betterwithage commited on
Commit
348fcbc
·
verified ·
1 Parent(s): 2dba154

Org card: 2-surface story (Command Platform + Drones & Vessels), plain language, honest claims. Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

Browse files
Files changed (1) hide show
  1. README.md +18 -20
README.md CHANGED
@@ -1,5 +1,5 @@
1
  ---
2
- title: SZL Holdings — Governed-AI Substrate
3
  emoji: 🛡️
4
  colorFrom: gray
5
  colorTo: yellow
@@ -9,37 +9,35 @@ pinned: true
9
 
10
  # SZL Holdings
11
 
12
- **Governed-AI decision infrastructure.** Five flagship "organs" that turn AI decisions into cryptographically signed, replayable, tamper-evident receipts — accountability that no observability or AI-security leader currently ships.
13
 
14
- ## The five organs (live)
15
 
16
- | Organ | Role | Live application |
17
  |---|---|---|
18
- | **a11oy** | Orchestrating brain · receipt substrate · formula home | [Open](https://szlholdings-a11oy.hf.space/) |
19
- | **sentra** | Policy immune system deny-by-default, immune gates | [Open](https://szlholdings-sentra.hf.space/console) |
20
- | **amaru** | Reasoner — cites sources, refuses on insufficient evidence | [Open](https://szlholdings-amaru.hf.space/operational-core) |
21
- | **rosie** | Operator console (Jarvis) — answers · recommends · acts | [Open](https://szlholdings-rosie.hf.space/) |
22
- | **killinchu** | Counter-UAS autonomy-governance — signed engagement receipts | [Open](https://szlholdings-killinchu.hf.space/elite) |
23
 
24
- Every organ links to the others via a cross-flag switcher one mesh, one organism.
25
 
26
  ## Verify it yourself
27
- Every killinchu decision is signed with a real ECDSA-P256 cosign key. Verify a receipt offline, trusting nothing:
28
  ```
29
  curl -s https://szlholdings-killinchu.hf.space/cosign.pub -o cosign.pub
30
  curl -s https://szlholdings-killinchu.hf.space/api/killinchu/v1/receipt/export
31
- # verify the DSSE signature -> "Verified OK"; tamper one byte -> "Verification failure"
32
  ```
33
 
34
- ## Honest invariants (locked)
35
- - Λ (the trust aggregator) = **Conjecture 1**, never a theorem.
36
- - Proved formulas = **5** {F1, F11, F12, F18, F19} (Lean, sorry-free).
37
- - **SLSA Build L2** on all 5 organ images (cosign + slsa.dev/provenance/v0.2 attestation). No L3 / FedRAMP / Iron Bank / CMMC claimed.
38
- - Receipts are real DSSE when a key is present, honest UNSIGNED otherwise — never fabricated.
 
39
 
40
- ## Deploy the whole mesh (one signed bundle)
41
  ```
42
- uds deploy oci://ghcr.io/szl-holdings/szl-uds-bundle:uds-v0.2.1 --confirm
43
  ```
44
 
45
- Built by **Stephen P. Lutar Jr.** · Doctrine v11 LOCKED · Counsel-governed.
 
1
  ---
2
+ title: SZL Holdings — Governed-AI Command Platform
3
  emoji: 🛡️
4
  colorFrom: gray
5
  colorTo: yellow
 
9
 
10
  # SZL Holdings
11
 
12
+ **Governed-AI decision infrastructure.** Every AI decision becomes a cryptographically signed, replayable, tamper-evident receipt — accountability that no observability or AI-security leader currently ships.
13
 
14
+ ## Two surfaces, one platform
15
 
16
+ | Surface | What it is | Open |
17
  |---|---|---|
18
+ | **a11oy — Command Platform** | One pane of glass: ask & act, safety gates, trust scoring, live decisions, readiness, compliance, forecasting, signed receipts, proof status, threat library, model routing. | [Open](https://szlholdings-a11oy.hf.space/) |
19
+ | **Drones & Vessels** | Autonomous-systems field tool: live track board, sensor fusion, maritime picture (sanctions + dark-vessel detection), engagement rules, and verify-it-yourself signed receipts — for air and sea. | [Open](https://szlholdings-killinchu.hf.space/elite) |
 
 
 
20
 
21
+ The command platform runs every Warhacker challenge problem end to end, and governs the field tool with the same trust scoring, consensus, and signed receipts.
22
 
23
  ## Verify it yourself
24
+ Decisions on the Drones & Vessels surface are signed with a real ECDSA-P256 key. Verify a receipt offline, trusting nothing:
25
  ```
26
  curl -s https://szlholdings-killinchu.hf.space/cosign.pub -o cosign.pub
27
  curl -s https://szlholdings-killinchu.hf.space/api/killinchu/v1/receipt/export
28
+ # verify the signature offline -> "Verified OK"; tamper one byte -> "Verification failure"
29
  ```
30
 
31
+ ## What we claim — and what we don't
32
+ - The trust score is a **research conjecture**, not a proven-unique function. We say so on the platform.
33
+ - **5 formulas** are formally proven in Lean (machine-checked, no gaps); the rest are open or experimental.
34
+ - **SLSA Build L2** on all service images (cosign + slsa.dev/provenance/v0.2 attestation). **NOT** L3 / FedRAMP / Iron Bank / CMMC.
35
+ - Receipts are genuinely signed where a key is present, honestly marked unsigned otherwise — never fabricated.
36
+ - Maritime AIS uses a clearly-labeled sample/replay dataset, not a live feed.
37
 
38
+ ## Deploy
39
  ```
40
+ uds deploy oci://ghcr.io/szl-holdings/szl-mesh:0.4.0 --confirm
41
  ```
42
 
43
+ Built by **Stephen P. Lutar Jr.** · Honest by design · Counsel-governed.