diff --git a/.gitattributes b/.gitattributes
index 7f823e21d25b4ad569e5fd8e27ac932829856dae..6a8e7f5b2897dcda8c2bd1009aa0fdc69c1e0406 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,45 +1,4 @@
-*.7z filter=lfs diff=lfs merge=lfs -text
-*.arrow filter=lfs diff=lfs merge=lfs -text
-*.bin filter=lfs diff=lfs merge=lfs -text
-*.bz2 filter=lfs diff=lfs merge=lfs -text
-*.ckpt filter=lfs diff=lfs merge=lfs -text
-*.ftz filter=lfs diff=lfs merge=lfs -text
-*.gz filter=lfs diff=lfs merge=lfs -text
-*.h5 filter=lfs diff=lfs merge=lfs -text
-*.joblib filter=lfs diff=lfs merge=lfs -text
-*.lfs.* filter=lfs diff=lfs merge=lfs -text
-*.mlmodel filter=lfs diff=lfs merge=lfs -text
-*.model filter=lfs diff=lfs merge=lfs -text
-*.msgpack filter=lfs diff=lfs merge=lfs -text
-*.npy filter=lfs diff=lfs merge=lfs -text
-*.npz filter=lfs diff=lfs merge=lfs -text
-*.onnx filter=lfs diff=lfs merge=lfs -text
-*.ot filter=lfs diff=lfs merge=lfs -text
-*.parquet filter=lfs diff=lfs merge=lfs -text
-*.pb filter=lfs diff=lfs merge=lfs -text
-*.pickle filter=lfs diff=lfs merge=lfs -text
-*.pkl filter=lfs diff=lfs merge=lfs -text
-*.pt filter=lfs diff=lfs merge=lfs -text
-*.pth filter=lfs diff=lfs merge=lfs -text
-*.rar filter=lfs diff=lfs merge=lfs -text
-*.safetensors filter=lfs diff=lfs merge=lfs -text
-saved_model/**/* filter=lfs diff=lfs merge=lfs -text
-*.tar.* filter=lfs diff=lfs merge=lfs -text
-*.tar filter=lfs diff=lfs merge=lfs -text
-*.tflite filter=lfs diff=lfs merge=lfs -text
-*.tgz filter=lfs diff=lfs merge=lfs -text
-*.wasm filter=lfs diff=lfs merge=lfs -text
-*.xz filter=lfs diff=lfs merge=lfs -text
-*.zip filter=lfs diff=lfs merge=lfs -text
-*.zst filter=lfs diff=lfs merge=lfs -text
-*tfevents* filter=lfs diff=lfs merge=lfs -text
-hero.png filter=lfs diff=lfs merge=lfs -text
-assets/08_body_graph.png filter=lfs diff=lfs merge=lfs -text
-assets/a11oy_avatar.png filter=lfs diff=lfs merge=lfs -text
-assets/amaru_avatar.png filter=lfs diff=lfs merge=lfs -text
-assets/rosie_avatar.png filter=lfs diff=lfs merge=lfs -text
-assets/sentra_avatar.png filter=lfs diff=lfs merge=lfs -text
-assets/vessels_avatar.png filter=lfs diff=lfs merge=lfs -text
-assets/szl_banner.png filter=lfs diff=lfs merge=lfs -text
-assets/group_shot_v1.png filter=lfs diff=lfs merge=lfs -text
-roster.png filter=lfs diff=lfs merge=lfs -text
+*.svg text eol=lf
+*.html text eol=lf
+*.json text eol=lf
+*.md text eol=lf
diff --git a/HONEST_DISCLOSURE.md b/HONEST_DISCLOSURE.md
index c52212f9eda01cbb633fdd9e6a911f2036dd4b18..5db572debaca6460950f13cd8c57cd04a64cbd86 100644
--- a/HONEST_DISCLOSURE.md
+++ b/HONEST_DISCLOSURE.md
@@ -1,25 +1,25 @@
-# What is honest right now — Doctrine v11
+# Honest disclosure
-This is the standing honesty disclosure for SZL Holdings. We surface only machine-checked facts as fact; everything else is labeled experimental, conditional, or conjectured.
+This static Space is the public Hugging Face front door for SZL Holdings. It
+organizes links and describes publication contracts. It is not a model,
+benchmark, customer deployment, certification, authorization to operate, or
+independent third-party assessment.
-**lutar-lean @ tag `lutar-v18.0.0` / `c7c0ba17`:**
+## What the running page proves
-- **749 declarations · 14 unique axioms · 163 tracked sorries** (112 baseline + 51 Putnam). `lake build` clean.
-- **Locked proven set = 5 formulas** (Lean, sorry-free): **F1, F11, F12, F18, F19**. These are the only formulas we surface as "proven."
-- **Λ (the trust aggregator) is Conjecture 1** unconditionally. **Unconditional** uniqueness is machine-checked **false** (Round13 `maxAgg_ne_Lambda`). It is proven **CONDITIONAL** on slice-multiplicativity (separability) under {A1,A2,A3,A5}, axiom-free — **CUT-2** (`lambda_unique_of_separable`, PR #202). Λ is never stated as an unconditional theorem. **Byzantine BFT safety is Conjecture 2**, not a theorem.
-- **Experimental waves** (proof waves 5–14 + the agentic loop) live in experimental Lean scopes on `main` @ `b910c276`, are **CI-green** with every `#print axioms ⊆ {propext, Classical.choice, Quot.sound}`, but **excluded** from the locked v11 baseline. Through Wave 14: Wave 11 CF-1/2/3/5, Wave 12 CUT-2 + CF-13 + CF-17, Wave 13 replay-root + non-Byzantine vote + HM-bottleneck, Wave 14 CF-18/19/20/21. They are labeled experimental, never folded into the locked five.
+- the static route was reachable at the time it was requested;
+- the served `deployment.json` identifies a GitHub source revision;
+- the declared source files can be compared with that revision and the Hub
+ commit recorded by the deployment workflow.
-**Supply chain:**
-- **SLSA L1 build provenance (honest)** on all service images — cosign-signed, verifiable via `cosign verify`. **SLSA L2 is on the roadmap; we do NOT claim L2-verified today.** **No** L2-verified / L3 / FedRAMP / Iron Bank / CMMC is claimed.
-- The `szl-mesh` UDS bundle is **cosign-signed** (keyless OIDC). The GitHub attestation for the bundle itself was not minted (token scope); per-image cosign signatures are intact and verifiable.
+## What it does not prove
-**Receipts:**
-- Decision receipts are **DSSE envelopes over a SHA-256 hash chain**. Where a signing key is present (the killinchu engagement surface carries a real ECDSA-P256 cosign key), receipts are **genuinely signed** and verifiable offline. Where no key is present, receipts are **honestly marked unsigned** — never fabricated.
+- that every linked model loads or meets its intended quality threshold;
+- that every dataset row has passed provenance and license admission;
+- that every Space is healthy end to end;
+- that a signature establishes accuracy, safety, compliance, or fitness;
+- that Hub download events are unique users, customers, or deployments.
