Update README.md — honest org card / scrub dead-organ refs

Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

README.md

@@ -9,35 +9,70 @@ pinned: true
 
 # SZL Holdings
 
-**Governed-AI decision infrastructure.** Every AI decision becomes a cryptographically signed, replayable, tamper-evident receipt — accountability that no observability or AI-security leader currently ships.
+### Governed AI you can *prove*.
 
-## Two surfaces, one platform
+Every AI decision becomes a **cryptographically signed, replayable, tamper-evident receipt** — accountability that no observability or AI-security incumbent ships today. Two live products run on one substrate: a command platform for the enterprise, and a drones-&-vessels field tool for the edge.
 
-| Surface | What it is | Open |
+---
+
+## Two products, one substrate
+
+| Product | What it does | Open it |
 |---|---|---|
-| **a11oy — Command Platform** | One pane of glass: ask & act, safety gates, trust scoring, live decisions, readiness, compliance, forecasting, signed receipts, proof status, threat library, model routing. | [Open](https://szlholdings-a11oy.hf.space/) |
-| **Drones & Vessels** | Autonomous-systems field tool: live track board, sensor fusion, maritime picture (sanctions + dark-vessel detection), engagement rules, and verify-it-yourself signed receipts — for air and sea. | [Open](https://szlholdings-killinchu.hf.space/elite) |
+| **a11oy — Command Platform** | One pane of glass for governed AI: ask & act, deny-by-default safety gates, trust scoring with confidence intervals, live decision feed, readiness & compliance, forecasting, signed receipts, formal-proof status, threat library (live CVE/KEV/MITRE), and model routing. | [Open a11oy →](https://szlholdings-a11oy.hf.space/) |
+| **killinchu — Drones & Vessels** | Autonomous-systems field tool for air and sea: live track board, multi-sensor fusion, maritime picture (sanctions screening + dark-vessel detection), engagement rules, swarm/autonomy, and **verify-it-yourself** signed engagement receipts. | [Open killinchu →](https://szlholdings-killinchu.hf.space/elite) |
 
-The command platform runs every Warhacker challenge problem end to end, and governs the field tool with the same trust scoring, consensus, and signed receipts.
+a11oy is the orchestrating brain — its reasoning, policy and operator capabilities are built in, and it governs the field tool with the same trust scoring, consensus, and signed receipts. The platform runs every Warhacker challenge problem end to end.
 
-## Verify it yourself
-Decisions on the Drones & Vessels surface are signed with a real ECDSA-P256 key. Verify a receipt offline, trusting nothing:
-```
+---
+
+## The thesis
+
+Modern AI gives you answers; it does not give you **accountability**. SZL turns the governance layer into a substrate: a *Proof Chain* where each decision is policy-checked, evidence-bound, and replayable, sealed in a DSSE receipt over a SHA-256 hash chain. Trust is scored with a single aggregator (Λ) over provenance, containment, coherence, and convergence — and we are explicit about exactly how far that math is proven.
+
+Read the full thesis (v23, "The Unified Substrate") → [szl-papers/thesis/v23](https://github.com/szl-holdings/szl-papers/tree/main/thesis/v23) · DOI lineage on [Zenodo](https://doi.org/10.5281/zenodo.19944926).
+
+---
+
+## Verify it yourself — trust nothing
+
+Engagement decisions on the **killinchu** surface are signed with a real ECDSA-P256 cosign key. Verify a receipt **offline**, trusting neither us nor the server:
+
+```bash
 curl -s https://szlholdings-killinchu.hf.space/cosign.pub -o cosign.pub
-curl -s https://szlholdings-killinchu.hf.space/api/killinchu/v1/receipt/export
-# verify the signature offline -> "Verified OK"; tamper one byte -> "Verification failure"
+curl -s https://szlholdings-killinchu.hf.space/api/killinchu/v1/receipt/export > receipt.json
+# verify the DSSE signature offline  ->  "Verified OK"
+# tamper a single byte and re-verify ->  "Verification failure"
 ```
 
+That is the whole product in one command: a third party can confirm a decision happened, exactly as recorded, with zero trust in SZL.
+
+---
+
 ## What we claim — and what we don't
-- The trust score is a **research conjecture**, not a proven-unique function. We say so on the platform.
-- **5 formulas** are formally proven in Lean (machine-checked, no gaps); the rest are open or experimental.
-- **SLSA Build L2** on all service images (cosign + slsa.dev/provenance/v0.2 attestation). **NOT** L3 / FedRAMP / Iron Bank / CMMC.
-- Receipts are genuinely signed where a key is present, honestly marked unsigned otherwise — never fabricated.
-- Maritime AIS uses a clearly-labeled sample/replay dataset, not a live feed.
 
-## Deploy
-```
+We surface only what is machine-checked as fact. Everything else is labeled honestly in the apps.
+
+| We claim | We do **not** claim |
+|---|---|
+| **5 formulas formally proven in Lean** (machine-checked, sorry-free): F1, F11, F12, F18, F19. | The remaining formulas as "proven." Newer waves (3/5/6/7 + the agentic loop) are **experimental / CI-green**, labeled as such — not part of the locked proven set. |
+| **Λ uniqueness is Conjecture 1** — unique *only conditionally* (under block-consistency, CI-green). | Λ as an unconditional theorem. Unconditional uniqueness is machine-checked **false**, and we say so. |
+| **SLSA Build L2** on all service images (cosign + `slsa.dev/provenance/v0.2` attestation). | L3, FedRAMP, Iron Bank, or CMMC. |
+| Receipts are genuinely signed where a signing key is present, **honestly marked unsigned** otherwise. | Fabricated signatures or fabricated metrics — ever. |
+| Maritime AIS uses a clearly-labeled **sample/replay** dataset. | A live production AIS feed. |
+
+Locked doctrine: **v11** · kernel `c7c0ba17` · 749 declarations / 14 unique axioms / 163 tracked sorries · `lake build` clean.
+
+---
+
+## Deploy the whole mesh — one signed bundle
+
+```bash
 uds deploy oci://ghcr.io/szl-holdings/szl-mesh:0.4.0 --confirm
 ```
 
-Built by **Stephen P. Lutar Jr.** · Honest by design · Counsel-governed.
+Cosign-signed bundle; each service image carries its own SLSA L2 provenance.
+
+---
+
+Built by **Stephen P. Lutar Jr.** · Honest by design · Counsel-governed · [github.com/szl-holdings](https://github.com/szl-holdings)