# Published vaults on sgit.ai

> The catalogue of encrypted vaults published at https://sgit.ai/demos/vaults/index.html,
> generated at build time (v0.2.75) from the same file the table on that page is built
> from — so this list and that table cannot drift apart.
>
> Every vault below is opened by a READ KEY: a 64-character hex string and a vault id, derived
> one-way from a vault key that is never published. A read key is the complete credential —
> no account, no token, nothing to install. `sgit clone <read key>` from the CLI, or open it at
> https://dev.vault.sgraph.ai/#<read key with the colon percent-encoded>.
>
> The server stores ciphertext under opaque ids and cannot read any of this. How a browser
> reads one file out of a vault is written up at /vault/reading-a-vault-file.md.

## The vaults (26)
- **#26 The sgit.ai board** — The site's own task board as a vault — cards as files, five columns as an app, the source of truth the site renders from
  - page: /demos/vaults/board/index.md
  - id `pdulwi6i` · Record · published 2026-09-07 · 40 KB · 21 files
  - read key: `f41d03b0de550479b3c4359709130386df48f34b2cd75e5ed83de28e9776b479:pdulwi6i`
- **#25 Agent permission games** — Two games about grants and mandates — the first vault here that phones home
  - page: /demos/vaults/agent-permission-games/index.md
  - id `4evnlwrj` · Application · published 2026-09-06 · 2.6 MB · 68 files
  - read key: `f94c8b1d42352d95703ac3d39032735d9b4e388d16ab5b87c948928d8e111118:4evnlwrj`
- **#24 AIUC-1 conformance layer** — The AIUC-1 standard as a graph, plus a conformance layer that computes insurability
  - page: /demos/vaults/aiuc-1-conformance/index.md
  - id `2wzct4k7` · Reference · published 2026-09-05 · 43 MB · 649 files
  - read key: `sgit_private_read_0f01d367b04f886f6c65038649b76504f4cd2ad06480d88a5e933a671e0db072:2wzct4k7`
- **#23 Licence to Operate** — An insurance policy for an agent, simulated: grant, mandate, and the delta nothing covers
  - page: /demos/vaults/licence-to-operate/index.md
  - id `posrhzp3` · Analysis · published 2026-09-04 · 13 MB · 121 files
  - read key: `d990a52efb9af32c8463e2962f3ca5ccf92b3b6e8ea788e55009073c29b4da29:posrhzp3`
- **#22 VoiceDebrief pitch (FI)** — A three-minute investor pitch as a presenter app, with script, timings and sources
  - page: /demos/vaults/voicedebrief-pitch/index.md
  - id `95i2xqrd` · Presentation · published 2026-09-02 · 17 MB · 48 files
  - read key: `23cbc4c65c24cb23ef3efb78e34593391c6709f0106ea81799aa14fe97f4d211:95i2xqrd`
- **#21 Scaling Threat Modeling** — ThreatModCon 2025: eleven linked threat models across 51 nodes and 179 threats
  - page: /demos/vaults/threatmodcon-2025/index.md
  - id `0ict6flm` · Presentation · published 2026-08-27 · 4.1 MB · 53 files
  - read key: `sgit_rk1_23fb205247b2b9c88a943d7ffece9dacf9c00c50cc94840668b4916f247b8ec4:0ict6flm`
- **#20 AI vs. AI — Black Hat EU 2025** — The Black Hat EU 2025 keynote, with its PDF exports and eight research papers
  - page: /demos/vaults/blackhat-eu-2025/index.md
  - id `k1izvg7e` · Presentation · published 2026-08-27 · 20 MB · 87 files
  - read key: `sgit_rk1_147fa50d3c491aeea3e700d60ef21ea2897884e263700d95765dc8f624dc59ac:k1izvg7e`
- **#19 Standards Atlas — GDPR** — GDPR as a semantic graph, with writes scoped to a feedback folder
