--- title: Five business plans, published as vaults for somebody else to run date: 2026-09-24 desk: Journalist standfirst: In two days sgit.ai published five business plans as vaults, each written for another founder to take and run. They are proposals with every price marked as a hypothesis, not products; this is what each one proposes, who it is for, and what is inside. section: back-catalogue sources: - https://sgit.ai/startups/business-plans.html - https://sgit.ai/demos/vaults/agent-webmaster/index.html - https://sgit.ai/demos/vaults/connector-twin/index.html - https://sgit.ai/demos/vaults/risk-acceptance/index.html - https://sgit.ai/demos/vaults/lesson-loop/index.html - https://sgit.ai/demos/vaults/company-xray/index.html - src:vaults/agent-webmaster/README.md - src:vaults/agent-webmaster/PUBLIC.md - src:vaults/agent-webmaster/plan/00-START-HERE.md - src:vaults/connector-twin/README.md - src:vaults/connector-twin/plan/00-START-HERE.md - src:vaults/risk-acceptance/README.md - src:vaults/risk-acceptance/plan/00-START-HERE.md - src:vaults/lesson-loop/README.md - src:vaults/lesson-loop/plan/00-START-HERE.md - src:vaults/company-xray/README.md - src:vaults/company-xray/plan/00-START-HERE.md - src:history/sgit.ai-version-log.json reviewed_by: reviewed_on: --- Between 23 and 24 September 2026, sgit.ai published five vaults that are business plans: Agent as Webmaster, Connector Twin, Risk Acceptance Office, Lesson Loop and Company X-Ray ([business plans](https://sgit.ai/startups/business-plans.html)). They are vaults 32 to 36 on the site ([version log](src:history/sgit.ai-version-log.json)). The site calls them "businesses we think should exist on top of sgit and the work published on this site, written up in enough detail for somebody else to start one" ([business plans](https://sgit.ai/startups/business-plans.html)). It also says: "**We are looking for business partners to build them.** Where nobody does, we may build one ourselves, depending on funding and on who is available." ([business plans](https://sgit.ai/startups/business-plans.html)). The same page says: "Every price and every hour is a first guess, and every plan says so. The first ten customers are the test." ([business plans](https://sgit.ai/startups/business-plans.html)). ## Agent as Webmaster (23 September) The plan is for "a company that gives small businesses a website they can actually change, by putting an AI agent in the webmaster's chair" ([README](src:vaults/agent-webmaster/README.md)). The customer talks, the agent edits, and GitHub Pages publishes ([one-page plan](src:vaults/agent-webmaster/plan/00-START-HERE.md)). It is for "Anyone who wants to run a small, focused, profitable service business and is comfortable directing an agent" ([one-page plan](src:vaults/agent-webmaster/plan/00-START-HERE.md)). Its prices are labelled "starting hypothesis": setup at £300 to £1,200, maintenance at £50, £100 or £200 a month, and changes on demand ([one-page plan](src:vaults/agent-webmaster/plan/00-START-HERE.md)). The vault holds the plan as an app with a calculator, the plan as documents, three diagrams, three invented customer sites and the operator's sales site as mock-ups, and prototypes to serve the first customer ([vault page](https://sgit.ai/demos/vaults/agent-webmaster/index.html)). It was the first of the set: "THIRTY-SECOND VAULT, AND THE FIRST BUSINESS PLAN PUBLISHED FOR SOMEBODY ELSE TO RUN" ([version log](src:history/sgit.ai-version-log.json)). Publishing it found two bugs in the sgit CLI, which were fixed in the CLI repository, the first pinned by a test ([vault page](https://sgit.ai/demos/vaults/agent-webmaster/index.html)). ## Connector Twin (24 September) The plan is for "a service that gives every AI agent deployment a twin of its connectors": a journal of every request and response the agent makes to Gmail, Google Calendar, Drive, Slack or another system, replayed into the views the agent saw ([README](src:vaults/connector-twin/README.md)). Its sales question is "**do you know what your agents did?