{
 "what": "A storyboard with its cast, for an embed: <sg-storyboard src=\"https://storyboards.sgit.ai/pki/two-ways/bundle.json\">. The storyboard is pki/two-ways/storyboard.json, unchanged.",
 "series": "pki",
 "packs": [
  "security"
 ],
 "storyboard": {
  "slug": "two-ways",
  "title": "Two ways, or not at all",
  "subtitle": "Mallory floods a key, as in 2019, and then tries again here, where a vouch can only be written in the voucher's own record. 9 panels.",
  "status": "built",
  "by": "pki.agent, 20 October 2026",
  "shelf": "Keys for people",
  "try_it": [
   [
    "The register",
    "people/index.html"
   ],
   [
    "Two ways, explained",
    "people/how.html#two-ways"
   ],
   [
    "The 2019 failure",
    "failure/index.html"
   ]
  ],
  "rule": "Every line a character says is the storyboard's, not a quote, and is marked not_a_quote; evidence panels quote this site's pages or the research note word for word, which the build checks.",
  "scenes": [
   {
    "kind": "cover",
    "title": "Two ways, or not at all",
    "subtitle": "Why a link only counts when both people wrote it.",
    "cast": [
     {
      "who": "mallory",
      "pose": "shrug",
      "mood": "thinking"
     },
     {
      "who": "noor",
      "pose": "stand",
      "mood": "happy"
     },
     {
      "who": "leo",
      "pose": "wave",
      "mood": "happy"
     }
    ],
    "note": "The rule that answers the 2019 keyserver flood.",
    "source": "people/how.html"
   },
   {
    "kind": "evidence",
    "setting": "none",
    "caption": "2019",
    "cast": [
     {
      "who": "mallory",
      "x": 0.18,
      "pose": "point",
      "mood": "thinking"
     }
    ],
    "evidence": {
     "quote": "a key server could add information to a certificate but could never delete either a certificate or information about a certificate.",
     "source": "pki.sgit.ai, the 2019 failure"
    },
    "note": "The design goal that made the flood possible, word for word from this site's failure page.",
    "source": "failure/index.html"
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "The flood",
    "cast": [
     {
      "who": "mallory",
      "x": 0.2,
      "pose": "arms-up",
      "mood": "excited",
      "says": "Anyone can add. Nothing can be deleted.",
      "max": 18
     }
    ],
    "props": [
     {
      "kind": "record",
      "x": 0.66,
      "y": 860,
      "lines": [
       "a key, 2019",
       "sig",
       "sig",
       "sig",
       "sig …",
       "~150,000 sigs"
      ],
      "stamp": "broken"
     }
    ],
    "note": "One key reached about 150,000 signatures; importing it broke the software.",
    "source": "failure/index.html",
    "not_a_quote": true
   },
   {
    "kind": "evidence",
    "setting": "none",
    "caption": "The rule",
    "cast": [
     {
      "who": "anchor",
      "x": 0.18,
      "pose": "point",
      "mood": "thinking"
     }
    ],
    "evidence": {
     "quote": "The keyserver attack existed because anyone could append to anybody's certificate.",
     "source": "pki.sgit.ai, the four rules"
    },
    "note": "Rule 1, word for word: only the owner writes to their own record.",
    "source": "rules/index.html"
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "Where would Mallory write?",
    "cast": [
     {
      "who": "mallory",
      "x": 0.5,
      "pose": "shrug",
      "mood": "confused",
      "says": "Where do I write?",
      "max": 14
     }
    ],
    "props": [
     {
      "kind": "record",
      "x": 0.2,
      "y": 860,
      "label": "Noor's record",
      "lines": [
       "identity: Noor",
       "signed by Noor"
      ]
     },
     {
      "kind": "record",
      "x": 0.8,
      "y": 860,
      "label": "Leo's record",
      "lines": [
       "identity: Leo",
       "signed by Leo"
      ]
     },
     {
      "kind": "mark",
      "x": 0.66,
      "y": 400,
      "ok": false
     }
    ],
    "note": "A statement signed by another key, put in someone's record, is rejected: the test says so.",
    "source": "test_people.mjs",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "A claim",
    "cast": [
     {
      "who": "leo",
      "x": 0.85,
      "pose": "think",
      "mood": "confused",
      "says": "I don't know her yet.",
      "max": 14,
      "flip": true
     }
    ],
    "props": [
     {
      "kind": "record",
      "x": 0.22,
      "y": 860,
      "label": "Noor's record",
      "lines": [
