## Three more live demos · deferred loading · the privacy claim scoped

From @website-agent's brief, ahead of Startup Summit Lisbon on 17–18 September.

- **Three vaults added**, each with its own page on the shared demo template:
  **Licence to Operate** (an insurance policy for an agent, simulated — grant, mandate, and the
  delta nothing covers; the homepage thesis made operable, so it leads the list),
  **RiskMandate · File security** (an eleven-step risk-acceptance walk running SQLite in the
  browser — the workflow rather than the model), and **Agent permission games** (five minutes,
  forty questions, no sign-up; guess what your agent can reach and be scored on it).
- **A fourth is built but held.** The AIUC-1 conformance layer's read key carries a
  `sgit_private_read_` prefix, unlike every other key in the catalogue. It is published on a public
  page, so it is *probably* public — but "probably" is not the standard for publishing a credential
  with the word private in it. The entry is complete and commented out with restore instructions;
  it needs one line of confirmation from the vault owner. Note the key was deliberately removed from
  the comment too: an inlined key ships in the page source whether or not a card renders it, which
  is exactly what a smoke assertion now checks for across every built page.
- **Nav reordered by argument, not by age**: All demos · Licence to Operate · RiskGraph Explorer ·
  Agentic Browser Isolation · RiskMandate field demo · File security walk · Permission games. The
  hardcoded "All three demos" label is gone, along with the three-demo framing in the page copy.
- **The privacy claim is now defensible.** The page said "nothing you do inside a demo leaves your
  device"; the games vault is described in the catalogue as the first one that phones home. Both
  statements were true of their own subject and false together. The blanket claim is replaced by a
  scoped one that names the exception and what it sends, and every vault page now carries a
  statement driven by a `phonesHome` flag in the registry — so a vault that sends data cannot be
  added without the page saying so.
- **Large vaults no longer auto-load.** Anything at or above 3 MB shows its size and file count and
  waits to be asked; the small ones keep loading eagerly. Licence to Operate is 13 MB, and the held
  AIUC-1 vault is 43 MB across 649 files — auto-fetching those on a phone on conference wifi would
  have been a real regression.
- **Read keys: three formats accepted, and failures are loud.** Bare 64-hex, `sgit_rk1_` and
  `sgit_private_read_` all validate; anything else renders a message naming the misconfigured demo
  instead of an empty frame that looks like a slow load.
- Page orders renumbered so the demo group stays contiguous — the first attempt collided with
  `pricing` at order 30 and split the dropdown into two "Live demos" menus.