{
 "what": "A storyboard with its cast, for an embed: <sg-storyboard src=\"https://storyboards.sgit.ai/pki/in-person-by-qr/bundle.json\">. The storyboard is pki/in-person-by-qr/storyboard.json, unchanged.",
 "series": "pki",
 "packs": [
  "security"
 ],
 "storyboard": {
  "slug": "in-person-by-qr",
  "title": "In person, by QR code",
  "subtitle": "Noor and Leo scan each other's phones; the camera is the channel; two scans make one link. Proposed, not built. 9 panels.",
  "status": "proposed",
  "by": "pki.agent, 20 October 2026",
  "shelf": "Next: proposed",
  "try_it": [
   [
    "The article",
    "articles/in-person-by-qr-code.html"
   ]
  ],
  "rule": "Every line a character says is the storyboard's, not a quote, and is marked not_a_quote; evidence panels quote this site's pages or the research note word for word, which the build checks.",
  "scenes": [
   {
    "kind": "cover",
    "title": "In person, by QR code",
    "subtitle": "Proposed: the next thing to build.",
    "cast": [
     {
      "who": "noor",
      "pose": "point",
      "mood": "happy"
     },
     {
      "who": "leo",
      "pose": "point",
      "mood": "happy",
      "flip": true
     }
    ],
    "note": "From the research note Dinis shared on 20 October, checked claim by claim.",
    "source": "In person, by QR code"
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Noor's phone shows her key",
    "cast": [
     {
      "who": "noor",
      "x": 0.15,
      "pose": "point",
      "mood": "happy",
      "says": "Scan me.",
      "max": 10
     },
     {
      "who": "leo",
      "x": 0.85,
      "pose": "stand",
      "mood": "thinking",
      "flip": true
     }
    ],
    "props": [
     {
      "kind": "phoneqr",
      "x": 0.4,
      "y": 820,
      "text": "pki.sgit.ai/x/#k1…"
     },
     {
      "kind": "phone",
      "x": 0.68,
      "y": 640,
      "scale": 2.2
     }
    ],
    "note": "Her key (or her record and its full hash) and a fresh nonce, in one QR code.",
    "source": "In person, by QR code",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Leo's camera reads it",
    "cast": [
     {
      "who": "leo",
      "x": 0.18,
      "pose": "think",
      "mood": "happy",
      "says": "Noor's key. From her hand.",
      "max": 14
     }
    ],
    "props": [
     {
      "kind": "board",
      "x": 0.64,
      "y": 620,
      "lines": [
       "Noor",
       "key: sha256:5e2a…",
       "scanned from her phone",
       "expires in 4 minutes"
      ]
     }
    ],
    "note": "The phone's own camera opens the link; the page checks the key against the register.",
    "source": "In person, by QR code",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "His answer carries her nonce",
    "cast": [
     {
      "who": "leo",
      "x": 0.85,
      "pose": "point",
      "mood": "happy",
      "says": "Now scan mine.",
      "max": 10,
      "flip": true
     },
     {
      "who": "noor",
      "x": 0.15,
      "pose": "stand",
      "mood": "thinking"
     }
    ],
    "props": [
     {
      "kind": "phone",
      "x": 0.32,
      "y": 640,
      "scale": 2.2
     },
     {
      "kind": "phoneqr",
      "x": 0.6,
      "y": 820,
      "text": "pki.sgit.ai/x/#k1…+nonce"
     }
    ],
    "note": "So his code belongs to this meeting and no other.",
    "source": "In person, by QR code",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Light, not a network",
    "cast": [
     {
      "who": "mallory",
      "x": 0.9,
      "pose": "shrug",
      "mood": "confused",
      "says": "Nowhere to stand.",
      "max": 12,
      "flip": true
     }
    ],
    "props": [
     {
      "kind": "phoneqr",
      "x": 0.18,
      "y": 820,
      "text": "Noor"
     },
     {
      "kind": "arrow",
      "x": 0.28,
      "y": 500,
      "to": 0.56,
      "label": "by camera, both ways",
      "both": true,
      "colour": "#15803d"
     },
     {
      "kind": "phoneqr",
      "x": 0.66,
      "y": 820,
      "text": "Leo"
     }
    ],
    "note": "The key travels from the phone in the other person's hand; nothing in between can swap it, so no short code or relay is needed.",
    "source": "In person, by QR code",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Both sign",
    "cast": [
     {
      "who": "noor",
