH0
ts_webseed_serveThe seeder answers HTTP Range on /dist for a registered cid and the minted magnet carries the url-list; gate: a v1 client with ZERO peers completes the file through the web seed and every piece verifies; a corrupted range is refused by the client's own hash checkOrgan2 u
Malware and pickle scan at the upload door (SH2)stl_header_auditnx_content_put commit refuses a safetensors whose header does not parse or whose tensors overrun the file, and refuses any pickle-bearing container by name; gate plants a malformed header, an overrunning tensor and a pickle stub, and a clean control commitsOrgan1.5 u
Acquisition pipeline: pull, verify, archive, host, seed (SH3)
after SH2
me_acquireThe recipe in debt 1784643034 as one organ: model-version files with SHA256 and downloadUrl, download through the media acquirer, sha verify, registry row, dist publish, seed; gate runs it on one small public model end to end and proves the served cid hashes to the source sha. Sends the API key as a header, never in the URLOrgan3 u
Author dashboard: serialise chapters (SH4)vn_author_publishAn author-facing door behind the wall appends a chapter to a work, re-emits the canonical URLs (/vn//) and the RSS item; gate: two chapters posted in order, both URLs 200 with the right text, the feed carries both, a chapter by another author is refusedOrgan2 u
Rankings by window from reader points (SH5)
after SH4
gr_rank_windowPoints from the rating and favourite logs summed over daily, weekly, monthly, quarterly and yearly windows, emitted as pages the way the quality rank is; gate: a fixture with known timestamps ranks correctly in every window and a work outside a window scores zero thereOrgan1 u
Follow a creator and be notified (SH6)gs_followA follow row per (user, creator) and a notification row on each new cid by a followed creator; gate: a follow produces exactly one notification per new cid and none for an unfollowed creator; unfollow stops itOrgan1 u
User-chosen feeds and stackable labelers (SH7)
after SH6
forum_feed_customA feed is a named RULE the reader picks (newest, most-favourited-this-week, from-people-I-follow, labeled-safe-by-), served without a profile; labelers are signed label rows any reader can subscribe to; gate proves the same reader gets a different feed by changing only the rule, and that no visitor identifier exists in the request pathOrgan2 u
Ren'Py script to sovereign bytecode (KEYSTONE) (SH8)nx_vn_from_rpyA converter from .rpy to the VN engine's ops: label, say (character and narration), scene, show and hide with attributes, menu with choices and jumps, jump and call, with dissolve, simple set and if on integer variables; unsupported statements (Python blocks, screens, ATL) are REFUSED BY NAME rather than dropped. Gate: Ren'Py's own quickstart story converts and its branch-for-branch state hashes equal a hand-authored oracle on the same choices; a script with a Python block refuses naming the lineOrgan4 u
Ren'Py archive and image ingest (SH9)
after SH8
vsp_from_rpaRead archive.rpa and loose PNGs into sovereign sprite sheets with attribute groups derived from the show statements the converter saw; gate: a title's sprites composite bit-exact against the compositor's own reference and a missing image is refused by nameOrgan2 u
Offline bundle beside every playable page (SH10)gpe_offline_bundleEach game and VN page carries a download link to the SAME self-contained page plus the native client named by the emitter; gate: the downloaded bytes are identical to the served page and the link answers 200 on the live edgeOrgan1 u
Creator economy on the billing lane (SH11)ab_creator_payoutPay-what-you-want with a floor, tips, and a creator ledger that pays out on the invoice beat; gate: a purchase above the floor credits the creator's row, a payout row balances the ledger, and a second payout of the same period is refusedOrgan3 u
Adaptive-bitrate ladder for clips (SH12)abr_ladderOwned by the media lane (media.matrix watch): multi-rendition HLS from the sovereign codec; listed so the clips milestone sumsOrgan3 u

Milestones

MilestoneRungsCumulative
M0 · Legal posture live on the request pathSH01 u
M1 · Legal sharing that is cheap and safeSH1,SH2,SH37.5 u
M2 · A Syosetu-class serial siteSH4,SH5,SH611.5 u
M3 · Native Ren'Py hosting with an offline linkSH8,SH9,SH1018.5 u
M4 · Social layer and creator economySH7,SH11,SH1226.5 u
Layer 3 · Engineering
How this is scored. Every Nishi mark is measured: the generator reads the real organ source on disk and requires the implementing symbol to exist (no self-grading). A watching tag names the organ and symbol contracted to close a gap — the mark flips itself on the next compare beat when that workstream ships, and the comparewatch- plane row flips with it. The flip is necessary, not sufficient: it proves the symbol exists, never that the capability is good. The bar is the rung's pre-declared done-rule, proven by its gate — a symbol shipped without the behaviour behind it is a defect, and the flip is exactly what makes that defect visible instead of quiet. Competitor marks record documented capability presence — presence, not depth or scale. Adoption is measured too: every measured row carries where its organ stands on the estate's ladder (source → built → promoted → registered → invoked; libraries by importer reach minus validation importers; gates by the execution surfaces that run them). A row is fully adopted only at the top of its ladder; anything short is tagged partial with the exact remedy, so a build nobody promoted can no longer read as shipped. Census stamps: importers asof 1787849099, gate census asof 1787855507 (unix seconds; -1 = census absent).

Capability matrix — measured against source

leads / measured exceed present partial absent · click any capability for its evidence

CapabilityNishiCivitaiHugging Faceitch.ioSyosetu
PUBLISH
content-addressed publish -- SHA-256 CID streamed over multi-GB, one call mints every transport (magnet + download URL + API row)Measured: dp_content_id exists in runtime/_hdl_build/nx_dist_publish.nx, verified at emit. Civitai publishes SHA256, AutoV2, BLAKE3 and CRC32 hashes per file and looks models up by hash [civitai-api]; Hugging Face keys every large file by its sha256 in the LFS and Xet pointer [hf-xet]; itch.io and Syosetu expose no content hash on the pages read. Ours makes the hash THE address for every transport at once Adoption: LIB-WIRED importers=5 nonval=2 — fully adopted (top of its ladder).
DISTRIB
BitTorrent v2 magnet minted from the CID (urn:btmh)Measured exceed: dp_magnet in runtime/_hdl_build/nx_dist_publish.nx, verified at emit. None of the four distributes over BitTorrent: Civitai's community requested it in 2023 with no staff response [civitai-torrent], Hugging Face's docs carry no torrent path and the bridges are third parties [pirateface]. The legal-torrent class -- the Internet Archive auto-makes a torrent for every item [ia-torrents] -- is the reference, and BEP 52 is the SHA-256 multihash the magnet carries [bep52] Adoption: LIB-WIRED importers=5 nonval=2 — fully adopted (top of its ladder).
originate a .torrent from any file (BEP-3 info-dict, per-piece SHA-1, magnet + seed-index row)Measured exceed: mk_build_info in runtime/nx_torrent_mkinfo.nx, verified at emit. What lets the hub share content that qBittorrent, Transmission or libtorrent can pull and integrity-check; no rival originates torrents. Academic Torrents publishes the same class of artifact for datasets and holds no bytes itself [academictorrents] Adoption: PROMOTED-UNREGISTERED — PARTIAL: a real binary nobody can call over MCP: /api/tools/register it; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked).
adoption PROMOTED-UNREGISTERED
sovereign seeder -- serves verified pieces to real clients, MSE-encrypted peer wire, ip-filter, failure backoffMeasured exceed: ts_accept_loop_registry in runtime/nx_torrent_seed.nx, verified at emit. The upload half of an own BitTorrent stack (the leecher half was proven first); gate-proven by a real loopback leecher pulling verified pieces Adoption: LIVE-DAEMON — fully adopted (top of its ladder).
trackerless DHT -- BEP-5 KRPC ping, get_peers and announce_peerMeasured exceed: dht_build_announce_peer in runtime/nx_dht.nx, verified at emit. Trackerless magnets need a DHT; ours is a sovereign Kademlia message layer. No rival runs peer discovery of any kind Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it.
adoption SOURCE-ONLY
content-addressed HTTP download /dist//, streamed with the correct Content-LengthMeasured: ds_req_cid exists in runtime/nx_dist_serve.nx, verified at emit. Civitai serves a downloadUrl per file [civitai-api], Hugging Face resolves files by revision and path [hf-api], itch.io serves builds and download keys [itch-app]; Syosetu serves text pages, not files. Ours resolves the cid to the file so the URL IS the integrity claim Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.
adoption BUILT-UNPROMOTED
Napster-style discovery index -- who has what, peer announce, search by name, lookup by cidMeasured: di_search_name exists in runtime/_hdl_build/nx_dist_index.nx, verified at emit. All four search their catalogue (Civitai query and tag params [civitai-api], the Hub search param [hf-api], the itch.io browse [itch-browse], the novel API word param [syosetu-api]); only ours records WHICH PEERS hold a cid, which is the index-not-host posture below Adoption: LIB-WIRED importers=5 nonval=2 — fully adopted (top of its ladder).
verified mirror of a published Hugging Face repo -- tree parse, lfs sha256 per shard, fail-closedMeasured: hft_count exists in runtime/_hdl_build/nx_hf_tree_parse.nx, verified at emit. Hugging Face is the source of this shape (LFS oid = sha256, Xet pointer carries the same fields [hf-xet]); ours consumes it sovereignly over own TLS so a model can be pulled, verified and re-seeded here Adoption: LIB-WIRED importers=4 nonval=1 — fully adopted (top of its ladder).
safetensors opened natively -- header and tensor by name, no PythonMeasured: stl_tensor exists in runtime/nx_safetensors_load.nx, verified at emit. safetensors is the format Hugging Face recommends over pickle [hf-pickle] and Civitai serves; ours reads it from the bits up for the generation and LoRA lanes Adoption: LIB-WIRED importers=6 nonval=5 — fully adopted (top of its ladder).
