docs: identify substrate as a software artifact

ARTIFACT_MANIFEST.json

@@ -0,0 +1,193 @@
+{
+  "schema_version": 1,
+  "artifact_type": "software-documentation-deployment-bundle",
+  "repository": "SZLHOLDINGS/a11oy-v19-substrate",
+  "repository_type": "model",
+  "source_parent_revision": "8af92e07e24b8e184a12cf468733d26dc9022088",
+  "digest_algorithm": "sha256",
+  "scope": "Every repository file in this candidate snapshot except ARTIFACT_MANIFEST.json.",
+  "self_exclusion_reason": "A digest manifest cannot include its own digest without a circular dependency.",
+  "entry_count": 36,
+  "files": [
+    {
+      "path": "CITATION.cff",
+      "size": 4958,
+      "sha256": "bd2426808ba673f3637d5b9d3f4f7a79c18c01050fc3fa4a522e9622df0e4c76"
+    },
+    {
+      "path": "EVAL_TRACE_SAMPLE.jsonl",
+      "size": 2486,
+      "sha256": "ae0b0831606d506d4d7a5de67e3b8e52b331b2a0afa354d36ca52b52ec406899"
+    },
+    {
+      "path": "INNOVATIONS_DEEP_DIVE.md",
+      "size": 3091,
+      "sha256": "d2081d7d61fff01a874f535c2dece083ab25d1b2f3a7cf3e92d0c10acd271136"
+    },
+    {
+      "path": "INTEGRATION_QUICKSTART.md",
+      "size": 1570,
+      "sha256": "ff0e29cbf0557f3fa605dedce80fb2791861ddd0cea45523d75007357af9bee8"
+    },
+    {
+      "path": "INVESTOR_BRIEF.md",
+      "size": 2185,
+      "sha256": "66b5db617cc84b554cb0940a1283fdc3a345032f821b90125c6337523e8d917e"
+    },
+    {
+      "path": "LICENSE",
+      "size": 3003,
+      "sha256": "34052e94631b67b1b041caf77f6bf2377bcbf04b8dc31455128de143c1a904ff"
+    },
+    {
+      "path": "NOTICE",
+      "size": 531,
+      "sha256": "509bf420adac1b56eba677eb9eafe51f78392a8e962def2457dfccab162d8107"
+    },
+    {
+      "path": "README.md",
+      "size": 11306,
+      "sha256": "8f65b341d9d97389499050640aba272c14775366123fa99b7fac40e5261f4a29"
+    },
+    {
+      "path": "SHOWCASE.md",
+      "size": 2925,
+      "sha256": "42b1c05460066d98d01f3a708baf308e85865ba5ba85278a4af42c202bad36c2"
+    },
+    {
+      "path": "VERIFICATION.md",
+      "size": 1933,
+      "sha256": "79acb68828b286c7f784dbe7714c195120f5d073159f63b905f2f84be91063a2"
+    },
+    {
+      "path": "a11oy-metadata.json",
+      "size": 1162,
+      "sha256": "89ae6accb75aa5557b86019772e10da4abf3cad6157e8daeff460fe37a37d71f"
+    },
+    {
+      "path": "build/package.json",
+      "size": 3709,
+      "sha256": "192616500dd7a0e1d5424df5d4b10bc9695e79314a818f8635e0f92d5bc9ec3a"
+    },
+    {
+      "path": "build/pnpm-lock.yaml",
+      "size": 139312,
+      "sha256": "6a808bdf3ea08a5437f8c064356e2efafeb93e51bdc68eabe1047d4a7892f66f"
+    },
+    {
+      "path": "build/pnpm-workspace.yaml",
+      "size": 162,
+      "sha256": "1ce378f391821ecb1f4a29c1232120a37f83a75d94c934772c0b9f0b42d43986"
+    },
+    {
+      "path": "build/tsconfig.base.json",
+      "size": 356,
+      "sha256": "fb1bb8d6381bdcec8f17a2c4d64b4b99a21e0bff65cb49ba8c50adc652baf2a7"
+    },
+    {
+      "path": "payloads/deploy/MANIFEST.json",
+      "size": 1171,
+      "sha256": "406f33bd3df4bd4df032198455b7c39cd6168defb5850ce8e814fd80dc25d655"
+    },
+    {
+      "path": "payloads/deploy/attestations.jsonl",
+      "size": 232,
+      "sha256": "88f3acf147de2d1da2c47d90d2c6abdaee9ea727863339966f0176afbbbd0dca"
