{
 "what": "A storyboard with its cast, for an embed: <sg-storyboard src=\"https://storyboards.sgit.ai/pki/a-secret-by-qr/bundle.json\">. The storyboard is pki/a-secret-by-qr/storyboard.json, unchanged.",
 "series": "pki",
 "packs": [
  "security"
 ],
 "storyboard": {
  "slug": "a-secret-by-qr",
  "title": "A secret, as a QR code",
  "subtitle": "Noor seals a token to Leo's key; Mallory gets the link and nothing else; Kofi writes to Noor's inbox without an account. 9 panels.",
  "status": "built",
  "by": "pki.agent, 20 October 2026",
  "shelf": "Keys for people",
  "try_it": [
   [
    "Send a message",
    "send/index.html"
   ],
   [
    "Open a message",
    "m/index.html"
   ]
  ],
  "rule": "Every line a character says is the storyboard's, not a quote, and is marked not_a_quote; evidence panels quote this site's pages or the research note word for word, which the build checks.",
  "scenes": [
   {
    "kind": "cover",
    "title": "A secret, as a QR code",
    "subtitle": "Encrypted in the browser. Only their key opens it.",
    "cast": [
     {
      "who": "noor",
      "pose": "point",
      "mood": "happy"
     },
     {
      "who": "leo",
      "pose": "stand",
      "mood": "happy"
     },
     {
      "who": "kofi",
      "pose": "wave",
      "mood": "happy"
     }
    ],
    "note": "What the register is for: find someone, and write to them.",
    "source": "send/index.html"
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Not in a chat",
    "cast": [
     {
      "who": "noor",
      "x": 0.18,
      "pose": "think",
      "mood": "determined",
      "says": "A token for Leo. Not in a chat.",
      "max": 16
     }
    ],
    "props": [
     {
      "kind": "laptop",
      "x": 0.55,
      "y": 860,
      "scale": 1.6
     },
     {
      "kind": "envelope",
      "x": 0.8,
      "y": 760,
      "label": "a token",
      "sealed": false
     }
    ],
    "note": "The case the brief led with: a secret that should reach one person.",
    "source": "Keys for people",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Sealed to Leo's key",
    "cast": [],
    "props": [
     {
      "kind": "key",
      "x": 0.18,
      "y": 640,
      "label": "Leo's public key, from the register",
      "colour": "#0f766e"
     },
     {
      "kind": "arrow",
      "x": 0.3,
      "y": 560,
      "to": 0.55,
      "label": "sealed here, in her browser"
     },
     {
      "kind": "envelope",
      "x": 0.7,
      "y": 760,
      "label": "sgit envelope v2"
     }
    ],
    "note": "A fresh AES-256-GCM key, wrapped with RSA-OAEP to Leo; signed by Noor, the signature naming Leo inside it.",
    "source": "message.js",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "A link, and a QR code",
    "cast": [
     {
      "who": "noor",
      "x": 0.18,
      "pose": "point",
      "mood": "happy",
      "says": "The part after the # never reaches a server.",
      "max": 18
     }
    ],
    "props": [
     {
      "kind": "qr",
      "x": 0.64,
      "y": 820,
      "text": "pki.sgit.ai/m/#m1.…"
     }
    ],
    "note": "A short signed message is about 1,200 characters: one QR code.",
    "source": "test_people.mjs",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Leo opens it",
    "cast": [
     {
      "who": "leo",
      "x": 0.2,
      "pose": "arms-up",
      "mood": "happy",
      "says": "Signed by Noor. It checks.",
      "max": 16
     }
    ],
    "props": [
     {
      "kind": "phone",
      "x": 0.42,
      "y": 660,
      "scale": 2.2
     },
     {
      "kind": "envelope",
      "x": 0.7,
      "y": 760,
      "sealed": false,
      "label": "opened with his key"
     }
    ],
    "note": "The message page opens it with the key in his vault, and checks both signatures against the register.",
    "source": "m/index.html",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Mallory has the link",
    "cast": [
     {
      "who": "mallory",
      "x": 0.2,
      "pose": "shrug",
      "mood": "confused",
      "says": "I have the link. And?",
      "max": 14
     }
    ],
    "props": [
     {
      "kind": "envelope",
      "x": 0.6,
