Deep Tunisia Explore the atlas

An open public record  ·  Tunisia  ·  1956 to 2026

Where memory fades, power escapes.

Deep Tunisia is a public record of the people, institutions, companies and networks that shape a nation, updated as the evidence changes. Every claim traces to its source. Every conclusion stays open to challenge. Nothing here asks your permission to be read.

This page is the argument. The atlas is the instrument. Chronicle, Network, Map & World, 1956 to 2026, every claim sourced. Opens instantly. No account, no tracker.

0
People
0
Offices held
0
Institutions
0
Relationships
0
Sources
0
Events
0
Years

DT Research

Indexes

IMemory

Every society is built on memory.

Memory is made of records. Records are made of information.

For centuries the excuse was scarcity. Records were incomplete, decisions were taken behind closed doors, and power was hard to understand and harder to challenge. That excuse is gone. More information is produced in a single day than whole generations once created in a lifetime.

And yet understanding is more fragmented than it has ever been. Facts scatter. Records disappear. Connections stay invisible. Public memory fades, and wherever memory fades, power escapes accountability.

Deep Tunisia exists so that Tunisia remembers. Seventy years of appointments, institutions, ruptures and relationships, held in one place, in the open, in a form anyone can audit.

Recorded offices held, per year, 1956 to 2026. Drawn from 3056 tenures in data/positions.yaml. None is dropped for an uncertain date. The uncertainty is drawn rather than hidden. The rise after 2011 is partly the state opening up and partly this record getting better at recent decades. The graph does not pretend to know how much of each.
IIWhy a graph

A single appointment means little until it is connected to an institution.

The website is a window. The knowledge graph is the project.

A company means little until its ownership is understood. A decision means little until it is placed in the era that produced it. Deep Tunisia exists to connect those fragments into a public understanding that no single document can provide.

The join that makes this possible is deliberately unglamorous. A position is a role, a holder, a start and an end. It is an interval, not a fact about a person. You cannot ask who held power in 1994 from a list of people. You can only ask it from a set of intervals.

Dates are ranges, never points. Each one has an earliest and latest start, an earliest and latest end, and a status. The timeline draws the documented core solid and the uncertain envelope hatched, so a span nobody has confirmed can never quietly pass for one that has been.

Successions are derived, not asserted. They are computed from the intervals themselves, so a hole in the record shows up as a hole. There are currently 126 succession gaps and 49 overlapping tenures, and all of them are published.

IIIHow the knowledge is collected

Every claim is traceable. Every conclusion is challengeable.

No language model writes claims into this graph. Knowledge enters through one door, in a fixed order, and the build refuses anything that arrives out of order. Models draft translations and research candidates, flagged and gated. See how this was made.

An inference is never allowed to become a fact. That is the rule that matters most. Every claim is filed under one of four bases, and no two of them are ever drawn the same way.

01

The citation comes first

A source is added before the claim it supports, and tiered 1 to 5. Tier 1 is a decree or gazette entry. Tier 5 is a lead that needs corroborating and is never sufficient on its own. The current library is 2564 sources: 1004 at tier 1, 242 at tier 2, 797 at tier 3, 443 at tier 4, 78 at tier 5.

02

The claim is attached to it

Nothing is entered free-floating. A position, a relationship or an event each references the source ids that hold it up. 71 of the 2564 sources currently back no claim at all. They are kept as staged reading and excluded from the published count, because a bibliography entry that holds nothing up is not evidence.

03

The basis is declared, and it changes how it looks

Documented, reported, inferred, unsubstantiated. The basis describes the claim, not its dates. "X held this post" and "between these dates" are separate claims, and they routinely have different standing, so each carries its own flag. A reader can raise the evidence floor at any time and watch weaker claims leave the map.

04

The build refuses the rest

An inferred claim must state its reasoning and what would falsify it. A grade C or D claim must name who is making it. These are not lint warnings. They fail the build. There is no way to slip an unattributed insinuation into this dataset.

Hard failure, not a warning
05

Change is a record too

The data is plain text under version control, so every factual change is a dated, attributable diff. That history is published in full and generated, not curated. Nobody gets to decide which corrections were flattering enough to appear.

