fix(amaru): register native /v1/honest + /v1/lambda BEFORE app.mount(/api/amaru) so the sub-app no longer shadows them (404->200). Doctrine v11. ADDITIVE. Opus HF cleanup.

serve.py

@@ -107,6 +107,51 @@ async def healthz_wire_d(request: Request) -> JSONResponse:
     })
 
 
+# ---------------------------------------------------------------------------
+# Native doctrine surfaces /api/amaru/v1/honest + /v1/lambda (ADDITIVE, Doctrine
+# v11). MUST be registered BEFORE app.mount("/api/amaru", amaru_app) below — the
+# mounted sub-app would otherwise shadow these paths (it 404'd them). Same
+# precedence trick the healthz route above uses. ZERO BANDAID: 13-axis
+# geometric-mean Λ, canonical numbers 749/14/163. (Opus HF cleanup.)
+# ---------------------------------------------------------------------------
+_AMARU_AXIS_NAMES = [
+    "soundness", "calibration", "robustness", "provenance", "consent", "reversibility",
+    "transparency", "fairness", "containment", "attestation", "freshness", "authority", "auditability",
+]
+
+
+@app.get("/api/amaru/v1/honest")
+async def amaru_honest() -> JSONResponse:
+    return JSONResponse({
+        "doctrine": "v11",
+        "declarations": 749, "axioms_unique": 14, "axioms_raw": 15, "sorries_total": 163,
+        "sorries_baseline": 112, "sorries_putnam": 51, "trust_axes": 13,
+        "lambda_uniqueness": "Conjecture, not a closed theorem (open CAUCHY_ND sorry + missing symmetry axiom)",
+        "slsa": "L1 (honest)",
+        "receipts": "DSSE envelopes from the amaru tick endpoint; Sigstore CI signing PENDING (PLACEHOLDER).",
+        "memory": "7-chakra cortex; Cardano-anchored receipts are demo-seeded, not on-chain mainnet.",
+        "hatun_willay": True,
+    })
+
+
+@app.get("/api/amaru/v1/lambda")
+async def amaru_lambda() -> JSONResponse:
+    import math as _m
+    axes = [0.92, 0.91, 0.93, 0.90, 0.94, 0.91, 0.92, 0.93, 0.90, 0.91, 0.94, 0.92, 0.93]
+    floor = 0.90
+    clamped = [min(1.0, max(1e-9, float(x))) for x in axes]
+    L = _m.exp(sum(_m.log(x) for x in clamped) / len(clamped))
+    return JSONResponse({
+        "trust_axes": 13,
+        "axes": [{"name": n, "score": s} for n, s in zip(_AMARU_AXIS_NAMES, axes)],
+        "lambda": round(L, 6), "lambda_floor": floor, "pass": L >= floor,
+        "aggregate": "geometric mean (yuyay_v3 canonical, 13-axis)",
+        "uniqueness": "Conjecture, not a Theorem (open CAUCHY_ND sorry + missing symmetry axiom)",
+        "declarations": 749, "axioms_unique": 14, "axioms_raw": 15, "sorries_total": 163,
+        "doctrine": "v11",
+    })
+
+
 # ---------------------------------------------------------------------------
 # PER-APP BRAIN (amaru = cortex / reasoning) + UNIFIED LLM ROUTER + Wire E/F.
 # Registered on the ROOT app BEFORE the /api/amaru mount so they take precedence.
@@ -486,50 +531,6 @@ if _codeproxy is not None:
         print(f"[amaru.code] code proxy registration degraded: {_e}")
 
 
-# ---------------------------------------------------------------------------
-# Native doctrine surfaces /api/amaru/v1/honest + /v1/lambda (ADDITIVE, Doctrine
-# v11). Registered on main app BEFORE the SPA catch-all so they resolve as JSON
-# (previously /v1/honest 404'd and /v1/lambda fell through to the SPA shell).
-# ZERO BANDAID: 13-axis geometric-mean Λ, canonical numbers 749/14/163.
-# ---------------------------------------------------------------------------
-_AMARU_AXIS_NAMES = [
-    "soundness", "calibration", "robustness", "provenance", "consent", "reversibility",
-    "transparency", "fairness", "containment", "attestation", "freshness", "authority", "auditability",
-]
-
-
-@app.get("/api/amaru/v1/honest")
-async def amaru_honest() -> JSONResponse:
-    return JSONResponse({
-        "doctrine": "v11",
-        "declarations": 749, "axioms_unique": 14, "axioms_raw": 15, "sorries_total": 163,
-        "sorries_baseline": 112, "sorries_putnam": 51, "trust_axes": 13,
-        "lambda_uniqueness": "Conjecture, not a closed theorem (open CAUCHY_ND sorry + missing symmetry axiom)",
-        "slsa": "L1 (honest)",
-        "receipts": "DSSE envelopes from the amaru tick endpoint; Sigstore CI signing PENDING (PLACEHOLDER).",
-        "memory": "7-chakra cortex; Cardano-anchored receipts are demo-seeded, not on-chain mainnet.",
-        "hatun_willay": True,
-    })
-
-
-@app.get("/api/amaru/v1/lambda")
-async def amaru_lambda() -> JSONResponse:
-    import math as _m
-    axes = [0.92, 0.91, 0.93, 0.90, 0.94, 0.91, 0.92, 0.93, 0.90, 0.91, 0.94, 0.92, 0.93]
-    floor = 0.90
-    clamped = [min(1.0, max(1e-9, float(x))) for x in axes]
-    L = _m.exp(sum(_m.log(x) for x in clamped) / len(clamped))
-    return JSONResponse({
-        "trust_axes": 13,
-        "axes": [{"name": n, "score": s} for n, s in zip(_AMARU_AXIS_NAMES, axes)],
-        "lambda": round(L, 6), "lambda_floor": floor, "pass": L >= floor,
-        "aggregate": "geometric mean (yuyay_v3 canonical, 13-axis)",
-        "uniqueness": "Conjecture, not a Theorem (open CAUCHY_ND sorry + missing symmetry axiom)",
-        "declarations": 749, "axioms_unique": 14, "axioms_raw": 15, "sorries_total": 163,
-        "doctrine": "v11",
-    })
-
-
 @app.get("/{path:path}")
 async def serve_spa(path: str):
     file_path = STATIC_DIR / path