# v0.2.1 — the work has been done, and the site finally says where to go and look

The store's claims said the £500 and £1,500 levels had never run for a paying buyer. Every word of that was true, and what a reader took from it was that nobody had ever done this work at all — which is false, and it was costing sales on a site whose whole argument is that it does not print false things.

The evidence was never missing. It was published on another domain and never linked from here. Twenty-eight encrypted vaults are published at sgit.ai, each opened by a read key that site publishes on the vault's own page; six of them are this work, and they are now on the home page: an agent's grant, its mandate and the eight-capability delta between them simulated end to end; an eleven-step risk-acceptance walk over one evolving register; a fact-to-risk graph explorer; a standard turned into 53 conformance rows where unevidenced is the default; eleven linked threat models presented at a conference in Barcelona; and the EU AI Act parsed into a graph you can cite a row of. Every URL was checked and returns 200.

So the evidence leads and the disclosure narrows to what is genuinely undone. The home page now says all four exist and two have never been bought here. The £500 and £1,500 rows say the work has been done many times and what has not run is a sale through this checkout — you would be the first through it, not the first to have it done. And the ledger's own legend for specified, never run was quietly wrong: it read never executed once, which is not what it has meant since today.

NO READ KEY CROSSES ONTO THIS DOMAIN. Each vault publishes its own on its own page, which is where a reader gets it, so this store's key surface stays at exactly one vault — the one its own review embeds.

TWO QUOTATIONS WERE SWAPPED FOR DIFFERENT PUBLISHED ONES, AND THE FILE SAYS WHY. The catalogue's one-line descriptions of two vaults contain a word hard rule 1 bars from this site absolutely, because the site carries prices. Nothing was paraphrased: sgit.ai publishes a longer description of each and those are quoted instead, with the substitution recorded above each entry rather than made silently.

check_the_evidence_is_real holds every entry to the domain that publishes it, the home page to linking all of them and to citing the claim, and the file to carrying no key of any shape — including the bare hex-and-vault-id form the catalogue prints, which none of the existing key patterns matched and which is the exact thing a careless copy would bring across. Four deliberate breaks were run against it.

- Released: 2026-09-16
- Built from commit: `76c0136d84a7eb7f28dc776bb3792d563217aaf3`
- Reconstructed: no

---

This document is released under the Creative Commons Attribution 4.0 International licence (CC BY 4.0).