Physical things should not forget.

In thirty seconds

Libranis is a relational substrate and a single application in which people, places, physical things, organizations, documents, conversations, and an AI participant are held as records of one kind — a libran — related to one another through explicit, dated, permissioned relationships. A libran keeps its identity, history, and relationships across changes of owner, service provider, and application surface.

ScanThis is the first orbital: a focused experience inside that one application which gives a physical or informational thing a persistent identity, reached by scanning a code. A water heater becomes an entity with an install date, a warranty term, a service history, and an owner — and it keeps all of that when the house sells, instead of the next owner starting from nothing.

Ari is the contextual AI participant, and is not a chatbot over a corpus. Ari’s context is assembled at request time from the relationship graph and the caller’s authority, so two people asking the same thing the same question legitimately receive different answers. Possessing an identifier — a scan code, a URL, a record id — never implies permission to read what it identifies.

The design premise, compressed: everything the system holds is treated as an inviolable singularity, and in Libranis that singularity is called a libran. Relationships are themselves singularities — records in their own right — which is why privacy and consent are properties of the graph itself rather than a layer bolted over it. And because Ari participates in that same graph, the AI is constrained by the same relational envelope as every other participant. The full account, with each claim marked by how settled it is, is published at /docs/ontology/.

The job, in one story

For a small business that installs, services, or leaves physical equipment with customers, ScanThis turns those objects into the front door of the business’s own customer service. A standby generator drops off its owner’s network when the house’s Wi-Fi name changes, and nobody notices for months; reconnecting it means menus, manuals, and searches. Stickered, the generator is the address of its own help: the owner scans it and asks, and Ari — holding that generator’s serial number, manual, and install history — walks them through reconnecting it. A waste company’s customer can ask the bin itself whether this week is recycling, or tell it the driver missed the pickup. The object answers, the business stays in the loop, and the phone rings less.

Verify this in five minutes

Every address in this table is public, unauthenticated, and read-only. None of them requires an account, and none of them returns any user’s data.

Two requests you can run

The first returns the interfaces this domain publishes and what each is for. The second submits a task to Ari over A2A and returns a completed task whose artifact answers from the documentation above.

curl -s https://libranis.com/api/v1/capabilities

curl -s -X POST https://mcp.libranis.com/a2a \
  -H 'content-type: application/json' \
  -H 'A2A-Version: 1.0' \
  -d '{"jsonrpc":"2.0","id":1,"method":"SendMessage","params":
       {"message":{"role":"ROLE_USER","messageId":"1","kind":"message",
        "parts":[{"kind":"text","text":"What is a libran?"}]}}}'

The A2A interface is deliberately narrow: five descriptive skills, answered from published documentation. It performs no lookup of any thing, returns no user data and no private relationship, changes no state, takes no autonomous action, and accepts no credential — there is nothing that would widen what it returns. The A2A-Version: 1.0 header is required; an absent version header is read as 0.3 per the A2A specification, and this interface implements 1.0 only. The public interfaces are deliberately non-acting. Inside authenticated sessions, Ari is a full participant in the graph — and consequential actions still require a person’s confirmation at the time.

What is live, and what is not

Stated plainly in both directions. The machine-readable form of both lists is /api/v1/about, and it says the same thing.

Libranis is in beta. Capability statements on this domain are limited to what is running; anything not yet running is named under What is live today on each documentation page, and here.

Why the architecture is different

Five properties that are structural rather than cosmetic. Each is defined on its own page rather than argued for here.

• One record type. People, places, things, organizations, documents, conversations, work, and the AI participant itself are all librans. There is no separate table per feature, so a relationship between any two of them is expressible without a schema change. → Primitives
• Relationships are records, not fields. Each carries its own permission boundary, its own conversation, and expression-dated episodes. The graph of relationships is the privacy architecture rather than a layer over it. → Libranis § Relationships
• Identity, credential, authority, and entitlement are four different things. Who you are, how you get in, what you may do, and what you have bought are never collapsed into one another. An identifier is never a permission, and a subscription is never required in order to exist in the system. → Security and consent
• The AI is a participant in the graph, not a layer over it. Ari’s context is derived at request time from the caller’s scope and authority, so the correct answer changes with the caller. Actions with consequences outside the acting party’s boundary require a person’s confirmation at the time; Ari may propose them and may not complete them unattended. → Ari
• Orbitals, not silos. ScanThis is an experience inside the one application on the one subscription, not a separate product and not a separate purchase. → Orbitals

Trying it yourself

Without installing anything

Open libranis.com/ari/ and ask it something — what a libran is, how a stickered water heater works for the next owner, what it costs, or what Ari refuses to do. It answers in text, speaks aloud, and listens. No account, no subscription, nothing to install.

Or open a published demo record and question the thing itself — the same objects that live in the physical demo binder: a standby generator, a trash and recycling cart, a memorial bench. Each is a real, publicly-resolvable libran with its own record and its own grounded answers; none is anyone’s private data.

On iOS

The beta is distributed through TestFlight. To install it: get Apple’s TestFlight app from the App Store, then open testflight.apple.com/join/kcTZaxhn on the phone and tap Accept, then Install. The address libran.io/app resolves to the current install door from any device, and is the one printed on stickers.

The path it demonstrates: add a thing by scanning its code or photographing it → Libranis mints or matches a persistent entity for it → the entity opens with its own record → ask Ari about it → the conversation stays tethered to that thing → the context is still there when you come back. What each step means is defined on ScanThis and Ari.

How it is built and operated

The deployed scan pipeline identifies physical things with Gemini, called through Google Cloud’s Vertex AI. Ari is the company’s resident agent, and the company itself runs agent-first: its work queue, session ledger, and agent dispatch records live in the same libran substrate the product sells. The machine interfaces above exist so that other agents are first-class readers of the same documentation people get.

What it costs

One subscription covers every Libranis experience, including orbitals that have not shipped. Personal is $3/month. A stewarded place — a park, memorial, church, trail, or rental — is $3/month per place, no matter how much is tagged inside it. A business is $27/month. Personal and Business each have an annual option at checkout. Extra QR stickers are $0.09 each, one-time, at cost.

There are no coupons, promotional codes, gift purchases, sponsorships, or free tiers — the price is the price. There is a free door: claiming a thing that someone else stickered for you is free, requires an account, never requires a subscription, and a free-claimed thing keeps its full single-object experience forever. Visitors to a public place never pay and are never enrolled. A business never funds a customer’s subscription.

Canonical terms: /docs/libranis/#pricing. Machine-readable: /api/v1/about. Subscriptions are sold only at get.libranis.com; no other site sells Libranis.

Questions

Ask Ari at libranis.com/ari/. It answers from the same documentation this page cites. Written support is at libranis.com/support/.

All Libranis documentation · llms.txt · AI catalog · Public read API