Welcome to the Canonical Timeline user guide. This documentation covers everything you need to work with investigations, timelines, events, claims, sources, entities, and relationships.
| Section | Description |
|---|---|
| Core Concepts | The six-layer data model: investigations, timelines, events, claims, sources, entities |
| Working with Investigations | Creating investigations, navigating lenses (Overview, Timeline, Evidence, Knowledge, Geography, Analytics, Background) |
| Workspace | The investigation index — browse, filter, star, and create investigations |
| Working with Timelines | Creating timelines, browsing events, filtering, and exporting within investigations |
| Working with Events | Creating events, setting time precision, linking entities, and keyboard navigation |
| Claims and Sources | Creating claims with source attribution, confidence scores, and source management |
| Entities and Relationships | Creating entities, managing relationships, entity graphs, and entity reconciliation |
| Keyboard Shortcuts | Complete shortcut reference — global, page, and component scopes |
| File Uploads | Uploading files to sources, checksum deduplication, and quota management |
| Search and Export | Full-text search, CSV/JSON/Markdown export, and entity graph PNG export |
| Revision History | Reading the audit log, before/after snapshots, and soft-delete |
| Account and Settings | Account management, members, invitations, API keys, subscription tiers, and the Developer API page |
This section walks you through your first session — from login to a completed investigation.
Navigate to /register to create an account. You will need:
After registration, check your email for a verification code. Enter it at /verify to activate your account.
If you were invited by an existing account, use the invitation link provided to you. Invitation-based registration auto-assigns you to that account with the role specified by the inviter.
After verification, log in at /login. You will land on the workspace page (the investigation index), which shows a list of investigations in your account.
The sidebar is divided into five sections:
Workspace
Tools
Management
Account
Documentation
If your account has demo datasets enabled, you will see pre-populated investigations like "Apollo 11 Mission," "Watergate Investigation," or "Operation Ghost Courier." These are read-only samples that let you explore the application before creating your own data.
An investigation is the top-level container — it holds a timeline, events, claims, sources, entities, and relationships. To create one:
- Title: Give your investigation a descriptive name (e.g., "Acme Corp Investigation").
- Status: Choose the current phase:
- draft — Planning and initial setup
- active — Investigation is in progress
- paused — Temporarily on hold
- resolved — Investigation is complete
- archived — Retired for reference
- Summary: An optional description of what this investigation covers.
You will be taken to the investigation detail page, which opens to the Overview lens.
Each investigation has seven lenses, accessible via tabs below the header:
| Lens | Purpose |
|---|---|
| Overview | Health scores, metric cards, recent activity, key entities, top sources |
| Timeline | Full event sequence with filters, search, confidence slider, and inline editing |
| Evidence | Claims and sources for this investigation — filter, review, and manage |
| Knowledge | Entities and relationships — explore the entity graph and connection network |
| Geography | Interactive map showing event locations across the investigation |
| Analytics | Health scores, gaps (unsourced events, orphan entities), and trends over time |
| Background | Notes, open questions, and resolved questions for the investigation |
From the Timeline lens:
- Title: A concise name for the event (e.g., "Board meeting at HQ").
- Canonical Time: The date and time of the event. You can be specific or approximate.
- Time Precision: How certain you are about the time:
- exact — You know the precise time
- estimated_date_time — Approximate but you have a specific estimate
- exact_time_period_range — Known range with certain bounds
- estimated_time_period_range — Estimated range
- Description: Context and details about the event.
- Status: The verification status (e.g., reported, confirmed, alleged).
The event appears as a card in the timeline sequence.
Claims are factual assertions attributed to sources. Every claim must cite a source.
- Claim Text: The factual assertion (e.g., "The CEO was present at the board meeting").
- Source: Search for and select an existing source, or create a new one inline.
- Status: The current verification grade:
- rumored — Unverified, heard through informal channels
- reported — Reported but not yet assessed
- unverifiable — Cannot be verified
- verifiable — Can be verified based on available evidence
- fact — Verified as accurate
- Confidence: A score from 0 to 100 indicating how confident you are in this claim.
If you need to create a source before adding a claim:
- Title: The source document's name.
- Source Type: Choose from 175+ types (e.g., news_article, court_document, intelligence_report).
- Author: Who created or published the source.
- Publication Date: When it was published.
- URL: A link to the source if it exists online.
You can return to the event and assign claims to this source.
Entities represent the people, organizations, and objects involved in your investigation.
- Canonical Name: The full, official name (e.g., "John D. Rockefeller").
- Aliases: Alternative names they are known by.
- Entity Type: Choose from 170+ types (e.g., person, corporation, government_agency).
Entities can also be linked to each other via relationships (e.g., "works for," "owns," "reports to").
From the Knowledge lens, explore the entity graph to see the full relationship network.
Navigate to the Review Queue (sidebar > Tools > Review Queue). The review queue surfaces gaps across all investigations:
Work through these queues to ensure every event has sourced claims and every claim has been evaluated.
For investigation-specific analytics, use the Analytics lens to view health scores, gaps, and trends scoped to a single investigation.
From the Timeline lens, click CSV, JSON, or Markdown in the toolbar to download a structured export. These exports include events, claims, sources, and entity references — suitable for sharing, archiving, or feeding into other tools.
<kbd> tags indicate keyboard keys and shortcuts.public/screenshots/ and may be referred to as screenshot-name.png throughout the guide.