The four bases, and the strokes that carry them

Documented

An official record, decree or gazette entry states it.

2237 claims  ·  solid
Reported

Credible publications report it, with attribution.

3493 claims  ·  dashed
Inferred

Nobody states it. It is reasoned from documented structure, and it must publish what would prove it wrong.

70 claims  ·  dotted
Unsubstantiated

It circulates without reliable evidence. Recorded, attributed, and off by default.

15 claims  ·  dot-dash

Unsubstantiated claims are recorded, not deleted. Deleting a widely held claim does not make it go away. It only removes the map's ability to show anyone why the popular account is wrong. Several on record here are contradicted by this project's own data. The claim that the army secretly governs Tunisia sits directly beside the record of the tri-service command going unfilled for two decades.

Raise the floor. Watch the map dissolve.

Below is a real slice of the graph. It shows the 46 most-connected people and the relationships recorded between them, each with its actual basis. Drag the floor upward and the weaker evidence leaves. This is the most informative interaction on the site. Most projects would never build it, because it shows how much of the picture rests on something short of proof.

Network · evidence floor 46 people · fixed lane per layer
Show claims resting on

Gold edges cross between layers, a security figure tied to an economic one, for instance. Those are the connections the project most wants you to check. They are also the ones most likely to thin out when you raise the floor. A high connection count is not evidence of wrongdoing, coordination or hidden control. It records that this dataset knows about a lot of links. Note what the last step costs. Demanding an official record leaves fewer than half the connections standing and strands 31 of these 46 people with nothing attached to them at all. Those are the best-documented people in the entire graph.

IVWhat we do not know

A record that publishes only its strengths is advertising.

The stated architecture of this project is that machines propose and humans verify. Almost nothing has yet been through a second pair of eyes. The honest number is published on the site rather than kept in a drawer, because that is the only way the commitment means anything.

The worse number is the one that matters. All 52 review notes so far come from the compilation and research passes, and none records an independent check. Of the 23 unsubstantiated claims, the 2860 that name a source, and the 85 inferences, none of the records most capable of harming a named person has had an independent review. That is the highest-value work outstanding. It is why funding this project buys verification before anything else.

52 / 8764 records carry a human review note. The risk flags overlap, so the breakdown cannot be read as parts of one whole, and no note yet records an independent check.
236 records are awaiting a primary source. They currently rest on secondary reporting, and they are listed individually rather than summarised.
43 · 2 succession gaps and overlapping tenures, surfaced automatically by the build. A hole in the chronology renders as a hole.
78 unresolved source contradictions. Where outlets disagree, both versions are stored with the outlet that holds each. In one case five different sentence lengths circulated for overlapping proceedings, and the dataset declines to guess how many cases there were.
12 human-translated entries of 8,350 translatable strings. The interface is trilingual. Long-form analytical prose is deliberately not machine-translated, because a machine-translated epistemology page would undermine the point of having one.
ANRSD defence intelligence has no primary sourcing at all. Statute, appointment date and current status are all unestablished. It is the largest hole in the security map, and it is named on the front page of the evidence view.

This is not a website exposing a deep state. That framing presupposes its own conclusion, and a project that begins from a conclusion cannot be trusted to test it.

The narrower question can be answered. It asks which institutions, individuals and economic groups retain influence when the formal regime changes, and which relationships are genuinely continuous rather than reconstructed after each rupture. Six hypotheses are published, each with its falsifiers attached. Two of them currently come out badly, including the strong version of the deep state thesis. You can watch the data refuse the question it was built to ask.

VThe Agora

Information alone does not create a free society.

A nation also needs a place where its people can think together. So Deep Tunisia is designed to be more than an archive. It is Tunisia's digital Agora, built and not yet open. It is not a place to replace institutions. It is a place where citizens can understand them, question them, and improve the public record together.

Every other forum differs from this one on a single design decision. The conversation is anchored to the record, and the record stays in view. You are not transported to a generic thread and expected to remember what you were discussing. The entity's trajectory, offices, documented connections and sources stay beside you while you argue about them.