UPLOAD
chunked resumable upload door -- per-chunk sha256, resume map, commit compare-and-swapMeasured: v_commit exists in runtime/nx_content_put.nx, verified at emit. Civitai takes model files (files, sizeKB, hashes per version [civitai-api]), Hugging Face uploads through Xet chunk dedup [hf-xet], itch.io takes a ZIP with an index.html up to 500 MB [itch-html5]; Syosetu takes chapter text. Ours refuses a commit whose bytes do not hash to the declared sha Adoption: REGISTERED-DARK — PARTIAL: callable, authorised, no MCP invocation on record (a direct fork logs the runner, so this is not proof it never ran); no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked); only referenced by nx_content_put_gate -- a mention, not a run.
adoption REGISTERED-DARK
WATCH DISTRIB
WebSeed (BEP-19) so a plain HTTP fetch joins the swarm and browsers share the bandwidthOpen — watching runtime/nx_torrent_seed.nx : ts_webseed_serve, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. BEP 19 puts an HTTP url-list beside the swarm so a torrent with zero peers still completes [bep19] -- what the Internet Archive [ia-torrents] and the Hugging Face torrent bridges [pirateface] rely on, and PeerTube's peer-to-peer playback is the same cost-shift for video [peertube]. None of the four columns does it. Contract = the seeder answers HTTP Range for a registered cid so any swarm can use the hub as a web seed
watching ts_webseed_serve
MODELHUB
identify any model file at ingest -- container (gguf or safetensors), family, roleMeasured: mi_has exists in runtime/nx_gen_modelid.nx, verified at emit. Civitai carries a baseModel field the uploader declares [civitai-api]; Hugging Face derives library, pipeline and base_model relations from the model card [hf-cards]; ours reads the container and decides Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.
adoption BUILT-UNPROMOTED
LoRA fold applied sovereignly (kohya and peft key schemes), verified against an exact referenceMeasured: nx_lora_fold exists in runtime/nx_genlora.nx, verified at emit. Civitai applies LoRAs in its on-site generator and trains them for Buzz [civitai-buzz]; Hugging Face hosts adapters as a declared base_model relation [hf-cards] but running them is the user's stack; ours folds the adapter into the base weight and proves the fold against an exact reference Adoption: LIB-WIRED importers=2 nonval=2 — fully adopted (top of its ladder).
license and shippability verdict over the whole generation chain -- SHIP_OK, REVIEW or REFUSE, verbatim table rowsMeasured: lg_verdict exists in runtime/nx_licgate_lib.nx, verified at emit. Civitai licenses models under bespoke terms generated on the service [civitai-tos]; Hugging Face carries a license identifier in every card and gates on it [hf-licenses]; no licence field was witnessed on the itch.io creator docs read, none on Syosetu. Ours is a machine verdict over EVERY model in the chain and REVIEW is a human decision left unmade, not a pass Adoption: LIB-WIRED importers=2 nonval=2 — fully adopted (top of its ladder).
on-site generation -- one request envelope dispatches every generator kind (world, tree, creature, figure, face)Measured: nx_gen exists in runtime/nx_gen.nx, verified at emit. Civitai's on-site generation, paid per step in Buzz, is the reference loop [civitai-buzz]; Hugging Face runs apps as Spaces [hf-index]; the estate's image lane is live on /gallery and this front door unifies the procedural generators behind one envelope Adoption: LIVE — fully adopted (top of its ladder).
image gallery with generation metadata read from the PNG (prompt), favourites, ratings, tags, soft-hideMeasured: gs_meta exists in runtime/_hdl_build/nx_gallery_serve.nx, verified at emit. Civitai's image feed is filtered by browsing level and served by API [civitai-api]; its per-image generation data fields were not witnessed on the pages read, so it is graded present rather than Best. Hugging Face and Syosetu have no image gallery; itch.io screenshots were not witnessed on the docs read Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.
adoption BUILT-UNPROMOTED
BM25 search and as-you-type suggest over the galleryMeasured: gs_bm25_emit exists in runtime/_hdl_build/nx_gallery_serve.nx, verified at emit. Table stakes everywhere (query on Civitai [civitai-api], search on the Hub [hf-api], the itch.io browse [itch-browse], word on Syosetu [syosetu-api]); ours is an integer BM25 over a durable inverted index with prefix suggest Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.
adoption BUILT-UNPROMOTED
favourites become a LoRA training manifest -- the hub feeds trainingMeasured: le_prompt exists in runtime/nx_galx_lora_export.nx, verified at emit. Civitai trains LoRAs on-site for Buzz [civitai-buzz]; no training surface was witnessed on the Hugging Face pages read. Ours exports image plus caption rows from the favourite flag set so a training lane consumes the curated set Adoption: LIVE — fully adopted (top of its ladder).
full-population score-and-rank of generated assets on a sovereign planeMeasured: do_rank exists in runtime/_hdl_build/nx_gen_rank.nx, verified at emit. Syosetu's ranking pages are the Best of the four -- points = stars times two plus bookmarks times two over daily, weekly, monthly, quarterly and yearly windows [syosetu-rank]; Civitai sorts by period [civitai-api], the Hub by sort and direction [hf-api], itch.io by popularity [itch-browse]. Ours ranks by a measured quality score over the WHOLE population -- the windowed popularity ranking is a watch row below Adoption: LIVE — fully adopted (top of its ladder).
WATCH MODELHUB: malware and pickle scan at upload -- safetensors header audit, pickle refusalOpen — watching runtime/nx_safetensors_load.nx : stl_header_audit, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. Hugging Face runs every file through a malware scanner at each commit [hf-malware] and extracts the import list of every pickle [hf-pickle]; Civitai's file objects carry pickleScanResult and virusScanResult per file [civitai-api]. The sovereign reader already parses the header; the contract is refusing what it cannot prove safe at the upload door
watching stl_header_audit
WATCH MODELHUB: acquisition pipeline -- pull a Civitai or Hugging Face model, verify, archive, host and seed itOpen — watching runtime/nx_model_enumerate.nx : me_acquire, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. Debt 1784643034 names the proven recipe (model-version API to files with SHA256 and downloadUrl [civitai-api], download through the media acquirer, verify, registry row, seed); the enumerate stage exists, the pipeline does not. Not a rival capability -- it is how this hub fills itself
watching me_acquire
LEGAL
DMCA-512 notice validation and class-routed action -- copyright, NCII 48-hour removal, CSAM preserve-and-report, never a silent deleteMeasured: td_action exists in runtime/nx_takedown.nx, verified at emit. Civitai's terms state compliance with 17 USC 512 [civitai-tos]; the equivalent terms of the other three were not read for this register, so they are graded not-witnessed rather than absent. Ours encodes the SHAPE of the regime so a machine routes and a human answers, and it refuses an incomplete notice rather than acting on it. Not legal advice Adoption: LIB-WIRED importers=2 nonval=1 — fully adopted (top of its ladder).
repeat-infringer policy -- strikes become actionMeasured: td_repeat_action exists in runtime/nx_takedown.nx, verified at emit. Civitai's terms carry repeat-infringer termination [civitai-tos]; not witnessed for the other three. Ours derives it from strikes so it can be gated Adoption: LIB-WIRED importers=2 nonval=1 — fully adopted (top of its ladder).
uploader attestation names the responsible peer; a cid is ACTIVE only if attested AND not taken down AND flags below threshold -- no hub curationMeasured exceed: sh_active in runtime/_hdl_build/nx_sh_safeharbor.nx, verified at emit. Three append-only logs keyed by cid (attestations, takedowns, flags). Civitai reserves the right to screen, remove or block any user content without notice [civitai-tos] and feelex.fun publishes only after its team reviews a submission [feelex-games] -- the editorial posture that manufactures actual knowledge; ours shifts responsibility to the peer and honours notices. Gate-proven 8/8. Not legal advice Adoption: LIB-GATE-ONLY importers=1 — PARTIAL: imported only by validation organs (gates, tests, benches): wire it into a shipping program.
adoption LIB-GATE-ONLY importers=1
index-not-host -- the hub carries cid, magnet and peer announces; peers hold the bytesMeasured exceed: di_announce in runtime/_hdl_build/nx_dist_index.nx, verified at emit. All four HOST user content; Academic Torrents is the working precedent for an index that holds no data [academictorrents]. The sovereign posture is the Napster lesson inverted -- an index of what exists and who has it, with the swarm bearing storage and bandwidth Adoption: LIB-WIRED importers=5 nonval=2 — fully adopted (top of its ladder).
