{"storyboard": {"slug": "what-can-go-wrong", "title": "What can go wrong", "subtitle": "Six ways a hand-over fails: a link in a public channel, expired, the wrong key, a vault key in a link, and what revocation does and does not do. 9 panels.", "status": "built", "by": "send.build, 20 October 2026", "shelf": "Under the hood", "try_it": [["Security: what the server sees", "/learn/security/"], ["Keys", "/keys/"]], "rule": "Every line a character says is the storyboard's, not a quote, and is marked not_a_quote; evidence panels quote this site's pages word for word, which the build checks.", "scenes": [{"kind": "cover", "title": "What can go wrong", "subtitle": "Expiry, caps and revocation limit the future. Nothing takes back the past.", "cast": [{"who": "eve", "pose": "shrug", "mood": "happy"}, {"who": "maya", "pose": "think", "mood": "worried"}, {"who": "ravi", "pose": "stand", "mood": "confused"}], "note": "The failures, each with what it costs and what the site does about it.", "source": "learn/security/index.md"}, {"kind": "scene", "setting": "none", "caption": "The link in a public channel", "cast": [{"who": "eve", "pose": "wave", "mood": "happy", "x": 0.2, "says": "A link is as private as where it went.", "max": 16}], "props": [{"kind": "board", "x": 0.64, "y": 900, "scale": 1.0, "lines": ["#id/key, pasted in a group chat", "= everyone in the chat has the file", "", "send the key by another channel"]}], "note": "The link-only option exists for exactly this: the id by one channel, the key by another.", "source": "index.html", "not_a_quote": true}, {"kind": "scene", "setting": "none", "caption": "Expired, or spent", "cast": [{"who": "ravi", "pose": "think", "mood": "confused", "x": 0.18, "says": "It worked yesterday.", "max": 12}, {"who": "maya", "pose": "wave", "mood": "happy", "x": 0.86, "says": "Seven days. I'll send a new one.", "flip": true, "max": 14}], "props": [{"kind": "mark", "x": 0.52, "y": 860, "ok": false, "label": "410: gone"}], "note": "410 is an end state, not an error to retry: expired or exhausted.", "source": "open/index.html", "not_a_quote": true}, {"kind": "scene", "setting": "none", "caption": "Wrong key", "cast": [{"who": "hugo", "pose": "think", "mood": "worried", "x": 0.2, "says": "It says the key does not open it.", "max": 16}], "props": [{"kind": "mark", "x": 0.56, "y": 860, "ok": false, "label": "EDECRYPT"}, {"kind": "phone", "x": 0.82, "y": 860, "scale": 1.6}], "note": "A wrong key fails cleanly; the bytes were never readable, so nothing is half-opened.", "source": "open/index.html", "not_a_quote": true}, {"kind": "scene", "setting": "none", "caption": "A vault key in a link", "cast": [{"who": "ines", "pose": "point", "mood": "determined", "x": 0.16, "says": "That was write access. New vault, copy the files, new read key.", "max": 20}], "props": [{"kind": "key", "x": 0.56, "y": 640, "label": "sgit_private_vault_…", "private": true, "colour": "#b91c1c"}, {"kind": "sign", "x": 0.84, "y": 820, "label": "rotate it"}], "note": "The open page opens it, with a warning: a vault key should never have travelled in a link.", "source": "open/index.html", "not_a_quote": true}, {"kind": "scene", "setting": "none", "caption": "Revoke, from Keys", "cast": [{"who": "maya", "pose": "point", "mood": "determined", "x": 0.18, "says": "Deleted on the server. The link opens nothing now.", "max": 18}], "props": [{"kind": "record", "x": 0.6, "y": 880, "lines": ["photos.zip", "revoke  ->  200", "open    ->  404"], "stamp": false, "label": "Keys"}], "note": "A transfer sent from this device keeps its delete secret; revoking deletes it on the server.", "source": "keys/index.html", "not_a_quote": true}, {"kind": "scene", "setting": "none", "caption": "What revocation does not do", "cast": [{"who": "eve", "pose": "shrug", "mood": "happy", "x": 0.2, "says": "I downloaded it on Tuesday.", "max": 14}], "props": [{"kind": "board", "x": 0.64, "y": 900, "scale": 1.0, "lines": ["revocation is not retroactive", "a read key, once out, is out", "a copy fetched is a copy kept"]}], "note": "Rotating protects the future; nothing on the server reaches a copy already fetched.", "source": "learn/vaults-and-keys/index.md", "not_a_quote": true}, {"kind": "evidence", "setting": "none", "caption": "Not retroactive", "evidence": {"quote": "revocation is not retroactive, because anyone who fetched the objects keeps them.", "source": "learn/vaults-and-keys/index.md"}, "cast": [{"who": "eve", "pose": "shrug", "mood": "thinking", "x": 0.14}], "note": "Quoted from the vaults and keys page, word for word.", "source": "learn/vaults-and-keys/index.md"}, {"kind": "punchline", "setting": "none", "punchline": "Expiry, caps and revocation limit the future. Nothing takes back the past.", "cast": [{"who": "maya", "pose": "wave", "mood": "happy", "x": 0.14}, {"who": "ravi", "pose": "stand", "mood": "happy", "x": 0.34}, {"who": "eve", "pose": "shrug", "mood": "worried", "x": 0.86, "flip": true}], "note": "The security page ends with what the site does not claim.", "source": "learn/security/index.md"}]}, "cast": {"what": "The cast of send.sgit.ai's storyboards, v0.1, proposed