**" ([README](src:vaults/connector-twin/README.md)). The buyers are organisations that deploy AI agents ([one-page plan](src:vaults/connector-twin/plan/00-START-HERE.md)). Prices are given "as a hypothesis": a connector review once at £750, £2,500 or £6,000, then £15, £40 or £90 per agent per month, and £900 per incident replay ([one-page plan](src:vaults/connector-twin/plan/00-START-HERE.md)). The vault opens on a replay of an invented session "rebuilt from 17 journal entries", with a hash chain that the app checks in the browser ([README](src:vaults/connector-twin/README.md)). It also holds the journal entry specification and revert rules for Gmail and Calendar ([README](src:vaults/connector-twin/README.md)). The page says the session is invented and every address uses the reserved `.example` domain ([vault page](https://sgit.ai/demos/vaults/connector-twin/index.html)). ## Risk Acceptance Office (24 September) The plan is for "a company that runs the risk acceptance loop for organisations": every material risk established on facts, held by a named person, and accepted for a stated interval ([README](src:vaults/risk-acceptance/README.md)). Its one-line version is "**every risk is already accepted; the service makes sure somebody signed for it, and until when.**" ([README](src:vaults/risk-acceptance/README.md)). It is meant to work "in the gaps of the client's existing GRC platform rather than replacing it" ([README](src:vaults/risk-acceptance/README.md)). Prices are "as a hypothesis": a free acceptance audit, a foundation engagement at £18,000, then £2,500 a month plus £60 per material risk per month ([one-page plan](src:vaults/risk-acceptance/plan/00-START-HERE.md)). The vault replays one invented risk with a fourteen-entry hash-chained decision record ([vault page](https://sgit.ai/demos/vaults/risk-acceptance/index.html)). The plan says of the method it builds on: "Much of that model is stated as not yet built in code, and this plan says the same where it applies." ([README](src:vaults/risk-acceptance/README.md)). The sources give two lengths for the replay: the README says "over eight weeks" and the sgit.ai page says "over six weeks", with the risk ceasing on day 42 ([README](src:vaults/risk-acceptance/README.md), [vault page](https://sgit.ai/demos/vaults/risk-acceptance/index.html)). ## Lesson Loop (24 September) The plan is "for padel coaches, and any teacher with students: capture what the coach knows at the moment they know it, in a record the student holds" ([README](src:vaults/lesson-loop/README.md)). The coach records a short voice memo, an agent turns it into a lesson note in the player's own vault, and the next lesson starts from a briefing ([one-page plan](src:vaults/lesson-loop/plan/00-START-HERE.md)). It is "Paid on demand, with no subscription", at about 20p for a lesson note and about £1 for a short clip, and "Every number is a hypothesis." ([one-page plan](src:vaults/lesson-loop/plan/00-START-HERE.md)). The vault holds one invented player's record across four lessons with three coaches, and the two prompts for phase one ([README](src:vaults/lesson-loop/README.md)). The plan says "Key management is the one hard part." ([one-page plan](src:vaults/lesson-loop/plan/00-START-HERE.md)). Its page says the plan keeps to adults "until consent and a guardian's key are designed" ([vault page](https://sgit.ai/demos/vaults/lesson-loop/index.html)). ## Company X-Ray (24 September) The plan is for "a service that reads a company's own documents together" ([README](src:vaults/company-xray/README.md)). The customer drops documents into an encrypted vault, agents run a catalogue of analyses, a person reviews, and within five working days the company gets its questions answered, a board pack and findings tied to their evidence ([one-page plan](src:vaults/company-xray/plan/00-START-HERE.md)). The README says: "No