WATCH LEGAL
the live /dist path refuses an un-attested or taken-down cidOpen — watching runtime/nx_dist_serve.nx : ds_cid_active, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. The mechanism exists (sh_active) and the serve path does not call it yet -- the first rung of the plan, because a safe-harbour that is not on the request path is a document. Civitai's takedown is wired to what it serves [civitai-tos]; the other three were not read
watching ds_cid_active
LEGAL
membership-gated privacy web -- granted level must reach the area's required level, deny-by-default, owner clears exclusive areasMeasured: ag_allow exists in runtime/_hdl_build/nx_access_lib.nx, verified at emit. Hugging Face gates repos behind accepted terms and contact details [hf-gated]; Civitai runs one account across a SFW front door and a NSFW front door with an 18-plus confirmation [civitai-doors] [civitai-levels]; Syosetu's adult sibling sites carry an age wall [syosetu-r18]; itch.io is public. Ours is invite-and-login for the whole hub -- not the clear public web, not the dark web Adoption: LIB-WIRED importers=4 nonval=3 — fully adopted (top of its ladder).
SFW and NSFW destination areas by viewer level (family vs owner), fail-closedMeasured: nx_taccess_allow exists in runtime/nx_torrent_access.nx, verified at emit. Civitai's five content levels from PG to XXX, locked at PG until 18-plus is confirmed, are the Best [civitai-levels]; Hugging Face flags not-for-all-audiences in the card [hf-cards]; Syosetu moves adult works to sibling sites [syosetu-r18]; an adult flag was not witnessed on the itch.io docs read. Ours binds the area to the OPAQUE-authenticated level before any byte is written or served Adoption: LIB-WIRED importers=4 nonval=2 — fully adopted (top of its ladder).
comment spam scored on-box with an exact moderation state machine -- no cloud anti-spamMeasured: cmt_score exists in runtime/_hdl_build/nx_cms_comments.nx, verified at emit. Civitai counts comments per model [civitai-api], Hugging Face runs discussions on every repo [hf-discussions], Syosetu counts impressions per work [syosetu-api]; itch.io comments were not witnessed on the docs read. The sovereign twist is that a comment never leaves the machine to be scored Adoption: LIB-WIRED importers=4 nonval=2 — fully adopted (top of its ladder).
SOCIAL
threaded forum composed on the same moderation engine -- locked threads, pinned plus activity rankMeasured: forum_post_reply exists in runtime/_hdl_build/nx_cms_forum.nx, verified at emit. Hugging Face has a discussions tab per repo [hf-discussions]; itch.io's devlogs are a site-wide post feed rather than a forum [itch-devlogs]; no forum was witnessed for Civitai or Syosetu on the pages read. The bbPress class, made DRY Adoption: LIB-GATE-ONLY importers=1 — PARTIAL: imported only by validation organs (gates, tests, benches): wire it into a shipping program.
adoption LIB-GATE-ONLY importers=1
reactions, ratings and favourites on contentMeasured: gs_rate exists in runtime/_hdl_build/nx_gallery_serve.nx, verified at emit. Civitai counts thumbs up and down per model [civitai-api]; itch.io rates jam entries on five stars [itch-jams]; Syosetu's stars and bookmarks are the ranking input [syosetu-rank]; Hub likes were not witnessed on the docs read. Ours records a rating per cid and a favourite flag that feeds training Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.
adoption BUILT-UNPROMOTED
polls with honest counting -- one engine bound by the verifying gate and the live community pageMeasured: pl_vote exists in runtime/_hdl_build/nx_connect_polls_lib.nx, verified at emit. No poll surface was witnessed on any of the four; the CONNECT lane's engine is what a community page here composes Adoption: LIB-WIRED importers=3 nonval=3 — fully adopted (top of its ladder).
RSS 2.0 feed builder -- follow without an account, nothing trackedMeasured: rss_item exists in runtime/rss.nx, verified at emit. No feed link was witnessed on the four sites' pages read; Lemmy publishes RSS and Atom for everything [lemmy]. Ours emits valid RSS 2.0 for any listing so a reader follows the hub without an account Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it.
adoption SOURCE-ONLY
zero visitor tracking by construction -- no cookie, no visitor id, per-ad counters only, time-based rotationMeasured exceed: aslot_html in runtime/_hdl_build/nx_adnet_slot.nx, verified at emit. The operator's brief for a social layer that does not mine you. Civitai pays Blue Buzz per ad impression scrolled [civitai-buzz]; Bluesky's own policy lists IP addresses and cookie identifiers among what it collects [bsky-privacy]; the fediverse (Lemmy) is the class that states no tracking and no advertising [lemmy]. No rival documents a no-cookie no-visitor-id path; ours REFUSES per-user frequency state in the ad path Adoption: LIB-WIRED importers=14 nonval=13 — fully adopted (top of its ladder).
WATCH SOCIAL
portable identity, user-chosen feeds and composable labelers (AT-Protocol class)Open — watching runtime/_hdl_build/nx_cms_forum.nx : forum_feed_custom, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. The Bluesky model of a Reddit replacement -- anyone can create a feed and the reader pins the ones they want [bsky-feeds], and moderation is a labeler service you stack [bsky-labels]; Lemmy federates communities instead [lemmy]. None of the four columns does either; the contract is a feed ranked by a rule the reader picked, served without a profile
watching forum_feed_custom
follow a creator and be notified of new contentOpen — watching runtime/_hdl_build/nx_gallery_serve.nx : gs_follow, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. Civitai lists favourites per user [civitai-api] and Syosetu bookmarks count toward the ranking [syosetu-rank]; not witnessed on the Hub or itch.io docs read. Absent here, and cheap once the rating log exists
watching gs_follow
NOVELS
branching story engine -- bytecode ops (say, choice, set, add, ifgoto, jump, end) with a deterministic state hashMeasured: nx_vn_choose exists in runtime/nx_visual_novel.nx, verified at emit. itch.io embeds any HTML5 build, which is how Ren'Py and Twine novels are hosted there [itch-html5]; no rival authors or runs a story engine. Ours is the bits-up engine the Ren'Py conversion rung targets Adoption: LIB-GATE-ONLY importers=1 — PARTIAL: imported only by validation organs (gates, tests, benches): wire it into a shipping program.
adoption LIB-GATE-ONLY importers=1
every work at its own clean canonical URL (/vn, /vn/1, /vn/2), zero-JS branching via CSS target selectorsMeasured: vn_emit_html exists in runtime/_hdl_build/nx_vn.nx, verified at emit. Syosetu's per-work code with episodes paginated a hundred to a page is the Best of the class -- Shangri-La Frontier is n6169dz, serialised since 2017 [syosetu-slf]; Civitai, the Hub and itch.io give each work a page. Ours plays a whole branching story with no script at all, live at nishifamily.com/vn Adoption: LIB-WIRED importers=2 nonval=2 — fully adopted (top of its ladder).
living interactions that cannot break canon -- a provider line is accepted only if it carries the required fact and lacks the forbidden string, else the authored fallbackMeasured exceed: vl_ok in runtime/_hdl_build/nx_vn_living.nx, verified at emit. The limit that lets a story feel alive under any provider (a template today, a sovereign LLM later) while the plot stays on rails; no platform offers this Adoption: LIB-GATE-ONLY importers=1 — PARTIAL: imported only by validation organs (gates, tests, benches): wire it into a shipping program.
adoption LIB-GATE-ONLY importers=1
reader library with per-user position sync and annotations (Whispersync-class) behind the wallMeasured: sy_handle_pos_put exists in runtime/_hdl_build/nx_reader_sync.nx, verified at emit. Syosetu's bookmark is a per-work favourite that feeds the ranking [syosetu-rank]; a reading position was not witnessed on the pages read, and none of the others read for you. Ours records the last chapter opened at zero client cost and syncs an explicit position and annotations per user Adoption: LIB-WIRED importers=1 nonval=1 — fully adopted (top of its ladder).
shared and personal library tiers -- promote a personal work into the family shelfMeasured: rl_promote_to_shared exists in runtime/_hdl_build/nx_reader_library.nx, verified at emit. Hugging Face's access-controlled repos are the nearest [hf-gated]; Syosetu and Civitai have one public catalogue; itch.io collections were mentioned only on its app page [itch-app]. Ours keys the personal area to the authenticated user, never a client claim Adoption: LIB-WIRED importers=6 nonval=4 — fully adopted (top of its ladder).