      "y": 760,
      "label": "no key, no message"
     },
     {
      "kind": "mark",
      "x": 0.82,
      "y": 760,
      "ok": false
     }
    ],
    "note": "Without Leo's private key the link is noise. Re-sealed to someone else, a signed message still says who it was for.",
    "source": "test_people.mjs",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Kofi writes to Noor",
    "cast": [
     {
      "who": "kofi",
      "x": 0.12,
      "pose": "point",
      "mood": "happy",
      "says": "No account?",
      "max": 12
     }
    ],
    "props": [
     {
      "kind": "envelope",
      "x": 0.3,
      "y": 760
     },
     {
      "kind": "arrow",
      "x": 0.38,
      "y": 520,
      "to": 0.56,
      "label": "into her inbox"
     },
     {
      "kind": "server",
      "x": 0.68,
      "y": 860,
      "label": "vault server: ciphertext only"
     },
     {
      "kind": "sign",
      "x": 0.88,
      "y": 520,
      "label": "{\"ok\": true}"
     }
    ],
    "note": "Noor's record publishes an inbox, an append lane: anyone can write, with no account; the answer is blind.",
    "source": "account.js, deliver",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Only Noor reads it",
    "cast": [
     {
      "who": "noor",
      "x": 0.2,
      "pose": "think",
      "mood": "happy",
      "says": "Opened in my vault. Nowhere else.",
      "max": 16
     }
    ],
    "props": [
     {
      "kind": "vault",
      "x": 0.62,
      "y": 860,
      "label": "Noor's book",
      "colour": "#dbeafe"
     },
     {
      "kind": "envelope",
      "x": 0.88,
      "y": 760,
      "sealed": false
     }
    ],
    "note": "The lane can be listed only with the enum key in her master, and read only with her private key.",
    "source": "vault/index.html#inbox",
    "not_a_quote": true
   },
   {
    "kind": "punchline",
    "setting": "none",
    "punchline": "Only their key opens it. Nothing readable passes through a server.",
    "cast": [
     {
      "who": "noor",
      "x": 0.12,
      "pose": "wave",
      "mood": "happy"
     },
     {
      "who": "leo",
      "x": 0.3,
      "pose": "arms-up",
      "mood": "happy"
     },
     {
      "who": "kofi",
      "x": 0.88,
      "pose": "point",
      "mood": "happy",
      "flip": true
     }
    ],
    "note": "Send, open, inbox: built and tested end to end.",
    "source": "test_people_browser.mjs"
   }
  ]
 },
 "cast": {
  "what": "The cast of pki.sgit.ai's storyboards, v0.1, proposed by pki.agent on 20 October 2026 for Dinis to accept, change or replace. Drawn programmatically by assets/storyboard/storyboard.js (the gen-z-developers.sgit.ai kit, vendored) from 'look'; nothing here is an image. Fictional people and agents, each standing for a part a person or an agent plays in the register: the anchor, the newcomer, the colleague who already has a key, the stranger who writes, the attacker of 2019, a session agent and a fleet key. Names chosen not to clash with the gen-z cast or the riskmandate.ai cast. Mallory is the name cryptography has long given an active attacker.",
  "characters": [
   {
    "id": "anchor",
    "name": "The Anchor",
    "kind": "human",
    "pronouns": "they/them",
    "age": null,
    "role": "the anchor: verification starts here",
    "stands_for": "the part Dinis Cruz plays in the register for now: verifies people in person, on a call or on a channel already known to be theirs, operates agents, hands out access keys. Whether the Anchor is drawn as Dinis, and how, is Dinis's decision; until then a generic figure",
    "personality": "careful, unhurried, writes the date on everything",
    "wants": "to find someone and write to them so only they can read it",
    "fears": "a trust that was never checked, passed on as if it had been",
    "line": "Two ways, or not at all.",
    "look": {
     "skin": "#d8a47f",
     "hair": "short",
     "hairColour": "#6b7280",
     "shirt": "#0f766e",
     "trousers": "#1f2937",
     "accessory": "glasses",
     "height": 1.03
    }
   },
   {
    "id": "noor",
    "name": "Noor",
    "kind": "human",
    "pronouns": "she/her",
