Published vaults, sgit.ai
Thirty-one vaults you can open in your browser right now, every read key published on purpose. A read key is the whole credential: no account, nothing to install, no write capability in it. Each row opens a page with what the vault does and the vault running live inside it.
Source: https://sgit.ai/demos/vaults/index.html↗ · site v0.6.8 · this file is generated from the same content as the page, so the two cannot drift. Every page on this site has a .md twin; internal links below point at them.
Published vaults
Open any of these in your browser right now. Every read key here was published on purpose, and a read key is the whole credential: no account, nothing to install, no write capability in it. Each row opens a page with what the vault does and the vault itself running live inside it.
Nine are semantic graphs, each in its own ontology, from a regulation down to a compute instance. · The ladder, walked →↗ · What reading one costs →↗
36 published vaults: 10 briefing, 7 analysis, 5 application, 5 reference, 4 record, 3 presentation, 1 gallery, 1 report. Newest first; click any heading to sort. Every read key and the live link are on the vault's own page.
| # | Vault | What it is | Category | Files | Size | Published |
|---|
| 36 | Company X-Ray↗ukpqjkly | A business plan for reading a company's own documents together, with one invented company X-rayed and every finding tied to its evidence | Briefing | 60 | 710 KB | 2026-09-24 |
| 35 | Lesson Loop↗3s9q7zl7 | A business plan for coaches: the coach's knowledge captured at the end of every lesson, in a record the player holds | Briefing | 27 | 407 KB | 2026-09-24 |
| 34 | Risk Acceptance Office↗odn10gfp | A business plan with one risk replayed: established on facts, accepted for an interval, escalated, funded and ended on facts | Briefing | 32 | 673 KB | 2026-09-24 |
| 33 | Connector Twin↗7tkvspwp | A business plan with a working replay: what an agent did through Gmail and Calendar, what it saw, and what can be undone | Briefing | 31 | 515 KB | 2026-09-24 |
| 32 | Agent as Webmaster↗ikrqeu5t | A complete business plan, with mock-ups and prototypes, written for somebody else to run | Briefing | 32 | 666 KB | 2026-09-23 |
| 31 | DSIT AI Risk Toolkit↗0q4sfr57 | Start with an AI decision and trace it back to UK DSIT guidance; an eight-slide walkthrough plays from the vault | Reference | 155 | 12.1 MB | 2026-09-20 |
| 30 | Fractional CISO application pack↗eaba68j5 | The sibling of #29, written for an archetype instead of a company, so there is nothing to redact. Two days a month, a twelve-month map, and a section that says what the role is not | Briefing | 72 | 19 MB | 2026-09-18 |
| 29 | Interim CISO application pack↗8brojsem | A job application as a vault, three routes for three readers, four documents in four formats each, and the client named nowhere | Briefing | 56 | 17 MB | 2026-09-17 |
| 28 | Synthetic users · riskmandate.ai↗o3q6zhtr | The same method as #27 pointed at a second product, and it measured rather than narrated, catching a shipped bug every existing test had passed over | Analysis | 53 | 3.5 MB | 2026-09-16 |
| 27 | Synthetic users↗g2hei4u6 | Five invented buyers walked through store.sgit.ai one screenshot at a time, 43 steps, 15 unanswered questions, 18 findings, three costing a sale | Analysis | 67 | 6.4 MB | 2026-09-15 |
| 26 | The sgit.ai board↗pdulwi6i | The site's own task board as a vault, cards as files, five columns as an app, the source of truth the site renders from | Record | 21 | 40 KB | 2026-09-07 |
| 25 | Agent permission games↗4evnlwrj | Two games about grants and mandates, the first vault here that phones home | Application | 68 | 2.6 MB | 2026-09-06 |
| 24 | AIUC-1 conformance layer↗2wzct4k7 | The AIUC-1 standard as a graph, plus a conformance layer that computes insurability | Reference | 649 | 43 MB | 2026-09-05 |
| 23 | Licence to Operate↗posrhzp3 | An insurance policy for an agent, simulated: grant, mandate, and the delta nothing covers | Analysis | 121 | 13 MB | 2026-09-04 |
| 22 | VoiceDebrief pitch (FI)↗95i2xqrd | A three-minute investor pitch as a presenter app, with script, timings and sources | Presentation | 48 | 17 MB | 2026-09-02 |