BM25 multi-term ranked search over the shelf indexMeasured: bks_search exists in runtime/_hdl_build/nx_book_search_lib.nx, verified at emit. Everyone searches (see the discovery row); ours is one proven ranking core shared by the library daemon and its gate Adoption: LIB-WIRED importers=1 nonval=1 — fully adopted (top of its ladder).
push a book into an LLM natively -- token-budgeted packingMeasured exceed: ms_handle_llmpack in runtime/_hdl_build/nx_media_server.nx, verified at emit. No platform packs a work into a model context; ours does it on the reader's own hardware Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it.
adoption SOURCE-ONLY
source browser -- search, browse and feed OTHER chapter sources and pull a series into a private shelfMeasured exceed: msearch_mangadex in runtime/_hdl_build/nx_manga_search.nx, verified at emit. The Mihon or media-manager model: none of the four aggregates other sources -- each IS a source. Ours is a reader that reaches sources, which is what a consumption hub for generated media needs Adoption: LIB-WIRED importers=2 nonval=1 — fully adopted (top of its ladder).
public JSON API for listings and worksMeasured: gs_api_list exists in runtime/_hdl_build/nx_gallery_serve.nx, verified at emit. The Hub API (an OpenAPI spec at a well-known path) [hf-api] and Syosetu's novel API with every ranking point as a field [syosetu-api] are the Best of the class; Civitai publishes a REST API [civitai-api]; an itch.io API was not witnessed on the docs read. Ours is the gallery's list API; a works API for the reader is part of the author-dashboard rung Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.
adoption BUILT-UNPROMOTED
WATCH NOVELS
author dashboard -- serialise chapters, edit, schedule, see stats (Syosetu and Kakuyomu class)Open — watching runtime/_hdl_build/nx_vn_site.nx : vn_author_publish, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. The surface Shangri-La Frontier was written on: an author posts episode after episode and readers follow the run [syosetu-slf]; itch.io's devlogs serialise posts against a project [itch-devlogs]. Ours emits works from data today; the contract is the author-facing door that appends a chapter and republishes the canonical URLs
watching vn_author_publish
rankings by window -- daily, weekly, monthly, quarterly, yearly -- from reader pointsOpen — watching runtime/_hdl_build/nx_gen_rank.nx : gr_rank_window, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. Syosetu's windowed rankings, with the formula published, are how a serial is discovered [syosetu-rank]; Civitai sorts by period [civitai-api], the Hub and itch.io by popularity [hf-api] [itch-browse]. Ours ranks by measured quality over the whole population and has no popularity window yet
watching gr_rank_window
GAMES
browser-playable sovereign wasm game packaged as ONE self-contained page -- base64 wasm, shim, input forwarding, persistence bytes-moverMeasured: gpe_build_s exists in runtime/nx_game_page_emit.nx, verified at emit. itch.io embeds an HTML5 ZIP (index.html, up to 1,000 files and 500 MB) in the page or launches it fullscreen and is the Best of the class [itch-html5]; Hugging Face Spaces run web apps [hf-index]; the feelex.fun class plays Ren'Py, HTML and Ruffle titles in the browser [feelex-games]. Ours emits the page from the wasm, so there is nothing to upload and nothing fetched from a CDN Adoption: REGISTERED-DARK — PARTIAL: callable, authorised, no MCP invocation on record (a direct fork logs the runner, so this is not proof it never ran); no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked).
adoption REGISTERED-DARK
memory-fit guard before any game page ships -- framebuffer versus the module's declared linear memoryMeasured exceed: wf_guard in runtime/nx_wasmfit.nx, verified at emit. /craft shipped black twice before this ruler existed; a store that hosts a ZIP has no such guard Adoption: LIB-WIRED importers=22 nonval=22 — fully adopted (top of its ladder).
games portal emitted from data with honest states -- Playable, Engine demo, Not started -- and WCAG 2.1 reflow at 320pxMeasured: GM_OUT exists in runtime/nx_games_page.nx, verified at emit. itch.io's browse with its filters and sorts is the Best [itch-browse]; ours is one emitter owning both /games and the world demos so two portals cannot drift apart again Adoption: REGISTERED-DARK — PARTIAL: callable, authorised, no MCP invocation on record (a direct fork logs the runner, so this is not proof it never ran); no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked).
adoption REGISTERED-DARK
bit-exact save and load -- atomic write, checksum refuses corruption, future version refused, previous bytes bankedMeasured exceed: gs_save in runtime/_hdl_build/nx_gamesave.nx, verified at emit. The gamebench ruler ranked persistence the number-one missing part; a browser game on itch.io keeps its saves in local storage, which the platform itself warns is lost when its game domain changes [itch-html5] Adoption: LIB-WIRED importers=28 nonval=8 — fully adopted (top of its ladder).
rollback and snapshot ring (GGPO-class) -- the Ren'Py save-anywhere and rollback substrateMeasured: nx_snapshot_ring_save exists in runtime/nx_sim_snapshot.nx, verified at emit. A Ren'Py web build hosted on itch.io carries the engine's own rollback inside the wasm [renpy-web]; ours is the engine-level ring any converted novel inherits Adoption: SOURCE-ONLY — PARTIAL: source exists, never compiled: /api/build it.
adoption SOURCE-ONLY
VN sprite compositor at the Ren'Py layeredimage bar -- attribute groups exclusive, exact alpha and key, dissolve, save round-tripMeasured: vsp_setg exists in runtime/_hdl_build/nx_vnsprite.nx, verified at emit. The researched reference bar is Ren'Py's layeredimage (show sylvie green smile is the quickstart's own idiom [renpy-quick]); ours passes its ten-tooth gate, and it is the target of the .rpa ingest rung Adoption: LIB-GATE-ONLY importers=1 — PARTIAL: imported only by validation organs (gates, tests, benches): wire it into a shipping program.
adoption LIB-GATE-ONLY importers=1
turn-based multiplayer and chat over the sovereign store, replay-verified move orderMeasured exceed: gc_room_wire in runtime/nx_game_chat.nx, verified at emit. No rooms were witnessed on any of the four; ours opens a room per session and the gate replays the game's own rules as referee Adoption: REGISTERED-DARK — PARTIAL: callable, authorised, no MCP invocation on record (a direct fork logs the runner, so this is not proof it never ran); no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked).
adoption REGISTERED-DARK
WATCH GAMES
Ren'Py .rpy script to sovereign VN bytecode -- label, menu, say, show, scene, jump -- served natively, no emscripten, no pygameOpen — watching runtime/nx_visual_novel.nx : nx_vn_from_rpy, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. The feelex.fun class loads a title's browser build [feelex-games] and Ren'Py's own web export compiles Python and the engine to wasm, with no threads, no networking and files over 50 MB uncached [renpy-web]; neither converts. The script language is small (label, say, scene, show, menu, jump, with [renpy-quick]) and the engine is MIT with LGPL obligations attaching to its binaries, not to reading a script [renpy-license]. The contract is a converter from that script into our bytecode so a Ren'Py novel runs on the sovereign engine here -- the operator's no-emulation ask
watching nx_vn_from_rpy
Ren'Py archive (.rpa) and image assets ingested to sovereign sprite sheets and backgroundsOpen — watching runtime/_hdl_build/nx_vnsprite.nx : vsp_from_rpa, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. A Ren'Py build packs everything classified as archive into archive.rpa [renpy-build]; the other half of running a title natively is that its images arrive as the layered sprites the compositor already understands
watching vsp_from_rpa
offline download bundle beside every playable page -- the same self-contained page plus the native clientOpen — watching runtime/nx_game_page_emit.nx : gpe_offline_bundle, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. itch.io sells downloadable builds and its app syncs browser games for offline play [itch-app]; feelex.fun offers full versions for desktop and mobile beside the browser play [feelex-games]. Ours already emits a self-contained page and names a native client; the contract is the download link and bundle so a player who does not want the Nishi browser plays offline
watching gpe_offline_bundle
creator economy -- pay-what-you-want, tips, payouts, revenue shareOpen — watching runtime/_hdl_build/nx_adnet_bill.nx : ab_creator_payout, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. itch.io's pay-what-you-want with a creator-set platform share (default ten percent) is the Best [itch-pricing]; Civitai pays creators through banked Buzz with a score threshold and a fifty-dollar minimum withdrawal [civitai-creator]. The sovereign billing lane bills advertisers today; the contract extends it to creator payouts
watching ab_creator_payout
CLIPS
video streaming -- HTTP Range, fly-remux TS to fMP4, MSE segments with a keyframe index for accurate seekMeasured: gs_vid_stream exists in runtime/_hdl_build/nx_gallery_serve.nx, verified at emit. Civitai serves a videos section [civitai-home]; the YouTube and PeerTube class re-encodes every upload to a ladder [yt-encoding] [peertube] (the watch row below); video hosting was not witnessed on the Hub or itch.io docs read. Ours streams the original and remuxes on the fly Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.