+    },
+    {
+      "path": "payloads/deploy/manifests/a11oy-deployment.yaml",
+      "size": 1591,
+      "sha256": "416afae523214cdbaa16191bfab36163e6bc1ef51d7b1c167a26613a9a08d4a1"
+    },
+    {
+      "path": "payloads/deploy/manifests/a11oy-namespace.yaml",
+      "size": 133,
+      "sha256": "641f72c4d7d72ecafc1674816c4a4e8a7445c6d7b4d9b8a4c7e6296417fa91e0"
+    },
+    {
+      "path": "payloads/deploy/manifests/a11oy-service.yaml",
+      "size": 310,
+      "sha256": "a99b1877a51195720a8f249bccd59b836d4f85461b6418428115b4beb6a41a47"
+    },
+    {
+      "path": "payloads/deploy/manifests/proof-ledger-pvc.yaml",
+      "size": 270,
+      "sha256": "3804fdcf3a0b6ea767c3aaf3a373f8d82976d1824c9249b27cd515c91d567244"
+    },
+    {
+      "path": "payloads/deploy/zarf.yaml",
+      "size": 1950,
+      "sha256": "3803d3821c2766523ec28c672d0c73265a58264daa2f51a57f96931c02ce4445"
+    },
+    {
+      "path": "source/CHANGELOG.md",
+      "size": 1404,
+      "sha256": "6571441936c6a008e9f36fb0a0a8f49721507461763da456fe0f1a98f15a21d5"
+    },
+    {
+      "path": "source/README.md",
+      "size": 11603,
+      "sha256": "c2b8dcad3f470f60a23f2dd69acb88db77a1dd66c72a5123c744b5a339376fd3"
+    },
+    {
+      "path": "source/ROADMAP.md",
+      "size": 2836,
+      "sha256": "f4a4f4d3587c4cc492b22ffb1f2669433d585ab9cddbae7b8849f07fbad008c0"
+    },
+    {
+      "path": "source/docs/ECOSYSTEM.md",
+      "size": 4936,
+      "sha256": "9ab0ba9c16dd68898fc4ef17253af1a0a7f32d6bb7338521fe2a7811db1d18d3"
+    },
+    {
+      "path": "source/docs/INVESTOR_DEMO.md",
+      "size": 7771,
+      "sha256": "39e21582930e5a7520d0c7c2af80185b287fb3795659f6faa789d13bb43c132a"
+    },
+    {
+      "path": "source/docs/PERPLEXITY_BRIEF.md",
+      "size": 3078,
+      "sha256": "09ce48cb3518408d459cfce4490e6ae0c0622a4c01680a35787df99b91a92df0"
+    },
+    {
+      "path": "source/docs/PROVENANCE.md",
+      "size": 4894,
+      "sha256": "fbe2459ccbaa5686de68cde060d77d71465810ebdbab24e9ee6204f8c1183247"
+    },
+    {
+      "path": "source/docs/SERIES_A_DILIGENCE.md",
+      "size": 4433,
+      "sha256": "b94ffbb57c5d07e83113c2fb7b2302c9ff68e5db49ff13e2a975be31d9694738"
+    },
+    {
+      "path": "source/docs/WARHACKER_UDS_PROOF_POINT.md",
+      "size": 2883,
+      "sha256": "d91c522573dd0345d5d05b110008b026e527c3de0bea3a27e0386031c4278439"
+    },
+    {
+      "path": "source/docs/ecosystem-readiness-report.json",
+      "size": 14294,
+      "sha256": "80939d818cf6b47d05fc7e99490a56ca906876f44ea3c272da11bad13031b832"
+    },
+    {
+      "path": "source/docs/ecosystem-registry.json",
+      "size": 8973,
+      "sha256": "e25b3b99b9987dcef69071e4a11e379c5c39aefcaae75045cf918b54608e5df3"
+    },
+    {
+      "path": "source/docs/huggingface.md",
+      "size": 3363,
+      "sha256": "9c56139b85a9be9111d3fc0398bc21fb4e5eb94a2bcb1eea3ec3f16bf9239099"
+    },
+    {
+      "path": "source/docs/org-repo-map.md",
+      "size": 5678,
+      "sha256": "6ca9fc651f1979db490892a316584f69227703631ce1e713eafe1782577e72b2"
+    },
+    {
+      "path": "source/docs/regulatory_to_lambda.md",
+      "size": 17427,
+      "sha256": "18b1205a03f89a6e79fdb5edadd282ad19945c070d3ffd5ff8ae471e9bb7c635"
+    }
+  ]
+}

