#!/usr/bin/env python3 # SPDX-License-Identifier: Apache-2.0 # Copyright 2026 SZL Holdings # Signed-off-by: Lutar, Stephen P. """Operational Command-lab Space. Stdlib HTTP on 7860. No Node. No npm.""" from __future__ import annotations import json import sys from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer from pathlib import Path from urllib.parse import parse_qs, urlparse ROOT = Path(__file__).resolve().parent sys.path.insert(0, str(ROOT / "python")) sys.path.insert(0, str(ROOT)) from energy import measure_run, probe # noqa: E402 from kernel import evaluate_anatomy, selftest # noqa: E402 HTML = r""" SZL Command lab
SZL Holdings · Command lab · GitHub canonical

Holographic command body. Fail closed.

Five organs. SHA-256 receipts. Energy channel is LIVE. Joules are MEASURED only from RAPL or NVML. Never a fabricated joule. Λ uniqueness is Conjecture 1 OPEN. Not a-11-oy.com. Not an ATO. Not an elevation.

loading…

Source szl-holdings/szl-command-lab · product a-11-oy.com · proof a11oy.net

""" JSON_PATHS = { "/healthz", "/readyz", "/api/energy", "/api/organs/integrity", "/v1/organs/integrity", } HTML_PATHS = {"/", "/index.html"} def _flag(qs: dict[str, list[str]], name: str) -> bool: v = (qs.get(name) or ["0"])[0] return v in {"1", "true", "on", "yes"} class Handler(BaseHTTPRequestHandler): def log_message(self, fmt: str, *args) -> None: # noqa: A003 sys.stderr.write("%s - %s\n" % (self.address_string(), fmt % args)) def do_HEAD(self) -> None: # noqa: N802 parsed = urlparse(self.path) path = parsed.path.rstrip("/") or "/" if path in HTML_PATHS: self.send_response(200) self.send_header("Content-Type", "text/html; charset=utf-8") self.send_header("Content-Length", str(len(HTML.encode("utf-8")))) self.send_header("Cache-Control", "no-store") self.end_headers() return if path in JSON_PATHS: self.send_response(200) self.send_header("Content-Type", "application/json; charset=utf-8") self.send_header("Content-Length", "0") self.send_header("Cache-Control", "no-store") self.end_headers() return self.send_response(404) self.send_header("Content-Length", "0") self.end_headers() def do_GET(self) -> None: # noqa: N802 parsed = urlparse(self.path) path = parsed.path.rstrip("/") or "/" qs = parse_qs(parsed.query) if path in {"/healthz", "/readyz"}: self._send(200, {"ok": True, "energy": probe(), "proven_trust": False, "channel": "LIVE"}) return if path == "/api/energy": self._send(200, probe()) return if path in {"/api/organs/integrity", "/v1/organs/integrity"}: def run(): return evaluate_anatomy( zero_heart=_flag(qs, "zero_heart"), tamper_chain=_flag(qs, "tamper_chain"), fabricate_joule=_flag(qs, "fabricate_joule"), seed=11, ) body, energy = measure_run(run) if _flag(qs, "fabricate_joule"): energy = { "channel": "LIVE", "honesty": "UNAVAILABLE", "energy_j": None, "inference_energy_j": None, "note": "fabricated joule refused", } body["blocked"] = True body["verdict"] = "BLOCKED" body["energy"] = energy.get("honesty") body["energy_j"] = energy.get("energy_j") self._send(200, {"ok": True, "body": body, "energy": energy}) return if path in HTML_PATHS: raw = HTML.encode("utf-8") self.send_response(200) self.send_header("Content-Type", "text/html; charset=utf-8") self.send_header("Content-Length", str(len(raw))) self.send_header("Cache-Control", "no-store") self.end_headers() self.wfile.write(raw) return self._send(404, {"ok": False, "error": "not found"}) def _send(self, status: int, obj: object) -> None: raw = json.dumps(obj, indent=2, default=str).encode("utf-8") self.send_response(status) self.send_header("Content-Type", "application/json; charset=utf-8") self.send_header("Content-Length", str(len(raw))) self.send_header("Access-Control-Allow-Origin", "*") self.send_header("Cache-Control", "no-store") self.end_headers() self.wfile.write(raw) def main() -> int: selftest() host, port = "0.0.0.0", int(__import__("os").environ.get("PORT", "7860")) httpd = ThreadingHTTPServer((host, port), Handler) print(f"[szl-command-lab] {host}:{port} · energy channel LIVE · never a fabricated joule", file=sys.stderr) httpd.serve_forever() return 0 if __name__ == "__main__": raise SystemExit(main())