sgit.ai opens a partnerships section, with a proposal to UK Sovereign AI

Site	Releases	New pages
riskmandate.ai	9	0
sgit.ai	5	3

sgit.ai spent the afternoon making a business case in public: a new partnerships section, and a first proposal that names riskmandate.ai as a party. It also published the first business plan written for somebody else to run, and rebuilt its DSIT toolkit page. riskmandate.ai shipped nine releases, two of them because Web Summit's forms asked for things the site did not have, and seven whose notes are still placeholders.

Lead: sgit.ai opens a partnerships section, with a proposal to UK Sovereign AI

sgit.ai added a partnerships section ↗ with a stated method: start with what the other side is trying to do, public material only, evidence rather than pitch, the fit stated precisely, and what is not public marked (version log, v0.5.7 ↗). Its first case is a proposed partnership between sgit.ai, RiskMandate.ai and UK Sovereign AI ↗, the government-backed venture fund.

The page reads the fund's own priorities and maps two of them to vaults anyone can open: its trust, safety and assurance frontier, and a procurement challenge area on "safe AI agent adoption for cybersecurity professionals" (the proposal ↗). It proposes three partnership shapes and says it would start with a procurement prototype built on riskmandate.ai's licence-to-operate model and Agent Behaviour Policy (the proposal ↗). This is a proposal, and the page is firm about it: "There has been no conversation with the fund; this is the case we would make if there were one." (the proposal ↗).

Two more releases followed within the hour (git log). v0.5.8 added the founder's own account of UK anchoring: thirty years in the UK, one UK exit, and a UK-registered company as the commercial vehicle behind both sites (version log ↗). It also argued that there is no sovereign AI without open source (version log ↗). The same facts went into a row on the About the author ↗ page published the day before (version log ↗). v0.5.9 changed the title, because "A reader landing from a forwarded link had no way to know this was a proposal from sgit.ai's side." (version log ↗).

The page lists what it cannot show, including that sgit holds no compliance certification and that "Of five frontiers we serve one directly and touch one other." (the proposal ↗). The longer piece is at sgit.ai makes its case to UK Sovereign AI in public.

Also today

A business plan written to be taken, and two CLI bugs found on the way

sgit.ai published Agent as Webmaster ↗, a business plan in a vault for giving small businesses a website they change by asking an AI agent. The page says it "is written to be taken, not admired" (the vault page ↗). Its prices, from £300 setup to £200 a month, are marked "starting hypotheses", and its app declares no permissions (the vault page ↗). The startups section gained "Business plans to build on" (version log, v0.6.0 ↗, startups ↗). Publishing it found two CLI transport bugs: a fresh vault's 404 flipped push to the read-only static transport, and five commands ignored --transport (version log ↗). The log says both were "fixed in the CLI repository with a pinning test" (version log ↗).

The DSIT toolkit page now starts with the reader's decision

sgit.ai rebuilt its DSIT AI Risk Toolkit page ↗ from a brief, because the vault had moved on since 20 September and the page had not (version log, v0.6.1 ↗). It now opens on a use-case journey and an eight-slide deck read live from the vault, with a PDF download (the page ↗). A status table keeps the journey, the reference edition and two graphs' figures apart instead of merging them (version log ↗). The deck viewer gained keyboard navigation and a count of screenshots that could not be read (version log ↗). The page says it is "not an official DSIT service, assessment or certification" (the page ↗).

Web Summit's forms rewrite riskmandate.ai's brand page

Web Summit's exhibition-board form asks for an EPS logo, so riskmandate.ai v1.29.1 added four EPS files with the lettering outlined, written by a script and proofed by rasterising them back (release note ↗, brand ↗). In v1.29.2 the exhibitor description field rejected the 180-character description that the site had called the shortest it should use (release note ↗). The note is frank: "A rule this site wrote about its own copy lost to a form that counts." (release note ↗). It added 110- and 80-character versions that drop the company name and keep the claim (release note ↗). v1.29.4 is titled "A 396-character version, because the profile field caps at 400" (version record ↗).

Seven riskmandate.ai releases, and no notes yet

Seven of the day's riskmandate.ai releases have a title in the version record ↗ and a note that is still a placeholder. Each note reads "TODO: what changed, and why." with an empty bullet (v1.30.0 note ↗). The titles promise a privacy page "and a test that keeps it honest", and a deck "built from the site rather than written beside it" (version record ↗). The privacy page ↗ as snapshotted on 24 September says the site runs no analytics and sets no cookies, and carries "Last reviewed 24 September 2026", so it may differ from what shipped on the 23rd (privacy ↗).

Everything else, by site

sgit.ai

riskmandate.ai

v1.29.1: the logo as EPS, for a printer who asks for one ↗ (above).
v1.29.2: two shorter descriptions, because a form refused the shortest one ↗ (above).
v1.29.3: the lead's own line, and the verb pair it turns on ↗ (note not yet written).
v1.29.4: a 396-character version, because the profile field caps at 400 ↗ (note not yet written).
v1.29.5: the ladder in order ↗ (note not yet written).
v1.30.0: a privacy page, and a test that keeps it honest ↗ (note not yet written).
v1.30.1: a deck, built from the site rather than written beside it ↗ (note not yet written).
v1.31.0: the words that start a conversation, and the page that has to back them ↗ (note not yet written).
v1.31.1: the deck carries the direction, not just the day ↗ (note not yet written).

What changed on 2026-09-23: 17 changes