routers/series_a_web/index.html

<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8">
  <meta name="viewport" content="width=device-width,initial-scale=1">
  <meta name="theme-color" content="#080c14">
  <meta name="color-scheme" content="dark">
  <title>a11oy Series-A Command Center</title>
  <meta name="description" content="Control before action. Evidence after. Series-A command center on a-11-oy.com — keep-7 Hub estate, claims ledger, fixture constitution, signed passports. Proof lives at a11oy.net.">
  <link rel="canonical" href="https://a-11-oy.com/series-a">
  <link rel="stylesheet" href="/series-a/styles.css?v=__STYLE_ASSET_DIGEST__">
</head>
<body>
<a class="skip" href="#main">Skip to command center</a>
<header class="topbar">
  <div class="wrap nav">
    <a class="wordmark" href="https://a-11-oy.com/">
      <span class="glyph" aria-hidden="true">Λ</span>
      <span class="scope"><span class="scope-name">A11OY</span><span class="scope-sep">/</span><span class="scope-role">SERIES-A</span></span>
    </a>
    <div class="nav-chips">
      <span class="chip live"><span class="dot"></span>PRODUCT</span>
      <span class="chip honesty"><span class="dot"></span>DEMO_SIGNED · fixture</span>
    </div>
    <nav class="tabs" aria-label="Command views">
      <a href="#command" data-nav="command" aria-current="page">Command</a>
      <a href="#estate" data-nav="estate">Estate</a>
      <a href="#claims" data-nav="claims">Claims</a>
      <a href="#policy" data-nav="policy">Policy</a>
      <a href="#twin" data-nav="twin">Twin</a>
      <a href="#passport" data-nav="passport">Passport</a>
      <a href="#audit" data-nav="audit">Audit</a>
    </nav>
    <span class="origin-switch" aria-label="Origins">
      <a class="origin-product" href="https://a-11-oy.com/" aria-current="true">Product</a>
      <span class="origin-sep" aria-hidden="true">|</span>
      <a href="https://a11oy.net/" target="_blank" rel="noopener">Proof ↗</a>
    </span>
  </div>
</header>

<main id="main" tabindex="-1">
  <section class="toolbar wrap" aria-label="Live observation">
    <button id="refresh" type="button">Run governed refresh</button>
    <span id="updated" aria-live="polite">Not observed yet</span>
  </section>

  <section class="grid wrap" id="cards" aria-label="Live status">
    <article><h2>Estate</h2><strong data-key="estate">CHECKING</strong><p>Signed current observation.</p></article>
    <article><h2>GitHub repos</h2><strong data-key="repos">—</strong><p>Complete paginated census.</p></article>
    <article><h2>Open PRs</h2><strong data-key="prs">—</strong><p>Current public queue.</p></article>
    <article><h2>HF Spaces</h2><strong data-key="spaces">—</strong><p>Org census from signed observation.</p></article>
    <article><h2>Models</h2><strong data-key="models">—</strong><p>Official Hub listing.</p></article>
    <article><h2>Datasets</h2><strong data-key="datasets">—</strong><p>Official Hub listing.</p></article>
    <article><h2>Trust factor</h2><strong data-key="trust">CHECKING</strong><p>Derived from signed local decisions.</p></article>
    <article><h2>Receipt signer</h2><strong data-key="signer">CHECKING</strong><p>Persistent P‑256 preferred.</p></article>
  </section>

  <section class="view wrap" data-view="command">
    <p class="eyebrow">Ninety seconds · Series‑A Live Control Plane</p>
    <h1>Control before action. <span class="muted">Evidence after.</span></h1>
    <p class="lede">Operators, security, and compliance who cannot take a model’s word for what it did. Four primitives sit in the path: Capability Constitution, Assurance Query Language, Operational Twin, Policy-to-Evidence Coverage Graph.</p>
    <dl class="facts">
      <div><dt>What is live</dt><dd>This origin is the product. Proof is a11oy.net. Receipts on the Twin tab from the fixture are DEMO_SIGNED. Passports below are the live Series-A controller. This page does not write the Hub and does not rewrite the published atlas keep-set.</dd></div>
      <div><dt>OSS vs product</dt><dd>Source github.com/szl-holdings/a11oy (Apache-2.0). Hugging Face is the artifact registry, not the front door.</dd></div>
      <div><dt>Why now</dt><dd>Agents are being handed tools. Ungoverned tool authority is the incident. Governance has to live in the path, not in a slide.</dd></div>
    </dl>
  </section>

  <section class="view wrap" data-view="estate" hidden>
    <p class="eyebrow">Hub inventory · MEASURED</p>
    <h1>Operator keep-set. This page does not write the Hub.</h1>
    <p class="lede">Product lives here. Proof lives at a11oy.net. Archive means pause and private — never delete. Authenticated recapture includes the org README card. Unauthenticated author-list omits README. This surface does not rewrite the published atlas keep-set.</p>
    <ul class="keep" id="keep-list"></ul>
    <p class="bound">amaru / sentra / vessels / rosie do not exist as Spaces. Collection: canonical-public-spaces-7. Live totals come from the signed observation above, not from a Hub write on this page.</p>
  </section>

