Published vaults on sgit.ai

The catalogue of encrypted vaults published at https://sgit.ai/demos/vaults/index.html↗, generated at build time (v0.6.8) from the same file the table on that page is built from, so this list and that table cannot drift apart.

Every vault below is opened by a READ KEY: a 64-character hex string and a vault id, derived one-way from a vault key that is never published. A read key is the complete credential: no account, no token, nothing to install. sgit clone <read key> from the CLI, or open it at https://dev.vault.sgraph.ai/# ↗<read key with the colon percent-encoded>.

The server stores ciphertext under opaque ids and cannot read any of this. How a browser reads one file out of a vault is written up at /vault/reading-a-vault-file.md.

The vaults (36)

• #36 Company X-Ray: A business plan for reading a company's own documents together, with one invented company X-rayed and every finding tied to its evidence
  • page: /demos/vaults/company-xray/index.md
  • id ukpqjkly · Briefing · published 2026-09-24 · 710 KB · 60 files
  • read key: sgit_public_read_6da900d8edd0abd580452a85f6bbe588474cecf21e5f7cbbbbad57d1bf228454:ukpqjkly
• #35 Lesson Loop: A business plan for coaches: the coach's knowledge captured at the end of every lesson, in a record the player holds
  • page: /demos/vaults/lesson-loop/index.md
  • id 3s9q7zl7 · Briefing · published 2026-09-24 · 407 KB · 27 files
  • read key: sgit_public_read_2d397a3a06c235452300c55375ebe8e470ba70a1a5263dc72679f8a78c42dfc1:3s9q7zl7
• #34 Risk Acceptance Office: A business plan with one risk replayed: established on facts, accepted for an interval, escalated, funded and ended on facts
  • page: /demos/vaults/risk-acceptance/index.md
  • id odn10gfp · Briefing · published 2026-09-24 · 673 KB · 32 files
  • read key: sgit_public_read_3e6f04360f083cff58daa851a63d6d0fcc7f6eadb5bdca7c57acef6ef15bc93e:odn10gfp
• #33 Connector Twin: A business plan with a working replay: what an agent did through Gmail and Calendar, what it saw, and what can be undone
  • page: /demos/vaults/connector-twin/index.md
  • id 7tkvspwp · Briefing · published 2026-09-24 · 515 KB · 31 files
  • read key: sgit_public_read_4fb639e76d976d691c7655060e74f6d7fe13a7b96ea77d9230446977e5cdf860:7tkvspwp
• #32 Agent as Webmaster: A complete business plan, with mock-ups and prototypes, written for somebody else to run
  • page: /demos/vaults/agent-webmaster/index.md
  • id ikrqeu5t · Briefing · published 2026-09-23 · 666 KB · 32 files
  • read key: sgit_public_read_d5ba4a106276936456b0a108b3988aa777f5402ba6699fcd67becd620fe55828:ikrqeu5t
• #31 DSIT AI Risk Toolkit: Start with an AI decision and trace it back to UK DSIT guidance; an eight-slide walkthrough plays from the vault
  • page: /demos/vaults/dsit-ai-risk-toolkit/index.md
  • id 0q4sfr57 · Reference · published 2026-09-20 · 12.1 MB · 155 files
  • read key: sgit_public_read_cdc00d2baaf75361d86ae1b7a40169bd98d71aaae1bd581e181a0f0ba0e0e6bb:0q4sfr57
• #30 Fractional CISO application pack: The sibling of #29, written for an archetype instead of a company, so there is nothing to redact. Two days a month, a twelve-month map, and a section that says what the role is not
  • page: /demos/vaults/fractional-ciso-pack/index.md
  • id eaba68j5 · Briefing · published 2026-09-18 · 19 MB · 72 files
  • read key: sgit_public_read_7c84275ebcbbf312dbbec4713a00c83fb0dd8520b6a52b082d7ff81e3523c40e:eaba68j5
