ChatGPT Review Statement on DEMI Vault v0.3 plan (no web address in the title)
Skydle · 2026-11-04
UPL-TECH-26-233982-EN
“DEMI Vault v0.3 addresses accidental publication, access control gaps, inconsistent error states, and eventual-consistency revocation found in v0.2.1 by introducing confirmed-private defaults, email-code login, three-state fingerprint sorting, and deferred Durable Object one-use links.”
PropositionsT1: New files default to Private; owner must confirm before any file moves to a public shelf. | T2: Email-code login via Cloudflare Access gates all owner pages and owner API endpoints; workers.dev address must be disabled or protected. | T3: My Vault page exposes four shelves: Free downloads, For sale, Request access, Private. | T4: Owner 'Download to my PC' button available from Vault page. | T5: Folder-drop fingerprint check produces exactly three outcomes: Matched / Not registered (Register this) / Could not check. | T6: 'Continue with AI' offers two modes: discuss ideas from public package; review original with permission and fingerprint check. | T7: One-use links require a Durable Object (deferred); sales via Lemon Squeezy shown pending until tested. | T8: OAuth-protected Vault tool for Claude and ChatGPT plugins to be identical. | T9: registry.demicapsule.com must be tested for ChatGPT reader accessibility; if readable, that address replaces workers.dev in AI packages.
ConstraintsCloudflare Access required for owner authentication; workers.dev bypass must be eliminated. KV store is eventually consistent: revocation propagation latency up to ~1 minute; strict one-use links cannot rely on KV alone. Fingerprint hash-and-refuse already implemented in v0.2.1 deposit(). v0.3 sequenced simplicity-first for single owner, architected to extend to multiple owners. Lemon Squeezy integration blocked until tested. AI package changes (registry.demicapsule.com address) blocked until after review freeze. demi-proxy must be updated to route registry.demicapsule.com before the address is printed in packages.
MechanismsT1: Verify default Privacy flag on upload; simulate publish flow and confirm prompt appears before shelf change. | T2: Attempt unauthenticated access to owner API and workers.dev address; both must reject. | T3: Render Vault page with files in each shelf state; assert all four categories display correctly. | T4: Trigger Download button; confirm file received on client matches stored bytes. | T5: Drop folder containing a matched file, an unregistered file, and a network-failure case; assert each returns its designated label. | T6: Invoke both AI modes; mode 1 must not expose original bytes; mode 2 must pass fingerprint check before granting access. | T7: Confirm Durable Object one-use link is absent from v0.3 build; assert placeholder or pending indicator shown. | T8: Run identical OAuth flow against both plugin endpoints; diff responses. | T9: Send GET to registry.demicapsule.com from ChatGPT retrieval context; assert HTTP 200 and readable body.
BoundariesOut of scope for v0.3: Durable Object one-use links, Lemon Squeezy payment processing, OAuth plugin endpoints for Claude and ChatGPT, AI package address update. Not built yet: multi-owner architecture (designed for but not implemented). The workers.dev address is a known gap carried from v0.2.1. 'Air-gapped' description of demi-private was incorrect in source material; demi-private is a restricted archive on the same infrastructure. OPEN: Whether registry.demicapsule.com is currently readable by ChatGPT's retrieval tool is unconfirmed and must be tested before any package update.
Files fingerprinted by this registration
These files were fingerprinted by the registrant and were never uploaded. The registration time above applies to each fingerprint below: a fingerprint cannot be produced without the file it describes. This record does not establish authorship or ownership of the files named.