A read-only vault needs no code; a read-write vault server is 83 lines on a free plan

Because the sgit server never sees a key or a plaintext byte, it has almost nothing to do, and that is what the test showed on 18 October 2026. Read-only: no code at all; sgit publish writes a folder any static host can serve, and the real client cloned it back identically. Read-write: one Worker of 83 lines, one R2 bucket and one Durable Object per vault, all on Cloudflare's free plan, run in Cloudflare's own runtime locally with the real client: create, push, clone; a stale push that merged; two pushes at once where one was told nothing was overwritten; a read-only clone that refused to write; a wrong write key answered 403; and no plaintext anywhere in what the server stored. It has not yet run on a real account, does not do files over 4 MB, and has one shared access token.

Decided by. Nobody yet: a candidate for Dinis to read, comment on and decide (keep, rewrite, merge, cut, article first, later, not doing it).

Note. The value of constraints in practice, in the article's own words: 'because the server can read nothing, it has almost nothing to do.' A nuance for the book's 'no servers of mine with logic in them': the 83 lines are logic of yours, the small commodity function the no-server article allows for the one real limit (writes that must be checked). The Worker and its wrangler configuration are printed in full in the article, so the weekend chapter can point at them rather than reprint them.

Where it comes from

Cloudflare as Lego blocks An sgit vault on Cloudflare (newsroom)

What it answers in the 2018 book

Serverless answered outline, Concepts

Where it goes

Chapter Ship a serverless product in a weekend, part Hands on, 2026 (drafting); topic Building blocks: cloud, serverless, free models, git and CI.

Other ideas proposed for the same chapter: Three honest tiers for a model on a site with no server: a local matcher, your own key, or a vault bridge, Scope the feature to one question, and quote rather than paraphrase, Billing by not building billing: the commercial model is a property of the key, Twice now the product was possible and the licence was the blocker: read the terms, not only the docs, VoiceDebrief: a product with no server that shipped in three weeks and stopped at the one thing it could not sell.

Node idea:a-vault-server-in-83-lines in graph.json; see it in the graph. Source: admin/content/graph/ideas.json.