README.md

@@ -1,5 +1,7 @@
 ---
-license: apache-2.0
+license: other
+license_name: licenseref-szl-proprietary
+license_link: https://huggingface.co/SZLHOLDINGS/a11oy-v19-substrate/blob/main/LICENSE
 language:
   - en
 tags:
@@ -15,27 +17,42 @@ tags:
   - policy
   - execution-fabric
   - provenance
+  - software-artifact
+  - deployment-manifests
+  - no-model-weights
 ecosystem-stage: operational
 ---
 
-# a11oy v19 Substrate — Governance Policy Model
+# a11oy v19 Substrate - Software and Deployment Artifact Bundle
 
 > **⚠️ This is a governance policy/spec card — not a loadable model.** It ships documentation, manifests, proofs, and an eval trace — there is no weights/config artifact to `from_pretrained`. For live governed inference, use the Space: https://huggingface.co/spaces/SZLHOLDINGS/a11oy
 
+## Artifact identity and trust boundary
+
+| Field | Verified repository fact |
+|---|---|
+| Artifact type | Software, documentation, and deployment-manifest bundle stored in a Hugging Face **model** repository for URL compatibility. |
+| Model weights | **None.** The file tree contains no weight, tokenizer, or ML inference configuration files. |
+| Loadability | Not compatible with `transformers`, `diffusers`, `from_pretrained`, or the Hugging Face Inference API. |
+| Evaluation evidence | `EVAL_TRACE_SAMPLE.jsonl` contains two records marked `demo: true`. It is a sample trace, not a benchmark or evidence of model quality, safety, or performance. |
+| Deployment integrity | `payloads/deploy/MANIFEST.json` records SHA-256 digests for six deploy files. `attestations.jsonl` names a signer but contains no cryptographic signature bytes, so this repository does not independently establish signature verification. |
+| License | `LicenseRef-SZL-Proprietary` under [`LICENSE`](./LICENSE); Hub metadata uses `license: other`. No Apache-2.0 grant is made by this repository. |
+| Full snapshot inventory | [`ARTIFACT_MANIFEST.json`](./ARTIFACT_MANIFEST.json) records byte sizes and SHA-256 digests for every file in this candidate snapshot except the manifest itself. |
+
+The Hub repository type is a distribution location only; it does not imply that this bundle is an ML model. Runtime, proof, signature, and deployment claims require verification against their separately referenced canonical systems.
+
 [![DOI](https://zenodo.org/badge/DOI/10.5281/zenodo.20434276.svg)](https://doi.org/10.5281/zenodo.20434276)
 [![Lean Kernel Green](https://img.shields.io/badge/Lean_4.13--kernel--green@c7c0ba17-22c55e?style=flat-square)](https://github.com/szl-holdings/lutar-lean/commit/c7c0ba17)
 [![Sorries](https://img.shields.io/badge/sorries-163_total_(112_baseline%2B51_Putnam)-blue?style=flat-square)](https://github.com/szl-holdings/lutar-lean/commit/c7c0ba17)
-[![SLSA L1](https://img.shields.io/badge/SLSA-L1_SBOM+DCO-blue?style=flat-square)](https://slsa.dev)
-[![DSSE](https://img.shields.io/badge/DSSE-PAE_v1-22c55e?style=flat-square)](https://github.com/secure-systems-lab/dsse)
 [![RAE-1](https://img.shields.io/badge/RAE--1-v1.0-D97757?style=flat-square)](https://github.com/szl-holdings/a11oy/pull/122)
 [![MCP](https://img.shields.io/badge/MCP-server_live-ff6b35?style=flat-square)](https://huggingface.co/spaces/SZLHOLDINGS/hatun-mcp)
-[![License](https://img.shields.io/badge/License-Apache_2.0-blue?style=flat-square)](https://www.apache.org/licenses/LICENSE-2.0)
+[![License](https://img.shields.io/badge/License-SZL_Proprietary-blue?style=flat-square)](./LICENSE)
 
