Spaces:

SZLHOLDINGS
/

a11oy

Running

App Files Files Community

betterwithage Claude Opus 4.7 commited on Aug 11

Commit

275232d

verified ·

1 Parent(s): 568386f

deploy(hf): sync szl-holdings/a11oy@cab15b4659c3a99a0178dd79874e50c8402423f8 derived COPY set

Browse files

Reusable Dockerfile-COPY-derived deploy from szl-holdings/a11oy cab15b4659c3a99a0178dd79874e50c8402423f8.
Files: 1186 Pruned: 0
Derived from Dockerfile COPY sources (NO hand-maintained allowlist).

Signed-off-by: SZL Holdings <noreply@szlholdings.ai>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Files changed (11) hide show

a11oy_landing.html +148 -148
govern_showcase.html +0 -0
pages/assurance.html +94 -93
pages/chaski.html +17 -16
pages/console.html +0 -0
pages/fabric.html +77 -76
pages/landing.html +1 -1
pages/pinn-console.html +54 -53
pages/pricing.html +3 -3
pages/substrate.html +20 -20
pages/verify.html +98 -97

a11oy_landing.html CHANGED Viewed

@@ -1,45 +1,45 @@
-<!doctype html>
 <!-- SPDX-License-Identifier: Apache-2.0
      (c) 2026 Lutar, Stephen P. - SZL Holdings - ORCID 0009-0001-0110-4173 -->
 <!--
-  a11oy — front door (scroll narrative). Served at the Space root "/" by serve.py.
   SOVEREIGN: Three.js r160 (MIT) vendored in-image at /hero/vendor3d. 0 runtime CDN.
   Fonts (Space Grotesk / JetBrains Mono) vendored at /vendor/fonts/*.woff2.
-  HONESTY DOCTRINE v11 LOCKED — every figure is fetched live and labelled honestly
-  (REACHABLE / MEASURED / MODELED / SNAPSHOT / UNAVAILABLE). Nothing is fabricated. Λ = Conjecture 1 (advisory, NOT a theorem,
   never 1.0, NEVER green). Locked-proven Lean kernel = EXACTLY 8 {F1,F4,F7,F11,F12,F18,F19,F22}.
-  The genome registry (144 entries) is grouped into 4 honesty tiers — a different, larger set.
   Receipt chain integrity and DSSE signing are separate. Signing is claimed only when persistent signer evidence is ACTIVE and verification passes. Read-only routes never mint receipts.
-  DOM/sections owned by Dev 1; the #hero-canvas + /landing/app.js boot is owned by Dev 2 —
   preserved verbatim below. KANCHAY palette. No purple. a-11-oy.com remains the
   canonical governed-inference product; a11oy.net is a separately attested estate cockpit.
-  © Stephen P. Lutar Jr. (ORCID 0009-0001-0110-4173) · Apache-2.0
 -->
 <html lang="en">
 <head>
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
-<title>a11oy — Governed Inference · AI that proves its receipt state and refuses to lie</title>
-<meta name="description" content="Governed Inference: AI that exposes receipt integrity, signer state, evidence, and refusal behavior. State-changing actions produce hash-chained receipts; DSSE signing is claimed only when persistent signer evidence is active and independently verified." />
 <link rel="canonical" href="https://a-11-oy.com/" />
 <meta property="og:type" content="website" />
 <meta property="og:url" content="https://a-11-oy.com/" />
-<meta property="og:title" content="a11oy — Governed Inference" />
 <meta property="og:description" content="AI that exposes receipt integrity and signer state, shows its evidence, and refuses when it cannot support an answer." />
 <meta property="og:image" content="https://a-11-oy.com/social-preview-v5.png" />
 <meta property="og:image:type" content="image/png" />
 <meta property="og:image:width" content="1280" />
 <meta property="og:image:height" content="640" />
-<meta property="og:image:alt" content="a11oy Governed Inference — evidence-labelled ecosystem and Anatomy v5" />
 <meta name="twitter:card" content="summary_large_image" />
 <meta name="twitter:image" content="https://a-11-oy.com/social-preview-v5.png" />
-<meta name="twitter:image:alt" content="a11oy Governed Inference — evidence-labelled ecosystem and Anatomy v5" />
 <link rel="icon" type="image/svg+xml" href="/social-preview-v5.svg" />
 <script type="application/ld+json">
 {
   "@context": "https://schema.org",
   "@type": "SoftwareApplication",
-  "name": "a11oy Governed Inference",
   "url": "https://a-11-oy.com/",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "Web",
@@ -61,21 +61,21 @@
     font-display:swap;src:url('/vendor/fonts/JetBrainsMono.woff2') format('woff2')}
   :root{
-    /* KANCHAY palette (canonical, org-wide — RECONCILE.md). Purple is BANNED. */
     --void:#080c14;            /* deep near-black ground */
     --deep:#0a1019;            /* raised ground */
     --surface:#0e1626;         /* card surface */
     --border:#1c2942;          /* hairline */
-    --proof:#3af4c8;           /* proof teal — the one bright accent */
     --proof-soft:rgba(58,244,200,0.12);
     --proof-dim:rgba(58,244,200,0.06);
-    --lattice:#5b8dee;         /* lattice blue — secondary (NOT purple) */
     --lattice-soft:rgba(91,141,238,0.12);
     --gold:#d7b96b;            /* warm accent / conjecture-adjacent */
     --ink:#eef4fb;             /* near-white heading */
-    --sub:#aebccf;             /* body copy — WCAG AA on --void */
     --ghost:#65788f;           /* muted labels */
-    --gray:#7d8aa0;            /* CONJECTURE / advisory — never green */
     --ok:#3af4c8; --warn:#d7b96b; --down:#e8746e;
     --r:16px; --maxw:1180px;
     --head:'Space Grotesk',-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;
@@ -137,7 +137,7 @@
   .btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;padding:11px 21px;border-radius:9px;
     min-height:44px;max-width:100%;font-weight:600;font-size:14px;border:1px solid transparent;cursor:pointer;
     transition:all .18s cubic-bezier(0.16,1,0.3,1);white-space:nowrap;letter-spacing:.01em}
-  /* restrained "holographic glass" buttons — luminous hairline + soft fill, never a neon block */
   .btn-primary{background:linear-gradient(180deg,rgba(58,244,200,0.13),rgba(58,244,200,0.04));
     color:var(--proof);border-color:rgba(58,244,200,0.42);
     box-shadow:inset 0 1px 0 rgba(58,244,200,0.10),0 1px 14px -8px rgba(58,244,200,0.45)}
@@ -153,7 +153,7 @@
     border-color:rgba(91,141,238,0.6);color:#c5d8ff;
     box-shadow:0 6px 24px -12px rgba(91,141,238,0.32);transform:translateY(-1px)}
-  /* ---- hero (canvas owned by Dev 2 — markup preserved) ---- */
   .hero{position:relative;min-height:92vh;display:flex;align-items:center;overflow:hidden}
   #hero-canvas{position:absolute;inset:0;width:100%;height:100%;z-index:0;display:block}
   .hero-scrim{position:absolute;inset:0;z-index:1;pointer-events:none;
@@ -313,7 +313,7 @@
   .muted{color:var(--ghost)}
   .skel{color:var(--ghost);font-family:var(--mono)}
-  /* ecosystem atlas — public estate snapshot, never implied live until API reads */
   .estate-grid{display:grid;grid-template-columns:repeat(6,1fr);gap:10px;margin:24px 0}
   .estate-cell{border:1px solid var(--border);border-radius:13px;padding:15px;
     background:linear-gradient(155deg,rgba(17,30,50,.72),rgba(8,16,29,.88))}
@@ -387,7 +387,7 @@
         <circle cx="16" cy="16" r="5" fill="url(#lg)"/>
         <path d="M16 3v8M16 21v8M3 16h8M21 16h8" stroke="url(#lg)" stroke-width="1.6" opacity=".7"/>
       </svg>
-      <span>a11oy<span class="sub" style="margin-left:9px">Governed Inference</span></span>
     </a>
     <nav>
       <a class="hide-sm" href="#surfaces">Surfaces</a>
@@ -398,20 +398,20 @@
       <a class="hide-sm" href="/console#arena">Eval arena</a>
       <a class="hide-sm" href="/observability">Observability</a>
       <a href="/trust">Evidence</a>
-      <a class="btn btn-primary" href="/console" aria-label="Open the command center"><span class="nav-cta-full">Open the command center</span><span class="nav-cta-short" aria-hidden="true">Command center</span> →</a>
     </nav>
   </div>
 </header>
 <main id="main">
-<!-- ====================== (1) HERO — canvas + boot owned by Dev 2 ====================== -->
 <section class="hero">
   <canvas id="hero-canvas"></canvas>
   <div class="hero-scrim" aria-hidden="true"></div>
   <div class="hero-fallback" id="hero-fallback"></div>
   <div class="wrap">
     <div class="hero-inner">
-      <span class="eyebrow"><span class="dot"></span> Governed Inference · verifiable by anyone, offline</span>
       <h1 class="title">AI that <span class="grad">proves its receipt state</span><br>and refuses to lie.</h1>
       <p class="lede">Every governed state change produces a hash-chained receipt you can inspect
         <b>offline, in your own browser</b>. The interface says <b>SIGNED</b> only when persistent
@@ -419,26 +419,26 @@
         UNSIGNED, DISABLED, or UNAVAILABLE. When the model is not sure, it returns an honest
         <b>BLOCKED</b> instead of a confident guess.</p>
       <div class="cta-row">
-        <a class="btn btn-primary" href="/console">Open the command center →</a>
         <a class="btn btn-lattice" href="/ecosystem">Explore the ecosystem</a>
         <a class="btn btn-ghost" href="/verify">Verify a receipt offline</a>
       </div>
       <div class="hero-stats">
         <div class="stat">
-          <div class="k proof" id="hs-receipts">—</div>
-          <div class="l">Receipts in the chain <span id="hs-receipts-chip"></span><br><span class="stat-note">ledger depth — a mechanism check, not customer traction</span></div>
         </div>
         <div class="stat">
           <div class="k gray" id="hs-lambda">Conjecture 1</div>
-          <div class="l">Λ trust gate · advisory bound</div>
         </div>
         <div class="stat">
           <div class="k" id="hs-proven">8</div>
           <div class="l">Locked Lean-proven theorems<br><span class="stat-note">a proof of rigor, not a traction number</span></div>
         </div>
         <div class="stat" id="overclaim-counter">
-          <div class="k gray" id="hs-overclaims">—</div>
-          <div class="l">Overclaims caught by CI <span id="hs-overclaims-chip"><span class="chip gray" style="margin-left:6px"><span class="dot"></span>SAMPLE · SNAPSHOT 2026-07-25 · SOURCE UNAVAILABLE</span></span><br><span class="stat-note">Observed correction time (<span id="hs-overclaim-sample">source unavailable</span>): <span id="hs-overclaim-time">—</span> · <a href="https://github.com/szl-holdings/platform/blob/main/docs/OVERCLAIM_LEDGER.md">open ledger</a></span></div>
         </div>