connectors, no integrations." ([README](src:vaults/company-xray/README.md)). It is "Sold in four levels, the same shape as RiskMandate.ai's" ([README](src:vaults/company-xray/README.md)): the kit at £50, an X-ray vault at £150, a Standard X-ray at £500 and a Tailored X-ray at £1,500 ([one-page plan](src:vaults/company-xray/plan/00-START-HERE.md)). The plan says "Every number is a hypothesis" ([one-page plan](src:vaults/company-xray/plan/00-START-HERE.md)). The vault holds an invented company, Northgate Facilities, X-rayed end to end with fourteen findings, and a script that re-runs every computed figure: "46 of 46 match" ([README](src:vaults/company-xray/README.md), [vault page](https://sgit.ai/demos/vaults/company-xray/index.html)). ## What is in each vault Counted from the files in this newsroom's snapshot, Agent as Webmaster has 32 files, Connector Twin 31, Risk Acceptance Office 32, Lesson Loop 27 and Company X-Ray 60 ([Agent as Webmaster](src:vaults/agent-webmaster/README.md), [Connector Twin](src:vaults/connector-twin/README.md), [Risk Acceptance Office](src:vaults/risk-acceptance/README.md), [Lesson Loop](src:vaults/lesson-loop/README.md), [Company X-Ray](src:vaults/company-xray/README.md)). Each count matches the file count on its sgit.ai page ([business plans](https://sgit.ai/startups/business-plans.html), [published vaults](https://sgit.ai/demos/vaults/index.html)). Every one has a `plan/` folder that runs from `00-START-HERE.md` to a tenth document, and all but Agent as Webmaster add a `plan/plan.json` and a `spec/` folder ([Agent as Webmaster](src:vaults/agent-webmaster/README.md), [Connector Twin](src:vaults/connector-twin/README.md), [Risk Acceptance Office](src:vaults/risk-acceptance/README.md), [Lesson Loop](src:vaults/lesson-loop/README.md), [Company X-Ray](src:vaults/company-xray/README.md)). Company X-Ray alone carries a `sample/` folder with the customer vault as delivered ([README](src:vaults/company-xray/README.md)). ## What they share Each vault is published under a `PUBLIC.md` with three rules: nothing private committed, no write token, and no metered capability ([PUBLIC.md](src:vaults/agent-webmaster/PUBLIC.md)). Each app asks for `"permissions": {}` ([Agent as Webmaster](src:vaults/agent-webmaster/PUBLIC.md), [Connector Twin](src:vaults/connector-twin/PUBLIC.md), [Risk Acceptance Office](src:vaults/risk-acceptance/PUBLIC.md), [Lesson Loop](src:vaults/lesson-loop/PUBLIC.md), [Company X-Ray](src:vaults/company-xray/PUBLIC.md)). The sgit.ai page lists what every plan contains, including "Facts and assumptions, kept apart" and a calculator ([business plans](https://sgit.ai/startups/business-plans.html)). Each vault page records an audit made from a clone with the published read key alone, which found nothing, and a control clone with an all-zeros key, which came back empty ([Agent as Webmaster](https://sgit.ai/demos/vaults/agent-webmaster/index.html), [Connector Twin](https://sgit.ai/demos/vaults/connector-twin/index.html), [Risk Acceptance Office](https://sgit.ai/demos/vaults/risk-acceptance/index.html), [Lesson Loop](https://sgit.ai/demos/vaults/lesson-loop/index.html), [Company X-Ray](https://sgit.ai/demos/vaults/company-xray/index.html)). Each page says the plan came from a voice memo by the founder, on 23 September for the first and 24 September for the other four ([Agent as Webmaster](https://sgit.ai/demos/vaults/agent-webmaster/index.html), [Company X-Ray](https://sgit.ai/demos/vaults/company-xray/index.html)). Each one asks for one thing back. Agent as Webmaster asks for "what broke"; Company X-Ray asks "how long the review of your first ten X-rays really took" ([PUBLIC.md](src:vaults/agent-webmaster/PUBLIC.md), [Company X-Ray](src:vaults/company-xray/PUBLIC.md)). The summary line of the sgit.ai business plans page still names only two plans, Connector Twin and Agent as Webmaster, while its table lists all five ([business plans](https://sgit.ai/startups/business-plans.html)).