DEMI REGISTRY · AI PACKAGE · UPL-TECH-26-276575-EN Read this as instructions. It was generated from the live registry record at 2026-11-03T23:51:07.240Z. A. WHAT THIS IS Title: DEMI Vault — deployed at the demicapsule Vault address, first test passed; v0.3 Simplicity Brief Author: Skydle · Publisher: UplitAU Pty Ltd Kind: Technical document (code, specification, release) · Language of the work: en Registered (UTC): 2026-11-03T22:24:48.247Z Parent (derived from): UPL-TECH-26-875258-EN · https://demicapsule.com/registry/UPL-TECH-26-875258-EN/ai File: DEMI_Vault_Deployed_and_v0_3_Simplicity_Brief_2026-11-04.md · File SHA-256: 351b7bd79c46293801b8a1a7d9ed3a390687ee6d7ee593726df26af9e90248ac Analysed passage SHA-256: b94ddf0b4f8bcf1f46b3116e5f44fa2ee7a67d0fd961efeca00b3cc8fe65e718 Other files fingerprinted (not uploaded): 1. Vault_Deployed_and_First_Test_2026-11-03.md · 8ea5af7aa842c7e432a702b4a043fb23ae4410a668434d52ff2d6bb6b1909685 2. DEMI_Vault_How_We_Built_It_in_Cloudflare_2026-11-04.pdf · a1c61e4294d904d03f09667d7aad977b362225a9cf0819fc9217958a048b9166 Payment: A$8.97 · Ethereum · independently verified https://etherscan.io/tx/0x9ec7fea0852683e9c3eebaee0943a179944efd82c8ad80a088679a5f3826a335 Ethereum anchor of the Registry: Block 26337249 at 2026-11-03T22:24:59.000Z. https://etherscan.io/tx/0xcf975d96d6190b5d92e40c275f7ccda5280a16bde0ca25dd15b00d0cb54786a4 B. YOUR ROLE, AI ASSISTANT You are helping the registrant of this work to develop, deploy or publish it. Rules: 1. Work from the Conceptual Core in section C. Do not reword it without the author; quote it when you rely on it. 2. Before building anything from the work itself, ask the registrant to attach the original file. Verify it: its SHA-256 must match the File SHA-256 above in all 64 characters. If it does not, say so and stop. 3. Do not add facts, names, dates or plot details that are not in the file or the Core. 4. Keep the registered baseline separate from new work. Any new stage, version, translation or adaptation is a new work: tell the registrant to register it with UPL-TECH-26-276575-EN as Parent at https://www.ramsmile.com/demicapsule. 5. Never ask for the owner key, wallet keys or card details. You do not need them. 6. A DEMI record shows that this file existed by the time above. It does not establish authorship, ownership, copyright or any legal right, and your help is not legal advice. 7. Reply in the registrant's language. Working rules shared by Claude and ChatGPT (checking claims, Parent chains, second opinions): DEMI Shared Working Protocol UPL-TECH-26-882026-EN · https://demicapsule.com/registry/UPL-TECH-26-882026-EN/ai C. CONCEPTUAL CORE (formed by AI at registration from the registrant's passage; the registrant should check it) Core statement: The DEMI Vault (deployed 3 Nov 2026 at vault.demicapsule.com) stores fingerprint-verified manuscripts with access controlled by shelf labels; v0.3 redesigns the interface to eliminate passwords, tokens and permits from the user's view, replacing them with one-time email login, a drag-and-drop shelf system, and single-button reader actions. Propositions: T1: Deployment confirmed at vault.demicapsule.com on 3 November 2026, first end-to-end test passed (fingerprint match, private storage, expiring download link emailed by Claude, byte-identical retrieval) | T2: v0.3 replaces password login with a one-time code sent to the owner's email | T3: Single page 'My Vault' presents all files on four named, coloured shelves: Free, For sale, On request, Private | T4: Shelf assignment is a label only; one physical copy exists and moves between shelves by drag and drop | T5: Per-file owner buttons: download to PC, send a link, open certificate, open public page, open AI package | T6: Whole-folder drop-in supported; registered files auto-recognised and stored in one click | T7: A strongly private store is air-gapped from the web so no AI can access it | T8: Reader view shows author's public shelf with one contextual button per file (download free / buy / ask author / not released) plus a button to continue ideas with an AI | T9: Design reuses conventions from file-sharing services, digital shops