Your vaults, opened

What your vaults hold, file by file and commit by commit, opened here with your keys. The server only ever had the ciphertext.

Loading…

The viewer, on a demo account

A reader vault made for showing, with a made-up account, linked to the newsroom’s viewer exactly as yours is: press to open it in the SG/Vault app, read-only, with its published read key. What you see is the viewer, loaded from its own vault lkypj6zq through the link, reading the demo vault’s records.

The demo reader vault in the SG/App, read-only: the newsroom's viewer shows a balance of £4.84, 3 pages read, 2 notes, 2 devices, the reading and the notes

What this page shows

Every vault of your account, opened here with the keys the pane holds for this tab: the reader vault (your reads, notes and devices, one file per device, and the link to the newsroom’s viewer), the lane (the notes you sent to the newsroom), the master (the keys of the others) and this door (the master’s key). The master’s and the door’s files open only behind Reveal.
The files and the commits. The tree as published now, any file’s contents, and the commits, newest first; pick one to see the tree and the files as they were.
The reader vault in the SG/Vault app, on a press: its read key is handed to the app at dev.vault.sgraph.ai over its embed protocol, never in an address, never stored, and it cannot write. App Mode opens the vault with its app: the newsroom’s viewer, a vault of its own that every reader vault links read-only and opens with. The vault browser there shows the files, the SGit history and the settings.
Nothing is written from this page, and nothing leaves the browser but requests for ciphertext; every one is listed in the pane’s Calls tab, named and, on a press, decrypted.

The design is the vault, opened; the viewer’s source is vault/vault-app/.

For an agent

vault/browse.html opens the reader's vaults in the page with the session the vault pane keeps in sessionStorage (sgit.vault.session: the door): assets/vault-pane/browse.js unlocks the door, the master, the reader vault and the lane with the vendored library, lists every file (vault.listFolder), reads any file (master and door behind Reveal), lists the commits (vault.logCommits) and the files at a commit (listTreeAt, readFileAt). It writes nothing. The reader vault also opens in the SG/Vault app (dev.vault.sgraph.ai) through assets/vault-pane/sg-embed.js (the embed protocol, as sgit.ai's vault-ui-embed.js uses it), with the vault's read key handed over postMessage; App Mode opens the shared viewer, a vault linked read-only into each reader vault (newsroom-viewer.link.json, .vault/owner/ro-links.json, .vault/app.json, index.html). The viewer's source is vault/vault-app/ and its public record admin/content/vaults/vault-viewer.json, published by admin/build/viewer_vault.mjs.