-**Data honesty:**
-- Maritime AIS on the field surface uses a clearly-labeled **sample/replay** dataset, not a live production feed.
-- Live public feeds (CVE/NVD, CISA KEV, MITRE ATT&CK, USGS) are honestly attributed where shown.
-
-**Compliance posture:** Aligned with **EU AI Act Article 12** (record-keeping) + **NIST AI RMF (MANAGE)**. These are alignment statements, not certifications.
-
-*Built by Stephen P. Lutar Jr. · stephenlutar2@gmail.com · Doctrine v11 LOCKED.*
+Each artifact owns its evaluation, provenance, security, and runtime evidence.
+Unverified evidence must remain `UNKNOWN`, `PARTIAL`, or `UNAVAILABLE` rather
+than being inferred from this organization card.
diff --git a/README.md b/README.md
index e3a348ccf0c74a1a6624160c54f5908275784edb..987d688a5b3b0c4b5dcf4410a3d7d8c5e36650d9 100644
--- a/README.md
+++ b/README.md
@@ -1,117 +1,135 @@
---
-title: SZL Holdings — Governed-AI Command Platform
+title: SZL Holdings — Governed Decision Infrastructure
emoji: 🛡️
colorFrom: gray
colorTo: yellow
sdk: static
-short_description: Governed AI you can prove — signed, verifiable receipts
+short_description: Governed AI that can explain, constrain, and verify action
pinned: true
+license: apache-2.0
---
-
-
+
+
-
-
-
-
+
-
-
+# Governed models, data, and demonstrations
-# SZL Holdings
+SZL Holdings publishes the model and data layer for systems that must reason,
+act within authority, and return evidence another party can verify.
-### Governed AI you can prove.
+[**Open a11oy**](https://a-11-oy.com) ·
+[**Inspect evidence**](https://a11oy.net) ·
+[**View source**](https://github.com/szl-holdings) ·
+[**Read documentation**](https://holdings.a-11-oy.com/docs-site/)
-Models ship with signed training & eval receipts. Surfaces label every value — LIVE, MEASURED, REPORTED, or DEMO. Trust is measured — not asserted.
+
+| Need | Canonical artifact | Boundary |
+| --- | --- | --- |
+| Governed receipt generation | [SZL-Forge-1.5B-ReceiptAgent](https://huggingface.co/SZLHOLDINGS/SZL-Forge-1.5B-ReceiptAgent) | A model artifact; autonomy requires a validating controller |
+| Grounded estate navigation | [SZL-Khipu-1.5B](https://huggingface.co/SZLHOLDINGS/SZL-Khipu-1.5B) | Use cited retrieval and verify sources independently |
+| Local quantized evaluation | [SZL-Khipu-1.5B-GGUF](https://huggingface.co/SZLHOLDINGS/SZL-Khipu-1.5B-GGUF) | Quantization changes runtime characteristics; evaluate the exact file |
+| Receipt and evidence records | [szl-lake](https://huggingface.co/datasets/SZLHOLDINGS/szl-lake) | Records are admitted by their own provenance and license state |
+| Public OSINT corpus | [killinchu-osint-corpus](https://huggingface.co/datasets/SZLHOLDINGS/killinchu-osint-corpus) | Public-source research corpus; not an operational intelligence feed |
+| Product demonstration | [a11oy Space](https://huggingface.co/spaces/SZLHOLDINGS/a11oy) | A demonstration surface; verify live state and exact source separately |
-**[🛡️ Enter a11oy →](https://a-11-oy.com)** · **[Browse 70+ live surfaces →](https://a-11-oy.com/holographic)** · **[Read Conjecture 1 →](https://doi.org/10.5281/zenodo.19944926)**
+Download counters are Hub-reported events, not unique users, deployments,
+customers, model quality, or revenue.
-
+## Artifact contract
----
+Every promoted artifact must identify what it is and what evidence exists.
-## The one-of-one hook: models that ship with receipts
+### Trained weights
-Anyone can publish weights. We publish **proof**. Every SZL model carries its training and evaluation receipts in-repo — `training_receipt.signed.json` and `eval_receipt.signed.json`, **Ed25519 signatures over canonical JSON**, verifiable offline against the repo-declared public key. (The a11oy estate's daily operational receipts are a separate rail: DSSE envelopes, sigstore-keyless.) You can verify what a model was trained on and how it scored *before* you download it. That's the honesty doctrine, made checkable.
+- exact base model and license lineage;
+- weight or adapter hashes;
+- clean load and inference receipt;
+- held-out and adversarial evaluation;
+- restart and reproduction evidence;
+- latency, memory, and energy context;
+- an explicit autonomy boundary.
-- **LIVE** surfaces are live. **MEASURED** numbers are measured. **REPORTED** is reported. **DEMO** is a demo. We label which is which.
-- The lattice is **exactly 8 locked-proven formulas** — {F1, F4, F7, F11, F12, F18, F19, F22}. Not 9. Not "soon."
-- **Λ is Conjecture 1** — an open conjecture, never a theorem, never marked green.
-- Trust tops out at **0.97**, never 100%. A ceiling is honest; certainty is not.
+### Datasets
----
+- source and license provenance at row or source-family scope;
+- schema, splits, sizes, and validation results;
+- privacy, consent, PII, and update policy;
+- known omissions, quarantine counts, and intended use.
-## Start here
+### Kernels and tools
-### 🤖 Models — every one ships with signed receipts
+- canonical source repository and immutable revision;
+- supported hardware and software matrix;
+- executable tests and benchmark protocol;
+- no implied training receipt or model capability.
-**Start with [SZL-Khipu-1.5B](https://huggingface.co/SZLHOLDINGS/SZL-Khipu-1.5B)** — a compact 1.5B model for governed agent navigation, and the fastest way to understand the whole estate: weights, signed receipts, public eval harness, and a local one-liner (`ollama run hf.co/SZLHOLDINGS/SZL-Khipu-1.5B-GGUF:Q4_K_M`) in one repo.
+### Spaces
-| Model | Base · Task | Traction (MEASURED all-time, 2026-07-21) | Notes |
-|---|---|---|---|
-| [**SZL-Khipu-1.5B**](https://huggingface.co/SZLHOLDINGS/SZL-Khipu-1.5B) | Qwen2.5 1.5B · governed navigation | **1,391** downloads (day-1: 1.03k) | **Start here.** Signed receipts + public harness; [GGUF →](https://huggingface.co/SZLHOLDINGS/SZL-Khipu-1.5B-GGUF) |
-| [**SZL-Forge-1.5B-ReceiptAgent**](https://huggingface.co/SZLHOLDINGS/SZL-Forge-1.5B-ReceiptAgent) | Qwen2 1.5B · receipt agent | **2,026** downloads | Receipt-native sibling forge; signed receipts in-repo |
-| [**SZL-Khipu-1.5B-GGUF**](https://huggingface.co/SZLHOLDINGS/SZL-Khipu-1.5B-GGUF) | quantized Khipu | **656** downloads | Q4_K_M · Q5_K_M · Q8_0 · F16; Ollama-ready; receipts travel |
+- canonical source and deployment revision;
+- pinned dependencies and runtime behavior;
+- privacy and retention behavior;
+- visible limitations and reproducible local path.
