Startups. It is open source, and it is built to be built on
Nine capabilities to reuse, each naming what it runs on and how far along it is, including the ones that are still a design and say so.
Source: https://sgit.ai/summit/startups.html↗ · site v0.6.8 · this file is generated from the same content as the page, so the two cannot drift. Every page on this site has a .md twin; internal links below point at them.
Home↗ / Summit sheets↗ / Startups
Sheet 02 of 04: written for startups. The other three →↗
Startups, Let’s build together
It is open source, and it is built to be built on. Start with the capability, reuse the component, and check the status, some of it is still a design, and it says so.
The stack was built to be collaborative. Some of it is still a design, and it says so.
Download the PDF ↓ ↗The sheet as handed out in Lisbon. The table below is the same content, in a form a search engine and an agent can read.
What exists
| The capability | What exists today | |
|---|---|---|
| 01 | Storage the host cannot read, with history. Powered by sgit, transfer protocol & browser vault | none |
| 02 | Versioned data with a clonable past. Powered by sgit, transfer protocol & browser vault | none |
| 03 | Managing and distributing sensitive data. Powered by Vaults on the same runtime | Healthcare is the worked example; an MVP is built on it. |
| 04 | Voice into debriefs, wherever the voice already is. Powered by Voice Debrief + WhatsApp, file & agent integrations | WhatsApp, files and agents are already wired in. |
| 05 | A chat in your app that never holds a model key. Powered by Model call layer | none |
| 06 | Translation to executives, in any specialist domain. Powered by Boardroom, agent rooms & persona machinery | none |
| 07 | Knowing what your agents are doing, and describing it. Powered by Risk product & free behaviour-policy library | none |
| 08 | Scalable risk management. Powered by Risk acceptance framework | A risk is accepted for a stated period. Research design; implementation not claimed. |
| 09 | Facilitating due diligence on your product. Powered by Write-only intake + seven-criterion evaluation framework | Use the scorecard for honest self-assessment: what their diligence will find, before it runs. |
Build on the stack
The infographic generator runs today, is used by a number of people, and has no way to pay for it. Seven further companies are written up in full and given away under attribution licensing.
pip install sgit-aiWrite to dinis.cruz@owasp.org, or explore the network↗.
The sheet itself
Proof 02 · 14 September 2026. Fact set: brief v0.33.70, 13 September 2026, revised with the 14 September comments. Code: permissive software licence. Documents: CC BY 4.0. ← All four sheets↗ · Explore the network↗