store.sgit.ai / All six, side by side
All six, side by side
Four tiers and two add-ons. Four prices are set, one range is deliberately wide, and the add-ons are banded rather than priced. Every number on this page comes from one file, and a build check holds each of them against the pack that set it — because these prices go onto printed cards, and a printed price cannot be corrected from a conference floor.
The table
| The question it answers | Price | When it arrives | What is true of it today | How it is paid | Offer id | |
|---|---|---|---|---|---|---|
| Tier 1 | Can I just have the pack? | £10 | Immediately | exists and runs | Payment link | t1 |
| Tier 2 | Can I have a vault I hold the keys to? | £50 | 1 to 2 days | exists and runs | Payment link | t2 |
| Tier 3 | Can you correct it for my situation? | £500 | 1 to 3 days | delivered by a person | Payment link | t3 |
| Tier 4 | Can somebody go through it with my team? | £1,500 | 1 to 5 days | delivered by a person | Payment link | t4 |
| Add-on | Can I have the same result in a form the board will read? | By depth band | With the level it attaches to | part exists | Payment link | add-formats |
| Add-on | Will somebody put their name to it? | By depth band | With the level it attaches to | does not exist yet | Not for sale yet | add-opinion |
The offer id is the stable part. A payment link redirects to /d/<id>/, so this site can move host without reprinting a card or reissuing a link.
The same six, by who each one was built for
This page is the price ladder. The other way in is by who is climbing it — which is the question somebody actually arrives with, and the reason the home page asks it first.
| Who is buying | What they are shown | Built for them | The market, evidenced |
|---|---|---|---|
| You run agents “What did I actually grant it?” | t1, t2, add-formats | t1, t2 | read, not run |
| You are an investor “What would somebody who knows what they are doing find?” | t3, t4, add-opinion, add-formats | t3, t4 | read, not run |
| You are a startup “What is diligence going to find before it finds it?” | t3, t4, t2, add-formats | none — see the page | read, not run |
Three groups, six offers, and no seventh: this is an index over the price list, not an extension of it. The middle column is what each group is shown; the third is what was actually built pointing at them, which for one of the three is nothing.
The six, in full
Can I just have the pack?
Every file in the vault for the shape you picked, downloaded by you — the behaviour policy, the grant and the mandate as markdown and as JSON, the pinned vocabulary, the prompts, the business case, and the two files you hand the agent — under a commercial licence to you, rather than under the attribution licence the same files carry in public.
exists and runs Built, and it runs today. Fifteen template shapes are published, and the pack for any of them is what this level sends.
Immediatelythe moment the payment goes through
Payment link. A link, and a printed code beside it. An online payment, so no cross-border rule applies to it.
Can I have a vault I hold the keys to?
A vault of your own with the pack in it, a licence carrying your name, and no public key on it.
exists and runs Built, and it runs today. A template shape is built into a vault by one command; yours is that, licensed to you, with the public key off it.
1 to 2 daysfrom your payment
Payment link. A link, and a printed code beside it. An online payment, so no cross-border rule applies to it.
The payment link has not been issued yetWhat arrives, and what does not →
Can you correct it for my situation?
The vault, with the mandate corrected against your situation rather than against a starting assumption, and a written note of what changed.
delivered by a person Done by a named security professional, and done many times: six vaults of this work are published and open to read, including an eleven-step risk-acceptance walk over one evolving register. What you buy at this level is that person's time turned on your situation rather than a template's.
1 to 3 daysfrom your reply, not from your payment
Payment link. A link, and a printed code beside it. An online payment, so no cross-border rule applies to it.
The payment link has not been issued yetWhat arrives, and what does not →
Can somebody go through it with my team?
Two half-hour sessions with your team, the behaviour policy built from the interview, and a security professional's review and sign-off.
delivered by a person Two sessions with a named security professional, who reviews the work and signs it off. The method is published and open to read — an agent's grant, its mandate and the delta between them, and eleven linked threat models presented at a conference in Barcelona.
1 to 5 daysfrom your reply, not from your payment
Payment link. A link, and a printed code beside it. An online payment, so no cross-border rule applies to it.
The payment link has not been issued yetWhat arrives, and what does not →
The two add-ons
Both attach to an offer above and are priced against its depth band. Neither is a tier, and neither can be bought on its own.
Can I have the same result in a form the board will read?
The same result as a document, a deck, an infographic, and in a second language.
part exists The generator exists. The check that proves every variant carries the same facts does not, so the guarantee that would make this worth buying is not printed here yet.