-Counters are HF-reported all-time downloads, snapshotted daily → [szl-telemetry TRENDS](https://github.com/szl-holdings/szl-telemetry/blob/telemetry-data/TRENDS.md) (deltas DERIVED).
+A model card is not operational proof. A Space in `RUNNING` state proves
+transport availability only. A signed receipt establishes integrity and origin
+within its stated scope; it does not automatically establish correctness,
+safety, or authorization to operate.
-### 📊 Datasets — 30 total, receipts on the record
+## One governed loop
-| Dataset | Downloads | What it is |
-|---|---|---|
-| [**killinchu-osint-corpus**](https://huggingface.co/datasets/SZLHOLDINGS/killinchu-osint-corpus) | **24,737** `MEASURED all-time 2026-07-21` | OSINT corpus behind the killinchu demo |
-| [**a11oy-verifiable-corpus**](https://huggingface.co/datasets/SZLHOLDINGS/a11oy-verifiable-corpus) | **2,282** `MEASURED all-time 2026-07-21` | Verifiable-claims corpus for governed eval |
-| [**szl-lake**](https://huggingface.co/datasets/SZLHOLDINGS/szl-lake) | **1,459** `MEASURED all-time 2026-07-21` | The Khipu receipt lake — published signed-receipt chain |
+```text
+signal → reason → policy → bounded action → receipt → independent verification
+ ↑ │
+ └──────────── verified feedback ───────┘
+```
-### 🌐 Live surfaces
+The model proposes. The controller validates authority and evidence. The
+runtime executes only within a declared bound. The receipt lets a separate
+party inspect what happened.
-| Surface | Status | Link |
-|---|---|---|
-| **a11oy console** — the flagship | `LIVE` | [a-11-oy.com](https://a-11-oy.com) |
-| **Holographic** — 70+ live surfaces | `LIVE` | [/holographic](https://a-11-oy.com/holographic) |
-| **killinchu** — counter-UAS & maritime C2 demo | `DEMO` | [open →](https://szlholdings-killinchu.hf.space/) |
-| **Estate hub** — live index of every Space | `LIVE` | [open →](https://szlholdings-szl-estate-live.static.hf.space) |
+## Evidence language
----
+Claims use **PROVED**, **MEASURED**, **REPORTED**, **MODELED**,
+**CONJECTURE**, or **ROADMAP**. Runtime status uses **OPERATIONAL**,
+**PARTIAL**, **DEGRADED**, **UNAVAILABLE**, or **HISTORICAL**.
-## Collections & highlights
+Lambda uniqueness remains **Conjecture 1**, not a theorem. No artifact is
+promoted solely because it has a card, a counter, a live route, or a filename
+that sounds like a model.
-
+## Source and support
-
+This company front door is source-controlled at
+[`szl-holdings/.github`](https://github.com/szl-holdings/.github/tree/main/huggingface/org-card)
+and deployed with an exact source-revision manifest. Inspect
+[`deployment.json`](https://szlholdings-readme.static.hf.space/deployment.json)
+on the running static Space for the served source binding.
-
-
-- **🤖 Receipt-native models** — SZL-Forge, SZL-Khipu. Weights + signed receipts, together.
-- **📊 The lake (30 datasets)** — OSINT, verifiable-claims, and curated corpora.
-- **🌐 The a11oy surfaces** — the flagship console plus 70+ holographic surfaces.
-- **📐 The lattice** — 8 locked-proven formulas and the Λ conjecture, DOI-anchored.
-
-*See the pinned models, datasets, and Spaces on this org page to jump straight in.*
+- [Security policy](https://github.com/szl-holdings/.github/security/policy)
+- [Trust posture](https://github.com/szl-holdings/.github/blob/main/TRUST.md)
+- [Support](https://github.com/szl-holdings/.github/blob/main/SUPPORT.md)
+- [Honest disclosure](./HONEST_DISCLOSURE.md)
---
Surface: ' + esc(CFG.surface) + '' +
- (CFG.a11oyBase ? ' \u2022 a11oy wired' : ' \u2022 a11oy not configured') + '';
- threadEl.appendChild(em);
- return;
- }
- thread.forEach(function (m) { threadEl.appendChild(renderMsg(m)); });
- scrollThread();
- }
- function renderMsg(m) {
- var cls = m.role === 'user' ? 'rz-msg rz-msg-user' : 'rz-msg rz-msg-rosie';
- var node = el('div', { class: cls });
- node.innerHTML = esc(m.text).replace(/\n/g, ' ');
- if (m.meta) node.appendChild(el('div', { class: 'rz-msg-meta', text: m.meta }));
- if (m.dsse) {
- var dsseNode = el('div', { class: 'rz-msg-meta' });
- dsseNode.innerHTML = 'DSSE envelope: ' + esc(m.dsse);
- node.appendChild(dsseNode);
- }
- return node;
- }
- function pushMsg(role, text, meta, dsse) {
- var m = { role: role, text: text, meta: meta || null, ts: Date.now(), dsse: dsse || null };
- thread.push(m); persistThread();
- if (!thread.length) return;
- if (threadEl.querySelector('.rz-empty')) threadEl.innerHTML = '';
- threadEl.appendChild(renderMsg(m));
- scrollThread();
- return m;
- }
- function showTyping() {
- var t = el('div', { class: 'rz-msg rz-msg-rosie rz-typing-wrap' }, [
- el('div', { class: 'rz-typing' }, [el('span'), el('span'), el('span')]),
- ]);
- threadEl.appendChild(t); scrollThread();
- return t;
- }
-
- // ---- Backend status (honest) ----
- function checkStatus() {
- if (!CFG.a11oyBase) { setStatus('unknown', 'not configured'); return; }
- fetchJson(CFG.a11oyBase + '/v1/health', { method: 'GET' }, 4000)
- .then(function () { setStatus('ok', 'substrate online'); })
- .catch(function () { setStatus('down', 'substrate unreachable'); });
- }
- function setStatus(s, label) {
- state.status = s;
- statusEl.setAttribute('data-state', s);
- statusLabel.textContent = label;
- }
-
- // ---- Networking ----
- function fetchJson(url, opts, timeoutMs) {
- opts = opts || {};
- var ctrl = typeof AbortController !== 'undefined' ? new AbortController() : null;
- if (ctrl) opts.signal = ctrl.signal;
- opts.headers = Object.assign({ 'Content-Type': 'application/json' }, opts.headers || {});
- opts.credentials = 'include';
- var timer = ctrl ? setTimeout(function () { ctrl.abort(); }, timeoutMs || 12000) : null;
- return fetch(url, opts).then(function (r) {
- if (timer) clearTimeout(timer);
- if (!r.ok) { var e = new Error('HTTP ' + r.status); e.status = r.status; throw e; }
- var ct = r.headers.get('content-type') || '';
- return ct.indexOf('application/json') >= 0 ? r.json() : r.text();
- }).catch(function (e) { if (timer) clearTimeout(timer); throw e; });
- }
-
- // ---- Quick Actions ----
- function disableQA(disabled) {
- [qaReceipt, qaVerify, qaPolicy, qaReason].forEach(function(b) { b.disabled = disabled; });
- }
-
- function quickAction(kind) {
- disableQA(true);
- var typing = showTyping();
- var done = function() { typing.remove(); disableQA(false); };
-
- if (kind === 'receipt') {
- pushMsg('user', '\uD83D\uDCDC Show last receipts');
