# FablePool Memory Protocol (FPMP) — Specification Set v0.1.0

**Status:** Draft for public review · **Milestone:** 1 of 7 · **License:** CC-BY-4.0 (docs), Apache-2.0 (future code)

FPMP is an open protocol for a **user-owned personal AI memory layer**: a local-first, append-only, signed operation log from which a derivation graph of claims about a person is built, inspected, corrected, shared, and revoked — entirely under the user's control.

This milestone delivers the normative foundation that all later milestones implement against.

## Documents

| Doc | Title | Status |
|---|---|---|
| [01-architecture.md](01-architecture.md) | System Architecture | Draft v0.1.0 |
| [02-trust-model.md](02-trust-model.md) | Data Ownership & Trust Model | Draft v0.1.0 |
| [03-threat-model.md](03-threat-model.md) | Threat Model | Draft v0.1.0 |
| [04-non-goals.md](04-non-goals.md) | Explicit Non-Goals | Draft v0.1.0 |
| [05-glossary.md](05-glossary.md) | Glossary of Core Concepts | Draft v0.1.0 |
| [06-roadmap.md](06-roadmap.md) | Roadmap & Milestone Mapping | Draft v0.1.0 |

## Versioning

Documents follow semver. Breaking changes to normative statements bump the minor version while pre-1.0. The wire format (Milestone 2) will carry its own version negotiated at sync time. The words **MUST**, **SHOULD**, **MAY** are used per RFC 2119.

## Design Tenets (informative)

1. **The user is the root of trust.** No vendor key, no mandatory server.
2. **Evidence is immutable; interpretation is revisable.** Claims can be refuted; raw evidence can only be redacted forward, never silently edited.
3. **Every claim answers "why."** Provenance is structural, not a feature.
4. **Sharing is a capability, not a copy of the database.** Narrow, auditable, mechanically revocable.
5. **Interoperability over implementation.** Another team must be able to build a conformant node from these documents alone.