       </div>
     </div>
@@ -448,20 +448,20 @@
 <!-- ====================== (1b) HONESTY STRIP ====================== -->
 <section class="honesty" id="honesty">
   <div class="wrap">
-    <p class="kick">The honesty doctrine · v11 LOCKED</p>
-    <h2 style="font-size:clamp(1.5rem,3vw,2.1rem);margin:0 0 10px">Every figure on this page is labelled — or it isn't shown.</h2>
     <p class="intro" style="margin:0">We grade what we say. If a claim isn't MEASURED live this session, we tell you exactly what it is instead of dressing it up as proof.</p>
     <div class="legend">
       <div class="leg measured"><div class="lt">MEASURED</div><p>Read live from a running endpoint this session — receipt count, advisory Λ posture, and chain depth. Shown with a live chip; a dead probe degrades to an honest offline chip. Signer state is disclosed separately only where an actual signer-status read is present.</p></div>
-      <div class="leg reported"><div class="lt">REPORTED</div><p>Stated by a source we name — the locked-8 Lean kernel, the 144-entry genome registry — cited here, not independently re-derived on this page.</p></div>
-      <div class="leg unknown"><div class="lt">UNKNOWN</div><p>We don't have it right now. Rendered honestly as N/A · UNAVAILABLE · BLOCKED — never a confident guess and never a fabricated number.</p></div>
-      <div class="leg conjecture"><div class="lt">CONJECTURE</div><p>Advisory and unproven. Rendered in gray, never green, never a theorem. Λ lives here.</p></div>
     </div>
     <div class="lambda-line">
-      <span class="chip gray"><span class="dot"></span>Λ = Conjecture 1</span>
-      <span class="muted">an advisory trust bound — never proven, never 1.0, and never rendered green. Theorem&nbsp;U is the proven <i>conditional</i> alternative; the unconditional claim is machine-checked false as stated.</span>
     </div>
-    <p class="free-energy"><b style="color:var(--ink)">No free energy.</b> Joules are MEASURED only from a live exporter delta; with no live meter we label the reading SAMPLE or UNAVAILABLE and fabricate nothing. a11oy never claims over-unity, perpetual output, or free-energy efficiency — only what a real meter reports.</p>
   </div>
 </section>
@@ -471,10 +471,10 @@
   <h2 id="estate-pulse-title">What is actually reachable right now.</h2>
   <p class="intro">Four read-only checks connect the product story to the running system. REACHABLE means the source answered this browser session; evidence mode (LIVE, SNAPSHOT, MODELED, or UNAVAILABLE) remains separate and never certifies model truth.</p>
   <div class="pulse-grid" aria-live="polite">
-    <article class="pulse-card"><div class="pulse-head"><h3>Platform health</h3><span class="data-state" id="pulse-health-state">CHECKING</span></div><p id="pulse-health-detail">Checking the deployed runtime.</p><a href="/healthz">Source /healthz →</a></article>
-    <article class="pulse-card"><div class="pulse-head"><h3>Tab contract</h3><span class="data-state" id="pulse-contract-state">CHECKING</span></div><p id="pulse-contract-detail">Checking the published tab inventory.</p><a href="/api/a11oy/v1/readiness/tab-matrix">Source tab matrix →</a></article>
-    <article class="pulse-card"><div class="pulse-head"><h3>Receipt ledger</h3><span class="data-state" id="pulse-ledger-state">CHECKING</span></div><p id="pulse-ledger-detail">Checking the append-only evidence read.</p><a href="/api/a11oy/v1/ledger">Source receipt ledger →</a></article>
-    <article class="pulse-card"><div class="pulse-head"><h3>Sovereign mesh</h3><span class="data-state" id="pulse-mesh-state">CHECKING</span></div><p id="pulse-mesh-detail">Checking the current mesh posture.</p><a href="/api/a11oy/v1/mesh/state">Source mesh state →</a></article>
   </div>
   <p class="pulse-time" id="pulse-checked">Checks have not completed.</p>
 </section>
@@ -483,17 +483,17 @@
 <section class="band wrap" id="surfaces">
   <p class="kick">Explore the estate</p>
   <h2>Nine surfaces. One governed core.</h2>
-  <p class="intro">Every surface reads the same live endpoints and the same honesty doctrine. Jump straight in — the full working console is one click away.</p>
   <div class="grid g3">
-    <a class="card surface-card" href="/console"><div class="ic">⌘</div><h3>Command Center</h3><p>The working console — receipt integrity, separately disclosed signer state, the self-doubt gate, the genome registry, and live organ vitals.</p><div class="golinks"><span class="go">Open /console →</span></div></a>
-    <a class="card surface-card" href="/superpowers"><div class="ic">✦</div><h3>Five Superpowers</h3><p>The five things governed inference does that ungoverned models can't — each linked to the live check that backs it.</p><div class="golinks"><span class="go">Open /superpowers →</span></div></a>
-    <a class="card surface-card" href="/console#arena"><div class="ic">⚔</div><h3>Adversarial assurance</h3><p>Run governed evaluations, inspect refusals, and trace every verdict to its evidence. The archived Warhacker route now resolves here.</p><div class="golinks"><span class="go">Open the eval arena →</span></div></a>
-    <a class="card surface-card" href="/observability"><div class="ic">◎</div><h3>Observability</h3><p>OpenTelemetry-style traces and health summaries across the organs — live, read-only, no sign-on-GET.</p><div class="golinks"><span class="go">Open /observability →</span></div></a>
-    <a class="card surface-card" href="/wires"><div class="ic">〜</div><h3>Wires</h3><p>The live wiring between organs — which probe feeds which surface, and whether it is up right now.</p><div class="golinks"><span class="go">Open /wires →</span></div></a>
-    <a class="card surface-card" href="/console#mesh"><div class="ic">◇</div><h3>Mesh</h3><p>The BFT-quorum mesh graph — 3-of-4 consensus, live state read from <span class="mono">/api/a11oy/v1/mesh/state</span>.</p><div class="golinks"><span class="go">Open the mesh →</span></div></a>
-    <a class="card surface-card" href="/formulas"><div class="ic">Σ</div><h3>Formulas</h3><p>The PURIQ agentic formula genome — live-recomputed values, each carrying its own Khipu receipt.</p><div class="golinks"><span class="go">Open /formulas →</span></div></a>
-    <a class="card surface-card" href="/trust"><div class="ic">✓</div><h3>Evidence</h3><p>The trust center: the locked-8 with truthful Lean refs, Theorem&nbsp;U vs Conjecture&nbsp;1, the receipt ledger, offline verify.</p><div class="golinks"><span class="go">Open the evidence →</span></div></a>
-    <a class="card surface-card" href="/static/viz/router/"><div class="ic mono">⇄</div><h3>LLM Router</h3><p>The LLM-Router Live scene — per-tier routing stats polled every second, otherwise an honest DEMO MODE.</p><div class="golinks"><span class="go">Open the router →</span></div></a>
   </div>
 </section>
@@ -502,131 +502,131 @@
 <!-- ====================== (2) THE THESIS ====================== -->
 <section class="band wrap" id="thesis">
   <p class="kick">The thesis</p>
-  <h2>Governed AI you can prove — not AI you're asked to trust.</h2>
   <p class="intro">Most AI asks for trust. a11oy earns it the way auditable systems do: every
     governed state change is recorded in a hash-chained receipt, while signer state and signature
     verification are disclosed separately and never inferred; a trust gate can only tighten an
     answer, never wave it through; and the kernel rests on machine-checked theorems you can read.
-    The honest part is the product — when a claim isn't proven, we label it, and you can open the
     check yourself.</p>
   <div class="pillars">
     <div class="pillar">
-      <div class="pk">01 · RECEIPTS</div>
       <h3>It proves receipt integrity and signer state</h3>
       <p>Every governed state change enters a SHA3-256 hash chain. DSSE / ECDSA-P256 is a separate
         cryptographic state and is labeled SIGNED only when persistent signer evidence is active
         and independent verification passes. Verify the disclosed state in your own browser.</p>
     </div>
     <div class="pillar">
-      <div class="pk">02 · REFUSES</div>
       <h3>It refuses when unsure</h3>
       <p>A self-doubt gate measures uncertainty against a bound and returns a truthful
         <b>BLOCKED</b> rather than a confident wrong answer. A refusal beats a fabrication.</p>
     </div>
     <div class="pillar">
-      <div class="pk">03 · PROVES</div>
       <h3>It is formally backed</h3>
-      <p>8 locked, axiom-free Lean&nbsp;4 theorems back the kernel. The Λ trust gate is
-        <b>Conjecture&nbsp;1</b> — an advisory bound, never dressed up as a theorem.</p>
     </div>
   </div>
 </section>
 <div class="wrap"><div class="divider"></div></div>
-<!-- ====================== (3) THE PROOF — 4 honest tiers (live) ====================== -->
 <section class="band wrap" id="proof">
-  <p class="kick">The proof · four honest tiers <span id="proof-src"></span></p>
   <h2>Every claim carries exactly one honesty tier.</h2>
-  <p class="intro">The 144-entry formula genome is graded across four tiers — and the rarest,
     strongest tiers are the smallest on purpose. Counts below are read live from the genome
     registry. A conjecture is shown in gray and is <b>never</b> rendered as proven.</p>
   <div class="grid g4">
     <div class="tier locked">
-      <div class="tnum" id="pt-locked">—</div>
       <div class="tname">LOCKED-PROVEN</div>
-      <p>Truthful labels for what each Lean obligation actually proves — e.g. F18 = Reed-Solomon
         parity (erasure tolerance), not "DSSE seal". Conservative and defensible.</p>
     </div>
     <div class="tier semantic">
-      <div class="tnum" id="pt-semantic">—</div>
       <div class="tname">SEMANTIC-VERIFIED</div>
-      <p>Sorry-free real theorems outside the frozen locked-8: the Λ min≤Λ≤max bounds, Theorem U
         (conditional uniqueness), DSSE verifiability. Where the real trust math lives.</p>
     </div>
     <div class="tier evidence">
-      <div class="tnum" id="pt-evidence">—</div>
       <div class="tname">EVIDENCE-BACKED</div>
       <p>Runtime / algorithmic rules backed by real code and live endpoints, with no proof claim