- if (!CFG.a11oyBase) {
- done();
- pushMsg('rosie', "a11oy is not configured on this surface. I can't fetch the ledger without it.");
- return;
- }
- fetchJson(CFG.a11oyBase + '/v1/ledger?limit=10', { method: 'GET' }, 14000)
- .then(function(data) {
- done();
- var items = data.receipts || data.items || data.results || (Array.isArray(data) ? data : null);
- if (!items || !items.length) {
- pushMsg('rosie', 'No receipts in the ledger yet. The chain is empty.'); return;
- }
- var top = items[0];
- var hash = top.hash || top.receipt_id || top.id || top.digest;
- var root_hash = data.root_hash || data.dag_root || null;
- var head_seq = data.head_seq || data.total || null;
- var msg = 'Khipu Merkle DAG: ' + items.length + ' receipt(s) returned.';
- if (head_seq != null) msg += '\nHead seq: ' + head_seq;
- if (root_hash) msg += '\nRoot hash: ' + root_hash;
- msg += '\n\nMost recent receipt:';
- if (top.action) msg += '\n action: ' + top.action;
- if (top.timestamp_utc || top.ts || top.timestamp) msg += '\n time: ' + (top.timestamp_utc || top.ts || top.timestamp);
- pushMsg('rosie', msg, hash ? 'receipt ' + hash : null);
- setStatus('ok', 'ledger \u2713');
- })
- .catch(function(err) { done(); handleNetErr(err); });
-
- } else if (kind === 'verify') {
- pushMsg('user', '\uD83D\uDD10 Verify this page\u2019s claims');
- if (!CFG.a11oyBase) {
- done();
- pushMsg('rosie', "a11oy is not configured on this surface. I can't verify without it.");
- return;
- }
- fetchJson(CFG.a11oyBase + '/v1/verify', {
- method: 'POST',
- body: JSON.stringify({ surface: CFG.surface, ledger: [] })
- }, 14000)
- .then(function(data) {
- done();
- var ok = data.verified === true || data.valid === true || data.ok === true;
- var dsseSnippet = null;
- if (data.envelope || data.dsse) {
- var env = data.envelope || data.dsse;
- dsseSnippet = 'DSSE payload: ' + (env.payload || '').slice(0, 32) + '...' +
- ' | keyid: ' + ((env.signatures || [{}])[0].keyid || '?') +
- ' | NOTE: PLACEHOLDER \u2014 signing not yet wired into CI';
- }
- pushMsg('rosie',
- ok ? 'Chain verified \u2014 the receipts I checked are intact.'
- : "Verification did not pass. I'm flagging this so it can be looked at.",
- data.hash || data.head ? 'head ' + (data.hash || data.head) : null,
- dsseSnippet);
- setStatus(ok ? 'ok' : 'down', ok ? 'chain valid' : 'chain invalid');
- })
- .catch(function(err) { done(); handleNetErr(err); });
-
- } else if (kind === 'policy') {
- var sampleAction = 'deploy-to-production on surface:' + CFG.surface;
- pushMsg('user', '\u2696\uFE0F Evaluate policy: ' + sampleAction);
- if (!CFG.a11oyBase) {
- done();
- pushMsg('rosie', "a11oy is not configured on this surface. I can't evaluate policy without it.");
- return;
- }
- fetchJson(CFG.a11oyBase + '/v1/policy/evaluate', {
- method: 'POST',
- body: JSON.stringify({
- actionId: 'landing-demo',
- action: sampleAction,
- surface: CFG.surface,
- severity: 'medium',
- confidence: 0.9,
- witnesses: ['agent-a', 'agent-b']
- })
- }, 14000)
- .then(function(data) {
- done();
- var decision = (data.decision || data.verdict || (data.allowed === true ? 'allow' : data.allowed === false ? 'deny' : '')).toString().toLowerCase();
- var gate = data.gate || data.gate_id || data.rule || null;
- if (decision.indexOf('deny') >= 0) {
- pushMsg('rosie',
- "Policy would deny that action" + (data.reason ? ': ' + data.reason : '.'),
- gate ? 'gate ' + gate : null);
- } else if (decision.indexOf('allow') >= 0) {
- pushMsg('rosie',
- 'Policy would allow that. Operator confirmation still required before anything is signed.',
- gate ? 'gate ' + gate : null);
- } else {
- pushMsg('rosie', 'Policy engine returned:\n' + safeJson(data));
- }
- setStatus('ok', 'policy \u2713');
- })
- .catch(function(err) { done(); handleNetErr(err); });
-
- } else if (kind === 'reason') {
- var q = 'How does this Space (' + CFG.surface + ') work? What are its key capabilities?';
- pushMsg('user', '\uD83E\uDDE0 ' + q);
- // Route to a11oy /v1/reason first, fall back to /v1/policy/evaluate as general Q&A
- var reasonBase = CFG.amaruBase || CFG.a11oyBase;
- var reasonPath = CFG.amaruBase ? '/v1/reason' : '/v1/reason';
- if (!reasonBase) {
- done();
- pushMsg('rosie',
- "Neither a11oy nor amaru are configured on this surface yet. " +
- "Once wired, I'll route your question to the substrate's reasoning engine.\n\n" +
- "This surface (" + CFG.surface + ") is part of the SZL Holdings UDS mesh. " +
- "Ask me again once the endpoints are live.");
- return;
- }
- fetchJson(reasonBase + reasonPath, {
- method: 'POST',
- body: JSON.stringify({ prompt: q, surface: CFG.surface, question: q })
- }, 20000)
- .then(function(data) {
- done();
- var ans = data.answer || data.reasoning || data.text || data.output || data.result || data.response;
- pushMsg('rosie',
- ans ? String(ans) : 'The reasoning engine responded:\n' + safeJson(data),
- data.confidence != null ? 'confidence ' + data.confidence : null);
- setStatus('ok', 'reasoning \u2713');
- })
- .catch(function(err) { done(); handleNetErr(err); });
- }
- }
-
- // ---- Routing: decide which substrate endpoint a question goes to ----
- function route(q) {
- var s = q.toLowerCase();
- if (/\b(verify|chain|integrity|tamper)\b/.test(s) && CFG.a11oyBase)
- return { svc: 'a11oy', path: '/v1/verify', method: 'POST', body: { query: q, surface: CFG.surface } };
- if (/\b(receipt|ledger|minted|hash|history|log|khipu|dag)\b/.test(s) && CFG.a11oyBase)
- return { svc: 'a11oy', path: '/v1/ledger', method: 'GET', query: { q: q, limit: 5 } };
- if (/\b(can i|should i|allowed|policy|permit|deny|gate|propose|execute)\b/.test(s) && CFG.a11oyBase)
- return { svc: 'a11oy', path: '/v1/policy/evaluate', method: 'POST', body: { action: q, surface: CFG.surface } };
- if (/\b(how|what|explain|describe|reason|why|tell me)\b/.test(s)) {
- if (CFG.amaruBase) return { svc: 'amaru', path: '/v1/reason', method: 'POST', body: { prompt: q, surface: CFG.surface } };
- if (CFG.a11oyBase) return { svc: 'a11oy', path: '/v1/reason', method: 'POST', body: { prompt: q, surface: CFG.surface } };
- }
- if (CFG.amaruBase)
- return { svc: 'amaru', path: '/v1/reason', method: 'POST', body: { prompt: q, surface: CFG.surface } };
- if (CFG.a11oyBase)
- return { svc: 'a11oy', path: '/v1/policy/evaluate', method: 'POST', body: { action: q, surface: CFG.surface } };
- return null;
- }
-
