Demos
Live, end-to-end demonstrations, each one a vault that was actually created, pushed, and embedded in the page that documents it. The walkthroughs are complete: every command, the keys that are deliberately public, and the ones that never will be.
The rule every demo follows: the vault's read key is published on purpose. It is derived one-way and cannot write, so publishing it is what makes the demo openable by anyone. The vault's write key appears nowhere: not in these pages, not in the repos, and the build refuses to push if one ever reaches a tracked file.
Thirty vaults, one page each
The demos outgrew this page. Every vault whose read key this site publishes now has its own page under Published vaults ↗, what it does, which features it uses, the audit that ran before the key was published, and the vault itself running live in the page. Thirty at the last count, from a regulation parsed into a graph to a job application delivered as a vault, and the table there is generated from the same file as the machine-readable list ↗, so the two cannot drift.
Index · live from a vault### The catalogueAn index of vaults that is itself a vault, rendered live on this site with a published read key. The machine-first companion to the gallery.Open the catalogue →↗
The three walkthroughs
These were the first demos, and they are still the pages to read if you want to see how a vault ends up inside a page, the sandboxed iframe, the postMessage bridge, the republish pattern when an original vault cannot publish its key, and two apps served from one store.
Reading a vault from a site, without the vault supplying the viewer
The newer pattern, used by the deck and document pages under the gallery, is the reverse of the embed: the site owns the viewer, the vault supplies only data, and the two meet in an iframe with no origin. It is written up for other sites' agents in the deck brief↗, the markdown and file-viewer brief↗, and reading a single file out of a vault↗.