-        attached. Honest operational tier — not dressed up as proven.</p>
     </div>
     <div class="tier conjecture">
-      <div class="tnum" id="pt-conjecture">—</div>
-      <div class="tname">CONJECTURE · ADVISORY</div>
-      <p>Λ unconditional uniqueness = Conjecture&nbsp;1 (machine-checked false as stated). Gray,
         advisory, <b>never green</b>. Theorem U is the proven conditional alternative.</p>
     </div>
   </div>
   <div class="cta-row" style="margin-top:34px">
-    <a class="btn btn-primary" href="https://szlholdings-immune.hf.space" target="_blank" rel="noopener">See it run live · IMMUNE demo →</a>
-    <a class="btn btn-ghost" href="/console#genome">Browse the genome →</a>
-    <a class="btn btn-ghost" href="/trust">Read the trust center →</a>
   </div>
-  <p class="intro" style="margin-top:16px;opacity:.85">IMMUNE is a live, interactive demo of the same thesis you can drive yourself — a
     real hash-chained receipt ledger, a live Sigstore&nbsp;Rekor transparency anchor, and honest
     <b>BLOCKED</b> / <b>UNAVAILABLE</b> states instead of confident guesses. Nothing on that page is fabricated.</p>
 </section>
-<!-- ====================== (4) THE VERTICALS — live /lambda/org ====================== -->
 <section class="band" id="verticals" style="background:linear-gradient(180deg,rgba(10,16,30,0),rgba(10,16,30,0.55))">
   <div class="wrap">
-    <p class="kick">The verticals · live Λ posture <span id="verticals-src"></span></p>
     <h2>One governed core. Five places it earns its keep.</h2>
-    <p class="intro">The same governed inference core runs across five verticals. Each card reads
-      its live advisory Λ posture from the org-wide 13-axis gate (canonical floor 0.90). Λ is
-      Conjecture&nbsp;1 — advisory, never a pass/fail oracle.</p>
     <div class="grid g3">
       <div class="vcard">
         <div class="pmark">a11</div>
         <h3>a11oy</h3>
-        <div class="tag">Core · governed inference</div>
-        <p>The platform itself — command center, receipt integrity, disclosed signer state, and the self-doubt gate.</p>
-        <div class="lam"><span class="val" id="v-core">—</span><span class="cap">advisory Λ</span><span id="v-core-chip"></span></div>
       </div>
       <div class="vcard">
         <div class="pmark">kil</div>
         <h3>killinchu</h3>
-        <div class="tag">Defense · counter-UAS</div>
         <p>Auditable interdiction: receipt per decision, separately disclosed signing state, and 3-of-4 BFT consensus.</p>
-        <div class="lam"><span class="val" id="v-defense">—</span><span class="cap">advisory Λ</span><span id="v-defense-chip"></span></div>
       </div>
       <div class="vcard">
         <div class="pmark">ins</div>
         <h3>Insurance</h3>
-        <div class="tag">David Leads · lead scoring</div>
         <p>Faithful David Leads scorer behind an F12 non-compensatory consent gate.</p>
-        <div class="lam"><span class="val" id="v-insurance">—</span><span class="cap">advisory Λ</span><span id="v-insurance-chip"></span></div>
       </div>
       <div class="vcard">
         <div class="pmark">fin</div>
         <h3>Finance</h3>
         <div class="tag">Governed decisioning</div>
         <p>Decision paths that must be reconstructable, receipt-bound, and conditionally signed only when verified signer evidence is active.</p>
-        <div class="lam"><span class="val" id="v-finance">—</span><span class="cap">advisory Λ</span><span id="v-finance-chip"></span></div>
       </div>
       <div class="vcard">
         <div class="pmark">re</div>
         <h3>Real estate</h3>
         <div class="tag">Governed workflows</div>
         <p>Workflow decisions captured into the same one-chain receipt ledger.</p>
-        <div class="lam"><span class="val" id="v-realestate">—</span><span class="cap">advisory Λ</span><span id="v-realestate-chip"></span></div>
       </div>
       <div class="vcard" style="border-style:dashed;align-items:flex-start;justify-content:center">
-        <div class="pmark" style="background:rgba(58,244,200,0.08);border-color:rgba(58,244,200,0.25);color:var(--proof)">Λ</div>
-        <h3>Org-wide Λ</h3>
         <div class="tag">13-axis weighted geomean</div>
-        <p>The composite advisory posture across all verticals, with min≤Λ≤max SEMANTIC-VERIFIED.</p>
-        <div class="lam"><span class="val" id="v-org">—</span><span class="cap">floor 0.90</span><span id="v-org-chip"></span></div>
       </div>
     </div>
   </div>
@@ -636,23 +636,23 @@
 <section class="band wrap" id="body">
   <p class="kick">The living body</p>
   <h2>Watch the governed organism breathe.</h2>
-  <p class="intro">The same live endpoints render as a 3D anatomical organism — organs glow when
     their probes are healthy and dim when they're not, and receipt events travel the vessels as
     pulses. It is an operational projection of the platform state. Every pulse links to a real
     receipt event; its signing state remains separately disclosed.</p>
   <div class="body-embed" id="body-embed">
     <div class="poster" id="body-poster">
       <div class="pulse-ring" aria-hidden="true"></div>
-      <h3>The Living Brain &amp; Body · Anatomy v5</h3>
       <p>Two live 3D views of the same governed organism: a <b>moldable brain</b> whose eight lobes
         are wired to live public reads (Hub assets, GitHub repos, proved theorems, organ vitals,
         the harnessed open-weights frontier) &mdash; sculpt its cortex with your pointer &mdash;
         and the full <b>living body</b> wired to the same probes as the console.</p>
       <div class="cta-row" style="justify-content:center">
-        <button class="btn btn-lattice" id="brain-load" type="button">🧠 Mold the brain in-frame</button>
         <button class="btn btn-ghost" id="body-load" type="button">Load the living body</button>
-        <a class="btn btn-primary" href="/anatomy-v5">Open the live digital twin →</a>
-        <a class="btn btn-ghost" href="/living-anatomy" target="_blank" rel="noopener">Open full-screen →</a>
       </div>
     </div>
   </div>
@@ -661,8 +661,8 @@
 <!-- ====================== PUBLIC ECOSYSTEM ATLAS ====================== -->
 <section class="band" id="ecosystem">
   <div class="wrap">
-    <p class="kick">Public estate · canonical live sources</p>
-    <h2>Models, kernels, data, and Spaces — one evidence-labelled map.</h2>
     <p class="sub" style="max-width:790px">The front door no longer hardcodes organization totals. Open each canonical source for its current inventory; a reachable URL establishes reachability only, not source/runtime alignment or model quality.</p>
     <div class="estate-grid" aria-label="Canonical public ecosystem sources">
       <a class="estate-cell" href="https://huggingface.co/SZLHOLDINGS/models" target="_blank" rel="noopener"><b>OPEN</b><span>Models</span></a>
@@ -673,7 +673,7 @@
       <a class="estate-cell" href="https://huggingface.co/SZLHOLDINGS" target="_blank" rel="noopener"><b>OPEN</b><span>Organization</span></a>
     </div>
     <div class="estate-links">
-      <a class="btn btn-primary" href="/ecosystem">Open ecosystem atlas →</a>
       <a class="btn btn-lattice" href="/anatomy-v5">Open Anatomy v5</a>
       <a class="btn btn-ghost" href="/models">Models</a>
       <a class="btn btn-ghost" href="/kernels">Kernels</a>
@@ -684,21 +684,21 @@
   </div>
 </section>
-<!-- ====================== (6) ONE CHAIN — live receipts/ledger ====================== -->
 <section class="band" id="chain" style="background:linear-gradient(180deg,rgba(10,16,30,0),rgba(10,16,30,0.55))">
   <div class="wrap">
-    <p class="kick">One chain · live ledger <span id="chain-src"></span></p>
     <h2>One ledger. Every decision. Replayable to the byte.</h2>
-    <p class="intro">Every vertical emits into a single SHA3-256 hash-chain — append-only,
       fsync-durable, replayable to a byte-identical root instead of trusting a dashboard.</p>
     <div class="chainrow">
-      <div class="cstat"><div class="ck" id="chain-receipts">—</div><div class="cl">Receipt records · signer state separate</div></div>
       <div class="cstat"><div class="ck ink mono" id="chain-alg">sha3_256</div><div class="cl">Chain algorithm</div></div>
-      <div class="cstat"><div class="ck" id="chain-depth">—</div><div class="cl">Chain depth (a11oy)</div></div>
-      <div class="cstat"><div class="ck ink mono" id="chain-head" style="font-size:.86rem">—</div><div class="cl">Last receipt id</div></div>
     </div>
     <div class="cta-row" style="margin-top:32px">
-      <a class="btn btn-primary" href="/api/a11oy/v1/ledger">Open the receipt ledger →</a>
       <a class="btn btn-ghost" href="/verify">Verify a receipt offline</a>
     </div>
   </div>
@@ -715,7 +715,7 @@
         Every claim links to its check.</p>
     </div>
     <div class="tcbtns">
-      <a class="btn btn-primary" href="/trust">Open the trust center →</a>
       <a class="btn btn-ghost" href="/api/a11oy/v1/honest">Honest status (JSON)</a>
     </div>
   </div>
@@ -732,52 +732,52 @@
             <circle cx="16" cy="16" r="13" stroke="url(#lg)" stroke-width="2"/>
             <circle cx="16" cy="16" r="5" fill="url(#lg)"/></svg>
           <span>a11oy<span class="sub" style="margin-left:9px">Alloy by SZL Holdings</span></span></a>
-        <p class="muted" style="margin:6px 0 0">Governed Inference — AI that exposes receipt
           integrity, signer state, evidence, and refusal behavior. The sha3_256 receipt ledger is
           independently inspectable; DSSE signing is claimed only when verification proves it.</p>
-        <p class="muted" style="margin:12px 0 0">Part of the SZL Holdings estate ·
           <a href="https://github.com/szl-holdings" target="_blank" rel="noopener">github.com/szl-holdings</a></p>
       </div>
       <div class="lk"><strong style="color:var(--ink)">Product</strong>
         <a href="/console">Command center</a>
         <a href="/ecosystem">Ecosystem atlas</a>
-        <a href="/anatomy-v5">Anatomy v5 · digital twin</a>
         <a href="/console#genome">Genome registry</a>
         <a href="/verify">Verify a receipt</a>