adoption BUILT-UNPROMOTED
derivation on ingest -- thumbnails plus keyframe index in one idempotent pass, auto-fired per torrentMeasured: mp_run exists in runtime/nx_media_ingest_pipeline.nx, verified at emit. The video-host class derives on upload (PeerTube transcodes on its own runners [peertube]); none of the four columns documents it. Ours composes the existing organs into one resumable pass so new media never lands without a poster and a seek index Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.
adoption BUILT-UNPROMOTED
dead-air, motion, scene and rhythm markers on the seekbar from the demux signalMeasured exceed: ts_classify in runtime/nx_ts_marks.nx, verified at emit. No platform marks a clip's dead air or motion for the viewer; ours does it without decoding, so it works on any stream Adoption: LIB-WIRED importers=5 nonval=3 — fully adopted (top of its ladder).
on-demand 2x super-resolution per assetMeasured exceed: gs_upscale in runtime/_hdl_build/nx_gallery_serve.nx, verified at emit. No rival upscales a hosted asset on request Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.
adoption BUILT-UNPROMOTED
WATCH CLIPS
adaptive-bitrate ladder (HLS or DASH) for clipsOpen — watching runtime/nx_media_abr.nx : abr_ladder, re-measured on every compare beat. Ship that symbol and this mark flips itself; the comparewatch- plane row flips with it. The YouTube bar publishes a bitrate per rung from 360p to 8K [yt-encoding] and PeerTube serves HLS with peer-to-peer [peertube]; none of the four columns transcodes to a ladder. Owned by the media lane; listed here because a clips site needs it
watching abr_ladder
ADS
first-party brought-to-you-by banner -- one labeled slot per page, zero third-party JavaScript, section-contextual, first-party click redirectMeasured: aslot_click_resp exists in runtime/_hdl_build/nx_adnet_slot.nx, verified at emit. Civitai serves ads and rewards the scroll in Blue Buzz [civitai-buzz]; no advertising was witnessed on the Hub, itch.io or Syosetu pages read. Ours is the 4chan-style self-run banner that offsets hosting cost without a tracker Adoption: LIB-WIRED importers=14 nonval=13 — fully adopted (top of its ladder).
self-serve advertiser intake validated fail-closed, staged-not-live until the operator approvesMeasured: ass_submit exists in runtime/_hdl_build/nx_adnet_selfserve.nx, verified at emit. No self-serve advertiser door was witnessed on any of the four. Ours validates the row with the same rules the serving slot enforces and never serves a submission automatically Adoption: LIB-WIRED importers=2 nonval=1 — fully adopted (top of its ladder).
per-advertiser delivery report -- served and viewable side by side, tenant-isolatedMeasured: adr_run exists in runtime/_hdl_build/nx_adnet_advreport.nx, verified at emit. What the /advertise page promises; a rival's advertiser sees its ad network's report instead. Not an exceed claim -- a different party does it for them Adoption: REGISTERED-UNAUTHORISED — PARTIAL: registered, no cap ever minted; no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked).
adoption REGISTERED-UNAUTHORISED
SOVEREIGN
OPAQUE (RFC 9807) login -- the one access wall every site composes, session by header, no cookiesMeasured exceed: nx_sa_validate in runtime/_hdl_build/nx_site_auth.nx, verified at emit. No plaintext credential at rest anywhere on the hub; every rival runs password-or-OAuth with cookies Adoption: LIB-WIRED importers=6 nonval=4 — fully adopted (top of its ladder).
gated front gateway injects the viewer LEVEL from the validated session and drops a client-supplied levelMeasured exceed: tg_gate_decision in runtime/_hdl_build/nx_torrent_gateway.nx, verified at emit. The level is authoritative from the session, never from the request; the daemon binds localhost behind it Adoption: BUILT-UNPROMOTED — PARTIAL: compiled, never promoted to the serving root: /api/promote it.
adoption BUILT-UNPROMOTED
all-or-nothing publish under compare-and-swap with the previous bytes banked, and a read half that adjudicates ambiguous writesMeasured exceed: ap_landed in runtime/_hdl_build/nx_atomic_publish.nx, verified at emit. A hub page can never half-land; the estate's never-lose publish primitive Adoption: LIVE — fully adopted (top of its ladder).
site factory -- one blueprint emits a multi-page site with shared nav, internal links, sitemap and robotsMeasured exceed: sb_build_site in runtime/_hdl_build/nx_site_build.nx, verified at emit. The capability this whole domain rests on: the estate EMITS sites from data rather than hosting a product someone else built. No rival is an emitter of sites Adoption: REGISTERED-DARK — PARTIAL: callable, authorised, no MCP invocation on record (a direct fork logs the runner, so this is not proof it never ran); no execution surface runs it either (clock, cron, daemon, roster, actlog and surfaced forks checked).
adoption REGISTERED-DARK

Debt register

IdSevWhat it isUnblock
model-acquisitionnot in this scope6OPEN 1784643034: nx_model_get, the Civitai and Hugging Face acquire-archive-host-seed pipeline, filed with the proven recipe and never built.SH3 is that row; the debt closes when the rung's gate is green.
vn-corpus-residualnot in this scope4OPEN 1785359314: the game catalog still has zero visual-novel genre rows, so the gamebench ruler cannot rank VN demand against real references.SH8's gate ingests Ren'Py's own quickstart as the first reference title; the corpus row is the second half of that rung's evidence.
safeharbour-unwirednot in this scope7The safe-harbour mechanism (nx_sh_safeharbor, gate 8/8 since 2026-07-02) is not called by nx_dist_serve or nx_dist_index -- the hub's legal posture is a library nothing on the request path composes.SH0 is the fix and it is first.

Risk register

RiskLikelihood x impactMitigation
A watch contract flips on symbol existence, so a stub reads greenpossible x highThe done-rule proven by a gate is the bar; the flip is the receipt. Every rung above names its measured proof.
The legal posture is architecture, not advicelikely x highEvery legal row says NOT LEGAL ADVICE; the operator engages an attorney for the USA and Texas posture before relying on it, and nothing here is a substitute for that.
The Ren'Py converter grows into a Python interpreterlikely x mediumSH8 refuses unsupported statements by name and its scope is the script language's declarative core; Python blocks, screens and ATL are out of scope and stay out until a rung names them.
Deploying the /dist and torrent daemons on a saturated boxpossible x highSH0 and SH1 change serving daemons: deploy through the health-checked /api/deploy with the pre-change binary banked by hash, never on a loaded box (rule 26 and the front-door lesson).
On these two registers. Rows are declared in the domain's plan file and carry the debt id, which is the join key back to the sovereign debt plane — that plane, not this page, is the authority on state. Reconciling them automatically (the regen reading the plane and refreshing these rows) is a named, owed rung; until it lands, treat an id here as a pointer to look up, not a status to trust.
