Deep Tunisia

An open public record  ·  Tunisia  ·  1956 — 2026

Where memory fades, power escapes.

Deep Tunisia is a living public record of the people, institutions, companies and networks that shape a nation. Every claim traceable to its source. Every conclusion open to challenge. Nothing here asks your permission to be read.

0
People
0
Offices held
0
Institutions
0
Relationships
0
Sources
0
Events
0
Years
IMemory

Every society is built on memory.

Memory is made of records. Records are made of information.

For centuries the excuse was scarcity. Records were incomplete, decisions were taken behind closed doors, and power was difficult to understand and harder to challenge. That excuse is gone. More information is produced in a single day than entire generations once created in a lifetime.

And yet understanding is more fragmented than it has ever been. Facts scatter. Records disappear. Connections stay invisible. Public memory fades — and wherever memory fades, power escapes accountability.

Deep Tunisia exists so that Tunisia remembers: seventy years of appointments, institutions, ruptures and relationships, held in one place, in the open, in a form anyone can audit.

Recorded offices held, per year, 1956–2026. Drawn from 379 tenures in data/positions.yaml; the 7 whose dates nobody has published are absent, which is a finding rather than an omission. The rise after 2011 is partly the state opening and partly this record getting better at recent decades — the graph does not pretend to know how much of each.
IIWhy a graph

A single appointment means little until it is connected to an institution.

The website is a window. The knowledge graph is the project.

A company means little until its ownership is understood. A decision means little until it is placed in the era that produced it. Deep Tunisia exists to connect those fragments into a public understanding that no single document can provide.

The join that makes this possible is deliberately unglamorous. A position is (role · holder · start · end) — an interval, not a fact about a person. You cannot ask who held power in 1994 from a list of people. You can only ask it from a set of intervals.

Dates are ranges, never points: earliest and latest start, earliest and latest end, plus a status. The timeline draws the documented core solid and the uncertain envelope hatched, so a span nobody has confirmed can never quietly pass for one that has been.

Successions are derived, not asserted — computed from the intervals themselves, so a hole in the record shows up as a hole. There are currently 39 succession gaps and 9 overlapping tenures, and all of them are published.

IIIHow the knowledge is collected

Every claim is traceable. Every conclusion is challengeable.

There is no scraper filling this graph and no language model writing into it. Knowledge enters through one door, in a fixed order, and the build refuses anything that arrives out of order.

The rule that matters most: an inference is never allowed to become a fact. Every claim is filed under one of four bases, and no two of them are ever drawn the same way.

01

The citation comes first

A source is added before the claim it supports, and tiered 1 to 5. Tier 1 is a decree or gazette entry. Tier 5 is a lead that needs corroborating and is never sufficient on its own. The current library is 479 sources — 45 at tier 1, 30 at tier 2, 156 at tier 3, 196 at tier 4, 52 at tier 5.

02

The claim is attached to it

Nothing is entered free-floating. A position, a relationship, an event — each references the source ids that hold it up. 31 of the 479 sources currently back no claim at all; they are kept as staged reading and excluded from the published count, because a bibliography entry that holds nothing up is not evidence.

03

The basis is declared, and it changes how it looks

Documented, reported, inferred, unsubstantiated. The basis describes the claim, not its dates — “X held this post” and “between these dates” are separable claims that routinely have different standing, so they carry separate flags. A reader can raise the evidence floor at any time and watch weaker claims leave the map.

04

The build refuses the rest

An inferred claim must state its reasoning and what would falsify it. A grade C or D claim must name who is making it. These are not lint warnings — they fail the build. There is no way to slip an unattributed insinuation into this dataset.

Hard failure, not a warning
05

Change is a record too

The data is plain text under version control, so every factual change is a dated, attributable diff. That history is published in full and generated, not curated — nobody gets to decide which corrections were flattering enough to appear.

The four bases, and the strokes that carry them

Documented

An official record, decree or gazette entry states it.

128 claims  ·  solid
Reported

Credible publications report it, with attribution.

433 claims  ·  dashed
Inferred

Nobody states it. Reasoned from documented structure — and it must publish what would prove it wrong.

94 claims  ·  dotted
Unsubstantiated

It circulates without reliable evidence. Recorded, attributed, and off by default.

4 claims  ·  dot-dash

Unsubstantiated claims are recorded, not deleted. Deleting a widely-held claim does not make it go away — it only removes the map's ability to show anyone why the popular account is wrong. Several on record here are contradicted by this project's own data: the claim that the army secretly governs Tunisia sits directly beside the record of the tri-service command going unfilled for two decades.

Raise the floor. Watch the map dissolve.

Below is a real slice of the graph: the 46 most-connected people and the relationships recorded between them, each carrying its actual basis. Drag the floor upward and the weaker evidence leaves. This is the most informative interaction on the site, and it is the one most projects would never build — because it shows you how much of the picture rests on something short of proof.

