store.sgit.ai / The two rails, and why they never meet
The two rails, and why they never meet
Both rails exist. They must never appear as a choice on one transaction. One is a payment link with a printed code beside it. The other is a cloud marketplace, above roughly a thousand pounds, after a conversation. The reason they are kept apart is not taste — it is that the marketplace's seller terms say a seller is not permitted to collect customer payment information at any time.
The two rails
| Payment link, with a printed code | The cloud marketplace | |
|---|---|---|
| For | Everything on the price list, all four levels | Business buyers who would rather have it inside terms they already hold, after a conversation |
| Why | A payment link is an online payment, so no cross-border rule applies | The buyer already holds the marketplace's legal terms |
| What it removes | The card reader, and the declined tap | The master agreement, the vendor onboarding, the new purchase order |
| What it costs | The provider's ordinary card fee | 0.5 per cent, falling to zero inside a qualifying multi-product solution |
| State | read, not run 10 Sep 2026 | specified, not built 10 Sep 2026 |
Who takes the card, and where
One rail, and it is a payment link on Stripe's own pages. Six products are priced there, three coupons exist, and the store reconciles both against its own data on every release. A second rail was planned and came off on 16 September for the first end-to-end store — a rail that is half set up is a second thing to explain here and a second thing to keep true, and neither is worth it while the first one is not live. The plan for it is kept rather than deleted.
Nothing on this site collects anything. No form, no input, no select, no account, no cookie. The provider takes your name, your contact and your card on its own pages, which is the only place a card number should ever be typed. A build check holds every page here to that, and a second one holds every page to opening no network connection at all.
One page can be typed into: the partner review. It has reason boxes on it because it exists to be answered, and the rule moved by ruling in v0.1.15 to allow exactly that and nothing else. There is still no <form> on this domain — that is the element that submits — and still no <input> or <select>, which is where a card number would go. What somebody types there stays in their own browser until they copy it out. read, not run 15 Sep 2026
What reaches the provider is the amount and your order reference. The reference carries the product codes for everything you picked, so matching it against the name and contact the provider captured gives the whole order. How that works, in three steps.
Every level is one price, so every level can hold a link
The four levels are £5, £50, £500 and £1,500 — single prices, not bands, which is what a standing payment link needs. The banded tiers and the deposit that this page used to describe belonged to the offer line replaced on 15 September: there is no band left to fix and no engagement left to deposit against. read, not run 11 Sep 2026
No link has been created on either rail. Your order renders the button as unissued and names the rail that is missing, rather than showing something that looks live: a greyed-out button is a lie about which half of the work is done. Pasting one line into data/checkout.yml turns a rail on, and the build holds whatever lands there to that provider's own checkout hosts over HTTPS. part exists 17 Sep 2026
Why the catalogue is not inside either provider
Sixty-two product codes maintained in two places is sixty-two codes that will one day disagree. The catalogue lives here, in one file, checked on every build; the provider takes an amount and a reference; neither side has to know about the other. It also means adding a product is a build rather than a build plus a console.
Why a link, and not a card reader
A United Kingdom card account cannot tap in Portugal. The provider declines the transaction on detecting a different country, and says so in those words. A card reader bought for the event would have been a box that says no, in public, to the first person who tried to pay with it.
A payment link is an online payment. No cross-border rule applies to it. The buyer opens their own phone, on the provider's own page, and pays. Nothing on this site ever sees a card number, because nothing on this site ever handles one.
So no card reader was bought, and the four codes on the cards are four links. read, not run 10 Sep 2026
Why the marketplace is a conversation and not a button
The marketplace's seller terms state that a seller is not permitted to collect customer payment information at any time. read, not run 10 Sep 2026
A checkout button beside a marketplace button, on one page, for one transaction, is a design that walks straight into that. So the marketplace is not a second payment option here. It is a different route with a different threshold, and you reach it by talking to somebody, not by clicking something.
The pitch is procurement, not discount. A buyer who already has the marketplace's legal terms does not need a master agreement, a vendor onboarding round, or a new purchase order. That is worth more than a percentage to the person who has to get the purchase through, and it is the actual reason to use the rail. The fee is 0.5 per cent, and falls to zero inside a qualifying multi-product solution. read, not run 10 Sep 2026
Registration is the long pole: four to eight weeks. The listing is a November surface. Nothing on this site depends on it. specified, not built 10 Sep 2026
One correction, carried here rather than dropped
Professional services listings do not draw down committed spend on the cloud provider. Three independent sources state the exclusion.
