guestgraph.io
The site for GuestGraph — the open-source guest identity graph for hospitality.
Live: https://guestgraph.io
One repository serves the whole domain. It was two — the talks had their own — and the split cost more than it saved: the talks index copies this site's shell, header and footer, so every nav change had to land in both repositories in the same breath, with no CI on either side able to see the seam. They were merged, history and all, in August 2026.
The repository is named guestgraph.github.io because that makes it the organization's GitHub Pages site, which is what puts it on the custom domain in CNAME. Renaming it or removing CNAME takes the whole domain down, talks included.
A repository named talks in this organization would claim guestgraph.io/talks/ the moment its Pages were enabled — shadowing the folder in this repository, which is how the old split had to be unwound. Do not recreate one.
| Path | |
|---|
/ | The landing page. |
/talks/ | The talks index. |
/talks/intro/ | The introduction — narrated, German and English, with a PDF in each. |
/billing/ | How the hosted service will bill. One meter, and it is arrivals. |
/privacy/ | What this site collects, which is nothing. |
/problems/ | What each refusal type a GuestGraph service answers means, and what to do about it. |
/principles/ | GuestGraph's vision and values, rendered from model.json by build/pages.mjs. |
/processes/ | A board per process of the seats that own, run and approve each phase, and which of them an agent holds, rendered from model.json. |
/surfaces/ | Every place the model is published and what makes each, drawn as a lineage from model.json. |
/api/ | The two APIs, generated from the services' OpenAPI documents at pinned commits. |
/model/ | GuestGraph's own model, drawn on the stage from model.json, which is built from a pinned commit of guestgraph/mental-model. |
Contents
index.html — the landing page. Self-contained: even the fonts are served from fonts/.billing/index.html — how the hosted service will bill. One meter, and it is arrivals.privacy/index.html — what this site collects (nothing) and how guest data will be handled.talks/index.html — the talks index, carrying this site's chrome so a visitor crossing into
it meets no seam.talks/intro/ — the deck: index.html, audio/{en,de}/, both PDFs, and tts/generate.py,
which reads the deck's speaker notes as the single source for what is spoken.tokens.css, page.css, page.js, deck.css, deck.js — what @robertblust/design shares, written here by npm run design and never edited here; the pages link them.fonts/ — the self-hosted .woff2 files, and the only copy. Every page and the deck point
at them relatively, so the deck's relative links to tokens.css, deck.css and deck.js
still resolve under file:// too, even though a deck is no longer required to open that way.sitemap.xml — one flat list of every URL on the domain. It was an index pointing at a
second sitemap while the talks lived elsewhere; there is one list now.verify/check.mjs — the suite, covering every page in one run, and
verify/og-recipe.test.mjs, the share-card check's own tests.build/model.mjs, build/read.mjs and source.json — model.json, written from the commit of
guestgraph/mental-model that source.json pins, with the parser companygraph-meta-model
ships. npm run model rewrites it, npm run model:check fails when it is not what the pin
parses to, and CI runs the check. The pin is editorial, and npm run pin:check reports how far
it has fallen behind, beside the API pins. stage.js, stage.css, card.js and the vendored
d3 are the design package's stage group, which draws it.chat.js, chat.css, octicons.LICENSE.txt, mermaid.min.js and mermaid.LICENSE.txt — the
design package's chat group: the button at the foot of every prose page and the panel it
opens, answered by chat.guestgraph.io, whose cites and names open on . Each page
carries one script tag naming the endpoint, and says what leaves the browser once a
visitor presses send.
The mark
Three hollow nodes, one filled. The sources stay open because records are never consumed — they are kept exactly as they arrived. The profile is solid because it is a conclusion derived from them, not a row anybody edited. That is the product in one glyph, and it is the same figure the hero animates and the talk draws.
Editing
No build step. Open index.html, or serve it:
npm install # once, for Playwright
npm run serve # → http://localhost:8000
npm run verify # renders every page and asserts the DOM
npm run og:check # do the share cards still show their pages?
npm run test:og # the card check's own tests (node --test)
npm run og # re-renders every card after a visual change
npm run sitemap # date each sitemap URL from its page's last commit — run before committing a page
npm run sitemap:check # are those dates still what git says?
og:check needs no server and no browser — it re-derives each card's recipe and compares it with the og.sha committed beside it, which is why CI runs it before installing one. It does need npm ci first: the machinery lives in @robertblust/design, shared with blust.ch and companygraph.io. Commit each og.png with its og.sha, in the commit that moved the page.
What it says, and what it deliberately does not
The landing page opens on the title and the hook, then on the model's own vision and values, in a #vision and a #values section build/pages.mjs writes from model.json with @robertblust/design/render/home, each value's German name and never-line held to the same build/principles.de.json /principles/ reads. Its tiles send the visitor onward — to the chat, to the model or to the API — and the talk is reached from the nav rather than a button here; it is a better medium for what a visitor would ask next than a scrolling page of claims, and the six-minute talk is where that is answered.
That is also why it makes no claim about matching behavior, roadmap, or status. Those live where they are maintained — in the core repository and in docs/matching.md — so a change there cannot leave this page quietly wrong.
Billing
/billing/ is the one thing this site states in its own right rather than restating from elsewhere: the hosted service will bill on arrivals, one meter and nothing else, with ingestion, historical backfill, stored profiles and lookups free. Self-hosting stays free forever, because it is Apache 2.0 and pretending otherwise would cost more credibility than it earns.
It carries no prices and no bands. The model is the durable half; the numbers are the half that goes stale, and the hosted service is not open yet — which the page says out loud. That sentence is the difference between publishing an intention and advertising a product, and it stays until there is something to buy.
Privacy
/privacy/ says what this site collects, which is nothing: no cookies, no analytics, no third-party requests, no forms, fonts served from this origin. The only thing stored is the language choice, in the visitor's own browser. verify records every request the page makes and fails on any that leaves this origin, because that claim is the kind that can quietly stop being true.
The same page says how guest data will be handled once the hosted service exists — hotel as controller, GuestGraph as processor, revDSG and GDPR, a cloud not yet chosen and named there before the first record is processed. There is no imprint yet, and the page says why: nothing here can be bought. It arrives the day the billing page stops saying the service is not open — on a page of its own, because an imprint is not a privacy note.
License
CC BY 4.0 for everything written here: the pages, the talk and its narration, the share cards, and the scripts that build and check them. Use it, quote it, build on it; credit it. The faces under fonts/ are not written here and keep their own license, in a text beside each: they come from @robertblust/design, whose NOTICE names each one. The license grants no right to a name or a mark: GuestGraph and its mark stay the project's.