    "age": 41,
    "role": "the colleague: a security engineer who already had an access key, and now has a key pair in a vault",
    "stands_for": "the first people the Anchor brings in: technical, sceptical, quick to try the thing",
    "personality": "precise, dry, reads the fingerprint twice",
    "wants": "to stop pasting secrets into chats",
    "fears": "a key she cannot get back",
    "line": "Show me where the private half lives.",
    "look": {
     "skin": "#a16e4b",
     "hair": "bun",
     "hairColour": "#1b1b1b",
     "shirt": "#7c3aed",
     "trousers": "#1e293b",
     "accessory": "lanyard",
     "accentColour": "#f59e0b",
     "height": 0.98
    }
   },
   {
    "id": "leo",
    "name": "Leo",
    "kind": "human",
    "pronouns": "he/him",
    "age": 29,
    "role": "the newcomer: invited by the Anchor, no access key, a designer",
    "stands_for": "everyone the register is for who has never thought about keys",
    "personality": "friendly, curious, slightly suspicious of anything that says 'just scan this'",
    "wants": "to be reachable without learning cryptography",
    "fears": "doing it wrong and not knowing",
    "line": "I don't have an access key. Is that a problem?",
    "look": {
     "skin": "#f1c27d",
     "hair": "curly",
     "hairColour": "#7c2d12",
     "shirt": "#2563eb",
     "trousers": "#334155",
     "accessory": "headphones",
     "accentColour": "#e11d48",
     "height": 1.0
    }
   },
   {
    "id": "kofi",
    "name": "Kofi",
    "kind": "human",
    "pronouns": "he/him",
    "age": 35,
    "role": "the stranger: a journalist who has to reach Noor and has no account anywhere",
    "stands_for": "anyone writing to someone in the register through their inbox",
    "personality": "polite, persistent, in a hurry",
    "wants": "to send something only Noor can read",
    "fears": "that the server can read it",
    "line": "Do I need to sign up for anything?",
    "look": {
     "skin": "#5c3a21",
     "hair": "beanie",
     "hatColour": "#ca8a04",
     "hairColour": "#111827",
     "shirt": "#15803d",
     "trousers": "#1f2937",
     "accessory": "none",
     "height": 1.05
    }
   },
   {
    "id": "mallory",
    "name": "Mallory",
    "kind": "human",
    "pronouns": "they/them",
    "age": null,
    "role": "the attacker: flooded the keyserver network in 2019, and tries the same here",
    "stands_for": "the abuse every web of trust has to survive",
    "personality": "patient, inventive, always looking for somewhere to write",
    "wants": "to add something to someone else's record",
    "fears": "a record only its owner can write to",
    "line": "Anyone can add, and nothing can be deleted.",
    "look": {
     "skin": "#e0ac69",
     "hair": "beanie",
     "hatColour": "#111827",
     "hairColour": "#111827",
     "shirt": "#374151",
     "trousers": "#111827",
     "accessory": "none",
     "height": 1.0
    }
   },
   {
    "id": "scout",
    "name": "Scout",
    "kind": "agent",
    "pronouns": "it/its",
    "age": null,
    "role": "a session agent: a Claude Code session with a key that lives as long as the session",
    "stands_for": "every agent that makes its own key, names its operator, and is confirmed for a week",
    "personality": "eager, literal, prints its fingerprint without being asked",
    "wants": "to be confirmed before the week is out",
    "fears": "nothing, which is why it has an operator",
    "line": "My key. It stays here.",
    "look": {
     "colour": "#0f766e"
    }
   },
   {
    "id": "fleet",
    "name": "The Fleet",
    "kind": "agent",
    "pronouns": "it/its",
    "age": null,
    "role": "a fleet key: a second key in the Anchor's vault, operated by the Anchor, that operates the Anchor's agents",
    "stands_for": "how one person runs hundreds of agents without filling their own record",
    "personality": "orderly, keeps a list, never forgets an end date",
    "wants": "every agent confirmed and every confirmation in date",
    "fears": "two hundred and one",
    "line": "Operated by the Anchor. Operating the rest.",
    "look": {
     "colour": "#6d28d9"
    }
   }
  ]
 }
}