artifacts/a11oy-uds/docs/OPERATOR-QUICKSTART.md

A11oy.UDS — Operator Quickstart

A11oy ships as a signed Zarf payload for UDS/Zarf-compatible operator workflows. This quickstart walks an operator from "download tarball" to package verification. Do not present fallback tarballs as deployable Zarf packages.

1. Pull + verify

BASE=https://github.com/szl-holdings/a11oy/releases/download/uds-v0.2.0
curl -fsSLO $BASE/a11oy-uds-0.2.0.tar.zst
curl -fsSLO $BASE/a11oy-uds-0.2.0.tar.zst.sha256
curl -fsSLO $BASE/a11oy-uds-0.2.0.tar.zst.sig
curl -fsSLO $BASE/a11oy-uds-dev.pub

sha256sum -c a11oy-uds-0.2.0.tar.zst.sha256
cosign verify-blob \
  --key a11oy-uds-dev.pub \
  --signature a11oy-uds-0.2.0.tar.zst.sig \
  a11oy-uds-0.2.0.tar.zst

Both checks must print OK / Verified OK before deploying.

2. Inspect

zarf package inspect a11oy-uds-0.2.0.tar.zst

For an unpacked or deployed package, verify the payload sidecars directly:

node artifacts/a11oy-uds/scripts/verify-manifest.mjs /opt/a11oy
node artifacts/a11oy-uds/scripts/verify-attestations.mjs /opt/a11oy /opt/a11oy

The attestation chain binds five subjects: a11oy-core, a11oy-connection, and three v0.2 shared packages (shared/perception-loop, shared/sequence-pipeline, shared/sparse-attention-kit).

3. Deploy

zarf package deploy a11oy-uds-0.2.0.tar.zst --confirm

The bundle lands under /opt/a11oy/:

/opt/a11oy/
├── a11oy-core/                # KS-18 contextuality witness, Fisher manifold, POVM verdicts
├── a11oy-connection/          # tetrad-field gauge connection
├── MANIFEST.json
├── ATTESTATIONS.json
└── shared/                    # v0.2 cross-cutting packages
    ├── perception-loop/
    ├── sequence-pipeline/
    └── sparse-attention-kit/

4. Disable shared (kernel-only deploy)

zarf package deploy a11oy-uds-0.2.0.tar.zst --confirm --components=-a11oy-shared

This omits /opt/a11oy/shared/ entirely; the KS-18 kernel and attestation chain still ship.

v0.2.0 — what changed

Package	Purpose	Receipt classes
@szl-holdings/perception-loop	Operator-loop perception envelope. Privacy invariant: raw frames never leave the loop; only feature-vector summaries enter the receipt stream.	perception.observation.v1 family
@szl-holdings/sequence-pipeline	Multi-stage hashed evidence pipeline (per-stage evidence.stage.v1 linked into a sealed evidence.sealed.v1).	evidence.*.v1
@szl-holdings/sparse-attention-kit	Sparse-attention envelope (NSA / MoBA / MiniMax / FlashAttention re-expressed). Non-negotiable contradiction-probe + fail-up-to-full escalation — the MiniMax M2 lesson.	12 sparse.*.v1 receipts

Each shared package is hash-pinned in MANIFEST.json and listed as a subject in attestations.json, so a tampered shared package fails verification the same way a tampered core package would.