Honest verdict. The estate can already EMIT most of what these four sites ARE, and the parts it lacks are ranked and contracted in the plan rather than hand-waved. LIVE and measured: a content-addressed publish that mints a SHA-256 CID, a BitTorrent v2 magnet [@bep52], a /dist download URL and an API row in one call; a sovereign BitTorrent seeder, .torrent originator and DHT so the hub can share content that any mainstream client pulls and verifies -- which none of the four does (Civitai's own community asked for torrents in 2023 and got no staff answer [@civitai-torrent]; Hugging Face has no native torrent path, the bridges are third parties riding BEP-19 webseeds [@pirateface]); a Napster-style who-has-what index; a chunked resumable upload door; the legal spine (DMCA-512 class-routed takedown with the NCII 48-hour and CSAM preserve-and-report branches, repeat-infringer strikes, uploader attestation that makes a cid ACTIVE only when attested, not taken down and under the flag threshold -- no hub curation, where Civitai reserves the right to screen and remove any user content [@civitai-tos]); the gallery (generation metadata read from the PNG, favourites, ratings, tags, BM25 search, LoRA-manifest export, 2x super-resolution, video streaming with a keyframe index and seekbar markers); a zero-JS branching visual-novel engine live at /vn with clean canonical URLs; a reader library with per-user position sync and shared and personal tiers; sovereign wasm games packaged as ONE self-contained page behind a memory-fit guard, with bit-exact atomic saves and turn-based multiplayer; comment and forum moderation scored on-box; a first-party brought-to-you-by ad slot with no cookie, no visitor id and no third-party JavaScript; and OPAQUE login as the one access wall. Where the four rivals lead, measured on their pages: Civitai's on-site generation, training and creator economy paid in Buzz [@civitai-buzz] and its five-level content rating [@civitai-levels]; Hugging Face's upload-time malware and pickle scanning [@hf-malware] and chunk-deduplicated Xet storage [@hf-xet]; itch.io's creator store -- browser-embedded HTML5 games [@itch-html5], pay-what-you-want with a creator-set share [@itch-pricing], an app that syncs browser games for offline play [@itch-app]; and Syosetu's serial surface -- the site Shangri-La Frontier has run on since 2017 [@syosetu-slf], with windowed rankings computed from stars and bookmarks [@syosetu-rank] and a public novel API [@syosetu-api]. THE RANKED GAPS (sharehub.plan): (1) put the safe-harbour mechanism ON the live /dist path so an un-attested or taken-down cid is refused, (2) WebSeed [@bep19] so browsers join the swarm and viewers carry the bandwidth the way PeerTube's viewers do [@peertube], (3) upload-time malware and pickle scanning, (4) the Ren'Py .rpy-to-sovereign-bytecode converter and .rpa asset ingest so a visual novel runs NATIVELY here with an offline bundle beside it -- the feelex.fun class (Ren'Py, HTML and Ruffle titles played in the browser or downloaded [@feelex-games]) without shipping the whole engine as wasm the way Ren'Py's own web export does [@renpy-web], (5) the author dashboard and windowed rankings that make a Syosetu-class serial site, (6) follow and notify plus user-chosen feeds and stackable moderation for a social layer that mines nothing [@bsky-feeds], (7) the creator economy. What no rival has: index-not-host with peer attestation, own BitTorrent end to end, bit-exact deterministic saves, canon-bounded living interactions, and a whole stack on family hardware with zero third-party code in the product path.

Person · product · place — the same ruler on our live surface and on theirs

Measured on both sides, from the bytes a first visitor receives. nx_ppp_probe fetched every surface below over the sovereign TLS stack and scored three axes by declared rules, each a count against a published Aug-2026 bar. Person (privacy + CX): third-party asset/script hosts, the tracker classes The Markup's Blacklight tests for, consent-banner markers, Set-Cookie on the first consent-less response (the CNIL bar), the OWASP secure headers. Product (design + longevity): design-system hygiene (/12), computed WCAG 2.2 contrast over the page's real colour tokens, the static Core-Web-Vitals predictors (render-blocking css/js, unsized media — the source-visible causes of poor LCP/CLS), script count, dark-mode and reduced-motion queries, canonical URL. Place (findability + task): nav/main/footer landmarks, a skip link, on-site search, breadcrumb, exactly one h1, internal links, lang, viewport, title. Envelope: static HTML plus response headers, no render, no script execution — a client-rendered app is graded on what a no-JS first visitor receives, which is the progressive-enhancement bar itself. unobs = the probe could not see that sub-measure and scored it zero rather than acquit. Stamp: # asof=1787667574 domain=sharehub surfaces=7 probed=6 ruler=nx_ppp_probe
SurfacePersonProductPlace3p script hoststrackersset-cookiesec hdr /5design /12contrast failsblocking css+jsunsized imgscriptsKBnav main skip search crumb
Nishi visual novels (/vn)
https://nishifamily.com/vn
95040027500051000130 0 0 0 0
Nishi games portal (/games)
https://nishifamily.com/games
950725475000580002160 1 0 0 0
Nishi torrent front door (/torrent)
https://nishifamily.com/torrent
UNREACHABLE (probe code 5) — no measurement, no score; re-run the probe rather than infer a number
Civitai
https://civitai.com/
575650375100010070811300 1 0 0 0
Hugging Face
https://huggingface.co/
65037557510034022881751 1 0 0 0
itch.io
https://itch.io/
5001004250213003991110 0 1 0 0
Syosetu
https://syosetu.com/
1001002254311001132212930 0 0 0 0
Where to beat them, from the numbers. PERSON ours 950 vs best rival 650 — we lead; hold it (zero third-party hosts, zero trackers, headers 5/5 is the ceiling). PRODUCT ours 725 vs best rival 650 — we lead on measurable hygiene; the perceptual premium is a judged rung, not this ruler. PLACE ours 475 vs best rival 575 — behind: nav main skip search crumb, in that order. Re-measured by the beat; nothing here is typed by a seat.

References

Beyond a link list. Every reference below resolves twice — the publisher's copy and, where banked, the estate's own non-rottable library mirror with a content pin — and carries its evidence class plus the exact claim on this page it grounds. Keyed marks like [key] in the matrix notes jump here. A dash means honestly absent, never assumed.
  1. [civitai-doors] Civitai (JustMaier). Two front doors: civitai.com, civitai.red, and what is next. Civitai article 28369, 9 April 2026 -- civitai.com carries card payments, memberships and the Creator Program on a mainstream-friendly surface; civitai.red carries the full catalog, the full generator and crypto payments; one account and one database across both. publisher · read in our library knowledge/fetched/cmp_sharehub_civitai-doors.html · pin hc441f410a318ff9a4dc08c280d1598989947b226e024fd0a367e1865876cb60b · accessed 2026-08-24 · vendor-docGrounds: The membership-gated privacy web row and the verdict: what civitai.red is, from Civitai's own announcement (civitai.red itself refused the research pass with 403).
  2. [civitai-api] Civitai. Model Versions -- public REST API reference (developer.civitai.com) -- files carry sizeKB, hashes (AutoV1, AutoV2, AutoV3, SHA256, CRC32, BLAKE3), downloadUrl and metadata; lookup by hash; images filtered by browsing level; trainedWords, baseModel, stats with download and thumbs-up counts. publisher · read in our library knowledge/fetched/cmp_sharehub_civitai-api.md · pin h601fff634a428ed1b24c57d1a7fe39035282ee8a3d31cdee6bdfdb4e707591ce · accessed 2026-08-24 · vendor-docGrounds: The PUBLISH content-hash, download, discovery, identify, gallery, search, ranking, reactions, follow, API and acquisition rows: the Civitai column's documented API surface.
  3. [civitai-levels] Civitai Education. Civitai's guide to content levels -- PG, PG-13, R, X and XXX with their definitions; the eye icon sets the browsing level; an 18-plus confirmation is required and accounts are otherwise locked at PG; ratings are driven by auto-tagging. publisher · read in our library knowledge/fetched/cmp_sharehub_civitai-levels.html · pin h264b375c0eeb22537eaf92a64be820ec11c91fcc585c624764873a23aca3ed12 · accessed 2026-08-24 · vendor-docGrounds: The SFW and NSFW areas row (Civitai Best) and the membership-gated row: the five-level rating and the age confirmation.
  4. [civitai-buzz] Civitai Education. Civitai's guide to on-site currency, Buzz -- Blue Buzz is earned (100 on signup, 0.25 per ad impression scrolled) and Yellow Buzz bought; Buzz is spent on generation (scaled by steps and architecture), LoRA training, tips, bounties, early access and featured placement. publisher · read in our library knowledge/fetched/cmp_sharehub_civitai-buzz.html · pin h514920fa237f3b4d74d536097720c3eccbaec4813128238157e6a11df93017a3 · accessed 2026-08-24 · vendor-docGrounds: The on-site generation, LoRA fold, LoRA training manifest, zero-tracking and first-party ads rows: Civitai generates and trains on-site for Buzz and pays Buzz per ad impression.
  5. [civitai-creator] Civitai Education. Civitai's guide to earning with the Creator Program -- requires a Creator Score of 40,000 and a paid membership; creators bank Yellow Buzz into a monthly pool with tier caps (Bronze 50,000 flat, Silver 125 percent and Gold 150 percent of the peak month); withdrawal minimum 50 USD after a 15-day settlement. publisher · read in our library knowledge/fetched/cmp_sharehub_civitai-creator.html · pin hc9b622a0cc6509bf7117efabe5c8d127a10cbcacaa1fec274b8f7fb43a3bd015 · accessed 2026-08-24 · vendor-docGrounds: The creator-economy watch row: the Civitai column's payout mechanism and its thresholds.
