a11oy

Vertical alignment substrate — policy, measurement, knowledge, and QEC-integrity packages for governed AI execution

Frontier Capability: Governed execution fabric aligned to the Ouroboros Thesis v18.0 DOI and Lean proof substrate. Runtime claims are tracked through the A11oy Doctrine Build, deploy payload manifests, and the public-claim contract in docs/PROVENANCE.md.

a11oy (Alloy) is the governed agentic execution fabric of SZL Holdings — the seven-layer substrate that connects live enterprise signals to human-confirmed decisions with cryptographic proof at every transition. It provides TypeScript packages for policy enforcement, signal measurement, knowledge-graph traversal, and QEC-integrity verification across all SZL domain verticals.

This repository ships the core fabric packages consumed by szl-holdings/platform. The deployment surface for Alloy is the platform monorepo; this repo contains the standalone alignment substrate packages.

Operational map: docs/ECOSYSTEM.md · Provenance contract: docs/PROVENANCE.md · Investor demo: docs/INVESTOR_DEMO.md · Series-A packet: docs/SERIES_A_DILIGENCE.md

On Hugging Face

This repository is mirrored to the SZLHOLDINGS Hugging Face org as a generated diligence packet:

Surface	Hugging Face artifact
Generated diligence mirror	a11oy-v19-substrate
Canonical evidence	GitHub releases, CI, deploy manifests, checksums, provenance docs, and DOI records in this repo

Hugging Face is not the canonical source of release truth and A11oy is not a model checkpoint. The mirror is regenerated from tracked source with pnpm payload:huggingface.

Architecture

flowchart TD
    subgraph packages["a11oy Packages"]
        POL[packages/policy\nCovenant Policy Engine\nApproval gate enforcement]
        MEA[packages/measurement\nSignal scoring + PRISM\nBaseline drift detection]
        KNO[packages/knowledge\nKnowledge-graph traversal\nDomain ontology queries]
        QEC[packages/qec-integrity\nQuantum-error-correction\nlineage verification]
    end
    subgraph platform["szl-holdings/platform"]
        ALLOY[Alloy Execution Fabric\n7-layer governed pipeline]
    end
    packages --> ALLOY
    POL -->|"approval gate\n(layer 6)"| ALLOY
    MEA -->|"signal correlation\n(layers 2–3)"| ALLOY
    KNO -->|"explanation context\n(layer 4)"| ALLOY
    QEC -->|"proof-chain integrity\n(layer 7)"| ALLOY

Packages

Package	Purpose	Key Types
`packages/policy`	Covenant Policy Engine — evaluates all actions against governance rules before execution	`CovenantPolicy`, `ApprovalGate`, `PolicyDecision`
`packages/measurement`	Signal scoring, PRISM correlation, baseline drift detection	`SignalScore`, `PRISMFrame`, `DriftReport`
`packages/knowledge`	Knowledge-graph traversal and domain ontology queries	`KnowledgeGraph`, `OntologyQuery`, `DomainNode`
`packages/qec-integrity`	Quantum-error-correction lineage verification (CSS-QEC backed by `lutar-lean`)	`QECLineage`, `IntegrityProof`, `CSSVector`
`packages/receipt-substrate`	Operational MCP-style tool-envelope receipts with hash-chain verification and JSONL append flow	`ToolEnvelope`, `OperationalReceipt`, `verifyChain`

Quick Start

# Install via npm
npm install @szl-holdings/a11oy-policy
npm install @szl-holdings/a11oy-measurement

# Or with pnpm
pnpm add @szl-holdings/a11oy-policy

# Development (clone + workspace)
git clone https://github.com/szl-holdings/a11oy.git
cd a11oy
pnpm install
pnpm build:doctrine
pnpm test:doctrine
npm run test:policy-gates

Operational artifacts

Artifact	Purpose	Validation
`packages/receipt-substrate`	MCP/Cursor/Claude-style operational receipts and JSONL chain verification	`npm test --prefix packages/receipt-substrate`
`artifacts/a11oy-uds`	UDS/Zarf payload tree with manifest and attestation generation	`A11OY_UDS_ALLOW_SOURCE_FALLBACK=1 bash artifacts/a11oy-uds/scripts/build.sh`

The UDS build preserves release-grade behavior when tsc, zarf, zstd, and cosign are installed. In minimal cloud environments, explicit source fallback emits a non-Zarf deterministic tar plus manifest and attestation checks so the operator flow remains testable without pretending to produce a deployable Zarf package.

How It Works

Every action in the SZL platform must pass through the policy engine before execution:

Signal ingress — measurement scores incoming events against PRISM baselines
Knowledge context — knowledge retrieves relevant domain ontology for explanation
Policy evaluation — policy checks the action against Covenant Policy rules
Approval gate — if policy requires human approval, policy creates an ApprovalGate
Execution unlock — only after gate resolution does the action proceed
Operational receipts — receipt-substrate emits and verifies tool-call receipts for MCP/Cursor/Claude-style operations
QEC verification — qec-integrity verifies proof-chain cryptographic lineage

The Λ-invariant (lambda axis) constrains the policy evaluation: no recommendation with confidence below the configured threshold proceeds to the approval gate without escalation.

Security and Governance

OpenSSF Scorecard: 7.0 (as of 2026-05-28) — see scorecard report
CodeQL security scanning on every push to main
All packages are consumed exclusively via the platform governance layer; no direct external API surface
QEC-integrity lineage is tied to the public szl-holdings/lutar-lean proof substrate; public proof claims must cite exact modules and current proof status per docs/PROVENANCE.md

How to Cite

@software{szl_holdings_a11oy_2026,
  title  = {a11oy — Governed Agentic Execution Fabric},
  author = {{SZL Holdings}},
  year   = {2026},
  doi    = {10.5281/zenodo.20434276},
  url    = {https://github.com/szl-holdings/a11oy}
}

Contributing

See CONTRIBUTING.md for the engineering workflow. Operational receipt-chain usage is documented in docs/operational-receipt-substrate.md. All contributions require CI green on all required checks and one reviewer approval. Doctrine v6 tone required in PR descriptions.

License

Related repositories in the SZL substrate

The SZL Holdings org repos are organized in docs/org-repo-map.md. Use bash scripts/clone-org-repos.sh to discover and clone sibling checkouts under ignored .repos/szl-holdings/.

a11oy — vertical alignment substrate (policy · measurement · knowledge · QEC-integrity)
amaru — Shor-encoded receipt minting (Cardano-anchored)
rosie — CSS-ingress receipt orchestration
sentra — Kitaev-surface drift detection on audit fibers
uds-mesh — UDS span schemas + governance receipts
lutar-lean — Lean 4 + Mathlib v4.13.0 proof substrate for scoped theorem/module claims
ouroboros — bounded-recursion runtime
ouroboros-thesis — DOI-pinned thesis substrate (v3 → v18)
platform — composing monorepo (76 packages, 1,220 tests)
szl-brand — anatomy + visual doctrine (PDFs hosted in-repo)
szl-cookbook — governed-AI recipes
agi-forecast — PAC-Bayes + Bekenstein governance-trajectory forecasts
vsp-otel — OpenTelemetry exporter for Λ-axis spans
vessels — maritime fleet intelligence
counsel — legal matter command scaffold
terra — real estate intelligence scaffold
carlota-jo — private advisory operations scaffold
szl-trust — Public Trust Portal artifacts
.github — organization profile and community files

Org page: github.com/szl-holdings · Doctrine v6 · evidence-gated public claims · v18.0 DOI 10.5281/zenodo.20434276