Network · evidence floor 46 people · fixed lane per layer
Show claims resting on

Gold edges cross between layers — a security figure tied to an economic one, for instance. Those are the connections the project most wants you to check, and they are also the ones most likely to thin out when you raise the floor. A high connection count is not evidence of wrongdoing, coordination or hidden control; it records that this dataset knows about a lot of links. Note what the last step costs: demanding an official record leaves fewer than half the connections standing and strands 21 of these 46 people with nothing attached to them at all — and those are the best-documented people in the entire graph.

IVWhat we do not know

A record that publishes only its strengths is advertising.

The stated architecture of this project is that machines propose and humans verify. Almost nothing has yet been through a second pair of eyes, and the honest number is published on the site rather than kept in a drawer — because that is the only way the commitment means anything.

Worse than the total: all 24 reviews so far have landed on the best-evidenced claims. Of the 4 unsubstantiated claims, the 44 attributed ones and the 83 inferences — the records most capable of harming a named person — not one has been independently checked. That is the single highest-value work outstanding, and it is why funding this project buys verification before it buys anything else.

24 / 659 records have had independent human review. Broken out by risk, the coverage is worst exactly where the stakes are highest.
278 records are awaiting a primary source — currently resting on secondary reporting, and listed individually rather than summarised.
39 · 9 succession gaps and overlapping tenures, surfaced automatically by the build. A hole in the chronology renders as a hole.
5 unresolved source contradictions. Where outlets disagree, both versions are stored with who holds each. In one case five different sentence lengths circulated for overlapping proceedings, and the dataset declines to guess how many cases there were.
0 human-translated entries of 1,900 translatable strings. The interface is trilingual; the long-form analytical prose is deliberately not machine-translated, because a machine-translated epistemology page would undermine the point of having one.
ANRSD defence intelligence has no primary sourcing at all — statute, appointment date and current status all unestablished. It is the largest hole in the security map and it is named on the front page of the evidence view.

This is not a website exposing a deep state. That framing presupposes its own conclusion — and a project that begins from a conclusion cannot be trusted to test it.

The narrower question is answerable: which institutions, individuals and economic groups retain influence when the formal regime changes, and which relationships are genuinely continuous rather than reconstructed after each rupture. Six hypotheses are published with their falsifiers attached. Two of them currently come out badly — including the strong version of the deep state thesis. You can watch the data refuse the question it was built to ask.

VThe Agora

Information alone does not create a free society.

A nation also needs a place where its people can think together. Deep Tunisia is more than an archive — it includes Tunisia's digital Agora: a discussion layer where citizens can understand institutions, question them, and improve the public record together. Not a replacement for institutions, but a space for holding them to account.

The difference from every other forum is one design decision: the conversation is anchored to the record, with the record still in view. You are not transported to a generic thread and expected to remember what you were discussing. The entity's trajectory, offices, documented connections and sources stay beside you while you argue about them.

Elsewhere you get an opinion. Here the discussion has an object — and if you think the object is wrong, there is a mechanism for saying so that ends in the graph changing.

01

Discuss

“Let's talk about this.”

Anchored to a specific record. The entity stays on screen while you argue about it.

02

Propose

“I think the record is wrong.”

A change to the graph, carrying a named source. Reviewed by a human, and it fails the build if the claim arrives ungraded.

03

Report

“Something here needs attention.”

A human moderation path. Removed posts keep their place, their thread, their timestamp and the reason — the body is nulled, the removal stays visible.

Not built 04

Petition

“Enough of us want something.”

Collective demand, where the count means something because each signature is one verified person — and the project still cannot tell you who they are.

VITwelve words

No name. No email. No password. Nothing to seize.

Citizens should never be forced to choose between participation and personal safety. So there is no account here. Your identity is a keypair, and the only thing that can rebuild it is twelve words generated on your device.

The words are generated, never chosen, and that is the load-bearing decision. Because a public key is public, anyone can attack every identity on the site at once, offline, with no rate limit to hide behind. A phrase a human invents carries perhaps 20–30 bits of real entropy and falls in hours. Twelve words drawn from a 2,048-word list carry 128 bits. It does not fall.

They are shown once. Never transmitted, never stored, never permitted into a URL — which is why recovery can never be a link someone emails you. The same twelve words rebuild the same identity on any device, forever. There is no recovery process, because there is nothing on any server to recover from.

2,048 words  ·  12 drawn  ·  128 bits
Drawn in your browser with crypto.getRandomValues, from the real BIP-39 list. Illustration only — this is not an identity.
The honest cost

Durability is what deanonymises people

A persistent pseudonym leaks through its own writing — posting hours, register, vocabulary, which of three languages, which people it cares about. Cryptography does nothing whatsoever about that. Recovery makes an identity more persistent, so it is opt-in, explained at the moment of choosing, and never the default.

The default

A key that dies with your browser

Open the Agora and post, and you get a key your browser made, held where it cannot be exported, that vanishes when the browser is cleared. Burn identities — used once and discarded — stay one click away and will not be buried once recovery exists.

The threat model

Stated plainly, not promised

We cannot see who you are. But this runs on ordinary hosting, and like every host the service receives your connection. If you post under one identity for a long time, how you write can identify you no matter how good the cryptography is. Every layer that cannot hold is named on the page rather than hidden in fine print.

VIIThe economy of speech

Four posts a week. On purpose.

