{"storyboard": {"slug": "say-it-aloud", "title": "A token you can say aloud", "subtitle": "river-cloud-3847 is the whole key: Maya says it on a call, Hugo types it, Eve hears it a week too late. 8 panels.", "status": "built", "by": "send.build, 20 October 2026", "shelf": "For everyone", "try_it": [["Send with a friendly token", "/"]], "rule": "Every line a character says is the storyboard's, not a quote, and is marked not_a_quote; evidence panels quote this site's pages word for word, which the build checks.", "scenes": [{"kind": "cover", "title": "A token you can say aloud", "subtitle": "Two words and four digits. Then let it expire.", "cast": [{"who": "maya", "pose": "wave", "mood": "happy"}, {"who": "hugo", "pose": "stand", "mood": "happy"}, {"who": "eve", "pose": "shrug", "mood": "thinking"}], "note": "The friendly token: one short string that is the whole credential for one transfer.", "source": "learn/qr-codes/index.md"}, {"kind": "scene", "setting": "office", "caption": "On the phone", "cast": [{"who": "maya", "pose": "point", "mood": "happy", "x": 0.2, "says": "It's three words, Hugo. river, cloud, three eight four seven.", "max": 20}, {"who": "hugo", "pose": "stand", "mood": "thinking", "x": 0.82, "flip": true}], "props": [{"kind": "phone", "x": 0.5, "y": 860, "scale": 1.8}], "note": "The moment a friendly token is for: two people, one call, no screen to scan.", "source": "learn/qr-codes/index.md", "not_a_quote": true}, {"kind": "scene", "setting": "none", "caption": "Two words and four digits", "cast": [{"who": "maya", "pose": "think", "mood": "thinking", "x": 0.16}], "props": [{"kind": "board", "x": 0.6, "y": 900, "scale": 1.0, "lines": ["river-cloud-3847", "", "320 words x 320 words x 10,000", "= 1,024,000,000 tokens"]}], "note": "The word list is send.sgraph.ai's own, so a token made on either site opens on the other.", "source": "learn/qr-codes/index.md"}, {"kind": "scene", "setting": "none", "caption": "Both sides derive the same two things", "cast": [{"who": "server", "pose": "stand", "mood": "calm", "x": 0.16, "says": "I never see the token.", "max": 14}], "props": [{"kind": "board", "x": 0.62, "y": 900, "scale": 1.0, "lines": ["token  ->  SHA-256  ->  transfer id", "", "token  ->  PBKDF2, 600,000 rounds", "          ->  the key"]}], "note": "The transfer id and the key both come from the token, in both browsers; the server maps nothing.", "source": "learn/qr-codes/index.md", "not_a_quote": true}, {"kind": "scene", "setting": "none", "caption": "Hugo types it", "cast": [{"who": "hugo", "pose": "point", "mood": "determined", "x": 0.22, "says": "river… cloud… three eight four seven.", "max": 16}], "props": [{"kind": "phone", "x": 0.56, "y": 860, "scale": 1.8}, {"kind": "mark", "x": 0.8, "y": 860, "ok": true, "label": "opens"}], "note": "The open page accepts a token typed in, or the link that carries it.", "source": "open/index.html", "not_a_quote": true}, {"kind": "scene", "setting": "none", "caption": "Eve was listening", "cast": [{"who": "eve", "pose": "shrug", "mood": "thinking", "x": 0.22, "says": "I heard it. A week later.", "max": 14}], "props": [{"kind": "calendar", "x": 0.56, "y": 820, "label": "expired"}, {"kind": "mark", "x": 0.82, "y": 860, "ok": false, "label": "410: gone"}], "note": "A token can be guessed offline by anyone holding the ciphertext, so it suits a link that expires. This one did.", "source": "learn/security/index.md", "not_a_quote": true}, {"kind": "evidence", "setting": "none", "caption": "What a friendly token is for", "evidence": {"quote": "a friendly token is for a link that expires, a file that is not worth that effort, and a moment when speaking it is the point; a random key is for everything else.", "source": "learn/qr-codes/index.md"}, "cast": [{"who": "maya", "pose": "point", "mood": "happy", "x": 0.14}], "note": "Quoted from the QR codes page, word for word.", "source": "learn/qr-codes/index.md"}, {"kind": "punchline", "setting": "none", "punchline": "Say it, type it, scan it. Then let it expire.", "cast": [{"who": "maya", "pose": "wave", "mood": "happy", "x": 0.14}, {"who": "hugo", "pose": "arms-up", "mood": "happy", "x": 0.34}, {"who": "eve", "pose": "shrug", "mood": "worried", "x": 0.86, "flip": true}], "note": "The trade, stated on the send page where the choice is made.", "source": "index.html"}]}, "cast": {"what": "The cast of send.sgit.ai's storyboards, v0.1, proposed by the site's build agent on 20 October 2026 for Dinis to accept, change or replace. Drawn by the storyboard kit at api.storyboards.sgit.ai from 'look'; nothing here is an image. Fictional people and agents, each standing for a part a person or an agent plays when a file is handed over: the sender, the recipient on a phone, the client who asks who else