deploy(hf): sync szl-holdings/killinchu@main derived COPY set

deploy(hf): sync szl-holdings/killinchu@main derived COPY set

deploy(hf): sync szl-holdings/killinchu@main derived COPY set

Additive pillar upgrades (mirror GitHub): scaling kleiber_hierarchical (Wang-Zhao 2025) + /scaling/hierarchical; allodial /standards (SLSA v1.1 VSA + Sello arXiv:2606.04193, PROPOSED); agentic /governance-standards (OWASP ASI01-ASI10 + MS AGT + Google A2A, cited). Byte-identical both apps; doctrine v11.

parity: sync szl_agentic_loop.py with a11oy + add szl_anatomy_routes.py (formula MCP tools) + Dockerfile COPY

wire ~80 theorems into governed loop (killinchu): formula_proof per run

a11oy Code ported to killinchu + per-run-GENESIS tamper-evidence fix

feat(loop): upgrade governed agent loop to the proven 6-receipt chain (retrieve->quarantine_untrusted->tool_call->policy_check->kernel_check->emit) with P3 poisoned-input non-interference; receipts signed by the persistent cosign key. Surgical: module-only (serve.py already wires + orders correctly). Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

feat(loop): operational RAG->tool-call->policy/trust gate->signed-receipt loop + canonical live MCP at /mcp/ + /ask-and-act consumer UI; receipts signed by persistent cosign key