for agents/demos/vaults/llms.txtv0.7.54 · 11 Oct 2026

Home / Vaults

Published vaults

Open any of these in your browser right now. Every read key here was published on purpose, and a read key is the whole credential: no account, nothing to install, no write capability in it. Each row opens a page with what the vault does and the vault itself running live inside it.

Nine are semantic graphs, each in its own ontology, from a regulation down to a compute instance. · The ladder, walked → · What reading one costs →

54 published vaults: 18 reference, 13 briefing, 9 analysis, 5 application, 4 record, 3 presentation, 1 gallery, 1 report. Newest first; click any heading to sort. Every read key and the live link are on the vault's own page.

#VaultWhat it isCategoryFilesSizePublished
54Synthetic users · newsroom.sgit.ai
bg1opz3c
The method of #27 and #28 pointed at newsroom.sgit.ai: five invented readers drove a browser one screenshot at a time, 62 steps, 51 questions, 31 findings, six blocking, and a measured bug: 51 of 527 figures missing after the moveAnalysis8311991 KB2026-10-10
53Infographic bake-off
po5i477i
Every image model on OpenRouter on 10 October 2026, given the same eleven briefs from one article in five rounds: 101 images judged blind by a Designer agent, every cost recorded, an Accountant's ledger and projections, a Data Scientist's analysis, and guidance on which model for which job, with the runner, OCR scorer and an appReference3788818 KB2026-10-10
52Article Views
chtgtd9e
Five articles read again by five agents with roles: 662 items catalogued with their verbatim sentences and 32 flags, an ontology at article, topic and site altitude with nine maps, each article's place in the arc, two-minute versions and nine-slide decks, with the role files, renderers, checks and an appReference1439608 KB2026-10-10
51Long Tail Ledger
deqiwj7z
The economics of open source's long tail, measured and simulated: one Intel iMac that could not run Homebrew or Docker Desktop, the long tail sized from Homebrew and PyPI analytics, where money flows for old versions, what card fees do to a payment of pence, five funding models over 10,000 seeded draws, break-even prices, a sensitivity tornado, the satellite support firms, and a calculator that runs the same model in the browserReference681767 KB2026-10-10
50AI Governance Graph
1wp3xpf4
Hari Kota's ten-layer AI governance stack as a fractal semantic graph: the table kept exactly as posted (46 examples, every cell a node), the ten edges the table already contains, 119 sourced cross-layer edges of ours, each example zoomed into its instrument and provisions, and Hari's three gaps and do-this-today test run as queries on a fictional shopReference793006 KB2026-10-09
49Agent Desk
5ej8boc8
A business plan for a Mac of the agent's own: a dedicated, locked-down macOS desktop per customer, built per run from encrypted vaults, keys by PKI, erased at the end; Apple's licence quoted with the shapes it allows; three behaviour policies for one customer service agent (23, 11 and 3 rows of unbounded excess); a calculator and a Wardley mapBriefing792633 KB2026-10-09
48Local evidence log
92yb24y9
A log for live local stories, kept as evidence: when a local public service is running badly and nothing a local person could check says so. Evidence by level, claims and what would resolve them, every source and how it was reached, leads that do not fit, enquiries, and scheduled re-checks; first incident, reported IT disruption at two London hospitals on 8 October 2026Reference54927 KB2026-10-08
47The agency scale
ddfw24hx
A maturity model for anyone asked to decide, a person or an agent: seven dimensions (options, context, depth, time, incentives, escalation, authority), seven levels from rubber stamp to delegator where the weakest dimension caps the decision, fourteen cases scored by the same rule, an assessment for your own decision points, the review as a QA loop, and the law that asks for itReference61448 KB2026-10-08
46Hope or enforcement
wz9dw0m5
The Agent Behaviour Policy at work: one customer service mandate for a fictional shop, three designs of the agent (one model with connectors, a harness of business tools, a team of narrow agents behind a gateway), sixty-two emails through each, and for every rule who enforces it; the policy after the run, the client's promises, and a year you can recomputeReference671,068 KB2026-10-08
45Threat-sized security
zwlqqvkm
Who are you actually protecting against? A six-tier ladder of attackers built on NIST SP 800-30, the NCSC and MITRE ATT&CK; eight fictional startups with attack trees and the line each should draw; an air-gapped Mac mini compared with an isolated one; and five questions to draw your own lineReference56469 KB2026-10-08
