Spaces:

SZLHOLDINGS
/

a11oy

Running

App Files Files Community

a11oy / README.md

betterwithage

docs(slsa): sync Space card with GitHub README (SLSA L1 honest; L2 roadmap, not yet claimed)

23b43aa verified 4 months ago

8.51 kB

title: a11oy — Governance Substrate
emoji: 🔬
colorFrom: indigo
colorTo: gray
sdk: docker
app_port: 7860
pinned: true
license: apache-2.0
short_description: a11oy — policy + receipt substrate
tags:
  - governance
  - agentic-ai
  - doctrine-v11
  - a11oy
  - execution-fabric
  - apache-2.0
ecosystem-stage: operational

Live

HF Space (one-click, no login):

Primary face — the full application: https://szlholdings-a11oy.hf.space/ (also at /console)
Space URL: https://szlholdings-a11oy.hf.space
Health: curl -s https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest | jq .kernel_commit → "c7c0ba17"
Docs: https://szl-holdings.github.io/docs-site/flagships/a11oy
Release: v1.0.0

The application

a11oy is a full left-nav application — not a landing page or a single console panel. It opens directly to the Command Center and carries the unified SZL house style (dark ground, gold #c9b787 + teal #5fb3a3 accents, Space Grotesk + JetBrains Mono) with a product switcher in the top ribbon that jumps between the two live SZL products — a11oy (command platform) and killinchu (drones & vessels) — in one click.

Primary app file: pages/console.html · served at / and /console.

43 unique tabs in the left navigation (plus 7 Warhacker live demos). Representative views:

View	What it does
Command Center	Live operational overview — service health, recent verdicts, receipt stream
Five Superpowers	The five orchestrated capabilities a11oy coordinates internally
Warhacker	Maps the five Warhacker problems to the a11oy capability that solves each, with a live signed receipt
Observability	MELT + distributed tracing where every span is a signed Khipu receipt (vs New Relic / Datadog / OTel)
Capabilities	The built-in a11oy capability fabric — reasoning, policy, and operator paths wired into the receipt substrate
Services	Live service reachability — real probes, honest when a service is unreachable
Formulas	The PURIQ formula set — 5 locked-proven in Lean 4 {F1, F11, F12, F18, F19} (this count never moves) + a larger experimental tier, kernel-clean & CI-green on main `@b910c276` through Wave 14 (Wave 11 CF-1/2/3/5; Wave 12 CUT-2 + CF-13 DEQ input-Lipschitz + CF-17 fp-summation stability; Wave 13 replay-root + non-Byzantine quorum + HM-bottleneck; Wave 14 CF-18 Madhava remainder, CF-19 Reed–Solomon MDS lower bound, CF-20 VCG, CF-21 log-sum/Gibbs). Λ-uniqueness is proven only conditionally (CUT-2, separability, axiom-free); remaining formulas are Roadmap
Evidence	Body-of-evidence export — DSSE Khipu receipts, replayable and tamper-evident
LLM Router	The governed LLM routing surface

What it does

a11oy is the audit-fiber continuity layer of the SZL command platform. Every AI action routes through a11oy and leaves a DSSE-enveloped Khipu receipt on a SHA-256 hash-linked Merkle DAG. The invariant is receipts.in ≡ receipts.out: nothing is lost between the decision and the proof.

Key capabilities:

Policy + receipt substrate — /v1/policy/evaluate, /v1/verify, /v1/ledger: deny-by-default; every action signed
Built-in capability fabric — reasoning, policy, and operator paths are internal to a11oy (not external services); each emits signed receipts
Honest disclosure — /v1/honest reports live doctrine posture (749/14/163, Λ = Conjecture 1)
8 TS workspace libs — @szl-holdings/a11oy-knowledge, a11oy-policy, a11oy-qec-integrity, a11oy-receipt-substrate, perception-loop, rae1, sequence-pipeline, sparse-attention-kit
DSSE Khipu receipts — ECDSA P-256-SHA256; multi-party-witnessed; BFT quorum-capable

Verify it yourself

# 1. Confirm live doctrine posture
curl -s https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest | jq .kernel_commit
# => "c7c0ba17"

