06. House rules

These are the rules the sgit network's sites already work under. They apply to every page the newsroom publishes.

Secrets

Never publish a vault key or any write credential. A vault key looks like sgit_private_vault_...; anything matching sgit_private_, sgit_vk1_, or 24 lowercase alphanumerics, a colon, then 4 to 24 more ([a-z0-9]{24}:[a-z0-9]{4,24}) must never appear in the site or the repo. The validator must refuse it.
Read keys may be published, deliberately. A sgit_public_read_<hex>:<vault id> key that a source site already publishes may be quoted, because the site published it on purpose.
Published examples are not secrets. Some sources quote documented example credentials, for instance sg-compute.sgit.ai's security audit quotes AWS's AKIAIOSFODNN7EXAMPLE. The validator should allow a short, named list of such examples, not weaken the pattern.
Nothing from private channels. The sources are the public sites. Do not add anything that was not published.

Only what the sources say. Every factual sentence links to the page it came from. If a source is ambiguous, say so.
Shipped and proposed are different words. Most of the network publishes designs and proposals beside things that run. Keep the distinction the source makes, and never upgrade a proposal to a product.
Quote exactly. A quotation is the source's words, character for character, or it is a paraphrase and has no quotation marks.
Corrections above the mistake. When the newsroom gets something wrong, the correction is a new dated note at the top of the page, naming what was wrong and how it was caught. The old text stays, struck through or marked.
Compute, don't type. Any count on a page (pages changed, releases, vaults) is computed by the build from the data.

Roles and sites, not people. Write about what a site or a desk did. The founder may be named as editor of record.
They/them for anyone whose pronouns are not stated in a source.
No one who appears only in a private conversation. If a source mentions a meeting, write about the idea, not the person.

British English. Plain words. Short sentences.
No em-dashes in prose (sgit.ai removed them on 20 September 2026; see its version log).
No model names or identifiers in the site or the repo.