- function baseFor(svc) { return svc === 'amaru' ? CFG.amaruBase : CFG.a11oyBase; }
-
- function handleNetErr(err) {
- if (err && err.status) {
- pushMsg('rosie', "The substrate answered with an error (" + err.status + "). I won't guess what it meant \u2014 try rephrasing, or check the service.");
- } else {
- pushMsg('rosie', "I can't reach the substrate right now, so I won't make up an answer. I'll keep trying \u2014 ask me again in a moment.");
- setStatus('down', 'substrate unreachable');
- }
- }
-
- function ask(q) {
- pushMsg('user', q);
- var r = route(q);
- if (!r) {
- pushMsg('rosie', "I'm not wired to a backend on this surface yet, so I can't answer that honestly. Once a11oy or amaru is configured here, I'll route your question to the substrate.");
- return;
- }
- var typing = showTyping();
- var url = baseFor(r.svc) + r.path;
- if (r.query) {
- var qs = Object.keys(r.query).map(function (k) { return encodeURIComponent(k) + '=' + encodeURIComponent(r.query[k]); }).join('&');
- url += (url.indexOf('?') >= 0 ? '&' : '?') + qs;
- }
- var opts = { method: r.method };
- if (r.body && r.method !== 'GET') opts.body = JSON.stringify(r.body);
-
- fetchJson(url, opts, 14000)
- .then(function (data) {
- typing.remove();
- renderAnswer(r, data);
- setStatus('ok', 'substrate online');
- })
- .catch(function (err) {
- typing.remove();
- handleNetErr(err);
- });
- }
-
- // ---- Turn a substrate response into Rosie's voice (no fabrication) ----
- function renderAnswer(r, data) {
- if (data == null || (typeof data === 'object' && Object.keys(data).length === 0)) {
- pushMsg('rosie', "The substrate responded, but there was nothing to show \u2014 no matching records. That's an honest empty result, not an error.");
- return;
- }
- if (typeof data === 'string') { pushMsg('rosie', data); return; }
-
- if (r.path === '/v1/ledger') {
- var items = data.receipts || data.items || data.results || (Array.isArray(data) ? data : null);
- if (!items || !items.length) {
- pushMsg('rosie', "No matching receipts in the ledger. Nothing's been minted for that query.");
- return;
- }
- var top = items[0];
- var hash = top.hash || top.receipt_id || top.id || top.digest;
- var root_hash = data.root_hash || data.dag_root || null;
- var msg = 'Found ' + items.length + ' receipt' + (items.length === 1 ? '' : 's') + '.';
- if (root_hash) msg += '\nKhipu DAG root: ' + root_hash;
- if (top.action) msg += '\nMost recent: ' + top.action;
- pushMsg('rosie', msg, hash ? 'receipt ' + hash : null);
- return;
- }
- if (r.path === '/v1/verify') {
- var ok = data.verified === true || data.valid === true || data.ok === true;
- var dsseSnippet = null;
- if (data.envelope || data.dsse) {
- var env = data.envelope || data.dsse;
- dsseSnippet = 'DSSE | keyid: ' + ((env.signatures || [{}])[0].keyid || '?') +
- ' | PLACEHOLDER \u2014 signing not yet wired into CI';
- }
- pushMsg('rosie',
- ok ? 'Chain verified \u2014 the receipts I checked are intact.'
- : "Verification did not pass. I'm flagging this so it can be looked at, not hiding it.",
- data.hash || data.head ? 'head ' + (data.hash || data.head) : null,
- dsseSnippet);
- return;
- }
- if (r.path === '/v1/policy/evaluate') {
- var decision = (data.decision || data.verdict || (data.allowed === true ? 'allow' : data.allowed === false ? 'deny' : '') || '').toString().toLowerCase();
- var gate = data.gate || data.gate_id || data.rule || null;
- if (decision.indexOf('deny') >= 0 || data.allowed === false) {
- pushMsg('rosie',
- "That action would be denied by policy" + (data.reason ? ': ' + data.reason : '.') + ' I won\u2019t propose anything the gates reject.',
- gate ? 'gate ' + gate : null);
- } else if (decision.indexOf('allow') >= 0 || data.allowed === true) {
- pushMsg('rosie',
- 'Policy would allow that. It still needs an operator to confirm before anything is signed.',
- gate ? 'gate ' + gate : null);
- } else {
- pushMsg('rosie', 'The policy engine returned a decision I should show you directly:\n' + safeJson(data));
- }
- return;
- }
- if (r.svc === 'amaru' || r.path === '/v1/reason') {
- var ans = data.answer || data.reasoning || data.text || data.output || data.result || data.response;
- pushMsg('rosie', ans ? String(ans) : 'The reasoning engine responded:\n' + safeJson(data),
- data.confidence != null ? 'confidence ' + data.confidence : null);
- return;
- }
- pushMsg('rosie', safeJson(data));
- }
- function safeJson(o) {
- try { var s = JSON.stringify(o, null, 2); return s.length > 800 ? s.slice(0, 800) + '\u2026' : s; }
- catch (e) { return String(o); }
- }
-
- // ---- Input handling ----
- form.addEventListener('submit', function (e) {
- e.preventDefault();
- var q = input.value.trim();
- if (!q) return;
- input.value = '';
- input.style.height = 'auto';
- ask(q);
- });
- input.addEventListener('input', function () {
- input.style.height = 'auto';
- input.style.height = Math.min(input.scrollHeight, 90) + 'px';
- });
- input.addEventListener('keydown', function (e) {
- if (e.key === 'Enter' && !e.shiftKey) { e.preventDefault(); form.requestSubmit ? form.requestSubmit() : form.dispatchEvent(new Event('submit', { cancelable: true })); }
- });
-
- // ---- Notifications API ----
- function notify(opts) {
- opts = opts || {};
- var kind = opts.kind || 'info';
- var avatar = el('img', { class: 'rz-toast-avatar', src: PORTRAIT, alt: '' });
- var body = el('div', { class: 'rz-toast-body' });
- body.appendChild(el('div', { class: 'rz-toast-title', html: '' + esc(opts.title || 'Rosie') + '' }));
- if (opts.body) body.appendChild(el('div', { class: 'rz-toast-text', text: opts.body }));
- if (opts.meta) body.appendChild(el('div', { class: 'rz-toast-meta', text: opts.meta }));
-
- var toast;
- function dismiss() {
- if (!toast) return;
- toast.classList.add('rz-toast-out');
- setTimeout(function () { if (toast && toast.parentNode) toast.parentNode.removeChild(toast); }, 220);
- }
- var x = el('button', { class: 'rz-toast-x', type: 'button', 'aria-label': 'Dismiss', text: '\u00d7', onclick: dismiss });
- toast = el('div', { class: 'rz-toast', 'data-kind': kind, role: 'status' }, [avatar, body, x]);
- toasts.appendChild(toast);
-
- pushMsg('rosie', (opts.title ? opts.title + (opts.body ? ' \u2014 ' + opts.body : '') : opts.body || ''), opts.meta);
-
- if (!isOpen) { state.unread = (state.unread || 0) + 1; persist(); refreshBadge(); }
- if (!opts.sticky) setTimeout(dismiss, opts.duration || 8000);