# 2. Verify the cosign keyless signature on the published image (SLSA Build L1, honest).
#    GHCR verification shows a cosign keyless-signed, Rekor-anchored image.
#    SLSA L2 (verified build-provenance attestation under isolated builders) is on
#    the roadmap — see .compliance/SLSA_LEVEL.md. We do NOT claim L2-verified today.
cosign verify ghcr.io/szl-holdings/a11oy:uds-v0.2.0 \
  --certificate-identity-regexp="^https://github.com/szl-holdings/" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
# Public Rekor entry for the image signature: log index 1710578865

# 3. Deploy as part of the signed mesh bundle
uds-cli bundle deploy oci://ghcr.io/szl-holdings/szl-uds-bundle:uds-v0.2.0 --confirm

Full guide: developers/VERIFY.md

Architecture

graph TD
    A[Incoming action] --> PL[Policy layer\n/v1/policy/evaluate\ndeny-by-default]
    PL --> KD[Khipu DAG\nDSSE P-256 signed\nSHA-256 hash-linked]
    KD --> LDG[Ledger /v1/ledger\nreplayable, tamper-evident]
    KD --> UDS[(GHCR\nSigned OCI\ncosign keyless-signed · SLSA L1 honest)]
    KD --> REKOR[(Rekor transparency log\nindex 1710578865)]

Parity vs. leaders

Capability	Palantir AIP	a11oy	Differentiator
Policy enforcement	✅	✅ `/v1/policy/evaluate`	—
Audit trail	✅ logs	✅ signed receipts	Palantir logs are not individually verifiable cryptographic artifacts
Supply-chain provenance	—	✅ cosign keyless-signed, Rekor-anchored (SLSA Build L1, honest)	`cosign verify` on every image; verifiable transparency-log entry. SLSA L2 verified-provenance is on the roadmap.
Formal math substrate	—	✅ Lean 4 / 749 decl	Open, machine-checkable
Air-gap deployment	✅ (proprietary)	✅ one UDS command	Open-source, reproducible
Receipt multi-party witness	—	✅ BFT quorum-capable	—

Quickstart

docker run --rm -p 7860:7860 ghcr.io/szl-holdings/a11oy:uds-v0.2.0

Honest status

Claim	Status
Live HF Space (HTTP 200)	✅
SLSA Build L1 (honest)	✅ — cosign keyless-signed image, verifiable via `cosign verify`; Rekor 1710578865. See .compliance/SLSA_LEVEL.md.
SLSA Build L2	🛣️ Roadmap — verified build-provenance attestation under isolated builders. Not claimed as achieved today.
cosign keyless signed	✅
UDS bundle (`szl-uds-bundle:uds-v0.2.0`)	✅ Real, deployable mesh bundle (cosign-signed, Rekor-anchored).
DSSE Khipu receipts	✅ — ECDSA P-256-SHA256
Lean 749/14/163 @ `c7c0ba17`	✅
Locked-proven PURIQ formulas	✅ Exactly 5 — F1, F11, F12, F18, F19 (Lean 4, depend on no axioms; machine-enforced `locked_count_five`).
Experimental theorems (main `@b910c276`)	✅ CI-green, kernel-verified results through Wave 14 (waves 5–14 + agentic P1–P6 + coder; all `#print axioms ⊆ {propext, Classical.choice, Quot.sound}`). NOT in the locked count. Wave 11 CF-1/2/3/5 (24 thms); Wave 12 CUT-2 + CF-13 + CF-17; Wave 13 replay-root + single-valued non-Byzantine vote + HM-bottleneck; Wave 14 CF-18 Madhava remainder, CF-19 Reed–Solomon MDS lower bound only, CF-20 VCG, CF-21 log-sum/Gibbs. Λ-uniqueness proven CONDITIONAL on separability (CUT-2, axiom-free); unconditional = Conjecture 1. Key: M2 tamper-evidence, CP1 split-conformal coverage (not Hoeffding).
Λ-uniqueness	⚠️ Conjecture 1 (F23 open bounty) — never a theorem
SLSA L3	❌ Not claimed
FedRAMP / CMMC	❌ Not claimed

_{Doctrine v11 LOCKED · 749/14/163 · kernel c7c0ba17 · SLSA Build L1 honest (L2 roadmap; L3 / FedRAMP / Iron Bank / CMMC not claimed) · 5 locked-proven + experimental CI-green tier · Λ = Conjecture 1 · Apache-2.0 · DOI 10.5281/zenodo.20434276}

Signed-off-by: Stephen P. Lutar Jr. stephenlutar2@gmail.com