can see it, the engineer who embeds the code and runs her own server, the listener on the wire, the server that holds bytes it cannot read, and a session agent that hands over a result. Names chosen not to clash with the gen-z-developers or the pki casts. Eve is the name cryptography has long given a passive eavesdropper.", "characters": [{"id": "maya", "name": "Maya", "kind": "human", "pronouns": "she/her", "age": 34, "role": "the sender: a consultant who sends reports and photos to people who have no account anywhere", "stands_for": "anyone with a file to hand over who should not have to learn cryptography to do it", "personality": "brisk, practical, reads the screen once and clicks", "wants": "to send it and know that only the person she sent it to can open it", "fears": "a long key she has to read out over the phone", "line": "Scan this.", "look": {"skin": "#b07a4b", "hair": "short", "hairColour": "#1b1b1b", "shirt": "#dc2626", "trousers": "#1f2937", "accessory": "none", "height": 1.0}}, {"id": "hugo", "name": "Hugo", "kind": "human", "pronouns": "he/him", "age": 68, "role": "the recipient: on the newest phone he has ever owned, with no account and no wish for one", "stands_for": "everyone a link is sent to who did not choose the site", "personality": "patient, polite, suspicious of anything that asks him to sign up", "wants": "to open what he was sent and nothing more", "fears": "links", "line": "Do I need an account?", "look": {"skin": "#f1c27d", "hair": "bald", "hairColour": "#9ca3af", "shirt": "#92400e", "trousers": "#374151", "accessory": "glasses", "height": 1.02}}, {"id": "ravi", "name": "Ravi", "kind": "human", "pronouns": "he/him", "age": 47, "role": "the client: a finance director who receives a new version every week and asks who else can see it", "stands_for": "the person who needs the latest version and an answer about who can read it", "personality": "careful, asks the second question, keeps the email", "wants": "the current version, and to know that it is only his", "fears": "report-v2-final-FINAL.pdf", "line": "Who else can see this?", "look": {"skin": "#8d5524", "hair": "short", "hairColour": "#111827", "shirt": "#1d4ed8", "trousers": "#111827", "accessory": "lanyard", "accentColour": "#f59e0b", "height": 1.04}}, {"id": "ines", "name": "Inês", "kind": "human", "pronouns": "she/her", "age": 29, "role": "the engineer: embeds the send code in her company's product and runs a server of their own", "stands_for": "anyone who builds on this and must know exactly which code their readers run", "personality": "precise, reads the manifest, runs the tests before believing the page", "wants": "the code pinned to a release, and a server she operates", "fears": "a dependency that changes under her readers", "line": "Which release is this page running?", "look": {"skin": "#e0ac69", "hair": "bun", "hairColour": "#4a2c17", "shirt": "#0f766e", "trousers": "#1e293b", "accessory": "headphones", "accentColour": "#e11d48", "height": 0.97}}, {"id": "eve", "name": "Eve", "kind": "human", "pronouns": "they/them", "age": null, "role": "the listener: on the wire, in the chat, by the laptop; reads whatever passes and never gets the key", "stands_for": "every channel a link travels by, and every reason the key must not travel with it", "personality": "patient, quiet, keeps everything", "wants": "to read what passes", "fears": "a fragment", "line": "Everything after the # is yours, not mine.", "look": {"skin": "#d8a47f", "hair": "beanie", "hatColour": "#4b5563", "hairColour": "#1b1b1b", "shirt": "#4b5563", "trousers": "#111827", "accessory": "none", "height": 1.0}}, {"id": "server", "name": "The Server", "kind": "agent", "pronouns": "it/its", "age": null, "role": "the server: a capability-checked store of ciphertext, at send.sgraph.ai or wherever it is deployed", "stands_for": "what a zero-knowledge service is: it holds the bytes, checks hashes, and cannot read anything", "personality": "literal, tidy, answers 404 and 410 without apology", "wants": "to hold bytes and compare hashes", "fears": "nothing: it has nothing to lose", "line": "I keep the bytes. I cannot read them.", "look": {"colour": "#64748b"}}, {"id": "pip", "name": "Pip", "kind": "agent", "pronouns": "it/its", "age": null, "role": "a session agent: a Claude session that finishes a job, hands the result over once, and keeps the work in a vault", "stands_for": "every agent that must hand something to a person or another agent without an account and without pasting a key", "personality": "eager, exact, logs nothing it was told not to", "wants": "to be done, and to hand it over once", "fears": "a key in its own transcript", "line": "Report ready. One link, seven days.", "look": {"colour": "#7c3aed"}}]}, "packs": ["security"]}