Local admin
Anyone who can open this app can edit the catalog. There is no account system. Mark a field verified only when the source note cites a real document. Saved builds do not change when you edit a catalog record.
Ingestion
Pipeline: DISCOVER → FETCH → PARSE → NORMALIZE → VALIDATE → DEDUPE → STORE → INDEX. Fixture runs are safe for CI. Live fetches respect rate limits. Never invents dimensions.