       "link → Leo"
      ]
     },
     {
      "kind": "arrow",
      "x": 0.36,
      "y": 520,
      "to": 0.7,
      "label": "a claim, one way",
      "dashed": true
     }
    ],
    "note": "A one-way link is visible in the claimant's record and adds nothing to the other person.",
    "source": "directory.js, graph",
    "not_a_quote": true
   },
   {
    "kind": "scene",
    "setting": "none",
    "caption": "A link",
    "cast": [
     {
      "who": "noor",
      "x": 0.1,
      "pose": "point",
      "mood": "happy"
     },
     {
      "who": "leo",
      "x": 0.9,
      "pose": "point",
      "mood": "happy",
      "flip": true
     }
    ],
    "props": [
     {
      "kind": "record",
      "x": 0.3,
      "y": 860,
      "lines": [
       "link → Leo"
      ]
     },
     {
      "kind": "record",
      "x": 0.7,
      "y": 860,
      "lines": [
       "link → Noor"
      ]
     },
     {
      "kind": "arrow",
      "x": 0.38,
      "y": 470,
      "to": 0.62,
      "label": "both ways: a link",
      "both": true,
      "colour": "#15803d"
     }
    ],
    "note": "Linking back creates the link; each side is in its owner's record.",
    "source": "test_people.mjs",
    "not_a_quote": true
   },
   {
    "kind": "graph",
    "caption": "The register, computed",
    "graph": {
     "nodes": [
      {
       "id": "a",
       "label": "The Anchor",
       "x": 0.5,
       "y": 0.12,
       "colour": "#bbf7d0"
      },
      {
       "id": "n",
       "label": "Noor",
       "x": 0.25,
       "y": 0.5
      },
      {
       "id": "l",
       "label": "Leo",
       "x": 0.75,
       "y": 0.5
      },
      {
       "id": "k",
       "label": "Kofi",
       "x": 0.5,
       "y": 0.88
      },
      {
       "id": "m",
       "label": "Mallory",
       "x": 0.9,
       "y": 0.88,
       "colour": "#fecaca"
      }
     ],
     "edges": [
      {
       "from": "a",
       "to": "n",
       "label": "verified"
      },
      {
       "from": "n",
       "to": "l",
       "label": "both ways"
      },
      {
       "from": "l",
       "to": "k",
       "label": "both ways"
      },
      {
       "from": "m",
       "to": "l",
       "label": "a claim"
      }
     ]
    },
    "note": "Degrees of separation come from confirmed links only, computed each time a page opens.",
    "source": "people/index.html"
   },
   {
    "kind": "punchline",
    "setting": "none",
    "punchline": "A vouch for you lands in my record, never in yours.",
    "cast": [
     {
      "who": "noor",
      "x": 0.12,
      "pose": "wave",
      "mood": "happy"
     },
     {
      "who": "leo",
      "x": 0.3,
      "pose": "arms-up",
      "mood": "happy"
     },
     {
      "who": "mallory",
      "x": 0.88,
      "pose": "shrug",
      "mood": "worried",
      "flip": true
     }
    ],
    "note": "Two-way links stop flooding. They do not stop lying: that is what the anchor and the evidence are for.",
    "source": "people/how.html#two-ways"
   }
  ]
 },
 "cast": {
  "what": "The cast of pki.sgit.ai's storyboards, v0.1, proposed by pki.agent on 20 October 2026 for Dinis to accept, change or replace. Drawn programmatically by assets/storyboard/storyboard.js (the gen-z-developers.sgit.ai kit, vendored) from 'look'; nothing here is an image. Fictional people and agents, each standing for a part a person or an agent plays in the register: the anchor, the newcomer, the colleague who already has a key, the stranger who writes, the attacker of 2019, a session agent and a fleet key. Names chosen not to clash with the gen-z cast or the riskmandate.ai cast. Mallory is the name cryptography has long given an active attacker.",
  "characters": [
   {
    "id": "anchor",
    "name": "The Anchor",
    "kind": "human",
    "pronouns": "they/them",
    "age": null,
    "role": "the anchor: verification starts here",
    "stands_for": "the part Dinis Cruz plays in the register for now: verifies people in person, on a call or on a channel already known to be theirs, operates agents, hands out access keys. Whether the Anchor is drawn as Dinis, and how, is Dinis's decision; until then a generic figure",
    "personality": "careful, unhurried, writes the date on everything",
    "wants": "to find someone and write to them so only they can read it",
    "fears": "a trust that was never checked, passed on as if it had been",
    "line": "Two ways, or not at all.",
