Projects engage.re
Social Infrastructure In production since December 2025 Waitlist Sense Future

engage.re

A person can argue about homelessness on a large social platform for ten years. Nothing in that platform connects the argument to a person who acts on homelessness. Conversation is the product there, and attention is the revenue. engage.re connects a conversation to the action that follows it, and it records the connection. The same platform is the foundation under every system we build for a client.

Dec 2025
In production since this date
5
Database tables hold everything, and they never change
6
Interfaces, carrying 61 operations and 39 query types
57,267
Access grants issued in live production

What engage.re Is

engage.re is two things at once, and both are true of the same software.

It is a social platform where a conversation leads to a recorded action. It is also the platform on which we build client systems. Sense Future built it, and it has run in production since December 2025. Its sovereign contract has been live since 6 July 2026.

ESRE Media is the consultancy arm of Sense Future. We work in Enfield, London, and we build your system on this platform.

Conversation as Mechanism

A conversation on engage.re can produce a commitment, and a commitment is a record.

A person raises a problem. Other people respond. One response becomes a commitment to act, and the platform holds that commitment as data linked to the conversation that produced it.

Two properties follow. You can trace an outcome back to the discussion that caused it. You can also measure which discussions produce outcomes and which do not.

Connect with us about your project. Message on WhatsApp Replies within 24 hours

Discourse Quality, Not Popularity

engage.re has no likes. It has eight reactions, and each one carries a different weight.

Insightful
+2.0
Helpful
+1.8
Synergistic
+1.5
Novel
+1.4
Challenging
+1.2
Appreciate
+0.5
Off Topic
-0.5
Divisive
-2.0

Each reaction states what a contribution did to a conversation. The weights therefore measure contribution rather than volume.

A person who speaks once with the most useful input scores above a person who posts all day and adds nothing. A contribution that divides a discussion reduces a score, and no amount of activity raises it.

Safety in the Architecture

Three safety properties are structural on this platform, so no moderation policy is needed to hold them.

  • Every account has one identity. Identity is a key, so a person, an application and an agent all prove identity the same way.
  • A child or an AI account is supervised. The supervision link is data between the account and a named person, and the platform enforces it.
  • Supervision resists falsification. Neither the supervised account nor the supervisor can rewrite the record of what was supervised.

The third property is the one that gives the other two their value. A supervision record a supervisor can edit records a claim about the past.

The Record Nobody Can Change in Secret

Every action on the platform writes an event. Each event carries a hash of the event before it, and each entry is signed.

An alteration to one entry therefore breaks every entry after it, so the change is detectable. The log states what happened, rather than what somebody chose to leave in it.

This is the property that makes evidence worth having. A log whose rows an administrator can update carries no weight in an investigation. A hash-chained signed log carries weight because nobody can rewrite it, including us.

One Gate on All Access

One authorisation decision covers every crossing of a domain boundary. One place decides, so you can state the policy by reading one thing.

Most large systems hold their access decisions in hundreds of places. Each check made sense when a developer added it, and the set as a whole then holds no author. One production estate on this platform replaced 219 scattered checks with a single gate.

Permissions are capabilities rather than roles. Each grant names one action on one scope, and three rules apply to every grant.

  • A grant can narrow, and it can never widen. An account may pass on what it holds, or less, so privilege cannot grow through delegation.
  • A cancellation takes effect on the next call. No deployment is needed to stop an account acting.
  • Every use writes an event. The event joins the signed chain.

Live production has issued 57,267 of these grants.

Accounts and Sign-In

Identity is a key, and the platform stores no password. A person signs in by proving control of a key, so there is no password store to steal.

One model therefore covers every actor. Your staff, your applications and your AI agents all authenticate the same way, and each one is nameable in a log.

Personal Data, Erasure and Retention

Each record is encrypted separately, under a key you hold.

Three consequences follow, and each one answers a duty under UK data protection law.

  • Erasure is key destruction. Destroying a record's key destroys access to that record everywhere, including in a backup taken months ago.
  • Erasure writes an event. You can therefore demonstrate a deletion rather than assert one.
  • Retention is a property of a record. Each record states the rule that governs it, and a legal hold makes a record resist deletion.

A breach of the store yields ciphertext, and a lawful order to us produces ciphertext.

Messaging

Private messages are encrypted end to end. Sense Future cannot read them, and the platform holds no mechanism that would allow it.

The Shared Dictionary

The platform holds the meaning of every record type in one shared dictionary, and it holds that meaning as data.

