chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

Automated backend sync from szl-holdings/a11oy main via hf-sync-backend.
Updated (differed from the Space): Dockerfile, szl_nemo_verify.py
Deleted (gone from the repo + Dockerfile COPY set): (none)

Keeps the Space-built backend (serve.py + the Dockerfile-COPY'd .py
modules) identical to GitHub main so the Space never rebuilds from a
stale backend, new endpoints don't 404 there, and orphaned modules
removed from the repo don't linger in the Space tree.

Dockerfile

@@ -284,7 +284,7 @@ EXPOSE 7860
 # these COPYs the imports fail and the pages/endpoints fall through to the SPA shell.
 # Doctrine v11 LOCKED 749/14/163. Lambda = Conjecture 1 (NOT a theorem). NO external CDN.
 COPY web/formulas.html ./web/formulas.html
-COPY static-vendor/three.min.js ./static-vendor/three.min.js
+COPY static-vendor/three.min.js static-vendor/chart.umd.min.js static-vendor/3d-force-graph.min.js static-vendor/echarts.min.js static-vendor/echarts-gl.min.js static-vendor/globe.gl.min.js static-vendor/cytoscape.min.js static-vendor/d3.min.js static-vendor/katex.min.js static-vendor/katex.min.css static-vendor/dagre.min.js static-vendor/cytoscape-dagre.js static-vendor/d3-sankey.min.js static-vendor/ngraph.graph.min.js static-vendor/ngraph.path.min.js static-vendor/ngraph.forcelayout.min.js static-vendor/panzoom.min.js static-vendor/vivagraph.min.js static-vendor/ngraph.events.umd.js static-vendor/a11oy-operator-widget.js static-vendor/a11oy-operator-widget.css ./static-vendor/
 
 # ADDITIVE (Graph/Viz lane + Perplexity Computer Agent, 2026-06-06): AIR-GAP
 # VENDORING. The operator console (pages/console.html) loads the 7 viz libs +
@@ -294,31 +294,11 @@ COPY static-vendor/three.min.js ./static-vendor/three.min.js
 # text under static-vendor/; the binary globe texture + KaTeX woff2 fonts ship
 # as base64 TEXT in _vendor_blobs.py (decoded by the /vendor/* routes in serve.py)
 # so NO LFS/Xet blob is committed. Doctrine v11 LOCKED. NO external CDN.
-COPY static-vendor/chart.umd.min.js ./static-vendor/chart.umd.min.js
-COPY static-vendor/3d-force-graph.min.js ./static-vendor/3d-force-graph.min.js
-COPY static-vendor/echarts.min.js ./static-vendor/echarts.min.js
-COPY static-vendor/echarts-gl.min.js ./static-vendor/echarts-gl.min.js
-COPY static-vendor/globe.gl.min.js ./static-vendor/globe.gl.min.js
-COPY static-vendor/cytoscape.min.js ./static-vendor/cytoscape.min.js
-COPY static-vendor/d3.min.js ./static-vendor/d3.min.js
-COPY static-vendor/katex.min.js ./static-vendor/katex.min.js
-COPY static-vendor/katex.min.css ./static-vendor/katex.min.css
 # Batch-1 uniqueness rebuild (2026-06-06): additional vendored graph-viz libs
 # (MIT/ISC/BSD; NOTICE updated). Per-file COPY (this Dockerfile uses no COPY . .).
-COPY static-vendor/dagre.min.js ./static-vendor/dagre.min.js
-COPY static-vendor/cytoscape-dagre.js ./static-vendor/cytoscape-dagre.js
-COPY static-vendor/d3-sankey.min.js ./static-vendor/d3-sankey.min.js
-COPY static-vendor/ngraph.graph.min.js ./static-vendor/ngraph.graph.min.js
-COPY static-vendor/ngraph.path.min.js ./static-vendor/ngraph.path.min.js
-COPY static-vendor/ngraph.forcelayout.min.js ./static-vendor/ngraph.forcelayout.min.js
-COPY static-vendor/panzoom.min.js ./static-vendor/panzoom.min.js
 # DEV-WIRE-A (2026-06-09): anvaka graph-stack completion (0-CDN, in-image). BSD-3, anvaka.
-COPY static-vendor/vivagraph.min.js ./static-vendor/vivagraph.min.js
-COPY static-vendor/ngraph.events.umd.js ./static-vendor/ngraph.events.umd.js
 # OPERATOR WIDGET (2026-06-10): a11oy floating governed-operator surface ("Chaski"),
 # self-hosted in-image (0 CDN), served at /vendor/a11oy-operator-widget.js by serve.py.
-COPY static-vendor/a11oy-operator-widget.js ./static-vendor/a11oy-operator-widget.js
-COPY static-vendor/a11oy-operator-widget.css ./static-vendor/a11oy-operator-widget.css
 
