v0.13.115: @newsroom.dev: independent review, a section

A section to point to. newsroom.sgit.ai/reviews/ is now Independent review: how outside reviewers check this newsroom, in six steps (what to review, how, where the reviewer works, the gate, the desk, the record), then every review and every open finding. A bar across its pages links the queue, Vaults and keys, the criteria, the send page and the records, and the section is in the menu under How it runs.

Vaults and keys. One page with every public part: each reviewer's vault and its read key, and the review desk's and the security agent's keys as pki.sgit.ai key links, each as a QR code; the key bundles and their register submissions; where the security agent's verdicts go; who does what; and the only private things, the keys that write or sign, named, with who holds each, none of them on the site.

Secrets that fit a QR code. Each secret is sealed to the editor's key on pki.sgit.ai, and is now small enough for one QR code: the desk and the security agent keep only the key they sign with. ChatGPT's vault (now gfzbzp41) and the two keys (sha256:fb35b723a2ae8b98, sha256:2f1a036313b78b1d) were made again for it; the first ones are listed as retired, with why.

Card 093.