  - page: /demos/vaults/standards-atlas-gdpr/index.md
  - id `4zv4bvmu` · Reference · published 2026-08-25 · 6.3 MB · 116 files
  - read key: `sgit_rk1_439ca57ab9e53b4edfa67e99da1b70948c297d323376c890292dc2f0876aa15c:4zv4bvmu`
- **#18 RiskMandate · File security** — An eleven-step risk-acceptance walk, running SQLite in the browser
  - page: /demos/vaults/riskmandate-file-security/index.md
  - id `wu365g94` · Analysis · published 2026-08-25 · 2.7 MB · 71 files
  - read key: `sgit_rk1_e8a1e664b9f984b0d8df442f463231077d455d7cbaa3e336610b14f9a1e1dc77:wu365g94`
- **#17 Penetration Test Report** — A penetration test report (fictional) with a re-test script per finding
  - page: /demos/vaults/pentest-report/index.md
  - id `o4lrwx02` · Report · published 2026-08-25 · 6.4 MB · 93 files
  - read key: `sgit_rk1_14042259ecbec2d0c7c4e68963695c4ceeeeb652767d25b777024a4f05ccd025:o4lrwx02`
- **#16 SG/Payments Brief Pack** — A payments briefing pack, marked PROPOSED rather than dressed as decided
  - page: /demos/vaults/payments-brief-pack/index.md
  - id `o3m0sz3q` · Briefing · published 2026-08-25 · 224 KB · 18 files
  - read key: `sgit_rk1_cd1987b87f719c2ff6da51128200665312afaeeadcbf7a1a20f870f03f9959f8:o3m0sz3q`
- **#15 Content-Transformation Proxy** — An as-built engineering brief, shipped with its slides, diagrams and source PDFs
  - page: /demos/vaults/content-transformation-proxy/index.md
  - id `3c90c2bff2b1` · Briefing · published 2026-08-25 · 63 MB · 140 files
  - read key: `sgit_rk1_18bf8b2aa558fec879edb39c79ee66d6b9594ada2dff71039b3f66f5b14e4839:3c90c2bff2b1`
- **#14 SG Commercialisation** — A commercial operating model — with its customer register deliberately left empty
  - page: /demos/vaults/commercialisation/index.md
  - id `haeu7p1e` · Briefing · published 2026-08-25 · 536 KB · 78 files
  - read key: `sgit_rk1_3c8cba7edd2f14e63d0b0f0da4d513430e3eea06f364baefaf8b22d85e151da6:haeu7p1e`
- **#13 Vault App Mode** — Nine proofs of concept for vault app mode, with a hub that runs them
  - page: /demos/vaults/vault-app-pocs/index.md
  - id `xth1xt78` · Reference · published 2026-08-23 · 251 KB · 57 files
  - read key: `sgit_rk1_05f2391f22e4135ea27bca6b697dca18c54ab91b046325bef74f62f5324b8bc8:xth1xt78`
- **#12 Private Health Score** — A clinical questionnaire scored by a versioned framework, with a clinician review screen
  - page: /demos/vaults/health-score/index.md
  - id `zc6abngv` · Application · published 2026-08-23 · 1.2 MB · 35 files
  - read key: `sgit_rk1_a76f327fb602f1619a67a15a0b756d69e82a1f7fa48438d4b6ecbebae2dc3d40:zc6abngv`
- **#11 VoiceDebrief** — Four apps in one vault, from raw recording to structured debrief
  - page: /demos/vaults/voice-debrief/index.md
  - id `k6xy9z4d` · Analysis · published 2026-08-22 · 1.2 MB · 92 files
  - read key: `sgit_rk1_31e8196d3e83b37277083c29f105b8310dbac4569e22715b5e0f85d46878eec1:k6xy9z4d`
- **#10 Regulation Graph** — The EU AI Act parsed from Formex into an evidence graph, article by article
  - page: /demos/vaults/regulation-graph/index.md
  - id `73heuprz` · Reference · published 2026-08-20 · 14.9 MB · 207 files
  - read key: `sgit_rk1_c004daae386e8d17fa648884acc527018bd4ea1116ad673fb2f1b068011695c9:73heuprz`
