Spaces:
Running
Running
File size: 3,314 Bytes
a6a5d8e | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 | # A11oy.UDS — Operator Quickstart
A11oy ships as a signed Zarf payload for UDS/Zarf-compatible operator
workflows. This quickstart walks an operator from "download tarball" to
package verification. Do not present fallback tarballs as deployable Zarf
packages.
## 1. Pull + verify
```bash
BASE=https://github.com/szl-holdings/a11oy/releases/download/uds-v0.2.0
curl -fsSLO $BASE/a11oy-uds-0.2.0.tar.zst
curl -fsSLO $BASE/a11oy-uds-0.2.0.tar.zst.sha256
curl -fsSLO $BASE/a11oy-uds-0.2.0.tar.zst.sig
curl -fsSLO $BASE/a11oy-uds-dev.pub
sha256sum -c a11oy-uds-0.2.0.tar.zst.sha256
cosign verify-blob \
--key a11oy-uds-dev.pub \
--signature a11oy-uds-0.2.0.tar.zst.sig \
a11oy-uds-0.2.0.tar.zst
```
Both checks must print `OK` / `Verified OK` before deploying.
## 2. Inspect
```bash
zarf package inspect a11oy-uds-0.2.0.tar.zst
```
For an unpacked or deployed package, verify the payload sidecars directly:
```bash
node artifacts/a11oy-uds/scripts/verify-manifest.mjs /opt/a11oy
node artifacts/a11oy-uds/scripts/verify-attestations.mjs /opt/a11oy /opt/a11oy
```
The attestation chain binds five subjects: `a11oy-core`,
`a11oy-connection`, and three v0.2 shared packages
(`shared/perception-loop`, `shared/sequence-pipeline`,
`shared/sparse-attention-kit`).
## 3. Deploy
```bash
zarf package deploy a11oy-uds-0.2.0.tar.zst --confirm
```
The bundle lands under `/opt/a11oy/`:
```
/opt/a11oy/
├── a11oy-core/ # KS-18 contextuality witness, Fisher manifold, POVM verdicts
├── a11oy-connection/ # tetrad-field gauge connection
├── MANIFEST.json
├── ATTESTATIONS.json
└── shared/ # v0.2 cross-cutting packages
├── perception-loop/
├── sequence-pipeline/
└── sparse-attention-kit/
```
## 4. Disable shared (kernel-only deploy)
```bash
zarf package deploy a11oy-uds-0.2.0.tar.zst --confirm --components=-a11oy-shared
```
This omits `/opt/a11oy/shared/` entirely; the KS-18 kernel and
attestation chain still ship.
## v0.2.0 — what changed
| Package | Purpose | Receipt classes |
|--------------------------------------|----------------------------------------------------------------------------------------------------------------------|--------------------------------|
| `@szl-holdings/perception-loop` | Operator-loop perception envelope. **Privacy invariant: raw frames never leave the loop**; only feature-vector summaries enter the receipt stream. | `perception.observation.v1` family |
| `@szl-holdings/sequence-pipeline` | Multi-stage hashed evidence pipeline (per-stage `evidence.stage.v1` linked into a sealed `evidence.sealed.v1`). | `evidence.*.v1` |
| `@szl-holdings/sparse-attention-kit` | Sparse-attention envelope (NSA / MoBA / MiniMax / FlashAttention re-expressed). **Non-negotiable contradiction-probe + fail-up-to-full escalation** — the MiniMax M2 lesson. | 12 `sparse.*.v1` receipts |
Each shared package is hash-pinned in `MANIFEST.json` and listed as a
subject in `attestations.json`, so a tampered shared package fails
verification the same way a tampered core package would.
|