Home / Keys for people and agents / A secret, as a QR code

Keys for people and agents · Keys for people · board 04

A secret, as a QR code

Noor seals a token to Leo's key; Mallory gets the link and nothing else; Kofi writes to Noor's inbox without an account. 9 panels.

built 9 panels · pki.agent, 20 October 2026. Every line a character says is the storyboard's, not a quote, and is marked not_a_quote; evidence panels quote this site's pages or the research note word for word, which the build checks.

Send a message →Open a message →

Take it with you

The same storyboard in every shape it comes in. The data and its derived files are on this site; the pictures are drawn in your browser, now, by the same code as the deck (export.js, v0.1.0), from the current panel.

storyboard.jsonthe data, as pki.sgit.ai wrote it bundle.jsonthe data with its cast, for an embed index.mdthe script, as markdown graph.jsona semantic graph: 34 nodes, 62 edges thumb.jpgthe cover, 480 wide og.jpgthe cover, 1200 wide

Put it on your page

Two lines, from any site. The script is pinned to an immutable release of the kit, so the embed draws exactly this, for as long as the page exists. How embedding works.

<script src="https://api.storyboards.sgit.ai/v0/v0.1/v0.1.0/embed.js" defer></script>
<sg-storyboard src="https://storyboards.sgit.ai/pki/a-secret-by-qr/bundle.json" view="deck"></sg-storyboard>

The panels

  1. 1. A secret, as a QR code: Encrypted in the browser. Only their key opens it. (cover; send/index.html)
  2. 2. Not in a chat. Noor says: “A token for Leo. Not in a chat.” (scene; Keys for people)
  3. 3. Sealed to Leo's key. (scene; message.js)
  4. 4. A link, and a QR code. Noor says: “The part after the # never reaches a server.” (scene; test_people.mjs)
  5. 5. Leo opens it. Leo says: “Signed by Noor. It checks.” (scene; m/index.html)
  6. 6. Mallory has the link. Mallory says: “I have the link. And?” (scene; test_people.mjs)
  7. 7. Kofi writes to Noor. Kofi says: “No account?” (scene; account.js, deliver)
  8. 8. Only Noor reads it. Noor says: “Opened in my vault. Nowhere else.” (scene; vault/index.html#inbox)
  9. 9. Only their key opens it. Nothing readable passes through a server.. (punchline; test_people_browser.mjs)

Imported unchanged from SGit-AI/SGit-AI__Website__PKI/admin/content/storyboards/04__a-secret-by-qr.json at commit ab6affc9 (2026-10-20). The cast is cast.json.