Elsewhere you get an opinion. Here the discussion has an object. If you think the object is wrong, there is a way of saying so that ends in the graph changing.

01

Discuss

"Let's talk about this."

Anchored to a specific record. The entity stays on screen while you argue about it.

02

Propose

"I think the record is wrong."

A change to the graph, carrying a named source. A human reviews it, and it fails the build if the claim arrives ungraded.

03

Report

"Something here needs attention."

A human moderation path. Removed posts keep their place, their thread, their timestamp and the reason. The body is nulled, and the removal stays visible.

Not built 04

Petition

"Enough of us want something."

Collective demand, where the count means something because each signature is one verified person. The project still cannot tell you who they are.

VITwelve words

No name. No email. No password. Nothing to seize.

Citizens should never be forced to choose between participation and personal safety. So there is no account here. Your identity is a keypair. The only thing that can rebuild it is twelve words generated on your device.

The words are generated, never chosen. That is the decision everything else depends on. A public key is public, so anyone can attack every identity on the site at once, offline, with no rate limit to hide behind. A phrase a human invents carries perhaps 20 to 30 bits of real entropy, and it falls in hours. Twelve words drawn from a 2,048-word list carry 128 bits. It does not fall.

They are shown once. They are never transmitted, never stored, and never permitted into a URL. That is why recovery can never be a link someone emails you. The same twelve words rebuild the same identity on any device, forever. There is no recovery process, because there is nothing on any server to recover from.

2,048 words  ·  12 drawn  ·  128 bits
Drawn in your browser with crypto.getRandomValues, from the real BIP-39 list. Illustration only. This is not an identity.
The honest cost

Durability is what deanonymises people

A persistent pseudonym leaks through its own writing: posting hours, register, vocabulary, which of three languages, which people it cares about. Cryptography does nothing whatsoever about that. Recovery makes an identity more persistent, so it is opt-in, explained at the moment of choosing, and never the default.

The default

A key that dies with your browser

When the Agora opens, a post will start from a key your browser made. That key is held where it cannot be exported, and it vanishes when the browser is cleared. Burn identities, used once and discarded, will stay one click away. They will not be hidden away once recovery exists.

The threat model

Stated plainly, not promised

We cannot see who you are. But this runs on ordinary hosting, and like every host, the service receives your connection. If you post under one identity for a long time, how you write can identify you, however good the cryptography is. Every layer that cannot hold is named on the page rather than hidden in fine print.

VIIThe economy of speech

Four posts a week. Specified, not wired.

An uncited assertion is a bill sent to the reader. A cited one comes with its own receipt.

Every other rate limit in this project exists to stop an attacker. As specified, this one would not. It would exist because a post that took forty seconds and a post that took forty minutes currently render identically. This whole project is an argument that things of different standing must never look the same. Specified, not yet wired. Wiring is deferred pending counsel review.

As specified, scarcity would be the instrument. A person with two posts a week would spend them on something they had thought about, because they could feel the cost. A person with sixty an hour reacts. No amount of guidance in the composer produces the first behaviour. As specified, a budget would produce it without saying a word. Specified, not yet wired.

And the budget, as specified, would fall on assertion, not on evidence. As specified, a post carrying a source that resolves costs half of what the same post costs without one. Not because cited posts are true, but because the cost of a post should track how much work it hands to everyone else. Specified, not wired. Wiring is deferred pending counsel review.

Rolling seven days, never a calendar day
Level 0, new, as specified
4
As specified, on minting a key: two uncited posts, or one thread, or four cited ones. Not yet wired.
Level 1, basic, as specified
8
As specified: seven days and three posts. That would be reached around day eleven. Not yet wired.
Level 2, established, as specified
14
As specified: sixty days, twelve posts, and an accepted proposal. This is what would unlock changing the graph. Not yet wired.
Level 3, trusted, as specified
20
As specified, granted by a human. Unreachable automatically. It is only 5× the bottom rung. Not yet wired.

As specified, corrections would cost nothing and be capped at one per post. Withdrawal during the hold would be refunded in full, unconditionally. Votes, reports and reading would be free, and always will be. Specified, not yet wired.

The hold. Specified, not yet wired.

