betterwithage Perplexity Computer Agent commited on
Commit
11aa37f
·
verified ·
1 Parent(s): 0ed32ad

docs(slsa): sync Space card with GitHub README (SLSA L1 honest; L2 roadmap, not yet claimed)

Browse files

Automated README sync from szl-holdings/a11oy main via hf-sync.

Signed-off-by: Yachay <yachay@szlholdings.ai>
Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>

Files changed (1) hide show
  1. README.md +8 -15
README.md CHANGED
@@ -20,14 +20,6 @@ ecosystem-stage: "operational"
20
  <!-- HF Space front-matter is REQUIRED (sdk: docker). Injected by hf-sync
21
  so the Space builds the Dockerfile. Do not remove. -->
22
 
23
- # a11oy
24
-
25
- **Governed autonomy with a checkable receipt for every decision.**
26
-
27
- [![Λ Conjecture 1](https://img.shields.io/badge/Λ-Conjecture_1_(conditional_Theorem_U)-B79BD6?style=flat-square)](https://github.com/szl-holdings/lutar-lean/blob/main/BOUNTY.md) [![SLSA L1 honest · L2 build-attested · L3 roadmap](https://img.shields.io/badge/SLSA-L1%20honest%20%C2%B7%20L2%20build--attested%20%C2%B7%20L3%20roadmap-c9b787?style=flat-square)](https://slsa.dev/spec/v1.0/levels) [![Doctrine v11 LOCKED](https://img.shields.io/badge/Doctrine-v11_LOCKED-3b82f6?style=flat-square)](https://github.com/szl-holdings/.github/tree/main/doctrine)
28
-
29
- ---
30
-
31
  ## Live
32
 
33
  **HF Space (one-click, no login):** [![Open in Spaces](https://img.shields.io/badge/%F0%9F%A4%97%20Open%20in%20Spaces-a11oy-FF9D00?style=flat-square)](https://huggingface.co/spaces/SZLHOLDINGS/a11oy)
@@ -101,12 +93,11 @@ See [`docs/GOVERNED_POST_DETERMINISM.md`](https://github.com/szl-holdings/platfo
101
  curl -s https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest | jq .kernel_commit
102
  # => "c7c0ba17"
103
 
104
- # 2. Verify the cosign keyless signature + build-provenance attestation on the
105
- # published image (SLSA L1 honest · L2 build-attested: container provenance via
106
- # attest-build-provenance, Sigstore keyless, Rekor-anchored). SLSA L3 is roadmap —
107
- # see .compliance/SLSA_LEVEL.md.
108
- cosign verify-attestation ghcr.io/szl-holdings/a11oy:uds-v0.2.0 \
109
- --type slsaprovenance \
110
  --certificate-identity-regexp="^https://github.com/szl-holdings/" \
111
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
112
  # Public Rekor entry for the image signature: log index 1710578865
@@ -159,7 +150,7 @@ docker run --rm -p 7860:7860 ghcr.io/szl-holdings/a11oy:uds-v0.2.0
159
  |---|---|
160
  | Live HF Space (HTTP 200) | ✅ |
161
  | SLSA **L1 honest · L2 build-attested** | ✅ — cosign keyless-signed image + container build-provenance attestation (attest-build-provenance, Sigstore keyless), verifiable via `cosign verify-attestation`; Rekor [1710578865](https://search.sigstore.dev/?logIndex=1710578865). See [.compliance/SLSA_LEVEL.md](.compliance/SLSA_LEVEL.md). |
162
- | SLSA **L3** | 🛣️ **Roadmap** — verified provenance under isolated builders + hermetic builds. **Not claimed today.** |
163
  | cosign keyless signed | ✅ |
164
  | UDS bundle (`szl-uds-bundle:uds-v0.2.0`) | ✅ Real, deployable mesh bundle (cosign-signed, Rekor-anchored). |
165
  | DSSE Khipu receipts | ✅ — ECDSA P-256-SHA256 |
@@ -172,6 +163,8 @@ docker run --rm -p 7860:7860 ghcr.io/szl-holdings/a11oy:uds-v0.2.0
172
 
173
  ---
174
 
 
 
175
  <sub>Doctrine v11 LOCKED · 749/14/163 · kernel `c7c0ba17` · SLSA L1 honest · L2 build-attested (container provenance, Sigstore keyless) · L3 / FedRAMP / Iron Bank / CMMC / ATO roadmap · 5 locked-proven + experimental CI-green tier · Λ = Conjecture 1 · Apache-2.0 · DOI [10.5281/zenodo.20434276](https://doi.org/10.5281/zenodo.20434276)</sub>
176
 
177
  Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>
 
20
  <!-- HF Space front-matter is REQUIRED (sdk: docker). Injected by hf-sync
21
  so the Space builds the Dockerfile. Do not remove. -->
22
 
 
 
 
 
 
 
 
 
23
  ## Live
24
 
25
  **HF Space (one-click, no login):** [![Open in Spaces](https://img.shields.io/badge/%F0%9F%A4%97%20Open%20in%20Spaces-a11oy-FF9D00?style=flat-square)](https://huggingface.co/spaces/SZLHOLDINGS/a11oy)
 
93
  curl -s https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest | jq .kernel_commit
94
  # => "c7c0ba17"
95
 
96
+ # 2. Verify the cosign keyless signature + build-provenance attestation on the image.
97
+ # SLSA L1 honest · L2 build-attested: container provenance via
98
+ # attest-build-provenance (Sigstore keyless, Fulcio + Rekor). Verify with
99
+ # `cosign verify-attestation`. SLSA L3 is roadmap — see .compliance/SLSA_LEVEL.md.
100
+ cosign verify ghcr.io/szl-holdings/a11oy:uds-v0.2.0 \
 
101
  --certificate-identity-regexp="^https://github.com/szl-holdings/" \
102
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
103
  # Public Rekor entry for the image signature: log index 1710578865
 
150
  |---|---|
151
  | Live HF Space (HTTP 200) | ✅ |
152
  | SLSA **L1 honest · L2 build-attested** | ✅ — cosign keyless-signed image + container build-provenance attestation (attest-build-provenance, Sigstore keyless), verifiable via `cosign verify-attestation`; Rekor [1710578865](https://search.sigstore.dev/?logIndex=1710578865). See [.compliance/SLSA_LEVEL.md](.compliance/SLSA_LEVEL.md). |
153
+ | SLSA **L3** | 🛣️ **Roadmap** — hardened/isolated builder + non-falsifiable provenance. **Not claimed as achieved today.** |
154
  | cosign keyless signed | ✅ |
155
  | UDS bundle (`szl-uds-bundle:uds-v0.2.0`) | ✅ Real, deployable mesh bundle (cosign-signed, Rekor-anchored). |
156
  | DSSE Khipu receipts | ✅ — ECDSA P-256-SHA256 |
 
163
 
164
  ---
165
 
166
+ > Not affiliated with Defense Unicorns. SZL mark USPTO Serial 99831122. No production ATO claimed.
167
+
168
  <sub>Doctrine v11 LOCKED · 749/14/163 · kernel `c7c0ba17` · SLSA L1 honest · L2 build-attested (container provenance, Sigstore keyless) · L3 / FedRAMP / Iron Bank / CMMC / ATO roadmap · 5 locked-proven + experimental CI-green tier · Λ = Conjecture 1 · Apache-2.0 · DOI [10.5281/zenodo.20434276](https://doi.org/10.5281/zenodo.20434276)</sub>
169
 
170
  Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>