- return { dismiss: dismiss };
- }
-
- // ---- Public API ----
- window.Rosie = {
- open: open,
- close: close,
- toggle: toggle,
- ask: function (q) { open(); ask(q); },
- notify: notify,
- config: CFG,
- receiptMinted: function (hash, what) {
- return notify({ kind: 'receipt', title: 'New receipt minted', body: what || 'A signed receipt was added to the ledger.', meta: hash ? 'receipt ' + hash : null });
- },
- gateDenied: function (gate, what) {
- return notify({ kind: 'denial', title: 'Policy denied an action', body: what || 'A proposed action was rejected by the gates.', meta: gate ? 'gate ' + gate : null });
- },
- build: function (green, detail) {
- return notify({ kind: green ? 'build-green' : 'build-red', title: green ? 'Build is green' : 'Build is red', body: detail || '' });
- },
- doctrineDrift: function (detail) {
- return notify({ kind: 'doctrine', title: 'Doctrine drift detected', body: detail || 'Something diverged from doctrine. Worth a look.' });
- },
- };
-})();
diff --git a/assets/rosie_avatar.png b/assets/rosie_avatar.png
deleted file mode 100644
index a89dd4a35be9cba45fd61721cb3ae36027c1e399..0000000000000000000000000000000000000000
--- a/assets/rosie_avatar.png
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:82d523fd22bff3144bf647a5f9450180ab9cffcb213173272cf7a946d50a2786
-size 1267913
diff --git a/assets/sentra_avatar.png b/assets/sentra_avatar.png
deleted file mode 100644
index 8ec6121f309e2607755c736148c67fbe92506ce0..0000000000000000000000000000000000000000
--- a/assets/sentra_avatar.png
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a01b83b85d445240848540005b426b7f5bf28c9573fb06df42fe41054299e7f9
-size 1226996
diff --git a/assets/szl_banner.png b/assets/szl_banner.png
deleted file mode 100644
index 049bca552b601e1a850961a6f23572b60604a575..0000000000000000000000000000000000000000
--- a/assets/szl_banner.png
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:99cdc8e3ce6a23d8a148dc1e33f48dd2f50a3836ec4c4bbf29fcb931ec91da99
-size 1200672
diff --git a/assets/vessels_avatar.png b/assets/vessels_avatar.png
deleted file mode 100644
index 18b09cfd85dcafe6496eb5732d8aab84214dcd9f..0000000000000000000000000000000000000000
--- a/assets/vessels_avatar.png
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:b83a90b17bd56b7f7b8e172dee54f69d0cd605f938f46236a0089656f2416d62
-size 1323845
diff --git a/css/style.css b/css/style.css
deleted file mode 100644
index 693f5dea4cc244f240b17fcdc4e53f5b0383b106..0000000000000000000000000000000000000000
--- a/css/style.css
+++ /dev/null
@@ -1,89 +0,0 @@
-/* style.css — minimal, mostly defaults. SZL palette: deep purple + gold. */
-:root{
- --purple-deep:#12091f; --purple-mid:#2d1b4e; --gold:#d4af37; --gold-light:#e8cc6a;
- --text-main:#e8e0f0; --text-muted:#a090c0; --text-dim:#7060a0;
- --font-head:'Cinzel',Georgia,serif; --font-mono:'JetBrains Mono','Fira Code',monospace;
-}
-*,*::before,*::after{box-sizing:border-box;margin:0;padding:0;}
-html,body{height:100%;}
-body{
- background:var(--purple-deep);color:var(--text-main);
- font-family:'Inter',system-ui,-apple-system,sans-serif;line-height:1.6;
- -webkit-font-smoothing:antialiased;overflow-x:hidden;
- background-image:radial-gradient(circle at 50% -10%,rgba(61,40,120,0.5),transparent 55%),
- radial-gradient(circle at 90% 10%,rgba(212,175,55,0.07),transparent 45%);
-}
-.skip{position:absolute;left:-9999px;top:0.5rem;z-index:99;padding:.5rem 1rem;background:var(--gold);color:#150b22;font-weight:700;border-radius:4px;}
-.skip:focus{left:1rem;}
-
-/* Header / footer banding */
-.roster-header,.roster-footer{text-align:center;font-family:var(--font-mono);letter-spacing:.18em;
- text-transform:uppercase;color:var(--gold-light);padding:1.1rem 1rem .6rem;font-size:clamp(.62rem,1.6vw,.86rem);}
-.roster-footer{color:var(--text-muted);padding:.7rem 1rem 1.4rem;font-size:clamp(.56rem,1.4vw,.74rem);}
-.roster-footer b{color:var(--gold);}
-.tagline{text-align:center;font-family:var(--font-head);color:var(--gold);
- font-size:clamp(1.1rem,3vw,1.8rem);padding:.4rem 1rem 0;}
-.tagline small{display:block;font-family:var(--font-mono);text-transform:none;letter-spacing:.04em;
- font-size:.62rem;color:var(--text-dim);margin-top:.4rem;}
-
-/* The 3D stage */
-#stage{position:relative;width:100%;height:min(70vh,640px);min-height:420px;}
-#roster{display:block;width:100%;height:100%;}
-#roster[hidden]{display:none;}
-/* When the static grid is the visible child (no JS / no WebGL / org card),
- let the stage size to content instead of the fixed canvas height. */
-#stage:has(#fallback:not([hidden])){height:auto;min-height:0;}
-#loading{position:absolute;inset:0;display:flex;align-items:center;justify-content:center;
- font-family:var(--font-mono);color:var(--text-dim);font-size:.8rem;letter-spacing:.1em;}
-
-/* Holographic hover panel */
-.hover-panel{position:absolute;transform:translate(-50%,-100%);min-width:240px;max-width:300px;
- padding:.8rem .9rem;pointer-events:none;opacity:0;transition:opacity .18s ease-out;z-index:40;
- background:linear-gradient(180deg,rgba(18,9,31,.92),rgba(18,9,31,.78));
- border:1px solid var(--hc,#d4af37);border-radius:10px;
- box-shadow:0 0 24px -4px var(--hc,#d4af37),inset 0 0 18px -8px var(--hc,#d4af37);
- backdrop-filter:blur(6px);}
-.hover-panel.hp-visible{opacity:1;}
-.hover-panel::after{content:'';position:absolute;left:50%;bottom:-7px;transform:translateX(-50%);
- width:0;height:0;border:7px solid transparent;border-top-color:var(--hc,#d4af37);}
-.hp-name{font-family:var(--font-mono);font-weight:700;font-size:1.05rem;letter-spacing:.08em;}
-.hp-role{font-size:.62rem;color:var(--text-muted);margin:.1rem 0 .5rem;}
-.hp-head{font-family:var(--font-mono);font-size:.6rem;letter-spacing:.22em;color:var(--text-dim);
- border-top:1px solid rgba(255,255,255,.12);padding-top:.4rem;margin-bottom:.4rem;}
-.hp-list{list-style:none;display:flex;flex-direction:column;gap:.4rem;}
-.hp-line{display:flex;align-items:center;gap:.5rem;font-family:var(--font-mono);font-size:.72rem;
- color:var(--text-main);min-height:22px;opacity:.25;}
-.hp-line.hp-shown{opacity:1;}
-.hp-line.hp-pulse{animation:hp-pulse 1.4s ease-in-out infinite;}
-@keyframes hp-pulse{0%,100%{filter:none;}50%{filter:drop-shadow(0 0 5px var(--hc));}}
-.sp-icon{display:inline-flex;width:22px;height:22px;flex:0 0 22px;}
-.sp-static *{animation:none !important;}
-.hp-text{white-space:nowrap;overflow:hidden;}
