# Personal Signed Local Log (PSLL)

**Part of:** Extropy Engine v3.1
**Status:** Adopted (canonical user-state primitive)

## What it is

An append-only, hash-linked, locally-owned log of a user's signed events. Hosted as the user's Holochain source chain.

## What it stores

- Genesis (DID anchor, initial keys, profile metadata).
- Key rotations.
- Handshake records (intent, capability tokens issued/received, outcomes).
- Quest commitments and settlements.
- Reputation deltas (signed by attestors, mirrored locally).
- Governance votes cast.
- User-defined private notes (encrypted, not published).

## Properties

- **Append-only**, **hash-linked**, **signed** by the user's active key.
- **User-owned**: not replicated to a public chain by default.
- **Selectively publishable**: individual entries may be published as signed claims to the DHT (Section 5.2 of SPEC_v3.1).
- **Portable**: exportable as a signed bundle; a user can move PSLL between devices/hosts.

## Recovery

- Local encrypted backup (user-controlled).
- Optional social recovery: M-of-N signed approvals from chosen guardians can re-anchor a new active key to the existing DID.
- No central recovery service exists or is permitted.

## Privacy

- The PSLL itself is private to the user.
- Public network only sees what the user explicitly publishes.
- Selective disclosure proofs allow proving properties of PSLL contents without revealing the entries.

## Open items

See `GAPS.md` — PSLL gaps are tagged `[psll]`.