Ten minutes that would belong to you

As specified, a submitted post would wait ten minutes before it publishes. In that window only you could see it. You could edit it freely, or withdraw it and get every unit back. The hold would not be moderation, and nothing in it would be reviewed. It would do the one thing a budget cannot. It would separate the decision to write from the decision to publish. Most posts a person regrets are regretted within ten minutes. Wiring is deferred pending counsel review.

Corrections

As specified, a published post could not be edited

As specified, it could carry exactly one correction, free, appended beneath the original with both timestamps. It would reach the people already reading that post and nobody else, which is exactly the audience a correction is for. A silently edited post is a record that lies about itself. Specified, not yet wired.

Never a score

Standing buys scope, never volume

No streaks, no counter beside a handle, nothing visible to anyone but the account itself. A public post budget would be a reputation display under a different name. As specified, the same ceiling would apply to moderators and to the operator, because an unlimited voice dominates the room. Specified, not yet wired.

Refusals

“That is your week” is information

As specified, a refusal would name the budget rather than scold you to slow down. "Rate limited" teaches nothing. Knowing you have spent your week, and when it resets, teaches the norm. As specified, the budget would show at the composer before you write, and the price of the post would update live as a citation makes it cheaper. Specified, not yet wired.

VIIIOne standard

Everyone in this graph is held to the same rules.

Bourguiba, Ben Ali, Saied, Ennahda, the opposition, the army, the police, the business families, the unions, the EU, France, Italy, Algeria, the United States, Russia, the World Bank and the international NGOs are all recorded under identical rules. An atlas of Tunisian power containing only Tunisians reads as an indictment of Tunisians.

This is not neutrality for its own sake. It is the project's only real protection. Credibility that depends on people agreeing with the conclusions collapses the moment they don't. Credibility that depends on the evidence being accessible and reproducible does not.

A prison sentence is a documented fact. The allegations behind it, and the criticism of the proceedings, are contested. Both framings are stored with attribution rather than adjudicated here. Wealth is not corruption. The dataset distinguishes business families that predate a regime from ones that regime created, because collapsing that distinction is the most common error in popular accounts.

IXFor institutions and funders

The state's attempt at collective memory was sealed. This one cannot be.

Deep Tunisia belongs to no party, no government and no ideology. It is open source under version control. Its exports are downloadable in full. Its methodology, corrections history and funding are published on the site rather than described in a brochure.

It is built to survive its authors. There is no database to seize, no account table to subpoena and no private archive to lose. Roughly 25.3 MB of data ships with the page, and the canonical record is plain text that anyone can fork.

The binding constraint is not data. It is verification capacity. Adding records is cheap and getting cheaper. A second pair of human eyes is neither. Support is spent against that, in this order.

Priority one

Human verification

The 1844 recorded relationships that rest on something less than an official document and touch a named person. None has been independently checked. This is the number on the site that most needs to move, and it moves only with paid attention.

Priority two

Primary sources

Gazette appointment decrees give exact dates, which is what the entire timeline depends on. The gazette's full text sits behind a login, across 22,395 documents. The workable design is to index rather than extract, then have a human read the one that matters.

Priority three

Human translation

Arabic and French, done by people. 8,350 translatable strings, 12 human-translated today. A public record that most of its public reads in machine translation is only half a public record.

Priority four

Legal review

The exposure of publishing a named-entity graph in this jurisdiction, assessed properly rather than guessed at. It gates the public launch of the discussion layer.

Priority five

Infrastructure

Static hosting, archival snapshots of every cited URL, and mirrors. Deliberately modest. The architecture is chosen so that running it is cheap and losing it is hard.

Not on the list

An AI research layer

Designed and deliberately not built. The automatable parts are the easy parts, and building volume before verification capacity exists would produce exactly the failure this project was made to correct. When it comes, it must traverse the graph and cite records. It must never generate the answer.

No accounts No advertising No trackers No third-party fonts No language model in the data path No single power score No paywall

A nation that remembers cannot be manipulated as easily. A nation that understands cannot be ruled through confusion. A nation that knows itself is far more difficult to deceive.

That is why Deep Tunisia exists.