-
-/* Accessible focus proxies (visually hidden but focusable) */
-.a11y-heroes{position:absolute;width:1px;height:1px;overflow:hidden;}
-.a11y-heroes button{width:1px;height:1px;}
-.a11y-hero:focus{position:fixed;left:8px;top:8px;width:auto;height:auto;z-index:200;
- padding:.4rem .7rem;background:var(--gold);color:#150b22;border:0;border-radius:4px;
- font-family:var(--font-mono);font-size:.7rem;}
-
-/* SVG fallback grid (WebGL unavailable) */
-#fallback[hidden]{display:none;}
-#fallback{max-width:1100px;margin:1rem auto;padding:0 1rem;}
-.fb-grid{display:grid;grid-template-columns:repeat(5,1fr);gap:1rem;}
-.fb-cell{display:flex;flex-direction:column;align-items:center;text-decoration:none;
- background:#0a0e14;border:1px solid rgba(212,175,55,.18);border-radius:14px;padding:.9rem;
- transition:transform .2s,border-color .2s;}
-.fb-cell:hover,.fb-cell:focus-visible{transform:translateY(-4px);border-color:var(--gold);}
-.fb-cell img{width:100%;aspect-ratio:1/1;border-radius:12px;}
-.fb-name{font-family:var(--font-head);color:var(--gold);margin-top:.5rem;}
-.fb-role{font-family:var(--font-mono);font-size:.6rem;color:var(--text-dim);
- text-transform:uppercase;letter-spacing:.06em;text-align:center;}
-@media(max-width:900px){.fb-grid{grid-template-columns:repeat(3,1fr);}}
-@media(max-width:560px){.fb-grid{grid-template-columns:repeat(2,1fr);}}
-
-@media(prefers-reduced-motion:reduce){
- .hover-panel{transition:none;}
- .hp-line.hp-pulse{animation:none;}
- .sp-anim *{animation:none !important;}
-}
diff --git a/cursor_reinstill.json b/cursor_reinstill.json
deleted file mode 100644
index fdac3888cf35b6db361d5536b186bfdb6dfcca5c..0000000000000000000000000000000000000000
--- a/cursor_reinstill.json
+++ /dev/null
@@ -1,144 +0,0 @@
-{
- "space": "SZLHOLDINGS/README",
- "kind": "org-card (static)",
- "reinstill_session": "OPUS 4.8 Cursor re-instill \u2014 group G",
- "shipped_utc": "2026-06-01T03:30:00Z",
- "doctrine": "v10",
- "doctrine_numbers": {
- "declarations": 749,
- "unique_axioms": 14,
- "tracked_sorries": 163,
- "mcp_tools": 12,
- "policy_gates": 46,
- "anchor_gates": 44,
- "raw_axioms": 15,
- "sorries_baseline": 112,
- "sorries_putnam": 51
- },
- "honesty_note": "749 declarations / 14 unique axioms (15 raw, 1 dup) / 163 tracked sorries (112 baseline + 51 Putnam) per lean_numbers.py @ c7c0ba17. v18 'zero sorry' claim is FALSE. \u039b uniqueness is a Conjecture (CAUCHY_ND sorry). Prior 456/6 re-audit was wrong.",
- "integration_mode": "un-doctrine corrections only (additive metadata fix); org card is a static HTML/markdown Space \u2014 Cursor coordination/SDK/AGENTS PRs recorded as provenance.",
- "files_corrected": [
- {
- "file": "README.md",
- "changes": [
- "declarations stated as canonical 749",
- "tracked sorries stated as canonical 163 (112 baseline + 51 Putnam)",
- "unique axioms 14 (15 raw, 1 dup)",
- "11 MCP tools -> 12 MCP tools",
- "Doctrine v9 -> Doctrine v10 (footer); retired the earlier 456/6 figures from a stale clone"
- ]
- },
- {
- "file": "index.html",
- "changes": [
- "Doctrine v9 -> Doctrine v10 (meta description)",
- "Doctrine v9 -> Doctrine v10 (og:description)",
- "Doctrine v9 -> Doctrine v10 (footer)"
- ]
- }
- ],
- "founder_locked_preserved": [
- "assets/szl_banner.png (HF banner)",
- "5 painterly hero avatars: rosie/a11oy/amaru/sentra/vessels _avatar.png",
- "animated emoji layer (assets/emoji/*_emoji.png) on org card"
- ],
- "cursor_prs_recorded": [
- {
- "repo": "szl-holdings/.github",
- "pr": 74,
- "cat": "anatomy",
- "title": "feat(anatomy-alive): Perplexity cross-organ integration"
- },
- {
- "repo": "szl-holdings/szl-brand",
- "pr": 40,
- "cat": "feature",
- "title": "Transform szl-brand into a real Python SDK"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 86,
- "cat": "feature",
- "title": "docs(coordination): CURSOR_MASTER_DIRECTIVE \u2014 Series-A"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 97,
- "cat": "doctrine",
- "title": "docs(coordination): Cursor master directive FINAL"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 83,
- "cat": "proof",
- "title": "feat(coordination): Cursor instillation operational plan"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 82,
- "cat": "feature",
- "title": "feat(coordination): CTO+PM consolidated 30-day operational plan"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 89,
- "cat": "feature",
- "title": "[CURSOR DIRECTIVE] INSTILL ALL THEORIES \u2014 Tier 0-4"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 90,
- "cat": "feature",
- "title": "[CURSOR MASTER] ONE-OF-ONE Directive \u2014 28 PhD agents"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 73,
- "cat": "uds",
- "title": "chore(coordination): UDS v0.3.0 release-cut directive"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 72,
- "cat": "anatomy",
- "title": "chore(coordination): Cursor Phase 1 \u2014 innovate & evolve"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 79,
- "cat": "doctrine",
- "title": "chore(coordination): Cursor full throttle \u2014 all tracks"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 68,
- "cat": "anatomy",
- "title": "chore(coordination): P0 directive \u2014 make anatomy real"
- },
- {
- "repo": "szl-holdings/szl-brand",
- "pr": 39,
- "cat": "feature",
- "title": "Add AGENTS.md with Cursor Cloud development environment"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 56,
- "cat": "feature",
- "title": "docs: add AGENTS.md with Cursor Cloud development instructions"
- },
- {
- "repo": "szl-holdings/.github",
- "pr": 81,
- "cat": "doctrine",
- "title": "fix(docs): repair broken anatomy PDF links in org profile"
- }
- ],
- "cursor_prs_count": 15,
- "ip_hold_untouched": [
- "a11oy#57",
- "amaru#46",
- "sentra#45"
- ],
- "canonical_ref": "lutar-lean tag lutar-v18.0.0 / c7c0ba17"
-}
\ No newline at end of file
diff --git a/demo.html b/demo.html
deleted file mode 100644
index a241c9f189f1f2dabb5dc2372f8f6751532b99d6..0000000000000000000000000000000000000000
--- a/demo.html
+++ /dev/null
@@ -1,313 +0,0 @@
-
-
-
-
-
-SZL Holdings — Live Demo Surfaces
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
SZL Holdings · Sovereign Agentic Mesh
-
Live Demo Surfaces
-
A public index of every reachable surface in the SZL flagship mesh — five organs, the unified
- 4-pane operator shell, the formula corpus, the multi-LLM ensemble vote, and the provenance trail.
