The Moderacja screen¶

Nerthus.Core (until cutover). This page describes the frozen system that runs today and is deleted at cutover. Replaced by: not yet written.

Moderacja is the screen for the people who do chat moderation. It answers who can open the sealed records, whether anybody has been left unable to, and what the register says about itself.

https://dev-astral.nerthus.pl/#/moderacja

Everything on this screen is about sealed records rather than their contents. The bodies are encrypted to the moderation krąg, and the tool that serves them holds no key and never will. That is the property the whole design exists to keep, not a limitation somebody will fix later.

You may see one pane and not the other. Reading the krąg and working in the register are two different things and somebody may hold either.

Krąg - who can read¶

A krąg is a named set of readers, and its failure is quiet: one person who cannot open anything, with nothing else looking wrong.

So the pane says it in a banner rather than a mark you have to notice, and badges the people it is about. The banner is not "look into this". It is one repair, and it names whose repair it is.

You cannot add somebody here, and there is no button missing. A krąg names role labels, and its members are whoever holds those roles right now, read out of nerthus.contributors.md. Adding somebody is an edit to that file in a reviewed merge request - see People and roles. A second list of members kept on this screen is exactly what the role-based design removes.

Rejestr - what the register says about itself¶

Four blocks, in the order you read them.

Łańcuch przejrzystości. The head of the chain and how many entries it has. This one is drawn for everybody, including a reader who cannot see a single record - that is what it is for. It is checked on the screen rather than taken on trust.

Ujawnienia. A log of the times somebody took a plaintext export out of the archive. The people who should see that this happened are the people who work in it, so it is readable by the same moderators rather than reserved for a higher office. The entry records that an export happened; the export itself never passes through the tool.

Eksport. Most readers meet a refusal here, and it is drawn as a tier you do not have rather than as an error. That is correct: producing an export is a rarer permission than reading.

Zniszczenie treści. Last on the page, behind a preview and a confirmation, and never a button on a row somewhere else. It permanently ends readability for everybody including whoever wrote the record, so it does not sit one click away from ordinary reading.

Klucz - your key, in this tab only¶

This is the only place a moderator's key enters the browser, and it goes into memory. Nothing writes it down and nothing else in the site can load one. Closing the tab forgets it.

The screen does not compare what you typed against a string you also supplied. It derives the public half of the key you pasted and checks it against the one the roster publishes for the person you picked. If they do not match, the load is refused and the screen names the key it expected.

That refusal is the useful case rather than the annoying one. The interesting failure is not a typo: it is somebody handed the wrong file, or a key that was rotated in the roster and not in the envelope they are reading from. A screen that only said "wrong key" would send them to look at the wrong thing. A key that belongs to a different member is named as such.

There is a second, optional field. The key opens records; the other value lets you search for a record by nick and check that a piece of evidence is filed where the record says. They arrive separately, in different files, so the screen takes either alone rather than blocking the ordinary case for the sake of the rarer one.

Related¶

• The Kary screen - the register of sanctions itself
• The Regulamin screen - the texts a record cites
• People and roles - the roster edit that adds a reader
• Use the web dashboard - signing in, and every other screen