 > **Doctrine v11 LOCKED.** No marketing. Every number resolves to a CI log, a Lean proof, or a Zenodo DOI.
 
-Governance policy model card for a11oy v19 — the governed execution fabric organ. Policy weights are DSSE-signed at training time and verified against the Lean kernel at [lutar-lean@c7c0ba17](https://github.com/szl-holdings/lutar-lean/commit/c7c0ba17). 9 packages, 248 unit assertions.
+Distribution card for the a11oy v19 software, documentation, and deployment bundle. It contains no policy weights and makes no training-time signature claim. Runtime tests and Lean references described below belong to separately referenced source repositories and are not reproduced by loading this Hub repository.
 
-The model encodes the 44-formula anchor gate set as hard policy constraints. No agentic action passes without clearing all 44 anchor formula gates. RAE-1 protocol ([a11oy#122](https://github.com/szl-holdings/a11oy/pull/122)) defines the authorization handshake sequence.
+The accompanying policy specification describes a 44-formula anchor gate set and references the RAE-1 protocol ([a11oy#122](https://github.com/szl-holdings/a11oy/pull/122)). Those are software/policy claims, not learned model behavior, and must be checked at the pinned source and CI references.
 
 Live receipts: [a11oy Space](https://huggingface.co/spaces/SZLHOLDINGS/a11oy). DOI: [10.5281/zenodo.20431181](https://doi.org/10.5281/zenodo.20431181).
 
@@ -48,7 +65,7 @@ Live receipts: [a11oy Space](https://huggingface.co/spaces/SZLHOLDINGS/a11oy). D
 > load the **runtime** governed kernels that enforce this policy from
 > [`szl-kernels`](https://huggingface.co/SZLHOLDINGS/szl-kernels).
 
-**1) Fetch this card's artifacts (docs, DSSE-signed deploy manifests, proofs, eval trace):**
+**1) Fetch this card's artifacts (docs, SHA-256-manifested deploy files, provenance references, and demo trace):**
 
 ```bash
 pip install huggingface_hub
@@ -66,8 +83,8 @@ meta  = hf_hub_download("SZLHOLDINGS/a11oy-v19-substrate", "a11oy-metadata.json"
 ```
 
 *Output (not executed here):* local filesystem paths to the cached snapshot / files. There is
-**no** weights/config artifact to `from_pretrained` — this card publishes documentation, signed
-deploy manifests, Lean-proof pointers, and a sample eval trace, not model weights.
+**no** weights/config artifact to `from_pretrained` - this card publishes documentation,
+checksummed deploy files, proof references, and a demo trace, not model weights or evaluation results.
 
 **2) Load the runtime kernels that enforce this policy (the loadable half of the estate):**