An earlier version of the marketplace argument said the opposite. That version is on no page of this site, and this paragraph exists so that if somebody repeats the old claim in a room, the correction is findable rather than remembered. read, not run 10 Sep 2026
Where each code lands
Four codes, one per level. The identifiers did not change when the prices did, which is the whole reason the pack said to keep them stable: a repricing costs no reprinting, and a card already made still lands on the right page. Each redirects to a delivery page that says what arrives and what does not:
t1— £10, the pack, downloaded on the page you land on, immediatelyt2— £50, a working vault you hold the keys tot3— £500, corrected for your situationt4— £1,500, two sessions and a professional signs it
The cards the codes are printed on differ only in the question on the front and the destination of the code, which makes the fact set identical across every variant by construction rather than by checking.
The codes are the only part of this with a hard date. The event is 17 and 18 September 2026, in Lisbon. The merchandise surface, the eight further offers and the marketplace listing do not depend on it, and nothing on this site pretends otherwise. read, not run 10 Sep 2026
A discount code, and why there is nowhere to type one
A code arrives in the address, not in a field. There is no text input anywhere in this site's output and the gate refuses one, so a code is handed over the way a printed card or a QR at a stand hands it over anyway: store.sgit.ai/policies/?code=…. The store recognises it, shows it as a chip that can be removed, and takes it back out of the address bar, because a screenshot of a checkout should not carry one.
What ships is the hash of the code and never the code. A page that recognised a code by carrying it would publish it the moment it was built, so the browser hashes what it was handed and compares — and a build check reads every byte of the built site against every code and fails the release if one is found, which is the same rule, with the same test behind it, as no vault key on any page.
That is worth what it is worth and no more. A nine-character code can be ground out of a hash. What actually stops a stranger paying nothing is that a browser does not take money: a recognised code changes the amount a payment link is issued for, and the rail decides what is charged. No rail exists yet. part exists 15 Sep 2026
It comes off the price, and the deposit is taken on what is left. Half off the £500 level is £250, of which £50 is taken now and £200 on delivery; a code never moves the split, which belongs to the offer. A code at a hundred per cent still places an order and still lands on the page that says what happens next — which is the whole use of one, and how this flow gets walked end to end before a single real payment link exists.
What happens after the money moves
The page after paying is not on this site. riskmandate.ai publishes one page per level, and since its v1.19.2 the level-one page is the download itself — the zip, its size, its sha256, and a check that hashes the file in your own browser. Their build stamps the size and the hash; a stale one fails their CI. Nothing is copied here, because two copies of a hash is one hash that will go stale. exists and runs 15 Sep 2026
The handover carries two things and nothing else. Your order reference, which their page shows back to you and puts in the subject line of every message it offers; and, at level one only, the shape you bought — the same slug this store uses at /p/<slug>/, which is why the two catalogues keep their slugs in step. Nothing is posted, there is no callback and no session, and their page is a static file that works with no parameters at all.
Twenty-four hours is the commitment at the three vault levels. It is theirs rather than ours, and this store said "one working day" until v0.1.9 — a day slower than the page the buyer actually lands on. Two sites promising different things about one follow-up is the drift a shared brief exists to stop, and the number that stands is the one committed to in public.
What that handover still owes, in the order it blocks a sale
- Nothing carries a sale from here to the person who follows up. A static site cannot send it; until a rail's receipt reaches them, the channel is the buyer's own first message from the page they land on. This gates the first paid order at £50, £500 and £1,500. does not exist yet 15 Sep 2026
- No receipt has ever been issued, so whether it carries the reference, and under what name, is not known. built, not located 15 Sep 2026
- At £500 the files come back by email. A write-only vault to drop them into is the intended route and does not exist. part exists 15 Sep 2026
- Who owns the follow-up mailbox past the first orders is settled on neither site. This store names nobody and links to the page that carries the address, so a change is one change and not two. built, not located 15 Sep 2026
- How long the £500 level takes after you reply is committed to nowhere. The follow-up is
24 hours; the delivery estimate is one to three days from your reply. The page says so rather and labels it an estimate rather than a measurement. read, not run 15 Sep 2026
- The opinion add-on is listed here and has no page there — theirs will be built in the same shape as the four once it is asked for. does not exist yet 15 Sep 2026
What this site does with a payment
Nothing. It is a static site: no page that sells anything opens a network connection at all, there is no form, no cookie, no analytics, and no card number ever reaches it. One page does open one, and it is not this kind of page: a review of a vault embeds that vault, from one host, and says so in those words on itself. Paying happens on the payment provider's own pages, which is the only place a card number should ever be typed. A build check holds that line on every release.
Which agent do you run? → How buying works → Every claim, with its state →