Make a complicated evidence trail easier to follow.
A local-first investigation workbench concept for organizing records and keeping track of where information came from.
Explore how it works ↓Explore the project
Open the design and demonstrations, then follow the references for more detail.
The design, in more detail
Definition
A cryptographic, zero-trust desktop investigative suite for False Claims Act (qui tam) whistleblowers, featuring multi-vault SQLite storage, automatic EXIF/metadata scrubbing, and Typst disclosure compiling.
The problem
Whistleblowers reporting corporate or government fraud face extreme retaliation risks. Accidental leakage of document metadata, unencrypted file storage, or insecure cloud uploads can compromise evidence viability and endanger whistleblowers before statutory sealed disclosures are filed.
The approach
Open Season runs strictly locally on-device in Rust and Svelte 5. It manages evidence in multi-vault SQLite databases where encryption keys are held exclusively in volatile memory and shredded on window blur. An automated pipeline strips EXIF, author tags, and hidden streams from exhibits and formats chronological disclosure packets in Typst.
How it works
- Zero-Trust Local Execution: 100% offline desktop application with zero telemetry, remote analytic beacons, or third-party cloud servers.
- Volatile Key Shredding: Cryptographic encryption keys are generated in memory and shredded instantly whenever the window loses focus.
- Automated Metadata Scrubber: Automatically removes EXIF coordinates, printer tracking dots, author names, and embedded streams from PDF and image exhibits.
- Multi-Vault SQLite Storage: Partitions sensitive corporate documents across independently encrypted SQLite database vaults.
- Typst Disclosure Compiler: Formats complex multi-year evidentiary chronological disclosures into court-ready typographical documents.
Project notes
- Desktop Core
- Rust · Svelte 5 · Tauri
- Key Security
- Volatile In-Memory Shredding
- Report Compiler
- Typst Typographical Engine
These are the project’s documented design notes. Consult the linked implementation and its version before relying on a specific capability.
Development history & next steps
Security Model & Threat Modeling
Defined zero-trust threat model, volatile memory key management, and metadata scrubbing pipelines.
Rust Engine & Typst Integration
Built core cryptographic file vaults and integrated Typst for reproducible court-grade document output.
MVP Desktop Build
Built Svelte 5 + Rust desktop application prototype with multi-vault database isolation.
What comes next
Adding support for cryptographic zero-knowledge proofs of document authenticity without disclosing underlying sensitive records.
Source material & related links
Follow the documentation, repositories, and related sites behind this project.
Rust backend, Svelte 5 frontend, Typst compilation templates, and metadata scrubber modules.
Security and evidentiary requirements for sealed qui tam disclosures.
Topics: Civic Tech · Whistleblower · False Claims Act · Rust · Svelte 5 · Zero Trust · Typst