- Status pills below are live: each card probes its own /healthz in your browser.
- Endpoints that aren't live yet show gray — never faked.
-
- Holding company · Kernel c7c0ba17 · Doctrine-bound
-
Governed AI you can prove.
-
SZL Holdings builds governed autonomy with a checkable receipt for every decision. Every autonomous
- action carries a machine-checked, tamper-evident warrant — proof of under what authority
- it acted, on what trust evidence, and that the record was not quietly rewritten.
Confirm a decision happened, exactly as recorded — with zero trust in SZL
-
Pull the public signing key and a signed receipt from a live field node, then verify offline:
-
# pull the public key + a signed receipt from the live field node
-curl -s https://szlholdings-killinchu.hf.space/cosign.pub -o cosign.pub
-curl -s https://szlholdings-killinchu.hf.space/api/killinchu/v1/receipt/export > receipt.json
-# verify the DSSE signature offline → "Verified OK"
-# tamper a single byte and re-verify → "Verification failure"
+
+
-
-
-
-
-
What we claim — and what we don't
-
We surface only machine-checked facts as fact.
-
• 8 formulas formally proven & locked in Lean (sorry-free):
- F1, F4, F7, F11, F12, F18, F19, F22 — this count never inflates. A larger experimental
- tier is kernel-clean / CI-green on main @ c7c0ba17 across Waves 11–23
- (axioms ⊆ propext / Classical.choice / Quot.sound), labeled experimental — never folded into the locked eight.
- • Λ uniqueness = Conjecture 1 — unconditional uniqueness is machine-checked false.
- The conditional uniqueness (Theorem U, on separability) is proven axiom-free.
- Khipu Byzantine BFT safety = Conjecture 2 (Wave23 proves a conditional quorum-agreement,
- axiom-clean; unconditional stays open).
- • SLSA L1 (honest) · L2 build-attested — container provenance via Sigstore keyless
- (Fulcio + Rekor) where attest-build-provenance runs & verifies (a11oy, killinchu);
- verify with gh attestation verify / cosign verify-attestation.
- L3, FedRAMP, Iron Bank, CMMC, ATO = roadmap.
- • Receipts are genuinely signed where a key is present, honestly marked unsigned otherwise —
- never fabricated. Trust is never 100%.
- • Maritime AIS uses a clearly-labeled sample/replay dataset, not a live feed.
-
Read the thesis → szl-papers
- · Run the kernel → lutar-lean
- · Deploy the mesh → uds deploy oci://ghcr.io/szl-holdings/szl-mesh:0.4.0 --confirm
+
+
+
+
Governed decision infrastructure
+
Autonomy, under authority.
+
Systems that can reason, act within a declared bound, and return evidence another party can verify.
The model proposes. A policy layer validates authority and evidence. The runtime executes only within a declared bound. A portable receipt records the decision path for independent review.
+
+
+
+
SignalObserve and attribute the request.
+
ReasonGround the proposal in disclosed context.
+
PolicyAllow, require approval, or refuse.
+
ActExecute only inside the permitted bound.
+
ReceiptBind inputs, policy, action, and outcome.
+
VerifyReplay evidence outside the product UI.
+
+
+
+
-
-
ESTATE PULSE — LIVE READS
-
-
loading — no claim until data arrives…
+
+
+
+
Hugging Face portfolio
Artifacts with explicit boundaries.
+
Models, datasets, tools, and demonstrations are different product objects. Each owns its license, lineage, evaluation, runtime, and limitation evidence.
- Client-side reads from the Hugging Face API at page load. Timestamps are HF's own
- metadata, not our attestation. A failed fetch says so — it never fakes green.
-
-
+
-
+
+
+
+
Publication contract
A card is not proof.
+
Promotion requires exact lineage, hashes, load and inference evidence, evaluation, restart reproducibility, resource context, and an explicit autonomy boundary.
+
+
+
Weights
Base and license lineage, immutable hashes, clean load, held-out evaluation, restart evidence, resource envelope.
Source revision, dependency pins, served-revision binding, privacy behavior, limits, and a reproducible local path.
+
-
-
+
+
+
Evidence and runtime are separate axes.
+
A signature establishes integrity and origin within scope. It does not automatically establish model quality, safety, regulatory compliance, profitability, or authorization to operate.
+# Governed models, data, and demonstrations
-# SZL Holdings
+SZL Holdings publishes the model and data layer for systems that must reason,
+act within authority, and return evidence another party can verify.
-### Governed AI you can prove.
+[**Open a11oy**](https://a-11-oy.com) ·
+[**Inspect evidence**](https://a11oy.net) ·
+[**View source**](https://github.com/szl-holdings) ·
+[**Read documentation**](https://holdings.a-11-oy.com/docs-site/)
-Models ship with signed training & eval receipts. Surfaces label every value — LIVE, MEASURED, REPORTED, or DEMO. Trust is measured — not asserted.
+
+This company front door is source-controlled at
+[`szl-holdings/.github`](https://github.com/szl-holdings/.github/tree/main/huggingface/org-card)
+and deployed with an exact source-revision manifest. Inspect
+[`deployment.json`](https://szlholdings-readme.static.hf.space/deployment.json)
+on the running static Space for the served source binding.
-