An application declares its vocabulary before it writes anything. Every record type, every field and every relationship. The server then refuses any write outside that declaration.

Four properties follow.

  • The description cannot drift. Data cannot exist in a form the dictionary does not describe, so no separate document needs maintenance.
  • Two applications agree without integration. Every concept holds a permanent identifier, generated deterministically, so two systems mean the same thing with no synchronisation between them.
  • A definition survives a rename. A label can change and the identifier does not, so your history stays intact.
  • A wrong meaning fails at the write. The failure appears at the moment of the mistake, rather than in a report months later.

Independent research measured what recorded meaning does for a language model. Three frontier models answered 99 business questions with the schema alone and scored 45.5% to 50.5%. With a short document describing the measures, all three reached 67.7% to 68.7%, and the three then became statistically indistinguishable from each other.

The Fixed Foundation

Five database tables hold everything, and those five never change.

A new record type adds an entry to the dictionary. No table appears, and no migration follows. Your new service line, your merged teams and your new funder requirement are therefore configuration rather than development.

A system built this way does not become legacy in the usual sense. Legacy accumulates in the shape of a database. Where the shape never changes, that accumulation has nowhere to gather.

Interfaces and Performance

Six interfaces carry everything, and they hold 61 operations and 39 query types. They work over JSON, from any language.

Two performance figures matter to a user. A read inside a domain returns under 200 milliseconds at the 95th percentile. A change reaches a reported figure within 60 seconds.

How We Verify It

Four practices apply to every change, and each one produces evidence you can inspect.

  1. A stated expectation. The behaviour is written down before the code exists.
  2. An automated check per expectation. A test fails when the behaviour changes.
  3. A named human review. A person read the change and accepted it.
  4. Monitoring after release. A regression is detectable rather than reported by a user.

The declared vocabulary does part of this work by itself. An expectation held as a declaration is machine-checkable, and the server enforces it on every write.

Where a System Runs, and How It Leaves

Three deployment tiers are available. We host it, you host it, or you run it on your own infrastructure.

The self-host route is real rather than nominal. Sense Future publishes a conformance package at engage.re/conformance, at version 2.0.0, which states the behaviour a conforming implementation must show. A third party can therefore build a replacement and test it.

Your exit is a design property rather than a promise. Your meaning is data, so an export carries the definitions with the records. You hold your keys, so your access does not depend on our cooperation. The specification is published, so a conforming implementation is possible without us.

Where the Architecture Came From

Sense Future built engage.re to solve one problem. A conversation and the action that follows it must sit in the same record, under the same meaning, with the same accountability.

The properties that solved that problem turned out to solve a wider one. An organisation faces the same requirement as a conversation. It holds records in several systems, each with its own idea of a person, and it cannot trace an outcome to a cause.

Sense Future sets out the wider thinking in Machines of Human Grace.

A New Kind of Bespoke

Bespoke software normally carries three costs. It takes a long time. It becomes legacy. It leaves you dependent on the people who built it.

This platform removes each of those costs by construction.

  • The foundation exists already. Identity, access, encryption, retention, audit and the dictionary arrive on your first day.
  • The shape never changes. A new requirement is a dictionary entry, so there is no migration to accumulate.
  • You can leave. A published conformance package, your own keys, and your definitions held as data.

Your system can therefore be as specific to your process as you need, without the usual consequences.

What a System on engage.re Inherits

Your system arrives with these properties on its first day, and none of them is a feature we add later.

  • Your vocabulary is declared and enforced. Your definitions live in your records, not in a document somebody maintains.
  • One identity model. Your people, your applications and your agents all prove identity the same way.
  • One gate. One authorisation decision covers every domain crossing, with narrow grants that cancel on the next call.
  • A signed event log. Every access is an event, and nobody can rewrite the chain.
  • Per-record encryption, with your keys. Erasure by key destruction, retention classes, and enforced legal hold.
  • Current figures. A change reaches a reported number within 60 seconds.
  • Six interfaces. JSON, from any language, described in a published conformance package.
  • No migrations. A new record type is a dictionary entry.

On top of that sits your own system. Your record types, workflows, screens and obligations, built in the shared vocabulary, at whatever weight your sector needs.

Tech Stack

React 18 · TypeScript · Vite · PostgreSQL · Node.js · Express · WebSocket · End-to-end encryption · engage.re Graph API

Built on the Same Foundation

Every client system we build runs on the graph architecture that engage.re produced.

Get in Touch