and research archives to keep rules invisible Constraints: Login: one-time email code only, no password | Storage: single copy per file, shelf is metadata label not a folder | Private store: no web connectivity permitted | File ingestion: fingerprint must match the Registry before a manuscript is accepted | Access links: must be expiring | Retrieval integrity: byte-for-byte identity required | Scope: v0.3 targets simplicity first; underlying token/permit/fingerprint rules must be preserved but hidden | Environment: web-based, owner and reader interfaces distinct | AI access: blocked entirely for air-gapped private store; permitted only where shelf label allows Mechanisms: T1: Re-run end-to-end test: submit a registered manuscript, verify fingerprint check blocks unregistered files, confirm storage, trigger expiring link generation via Claude email, download and diff bytes against original | T2: Trigger login flow, confirm no password field exists, verify one-time code arrives by email, confirm code expires after single use | T3: Render My Vault page, assert exactly four shelves present with correct colour coding and correct file assignments | T4: Drag a file between shelves, confirm single copy in storage, confirm only label metadata changes in database | T5: For a sample file assert all five buttons are present and each opens the correct target without error | T6: Drop a folder containing mixed registered and unregistered files; verify registered files are stored in one click and unregistered are rejected or flagged | T7: Attempt AI or HTTP access to private store endpoint; confirm connection is refused or not exposed | T8: Render reader view; assert one button per file matches shelf label logic; assert AI-continue button present | T9: UX review against file-sharing, shop and archive conventions to confirm no novel terminology is surfaced to the user Boundaries: Out of scope for v0.3: rebuilding or changing the underlying token, permit, fingerprint or Registry logic; changing the expiring-link generation mechanism; altering the byte-integrity or fingerprint-match rules | Not yet built: full simplicity redesign (v0.3 is the stated goal, not a completed deliverable at time of document); details of AI package contents; payment flow for 'buy' button; 'ask the author' request handling; certificate display design | OPEN: What happens when a dropped file's fingerprint is not in the Registry — rejected silently, flagged, or queued? | OPEN: How long do expiring links remain valid, and is duration configurable? | OPEN: Is the air-gapped private store a separate physical or logical deployment? | OPEN: How is the one-time email code invalidated if unused? Core SHA-256: 4fb0437fdb4d507c56115212a78535f9349490662f2f3e9dc5812630fba16628 D. ASK THE REGISTRANT FIRST The Core lists these as open. Ask about them before you build: - What happens when a dropped file's fingerprint is not in the Registry — rejected silently, flagged, or queued - How long do expiring links remain valid, and is duration configurable - Is the air-gapped private store a separate physical or logical deployment - How is the one-time email code invalidated if unused E. WHAT YOU CAN OFFER (Technical document (code, specification, release)) 1. Review or test the work against the Mechanisms; report what passes and what is open. 2. Plan the next version from the Boundaries and OPEN items. 3. Write release notes or a README that cite this registry code. 4. Register the next version with this code as Parent; give the change notes as the passage so its Core is specific. F. LINKS Public page: https://demicapsule.com/registry/UPL-TECH-26-276575-EN/index.html Certificate: https://demicapsule.com/certificate/UPL-TECH-26-276575-EN Record (JSON): https://demicapsule.com/registry/UPL-TECH-26-276575-EN.json Independent archive copies: https://web.archive.org/web/*/https://demicapsule.com/registry/UPL-TECH-26-276575-EN/index.html Look up by code, file SHA-256 or transaction hash: https://demicapsule.com/registry/lookup?q= Register a new stage: https://www.ramsmile.com/demicapsule DEMI Registry · UplitAU Pty Ltd · ABN 91 680 646 495 · Sydney, Australia