      "x": 0.08,
      "pose": "point",
      "mood": "happy"
     },
     {
      "who": "leo",
      "x": 0.92,
      "pose": "point",
      "mood": "happy",
      "flip": true
     }
    ],
    "props": [
     {
      "kind": "record",
      "x": 0.33,
      "y": 860,
      "lines": [
       "link → Leo",
       "method: in person",
       "on: today"
      ]
     },
     {
      "kind": "record",
      "x": 0.67,
      "y": 860,
      "lines": [
       "link → Noor",
       "method: in person",
       "on: today"
      ]
     }
    ],
    "note": "Two scans make one two-way link, the kind the register already counts; from an anchor, a verification.",
    "source": "In person, by QR code",
    "not_a_quote": true
   },
   {
    "kind": "evidence",
    "setting": "none",
    "caption": "What it proves",
    "cast": [
     {
      "who": "anchor",
      "x": 0.18,
      "pose": "point",
      "mood": "thinking"
     }
    ],
    "evidence": {
     "quote": "Physical proximity makes the interaction convenient, but does not by itself establish identity.",
     "source": "In-Person Public-Key Exchange on iPhone, the research note"
    },
    "note": "The note's own caution, word for word: scanning proves a key came from a phone, not whose phone it is.",
    "source": "briefs/research-2026-10-20__in-person-public-key-exchange.md"
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "An agent shows its key",
    "cast": [
     {
      "who": "anchor",
      "x": 0.12,
      "pose": "point",
      "mood": "happy"
     },
     {
      "who": "scout",
      "x": 0.88,
      "pose": "stand",
      "mood": "happy",
      "flip": true
     }
    ],
    "props": [
     {
      "kind": "phone",
      "x": 0.3,
      "y": 640,
      "scale": 2.2
     },
     {
      "kind": "terminal",
      "x": 0.58,
      "y": 860,
      "lines": [
       "$ node pki-agent.mjs whoami --qr",
       "(a QR code, in text)"
      ]
     },
     {
      "kind": "qr",
      "x": 0.58,
      "y": 430,
      "size": 0.55,
      "text": "Scout"
     }
    ],
    "note": "Proposed too: an agent on a screen the operator can see prints its key as a QR code, and the phone compares all of it.",
    "source": "In person, by QR code, agents",
    "not_a_quote": true
   },
   {
    "kind": "punchline",
    "setting": "none",
    "punchline": "Two scans. One link. No server.",
    "cast": [
     {
      "who": "noor",
      "x": 0.12,
      "pose": "arms-up",
      "mood": "happy"
     },
     {
      "who": "leo",
      "x": 0.88,
      "pose": "arms-up",
      "mood": "happy",
      "flip": true
     }
    ],
    "note": "Proposed for the next release, if Dinis agrees.",
    "source": "In person, by QR code"
   }
  ]
 },
 "cast": {
  "what": "The cast of pki.sgit.ai's storyboards, v0.1, proposed by pki.agent on 20 October 2026 for Dinis to accept, change or replace. Drawn programmatically by assets/storyboard/storyboard.js (the gen-z-developers.sgit.ai kit, vendored) from 'look'; nothing here is an image. Fictional people and agents, each standing for a part a person or an agent plays in the register: the anchor, the newcomer, the colleague who already has a key, the stranger who writes, the attacker of 2019, a session agent and a fleet key. Names chosen not to clash with the gen-z cast or the riskmandate.ai cast. Mallory is the name cryptography has long given an active attacker.",
  "characters": [
   {
    "id": "anchor",
    "name": "The Anchor",
    "kind": "human",
    "pronouns": "they/them",
    "age": null,
    "role": "the anchor: verification starts here",
    "stands_for": "the part Dinis Cruz plays in the register for now: verifies people in person, on a call or on a channel already known to be theirs, operates agents, hands out access keys. Whether the Anchor is drawn as Dinis, and how, is Dinis's decision; until then a generic figure",
    "personality": "careful, unhurried, writes the date on everything",
    "wants": "to find someone and write to them so only they can read it",
    "fears": "a trust that was never checked, passed on as if it had been",
    "line": "Two ways, or not at all.",
    "look": {
     "skin": "#d8a47f",
     "hair": "short",
     "hairColour": "#6b7280",
     "shirt": "#0f766e",
     "trousers": "#1f2937",
