# Startups — it is open source, and it is built to be built on

> Nine capabilities to reuse, each naming what it runs on and how far along it is, including the ones that are still a design and say so.

*Source: <https://sgit.ai/summit/startups.html> · site v0.2.80 · this file is generated from the same content as the page, so the two cannot drift. Every page on this site has a `.md` twin; internal links below point at them.*

---

[Home](../index.md) / [Summit sheets](index.md) / Startups

**Sheet 02 of 04** — written for startups. [The other three →](index.md)

# Startups — Let’s build together

It is open source, and it is built to be built on. Start with the capability, reuse the component, and check the status — some of it is still a design, and it says so.

The stack was built to be collaborative. **Some of it is still a design, and it says so.**

[Download the PDF ↓](pdf/sgit-ai__02-startups.pdf)The sheet as handed out in Lisbon. The table below is the same content, in a form a search engine and an agent can read.

## What exists

|  | The capability | What exists today |
|---|---|---|
| 01 | **Storage the host cannot read, with history.** Powered by sgit, transfer protocol & browser vault | — |
| 02 | **Versioned data with a clonable past.** Powered by sgit, transfer protocol & browser vault | — |
| 03 | **Managing and distributing sensitive data.** Powered by Vaults on the same runtime | Healthcare is the worked example; an MVP is built on it. |
| 04 | **Voice into debriefs, wherever the voice already is.** Powered by Voice Debrief + WhatsApp, file & agent integrations | WhatsApp, files and agents are already wired in. |
| 05 | **A chat in your app that never holds a model key.** Powered by Model call layer | — |
| 06 | **Translation to executives, in any specialist domain.** Powered by Boardroom, agent rooms & persona machinery | — |
| 07 | **Knowing what your agents are doing, and describing it.** Powered by Risk product & free behaviour-policy library | — |
| 08 | **Scalable risk management.** Powered by Risk acceptance framework | A risk is accepted for a stated period. Research design; implementation not claimed. |
| 09 | **Facilitating due diligence on your product.** Powered by Write-only intake + seven-criterion evaluation framework | Use the scorecard for honest self-assessment: what their diligence will find, before it runs. |

## Build on the stack

The infographic generator runs today, is used by a number of people, and **has no way to pay for it**. Seven further companies are written up in full and given away under attribution licensing.

```
pip install sgit-ai
```

**Write to [dinis.cruz@owasp.org](mailto:dinis.cruz@owasp.org)**, or explore [the network](../network/index.md).

## The sheet itself

**Proof 02 · 14 September 2026.** Fact set: brief v0.33.70, 13 September 2026, revised with the 14 September comments. Code: permissive software licence. Documents: CC BY 4.0. [← All four sheets](index.md) · [Explore the network](../network/index.md)


---

*[Site index for agents](../llms.txt) · [HTML version](https://sgit.ai/summit/startups.html)*