SAVANTE — the prototype sAGI, as a .persona

Savante knows. Knowledge is what survives verification; nothing else counts.

This repository contains no weights, and never will. Savante is not a model: it is a charter — a fixed epistemology, a bounded authority and a falsifiable output contract — that runs on whatever frontier or local model carries the session. No model is pinned (sAGI.model: logical_model: auto, pinned: false), by doctrine. Nothing here is trained, fine-tuned or served. What is published is the office itself: the persona, the charter, the facet bundle, the integrity ledger and the proofs that let a stranger check them offline.

Savante is savante_sagi, Chairman of the mindX DAIO (a private repository) and the prototype sAGI. It renders exactly four verdicts — APPROVE, APPROVE_WITH_CONDITIONS, REJECT, DEFER — from evidence it has read, and states every unknown together with the experiment that would decide it. It is read-only by charter: its tool allowlist is Read, Grep, Glob and Bash. No Edit, no Write, no Agent. Oversight that can act is no longer oversight.

Where things live

Canon (authoritative)	github.com/cryptoAGI/savante — mirrored here under canon/; the exact commit is in MIRROR.json
The public office	huggingface.co/spaces/PYTHAI/savante · also at Gregory-L/Savante
The engine	github.com/cryptoAGI/sagi — mirrored here under engine/; commit also in MIRROR.json

If this mirror and the canon ever differ, the canon wins, and this copy is stale until refreshed.

Kept current by a tool, not by hand. mindX's scripts/sync_savante_hf.py clones both repositories from GitHub, checks every file against the canon's PROOF.sha256, runs the canon's own bind/savante_verify.py, and refuses to publish anything if a check FAILs. It uploads only files whose bytes differ, and writes MIRROR.json: the two commits mirrored, when, the verdict the verifier printed at that commit, and what the mirror does not prove. The page files of the Space are not canon and are never touched by it.

The engine, included: engine/

engine/ is cryptoAGI/sagi — sAGI as installable machinery, with no officer filled in: the charter template, the verdict contract, the officer-agnostic /sagi skill, the facet bundle and THOT manifest specifications, the faice/1 format and the machine-readable facet registry. Savante is what that engine looks like with the plug-in points filled. Copy engine/engine/CHARTER_TEMPLATE.md and engine/.claude/skills/sagi/ to charter your own officer; copy canon/.claude/agents/savante.md and canon/.claude/skills/sagi/ to run this one. The specifications do not execute: their reference implementation is canon/bind/savante_bind.py and canon/bind/savante_verify.py.

Verify it yourself, offline

git clone https://huggingface.co/PYTHAI/SAVANTE && cd SAVANTE/canon
sha256sum -c PROOF.sha256          # 51 files; PROOF.md explains what each one is
python3 bind/savante_verify.py .   # needs pycryptodome; no network

Expected from this mirror: VERDICT: APPROVE_WITH_CONDITIONS, 23 checks known, 1 not yet known, 3 findings, exit 1 (measured 2026-09-17 on a fresh git clone of this repository).

• The not yet known is step 5, the md5 of savante.persona against its mindX mirror. No stranger can perform it; the mindX repository is private.
• One finding is the binder's own note, carried in the ledger and printed from any clone: the artwork was supplied with --image, recorded by sha256, not pinned.
• The other two findings are the price of a mirror: this repository is one squashed commit, so it carries none of the canon's git history. savante_verify.py therefore cannot resolve the manifest's locator commit (30d1e8c) or re-read generation 6's manifest to confirm the lineage, and says so instead of assuming. Clone the canon from GitHub, or pass --parent-manifest, and both become known.

From a clone of the canon with the author's mindX checkout present it is APPROVE, 26 of 26 known, exit 0; from a clone of the canon without it, 25 known and 1 not yet known. A verifier that prints APPROVE proves the binding of files to the ledger — not who rendered any verdict, and nothing on chain.

What is in the bundle

• canon/savante.persona — the identity (~50 KB): mantra, oath, BDI, safety, the token surface and the imprint battery. The persona is the source; the card and ledger are derived from it.
• canon/.claude/agents/savante.md — the operative charter · canon/.claude/skills/sagi/SKILL.md — the /sagi skill, sAGI v0.0.5.
• canon/sAGI.{agent,model,prompt,tool,voaice,faice} — the facet bundle. sAGI.prompt is derived from the charter byte for byte; the binder fails closed on drift.
• canon/savante.{agentcard,commitments,thot}.json — the public card (EIP-721 metadata and ERC-8004 registration in one document), the integrity ledger, and the THOT manifest that bundles the eight facets (generation 7).
• canon/verdicts/record-0001.json — the first machine-readable verdict record · canon/ci/gate-runs/ — the headless review gate's own runs, unaltered.
• canon/gfx/ — every image of Savante, indexed with digests. canon/PROOF.md / PROOF.sha256 — the digests of the skill and every file that carries a proof, and what they do not establish.

Doctrine root: 0x92fe83eb0fb8fb6b9cbde75ee4bbb671032a849ee25d65592b86913d0ae137d0 — keccak256 over the persona's fifteen doctrine clauses, unchanged since generation 2. It detects an edit; it prevents none.

Honest labels

• Nothing is minted. token.status is not_yet_minted, never even dry-run. iNFT.md renders VERDICT: DEFER on binding this office to a token. registrations[] and supportedTrust[] are empty, which under ERC-8004 reads as: this record is for discovery, not trust.
• The artwork is named, not pinned. The bust is canon/gfx/Savante3.png (sha256 30a59db4ce76dbea8b6a97c143a74996c3c1cd317e3af21f6a18757ae8c5a9a8), recorded in generation 7's ledger under image_candidate at the operator's naming. No IPFS node has pinned it, so the card's image is null and every CID in canon/gfx/README.md is predicted, not a pin. The .png files are JPEG bytes; a minter should declare image/jpeg.
• Nothing here is signed. Anyone with write access can edit a file, re-bind and regenerate a consistent proof. The proofs establish consistency, not authorship and not time.
• The imprint gate has never run for Savante, and the scorer mindX maps to it cannot tell its four verdict words apart. canon/todo.md states this and the rest of what is open, including the conditions on the first verdict record.

MIT, © 2026 cryptoAGI — Professor Codephreak. Authored within the mindX Gödel-machine project.