 # ADDITIVE (V4 Fleet Panel + /api/health fix, 2026-06-02, Dev2 Inti):
 # explicit per-file COPY (this Dockerfile does not use COPY . .).
@@ -428,16 +408,7 @@ COPY a11oy_react_core.py ./
 # Signed-off-by: Yachay <yachay@szlholdings.ai>
 # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>
 COPY src/a11oy/__init__.py ./src/a11oy/__init__.py
-COPY src/a11oy/formulas/__init__.py ./src/a11oy/formulas/__init__.py
-COPY src/a11oy/formulas/pac_bayes.py ./src/a11oy/formulas/pac_bayes.py
-COPY src/a11oy/formulas/bls_aggregate.py ./src/a11oy/formulas/bls_aggregate.py
-COPY src/a11oy/formulas/welford.py ./src/a11oy/formulas/welford.py
-COPY src/a11oy/formulas/byzantine_quorum.py ./src/a11oy/formulas/byzantine_quorum.py
-COPY src/a11oy/formulas/holevo_bound.py ./src/a11oy/formulas/holevo_bound.py
-COPY src/a11oy/formulas/bloom_filter.py ./src/a11oy/formulas/bloom_filter.py
-COPY src/a11oy/formulas/kalman.py ./src/a11oy/formulas/kalman.py
-COPY src/a11oy/formulas/hnsw_retrieval.py ./src/a11oy/formulas/hnsw_retrieval.py
-COPY src/a11oy/formulas/reidemeister.py ./src/a11oy/formulas/reidemeister.py
+COPY src/a11oy/formulas/__init__.py src/a11oy/formulas/pac_bayes.py src/a11oy/formulas/bls_aggregate.py src/a11oy/formulas/welford.py src/a11oy/formulas/byzantine_quorum.py src/a11oy/formulas/holevo_bound.py src/a11oy/formulas/bloom_filter.py src/a11oy/formulas/kalman.py src/a11oy/formulas/hnsw_retrieval.py src/a11oy/formulas/reidemeister.py src/a11oy/formulas/allodial.py src/a11oy/formulas/allodial_gate.py src/a11oy/formulas/entanglement.py ./src/a11oy/formulas/
 # FIX (formula/* 404 repair): a11oy_formula_endpoints.py imports a11oy.formulas.{allodial,
 # allodial_gate, entanglement} alongside the formulas above, but these three were NEVER
 # COPY'd into the image. The package import therefore raised at boot, register() returned
@@ -445,12 +416,7 @@ COPY src/a11oy/formulas/reidemeister.py ./src/a11oy/formulas/reidemeister.py
 # bloom, kalman, formulas/index, …) 404'd through the Node proxy. Per-file COPY (this
 # Dockerfile never uses `COPY . .`). Mirrored byte-identical to the HF Space (hf-sync
 # APP_FILES lockstep). EXPERIMENTAL frontier gates — Λ = Conjecture 1 (never a theorem).
-COPY src/a11oy/formulas/allodial.py ./src/a11oy/formulas/allodial.py
-COPY src/a11oy/formulas/allodial_gate.py ./src/a11oy/formulas/allodial_gate.py
-COPY src/a11oy/formulas/entanglement.py ./src/a11oy/formulas/entanglement.py
-COPY src/a11oy/harvest/__init__.py ./src/a11oy/harvest/__init__.py
-COPY src/a11oy/harvest/wasted_energy_harvest.py ./src/a11oy/harvest/wasted_energy_harvest.py
-COPY src/a11oy/harvest/harvest_budget.py ./src/a11oy/harvest/harvest_budget.py
+COPY src/a11oy/harvest/__init__.py src/a11oy/harvest/wasted_energy_harvest.py src/a11oy/harvest/harvest_budget.py ./src/a11oy/harvest/
 # ADDITIVE (Formulas SECTION page — closeout): serve.py imports a11oy_formulas_page
 # and calls .register(app) BEFORE the SPA catch-all, mounting GET /formulas/wired
 # (premium Inca-palette list of every live formula + thesis citation + Lean permalink