- **#9 Risk Mandate** — A working software project delivered as a vault — and it calls an LLM holding no API key
  - page: /demos/vaults/risk-mandate/index.md
  - id `4zf6pf2z` · Application · published 2026-08-17 · 1.9 MB · 124 files
  - read key: `sgit_rk1_a702fba803faac4369eb5d5a320b4dfa017af62bd2425fb298aac4b99e95c0ae:4zf6pf2z`
- **#8 Risk Graph Explorer** — A fact-to-risk graph explorer, built to be public: its app.json requests nothing
  - page: /demos/vaults/risk-graph-explorer/index.md
  - id `3simlnqe` · Application · published 2026-08-17 · 428 KB · 33 files
  - read key: `sgit_rk1_1c1b95f5903e35850a9bc0541ffa09c6b5d4017cbf18817d2ad6f894127e5638:3simlnqe`
- **#7 Agentic Browser Isolation** — Should an agent browse with your logged-in sessions? A living risk graph, per stakeholder
  - page: /demos/vaults/agentic-browser-isolation/index.md
  - id `0610gsp9` · Analysis · published 2026-08-17 · 2.4 MB · 104 files
  - read key: `sgit_rk1_92cad4cea8f58c55f59b686c71c935225a1ba7c41ecb6922a8aa570467604f6e:0610gsp9`
- **#6 Supplement Stack** — A patient-held health record: a real regimen, label photos, totals against UK RNIs
  - page: /demos/vaults/supplement-stack/index.md
  - id `r7zes477` · Record · published 2026-08-16 · 2.3 MB · 23 files
  - read key: `sgit_rk1_047186b559528058c66d1792b7345639b1238cb95c166d1d5f5b65c59813c2ee:r7zes477`
- **#5 Strategy Maps** — The SG/Send strategy in seven Wardley maps, plus the sgit positioning analysis
  - page: /demos/vaults/strategy-maps/index.md
  - id `ookq4mn4` · Analysis · published 2026-08-16 · 830 KB · 33 files
  - read key: `sgit_rk1_451c4c1e28fbb24a7f350bb3f107b2c103d69ed363167029ef9c9000ff76c07b:ookq4mn4`
- **#4 Field Notes** — Six studies with generative SVG art — the smallest complete vault app
  - page: /demos/vaults/field-notes/index.md
  - id `4bshby5n` · Application · published 2026-08-16 · 11 KB · 4 files
  - read key: `sgit_rk1_2848993a68c02a33ea5582902c391901191e53680d35b36c0e76185d4107ad81:4bshby5n`
- **#3 Deploy Docs** — Living deployment documentation, updated by an sgit push with no site deploy
  - page: /demos/vaults/deploy-docs/index.md
  - id `fyofmkvr` · Record · published 2026-08-16 · 25 KB · 17 files
  - read key: `sgit_rk1_8d01421290efc3fa03205eced0534335a06ae209d627555b3dde136b878e3de1:fyofmkvr`
- **#2 The Vault Catalogue** — An index of published vaults that is itself a vault, and lists itself
  - page: /demos/vaults/catalogue/index.md
  - id `kc67yhgw` · Record · published 2026-08-16 · 11 KB · 9 files
  - read key: `sgit_rk1_fd71e4bde7232498e43a5da869b1501260d9d403031b20af87b5bc801bdf6280:kc67yhgw`
- **#1 Algarve · May 2026** — A travel diary: twenty photographs in three sizes and an eight-chapter narrative
  - page: /demos/vaults/algarve-may-2026/index.md
  - id `3d04e6b9ca98` · Gallery · published 2026-08-16 · 29 MB · 71 files
  - read key: `sgit_rk1_0a0f34839d737eef0f8f66e5236990b1f397af064763e3f71dca2717015f9d15:3d04e6b9ca98`

## How these were published
- [Publishing a vault: the method](/demos/vaults/publishing.md) — the seven steps behind every row above.
- [The vault catalogue](/catalogue/index.md) — the same index, rendered live from a vault that indexes vaults.
- [Reading one file out of a vault](/vault/reading-a-vault-file.md) — the primitive under every live embed here.