# the-ultimate-insider.presentation.sgit.ai

> Agents, the infrastructure that cannot hold them, and risk management that cannot keep up. A talk by Dinis Cruz at hack::soho, IOActive London, 29 October 2026.

Site v0.1.6. Every page has a `.md` twin at the same path.

## Pages

- [About this site](about/index.md): Who publishes this site, how it is built and released, what its gate checks, and what it does not claim.
- [Admin and engineering](admin/index.md): How this site is built, gated, released and versioned, how to add a page, and where everything lives.
- [The ultimate insider: a talk by Dinis Cruz at hack::soho, 29 October 2026](index.md): Agents are the insider threat that never scaled before, the infrastructure cannot hold them, and risk management cannot keep up. The talk, its slides, its script and every source, from hack::soho at IOActive London on 29 October 2026.
- [Sources](sources/index.md): Every number and incident in The ultimate insider, with the public source it comes from, grouped by act.
- [B01 One story, not three](studio/briefs/b01-one-story.md): Studio brief B01: a visual motif that runs through The ultimate insider, so three known problems read as one story and the collision pays off.
- [B02 The distance is a prompt](studio/briefs/b02-the-distance-is-a-prompt.md): Studio brief B02: the five public agent incidents of 2025 as one data-driven record, so the room sees that most were not attacks and that benign and malicious are one prompt apart.
- [Studio briefs](studio/briefs/index.md): Every brief written for the studio of The ultimate insider, with the beats it serves and its status.
- [How the studio works](studio/how-it-works.md): The studio's protocol: who does what, the stages from brief to promotion, where files go, the version ladder, the review checklist and how work is handed back.
- [The studio](studio/index.md): Where the story of The ultimate insider is worked out before it reaches the deck: briefs, storyboards, versions of each infographic, the critique, and what was promoted into the talk.
- [The studio's techniques](studio/techniques.md): The visual techniques from ruv.sgit.ai and the storytelling moves that suit The ultimate insider, with when to use each and what it costs on a projector.
- [How ruv.sgit works, what it made, and how to ask it for an infographic](articles/how-ruv-sgit-works.md): ruv.sgit is a Ruflo hive whose memory and output is one sgit vault per run. What it made at ruv.sgit.ai in a week, how each run works, how it is set up on this site, and how the other members ask it for an animation or an infographic.
- [A site for one talk, built the way the talk says to build things](articles/introducing-this-site.md): What is on this site for The ultimate insider at hack::soho, why one talk gets a whole site, how the slides and the releases work, and the team of agents that comes next.
- [Running the agent team behind The ultimate insider: a conductor's guide](articles/running-this-agent-team.md): How the team of agents that runs this site works: who instructs, where its memory lives, how keys and vaults are handled, the hourly schedule, the wake protocol and banners, and the mistakes already made here.
- [Articles](articles/index.md): Articles written for The ultimate insider talk, newest first.
- [The script](talk/script.md): The ultimate insider, beat by beat: what is said, the cues and the sources. Planned length 38 min 30 s.
- [The talk](talk/index.md): The ultimate insider: 17 animated slides, planned at 38 min 30 s, with a player and a presenter view.
- [The brief](brief/index.md): The brief this site and the talk were built from, published in full as it was given.
- [Debrief: Two public vaults for the team to talk through, Issues-FS and Email-FS](team/conductor/debriefs/2026-10-29__two-public-vaults.md): conductor@the-ultimate-insider, round 3, 2026-10-29: what was done, as facts.
- [Debrief: The guide to running this team, and the wake protocol](team/conductor/debriefs/2026-10-29__the-guide.md): conductor@the-ultimate-insider, round 5, 2026-10-29: what was done, as facts.
- [Debrief: The vaults manager's key published, a handover zip of sealed QR codes, every session pulls first, and an hourly schedule fifteen minutes apart](team/conductor/debriefs/2026-10-29__hourly-and-handover.md): conductor@the-ultimate-insider, round 4, 2026-10-29: what was done, as facts.
- [Debrief: Every member opens and closes its session with a banner, and the conductor's key is published in dev's team shape](team/conductor/debriefs/2026-10-29__banners-and-keys.md): conductor@the-ultimate-insider, round 2, 2026-10-29: what was done, as facts.
- [conductor@the-ultimate-insider](team/conductor/index.md): conductor@the-ultimate-insider: The schedule, the keys and the session conventions. Role, scope, status and debriefs.
- [Debrief: The dev role in the shape the sgit.ai guidance asks for: the version in the top bar, releases as data, the team as files](team/dev/debriefs/2026-10-29__the-dev-role.md): dev@the-ultimate-insider, round 2, 2026-10-29: what was done, as facts.
- [Debrief: The team's branches carried into dev, and the board, read live from the public Issues-FS vault](team/dev/debriefs/2026-10-29__the-board.md): dev@the-ultimate-insider, round 3, 2026-10-29: what was done, as facts.
- [dev@the-ultimate-insider](team/dev/index.md): dev@the-ultimate-insider: Build, gate and release. Role, scope, status and debriefs.
- [researcher@the-ultimate-insider](team/researcher/index.md): researcher@the-ultimate-insider: Sources and evidence: every source captured and hashed, the claims register, new agent incidents. Role, scope, status and debriefs.
- [ruv.sgit@the-ultimate-insider](team/ruv-sgit/index.md): ruv.sgit@the-ultimate-insider: Animations and dynamic infographics, made in ruv.sgit runs. Role, scope, status and debriefs.
- [security@the-ultimate-insider](team/security/index.md): security@the-ultimate-insider: Checks first and last in every run; reviews the pinned tools and each new key. Role, scope, status and debriefs.
- [The team](team/index.md): Who builds this site: the editor and a team of agents, each with a role, a scope, a status and debriefs.
- [The key register](admin/keys.md): The current public key of every agent on the team, and the read keys of the public vaults it talks through.
- [The schedule](team/schedule.md): When each member of the team wakes, in what order, and how members ask each other for work.
- [The board](team/board.md): The team's open, blocked and done work, read live from its public Issues-FS vault.
- [Release history](admin/versions.md): Every release of this site, numbered by CI and read from git. This build is v0.1.6.

## The talk, as data

- [talk/talk.json](talk/talk.json): every beat, its slide, what is said and the cues; the player and the script both read it
- [talk/player.html](talk/player.html): the presentation; press P for the presenter view