Run a peer
The most useful thing you can do. Point a node at a corpus you already have and the network gets one more answer it could not give before.
Install a nodeCommunity
A network is only as good as the peers on it.
Gnarl gets more useful with every node that joins and every corpus that becomes reachable. Here is how to take part — whether you have a petabyte archive or a laptop.
Get involved
Six ways to make Gnarl better.
Build on the client SDKs
Our client libraries are open source. Write one for a language we have not covered, or improve the ones we have.
Client SDKs on GitHubStart a network
Private networks are a pre-shared key and a bootstrap list. Stand one up for your team, your lab, or your consortium.
Join the networkTell us what breaks
Gnarl is early and the interesting bugs live in topologies we have not seen. Partial coverage, weird latency tails, hostile NATs — we want them.
Open an issueImprove the docs
If something in the documentation was wrong, ambiguous, or missing when you needed it, that is a bug worth reporting.
Read the docsReport a vulnerability
Signatures, policy, and identity are load-bearing. If you find a way around any of them, tell us privately first and we will credit you publicly.
security@lucenia.ioHow Gnarl is built
Open clients, commercial node.
We want the surface you build against to be yours, and we want the protocol to outlive any one implementation. So the pieces that live in your application are open source, while the node itself is a commercial product from Lucenia.
- Client SDKs are open source and will stay that way
- The wire protocol and manifest format are documented and stable
- The node is licensed commercially, with a free tier for single peers
- Nothing you index is ever reported back to Lucenia
GitHub Discussions
Design questions, deployment war stories, and roadmap arguments.
Join the discussionGround rules
How we work together.
- 01
Assume good faith. Most disagreements here are about tradeoffs, not correctness.
- 02
Bring the topology. Bug reports about a network are much easier to act on with node counts, latency, and coverage output.
- 03
No data in issues. Redact document contents, node IDs you do not own, and anything covered by a policy you did not write.
- 04
Disclose security issues privately first, then publicly once a fix is out.
Security
Disclose it privately, we will credit you publicly.
Gnarl’s guarantees rest on identity, signatures, and policy evaluated at the node. If you find a way to forge a manifest, alter a result without detection, or read past a policy rule, that is a serious bug and we will treat it like one.
What to expect
- Within 2 business daysWe acknowledge your report and tell you who is handling it.
- Within 10 business daysYou get an assessment: reproduced or not, severity, and a fix plan.
- At releaseCredit in the advisory and the release notes, unless you would rather not be named.
Put a peer on the map.
Every node that joins makes a corpus searchable that was not reachable before. Yours might be the one somebody has been looking for.