-        <a href="/living-anatomy">Living anatomy · 3D</a>
-        <a href="/elite">killinchu · counter-UAS</a>
-        <a href="https://szlholdings-immune.hf.space" target="_blank" rel="noopener">IMMUNE · live investor demo</a></div>
       <div class="lk"><strong style="color:var(--ink)">Evidence</strong>
         <a href="/trust">Trust center</a>
         <a href="/api/a11oy/v1/ledger">Receipt ledger</a>
         <a href="/api/a11oy/v1/honest">Honest status (JSON)</a>
         <a href="https://github.com/szl-holdings/lutar-lean">lutar-lean proofs</a></div>
       <div class="lk"><strong style="color:var(--ink)">Router &amp; org</strong>
-        <a href="/static/viz/router/">LLM-Router Live · 3D</a>
         <a href="https://huggingface.co/spaces/SZLHOLDINGS/llm-router-live" target="_blank" rel="noopener">Status Space (live, drift-checked)</a>
-        <a href="https://github.com/szl-holdings/szl-router" target="_blank" rel="noopener">SZL Router · OpenAI-compatible</a>
-        <a href="https://github.com/szl-holdings" target="_blank" rel="noopener">SZL Holdings · GitHub org</a>
         <a href="#surfaces">All nine surfaces</a></div>
-      <div class="lk"><strong style="color:var(--ink)">Estate · open source</strong>
-        <a href="https://github.com/szl-holdings/ouroboros" target="_blank" rel="noopener">ouroboros · self-referential loop</a>
-        <a href="https://github.com/szl-holdings/szl-formula-ledger" target="_blank" rel="noopener">szl-formula-ledger · formula genome</a>
-        <a href="https://github.com/szl-holdings/szl-energy-attest" target="_blank" rel="noopener">szl-energy-attest · grid_context (REPORTED)</a>
-        <a href="https://huggingface.co/SZLHOLDINGS" target="_blank" rel="noopener">Hugging Face org · SZLHOLDINGS</a></div>
     </div>
     <p class="disc">Honesty doctrine v11 LOCKED. The locked-proven Lean kernel is exactly <b>8</b>
       theorems {F1,F4,F7,F11,F12,F18,F19,F22}; the 144-entry genome registry is a separate, larger
-      set graded across four honesty tiers. The Λ trust gate is <b>Conjecture&nbsp;1</b> — an
       advisory bound, never a theorem and never 1.0. Receipt-chain integrity and DSSE signing are
       distinct states; signing is claimed only when persistent signer evidence is active and verification
       passes. Read-only routes never mint receipts. Energy is MEASURED only with a live exporter delta,
       otherwise honest SAMPLE. Supply
       chain is SLSA L1 honest (L2 build-attested); FedRAMP / IL5 / ATO accreditation is ROADMAP.
       <b style="color:var(--sub)">Alloy by SZL Holdings.</b>
-      © Stephen P. Lutar Jr. (ORCID 0009-0001-0110-4173) · Apache-2.0.</p>
   </div>
 </footer>
-<!-- ===================== SOVEREIGN IMPORTMAP (vendored, NO CDN) — Dev 2 ===================== -->
 <script type="importmap">
 { "imports": {
   "three": "/hero/vendor3d/three.module.min.js",
@@ -785,7 +785,7 @@
 } }
 </script>
-<!-- ===================== HERO BOOT (Three.js holographic field) — Dev 2 ===================== -->
 <script type="module">
   import { mountHero } from "/landing/app.js";
   const canvas = document.getElementById("hero-canvas");
@@ -833,12 +833,12 @@
   function showUnavailableOverclaimMetrics(){
     const count = $("hs-overclaims");
-    count.textContent = "—";
     count.classList.remove("proof");
     count.classList.add("gray");
-    $("hs-overclaim-time").textContent = "—";
     $("hs-overclaim-sample").textContent = "source unavailable";
-    $("hs-overclaims-chip").innerHTML = grayChip("SAMPLE · SNAPSHOT 2026-07-25 · SOURCE UNAVAILABLE");
   }
   async function loadOverclaimMetrics(){
@@ -874,13 +874,13 @@
       countElement.classList.add("proof");
       $("hs-overclaim-time").textContent = correctionTime;
       $("hs-overclaim-sample").textContent = "n="+sampleSize;
-      $("hs-overclaims-chip").innerHTML = grayChip("MEASURED · SNAPSHOT "+observed+" · DIGEST OK");
     } catch (_) {
       showUnavailableOverclaimMetrics();
     }
   }
-  // Advisory Λ is Conjecture 1: report its relation to the floor, never render pass/fail or green.
   function lamChip(elId, v){
     const el = $(elId); if(!el) return;
     if(num(v) === null){ el.innerHTML = downChip("N/A"); return; }
@@ -897,7 +897,7 @@
   }
   function setVerticals(v){
-    // v: {core,defense,insurance,finance,realestate} advisory Λ (numbers or null)
     [["core","v-core"],["defense","v-defense"],["insurance","v-insurance"],
      ["finance","v-finance"],["realestate","v-realestate"]].forEach(([k,id])=>{
       const val = fmtLam(v[k]);
@@ -908,8 +908,8 @@
   function setChain(receipts, alg, depth, head){
     $("chain-receipts").textContent = (num(receipts)===null) ? "UNAVAILABLE" : receipts.toLocaleString();
-    $("hs-receipts").textContent    = (num(receipts)===null) ? "—"           : receipts.toLocaleString();
-    $("hs-receipts-chip").innerHTML = (num(receipts)===null) ? downChip("offline") : grayChip((alg || "sha3_256") + " · CHAIN");
     if(alg) $("chain-alg").textContent = alg;
     $("chain-depth").textContent = (num(depth)===null) ? "N/A" : depth.toLocaleString();
     // Normalize head to the receipt id STRING. Some feeds (e.g. org/overview)
@@ -918,7 +918,7 @@
     const headId = (head && typeof head === "object")
       ? (head.receipt_id || head.id || head.digest || "")
       : head;
-    if(headId){ const h = String(headId); $("chain-head").textContent = h.length>14 ? (h.slice(0,10)+"…"+h.slice(-4)) : h; }
     else { $("chain-head").textContent = "N/A"; }
   }
@@ -945,7 +945,7 @@
     }catch(e){ return false; }
   }
-  // ---- (B) fallbacks — each source degrades to honest N/A independently ----
   async function loadGenomeTiers(){
     try{
       const g = await getJSON("/api/a11oy/v1/genome");
@@ -978,7 +978,7 @@
          if(Array.isArray(l.receipts) && l.receipts.length){ head = l.receipts[l.receipts.length-1].receipt_id; }
          if(receipts === null) receipts = depth; ok = true; }catch(e){}
     setChain(receipts, alg, depth, head);
-    $("chain-src").innerHTML = ok ? grayChip((alg || "sha3_256") + " · CHAIN") : downChip("UNAVAILABLE");
   }
   // ---- live estate pulse: reachability is reported separately from correctness ----
@@ -1006,7 +1006,7 @@
         const s = d.summary && d.summary.summary || {};
         if(!d.matrix_available) throw new Error("matrix unavailable");
         const checked = Boolean(d.probe_verdict_available);
-        pulseState("contract", checked ? "REACHABLE" : "SNAPSHOT", (s.tabs || "Published")+" tabs · "+(s.endpoints || "declared")+" endpoint contracts · "+(checked ? "deployment probe attached." : "static contract; deployment probe pending."));
       }).catch(() => pulseState("contract", "UNAVAILABLE", "Tab contract is not bundled with this deployment.")),
       pulseJSON("/api/a11oy/v1/ledger").then(d => pulseState("ledger", "REACHABLE", (typeof d.count === "number" ? d.count : "Current")+" receipts returned by the read; verify timestamp and chain state in the source."))
         .catch(() => pulseState("ledger", "UNAVAILABLE", "Receipt ledger did not answer this session.")),
@@ -1016,7 +1016,7 @@
       }).catch(() => pulseState("mesh", "UNAVAILABLE", "Mesh state did not answer this session."))
     ];
     await Promise.allSettled(checks);
-    if($("pulse-checked")) $("pulse-checked").textContent = "Checked "+new Date().toLocaleString()+" · read-only · cache disabled";
   }
   // ---- (C) living body: load the anatomy Space in-frame only on click (perf + reduced-motion) ----
@@ -1025,7 +1025,7 @@
     const wrap = $("body-embed");
     const f = document.createElement("iframe");
     f.src = "https://szlholdings-anatomy.hf.space#estate";
-    f.title = "a11oy living body — 3D governed organism (V10 · Estate + Ayllu wirings)";
     f.loading = "lazy"; f.referrerPolicy = "no-referrer";
     f.allow = "fullscreen"; f.setAttribute("allowfullscreen", "");
     wrap.innerHTML = ""; wrap.appendChild(f);
@@ -1037,7 +1037,7 @@
     const wrap = $("body-embed");
     const f = document.createElement("iframe");
     f.src = "/static/3d/brain.html";
-    f.title = "The a11oy Brain — moldable 3D cortex, eight lobes wired to live public reads";
     f.loading = "lazy"; f.referrerPolicy = "no-referrer";
     f.allow = "fullscreen"; f.setAttribute("allowfullscreen", "");
     wrap.innerHTML = ""; wrap.appendChild(f);
@@ -1062,17 +1062,17 @@
 })();
 </script>
-<!-- SZL-FOURTH-WALL:v1:START — the page proves itself to the visitor. Claims-free: integrity & origin only. -->
 <section id="fourth-wall" style="background:#060D1F;border-top:1px solid #C9B787;padding:18px 24px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12.5px;color:#8FA3BF;line-height:1.7">
   <div style="max-width:980px;margin:0 auto">
-    <span style="color:#C9B787;letter-spacing:2px">⟨ 4TH WALL ⟩</span>
-    <span> You are reading rendered bytes. Don&rsquo;t trust them — hash them:</span>
     <button id="fw-hash-btn" style="margin-left:8px;background:transparent;border:1px solid #3AF4C8;color:#3AF4C8;padding:2px 10px;border-radius:3px;font:inherit;cursor:pointer">hash this page in your browser</button>
     <span id="fw-hash-out" style="color:#3AF4C8;word-break:break-all"></span>
-    <div style="margin-top:6px">canonical source: <a href="https://github.com/szl-holdings/a11oy/blob/main/a11oy_landing.html" style="color:#C9B787">szl-holdings/a11oy@main</a><span id="fw-main-sha"></span> · verify from outside:
       <code style="color:#E8D9AE;background:#0B1F3A;padding:1px 6px;border-radius:3px">curl -s https://raw.githubusercontent.com/szl-holdings/a11oy/main/a11oy_landing.html | sha256sum</code>
     </div>
-    <div style="margin-top:4px;color:#5c6f8a">This proves integrity &amp; origin of this page only — never the accuracy of anything written on it. Doctrine v11. Expect the two hashes to differ by exactly the declared deltas: the server injects the operator-widget <code>&lt;script&gt;</code> tag in-memory, and the deployer may rewrite asset paths. In-browser hash = bytes as served; curl hash = canonical source; the attested sync + drift guards bind the two.</div>
   </div>
 </section>
 <script>