| 21 | Scaling Threat Modeling↗0ict6flm | ThreatModCon 2025: eleven linked threat models across 51 nodes and 179 threats | Presentation | 53 | 4.1 MB | 2026-08-27 |
| 20 | AI vs. AI, Black Hat EU 2025↗k1izvg7e | The Black Hat EU 2025 keynote, with its PDF exports and eight research papers | Presentation | 87 | 20 MB | 2026-08-27 |
| 19 | Standards Atlas, GDPR↗4zv4bvmu | GDPR as a semantic graph, with writes scoped to a feedback folder | Reference | 116 | 6.3 MB | 2026-08-25 |
| 18 | RiskMandate · File security↗wu365g94 | An eleven-step risk-acceptance walk, running SQLite in the browser | Analysis | 71 | 2.7 MB | 2026-08-25 |
| 17 | Penetration Test Report↗o4lrwx02 | A penetration test report (fictional) with a re-test script per finding | Report | 93 | 6.4 MB | 2026-08-25 |
| 16 | SG/Payments Brief Pack↗o3m0sz3q | A payments briefing pack, marked PROPOSED rather than dressed as decided | Briefing | 18 | 224 KB | 2026-08-25 |
| 15 | Content-Transformation Proxy↗3c90c2bff2b1 | An as-built engineering brief, shipped with its slides, diagrams and source PDFs | Briefing | 140 | 63 MB | 2026-08-25 |
| 14 | SG Commercialisation↗haeu7p1e | A commercial operating model, with its customer register deliberately left empty | Briefing | 78 | 536 KB | 2026-08-25 |
| 13 | Vault App Mode↗xth1xt78 | Nine proofs of concept for vault app mode, with a hub that runs them | Reference | 57 | 251 KB | 2026-08-23 |
| 12 | Private Health Score↗zc6abngv | A clinical questionnaire scored by a versioned framework, with a clinician review screen | Application | 35 | 1.2 MB | 2026-08-23 |
| 11 | VoiceDebrief↗k6xy9z4d | Four apps in one vault, from raw recording to structured debrief | Analysis | 92 | 1.2 MB | 2026-08-22 |
| 10 | Regulation Graph↗73heuprz | The EU AI Act parsed from Formex into an evidence graph, article by article | Reference | 207 | 14.9 MB | 2026-08-20 |
| 9 | Risk Mandate↗4zf6pf2z | A working software project delivered as a vault, and it calls an LLM holding no API key | Application | 124 | 1.9 MB | 2026-08-17 |
| 8 | Risk Graph Explorer↗3simlnqe | A fact-to-risk graph explorer, built to be public: its app.json requests nothing | Application | 33 | 428 KB | 2026-08-17 |
| 7 | Agentic Browser Isolation↗0610gsp9 | Should an agent browse with your logged-in sessions? A living risk graph, per stakeholder | Analysis | 104 | 2.4 MB | 2026-08-17 |
| 6 | Supplement Stack↗r7zes477 | A patient-held health record: a real regimen, label photos, totals against UK RNIs | Record | 23 | 2.3 MB | 2026-08-16 |
| 5 | Strategy Maps↗ookq4mn4 | The SG/Send strategy in seven Wardley maps, plus the sgit positioning analysis | Analysis | 33 | 830 KB | 2026-08-16 |
| 4 | Field Notes↗4bshby5n | Six studies with generative SVG art, the smallest complete vault app | Application | 4 | 11 KB | 2026-08-16 |
| 3 | Deploy Docs↗fyofmkvr | Living deployment documentation, updated by an sgit push with no site deploy | Record | 17 | 25 KB | 2026-08-16 |
| 2 | The Vault Catalogue↗kc67yhgw | An index of published vaults that is itself a vault, and lists itself | Record | 9 | 11 KB | 2026-08-16 |
| 1 | Algarve · May 2026↗3d04e6b9ca98 | A travel diary: twenty photographs in three sizes and an eight-chapter narrative | Gallery | 71 | 29 MB | 2026-08-16 |
Publishing one of your own? The method is written down↗: the seven steps behind every row above, the tools that do each one, and the mistakes that produced each rule. The rules themselves, with the incident behind each, are on Lessons learned↗, including why a read key may be published and a vault key never may.
This table is the complete list, and its machine-readable twin↗ is generated from the same file. The catalogue↗ (an index of vaults that is itself a vault, updated by an sgit push with no site deploy) carries a shape taxonomy and per-entry evidence status for the first nine; it is waiting on its key holder for the rest. The original worked example of creating, auditing and embedding one is on the embed demo page↗.
Agents: this catalogue is also published as /demos/vaults/llms.txt↗, every vault above with its id, category, size and published read key, generated from the same file this table is, so the two cannot drift. The whole-site map is /llms.txt↗.