About the author, Dinis Cruz, sgit.ai
The provenance behind the first-person articles: the record (sgit.ai, sgraph.ai, MyFeeds.ai, The Cyber Boardroom, RiskMandate.ai, VoiceDebrief.ai, OWASP), the signed articles on this site, where else the author writes, the interests a reader should know about, and how to reach or correct him.
Source: https://sgit.ai/about/index.html↗ · site v0.6.8 · this file is generated from the same content as the page, so the two cannot drift. Every page on this site has a .md twin; internal links below point at them.
The person behind the first-person articles
Dinis Cruz
sgit.ai is built by one person and a team of agents, and the articles here that say I are written by the person. This page is the provenance for that byline: who I am, what I have built, where else I write, and the interests a reader should know about before taking the argument. It follows the same rule as the rest of the site, which is that a claim should be checkable without trusting me.
The record
| Role | What it involves |
|---|---|
| Founder, sgit.ai↗ | Encrypted vaults with git semantics: clone, commit, branch and merge files that are encrypted before they leave your machine, under Apache-2.0, and the network of sites↗ of which this is the hub. Each site publishes its argument before its implementation, so the commitments are checkable, and thirty-six vaults are published with their read keys↗ as the evidence. |
| Founder, sgraph.ai ↗ | Where the strategy turns into revenue: the commercial home of SG/Send, the secure file-sharing service built on the open-source sgit layer, and hosted SG/Vaults. The code stays Apache-2.0. What is sold is the running, maintained, certified service. |
| Founder, MyFeeds.ai ↗ | Role-aware cybersecurity briefings built on semantic knowledge graphs, with source attribution: CISO, engineer and board views of the same news. Open source, serverless, and with the seed pitch and unit economics published in the open. |
| Founder, The Cyber Boardroom ↗ | An AI-powered platform for the conversation between technical security teams and the board, bridging the two with knowledge-graph technology. Apache-2.0, with the community edition and the investment repository ↗ public. The Cyber Boardroom Limited, UK-registered and trading for almost two years, is today the commercial vehicle behind sgit.ai and RiskMandate.ai. |
| Founder, RiskMandate.ai↗ | The business risk layer for autonomous systems. Its field demo is published here as a vault↗, 124 files and 98 commits inside one encrypted store. |
| Founder, VoiceDebrief.ai ↗ | Voice recordings into transcripts and debriefs, entirely in the browser, with nothing uploaded to a server. The vault where Fractal Semantic Graphs were first worked↗ came out of this work. |
| Former OWASP Board member | And organiser of the OWASP Summits, Lisbon 2011 and Woburn 2017, the working-session format with no spectators and only participants that the Open Security Summit series went on to build on. Current open-source work still ships under the owasp-sbot organisation. |
| Creator, the O2 Platform | The OWASP static-analysis engine of 2010 to 2012, and the first of a line of open-source tooling that continues in the osbot and mgraph families, memory_fs, Issues-FS and sgit-ai, all Apache-2.0 and all on PyPI. |
| Thirty years in the UK | Based in the UK for thirty years, as a security practitioner, a CISO for UK companies and a founder, with one UK company taken through to an exit. The intent, stated on the proposed partnership with UK Sovereign AI↗, is to grow more UK-based companies on this technology, in the open. |
Writing on this site
The articles carry a byline when they are written in the first person, and the byline links here. The unsigned articles are written in the site's own voice by the team of agents, from briefs, and say so.
- The future of news is the story vault, not the paywall↗. The story is a graph, the article is a projection, and there are five things to sell from one graph.
- The SaaS apocalypse will be decided by inertia, not by AI↗. Same AI on both sides; what differs is what each has to protect.
- For a startup, the most important question is whether they miss it↗. The operating model in three pillars.
- Introducing Fractal Semantic Graphs↗. Every node opens into a graph of its own; edges are verbs; meaning lives in connectivity.
- All articles↗, signed and unsigned.
Writing elsewhere
| docs.diniscruz.ai ↗ | The long-form research and essays, including the future-of-news series ↗ from February to July 2025 that the news article here builds on. Published under CC BY 4.0. |
|---|---|
| LinkedIn ↗ | Where most of the articles are first posted and discussed, and the fastest route to reach me. |
| open-source.sgit.ai↗ | My position on open source as a strategy, with a fuller version of this page↗: the licences, the investor materials published in the open, and the interests declared there. |
| wardley-maps.sgit.ai↗ | The maps behind the strategy arguments, on the principle that maps are claims, not pictures. |
| graphs.sgit.ai ↗ | The Fractal Semantic Graphs argument in full: the grammar, the books, the worked examples and the evidence estate. |
| newsroom.sgit.ai↗ | The newsroom design the news article draws on, and its Portuguese newsroom↗, where I am the named editor of record. |
| GitHub ↗ | The code, including the sgit CLI ↗ and this site's source ↗, every page as content files plus the build that renders them. |
Interests declared
I run companies whose strategy the articles here describe, and which sell the running, maintained service rather than the code. The market the news article, the SaaS article and the startups section describe is one I intend to be in. Read the arguments knowing that. Two things are built in to keep it honest.
- The claims are checkable without trusting me. The measurements are printed with the commands that produced them↗, the vaults are open with a read key↗, the method is written down with the mistakes that produced each rule↗, and the lessons learned↗ include the ones that cut against the argument.
- The pitch is public too. sgit.ai for investors↗ is published in the open, with the ask left visibly empty until it is stated rather than invented.
Reach me, or correct me
LinkedIn ↗ is the fastest route. Corrections and requests for this site are tracked in the open on the board↗, and the repository ↗ takes issues and pull requests. If you find something wrong here, I would rather know.
← The articles↗How the site is run →↗