for agents/demos/vaults/llms.txtv0.6.75 · 6 Oct 2026

Home / Vaults

Published vaults

Open any of these in your browser right now. Every read key here was published on purpose, and a read key is the whole credential: no account, nothing to install, no write capability in it. Each row opens a page with what the vault does and the vault itself running live inside it.

Nine are semantic graphs, each in its own ontology, from a regulation down to a compute instance. · The ladder, walked → · What reading one costs →

41 published vaults: 11 briefing, 8 analysis, 8 reference, 5 application, 4 record, 3 presentation, 1 gallery, 1 report. Newest first; click any heading to sort. Every read key and the live link are on the vault's own page.

#VaultWhat it isCategoryFilesSizePublished
41How Much Evidence
kd0xhy6z
The data behind the article How much of this did I write?: 266 messages, 124 releases and 27 days as rows; per-article ledgers with the turns behind each; 28 corrections with their latency; the 29-article dependency map with every article's graph; the article's own fractal from strategy to data; the record by era; 75 article versions with diffs; and a hash and screenshot of each cited source, with the app that reads themReference1167.6 MB2026-10-05
40Code Review Graphs
7w90lvd3
The sgit CLI read as layered graphs from its syntax tree: eleven stories, 72 commands, 13 packages, 377 classes, 1,111 methods and 2,592 calls, two method streams, one commit read upwards to the stories it reaches, and ten house-rule checksReference204.2 MB2026-10-03
39Kit Bag
r53ldcxt
A business plan for a Chrome extension you build yourself and load from a folder, with its Agent Behaviour Policy written first and every barrier typedBriefing33565 KB2026-09-30
38PCI DSS Graph
7xyzg5zs
PCI DSS v4.0.1 as a semantic graph: goals, requirements, sections, identifiers, terms, roles and dates with typed edges; the licensed text left with the licence holderReference121.6 MB2026-09-29
37The Evidence Dispatch
c0vf9zz8
A newsroom on an evidence vault: six AI-authored articles on the Medicare agent case, sharing an attributed claim ledger, source dossiers, a timeline and a graph of declared relationshipsAnalysis23513.0 MB2026-09-27
36Company X-Ray
ukpqjkly
A business plan for reading a company's own documents together, with one invented company X-rayed and every finding tied to its evidenceBriefing60710 KB2026-09-24
35Lesson Loop
3s9q7zl7
A business plan for coaches: the coach's knowledge captured at the end of every lesson, in a record the player holdsBriefing27407 KB2026-09-24
34Risk Acceptance Office
odn10gfp
A business plan with one risk replayed: established on facts, accepted for an interval, escalated, funded and ended on factsBriefing32673 KB2026-09-24
33Connector Twin
7tkvspwp
A business plan with a working replay: what an agent did through Gmail and Calendar, what it saw, and what can be undoneBriefing31515 KB2026-09-24
32Agent as Webmaster
ikrqeu5t
A complete business plan, with mock-ups and prototypes, written for somebody else to runBriefing32666 KB2026-09-23
31DSIT AI Risk Toolkit
0q4sfr57
Start with an AI decision and trace it back to UK DSIT guidance; an eight-slide walkthrough plays from the vaultReference15512.1 MB2026-09-20
30Fractional CISO application pack
eaba68j5
The sibling of #29, written for an archetype instead of a company, so there is nothing to redact. Two days a month, a twelve-month map, and a section that says what the role is notBriefing7219 MB2026-09-18
29Interim CISO application pack
8brojsem
A job application as a vault, three routes for three readers, four documents in four formats each, and the client named nowhereBriefing5617 MB2026-09-17
28Synthetic users 路 riskmandate.ai
o3q6zhtr
The same method as #27 pointed at a second product, and it measured rather than narrated, catching a shipped bug every existing test had passed overAnalysis533.5 MB2026-09-16
27Synthetic users
g2hei4u6
Five invented buyers walked through store.sgit.ai one screenshot at a time, 43 steps, 15 unanswered questions, 18 findings, three costing a saleAnalysis676.4 MB2026-09-15
26The sgit.ai board
pdulwi6i
The site's own task board as a vault, cards as files, five columns as an app, the source of truth the site renders fromRecord2140 KB2026-09-07
25Agent permission games
4evnlwrj