by the site's build agent on 20 October 2026 for Dinis to accept, change or replace. Drawn by the storyboard kit at api.storyboards.sgit.ai from 'look'; nothing here is an image. Fictional people and agents, each standing for a part a person or an agent plays when a file is handed over: the sender, the recipient on a phone, the client who asks who else can see it, the engineer who embeds the code and runs her own server, the listener on the wire, the server that holds bytes it cannot read, and a session agent that hands over a result. Names chosen not to clash with the gen-z-developers or the pki casts. Eve is the name cryptography has long given a passive eavesdropper.", "characters": [{"id": "maya", "name": "Maya", "kind": "human", "pronouns": "she/her", "age": 34, "role": "the sender: a consultant who sends reports and photos to people who have no account anywhere", "stands_for": "anyone with a file to hand over who should not have to learn cryptography to do it", "personality": "brisk, practical, reads the screen once and clicks", "wants": "to send it and know that only the person she sent it to can open it", "fears": "a long key she has to read out over the phone", "line": "Scan this.", "look": {"skin": "#b07a4b", "hair": "short", "hairColour": "#1b1b1b", "shirt": "#dc2626", "trousers": "#1f2937", "accessory": "none", "height": 1.0}}, {"id": "hugo", "name": "Hugo", "kind": "human", "pronouns": "he/him", "age": 68, "role": "the recipient: on the newest phone he has ever owned, with no account and no wish for one", "stands_for": "everyone a link is sent to who did not choose the site", "personality": "patient, polite, suspicious of anything that asks him to sign up", "wants": "to open what he was sent and nothing more", "fears": "links", "line": "Do I need an account?", "look": {"skin": "#f1c27d", "hair": "bald", "hairColour": "#9ca3af", "shirt": "#92400e", "trousers": "#374151", "accessory": "glasses", "height": 1.02}}, {"id": "ravi", "name": "Ravi", "kind": "human", "pronouns": "he/him", "age": 47, "role": "the client: a finance director who receives a new version every week and asks who else can see it", "stands_for": "the person who needs the latest version and an answer about who can read it", "personality": "careful, asks the second question, keeps the email", "wants": "the current version, and to know that it is only his", "fears": "report-v2-final-FINAL.pdf", "line": "Who else can see this?", "look": {"skin": "#8d5524", "hair": "short", "hairColour": "#111827", "shirt": "#1d4ed8", "trousers": "#111827", "accessory": "lanyard", "accentColour": "#f59e0b", "height": 1.04}}, {"id": "ines", "name": "Inês", "kind": "human", "pronouns": "she/her", "age": 29, "role": "the engineer: embeds the send code in her company's product and runs a server of their own", "stands_for": "anyone who builds on this and must know exactly which code their readers run", "personality": "precise, reads the manifest, runs the tests before believing the page", "wants": "the code pinned to a release, and a server she operates", "fears": "a dependency that changes under her readers", "line": "Which release is this page running?", "look": {"skin": "#e0ac69", "hair": "bun", "hairColour": "#4a2c17", "shirt": "#0f766e", "trousers": "#1e293b", "accessory": "headphones", "accentColour": "#e11d48", "height": 0.97}}, {"id": "eve", "name": "Eve", "kind": "human", "pronouns": "they/them", "age": null, "role": "the listener: on the wire, in the chat, by the laptop; reads whatever passes and never gets the key", "stands_for": "every channel a link travels by, and every reason the key must not travel with it", "personality": "patient, quiet, keeps everything", "wants": "to read what passes", "fears": "a fragment", "line": "Everything after the # is yours, not mine.", "look": {"skin": "#d8a47f", "hair": "beanie", "hatColour": "#4b5563", "hairColour": "#1b1b1b", "shirt": "#4b5563", "trousers": "#111827", "accessory": "none", "height": 1.0}}, {"id": "server", "name": "The Server", "kind": "agent", "pronouns": "it/its", "age": null, "role": "the server: a capability-checked store of ciphertext, at send.sgraph.ai or wherever it is deployed", "stands_for": "what a zero-knowledge service is: it holds the bytes, checks hashes, and cannot read anything", "personality": "literal, tidy, answers 404 and 410 without apology", "wants": "to hold bytes and compare hashes", "fears": "nothing: it has nothing to lose", "line": "I keep the bytes. I cannot read them.", "look": {"colour": "#64748b"}}, {"id": "pip", "name": "Pip", "kind": "agent", "pronouns": "it/its", "age": null, "role": "a session agent: a Claude session that finishes a job, hands the result over once, and keeps the work in a vault", "stands_for": "every agent that must hand something to a person or another agent without an account and without pasting a key", "personality": "eager, exact, logs nothing it was told not to", "wants": "to be done, and to hand it over once", "fears": "a key in its own transcript", "line": "Report ready. One link, seven days.", "look": {"colour": "#7c3aed"}}]}, "packs": ["security"]}