  <section class="view wrap" data-view="claims" hidden>
    <p class="eyebrow">P0 · Claims ledger</p>
    <h1>Every public number has a home.</h1>
    <p class="lede">Marketing copy reads this ledger. Default is UNKNOWN. Stale May 12 metrics stay SNAPSHOT.</p>
    <div class="table-wrap">
      <table class="ledger">
        <thead><tr><th>ID</th><th>Statement</th><th>Value</th><th>State</th></tr></thead>
        <tbody id="claims-body"></tbody>
      </table>
    </div>
    <h2 class="sub">Contradictions</h2>
    <ul class="keep" id="ctr-list"></ul>
  </section>

  <section class="view wrap" data-view="policy" hidden>
    <p class="eyebrow">acc-fixture-v1 · expires 2026-11-27</p>
    <h1>Authority that cannot expire cannot be audited.</h1>
    <p class="lede">Two-person mode. Writes per run: 0. Prohibited: shell.exec, prod.write, unsloth.codex. This constitution is the fixture slice, not a production MCP gateway.</p>
    <ul class="keep" id="tools-list"></ul>
  </section>

  <section class="view wrap" data-view="twin" hidden>
    <p class="eyebrow">Operational Twin · fixture</p>
    <h1>Preview the blast radius. Then maybe act.</h1>
    <p class="lede">Safe fixture only. Signatures here are DEMO_SIGNED HMAC in the browser. DSSE is UNAVAILABLE. The live passport on the next tab is the product controller.</p>
    <form id="twin-form" class="twin">
      <label>Tool
        <select id="twin-tool" name="tool">
          <option value="echo.ping">echo.ping · NONE · admitted</option>
          <option value="receipt.inspect">receipt.inspect · NONE · admitted</option>
          <option value="policy.propose">policy.propose · NONE · operator</option>
          <option value="shell.exec">shell.exec · IRREVERSIBLE · prohibited</option>
          <option value="prod.write">prod.write · IRREVERSIBLE · prohibited</option>
        </select>
      </label>
      <label>Ping / proposal <input id="twin-arg" name="arg" value="fabric-ok"></label>
      <button type="submit">Execute fixture</button>
    </form>
    <pre id="twin-result" aria-live="polite">No fixture receipt yet.</pre>
  </section>

  <section class="view wrap" data-view="passport" hidden>
    <div class="panel">
      <h2>Counterfactual Action Passport</h2>
      <p>Live product controller. GET never mutates. Refresh, evaluate, and execute are explicit POSTs. One attempt. Fail closed.</p>
      <form id="passport">
        <label>Action
          <select name="type"><option value="estate.refresh">Refresh estate truth</option><option value="probe.public_surface">Probe public surface</option></select>
        </label>
        <label>Target <input name="target" value="szl://estate/current" required></label>
        <label>Evidence label <select name="label"><option value="OBSERVED">OBSERVED · server-signed snapshot</option><option value="UNKNOWN">UNKNOWN · fail-closed demo</option></select></label>
        <button type="submit">Evaluate passport</button>
        <button id="execute" type="button" disabled>Execute authorized action</button>
      </form>
      <pre id="passport-result" aria-live="polite">No passport evaluated.</pre>
      <pre id="execution-result" aria-live="polite">No authorized execution attempted.</pre>
      <p>Execution is bounded to one attempt and is enabled only for an ALLOW passport.</p>
    </div>
    <div class="panel">
      <h2>Live event rail</h2>
      <ol id="events" aria-live="polite"><li>CONNECTING</li></ol>
    </div>
    <div class="panel">
      <h2>Latest signed receipts</h2>
      <ol id="receipts"><li>CHECKING</li></ol>
    </div>
  </section>

  <section class="view wrap" data-view="audit" hidden>
    <p class="eyebrow">FRONTIER_BASELINE_AUDIT</p>
    <h1>Inventory before abstraction.</h1>
    <ul class="keep" id="audit-list"></ul>
  </section>
</main>
<footer>
  <div class="wrap footer">
    <p>MEASURED · REPORTED · MODELED · UNKNOWN · UNAVAILABLE · no private reasoning collected. Never a11oy.com.</p>
    <div class="footer-links">
      <a href="https://a-11-oy.com/console">Console</a>
      <a href="https://a-11-oy.com/api/a11oy/v1/honest">/honest</a>
      <a href="https://a11oy.net/estate/">Proof estate</a>
      <a href="https://github.com/szl-holdings/a11oy">Source</a>
    </div>
  </div>
</footer>
<script src="/series-a/app.js?v=__APP_ASSET_DIGEST__" defer></script>
</body>
</html>