+<!doctype html>
 <!-- SPDX-License-Identifier: Apache-2.0
      (c) 2026 Lutar, Stephen P. - SZL Holdings - ORCID 0009-0001-0110-4173 -->
 <!--
+  a11oy â€” front door (scroll narrative). Served at the Space root "/" by serve.py.
   SOVEREIGN: Three.js r160 (MIT) vendored in-image at /hero/vendor3d. 0 runtime CDN.
   Fonts (Space Grotesk / JetBrains Mono) vendored at /vendor/fonts/*.woff2.
+  HONESTY DOCTRINE v11 LOCKED â€” every figure is fetched live and labelled honestly
+  (REACHABLE / MEASURED / MODELED / SNAPSHOT / UNAVAILABLE). Nothing is fabricated. Î› = Conjecture 1 (advisory, NOT a theorem,
   never 1.0, NEVER green). Locked-proven Lean kernel = EXACTLY 8 {F1,F4,F7,F11,F12,F18,F19,F22}.
+  The genome registry (144 entries) is grouped into 4 honesty tiers â€” a different, larger set.
   Receipt chain integrity and DSSE signing are separate. Signing is claimed only when persistent signer evidence is ACTIVE and verification passes. Read-only routes never mint receipts.
+  DOM/sections owned by Dev 1; the #hero-canvas + /landing/app.js boot is owned by Dev 2 â€”
   preserved verbatim below. KANCHAY palette. No purple. a-11-oy.com remains the
   canonical governed-inference product; a11oy.net is a separately attested estate cockpit.
+  Â© Stephen P. Lutar Jr. (ORCID 0009-0001-0110-4173) Â· Apache-2.0
 -->
 <html lang="en">
 <head>
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
+<title>a11oy â€” AI that can demonstrate its work Â· AI that proves its receipt state and refuses to lie</title>
+<meta name="description" content="AI that can demonstrate its work: AI that exposes receipt integrity, signer state, evidence, and refusal behavior. State-changing actions produce hash-chained receipts; DSSE signing is claimed only when persistent signer evidence is active and independently verified." />
 <link rel="canonical" href="https://a-11-oy.com/" />
 <meta property="og:type" content="website" />
 <meta property="og:url" content="https://a-11-oy.com/" />
+<meta property="og:title" content="a11oy â€” AI that can demonstrate its work" />
 <meta property="og:description" content="AI that exposes receipt integrity and signer state, shows its evidence, and refuses when it cannot support an answer." />
 <meta property="og:image" content="https://a-11-oy.com/social-preview-v5.png" />
 <meta property="og:image:type" content="image/png" />
 <meta property="og:image:width" content="1280" />
 <meta property="og:image:height" content="640" />
+<meta property="og:image:alt" content="a11oy AI that can demonstrate its work â€” evidence-labelled ecosystem and Anatomy v5" />
 <meta name="twitter:card" content="summary_large_image" />
 <meta name="twitter:image" content="https://a-11-oy.com/social-preview-v5.png" />
+<meta name="twitter:image:alt" content="a11oy AI that can demonstrate its work â€” evidence-labelled ecosystem and Anatomy v5" />
 <link rel="icon" type="image/svg+xml" href="/social-preview-v5.svg" />
 <script type="application/ld+json">
 {
   "@context": "https://schema.org",
   "@type": "SoftwareApplication",
+  "name": "a11oy AI that can demonstrate its work",
   "url": "https://a-11-oy.com/",
   "applicationCategory": "DeveloperApplication",
   "operatingSystem": "Web",
     font-display:swap;src:url('/vendor/fonts/JetBrainsMono.woff2') format('woff2')}
   :root{
+    /* KANCHAY palette (canonical, org-wide â€” RECONCILE.md). Purple is BANNED. */
     --void:#080c14;            /* deep near-black ground */
     --deep:#0a1019;            /* raised ground */
     --surface:#0e1626;         /* card surface */
     --border:#1c2942;          /* hairline */
+    --proof:#3af4c8;           /* proof teal â€” the one bright accent */
     --proof-soft:rgba(58,244,200,0.12);
     --proof-dim:rgba(58,244,200,0.06);
+    --lattice:#5b8dee;         /* lattice blue â€” secondary (NOT purple) */
     --lattice-soft:rgba(91,141,238,0.12);
     --gold:#d7b96b;            /* warm accent / conjecture-adjacent */
     --ink:#eef4fb;             /* near-white heading */
+    --sub:#aebccf;             /* body copy â€” WCAG AA on --void */
     --ghost:#65788f;           /* muted labels */
+    --gray:#7d8aa0;            /* CONJECTURE / advisory â€” never green */
     --ok:#3af4c8; --warn:#d7b96b; --down:#e8746e;
     --r:16px; --maxw:1180px;
     --head:'Space Grotesk',-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;
   .btn{display:inline-flex;align-items:center;justify-content:center;gap:8px;padding:11px 21px;border-radius:9px;
     min-height:44px;max-width:100%;font-weight:600;font-size:14px;border:1px solid transparent;cursor:pointer;
     transition:all .18s cubic-bezier(0.16,1,0.3,1);white-space:nowrap;letter-spacing:.01em}
+  /* restrained "holographic glass" buttons â€” luminous hairline + soft fill, never a neon block */
   .btn-primary{background:linear-gradient(180deg,rgba(58,244,200,0.13),rgba(58,244,200,0.04));
     color:var(--proof);border-color:rgba(58,244,200,0.42);
     box-shadow:inset 0 1px 0 rgba(58,244,200,0.10),0 1px 14px -8px rgba(58,244,200,0.45)}
     border-color:rgba(91,141,238,0.6);color:#c5d8ff;
     box-shadow:0 6px 24px -12px rgba(91,141,238,0.32);transform:translateY(-1px)}
+  /* ---- hero (canvas owned by Dev 2 â€” markup preserved) ---- */
   .hero{position:relative;min-height:92vh;display:flex;align-items:center;overflow:hidden}
   #hero-canvas{position:absolute;inset:0;width:100%;height:100%;z-index:0;display:block}
   .hero-scrim{position:absolute;inset:0;z-index:1;pointer-events:none;
   .muted{color:var(--ghost)}
   .skel{color:var(--ghost);font-family:var(--mono)}
+  /* ecosystem atlas â€” public estate snapshot, never implied live until API reads */
   .estate-grid{display:grid;grid-template-columns:repeat(6,1fr);gap:10px;margin:24px 0}
   .estate-cell{border:1px solid var(--border);border-radius:13px;padding:15px;
     background:linear-gradient(155deg,rgba(17,30,50,.72),rgba(8,16,29,.88))}
         <circle cx="16" cy="16" r="5" fill="url(#lg)"/>
         <path d="M16 3v8M16 21v8M3 16h8M21 16h8" stroke="url(#lg)" stroke-width="1.6" opacity=".7"/>
       </svg>
+      <span>a11oy<span class="sub" style="margin-left:9px">AI that can demonstrate its work</span></span>
     </a>
     <nav>
       <a class="hide-sm" href="#surfaces">Surfaces</a>
       <a class="hide-sm" href="/console#arena">Eval arena</a>
       <a class="hide-sm" href="/observability">Observability</a>
       <a href="/trust">Evidence</a>
+    <a class="btn btn-primary" href="/console" aria-label="Open the command center"><span class="nav-cta-full">Open the command center</span><span class="nav-cta-short" aria-hidden="true">Command center</span> →</a>
     </nav>
   </div>
 </header>
 <main id="main">
+<!-- ====================== (1) HERO â€” canvas + boot owned by Dev 2 ====================== -->
 <section class="hero">
   <canvas id="hero-canvas"></canvas>
   <div class="hero-scrim" aria-hidden="true"></div>
   <div class="hero-fallback" id="hero-fallback"></div>
   <div class="wrap">
     <div class="hero-inner">
+      <span class="eyebrow"><span class="dot"></span> AI that can demonstrate its work Â· verifiable by anyone, offline</span>
       <h1 class="title">AI that <span class="grad">proves its receipt state</span><br>and refuses to lie.</h1>
       <p class="lede">Every governed state change produces a hash-chained receipt you can inspect
         <b>offline, in your own browser</b>. The interface says <b>SIGNED</b> only when persistent
         UNSIGNED, DISABLED, or UNAVAILABLE. When the model is not sure, it returns an honest
         <b>BLOCKED</b> instead of a confident guess.</p>
       <div class="cta-row">
+        <a class="btn btn-primary" href="/console">Open the command center â†’</a>
         <a class="btn btn-lattice" href="/ecosystem">Explore the ecosystem</a>
         <a class="btn btn-ghost" href="/verify">Verify a receipt offline</a>
       </div>
       <div class="hero-stats">
         <div class="stat">
+          <div class="k proof" id="hs-receipts">â€”</div>
+          <div class="l">Receipts in the chain <span id="hs-receipts-chip"></span><br><span class="stat-note">ledger depth â€” a mechanism check, not customer traction</span></div>
         </div>
         <div class="stat">
           <div class="k gray" id="hs-lambda">Conjecture 1</div>
+          <div class="l">Î› trust gate Â· advisory bound</div>
         </div>
         <div class="stat">
           <div class="k" id="hs-proven">8</div>
           <div class="l">Locked Lean-proven theorems<br><span class="stat-note">a proof of rigor, not a traction number</span></div>
         </div>
         <div class="stat" id="overclaim-counter">
+          <div class="k gray" id="hs-overclaims">â€”</div>
+          <div class="l">Overclaims caught by CI <span id="hs-overclaims-chip"><span class="chip gray" style="margin-left:6px"><span class="dot"></span>SAMPLE Â· SNAPSHOT 2026-07-25 Â· SOURCE UNAVAILABLE</span></span><br><span class="stat-note">Observed correction time (<span id="hs-overclaim-sample">source unavailable</span>): <span id="hs-overclaim-time">â€”</span> Â· <a href="https://github.com/szl-holdings/platform/blob/main/docs/OVERCLAIM_LEDGER.md">open ledger</a></span></div>
         </div>
       </div>
     </div>
 <!-- ====================== (1b) HONESTY STRIP ====================== -->
 <section class="honesty" id="honesty">
   <div class="wrap">
+    <p class="kick">The honesty doctrine Â· v11 LOCKED</p>
+    <h2 style="font-size:clamp(1.5rem,3vw,2.1rem);margin:0 0 10px">Every figure on this page is labelled â€” or it isn't shown.</h2>
     <p class="intro" style="margin:0">We grade what we say. If a claim isn't MEASURED live this session, we tell you exactly what it is instead of dressing it up as proof.</p>
     <div class="legend">
       <div class="leg measured"><div class="lt">MEASURED</div><p>Read live from a running endpoint this session — receipt count, advisory Λ posture, and chain depth. Shown with a live chip; a dead probe degrades to an honest offline chip. Signer state is disclosed separately only where an actual signer-status read is present.</p></div>
+      <div class="leg reported"><div class="lt">REPORTED</div><p>Stated by a source we name â€” the locked-8 Lean kernel, the 144-entry genome registry â€” cited here, not independently re-derived on this page.</p></div>
+      <div class="leg unknown"><div class="lt">UNKNOWN</div><p>We don't have it right now. Rendered honestly as N/A Â· UNAVAILABLE Â· BLOCKED â€” never a confident guess and never a fabricated number.</p></div>
+      <div class="leg conjecture"><div class="lt">CONJECTURE</div><p>Advisory and unproven. Rendered in gray, never green, never a theorem. Î› lives here.</p></div>
     </div>
     <div class="lambda-line">
+      <span class="chip gray"><span class="dot"></span>Î› = Conjecture 1</span>
+      <span class="muted">an advisory trust bound â€” never proven, never 1.0, and never rendered green. Theorem&nbsp;U is the proven <i>conditional</i> alternative; the unconditional claim is machine-checked false as stated.</span>
     </div>
+    <p class="free-energy"><b style="color:var(--ink)">No free energy.</b> Joules are MEASURED only from a live exporter delta; with no live meter we label the reading SAMPLE or UNAVAILABLE and fabricate nothing. a11oy never claims over-unity, perpetual output, or free-energy efficiency â€” only what a real meter reports.</p>
   </div>
 </section>
   <h2 id="estate-pulse-title">What is actually reachable right now.</h2>
   <p class="intro">Four read-only checks connect the product story to the running system. REACHABLE means the source answered this browser session; evidence mode (LIVE, SNAPSHOT, MODELED, or UNAVAILABLE) remains separate and never certifies model truth.</p>
   <div class="pulse-grid" aria-live="polite">
+    <article class="pulse-card"><div class="pulse-head"><h3>Platform health</h3><span class="data-state" id="pulse-health-state">CHECKING</span></div><p id="pulse-health-detail">Checking the deployed runtime.</p><a href="/healthz">Source /healthz â†’</a></article>
+    <article class="pulse-card"><div class="pulse-head"><h3>Tab contract</h3><span class="data-state" id="pulse-contract-state">CHECKING</span></div><p id="pulse-contract-detail">Checking the published tab inventory.</p><a href="/api/a11oy/v1/readiness/tab-matrix">Source tab matrix â†’</a></article>
+    <article class="pulse-card"><div class="pulse-head"><h3>Receipt ledger</h3><span class="data-state" id="pulse-ledger-state">CHECKING</span></div><p id="pulse-ledger-detail">Checking the append-only evidence read.</p><a href="/api/a11oy/v1/ledger">Source receipt ledger â†’</a></article>
+    <article class="pulse-card"><div class="pulse-head"><h3>Sovereign mesh</h3><span class="data-state" id="pulse-mesh-state">CHECKING</span></div><p id="pulse-mesh-detail">Checking the current mesh posture.</p><a href="/api/a11oy/v1/mesh/state">Source mesh state â†’</a></article>
   </div>
   <p class="pulse-time" id="pulse-checked">Checks have not completed.</p>
 </section>
 <section class="band wrap" id="surfaces">
   <p class="kick">Explore the estate</p>
