The thing of it is, we have two kinds of notes:

1. This layer of the system will handle broken/missing position issues.
2. The client layer of the system will ensure that a parent is provided.
3. The notes retrieved via the CTE have information and parenting and
   location.
4. Notes put *into* the system have parent and location provided
   separately.
5. Clients do not specify the ids of notes put into the system.
6. Retrieval by slug must test for is-a-box.