• #29 Interim CISO application pack: A job application as a vault, three routes for three readers, four documents in four formats each, and the client named nowhere
  • page: /demos/vaults/interim-ciso-pack/index.md
  • id 8brojsem · Briefing · published 2026-09-17 · 17 MB · 56 files
  • read key: sgit_public_read_699401f6cb3bdb1d6e19bfa690d8e0006a5379070ff320b5a8ae2fc21968f5c9:8brojsem
• #28 Synthetic users · riskmandate.ai: The same method as #27 pointed at a second product, and it measured rather than narrated, catching a shipped bug every existing test had passed over
  • page: /demos/vaults/synthetic-users-riskmandate/index.md
  • id o3q6zhtr · Analysis · published 2026-09-16 · 3.5 MB · 53 files
  • read key: sgit_public_read_a41174009cf6f3019147040ef0c759b6c84c86ffa37eb54af06011c161a12332:o3q6zhtr
• #27 Synthetic users: Five invented buyers walked through store.sgit.ai one screenshot at a time, 43 steps, 15 unanswered questions, 18 findings, three costing a sale
  • page: /demos/vaults/synthetic-users/index.md
  • id g2hei4u6 · Analysis · published 2026-09-15 · 6.4 MB · 67 files
  • read key: sgit_public_read_b70c317b7aa4b6084e05669795dc89e6bf1e46b4e948b9f6c475948ae502823c:g2hei4u6
• #26 The sgit.ai board: The site's own task board as a vault, cards as files, five columns as an app, the source of truth the site renders from
  • page: /demos/vaults/board/index.md
  • id pdulwi6i · Record · published 2026-09-07 · 40 KB · 21 files
  • read key: sgit_public_read_f41d03b0de550479b3c4359709130386df48f34b2cd75e5ed83de28e9776b479:pdulwi6i
• #25 Agent permission games: Two games about grants and mandates, the first vault here that phones home
  • page: /demos/vaults/agent-permission-games/index.md
  • id 4evnlwrj · Application · published 2026-09-06 · 2.6 MB · 68 files
  • read key: sgit_public_read_f94c8b1d42352d95703ac3d39032735d9b4e388d16ab5b87c948928d8e111118:4evnlwrj
• #24 AIUC-1 conformance layer: The AIUC-1 standard as a graph, plus a conformance layer that computes insurability
  • page: /demos/vaults/aiuc-1-conformance/index.md
  • id 2wzct4k7 · Reference · published 2026-09-05 · 43 MB · 649 files
  • read key: sgit_public_read_0f01d367b04f886f6c65038649b76504f4cd2ad06480d88a5e933a671e0db072:2wzct4k7
• #23 Licence to Operate: An insurance policy for an agent, simulated: grant, mandate, and the delta nothing covers
  • page: /demos/vaults/licence-to-operate/index.md
  • id posrhzp3 · Analysis · published 2026-09-04 · 13 MB · 121 files
  • read key: sgit_public_read_d990a52efb9af32c8463e2962f3ca5ccf92b3b6e8ea788e55009073c29b4da29:posrhzp3
• #22 VoiceDebrief pitch (FI): A three-minute investor pitch as a presenter app, with script, timings and sources
  • page: /demos/vaults/voicedebrief-pitch/index.md
  • id 95i2xqrd · Presentation · published 2026-09-02 · 17 MB · 48 files
  • read key: sgit_public_read_23cbc4c65c24cb23ef3efb78e34593391c6709f0106ea81799aa14fe97f4d211:95i2xqrd
• #21 Scaling Threat Modeling: ThreatModCon 2025: eleven linked threat models across 51 nodes and 179 threats
  • page: /demos/vaults/threatmodcon-2025/index.md
  • id 0ict6flm · Presentation · published 2026-08-27 · 4.1 MB · 53 files
  • read key: sgit_public_read_23fb205247b2b9c88a943d7ffece9dacf9c00c50cc94840668b4916f247b8ec4:0ict6flm
• #20 AI vs. AI, Black Hat EU 2025: The Black Hat EU 2025 keynote, with its PDF exports and eight research papers
