docs: download-ready card — live demo links, install lines, file map (honest labels preserved)

README.md

@@ -25,6 +25,10 @@ szl-governance:
 
 ## Quickstart
 
+```bash
+pip install kernels
+```
+
 ```python
 from kernels import get_kernel
 
@@ -93,15 +97,15 @@ print(r["receipt"]["attrs"]["label"], r["receipt"]["attrs"]["joules"])
 
 | Kernel | Lane | Live hologram |
 |---|---|---|
-| [`szl-kernels`](https://huggingface.co/SZLHOLDINGS/szl-kernels) | unified suite — cross-kernel `UnifiedReceiptChain` | `szl-kernels-live` *(ROADMAP — not yet live)* |
-| [`szl-governed-norm`](https://huggingface.co/SZLHOLDINGS/szl-governed-norm) | RMSNorm/LayerNorm + receipts | `governed-norm-holo` *(ROADMAP — not yet live)* |
-| [`szl-lambda-gate`](https://huggingface.co/SZLHOLDINGS/szl-lambda-gate) | advisory Λ gate (Conjecture 1, OPEN) | `lambda-gate-holo` *(ROADMAP — not yet live)* |
-| [`governed-inference-meter`](https://huggingface.co/SZLHOLDINGS/governed-inference-meter) | MEASURED-joule energy accounting | `energy-attest-holo` *(ROADMAP — not yet live)* |
-| [`szl-govsign`](https://huggingface.co/SZLHOLDINGS/szl-govsign) | signed governance attestation (DSSE / in-toto) | `szl-govsign-live` *(ROADMAP — not yet live)* |
-| [`szl-blocked`](https://huggingface.co/SZLHOLDINGS/szl-blocked) | honest-BLOCKED first-class state + EU AI Act Annex IV | `szl-blocked-live` *(ROADMAP — not yet live)* |
-| **`szl-provctl`** | **provenance-DAG verify + in-toto/SLSA interop + per-kernel MEASURED energy** | `szl-provctl-live` *(ROADMAP — not yet live)* |
+| [`szl-kernels`](https://huggingface.co/SZLHOLDINGS/szl-kernels) | unified suite — cross-kernel `UnifiedReceiptChain` | [`szl-kernels-live`](https://szlholdings-szl-kernels-live.static.hf.space) ✅ **live** |
+| [`szl-governed-norm`](https://huggingface.co/SZLHOLDINGS/szl-governed-norm) | RMSNorm/LayerNorm + receipts | [`governed-norm-holo`](https://szlholdings-governed-norm-holo.static.hf.space) ✅ **live** |
+| [`szl-lambda-gate`](https://huggingface.co/SZLHOLDINGS/szl-lambda-gate) | advisory Λ gate (Conjecture 1, OPEN) | [`lambda-gate-holo`](https://szlholdings-lambda-gate-holo.static.hf.space) ✅ **live** |
+| [`governed-inference-meter`](https://huggingface.co/SZLHOLDINGS/governed-inference-meter) | MEASURED-joule energy accounting | [`energy-attest-holo`](https://szlholdings-energy-attest-holo.static.hf.space) ✅ **live** |
+| [`szl-govsign`](https://huggingface.co/SZLHOLDINGS/szl-govsign) | signed governance attestation (DSSE / in-toto) | [`szl-govsign-live`](https://szlholdings-szl-govsign-live.static.hf.space) ✅ **live** |
+| [`szl-blocked`](https://huggingface.co/SZLHOLDINGS/szl-blocked) | honest-BLOCKED first-class state + EU AI Act Annex IV | [`szl-blocked-live`](https://szlholdings-szl-blocked-live.static.hf.space) ✅ **live** |
+| **`szl-provctl`** | **provenance-DAG verify + in-toto/SLSA interop + per-kernel MEASURED energy** | [`szl-provctl-live`](https://szlholdings-szl-provctl-live.static.hf.space) ✅ **live** |
 
-> The `*-live` / `*-holo` hologram Spaces above are ROADMAP (not yet live). The Spaces that **are** live today: [a11oy](https://huggingface.co/spaces/SZLHOLDINGS/a11oy) (live governed inference) · [hatun-mcp](https://huggingface.co/spaces/SZLHOLDINGS/hatun-mcp).
+> All the demo Spaces above are **live** (static, in-browser). Also live: [a11oy](https://huggingface.co/spaces/SZLHOLDINGS/a11oy) (live governed inference) · [hatun-mcp](https://huggingface.co/spaces/SZLHOLDINGS/hatun-mcp).
 
 **Related — Governed Kernels collection:** [Governed Kernels — verifiable AI building blocks](https://huggingface.co/collections/SZLHOLDINGS/governed-kernels-verifiable-ai-building-blocks-6a41d3936cfce4fba83ce378) groups the whole family in one page. **Live console:** [a11oy](https://szlholdings-a11oy.hf.space) · [a-11-oy.com](https://a-11-oy.com) · [llm-router](https://szlholdings-llm-router-live.hf.space) · [receipt verifier](https://szlholdings-governed-receipt-verifier.static.hf.space) · [receipt spec (hub)](https://github.com/szl-holdings/governed-receipt-spec).
 
@@ -144,3 +148,15 @@ Honesty (Doctrine v11): Λ unconditional uniqueness is **Conjecture 1** (machine
 ```
 
 *Signed-off-by: Stephen Lutar <stephenlutar2@gmail.com>*
+
+## Files in this repo
+
+| Path | What it is |
+|---|---|
+| `build/torch-universal/szl_provctl/__init__.py` | public API — statements, DAG verify, `selfcheck()` |
+| `build/torch-universal/szl_provctl/_interop.py` | in-toto Statement v1 + SLSA v1 provenance builders |
+| `build/torch-universal/szl_provctl/_dag.py` | provenance-DAG build + re-verify + tamper detection |
+| `build/torch-universal/szl_provctl/_energy.py` | per-kernel MEASURED energy accounting |
+| `build/torch-universal/szl_provctl/_chain.py` | receipt chain (SHA3-256) |
+| `build.toml` · `metadata.json` | Kernel Hub build/metadata manifests |
+| `LICENSE` · `SECURITY.md` | Apache-2.0 · security policy |