Open To Read, Gated To Act

You do not need an account to read any of this. Every problem record, every law, every politician's page, and the arithmetic behind every award opens for a stranger who followed a link and may never come back. One act stops and asks you to sign in first: putting something into the movement's shared record with no account behind it.

A visitor with no account reads the whole movement with no gate at all; only a contribution to the shared record stops at a join step, which keeps the draft in the visitor's own browser and returns them to the exact page with the control reopened; the admin section is never rendered to anyone else.

What it does

There are three access tiers. Public is anybody, signed in or not, and it covers reading the whole movement: problems, laws, politician records, evidence chains with their declared gaps, the rosters, the plan. Citizen is a signed-in person, and it covers writing. Admin is the install's console, and it is not rendered to anyone else — not greyed, not teased, not hinted at. Sending a stranger to a join page for poking at it would tell them it exists. A Citizen gate is an invitation; an Admin gate is a secret.

The published arithmetic is the sharpest case, and it carries no gate whatsoever. A politician's award pages — the derivation, the inputs, the line-by-line working — come from the public voting record and from people's own recorded words. An interstitial in front of that, even a dismissible one, would be a block on showing that working publicly.

What does stop is one act: putting an unattributable contribution into the shared record. A proposal, a vote, a video added to a politician's page, a challenger named, an action you logged. Who submitted a claim about a named living person is the one thing a later review cannot supply, so it is collected at the door.

The gate is drawn as an invitation. The control renders exactly as a member sees it — same label, same position, same weight, never greyed out, never a lock icon that explains nothing. Clicking it opens a short join sheet written for the surface you are on: "Sign up to put this problem on the movement's list." The words "unauthorized", "access denied" and "you must be logged in" are banned outright.

Then it keeps your work. Whatever you typed or selected becomes a pending intent, held in your own browser and never sent anywhere before you sign in. On return the app lands on the exact page you were on, restores the draft, and reopens the control in the state it was in — then stops, because your first act as a member is yours to take. If more than one thing is missing, one reusable flow collects only what is genuinely missing: fixed order, one question per card, a way out on every card. There is no password to create and none to lose.

The goal it serves

A sign-in wall at the front door makes a movement invisible to everyone who has not already joined it. Almost everyone who ends up helping arrives as a stranger who followed a link, read one real record, and decided it was worth their evening. Ask that person for an account first and you never meet them.

Underneath the recruiting reason is a harder one. The whole argument here is checkable evidence about people who hold public power — what they voted for and what they said, sourced to the official record and published with the working attached. Evidence you have to create an account to inspect is not checkable evidence. It is a claim asking for deference, which is the habit this project exists to break. The public record can be cloned by anyone, and the app behaves the same way.

The moment a citizen reaches for a control is the moment they decided to take part, and an error message there loses the person for good. That is why the things a citizen can do are shown in full to people who cannot do them yet. The one gate that does exist is the same commitment pointed the other way: attribution is what makes a claim about a named living person answerable.

What keeps it honest

• The browser is not trusted with the rule. Every write from a caller with no account is refused by the server, with an invitation to sign in rather than a flat no. If a control is ever missed in the interface, the request still lands at the join step instead of quietly recording something nameless.
• The draft is never the write. The pending intent sits on your machine and is untrusted by definition. It can only reopen a control; the submission goes through the normal path.
• No read route is gated, and there are no exceptions. Your own four pillars — positions, value systems, evidence chains, reasoning — stay open with no account, on your own machine, permanently.
• Public means published, not everything on disk. Somebody else's unpublished draft answers "not found" rather than "not allowed", because "not allowed" confirms it exists.
• What signing in does not claim. It establishes an email address and nothing more. Who you are, and which country's social contract binds you, are asked later and recorded as your own statements, not as facts checked against a document.

Works with

• Decisions, Areas And Communities — the workspace is open with no account; only pooling your result into a community position needs a name attached.
• Value Systems And Policy Packets — writing your own rules down needs no account; publishing a packet others can import is a contribution and carries your name.
• The First-Principles AI Check — a stranger can run the check and read what it concluded; the gate falls only on what it helped you put into the record.
• Your Profile, Your Anonymity — the gate asks for an account, not for your real name; a pseudonym carries a contribution just as well.

Where to go next

• Start Here — what We The Citizens is, in sixty seconds and then in five minutes.
• The core loop — what you actually do with this once you are inside it.
• Clone the record — "no account required" taken as far as it goes.
• Get Started — the two ways to run it, hosted or on your own computer.
• Take Action — what is worth doing this week, and the first thing that will ask you to sign in.