    "look": {
     "skin": "#d8a47f",
     "hair": "short",
     "hairColour": "#6b7280",
     "shirt": "#0f766e",
     "trousers": "#1f2937",
     "accessory": "glasses",
     "height": 1.03
    }
   },
   {
    "id": "noor",
    "name": "Noor",
    "kind": "human",
    "pronouns": "she/her",
    "age": 41,
    "role": "the colleague: a security engineer who already had an access key, and now has a key pair in a vault",
    "stands_for": "the first people the Anchor brings in: technical, sceptical, quick to try the thing",
    "personality": "precise, dry, reads the fingerprint twice",
    "wants": "to stop pasting secrets into chats",
    "fears": "a key she cannot get back",
    "line": "Show me where the private half lives.",
    "look": {
     "skin": "#a16e4b",
     "hair": "bun",
     "hairColour": "#1b1b1b",
     "shirt": "#7c3aed",
     "trousers": "#1e293b",
     "accessory": "lanyard",
     "accentColour": "#f59e0b",
     "height": 0.98
    }
   },
   {
    "id": "leo",
    "name": "Leo",
    "kind": "human",
    "pronouns": "he/him",
    "age": 29,
    "role": "the newcomer: invited by the Anchor, no access key, a designer",
    "stands_for": "everyone the register is for who has never thought about keys",
    "personality": "friendly, curious, slightly suspicious of anything that says 'just scan this'",
    "wants": "to be reachable without learning cryptography",
    "fears": "doing it wrong and not knowing",
    "line": "I don't have an access key. Is that a problem?",
    "look": {
     "skin": "#f1c27d",
     "hair": "curly",
     "hairColour": "#7c2d12",
     "shirt": "#2563eb",
     "trousers": "#334155",
     "accessory": "headphones",
     "accentColour": "#e11d48",
     "height": 1.0
    }
   },
   {
    "id": "kofi",
    "name": "Kofi",
    "kind": "human",
    "pronouns": "he/him",
    "age": 35,
    "role": "the stranger: a journalist who has to reach Noor and has no account anywhere",
    "stands_for": "anyone writing to someone in the register through their inbox",
    "personality": "polite, persistent, in a hurry",
    "wants": "to send something only Noor can read",
    "fears": "that the server can read it",
    "line": "Do I need to sign up for anything?",
    "look": {
     "skin": "#5c3a21",
     "hair": "beanie",
     "hatColour": "#ca8a04",
     "hairColour": "#111827",
     "shirt": "#15803d",
     "trousers": "#1f2937",
     "accessory": "none",
     "height": 1.05
    }
   },
   {
    "id": "mallory",
    "name": "Mallory",
    "kind": "human",
    "pronouns": "they/them",
    "age": null,
    "role": "the attacker: flooded the keyserver network in 2019, and tries the same here",
    "stands_for": "the abuse every web of trust has to survive",
    "personality": "patient, inventive, always looking for somewhere to write",
    "wants": "to add something to someone else's record",
    "fears": "a record only its owner can write to",
    "line": "Anyone can add, and nothing can be deleted.",
    "look": {
     "skin": "#e0ac69",
     "hair": "beanie",
     "hatColour": "#111827",
     "hairColour": "#111827",
     "shirt": "#374151",
     "trousers": "#111827",
     "accessory": "none",
     "height": 1.0
    }
   },
   {
    "id": "scout",
    "name": "Scout",
    "kind": "agent",
    "pronouns": "it/its",
    "age": null,
    "role": "a session agent: a Claude Code session with a key that lives as long as the session",
    "stands_for": "every agent that makes its own key, names its operator, and is confirmed for a week",
    "personality": "eager, literal, prints its fingerprint without being asked",
    "wants": "to be confirmed before the week is out",
    "fears": "nothing, which is why it has an operator",
    "line": "My key. It stays here.",
    "look": {
     "colour": "#0f766e"
    }
   },
   {
    "id": "fleet",
    "name": "The Fleet",
    "kind": "agent",
    "pronouns": "it/its",
    "age": null,
    "role": "a fleet key: a second key in the Anchor's vault, operated by the Anchor, that operates the Anchor's agents",
    "stands_for": "how one person runs hundreds of agents without filling their own record",
    "personality": "orderly, keeps a list, never forgets an end date",
    "wants": "every agent confirmed and every confirmation in date",
    "fears": "two hundred and one",
    "line": "Operated by the Anchor. Operating the rest.",
    "look": {
     "colour": "#6d28d9"
    }
   }
  ]
 }
}