An uncited assertion is a bill sent to the reader. A cited one comes with its own receipt.

Every other rate limit in this project exists to stop an attacker. This one does not. It exists because a post that took forty seconds and a post that took forty minutes currently render identically — and this whole project is an argument that things of different standing must never look the same.

Scarcity is the instrument. A person with two posts a week spends them on something they have thought about, because they can feel the cost. A person with sixty an hour reacts. No amount of guidance in the composer produces the first behaviour; a budget produces it without saying a word.

And the budget falls on assertion, not on evidence. A post carrying a source that resolves costs half of what the same post costs without one — not because cited posts are true, but because the cost of a post should track how much work it hands to everyone else.

Rolling seven days, never a calendar day
Level 0 · new
4
On minting a key. Two uncited posts, or one thread, or four cited ones.
Level 1 · basic
8
Seven days and three posts. Reached around day eleven.
Level 2 · established
14
Sixty days, twelve posts, and an accepted proposal. This is what unlocks changing the graph.
Level 3 · trusted
20
Granted by a human. Unreachable automatically, and it is only 5× the bottom rung.

Corrections cost nothing and are capped at one per post. Withdrawal during the hold is refunded in full, unconditionally. Votes, reports and reading are free and always will be.

The hold

Ten minutes that belong to you

A submitted post waits ten minutes before it publishes. In that window only you can see it: edit it freely, or withdraw it and get every unit back. The hold is not moderation and nothing in it is reviewed. It does the one thing a budget cannot — it separates the decision to write from the decision to publish. Most posts a person regrets are regretted within ten minutes.

Corrections

A published post cannot be edited

It can carry exactly one correction, free, appended beneath the original with both timestamps. It reaches the people already reading that post and nobody else, which is exactly the audience a correction is for. A silently edited post is a record that lies about itself.

Never a score

Standing buys scope, never volume

No streaks, no counter beside a handle, nothing visible to anyone but the account itself. A public post budget would be a reputation display with a different name. The same ceiling applies to moderators and to the operator, because an unlimited voice dominates the room.

Refusals

“That is your week” is information

A refusal names the budget rather than scolding you to slow down. “Rate limited” teaches nothing; knowing you have spent your week, and when it resets, teaches the norm. The budget is shown at the composer before you write, with the price of the post updating live as a citation makes it cheaper.

VIIIOne standard

Everyone in this graph is held to the same rules.

Bourguiba, Ben Ali, Saied, Ennahda, the opposition, the army, the police, the business families, the unions, the EU, France, Italy, Algeria, the United States, Russia, the World Bank and the international NGOs are all recorded under identical rules. An atlas of Tunisian power containing only Tunisians reads as an indictment of Tunisians.

This is not neutrality for its own sake. It is the project's only real protection. Credibility that depends on people agreeing with the conclusions collapses the moment they don't. Credibility that depends on the evidence being accessible and reproducible does not.

A prison sentence is a documented fact; the allegations behind it and the criticism of the proceedings are contested, and both framings are stored with attribution rather than adjudicated here. Wealth is not corruption — the dataset distinguishes business families that predate a regime from ones that regime created, because collapsing that distinction is the most common error in popular accounts.

IXFor institutions and funders

The state's attempt at collective memory was sealed. This one cannot be.

Deep Tunisia belongs to no party, no government and no ideology. It is open source under version control, its exports are downloadable in full, and its methodology, corrections history and funding are published on the site rather than described in a brochure.

It is built so that it survives its authors. There is no database to seize, no account table to subpoena and no private archive to lose: roughly 1.3 MB of JSON ships with the page, and the canonical record is plain text anyone can fork.

The binding constraint is not data. It is verification capacity. Adding records is cheap and getting cheaper; a second pair of human eyes is neither. Support is spent against that, in this order.

Priority one

Human verification

The 131 records that name people and assert contested things about them, none of which has been independently checked. This is the number on the site that most needs to move, and it moves only with paid attention.

Priority two

Primary sources

Gazette appointment decrees give exact dates, which is what the entire timeline depends on. The gazette's full text sits behind a login and 22,395 documents; the workable design is to index rather than extract, then have a human read the one that matters.

Priority three

Human translation

Arabic and French, done by people. 1,900 translatable strings, 0 human-translated today. A public record that most of its public reads in translation-by-machine is only half a public record.

Priority four

Legal review

The exposure of publishing a named-entity graph in this jurisdiction, assessed properly rather than guessed at. It gates the public launch of the discussion layer.

Priority five

Infrastructure

Static hosting, archival snapshots of every cited URL, and mirrors. Deliberately modest: the architecture is chosen so that running it is cheap and losing it is hard.

Not on the list

An AI research layer

Designed and deliberately not built. The automatable parts are the easy parts, and building volume before verification capacity exists would produce exactly the failure this project was made to correct. When it comes, it must traverse the graph and cite records — never generate the answer.

No accounts No advertising No trackers No third-party fonts No language model in the data path No single power score No paywall

A nation that remembers cannot be manipulated as easily. A nation that understands cannot be ruled through confusion. A nation that knows itself is far more difficult to deceive.

That is why Deep Tunisia exists.