szl_nemo_verify.py

@@ -0,0 +1,116 @@
+#!/usr/bin/env python3
+# SPDX-License-Identifier: Apache-2.0
+# © 2026 Lutar, Stephen P. — SZL Holdings · ORCID 0009-0001-0110-4173 · Doctrine v11/v12
+# Authored by the NEMOTRON SIGNED-TRAJECTORY build team. Co-Authored-By: Perplexity Computer Agent.
+"""
+szl_nemo_verify — standalone verifier for the SZL-Nemo signed-trajectory corpus.
+
+Anyone can run this against a downloaded corpus JSONL to independently check:
+  1. CONTENT INTEGRITY — recompute each step's sha256 step_hash and compare.
+  2. SIGNATURE  — if a step carries a DSSE signature, verify it against the
+     published SZLHOLDINGS cosign public key (cosign.pub).
+
+USAGE:
+    python szl_nemo_verify.py path/to/corpus.jsonl
+    cat corpus.jsonl | python szl_nemo_verify.py -
+
+EXIT CODE: 0 if every present signature verifies AND every hash matches; else 1.
+
+HONEST: when the corpus was emitted in an environment without the private signing
+key, the receipts are UNSIGNED (signatures: []) — this verifier reports that
+transparently and does NOT treat "unsigned" as a pass of the signature check. The
+hash check still applies and proves content integrity / tamper-evidence.
+
+Prefers the shipped szl_trajectory_sign + szl_dsse modules when importable (full
+DSSE verification). Falls back to a self-contained hash-only check if they are not
+on the path, so the script still runs standalone. NO network required.
+"""
+from __future__ import annotations
+
+import hashlib
+import json
+import sys
+
+
+def _canon(obj) -> bytes:
+    return json.dumps(obj, sort_keys=True, separators=(",", ":"),
+                      ensure_ascii=False).encode("utf-8")
+
+
+def _step_hash(action, observation, restraint_verdict: str) -> str:
+    body = _canon({"action": action, "observation": observation,
+                   "restraint_verdict": restraint_verdict})
+    return "sha256:" + hashlib.sha256(body).hexdigest()
+
+
+def _verify_full(text: str):
+    """Full verification using the shipped modules (DSSE + hash)."""
+    import szl_trajectory_sign as sts  # type: ignore
+    return sts.verify_jsonl(text)
+
+
+def _verify_hash_only(text: str):
+    """Self-contained hash-only fallback (no DSSE module on path)."""
+    results = []
+    for ln in text.splitlines():
+        ln = ln.strip()
+        if not ln:
+            continue
+        try:
+            d = json.loads(ln)
+        except Exception as exc:
+            results.append({"parse_error": str(exc)})
+            continue
+        recomputed = _step_hash(d.get("action"), d.get("observation", ""),
+                                d.get("restraint_verdict", "ALLOW"))
+        env = d.get("signature") or {}
+        sigs = env.get("signatures") or []
+        results.append({
+            "trajectory_id": d.get("trajectory_id"),
+            "step": d.get("step"),
+            "hash_ok": recomputed == d.get("step_hash"),
+            "signed": bool(sigs),
+            "sig_ok": False,  # cannot DSSE-verify without the module
+        })
+    total = len(results)
+    hash_ok = sum(1 for r in results if r.get("hash_ok"))
+    signed = sum(1 for r in results if r.get("signed"))
+    return {
+        "total_steps": total, "hash_ok": hash_ok, "signed": signed, "sig_ok": 0,
+        "all_hash_ok": hash_ok == total and total > 0,
+        "all_sig_ok": False, "results": results,
+        "note": "hash-only fallback (szl_dsse not importable; signatures not checked)",
+    }
+
+
+def main(argv) -> int:
+    if len(argv) < 2:
+        print(__doc__)
+        return 2
+    src = argv[1]
+    text = sys.stdin.read() if src == "-" else open(src, encoding="utf-8").read()
+    try:
+        res = _verify_full(text)
+        mode = "full (DSSE + hash)"
+    except Exception:
+        res = _verify_hash_only(text)
+        mode = "hash-only fallback"
+    summary = {k: res[k] for k in ("total_steps", "hash_ok", "signed", "sig_ok",
+                                   "all_hash_ok", "all_sig_ok") if k in res}
+    summary["verify_mode"] = mode
+    print(json.dumps(summary, indent=2))
+    # PASS iff every hash matches AND (no signatures present OR all verify).
+    hashes_ok = res.get("all_hash_ok", False)
+    sig_present = res.get("signed", 0) > 0
+    sigs_ok = res.get("sig_ok", 0) == res.get("signed", 0)
+    ok = hashes_ok and (not sig_present or sigs_ok)
+    print("RESULT:", "PASS" if ok else "FAIL")
+    if sig_present and not sigs_ok:
+        print("  (signatures present but not all verified)")
+    if not sig_present:
+        print("  (no signatures present — UNSIGNED corpus; hash integrity only)")
+    return 0 if ok else 1
+
+
+if __name__ == "__main__":
+    sys.exit(main(sys.argv))