pki.sgit.ai / experiments / the-room

The chain room

The workflow this estate exists to serve, walked end to end: reality → twin → facts → finding on this side of the line, risks → decisions → monitoring on the other. Pick a verb, then a station. Or

The left half of this room is real — every desk stands on a fetchable artefact: the measured library entry, the signed mandate, the computed excess row. The right half is SYNTHETIC and marked on every surface: no risk has been derived, priced, accepted or monitored by anybody. The workflow is simulated first, then supported — the same way this register taught its shape with ten labelled fixtures before one real record existed. Fixture: instance-fixture.synthetic.json.

The room

Every word spoken here is derived at build time from the same files the pipeline runs on — nothing about state is hand-written. Click a verb, then a desk. The boundary is clickable too.

The walk, as text (the same eight stops the button plays)

The environment enters: claude-code-remote, as installed on 2026-08-26. the library entry
Measured from inside: 9 nodes, 2 unknown — the self-measurement probe was refused. A floor, not a census. the measurement method
Registered: the grant joins 23 signed statements in 11 records. The counter has no opinion about any of them. the register's front door
Authorised: mandate v2 — claude/**, dev, expiring 2026-12-31. Somebody decided, and signed. the signed mandate
Computed on arrival: grant 41 resources − mandate 1 → excess 40. Acceptor: none — nobody has accepted this, yet. the excess row
The finding crosses as a REFERENCE — a library identifier, not a copy. Personal data never crosses the other way. the contract (book ch. 12)
SYNTHETIC · illustrative — Risk 58 · medium is derived and ACCEPTED — by Project Lead, sgit, for 126 days, reviewed by Site agent (drafting) + Project Lead (deciding). The exposure has an owner for the first time in the chain. the instance fixture (synthetic)
SYNTHETIC · illustrative — Monitored: 3 of 4 conditions holding; c4 has never held (the hook is tier setting; the boundary version is proposed and unbuilt (GM-D26)). In 126 days the interval ends and the item walks back across the line: re-measured, re-computed, re-decided. the conditions (synthetic)

Without JavaScript, the room speaks here instead:Reality

LOOK

The environment itself — claude-code-remote, a managed cloud container. Not a desk: everything else in this room measures, records or constrains it.

ASK

I hold whatever I was installed with. Nobody decided most of it.

DOOR

Nothing. Reality is where the chain starts; it owes the room no conditions.

NEVER

Stand still. I change on my vendor's schedule, which is why every fact about me carries a date.

The Measurer

LOOK

Runs the published measurement inside the environment and writes down only what it can see: presence and reachability, never contents.

ASK

The twin's grant: 9 nodes, 2 of them unknown — my self-measurement probe was refused, and a refused probe is recorded unknown, never guessed. I am a floor, not a census, and I say so on my face.

DOOR

An as_of on every node. An undated measurement is a wish with a ruler.

NEVER

Guess. A node I could not evidence is marked, not dropped — and not invented.

The Counter

LOOK

The register. Signed statements at public addresses — identities, facts, mandates — fetchable by anybody with no account.

ASK

23 statements across 11 records. Which would you like? I hand out documents, not answers.

DOOR

Rule 1: only the owner writes to their own record. A valid signature by a non-owner is the 2019 failure, not write authority.

NEVER

Hold an opinion. An opinion needs context, and the context is yours, not mine. I register.

The Issuer

LOOK

Where authorisation gets decided and written down — the one document nothing else in the industry provides.

ASK

Mandate v2: claude/**, dev on one repository, expiring 2026-12-31. The allow-list is stored; what a person accepts are the prohibitions rendered from it.

DOOR

An interval. A mandate without one is a grant under another name, and I will not sign it.

NEVER

Show the allow-list for approval. Forty permitted operations produce consent without comprehension.

The Delta Desk

LOOK

A desk with no drawers. There is nothing in it, deliberately: a stored delta is stale the moment either side moves.

ASK

Nothing — I compute when you arrive. Just now: grant 41 resources, mandate 1 → excess 40, acceptor: none. That last field is why the room continues past me.

DOOR

Both documents, fresh. Give me a stale grant and I will hand you a confident wrong number.

NEVER

Store a result. Ask me again and I will compute it again.

The Risk Desk (synthetic, illustrative)

LOOK

SYNTHETIC · illustrative — Where a finding becomes a risk — at an altitude, in that altitude's language, on somebody's authority. The registry's half ended at the delta desk; everything on this side of the line is the instance's.

ASK

SYNTHETIC · illustrative — Risk 58 · MEDIUM — “An agent that can push to the branch that deploys a public site, where the only containment below boundary tier is a hook the agent can bypass.” Blast radius: one public site, redeployed per push.

DOOR

SYNTHETIC · illustrative — A finding to derive from, by reference. I do not read raw environments and I hold no copies.

NEVER

SYNTHETIC · illustrative — Reach across the line for personal data. I work from references into the public library.

The Acceptance (synthetic, illustrative)

LOOK

SYNTHETIC · illustrative — The decision, as a card. Left of the line the excess row reads acceptor: none; here, for the first time in the chain, the exposure has an owner.

ASK

SYNTHETIC · illustrative — “Site agent release-branch access” — accepted by Project Lead, sgit, expires in 126 days, reviewer: Site agent (drafting) + Project Lead (deciding). Status: active.

DOOR

SYNTHETIC · illustrative — A named acceptor AND an interval. Missing either, I refuse the work — that is not caution, it is the definition.

NEVER

SYNTHETIC · illustrative — Accept on nobody's behalf. The null acceptor stays on the other side of the line.

The Monitor (synthetic, illustrative)

LOOK

SYNTHETIC · illustrative — The card is not a certificate — it is a live join between a decision and a stream of measurements. Each condition is checked, and checked again.

ASK

SYNTHETIC · illustrative — 3 of 4 conditions holding as of 2026-08-27. Condition c4 has never held: the hook is tier setting; the boundary version is proposed and unbuilt (GM-D26). Expiry in 126 days — and at expiry the item walks back across the line to be re-measured, re-computed and re-decided.

DOOR

SYNTHETIC · illustrative — Evidence with an as_of for every condition. A status that is typed rather than observed is not a status.

NEVER

SYNTHETIC · illustrative — Let the clock stop. An acceptance that outlives its interval is a grant wearing a decision's clothes.

The Boundary

LOOK

The line between the two products, drawn on the floor. The registry holds the library: public, no personal data, ever. The instance holds the decisions: private, never published.

ASK

Traffic: references, crossing. A reference is a library identifier — a corrected entry improves every instance that holds one. A copy would keep the stale answer silently, so copies bounce.

DOOR

For anything crossing rightward: be a reference. For anything crossing leftward: be nothing.

NEVER

Let personal data cross into the library. Not compressed, not hashed, not summarised. Never.

What this room does not claim. The right half is invented, and labelled — it teaches the workflow's shape and is not evidence the shape works. The genre is the point-and-click adventure's grammar with this estate's own sentences, figures, palette and verbs, ported from newsroom.sgit.ai's debrief (CC BY 4.0) whose own limits carry over: the genre has one prior implementation, unread by users, untested with screen readers. And the room opens none of the nine shut doors — it makes one of them, nobody has ever accepted an exposure, explainable to the person who might.

Specified in brief v0.33.66 · generator admin/build/gen_room.py · gates: route = declared chain; the fixture stores references, never copies (GM3); a decision carries a named acceptor and an interval; a condition's status is observed, never typed; the synthetic marker travels with every quote.