   <h2>Nine surfaces. One governed core.</h2>
+  <p class="intro">Every surface reads the same live endpoints and the same honesty doctrine. Jump straight in â€” the full working console is one click away.</p>
   <div class="grid g3">
+    <a class="card surface-card" href="/console"><div class="ic">âŒ˜</div><h3>Command Center</h3><p>The working console â€” receipt integrity, separately disclosed signer state, the self-doubt gate, the genome registry, and live organ vitals.</p><div class="golinks"><span class="go">Open /console â†’</span></div></a>
+    <a class="card surface-card" href="/superpowers"><div class="ic">âœ¦</div><h3>Five Superpowers</h3><p>The five things governed execution does that ungoverned models can't â€” each linked to the live check that backs it.</p><div class="golinks"><span class="go">Open /superpowers â†’</span></div></a>
+    <a class="card surface-card" href="/console#arena"><div class="ic">âš”</div><h3>Adversarial assurance</h3><p>Run governed evaluations, inspect refusals, and trace every verdict to its evidence. The archived Warhacker route now resolves here.</p><div class="golinks"><span class="go">Open the eval arena â†’</span></div></a>
+    <a class="card surface-card" href="/observability"><div class="ic">â—Ž</div><h3>Observability</h3><p>OpenTelemetry-style traces and health summaries across the organs â€” live, read-only, no sign-on-GET.</p><div class="golinks"><span class="go">Open /observability â†’</span></div></a>
+    <a class="card surface-card" href="/wires"><div class="ic">ã€œ</div><h3>Wires</h3><p>The live wiring between organs â€” which probe feeds which surface, and whether it is up right now.</p><div class="golinks"><span class="go">Open /wires â†’</span></div></a>
+    <a class="card surface-card" href="/console#mesh"><div class="ic">â—‡</div><h3>Mesh</h3><p>The BFT-quorum mesh graph â€” 3-of-4 consensus, live state read from <span class="mono">/api/a11oy/v1/mesh/state</span>.</p><div class="golinks"><span class="go">Open the mesh â†’</span></div></a>
+    <a class="card surface-card" href="/formulas"><div class="ic">Î£</div><h3>Formulas</h3><p>The PURIQ agentic formula genome â€” live-recomputed values, each carrying its own Khipu receipt.</p><div class="golinks"><span class="go">Open /formulas â†’</span></div></a>
+    <a class="card surface-card" href="/trust"><div class="ic">âœ“</div><h3>Evidence</h3><p>The trust center: the locked-8 with truthful Lean refs, Theorem&nbsp;U vs Conjecture&nbsp;1, the receipt ledger, offline verify.</p><div class="golinks"><span class="go">Open the evidence â†’</span></div></a>
+    <a class="card surface-card" href="/static/viz/router/"><div class="ic mono">â‡„</div><h3>LLM Router</h3><p>The LLM-Router Live scene â€” per-tier routing stats polled every second, otherwise an honest DEMO MODE.</p><div class="golinks"><span class="go">Open the router â†’</span></div></a>
   </div>
 </section>
 <!-- ====================== (2) THE THESIS ====================== -->
 <section class="band wrap" id="thesis">
   <p class="kick">The thesis</p>
+  <h2>Governed AI you can prove â€” not AI you're asked to trust.</h2>
   <p class="intro">Most AI asks for trust. a11oy earns it the way auditable systems do: every
     governed state change is recorded in a hash-chained receipt, while signer state and signature
     verification are disclosed separately and never inferred; a trust gate can only tighten an
     answer, never wave it through; and the kernel rests on machine-checked theorems you can read.
+    The honest part is the product â€” when a claim isn't proven, we label it, and you can open the
     check yourself.</p>
   <div class="pillars">
     <div class="pillar">
+      <div class="pk">01 Â· RECEIPTS</div>
       <h3>It proves receipt integrity and signer state</h3>
       <p>Every governed state change enters a SHA3-256 hash chain. DSSE / ECDSA-P256 is a separate
         cryptographic state and is labeled SIGNED only when persistent signer evidence is active
         and independent verification passes. Verify the disclosed state in your own browser.</p>
     </div>
     <div class="pillar">
+      <div class="pk">02 Â· REFUSES</div>
       <h3>It refuses when unsure</h3>
       <p>A self-doubt gate measures uncertainty against a bound and returns a truthful
         <b>BLOCKED</b> rather than a confident wrong answer. A refusal beats a fabrication.</p>
     </div>
     <div class="pillar">
+      <div class="pk">03 Â· PROVES</div>
       <h3>It is formally backed</h3>
+      <p>8 locked, axiom-free Lean&nbsp;4 theorems back the kernel. The Î› trust gate is
+        <b>Conjecture&nbsp;1</b> â€” an advisory bound, never dressed up as a theorem.</p>
     </div>
   </div>
 </section>
 <div class="wrap"><div class="divider"></div></div>
+<!-- ====================== (3) THE PROOF â€” 4 honest tiers (live) ====================== -->
 <section class="band wrap" id="proof">
+  <p class="kick">The proof Â· four honest tiers <span id="proof-src"></span></p>
   <h2>Every claim carries exactly one honesty tier.</h2>
+  <p class="intro">The 144-entry formula genome is graded across four tiers â€” and the rarest,
     strongest tiers are the smallest on purpose. Counts below are read live from the genome
     registry. A conjecture is shown in gray and is <b>never</b> rendered as proven.</p>
   <div class="grid g4">
     <div class="tier locked">
+      <div class="tnum" id="pt-locked">â€”</div>
       <div class="tname">LOCKED-PROVEN</div>
+      <p>Truthful labels for what each Lean obligation actually proves â€” e.g. F18 = Reed-Solomon
         parity (erasure tolerance), not "DSSE seal". Conservative and defensible.</p>
     </div>
     <div class="tier semantic">
+      <div class="tnum" id="pt-semantic">â€”</div>
       <div class="tname">SEMANTIC-VERIFIED</div>
+      <p>Sorry-free real theorems outside the frozen locked-8: the Î› minâ‰¤Î›â‰¤max bounds, Theorem U
         (conditional uniqueness), DSSE verifiability. Where the real trust math lives.</p>
     </div>
     <div class="tier evidence">
+      <div class="tnum" id="pt-evidence">â€”</div>
       <div class="tname">EVIDENCE-BACKED</div>
       <p>Runtime / algorithmic rules backed by real code and live endpoints, with no proof claim
+        attached. Honest operational tier â€” not dressed up as proven.</p>
     </div>
     <div class="tier conjecture">
+      <div class="tnum" id="pt-conjecture">â€”</div>
+      <div class="tname">CONJECTURE Â· ADVISORY</div>
+      <p>Î› unconditional uniqueness = Conjecture&nbsp;1 (machine-checked false as stated). Gray,
         advisory, <b>never green</b>. Theorem U is the proven conditional alternative.</p>
     </div>
   </div>
   <div class="cta-row" style="margin-top:34px">
+    <a class="btn btn-primary" href="https://szlholdings-immune.hf.space" target="_blank" rel="noopener">See it run live Â· IMMUNE demo â†’</a>
+    <a class="btn btn-ghost" href="/console#genome">Browse the genome â†’</a>
+    <a class="btn btn-ghost" href="/trust">Read the trust center â†’</a>
   </div>
+  <p class="intro" style="margin-top:16px;opacity:.85">IMMUNE is a live, interactive demo of the same thesis you can drive yourself â€” a
     real hash-chained receipt ledger, a live Sigstore&nbsp;Rekor transparency anchor, and honest
     <b>BLOCKED</b> / <b>UNAVAILABLE</b> states instead of confident guesses. Nothing on that page is fabricated.</p>
 </section>
+<!-- ====================== (4) THE VERTICALS â€” live /lambda/org ====================== -->
 <section class="band" id="verticals" style="background:linear-gradient(180deg,rgba(10,16,30,0),rgba(10,16,30,0.55))">
   <div class="wrap">
+    <p class="kick">The verticals Â· live Î› posture <span id="verticals-src"></span></p>
     <h2>One governed core. Five places it earns its keep.</h2>
+    <p class="intro">The same governed execution core runs across five verticals. Each card reads
+      its live advisory Î› posture from the org-wide 13-axis gate (canonical floor 0.90). Î› is
+      Conjecture&nbsp;1 â€” advisory, never a pass/fail oracle.</p>
     <div class="grid g3">
       <div class="vcard">
         <div class="pmark">a11</div>
         <h3>a11oy</h3>
+        <div class="tag">Core Â· governed execution</div>
+        <p>The platform itself â€” command center, receipt integrity, disclosed signer state, and the self-doubt gate.</p>
+        <div class="lam"><span class="val" id="v-core">â€”</span><span class="cap">advisory Î›</span><span id="v-core-chip"></span></div>
       </div>
       <div class="vcard">
         <div class="pmark">kil</div>
         <h3>killinchu</h3>
+        <div class="tag">Defense Â· counter-UAS</div>
         <p>Auditable interdiction: receipt per decision, separately disclosed signing state, and 3-of-4 BFT consensus.</p>
+        <div class="lam"><span class="val" id="v-defense">â€”</span><span class="cap">advisory Î›</span><span id="v-defense-chip"></span></div>
       </div>
       <div class="vcard">
         <div class="pmark">ins</div>
         <h3>Insurance</h3>
+        <div class="tag">David Leads Â· lead scoring</div>
         <p>Faithful David Leads scorer behind an F12 non-compensatory consent gate.</p>
+        <div class="lam"><span class="val" id="v-insurance">â€”</span><span class="cap">advisory Î›</span><span id="v-insurance-chip"></span></div>
       </div>
       <div class="vcard">
         <div class="pmark">fin</div>
         <h3>Finance</h3>
         <div class="tag">Governed decisioning</div>
         <p>Decision paths that must be reconstructable, receipt-bound, and conditionally signed only when verified signer evidence is active.</p>
+        <div class="lam"><span class="val" id="v-finance">â€”</span><span class="cap">advisory Î›</span><span id="v-finance-chip"></span></div>
       </div>
       <div class="vcard">
         <div class="pmark">re</div>
         <h3>Real estate</h3>
         <div class="tag">Governed workflows</div>
         <p>Workflow decisions captured into the same one-chain receipt ledger.</p>
+        <div class="lam"><span class="val" id="v-realestate">â€”</span><span class="cap">advisory Î›</span><span id="v-realestate-chip"></span></div>
       </div>
       <div class="vcard" style="border-style:dashed;align-items:flex-start;justify-content:center">
+        <div class="pmark" style="background:rgba(58,244,200,0.08);border-color:rgba(58,244,200,0.25);color:var(--proof)">Î›</div>
+        <h3>Org-wide Î›</h3>
         <div class="tag">13-axis weighted geomean</div>
+        <p>The composite advisory posture across all verticals, with minâ‰¤Î›â‰¤max SEMANTIC-VERIFIED.</p>
+        <div class="lam"><span class="val" id="v-org">â€”</span><span class="cap">floor 0.90</span><span id="v-org-chip"></span></div>
       </div>
     </div>
   </div>
 <section class="band wrap" id="body">
   <p class="kick">The living body</p>
   <h2>Watch the governed organism breathe.</h2>
+  <p class="intro">The same live endpoints render as a 3D anatomical organism â€” organs glow when
     their probes are healthy and dim when they're not, and receipt events travel the vessels as
     pulses. It is an operational projection of the platform state. Every pulse links to a real
     receipt event; its signing state remains separately disclosed.</p>
   <div class="body-embed" id="body-embed">
     <div class="poster" id="body-poster">
       <div class="pulse-ring" aria-hidden="true"></div>
+      <h3>The Living Brain &amp; Body Â· Anatomy v5</h3>
       <p>Two live 3D views of the same governed organism: a <b>moldable brain</b> whose eight lobes
         are wired to live public reads (Hub assets, GitHub repos, proved theorems, organ vitals,
         the harnessed open-weights frontier) &mdash; sculpt its cortex with your pointer &mdash;
         and the full <b>living body</b> wired to the same probes as the console.</p>
       <div class="cta-row" style="justify-content:center">
+        <button class="btn btn-lattice" id="brain-load" type="button">ðŸ§  Mold the brain in-frame</button>
         <button class="btn btn-ghost" id="body-load" type="button">Load the living body</button>
+        <a class="btn btn-primary" href="/anatomy-v5">Open the live digital twin â†’</a>
+        <a class="btn btn-ghost" href="/living-anatomy" target="_blank" rel="noopener">Open full-screen â†’</a>
       </div>
     </div>
   </div>
 <!-- ====================== PUBLIC ECOSYSTEM ATLAS ====================== -->
 <section class="band" id="ecosystem">
   <div class="wrap">
+    <p class="kick">Public estate Â· canonical live sources</p>
+    <h2>Models, kernels, data, and Spaces â€” one evidence-labelled map.</h2>
     <p class="sub" style="max-width:790px">The front door no longer hardcodes organization totals. Open each canonical source for its current inventory; a reachable URL establishes reachability only, not source/runtime alignment or model quality.</p>
     <div class="estate-grid" aria-label="Canonical public ecosystem sources">
       <a class="estate-cell" href="https://huggingface.co/SZLHOLDINGS/models" target="_blank" rel="noopener"><b>OPEN</b><span>Models</span></a>