44The Mill Street Bridge
vk3jlgzb
A simulation of Markus Franz's bridge example on a story vault: one fictional local bridge closure from first notice to reopening, the journalism that got the date right, the paper on five dates, three readers whose own graphs meet the story graph, three institutions and an agent buying from the same graph, and where every penny goes; every figure computed from written assumptions; v0.2 adds the economics and the data, v0.3 a new navigation, four themes and a reviewed, gated codebaseReference127913 KB2026-10-07
43AI BCF as a graph
lop5iqzw
Jan van Dijke's AI Baseline Control Framework v1.0 (CC BY-SA 4.0) converted from its CSV export into a semantic graph: ontology, SKOS taxonomy, JSON-LD and Turtle, eighty hyperlinked documents, a SQLite database that runs in the browser, and a join from every AI Act citation to the law's text in the Regulation Graph vault; a fractal graph view, a crosswalk, SQL and triple-pattern consolesReference1433.0 MB2026-10-07
42Deck Vault
13djtu3j
A business plan for an author-first home for presentations: every author's decks in a vault the host cannot read, access decided by keys, seven roles no single company holds, pay once with 85% to the author, provenance as the product; ten plan documents, a right-of-access letter, a register and a working mock built as web componentsBriefing55214 KB2026-10-06
41How Much Evidence
kd0xhy6z
The data behind the article How much of this did I write?: 266 messages, 124 releases and 27 days as rows; per-article ledgers with the turns behind each; 28 corrections with their latency; the 29-article dependency map with every article's graph; the article's own fractal from strategy to data; the record by era; 75 article versions with diffs; and a hash and screenshot of each cited source, with the app that reads themReference1167.6 MB2026-10-05
40Code Review Graphs
7w90lvd3
The sgit CLI read as layered graphs from its syntax tree: eleven stories, 72 commands, 13 packages, 377 classes, 1,111 methods and 2,592 calls, two method streams, one commit read upwards to the stories it reaches, and ten house-rule checksReference204.2 MB2026-10-03
39Kit Bag
r53ldcxt
A business plan for a Chrome extension you build yourself and load from a folder, with its Agent Behaviour Policy written first and every barrier typedBriefing33565 KB2026-09-30
38PCI DSS Graph
7xyzg5zs
PCI DSS v4.0.1 as a semantic graph: goals, requirements, sections, identifiers, terms, roles and dates with typed edges; the licensed text left with the licence holderReference121.6 MB2026-09-29
37The Evidence Dispatch
c0vf9zz8
A newsroom on an evidence vault: six AI-authored articles on the Medicare agent case, sharing an attributed claim ledger, source dossiers, a timeline and a graph of declared relationshipsAnalysis23513.0 MB2026-09-27
36Company X-Ray
ukpqjkly
A business plan for reading a company's own documents together, with one invented company X-rayed and every finding tied to its evidenceBriefing60710 KB2026-09-24
35Lesson Loop
3s9q7zl7
A business plan for coaches: the coach's knowledge captured at the end of every lesson, in a record the player holdsBriefing27407 KB2026-09-24
34Risk Acceptance Office
odn10gfp
A business plan with one risk replayed: established on facts, accepted for an interval, escalated, funded and ended on factsBriefing32673 KB2026-09-24
33Connector Twin
7tkvspwp
A business plan with a working replay: what an agent did through Gmail and Calendar, what it saw, and what can be undoneBriefing31515 KB2026-09-24
32Agent as Webmaster
ikrqeu5t
A complete business plan, with mock-ups and prototypes, written for somebody else to runBriefing32666 KB2026-09-23
31DSIT AI Risk Toolkit
0q4sfr57
Start with an AI decision and trace it back to UK DSIT guidance; an eight-slide walkthrough plays from the vaultReference15512.1 MB2026-09-20
30Fractional CISO application pack
eaba68j5
The sibling of #29, written for an archetype instead of a company, so there is nothing to redact. Two days a month, a twelve-month map, and a section that says what the role is notBriefing7219 MB2026-09-18
29Interim CISO application pack
8brojsem
A job application as a vault, three routes for three readers, four documents in four formats each, and the client named nowhereBriefing5617 MB2026-09-17
28Synthetic users · riskmandate.ai
o3q6zhtr
The same method as #27 pointed at a second product, and it measured rather than narrated, catching a shipped bug every existing test had passed overAnalysis533.5 MB2026-09-16
27Synthetic users
g2hei4u6