Two games about grants and mandates, the first vault here that phones homeApplication682.6 MB2026-09-06
24AIUC-1 conformance layer
2wzct4k7
The AIUC-1 standard as a graph, plus a conformance layer that computes insurabilityReference64943 MB2026-09-05
23Licence to Operate
posrhzp3
An insurance policy for an agent, simulated: grant, mandate, and the delta nothing coversAnalysis12113 MB2026-09-04
22VoiceDebrief pitch (FI)
95i2xqrd
A three-minute investor pitch as a presenter app, with script, timings and sourcesPresentation4817 MB2026-09-02
21Scaling Threat Modeling
0ict6flm
ThreatModCon 2025: eleven linked threat models across 51 nodes and 179 threatsPresentation534.1 MB2026-08-27
20AI vs. AI, Black Hat EU 2025
k1izvg7e
The Black Hat EU 2025 keynote, with its PDF exports and eight research papersPresentation8720 MB2026-08-27
19Standards Atlas, GDPR
4zv4bvmu
GDPR as a semantic graph, with writes scoped to a feedback folderReference1166.3 MB2026-08-25
18RiskMandate 路 File security
wu365g94
An eleven-step risk-acceptance walk, running SQLite in the browserAnalysis712.7 MB2026-08-25
17Penetration Test Report
o4lrwx02
A penetration test report (fictional) with a re-test script per findingReport936.4 MB2026-08-25
16SG/Payments Brief Pack
o3m0sz3q
A payments briefing pack, marked PROPOSED rather than dressed as decidedBriefing18224 KB2026-08-25
15Content-Transformation Proxy
3c90c2bff2b1
An as-built engineering brief, shipped with its slides, diagrams and source PDFsBriefing14063 MB2026-08-25
14SG Commercialisation
haeu7p1e
A commercial operating model, with its customer register deliberately left emptyBriefing78536 KB2026-08-25
13Vault App Mode
xth1xt78
Nine proofs of concept for vault app mode, with a hub that runs themReference57251 KB2026-08-23
12Private Health Score
zc6abngv
A clinical questionnaire scored by a versioned framework, with a clinician review screenApplication351.2 MB2026-08-23
11VoiceDebrief
k6xy9z4d
Four apps in one vault, from raw recording to structured debriefAnalysis921.2 MB2026-08-22
10Regulation Graph
73heuprz
The EU AI Act parsed from Formex into an evidence graph, article by articleReference20714.9 MB2026-08-20
9Risk Mandate
4zf6pf2z
A working software project delivered as a vault, and it calls an LLM holding no API keyApplication1241.9 MB2026-08-17
8Risk Graph Explorer
3simlnqe
A fact-to-risk graph explorer, built to be public: its app.json requests nothingApplication33428 KB2026-08-17
7Agentic Browser Isolation
0610gsp9
Should an agent browse with your logged-in sessions? A living risk graph, per stakeholderAnalysis1042.4 MB2026-08-17
6Supplement Stack
r7zes477
A patient-held health record: a real regimen, label photos, totals against UK RNIsRecord232.3 MB2026-08-16
5Strategy Maps
ookq4mn4
The SG/Send strategy in seven Wardley maps, plus the sgit positioning analysisAnalysis33830 KB2026-08-16
4Field Notes
4bshby5n
Six studies with generative SVG art, the smallest complete vault appApplication411 KB2026-08-16
3Deploy Docs
fyofmkvr
Living deployment documentation, updated by an sgit push with no site deployRecord1725 KB2026-08-16
2The Vault Catalogue
kc67yhgw
An index of published vaults that is itself a vault, and lists itselfRecord911 KB2026-08-16
1Algarve 路 May 2026
3d04e6b9ca98
A travel diary: twenty photographs in three sizes and an eight-chapter narrativeGallery7129 MB2026-08-16

Publishing one of your own? The method is written down: the seven steps behind every row above, the tools that do each one, and the mistakes that produced each rule. The rules themselves, with the incident behind each, are on Lessons learned, including why a read key may be published and a vault key never may.

This table is the complete list, and its machine-readable twin is generated from the same file. The catalogue (an index of vaults that is itself a vault, updated by an sgit push with no site deploy) carries a shape taxonomy and per-entry evidence status for the first nine; it is waiting on its key holder for the rest. The original worked example of creating, auditing and embedding one is on the embed demo page.

Agents: this catalogue is also published as /demos/vaults/llms.txt, every vault above with its id, category, size and published read key, generated from the same file this table is, so the two cannot drift. The whole-site map is /llms.txt.