  6. [civitai-tos] Civitai. Terms of Service -- users retain copyright and grant Civitai a worldwide non-exclusive licence; models may be licensed under bespoke terms generated via the service; Civitai may screen, remove, edit or block any user content without notice; compliance with 17 USC 512 with repeat-infringer termination. publisher · read in our library knowledge/fetched/cmp_sharehub_civitai-tos.html · pin hd6f293b6a118cc811b239e61f1fde648d8785edcb962133a3c9a6addce0c88c1 · accessed 2026-08-24 · vendor-docGrounds: The DMCA-512, repeat-infringer, attestation, live-path takedown and license rows: the Civitai column's stated legal posture, and the central-screening contrast to peer attestation.
  7. [civitai-torrent] GitHub discussion 341 in the civitai organisation (5 March 2023) -- a community proposal to distribute models over BitTorrent or IPFS, with no response from Civitai staff on the thread. publisher · read in our library knowledge/fetched/cmp_sharehub_civitai-torrent.html · pin h491e5080156268d86b85070cd6d7732cc3afaa7e16b5dc275addbbc3e2689b45 · accessed 2026-08-24 · source-readGrounds: The BitTorrent magnet row and the verdict: the only torrent artifact on Civitai's own surfaces is a 2023 community request, so the Civitai cell is absent rather than not-witnessed.
  8. [civitai-home] Civitai home page -- navigation carries home, models, images, videos, 3D models, articles, comics, challenges, updates and shop under the banner Discover and Create AI Art. publisher · read in our library knowledge/fetched/cmp_sharehub_civitai-home.html · pin h1d11ccbe1ef53e07c537a837b0feb4163801c921579e004eb8ece6d06581049a · accessed 2026-08-24 · vendor-docGrounds: The clips video-streaming row: Civitai hosts a videos section.
  9. [hf-xet] Hugging Face. Storage backends -- the Hub has adopted Xet in place of Git LFS (chunk-level deduplication, smaller uploads, faster downloads; LFS remains supported); the Xet pointer carries the LFS sha256 and size plus a Xet-backed hash. publisher · read in our library knowledge/fetched/cmp_sharehub_hf-xet.html · pin hc9127ff2e36a62c74cc008f582f0849bf2791d5f226a35aa0a3f54ea09fd872e · accessed 2026-08-24 · vendor-docGrounds: The PUBLISH content-hash, download, HF mirror and upload rows, and the verdict: the Hugging Face column's content addressing and chunk-deduplicated upload path.
  10. [hf-gated] Hugging Face. Gated models -- users must agree to share contact information (username and email) to access a gated repo; automatic or manual approval; extra gated fields and prompts; access-request API endpoints and a JSON access report. publisher · read in our library knowledge/fetched/cmp_sharehub_hf-gated.html · pin h85fd17a8b2bcb71eb3c0b147d1e1628dd3faff51f2b992ef2464d8f734332853 · accessed 2026-08-24 · vendor-docGrounds: The membership-gated privacy web row (Hugging Face present) and the shared and personal library row: access-controlled repos are the Hub's gating mechanism.
  11. [hf-pickle] Hugging Face. Pickle scanning -- a pickle import scan extracts the list of imports referenced in a pickle file and highlights suspicious ones; safetensors is recommended over pickle; the scan is stated not to be foolproof. publisher · read in our library knowledge/fetched/cmp_sharehub_hf-pickle.html · pin h5c7309761c14213f4120adc5a89f6ca0948ce204de0c73793d03f6ab8cb600b7 · accessed 2026-08-24 · vendor-docGrounds: The safetensors and upload-scan rows and the plan's safety bar: the Hub scans pickle imports and steers uploads to safetensors.
  12. [hf-malware] Hugging Face. Malware scanning -- every file of every repository is run through a malware scanner (ClamAV), triggered at each commit. publisher · read in our library knowledge/fetched/cmp_sharehub_hf-malware.html · pin h8656028b3107e9a38cb5c2f909b7cdfb1e6dc093bca59a98a2d6f786da66dbe6 · accessed 2026-08-24 · vendor-docGrounds: The upload-scan watch row (Hugging Face present) and the plan's safety bar and rung SH2.
  13. [hf-licenses] Hugging Face. Licenses -- a license identifier in the model card front matter, with a table of accepted identifiers including apache-2.0, mit, openrail, creativeml-openrail-m, the llama and gemma families and the cc family; other requires a license name and file. publisher · read in our library knowledge/fetched/cmp_sharehub_hf-licenses.html · pin h508cd4af2a46d1fc1433a8bb3e28b719487ff187d59532ef75a862aca89f7108 · accessed 2026-08-24 · vendor-docGrounds: The license and shippability verdict row: the Hugging Face column's per-repo license metadata.
  14. [hf-api] Hugging Face. Hub API, OpenAPI specification at the well-known path -- GET /api/models with search, author, filter, sort, direction and limit; repo tree and revision endpoints; repo creation and whoami. publisher · read in our library knowledge/fetched/cmp_sharehub_hf-api.md · pin hdc3a08fb33a635e0e81f78360cff84db5d8675d81f1655b5c9f807a04871b844 · accessed 2026-08-24 · vendor-docGrounds: The download, discovery, search, ranking and public API rows: the Hugging Face column's documented API and its sort and search parameters.
  15. [hf-index] Hugging Face. Hub documentation index -- Git-based repositories with versioning, commit history, diffs and branches; over two million models, one and a half million datasets and one and a half million Spaces; Spaces run Gradio, Streamlit, static HTML and Docker apps. publisher · read in our library knowledge/fetched/cmp_sharehub_hf-index.html · pin h9d5b1c722548140e68770ef55ce5cca79344b87ace40eb2fa67e3db26ee5c43f · accessed 2026-08-24 · vendor-docGrounds: The on-site generation and browser-game rows (Hugging Face partial via Spaces).
  16. [hf-cards] Hugging Face. Model cards -- README front matter carries language, tags, license, datasets, base_model with base_model_relation (adapter, merge, quantized, finetune), library_name, pipeline_tag, evaluation results and the not-for-all-audiences tag. publisher · read in our library knowledge/fetched/cmp_sharehub_hf-cards.html · pin h90cc2024ff74b05d9efb5adf205ed1378d3385c287e1fd6246034cf5bea913b3 · accessed 2026-08-24 · vendor-docGrounds: The identify-at-ingest, LoRA fold and SFW/NSFW rows: the Hub derives family and adapter relations from the card and flags adult content there.
  17. [hf-discussions] Hugging Face. Pull requests and discussions -- every repository on the Hub carries a community tab with discussions and pull requests. publisher · read in our library knowledge/fetched/cmp_sharehub_hf-discussions.html · pin hd50afb093da83f096d5c0cdce22a1a78c311ba7b81dcd8cddb586ce26af0f19e · accessed 2026-08-24 · vendor-docGrounds: The comment-moderation and forum rows (Hugging Face present).
  18. [syosetu-rank] Shosetsuka ni Naro help page 171 -- ranking points equal star ratings times two plus bookmark count times two; daily, weekly, monthly, quarterly, yearly and cumulative windows; exclusions for fan fiction, hidden ratings and search-excluded works. publisher · read in our library knowledge/fetched/cmp_sharehub_syosetu-rank.html · pin h600a2865a74aa7925e0c944d0473b9e1904d1e46b5a4ef14c3c512dfd3667eae · accessed 2026-08-24 · vendor-docGrounds: The ranking, windowed-rankings, reactions, follow and reading-position rows and the plan's serial-discovery bar: the published formula and windows.
  19. [syosetu-api] Shosetsuka ni Naro novel API manual (dev.syosetu.com) -- GET only; yaml, json, jsonp or php output; search by word, ncode, genre; order by daily, weekly, monthly, quarterly and yearly points, newness, bookmarks, reviews; fields include title, ncode, writer, story, episode count, global and windowed points, bookmark, review and impression counts. publisher · read in our library knowledge/fetched/cmp_sharehub_syosetu-api.html · pin hdcbd19da5b4ae583eaef9f640100efddba7059e2e6db5bb9fa514cefeecd858c · accessed 2026-08-24 · vendor-docGrounds: The discovery, search, comment and public API rows (Syosetu Best): a public API carrying every ranking point and count as a field.
  20. [syosetu-slf] Shosetsuka ni Naro work n6169dz -- Shangri-La Frontier, by Katarina, serialised since 19 May 2017 and still running, high fantasy, episodes paginated one hundred to a page, latest episode dated 7 July 2026. publisher · read in our library knowledge/fetched/cmp_sharehub_syosetu-slf.html · pin hbaf3f5d744418fc2c1f6b8511ca7bef86cf8d20afdda7ede2094b2f6faed66fc · accessed 2026-08-24 · source-readGrounds: The canonical-URL and author-dashboard rows and the verdict: the operator's named work, read on the platform that serialises it.
