docs: quickstart-first card layout (kernels-community pattern)

docs(cite): add doi: tags + Cite this/BibTeX + PAPERS_INDEX cross-link

Add top-of-card runnable kernels get_kernel() quickstart (selfcheck) + honest output-shape block

W-HF: cross-link estate router + receipt hub in kernel-suite footer

docs: cross-link Governed Kernels collection + live a11oy console

fix: correct security contact to live domain (szlholdings.com; .ai does not resolve)

Add SECURITY.md (responsible disclosure policy) — DevOps hygiene

Add LICENSE file (Apache-2.0) to match declared license — DevOps hygiene

Fix empty DOI anchor in Citation; add discoverable tags + live-Spaces note (Doctrine v11)

docs: add Ouroboros Thesis concept DOI 10.5281/zenodo.19944926

fix: replace dead companion space links (szl-provctl-live etc) with ROADMAP note Signed-off-by: Stephen Lutar <stephenlutar2@gmail.com>

add szl_provctl __init__ (public API + 23-check selfcheck)

add _energy.py (per-kernel MEASURED NVML energy)

add _dag.py (provenance-DAG traversal + edge verification)

add _interop.py (spec-exact in-toto v1 + SLSA v1 builders)

add _chain.py (suite UnifiedReceiptChain, byte-identical fallback)

add build.toml (universal)

add szl_provctl metadata.json

create szl-provctl — provenance-DAG + in-toto/SLSA interop + per-kernel MEASURED energy

initial commit