  • page: /demos/vaults/blackhat-eu-2025/index.md
  • id k1izvg7e · Presentation · published 2026-08-27 · 20 MB · 87 files
  • read key: sgit_public_read_147fa50d3c491aeea3e700d60ef21ea2897884e263700d95765dc8f624dc59ac:k1izvg7e
• #19 Standards Atlas, GDPR: GDPR as a semantic graph, with writes scoped to a feedback folder
  • page: /demos/vaults/standards-atlas-gdpr/index.md
  • id 4zv4bvmu · Reference · published 2026-08-25 · 6.3 MB · 116 files
  • read key: sgit_public_read_439ca57ab9e53b4edfa67e99da1b70948c297d323376c890292dc2f0876aa15c:4zv4bvmu
• #18 RiskMandate · File security: An eleven-step risk-acceptance walk, running SQLite in the browser
  • page: /demos/vaults/riskmandate-file-security/index.md
  • id wu365g94 · Analysis · published 2026-08-25 · 2.7 MB · 71 files
  • read key: sgit_public_read_e8a1e664b9f984b0d8df442f463231077d455d7cbaa3e336610b14f9a1e1dc77:wu365g94
• #17 Penetration Test Report: A penetration test report (fictional) with a re-test script per finding
  • page: /demos/vaults/pentest-report/index.md
  • id o4lrwx02 · Report · published 2026-08-25 · 6.4 MB · 93 files
  • read key: sgit_public_read_14042259ecbec2d0c7c4e68963695c4ceeeeb652767d25b777024a4f05ccd025:o4lrwx02
• #16 SG/Payments Brief Pack: A payments briefing pack, marked PROPOSED rather than dressed as decided
  • page: /demos/vaults/payments-brief-pack/index.md
  • id o3m0sz3q · Briefing · published 2026-08-25 · 224 KB · 18 files
  • read key: sgit_public_read_cd1987b87f719c2ff6da51128200665312afaeeadcbf7a1a20f870f03f9959f8:o3m0sz3q
• #15 Content-Transformation Proxy: An as-built engineering brief, shipped with its slides, diagrams and source PDFs
  • page: /demos/vaults/content-transformation-proxy/index.md
  • id 3c90c2bff2b1 · Briefing · published 2026-08-25 · 63 MB · 140 files
  • read key: sgit_public_read_18bf8b2aa558fec879edb39c79ee66d6b9594ada2dff71039b3f66f5b14e4839:3c90c2bff2b1
• #14 SG Commercialisation: A commercial operating model, with its customer register deliberately left empty
  • page: /demos/vaults/commercialisation/index.md
  • id haeu7p1e · Briefing · published 2026-08-25 · 536 KB · 78 files
  • read key: sgit_public_read_3c8cba7edd2f14e63d0b0f0da4d513430e3eea06f364baefaf8b22d85e151da6:haeu7p1e
• #13 Vault App Mode: Nine proofs of concept for vault app mode, with a hub that runs them
  • page: /demos/vaults/vault-app-pocs/index.md
  • id xth1xt78 · Reference · published 2026-08-23 · 251 KB · 57 files
  • read key: sgit_public_read_05f2391f22e4135ea27bca6b697dca18c54ab91b046325bef74f62f5324b8bc8:xth1xt78
• #12 Private Health Score: A clinical questionnaire scored by a versioned framework, with a clinician review screen
  • page: /demos/vaults/health-score/index.md
  • id zc6abngv · Application · published 2026-08-23 · 1.2 MB · 35 files
  • read key: sgit_public_read_a76f327fb602f1619a67a15a0b756d69e82a1f7fa48438d4b6ecbebae2dc3d40:zc6abngv
• #11 VoiceDebrief: Four apps in one vault, from raw recording to structured debrief
  • page: /demos/vaults/voice-debrief/index.md
  • id k6xy9z4d · Analysis · published 2026-08-22 · 1.2 MB · 92 files
  • read key: sgit_public_read_31e8196d3e83b37277083c29f105b8310dbac4569e22715b5e0f85d46878eec1:k6xy9z4d
• #10 Regulation Graph: The EU AI Act parsed from Formex into an evidence graph, article by article
  • page: /demos/vaults/regulation-graph/index.md