Five invented buyers walked through store.sgit.ai one screenshot at a time, 43 steps, 15 unanswered questions, 18 findings, three costing a saleAnalysis676.4 MB2026-09-15
26The sgit.ai board
pdulwi6i
The site's own task board as a vault, cards as files, five columns as an app, the source of truth the site renders fromRecord2140 KB2026-09-07
25Agent permission games
4evnlwrj
Two games about grants and mandates, the first vault here that phones homeApplication682.6 MB2026-09-06
24AIUC-1 conformance layer
2wzct4k7
The AIUC-1 standard as a graph, plus a conformance layer that computes insurabilityReference64943 MB2026-09-05
23Licence to Operate
posrhzp3
An insurance policy for an agent, simulated: grant, mandate, and the delta nothing coversAnalysis12113 MB2026-09-04
22VoiceDebrief pitch (FI)
95i2xqrd
A three-minute investor pitch as a presenter app, with script, timings and sourcesPresentation4817 MB2026-09-02
21Scaling Threat Modeling
0ict6flm
ThreatModCon 2025: eleven linked threat models across 51 nodes and 179 threatsPresentation534.1 MB2026-08-27
20AI vs. AI, Black Hat EU 2025
k1izvg7e
The Black Hat EU 2025 keynote, with its PDF exports and eight research papersPresentation8720 MB2026-08-27
19Standards Atlas, GDPR
4zv4bvmu
GDPR as a semantic graph, with writes scoped to a feedback folderReference1166.3 MB2026-08-25
18RiskMandate · File security
wu365g94
An eleven-step risk-acceptance walk, running SQLite in the browserAnalysis712.7 MB2026-08-25
17Penetration Test Report
o4lrwx02
A penetration test report (fictional) with a re-test script per findingReport936.4 MB2026-08-25
16SG/Payments Brief Pack
o3m0sz3q
A payments briefing pack, marked PROPOSED rather than dressed as decidedBriefing18224 KB2026-08-25
15Content-Transformation Proxy
3c90c2bff2b1
An as-built engineering brief, shipped with its slides, diagrams and source PDFsBriefing14063 MB2026-08-25
14SG Commercialisation
haeu7p1e
A commercial operating model, with its customer register deliberately left emptyBriefing78536 KB2026-08-25
13Vault App Mode
xth1xt78
Nine proofs of concept for vault app mode, with a hub that runs themReference57251 KB2026-08-23
12Private Health Score
zc6abngv
A clinical questionnaire scored by a versioned framework, with a clinician review screenApplication351.2 MB2026-08-23
11VoiceDebrief
k6xy9z4d
Four apps in one vault, from raw recording to structured debriefAnalysis921.2 MB2026-08-22
10Regulation Graph
73heuprz
The EU AI Act parsed from Formex into an evidence graph, article by articleReference20714.9 MB2026-08-20
9Risk Mandate
4zf6pf2z
A working software project delivered as a vault, and it calls an LLM holding no API keyApplication1241.9 MB2026-08-17
8Risk Graph Explorer
3simlnqe
A fact-to-risk graph explorer, built to be public: its app.json requests nothingApplication33428 KB2026-08-17
7Agentic Browser Isolation
0610gsp9
Should an agent browse with your logged-in sessions? A living risk graph, per stakeholderAnalysis1042.4 MB2026-08-17
6Supplement Stack
r7zes477
A patient-held health record: a real regimen, label photos, totals against UK RNIsRecord232.3 MB2026-08-16
5Strategy Maps
ookq4mn4
The SG/Send strategy in seven Wardley maps, plus the sgit positioning analysisAnalysis33830 KB2026-08-16
4Field Notes
4bshby5n
Six studies with generative SVG art, the smallest complete vault appApplication411 KB2026-08-16
3Deploy Docs
fyofmkvr
Living deployment documentation, updated by an sgit push with no site deployRecord1725 KB2026-08-16
2The Vault Catalogue
kc67yhgw
An index of published vaults that is itself a vault, and lists itselfRecord911 KB2026-08-16
1Algarve · May 2026
3d04e6b9ca98
A travel diary: twenty photographs in three sizes and an eight-chapter narrativeGallery7129 MB2026-08-16

Publishing one of your own? The method is written down: the seven steps behind every row above, the tools that do each one, and the mistakes that produced each rule. The rules themselves, with the incident behind each, are on Lessons learned, including why a read key may be published and a vault key never may.

This table is the complete list, and its machine-readable twin is generated from the same file. The catalogue (an index of vaults that is itself a vault, updated by an sgit push with no site deploy) carries a shape taxonomy and per-entry evidence status for the first nine; it is waiting on its key holder for the rest. The original worked example of creating, auditing and embedding one is on the embed demo page.

Agents: this catalogue is also published as /demos/vaults/llms.txt, every vault above with its id, category, size and published read key, generated from the same file this table is, so the two cannot drift. The whole-site map is /llms.txt.