Spaces:
Running
Running
docs(slsa): sync Space card with GitHub README (SLSA L1 honest; L2 roadmap, not yet claimed)
Browse filesAutomated README sync from szl-holdings/a11oy main via hf-sync.
Signed-off-by: Yachay <yachay@szlholdings.ai>
Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>
README.md
CHANGED
|
@@ -20,14 +20,6 @@ ecosystem-stage: "operational"
|
|
| 20 |
<!-- HF Space front-matter is REQUIRED (sdk: docker). Injected by hf-sync
|
| 21 |
so the Space builds the Dockerfile. Do not remove. -->
|
| 22 |
|
| 23 |
-
# a11oy
|
| 24 |
-
|
| 25 |
-
**Governed autonomy with a checkable receipt for every decision.**
|
| 26 |
-
|
| 27 |
-
[-B79BD6?style=flat-square)](https://github.com/szl-holdings/lutar-lean/blob/main/BOUNTY.md) [](https://slsa.dev/spec/v1.0/levels) [](https://github.com/szl-holdings/.github/tree/main/doctrine)
|
| 28 |
-
|
| 29 |
-
---
|
| 30 |
-
|
| 31 |
## Live
|
| 32 |
|
| 33 |
**HF Space (one-click, no login):** [](https://huggingface.co/spaces/SZLHOLDINGS/a11oy)
|
|
@@ -101,12 +93,11 @@ See [`docs/GOVERNED_POST_DETERMINISM.md`](https://github.com/szl-holdings/platfo
|
|
| 101 |
curl -s https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest | jq .kernel_commit
|
| 102 |
# => "c7c0ba17"
|
| 103 |
|
| 104 |
-
# 2. Verify the cosign keyless signature + build-provenance attestation on the
|
| 105 |
-
#
|
| 106 |
-
# attest-build-provenance
|
| 107 |
-
# see .compliance/SLSA_LEVEL.md.
|
| 108 |
-
cosign verify
|
| 109 |
-
--type slsaprovenance \
|
| 110 |
--certificate-identity-regexp="^https://github.com/szl-holdings/" \
|
| 111 |
--certificate-oidc-issuer="https://token.actions.githubusercontent.com"
|
| 112 |
# Public Rekor entry for the image signature: log index 1710578865
|
|
@@ -159,7 +150,7 @@ docker run --rm -p 7860:7860 ghcr.io/szl-holdings/a11oy:uds-v0.2.0
|
|
| 159 |
|---|---|
|
| 160 |
| Live HF Space (HTTP 200) | ✅ |
|
| 161 |
| SLSA **L1 honest · L2 build-attested** | ✅ — cosign keyless-signed image + container build-provenance attestation (attest-build-provenance, Sigstore keyless), verifiable via `cosign verify-attestation`; Rekor [1710578865](https://search.sigstore.dev/?logIndex=1710578865). See [.compliance/SLSA_LEVEL.md](.compliance/SLSA_LEVEL.md). |
|
| 162 |
-
| SLSA **L3** | 🛣️ **Roadmap** —
|
| 163 |
| cosign keyless signed | ✅ |
|
| 164 |
| UDS bundle (`szl-uds-bundle:uds-v0.2.0`) | ✅ Real, deployable mesh bundle (cosign-signed, Rekor-anchored). |
|
| 165 |
| DSSE Khipu receipts | ✅ — ECDSA P-256-SHA256 |
|
|
@@ -172,6 +163,8 @@ docker run --rm -p 7860:7860 ghcr.io/szl-holdings/a11oy:uds-v0.2.0
|
|
| 172 |
|
| 173 |
---
|
| 174 |
|
|
|
|
|
|
|
| 175 |
<sub>Doctrine v11 LOCKED · 749/14/163 · kernel `c7c0ba17` · SLSA L1 honest · L2 build-attested (container provenance, Sigstore keyless) · L3 / FedRAMP / Iron Bank / CMMC / ATO roadmap · 5 locked-proven + experimental CI-green tier · Λ = Conjecture 1 · Apache-2.0 · DOI [10.5281/zenodo.20434276](https://doi.org/10.5281/zenodo.20434276)</sub>
|
| 176 |
|
| 177 |
Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>
|
|
|
|
| 20 |
<!-- HF Space front-matter is REQUIRED (sdk: docker). Injected by hf-sync
|
| 21 |
so the Space builds the Dockerfile. Do not remove. -->
|
| 22 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 23 |
## Live
|
| 24 |
|
| 25 |
**HF Space (one-click, no login):** [](https://huggingface.co/spaces/SZLHOLDINGS/a11oy)
|
|
|
|
| 93 |
curl -s https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest | jq .kernel_commit
|
| 94 |
# => "c7c0ba17"
|
| 95 |
|
| 96 |
+
# 2. Verify the cosign keyless signature + build-provenance attestation on the image.
|
| 97 |
+
# SLSA L1 honest · L2 build-attested: container provenance via
|
| 98 |
+
# attest-build-provenance (Sigstore keyless, Fulcio + Rekor). Verify with
|
| 99 |
+
# `cosign verify-attestation`. SLSA L3 is roadmap — see .compliance/SLSA_LEVEL.md.
|
| 100 |
+
cosign verify ghcr.io/szl-holdings/a11oy:uds-v0.2.0 \
|
|
|
|
| 101 |
--certificate-identity-regexp="^https://github.com/szl-holdings/" \
|
| 102 |
--certificate-oidc-issuer="https://token.actions.githubusercontent.com"
|
| 103 |
# Public Rekor entry for the image signature: log index 1710578865
|
|
|
|
| 150 |
|---|---|
|
| 151 |
| Live HF Space (HTTP 200) | ✅ |
|
| 152 |
| SLSA **L1 honest · L2 build-attested** | ✅ — cosign keyless-signed image + container build-provenance attestation (attest-build-provenance, Sigstore keyless), verifiable via `cosign verify-attestation`; Rekor [1710578865](https://search.sigstore.dev/?logIndex=1710578865). See [.compliance/SLSA_LEVEL.md](.compliance/SLSA_LEVEL.md). |
|
| 153 |
+
| SLSA **L3** | 🛣️ **Roadmap** — hardened/isolated builder + non-falsifiable provenance. **Not claimed as achieved today.** |
|
| 154 |
| cosign keyless signed | ✅ |
|
| 155 |
| UDS bundle (`szl-uds-bundle:uds-v0.2.0`) | ✅ Real, deployable mesh bundle (cosign-signed, Rekor-anchored). |
|
| 156 |
| DSSE Khipu receipts | ✅ — ECDSA P-256-SHA256 |
|
|
|
|
| 163 |
|
| 164 |
---
|
| 165 |
|
| 166 |
+
> Not affiliated with Defense Unicorns. SZL mark USPTO Serial 99831122. No production ATO claimed.
|
| 167 |
+
|
| 168 |
<sub>Doctrine v11 LOCKED · 749/14/163 · kernel `c7c0ba17` · SLSA L1 honest · L2 build-attested (container provenance, Sigstore keyless) · L3 / FedRAMP / Iron Bank / CMMC / ATO roadmap · 5 locked-proven + experimental CI-green tier · Λ = Conjecture 1 · Apache-2.0 · DOI [10.5281/zenodo.20434276](https://doi.org/10.5281/zenodo.20434276)</sub>
|
| 169 |
|
| 170 |
Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>
|