With the level it attaches tosame clock
Payment link. A link, and a printed code beside it. An online payment, so no cross-border rule applies to it.
Priced against the offer it attaches toWhat arrives, and what does not →
Will somebody put their name to it?
A reviewed opinion, issued by the company, signed by a named professional.
does not exist yet The wording does not exist. It has to, before a first signature — so this add-on is listed and cannot yet be bought.
With the level it attaches tosame clock
Not for sale yet. There is no code behind this one.
No code behind this one yetNothing to read yet: no wording, no code
Why each number is that number
No price on this site is positioning, and none of them is the builder's. The four were set by the project lead on 15 September 2026, replacing the four tiers of the 10 September pack, and the frozen table in the build gate was re-pointed at them in the commit that says so. The check did not loosen; it was aimed somewhere else.
| The number | Why it is that number |
|---|---|
| £10 — Can I just have the pack? | The floor, and it has moved twice. £10 on 10 September, because the fixed card fee is about four per cent of a fiver; £5 on 15 September by ruling anyway; £10 again on 16 September — and this time the number is not what changed. Two reviewers said £5 read as a commodity price for something sophisticated, and the answer to that is not a bigger number for the same thing. What you buy at this level is now a commercial licence over material that is public under CC BY, which is a different product rather than a dearer one |
| £50 — Can I have a vault I hold the keys to? | The same material as the level below, as the thing itself rather than a copy of its contents. A vault is versioned, has its own app and can be handed to somebody with a read key, and none of that survives an email |
| £500 — Can you correct it for my situation? | You send the industry, the use case and the details; the mandate is corrected against them and the delta recomputed. It is the first level where somebody other than you does the work that makes the document yours |
| £1,500 — Can somebody go through it with my team? | Two half-hour sessions — one to interview the team, one to deliver — plus the work between them and a security professional's review. It is the only level whose cost is somebody's time, and it is a fixed price rather than a band because two sessions is what is sold |
| By depth band — Can I have the same result in a form the board will read? | Priced against the depth band of the offer it attaches to, because the work is the rendering and the rendering scales with what there is to render |
| By depth band — Will somebody put their name to it? | Priced against the depth band of the offer it attaches to |
The floor moved, and the arithmetic that argued against it is still here. At £5 the fixed card fee alone is about four per cent of the transaction, which on 10 September was the reason the floor was £10 rather than £5. On 15 September the floor was set at £5 anyway, and on 16 September it went back to £10 — this time because of what the level carries rather than what it costs to take the money. Every step stays on the page, because a store that deletes the argument it lost is a store you cannot check. projected 10 Sep 2026
The cheapest level is a licence, not a download. The files it sends are published free under CC BY, and anybody using them that way has to attribute them. What £10 buys is a commercial licence to you over the same material — so it can go into client work, into a product, or into a document that goes to a regulator, without carrying our name into it. That is grantable because the copyright in the pack is ours: everything in it was written here. The wording is not drafted yet, and the ledger says so rather than the page implying otherwise. read, not run 16 Sep 2026
Prices are in pounds. Pricing in euros while settling in pounds adds about two per cent, and that two per cent buys nothing. projected 10 Sep 2026
How each one is paid for
Every level is a single price, so every level can hold a standing payment link. There is no band to fix and nothing to take a deposit against: that shape belonged to the offer line replaced on 15 September, and the ledger keeps it rather than pretending it was never there. read, not run 11 Sep 2026
No link has been created on either rail. Every card shows its code and its delivery page instead of a live button, and your order names which rail is missing. part exists 17 Sep 2026 How buying works.
The offer identifier is the stable part
A printed code redirects to /d/<id>/ and nothing else about it is load-bearing. Not the host, not the path above it, not a word of the copy.
That is deliberate, and it is the one piece of engineering this site does purely because of a disagreement. A ruling of 10 September placed a storefront under the risk product rather than on the platform domain. The instruction in hand overrode it and named this host. The ruling stands on the record, unedited, and the build treats the host as moveable: every internal link here is relative, the host appears in no sentence of copy, and the identifiers above do not change. If the site moves, it costs a DNS record and no reprinting. read, not run 10 Sep 2026
What is not on this page
Eight further offers are specified and none of them is for this week. The amendment subscription, the divergence report, the rendering diff as a verification service, crosswalk resolution, the write-only vault link, the vault as a data room, the threat-model estate, and the infographic generator with a purchase page. They are listed here so that nobody proposes them as new.
Which agent do you run? → How buying works → Every claim, with its state →