  21. [syosetu-r18] Nocturne Novels (noc.syosetu.com) -- the adult sibling site of Shosetsuka ni Naro, with an age wall refusing readers under eighteen; sisters Moonlight Novels and Midnight Novels. publisher · read in our library knowledge/fetched/cmp_sharehub_syosetu-r18.html · pin hbaaaf5b4d76ded61fb208bfb3d3c11b2e37cfad6438067d562a75842a0b9522c · accessed 2026-08-24 · vendor-docGrounds: The membership-gated and SFW/NSFW rows (Syosetu): adult works live on sibling sites behind an age wall.
  22. [itch-html5] itch.io creator docs. HTML5 games -- upload a ZIP containing index.html; embed in page with viewport dimensions or launch fullscreen; at most 1,000 files, 500 MB total and 200 MB per file; mobile always launches fullscreen; local storage saves are lost when the game domain changes. publisher · read in our library knowledge/fetched/cmp_sharehub_itch-html5.html · pin h3a4d6074b385e5bb6d6038c8b3e89f1bcdcd2acede1025486f8cb12e7c527983 · accessed 2026-08-24 · vendor-docGrounds: The browser-game, upload, VN engine, canonical-URL and save-load rows and the plan's browser-game bar: the itch.io column's embed contract and limits.
  23. [itch-pricing] itch.io creator docs. Pricing -- pay-what-you-want with a suggested donation, paid with a minimum price, or no payments; per-file prices and tiers, sales and bundles; the creator sets itch.io's revenue share, default ten percent. publisher · read in our library knowledge/fetched/cmp_sharehub_itch-pricing.html · pin hbe236eabcd44ea38a76b51d7555c445ede314c81948bc8455b23d0b93abf7fea · accessed 2026-08-24 · vendor-docGrounds: The creator-economy watch row (itch.io Best) and the verdict.
  24. [itch-app] itch.io app -- install, update and play indie games; delta patches; syncs browser games for offline play; collections and purchases; open source on Windows, macOS and Linux. publisher · read in our library knowledge/fetched/cmp_sharehub_itch-app.html · pin h3358b7422af0a01b07de2b8daab80d2f8430be55a46b1eaf771fd4f1b619b117 · accessed 2026-08-24 · vendor-docGrounds: The download, shared-library and offline-bundle rows and the verdict: itch.io's offline path and collections.
  25. [itch-jams] itch.io creator docs. Game jams -- anyone with an account can host; a submission period then a rating period; custom criteria each rated on a five-star system; an overall rank from the averages. publisher · read in our library knowledge/fetched/cmp_sharehub_itch-jams.html · pin h39629324e835ab4f257c4d5620178bb3475744435c83b31c536b751da912e78c · accessed 2026-08-24 · vendor-docGrounds: The reactions and ratings row (itch.io present).
  26. [itch-devlogs] itch.io devlogs -- a site-wide feed of posts attached to projects, sortable by new and popular, most recent and most popular, with post types from major update to postmortem and tutorial. publisher · read in our library knowledge/fetched/cmp_sharehub_itch-devlogs.html · pin ha9ec35db1b3a55829ae911e549f30a0d42315856d4f08624d9da0aca85c36537 · accessed 2026-08-24 · vendor-docGrounds: The forum row (itch.io partial: a post feed, not a threaded forum) and the author-dashboard row (serialised posts against a project).
  27. [itch-browse] itch.io games browse -- the store's browse page with its filters and sorts (popular, new and rated) over the catalogue. publisher · read in our library knowledge/fetched/cmp_sharehub_itch-browse.html · pin hb480358dbf1f91720a223552071e32f8f454810f8c208c848c0cc76ef3e4fc6f · accessed 2026-08-24 · vendor-docGrounds: The discovery, search, ranking, windowed-rankings and games-portal rows: the itch.io column's browse surface.
  28. [peertube] PeerTube (Framasoft). joinpeertube.org -- a free, decentralised video platform based on ActivityPub with peer-to-peer broadcasting; live streaming via RTMP; plugins and themes; over a million videos on over sixteen hundred platforms. publisher · read in our library knowledge/fetched/cmp_sharehub_peertube.html · pin h263fdfa5a7783b795770b2dcb46bbb605f2a9a7343abdb12453c0fb965f470c3 · accessed 2026-08-24 · vendor-docGrounds: The WebSeed, video-streaming, derivation-on-ingest and ABR rows and the verdict: the federated video class that shifts bandwidth to viewers.
  29. [bsky-labels] Bluesky. Composable moderation (12 March 2024) -- users install filters from independent moderation services and layer them like building blocks; the Ozone labeler tool open-sourced; everyone subscribed to Bluesky's built-in moderation by default. publisher · read in our library knowledge/fetched/cmp_sharehub_bsky-labels.html · pin hf4793049cdccc0997ce5fa38af9633e405588c446ebbd790937c62c90239c7da · accessed 2026-08-24 · vendor-docGrounds: The user-chosen feeds and labelers watch row: the AT-Protocol class of stackable moderation.
  30. [bsky-feeds] Bluesky. Custom feeds (27 July 2023) -- anyone can create a feed; the vast majority are built by independent third-party developers; users pin and sort the feeds they want. publisher · read in our library knowledge/fetched/cmp_sharehub_bsky-feeds.html · pin hcba030846f5ae3bfe3313b76491c924ebd2c71ce3d5699a2277930605ceae36d · accessed 2026-08-24 · vendor-docGrounds: The user-chosen feeds watch row and the verdict: the feed is the reader's choice.
  31. [bsky-privacy] Bluesky Social. Privacy policy -- collects email, phone, profile data and birth date, posts and direct messages (unencrypted, accessible for trust and safety), IP addresses, cookie identifiers, carrier and device information; most user activity is public by design. publisher · read in our library knowledge/fetched/cmp_sharehub_bsky-privacy.html · pin h3ef0d7903a22914c7ac7cc7c53c590e86475042613ebb0e5c566efa1fe860b5c · accessed 2026-08-24 · vendor-docGrounds: The zero-tracking row: what the leading Reddit alternative documents that it collects.
  32. [lemmy] Lemmy. join-lemmy.org -- a link aggregator and forum for the fediverse; no tracking, no advertising and no secret algorithms; users can fully erase their data; RSS and Atom feeds. publisher · read in our library knowledge/fetched/cmp_sharehub_lemmy.html · pin h2510912e122d406ff2bbeb40af029115b1434d9799882eefcbcacbfeb5a4aaf8 · accessed 2026-08-24 · vendor-docGrounds: The RSS, zero-tracking and custom-feeds rows: the fediverse class that states no tracking and publishes feeds.
  33. [feelex-games] FEELEX games catalogue (feelex.fun) -- browser games filtered by engine (Ren'Py, HTML, Ruffle) and downloadable games (Ren'Py, Unity) by operating system; every browser title runs online using HTML5; full versions offered for desktop and mobile beside the browser play. publisher · read in our library knowledge/fetched/cmp_sharehub_feelex-games.html · pin h2f978b906a14f2735c346df5c53f6999e5ef58ac152d2dbe711654dc51b25f01 · accessed 2026-08-24 · vendor-docGrounds: The browser-game, attestation, Ren'Py converter and offline-bundle rows and the verdict: what the operator's named site actually is (an adult-game catalogue that loads engine builds) and how it hands out downloads.
  34. [renpy-web] Ren'Py documentation. Web -- the engine and Python compiled to WebAssembly via Emscripten; progressive download of images and audio; no multi-threading, no networking, no Live2D; files over 50 MB are not cached; mobile audio needs a click first. publisher · read in our library knowledge/fetched/cmp_sharehub_renpy-web.html · pin he2354463ae92e1c8aeb30bc87be865c8a5d828a2afc7a6b593c8df41b90ed363 · accessed 2026-08-24 · vendor-docGrounds: The rollback-ring row, the Ren'Py converter watch row, the plan's in-browser VN bar and rung SH8: the documented shape and limits of the engine-in-wasm approach the converter replaces.
  35. [renpy-quick] Ren'Py documentation. Quickstart -- the script language: label, say with characters and narration, define Character, scene, show with attributes and positions, hide, with dissolve and fade, menu with choices and jump. publisher · read in our library knowledge/fetched/cmp_sharehub_renpy-quick.html · pin hec2482b2473b1addc110c3ca399559efa561d813e9f2ce2e29f7425eaf4d3f1d · accessed 2026-08-24 · vendor-docGrounds: The VN sprite compositor row and the Ren'Py converter watch row and rung SH8: the statement set the converter maps to bytecode.

generated by nx_swcompare_matrix (sovereign NishiLang organ) from knowledge/compare/sharehub.matrix · every Nishi cell verified against organ source at emit time · watch cells re-measured on every compare beat · zero JS, zero trackers