       <a class="estate-cell" href="https://huggingface.co/SZLHOLDINGS" target="_blank" rel="noopener"><b>OPEN</b><span>Organization</span></a>
     </div>
     <div class="estate-links">
+      <a class="btn btn-primary" href="/ecosystem">Open ecosystem atlas â†’</a>
       <a class="btn btn-lattice" href="/anatomy-v5">Open Anatomy v5</a>
       <a class="btn btn-ghost" href="/models">Models</a>
       <a class="btn btn-ghost" href="/kernels">Kernels</a>
   </div>
 </section>
+<!-- ====================== (6) ONE CHAIN â€” live receipts/ledger ====================== -->
 <section class="band" id="chain" style="background:linear-gradient(180deg,rgba(10,16,30,0),rgba(10,16,30,0.55))">
   <div class="wrap">
+    <p class="kick">One chain Â· live ledger <span id="chain-src"></span></p>
     <h2>One ledger. Every decision. Replayable to the byte.</h2>
+    <p class="intro">Every vertical emits into a single SHA3-256 hash-chain â€” append-only,
       fsync-durable, replayable to a byte-identical root instead of trusting a dashboard.</p>
     <div class="chainrow">
+      <div class="cstat"><div class="ck" id="chain-receipts">â€”</div><div class="cl">Receipt records · signer state separate</div></div>
       <div class="cstat"><div class="ck ink mono" id="chain-alg">sha3_256</div><div class="cl">Chain algorithm</div></div>
+      <div class="cstat"><div class="ck" id="chain-depth">â€”</div><div class="cl">Chain depth (a11oy)</div></div>
+      <div class="cstat"><div class="ck ink mono" id="chain-head" style="font-size:.86rem">â€”</div><div class="cl">Last receipt id</div></div>
     </div>
     <div class="cta-row" style="margin-top:32px">
+      <a class="btn btn-primary" href="/api/a11oy/v1/ledger">Open the receipt ledger â†’</a>
       <a class="btn btn-ghost" href="/verify">Verify a receipt offline</a>
     </div>
   </div>
         Every claim links to its check.</p>
     </div>
     <div class="tcbtns">
+      <a class="btn btn-primary" href="/trust">Open the trust center â†’</a>
       <a class="btn btn-ghost" href="/api/a11oy/v1/honest">Honest status (JSON)</a>
     </div>
   </div>
             <circle cx="16" cy="16" r="13" stroke="url(#lg)" stroke-width="2"/>
             <circle cx="16" cy="16" r="5" fill="url(#lg)"/></svg>
           <span>a11oy<span class="sub" style="margin-left:9px">Alloy by SZL Holdings</span></span></a>
+        <p class="muted" style="margin:6px 0 0">AI that can demonstrate its work â€” AI that exposes receipt
           integrity, signer state, evidence, and refusal behavior. The sha3_256 receipt ledger is
           independently inspectable; DSSE signing is claimed only when verification proves it.</p>
+        <p class="muted" style="margin:12px 0 0">Part of the SZL Holdings estate Â·
           <a href="https://github.com/szl-holdings" target="_blank" rel="noopener">github.com/szl-holdings</a></p>
       </div>
       <div class="lk"><strong style="color:var(--ink)">Product</strong>
         <a href="/console">Command center</a>
         <a href="/ecosystem">Ecosystem atlas</a>
+        <a href="/anatomy-v5">Anatomy v5 Â· digital twin</a>
         <a href="/console#genome">Genome registry</a>
         <a href="/verify">Verify a receipt</a>
+        <a href="/living-anatomy">Living anatomy Â· 3D</a>
+        <a href="/elite">killinchu Â· counter-UAS</a>
+        <a href="https://szlholdings-immune.hf.space" target="_blank" rel="noopener">IMMUNE Â· live investor demo</a></div>
       <div class="lk"><strong style="color:var(--ink)">Evidence</strong>
         <a href="/trust">Trust center</a>
         <a href="/api/a11oy/v1/ledger">Receipt ledger</a>
         <a href="/api/a11oy/v1/honest">Honest status (JSON)</a>
         <a href="https://github.com/szl-holdings/lutar-lean">lutar-lean proofs</a></div>
       <div class="lk"><strong style="color:var(--ink)">Router &amp; org</strong>
+        <a href="/static/viz/router/">LLM-Router Live Â· 3D</a>
         <a href="https://huggingface.co/spaces/SZLHOLDINGS/llm-router-live" target="_blank" rel="noopener">Status Space (live, drift-checked)</a>
+        <a href="https://github.com/szl-holdings/szl-router" target="_blank" rel="noopener">SZL Router Â· OpenAI-compatible</a>
+        <a href="https://github.com/szl-holdings" target="_blank" rel="noopener">SZL Holdings Â· GitHub org</a>
         <a href="#surfaces">All nine surfaces</a></div>
+      <div class="lk"><strong style="color:var(--ink)">Estate Â· open source</strong>
+        <a href="https://github.com/szl-holdings/ouroboros" target="_blank" rel="noopener">ouroboros Â· self-referential loop</a>
+        <a href="https://github.com/szl-holdings/szl-formula-ledger" target="_blank" rel="noopener">szl-formula-ledger Â· formula genome</a>
+        <a href="https://github.com/szl-holdings/szl-energy-attest" target="_blank" rel="noopener">szl-energy-attest Â· grid_context (REPORTED)</a>
+        <a href="https://huggingface.co/SZLHOLDINGS" target="_blank" rel="noopener">Hugging Face org Â· SZLHOLDINGS</a></div>
     </div>
     <p class="disc">Honesty doctrine v11 LOCKED. The locked-proven Lean kernel is exactly <b>8</b>
       theorems {F1,F4,F7,F11,F12,F18,F19,F22}; the 144-entry genome registry is a separate, larger
+      set graded across four honesty tiers. The Î› trust gate is <b>Conjecture&nbsp;1</b> â€” an
       advisory bound, never a theorem and never 1.0. Receipt-chain integrity and DSSE signing are
       distinct states; signing is claimed only when persistent signer evidence is active and verification
       passes. Read-only routes never mint receipts. Energy is MEASURED only with a live exporter delta,
       otherwise honest SAMPLE. Supply
       chain is SLSA L1 honest (L2 build-attested); FedRAMP / IL5 / ATO accreditation is ROADMAP.
       <b style="color:var(--sub)">Alloy by SZL Holdings.</b>
+      Â© Stephen P. Lutar Jr. (ORCID 0009-0001-0110-4173) Â· Apache-2.0.</p>
   </div>
 </footer>
+<!-- ===================== SOVEREIGN IMPORTMAP (vendored, NO CDN) â€” Dev 2 ===================== -->
 <script type="importmap">
 { "imports": {
   "three": "/hero/vendor3d/three.module.min.js",
 } }
 </script>
+<!-- ===================== HERO BOOT (Three.js holographic field) â€” Dev 2 ===================== -->
 <script type="module">
   import { mountHero } from "/landing/app.js";
   const canvas = document.getElementById("hero-canvas");
   function showUnavailableOverclaimMetrics(){
     const count = $("hs-overclaims");
+    count.textContent = "â€”";
     count.classList.remove("proof");
     count.classList.add("gray");
+    $("hs-overclaim-time").textContent = "â€”";
     $("hs-overclaim-sample").textContent = "source unavailable";
+    $("hs-overclaims-chip").innerHTML = grayChip("SAMPLE Â· SNAPSHOT 2026-07-25 Â· SOURCE UNAVAILABLE");
   }
   async function loadOverclaimMetrics(){
       countElement.classList.add("proof");
       $("hs-overclaim-time").textContent = correctionTime;
       $("hs-overclaim-sample").textContent = "n="+sampleSize;
+      $("hs-overclaims-chip").innerHTML = grayChip("MEASURED Â· SNAPSHOT "+observed+" Â· DIGEST OK");
     } catch (_) {
       showUnavailableOverclaimMetrics();
     }
   }
+  // Advisory Î› is Conjecture 1: report its relation to the floor, never render pass/fail or green.
   function lamChip(elId, v){
     const el = $(elId); if(!el) return;
     if(num(v) === null){ el.innerHTML = downChip("N/A"); return; }
   }
   function setVerticals(v){
+    // v: {core,defense,insurance,finance,realestate} advisory Î› (numbers or null)
     [["core","v-core"],["defense","v-defense"],["insurance","v-insurance"],
      ["finance","v-finance"],["realestate","v-realestate"]].forEach(([k,id])=>{
       const val = fmtLam(v[k]);
   function setChain(receipts, alg, depth, head){
     $("chain-receipts").textContent = (num(receipts)===null) ? "UNAVAILABLE" : receipts.toLocaleString();
+    $("hs-receipts").textContent    = (num(receipts)===null) ? "â€”"           : receipts.toLocaleString();
+    $("hs-receipts-chip").innerHTML = (num(receipts)===null) ? downChip("offline") : grayChip((alg || "sha3_256") + " Â· CHAIN");
     if(alg) $("chain-alg").textContent = alg;
     $("chain-depth").textContent = (num(depth)===null) ? "N/A" : depth.toLocaleString();
     // Normalize head to the receipt id STRING. Some feeds (e.g. org/overview)
     const headId = (head && typeof head === "object")
       ? (head.receipt_id || head.id || head.digest || "")
       : head;
+    if(headId){ const h = String(headId); $("chain-head").textContent = h.length>14 ? (h.slice(0,10)+"â€¦"+h.slice(-4)) : h; }
     else { $("chain-head").textContent = "N/A"; }
   }
     }catch(e){ return false; }
   }
+  // ---- (B) fallbacks â€” each source degrades to honest N/A independently ----
   async function loadGenomeTiers(){
     try{
       const g = await getJSON("/api/a11oy/v1/genome");
          if(Array.isArray(l.receipts) && l.receipts.length){ head = l.receipts[l.receipts.length-1].receipt_id; }
          if(receipts === null) receipts = depth; ok = true; }catch(e){}
     setChain(receipts, alg, depth, head);
+    $("chain-src").innerHTML = ok ? grayChip((alg || "sha3_256") + " Â· CHAIN") : downChip("UNAVAILABLE");
   }
   // ---- live estate pulse: reachability is reported separately from correctness ----
         const s = d.summary && d.summary.summary || {};
         if(!d.matrix_available) throw new Error("matrix unavailable");
         const checked = Boolean(d.probe_verdict_available);
+        pulseState("contract", checked ? "REACHABLE" : "SNAPSHOT", (s.tabs || "Published")+" tabs Â· "+(s.endpoints || "declared")+" endpoint contracts Â· "+(checked ? "deployment probe attached." : "static contract; deployment probe pending."));
       }).catch(() => pulseState("contract", "UNAVAILABLE", "Tab contract is not bundled with this deployment.")),
       pulseJSON("/api/a11oy/v1/ledger").then(d => pulseState("ledger", "REACHABLE", (typeof d.count === "number" ? d.count : "Current")+" receipts returned by the read; verify timestamp and chain state in the source."))
         .catch(() => pulseState("ledger", "UNAVAILABLE", "Receipt ledger did not answer this session.")),
       }).catch(() => pulseState("mesh", "UNAVAILABLE", "Mesh state did not answer this session."))
     ];
     await Promise.allSettled(checks);
+    if($("pulse-checked")) $("pulse-checked").textContent = "Checked "+new Date().toLocaleString()+" Â· read-only Â· cache disabled";
   }
   // ---- (C) living body: load the anatomy Space in-frame only on click (perf + reduced-motion) ----
     const wrap = $("body-embed");
     const f = document.createElement("iframe");
     f.src = "https://szlholdings-anatomy.hf.space#estate";
+    f.title = "a11oy living body â€” 3D governed organism (V10 Â· Estate + Ayllu wirings)";
     f.loading = "lazy"; f.referrerPolicy = "no-referrer";
     f.allow = "fullscreen"; f.setAttribute("allowfullscreen", "");
     wrap.innerHTML = ""; wrap.appendChild(f);
     const wrap = $("body-embed");
     const f = document.createElement("iframe");
     f.src = "/static/3d/brain.html";
+    f.title = "The a11oy Brain â€” moldable 3D cortex, eight lobes wired to live public reads";
     f.loading = "lazy"; f.referrerPolicy = "no-referrer";
     f.allow = "fullscreen"; f.setAttribute("allowfullscreen", "");
     wrap.innerHTML = ""; wrap.appendChild(f);
 })();
 </script>
+<!-- SZL-FOURTH-WALL:v1:START â€” the page proves itself to the visitor. Claims-free: integrity & origin only. -->
 <section id="fourth-wall" style="background:#060D1F;border-top:1px solid #C9B787;padding:18px 24px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12.5px;color:#8FA3BF;line-height:1.7">
   <div style="max-width:980px;margin:0 auto">
+    <span style="color:#C9B787;letter-spacing:2px">âŸ¨ 4TH WALL âŸ©</span>
+    <span> You are reading rendered bytes. Don&rsquo;t trust them â€” hash them:</span>
     <button id="fw-hash-btn" style="margin-left:8px;background:transparent;border:1px solid #3AF4C8;color:#3AF4C8;padding:2px 10px;border-radius:3px;font:inherit;cursor:pointer">hash this page in your browser</button>
     <span id="fw-hash-out" style="color:#3AF4C8;word-break:break-all"></span>
+    <div style="margin-top:6px">canonical source: <a href="https://github.com/szl-holdings/a11oy/blob/main/a11oy_landing.html" style="color:#C9B787">szl-holdings/a11oy@main</a><span id="fw-main-sha"></span> Â· verify from outside:
       <code style="color:#E8D9AE;background:#0B1F3A;padding:1px 6px;border-radius:3px">curl -s https://raw.githubusercontent.com/szl-holdings/a11oy/main/a11oy_landing.html | sha256sum</code>
     </div>
+    <div style="margin-top:4px;color:#5c6f8a">This proves integrity &amp; origin of this page only â€” never the accuracy of anything written on it. Doctrine v11. Expect the two hashes to differ by exactly the declared deltas: the server injects the operator-widget <code>&lt;script&gt;</code> tag in-memory, and the deployer may rewrite asset paths. In-browser hash = bytes as served; curl hash = canonical source; the attested sync + drift guards bind the two.</div>
   </div>
 </section>
 <script>

