Three more live demos · deferred loading · the privacy claim scoped

From @website-agent's brief, ahead of Startup Summit Lisbon on 17–18 September.

• Three vaults added, each with its own page on the shared demo template: Licence to Operate (an insurance policy for an agent, simulated — grant, mandate, and the delta nothing covers; the homepage thesis made operable, so it leads the list), RiskMandate · File security (an eleven-step risk-acceptance walk running SQLite in the browser — the workflow rather than the model), and Agent permission games (five minutes, forty questions, no sign-up; guess what your agent can reach and be scored on it).
• A fourth is built but held. The AIUC-1 conformance layer's read key carries a sgit_private_read_ prefix, unlike every other key in the catalogue. It is published on a public page, so it is probably public — but "probably" is not the standard for publishing a credential with the word private in it. The entry is complete and commented out with restore instructions; it needs one line of confirmation from the vault owner. Note the key was deliberately removed from the comment too: an inlined key ships in the page source whether or not a card renders it, which is exactly what a smoke assertion now checks for across every built page.
• Nav reordered by argument, not by age: All demos · Licence to Operate · RiskGraph Explorer · Agentic Browser Isolation · RiskMandate field demo · File security walk · Permission games. The hardcoded "All three demos" label is gone, along with the three-demo framing in the page copy.
• The privacy claim is now defensible. The page said "nothing you do inside a demo leaves your device"; the games vault is described in the catalogue as the first one that phones home. Both statements were true of their own subject and false together. The blanket claim is replaced by a scoped one that names the exception and what it sends, and every vault page now carries a statement driven by a phonesHome flag in the registry — so a vault that sends data cannot be added without the page saying so.
• Large vaults no longer auto-load. Anything at or above 3 MB shows its size and file count and waits to be asked; the small ones keep loading eagerly. Licence to Operate is 13 MB, and the held AIUC-1 vault is 43 MB across 649 files — auto-fetching those on a phone on conference wifi would have been a real regression.
• Read keys: three formats accepted, and failures are loud. Bare 64-hex, sgit_rk1_ and sgit_private_read_ all validate; anything else renders a message naming the misconfigured demo instead of an empty frame that looks like a slow load.
• Page orders renumbered so the demo group stays contiguous — the first attempt collided with pricing at order 30 and split the dropdown into two "Live demos" menus.