The network
This site is one of several that carry one argument between them. Each row below names what the other site owns and what the boundary with this one actually is — because a network of sites that all describe each other in general terms is a network of dead links waiting to happen.
| Site | Owns | The boundary with this site |
|---|---|---|
| sgit.ai | The vault product, the catalogue, the demos, the shipped CLI | The /pw reverse proxy is vendored into a vault image and is in neither repository. Whoever documents the production auth path is documenting a component they cannot see — the correction is here. Needs coordinating |
| open-source.sgit.ai | The open-source position | Apache-2.0, the PyPI packages, and “somebody has to be the villagers”. This platform is that argument made concrete — and 61% of its commits are by Claude, which is the uncomfortable half of the same conversation |
| wardley-maps.sgit.ai | Mapping | The cold-start ladder is a de-facto evolution axis, and the substrate spectrum is a map waiting to be drawn |
| risks.sgit.ai | Risk | The EC2-tag trade-off is a worked example of an accepted risk with a named acceptor and a named mitigation |
| nhi.sgit.ai · sentinel.sgit.ai | Non-human identity, sentinel | The per-node key, the JS allowlist and least-privilege-by-declaration are all NHI subject matter |
| pki.sgit.ai | Key registries for agents | The house pattern this site was built from, and the question of who a per-node key belongs to |
| standards.sgit.ai | Instruments | Nitro Enclave attestation is an evidence artefact — still research. Light link |
⚠ The domain decision
This will be the question this site is asked most often, so it is stated here and repeated in the footer of every page rather than left to be discovered.
sg-compute.sgit.ai
This site. Static pages on GitHub Pages. It documents and audits the platform; it runs none of it. Nothing here is an endpoint.
a websitesg-compute.sgraph.ai
A live Route 53 zone, serving per-node DNS as <stack-name>.sg-compute.<zone>. Referenced 128 times in the platform's code and tests, including in code defaults and test assertions.
Same label, different TLD. The two options were:
- Claim the distinction explicitly —
sgit.aiis documentation,sgraph.aiis running infrastructure — and say so on the front page and here. - Move the node DNS to
sgit.aias well, which touches 128 references, every test assertion that names the zone, and every running node.
The decision is option 1, on cost. It is a stated decision rather than a convention that happened, and it is published as Q7 with the case for revisiting it: the argument against it is not technical, it is that a support question arriving every week forever eventually costs more than a migration.
One consequence worth naming: because the zone name is the subject of a published decision, it is the single deliberate exception in this site's leak tripwire, which otherwise bans every live hostname from the tree. Per-node FQDNs under that zone stay banned.
Licence
Every page of this site, the source documents, llms.txt and llms-full.txt are released under CC BY 4.0. Attribution: Dinis Cruz, with AI co-authorship (Claude, Anthropic).
The platform's own source code is Apache-2.0. Where this site quotes source, it is quoting Apache-2.0 code — that notice is retained and the snippets do not carry this site's licence.