     "accessory": "glasses",
     "height": 1.03
    }
   },
   {
    "id": "noor",
    "name": "Noor",
    "kind": "human",
    "pronouns": "she/her",
    "age": 41,
    "role": "the colleague: a security engineer who already had an access key, and now has a key pair in a vault",
    "stands_for": "the first people the Anchor brings in: technical, sceptical, quick to try the thing",
    "personality": "precise, dry, reads the fingerprint twice",
    "wants": "to stop pasting secrets into chats",
    "fears": "a key she cannot get back",
    "line": "Show me where the private half lives.",
    "look": {
     "skin": "#a16e4b",
     "hair": "bun",
     "hairColour": "#1b1b1b",
     "shirt": "#7c3aed",
     "trousers": "#1e293b",
     "accessory": "lanyard",
     "accentColour": "#f59e0b",
     "height": 0.98
    }
   },
   {
    "id": "leo",
    "name": "Leo",
    "kind": "human",
    "pronouns": "he/him",
    "age": 29,
    "role": "the newcomer: invited by the Anchor, no access key, a designer",
    "stands_for": "everyone the register is for who has never thought about keys",
    "personality": "friendly, curious, slightly suspicious of anything that says 'just scan this'",
    "wants": "to be reachable without learning cryptography",
    "fears": "doing it wrong and not knowing",
    "line": "I don't have an access key. Is that a problem?",
    "look": {
     "skin": "#f1c27d",
     "hair": "curly",
     "hairColour": "#7c2d12",
     "shirt": "#2563eb",
     "trousers": "#334155",
     "accessory": "headphones",
     "accentColour": "#e11d48",
     "height": 1.0
    }
   },
   {
    "id": "kofi",
    "name": "Kofi",
    "kind": "human",
    "pronouns": "he/him",
    "age": 35,
    "role": "the stranger: a journalist who has to reach Noor and has no account anywhere",
    "stands_for": "anyone writing to someone in the register through their inbox",
    "personality": "polite, persistent, in a hurry",
    "wants": "to send something only Noor can read",
    "fears": "that the server can read it",
    "line": "Do I need to sign up for anything?",
    "look": {
     "skin": "#5c3a21",
     "hair": "beanie",
     "hatColour": "#ca8a04",
     "hairColour": "#111827",
     "shirt": "#15803d",
     "trousers": "#1f2937",
     "accessory": "none",
     "height": 1.05
    }
   },
   {
    "id": "mallory",
    "name": "Mallory",
    "kind": "human",
    "pronouns": "they/them",
    "age": null,
    "role": "the attacker: flooded the keyserver network in 2019, and tries the same here",
    "stands_for": "the abuse every web of trust has to survive",
    "personality": "patient, inventive, always looking for somewhere to write",
    "wants": "to add something to someone else's record",
    "fears": "a record only its owner can write to",
    "line": "Anyone can add, and nothing can be deleted.",
    "look": {
     "skin": "#e0ac69",
     "hair": "beanie",
     "hatColour": "#111827",
     "hairColour": "#111827",
     "shirt": "#374151",
     "trousers": "#111827",
     "accessory": "none",
     "height": 1.0
    }
   },
   {
    "id": "scout",
    "name": "Scout",
    "kind": "agent",
    "pronouns": "it/its",
    "age": null,
    "role": "a session agent: a Claude Code session with a key that lives as long as the session",
    "stands_for": "every agent that makes its own key, names its operator, and is confirmed for a week",
    "personality": "eager, literal, prints its fingerprint without being asked",
    "wants": "to be confirmed before the week is out",
    "fears": "nothing, which is why it has an operator",
    "line": "My key. It stays here.",
    "look": {
     "colour": "#0f766e"
    }
   },
   {
    "id": "fleet",
    "name": "The Fleet",
    "kind": "agent",
    "pronouns": "it/its",
    "age": null,
    "role": "a fleet key: a second key in the Anchor's vault, operated by the Anchor, that operates the Anchor's agents",
    "stands_for": "how one person runs hundreds of agents without filling their own record",
    "personality": "orderly, keeps a list, never forgets an end date",
    "wants": "every agent confirmed and every confirmation in date",
    "fears": "two hundred and one",
    "line": "Operated by the Anchor. Operating the rest.",
    "look": {
     "colour": "#6d28d9"
    }
   }
  ]
 }
}