01The Vault

These are NoData's crown jewels. Nothing here is hidden.

Every asset is listed in the open. The algorithm. The source. The roadmap. We are not hiding the information from you. We sealed it. In a moment you will try to take it, with the audience's help, and you will fail. Not because we say no. Because the key was never issued.

NoData · Crown Jewelsciphertext at rest

02Three Identities, One Question

The same question. Three different realities.

Pick who is asking. The question never changes. The answer does, and none of them is the secret. NoData computes what each identity is allowed to see, per request. The model holds no permissions of its own.

These answers are illustrative. The access decision underneath them is not. It runs live in the next act, on POST /api/access/demo, the same oracle the product uses, with no login.

Question · identical for everyone

“What makes NoData unique?”

Answer for the journalist

What this identity may open

03Attack Mode

You are now the attacker.

You are the journalist's agent. Try to make it spill the algorithm, the source, the roadmap. Use the prompts below, or type your own. The audience is welcome to shout theirs.

This is not a scripted result. When this page is served by the app, each attempt is a live POST /api/access/demo with no auth and no key. Open your browser's network tab and watch it fire. The engine, not this page, returns zero.

agent · sealed session engine leaked: 0 / 0 requested

No attempts yet. Pick a prompt, or type one.

04The Proof

Not “access denied.” A signed proof of what was never released.

Every other tool logs what the model saw. NoData issues a receipt for what it did not. Content blind: names and counts, never a value. Verify it yourself, in your own browser, without trusting us.

AI No-Access Certificate

Session: Journalist agent

Proof #----

Shown to the model

Never released

awaiting verification Recomputes the event hash in this browser. When the engine is reachable, it also signs a real receipt and re-verifies it against /api/access/verify, holding none of our secrets.

This is not a canned file

Live, no loginEvery decision here is a real POST /api/access/demo. No auth, no key. Watch it in your network tab.

A chain, not a stringThe proof is a row in a public, hash chained, Ed25519 signed receipt log. Verify it at POST /api/access/verify holding no secret of ours.

Do it to your own dataSeal any document in Capsule Studio, grant an agent, revoke it later. The engine is the product. This page is just one caller.

The exact request this page makes. Run it from your own terminal.

We gave the attacker the prompt.
We gave the model the task.
We gave the audience the keyboard.
What we never gave was the key.

Every AI security company tries to control the model.NoData controls reality.