  • id 73heuprz · Reference · published 2026-08-20 · 14.9 MB · 207 files
  • read key: sgit_public_read_c004daae386e8d17fa648884acc527018bd4ea1116ad673fb2f1b068011695c9:73heuprz
• #9 Risk Mandate: A working software project delivered as a vault, and it calls an LLM holding no API key
  • page: /demos/vaults/risk-mandate/index.md
  • id 4zf6pf2z · Application · published 2026-08-17 · 1.9 MB · 124 files
  • read key: sgit_public_read_a702fba803faac4369eb5d5a320b4dfa017af62bd2425fb298aac4b99e95c0ae:4zf6pf2z
• #8 Risk Graph Explorer: A fact-to-risk graph explorer, built to be public: its app.json requests nothing
  • page: /demos/vaults/risk-graph-explorer/index.md
  • id 3simlnqe · Application · published 2026-08-17 · 428 KB · 33 files
  • read key: sgit_public_read_1c1b95f5903e35850a9bc0541ffa09c6b5d4017cbf18817d2ad6f894127e5638:3simlnqe
• #7 Agentic Browser Isolation: Should an agent browse with your logged-in sessions? A living risk graph, per stakeholder
  • page: /demos/vaults/agentic-browser-isolation/index.md
  • id 0610gsp9 · Analysis · published 2026-08-17 · 2.4 MB · 104 files
  • read key: sgit_public_read_92cad4cea8f58c55f59b686c71c935225a1ba7c41ecb6922a8aa570467604f6e:0610gsp9
• #6 Supplement Stack: A patient-held health record: a real regimen, label photos, totals against UK RNIs
  • page: /demos/vaults/supplement-stack/index.md
  • id r7zes477 · Record · published 2026-08-16 · 2.3 MB · 23 files
  • read key: sgit_public_read_047186b559528058c66d1792b7345639b1238cb95c166d1d5f5b65c59813c2ee:r7zes477
• #5 Strategy Maps: The SG/Send strategy in seven Wardley maps, plus the sgit positioning analysis
  • page: /demos/vaults/strategy-maps/index.md
  • id ookq4mn4 · Analysis · published 2026-08-16 · 830 KB · 33 files
  • read key: sgit_public_read_451c4c1e28fbb24a7f350bb3f107b2c103d69ed363167029ef9c9000ff76c07b:ookq4mn4
• #4 Field Notes: Six studies with generative SVG art, the smallest complete vault app
  • page: /demos/vaults/field-notes/index.md
  • id 4bshby5n · Application · published 2026-08-16 · 11 KB · 4 files
  • read key: sgit_public_read_2848993a68c02a33ea5582902c391901191e53680d35b36c0e76185d4107ad81:4bshby5n
• #3 Deploy Docs: Living deployment documentation, updated by an sgit push with no site deploy
  • page: /demos/vaults/deploy-docs/index.md
  • id fyofmkvr · Record · published 2026-08-16 · 25 KB · 17 files
  • read key: sgit_public_read_8d01421290efc3fa03205eced0534335a06ae209d627555b3dde136b878e3de1:fyofmkvr
• #2 The Vault Catalogue: An index of published vaults that is itself a vault, and lists itself
  • page: /demos/vaults/catalogue/index.md
  • id kc67yhgw · Record · published 2026-08-16 · 11 KB · 9 files
  • read key: sgit_public_read_fd71e4bde7232498e43a5da869b1501260d9d403031b20af87b5bc801bdf6280:kc67yhgw
• #1 Algarve · May 2026: A travel diary: twenty photographs in three sizes and an eight-chapter narrative
  • page: /demos/vaults/algarve-may-2026/index.md
  • id 3d04e6b9ca98 · Gallery · published 2026-08-16 · 29 MB · 71 files
  • read key: sgit_public_read_0a0f34839d737eef0f8f66e5236990b1f397af064763e3f71dca2717015f9d15:3d04e6b9ca98

How these were published

• Publishing a vault: the method↗, the seven steps behind every row above.
• The vault catalogue↗, the same index, rendered live from a vault that indexes vaults.
• Reading one file out of a vault ↗, the primitive under every live embed here.