govern_showcase.html CHANGED Viewed

The diff for this file is too large to render. See raw diff

pages/assurance.html CHANGED Viewed

@@ -1,13 +1,13 @@
-<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1" />
-<title>a11oy — AI Assurance for WDP-era Agentic AI</title>
 <style>
   /* =====================================================================
-     a11oy Assurance Surface — elite showcase aesthetic
-     Dark palette · Cabinet Grotesk / JetBrains Mono · honest-label chips
      ===================================================================== */
   @import url('https://fonts.googleapis.com/css2?family=JetBrains+Mono:ital,wght@0,400;0,600;1,400&display=swap');
@@ -403,7 +403,7 @@
   <nav class="nav-links">
     <a href="/verify" class="nav-back">Verify Receipt</a>
     <a href="/willay" class="nav-back">WILLAY</a>
-    <a href="/console" class="nav-back">← Console</a>
   </nav>
 </header>
@@ -411,39 +411,39 @@
 <main class="page">
   <!-- =====================================================================
-       A — HERO
        ===================================================================== -->
   <section class="section">
     <div class="hero">
-      <div class="hero-eyebrow">WDP · Advana · CDAO · Agentic AI</div>
       <h1>Verifiable AI Assurance<br>for the <span class="hl">War Data Platform</span> era.</h1>
       <p class="hero-sub">
         The Jan-2026 DoD memo restructuring Advana into WDP calls for
         <strong>agentic AI</strong> + <strong>enhanced auditability</strong>.
         a11oy is the governance + verifiable-provenance overlay that produces
-        the auditability evidence CDAO/RMF demands — one cryptographically
         signed receipt per AI decision, buyer-verifiable offline.
       </p>
       <div class="hero-honest">
-        <span class="hero-honest-icon">⚠</span>
         <span>
-          <strong>Honest status:</strong> a11oy is the assurance overlay — NOT an ATO-authorized system.
           ATO / IL5 / FedRAMP-High accreditation: <span class="chip chip-roadmap">ROADMAP</span>.
-          Stated plainly — the honesty is the sell to an auditor audience.
         </span>
       </div>
       <div class="hero-chips">
-        <span class="chip chip-live">DSSE Signed Receipts · LIVE</span>
-        <span class="chip chip-live">WebCrypto Verify · LIVE</span>
-        <span class="chip chip-live">Policy Gates · LIVE</span>
-        <span class="chip chip-roadmap">ATO / IL5 / FedRAMP · ROADMAP</span>
-        <span class="chip chip-info">a11oy = Overlay · NOT Replacement</span>
       </div>
     </div>
   </section>
   <!-- =====================================================================
-       B — ASSURANCE MATRIX
        ===================================================================== -->
   <section class="section" id="section-matrix">
     <div class="section-head">
@@ -451,24 +451,24 @@
       <div>
         <div class="section-title">CDAO / DoD AI Assurance Requirements Matrix</div>
         <div class="section-desc">
-          Each row: a real CDAO/DoD/OMB requirement → the a11oy artifact that satisfies it,
-          with honest status. ROADMAP items are labeled plainly — no fabricated compliance.
         </div>
       </div>
     </div>
     <div id="matrix-container">
       <div class="matrix-loading">
-        <span class="spinner"></span> Loading assurance matrix from /api/a11oy/v1/assurance/matrix…
       </div>
     </div>
     <div style="margin-top:14px; font-size:12px; color:var(--text-mute);">
       Status key:
-      <span class="chip chip-live">LIVE</span> operational today ·
-      <span class="chip chip-measured">MEASURED</span> real data ·
-      <span class="chip chip-sample">SAMPLE</span> demo only ·
-      <span class="chip chip-modeled">MODELED</span> model-derived ·
       <span class="chip chip-roadmap">ROADMAP</span> planned / not yet delivered
     </div>
@@ -480,29 +480,29 @@
       <div style="font-size:12px;color:var(--text-dim);margin-bottom:12px;">
         One signed, offline-verifiable JSON bundling the assurance matrix, khipu chain heads
         (re-walked <code>links_intact</code>), the lake health snapshot, and the doctrine
-        snapshot — self-hashed with <strong>sha3_256</strong> so an auditor re-verifies offline.
         Honest: integrity is COMPUTED, not asserted; signature is the demo key (NOT production cosign).
       </div>
       <div class="btn-row">
         <button class="btn btn-primary" id="evidence-pack-btn" onclick="downloadEvidencePack()">
           Download Evidence Pack
         </button>
-        <a class="btn" href="/api/a11oy/v1/assurance/evidence-pack" target="_blank">View JSON →</a>
       </div>
       <div id="evidence-pack-status" class="status-line"></div>
     </div>
   </section>
   <!-- =====================================================================
-       C — LIVE PROOF WIDGET (run governed decision → sign → verify)
        ===================================================================== -->
   <section class="section" id="section-proof">
     <div class="section-head">
       <div class="section-letter">C</div>
       <div>
-        <div class="section-title">Live Proof: Run → Sign → Verify Yourself</div>
         <div class="section-desc">
-          Run a governed inference → receive a DSSE-signed Khipu receipt →
           verify the ECDSA-P256 signature in-browser via WebCrypto (zero server round-trip for verification).
         </div>
       </div>
@@ -523,31 +523,31 @@
       <div class="proof-body">
         <div class="btn-row">
           <button class="btn btn-primary" id="proof-run-btn" onclick="runProof()">
-            Run Governed Decision → Get Signed Receipt → Verify
           </button>
         </div>
         <div id="proof-status" class="status-line"></div>
         <div id="proof-verdict" style="display:none"></div>
         <div id="proof-output" class="output" style="display:none"></div>
         <div style="margin-top:14px; font-size:12px; color:var(--text-mute);">
-          <span class="conj">Λ Conjecture 1 — advisory, NOT a theorem</span>
-          &nbsp;·&nbsp;
-          <a href="/verify" style="font-size:12px">Open full /verify page →</a>
         </div>
       </div>
     </div>
   </section>
   <!-- =====================================================================
-       D — WILLAY FOR DEFENSE
        ===================================================================== -->
   <section class="section" id="section-willay">
     <div class="section-head">
       <div class="section-letter">D</div>
       <div>
-        <div class="section-title">WILLAY — Signed Refusals for Defense</div>
         <div class="section-desc">
-          An agent that can refuse — and prove why, signed.
           Critical for agentic AI in defense: every denial is a
           cryptographically-signed, auditable artifact.
         </div>
@@ -555,7 +555,7 @@
     </div>
     <div class="willay-card">
-      <div class="willay-icon">⚡</div>
       <div class="willay-content">
         <h3>What Makes a Signed Refusal Different</h3>
         <div class="willay-quote">
@@ -564,23 +564,23 @@
           WILLAY produces a DSSE-signed denial receipt that any auditor can verify.
         </div>
         <p>
-          Every WILLAY denial embeds: the triggering gate name, the Λ advisory score
-          (Conjecture 1 label), the hash-chain link (prev→digest), and the timestamp —
           all under ECDSA-P256 signature. The authorization package has a machine-verifiable
           TEVV artifact for every denied call, not just allowed ones.
         </p>
         <div style="display:flex; gap:10px; flex-wrap:wrap; margin-bottom:16px">
-          <span class="chip chip-live">Signed denial receipts · LIVE</span>
-          <span class="conj">Λ Conjecture 1 — advisory</span>
           <span class="chip chip-info">Auditor-verifiable offline</span>
         </div>
-        <a href="/willay" class="btn-willay">Open WILLAY — Signed Refusals →</a>
       </div>
     </div>
   </section>
   <!-- =====================================================================
-       E — WHERE A11OY FITS (honest diagram)
        ===================================================================== -->
   <section class="section" id="section-fit">
     <div class="section-head">
@@ -603,16 +603,16 @@
           <rect x="20" y="12" width="600" height="70" rx="10" fill="#0c1a33" stroke="#1e3a8a" stroke-width="1.5"/>
           <text x="36" y="36" font-family="'JetBrains Mono', monospace" font-size="10" fill="#6c8ef5" font-weight="700" letter-spacing="1">GOVERNANCE + TRUST OVERLAY</text>
           <text x="36" y="56" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="16" fill="#e8eaf0" font-weight="800">a11oy</text>
-          <text x="100" y="56" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="13" fill="#8891a8">signed receipts · policy gates · honest labels · WILLAY refusals</text>
-          <text x="36" y="73" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="11" fill="#4a5068">DSSE · ECDSA-P256 · WebCrypto-verifiable · Λ advisory (Conjecture 1)</text>
           <!-- Arrow -->
-          <text x="280" y="103" font-family="monospace" font-size="12" fill="#4a5068" text-anchor="middle">sits on top of ↓</text>
           <!-- Platform layer -->
           <rect x="20" y="116" width="600" height="70" rx="10" fill="#0d1a0d" stroke="#2a3a1a" stroke-width="1.5"/>
           <text x="36" y="136" font-family="'JetBrains Mono', monospace" font-size="10" fill="#86efac" font-weight="700" letter-spacing="1">SYSTEM OF RECORD</text>
           <text x="36" y="158" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="14" fill="#86efac" font-weight="800">WDP / Advana</text>
-          <text x="150" y="158" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="13" fill="#8891a8"> · Palantir Foundry · Databricks Unity Catalog</text>
-          <text x="36" y="175" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="11" fill="#4a5068">data · ontology · lineage · column governance → stays authoritative</text>
         </svg>
         <div class="fit-list">
@@ -630,7 +630,7 @@
           </div>
           <div class="fit-item fit-item-yes">
             <div class="fit-item-label yes">a11oy IS</div>
-            Signed refusal explainer (WILLAY) — not a black-box boolean gate
           </div>
           <div class="fit-item fit-item-no">
             <div class="fit-item-label no">a11oy IS NOT</div>
@@ -642,11 +642,11 @@
           </div>
           <div class="fit-item fit-item-no">
             <div class="fit-item-label no">a11oy IS NOT</div>
-            An accredited system (ATO / IL5 / FedRAMP-High: ROADMAP — stated plainly)
           </div>
           <div class="fit-item fit-item-no">
             <div class="fit-item-label no">a11oy IS NOT</div>
-            A certified classifier — Λ is Conjecture 1 (advisory; NOT a theorem)
           </div>
         </div>
@@ -655,7 +655,7 @@
           The Jan-2026 DoD memo explicitly calls for <em>agentic AI</em> + <em>enhanced auditability</em>
           toward a clean FY27/FY28 audit.
           Foundry shows data lineage. Unity Catalog shows column provenance.
-          a11oy gives you a cryptographic signature on the <em>AI decision itself</em> —
           something the buyer can verify offline, without trusting the provider.
         </div>
       </div>
@@ -664,7 +664,7 @@
       <div style="background:var(--bg-panel); border-top:1px solid var(--border); padding:14px 24px; display:flex; align-items:center; gap:12px; flex-wrap:wrap;">
         <span style="font-size:11px; color:var(--text-mute); font-weight:700; text-transform:uppercase; letter-spacing:.07em">API</span>
         <a href="/api/a11oy/v1/assurance/fit" style="font-size:12px; font-family:var(--mono);" target="_blank">/api/a11oy/v1/assurance/fit</a>
-        <span style="font-size:11px; color:var(--text-mute)">→ full machine-readable fit statement</span>
         <span id="fit-status" style="font-size:11px; color:var(--text-mute); margin-left:auto"></span>
       </div>
     </div>
@@ -675,17 +675,17 @@
 <!-- ===== FOOTER ===== -->
 <footer class="footer">
   <p>
-    SZL Holdings · a11oy · Doctrine v11 · 8 kernel-proven formulas @ c7c0ba17 ·
-    Λ = Conjecture 1 (advisory) · Khipu BFT = Conjecture 2 ·
-    ATO/IL5/FedRAMP = ROADMAP (not accredited) ·
-    <a href="/api/a11oy/v1/assurance/matrix" target="_blank">Assurance Matrix API</a> ·
-    <a href="/verify" target="_blank">Verify a Receipt</a> ·
     <a href="/cosign.pub" target="_blank">cosign.pub</a>
   </p>
 </footer>
 <!-- ===================================================================
-     JAVASCRIPT — all in-browser, 0 CDN
      =================================================================== -->
 <script>
 "use strict";
@@ -717,7 +717,7 @@ function statusChip(status) {
 }
 /* ==================================================================
-   SECTION B — Load assurance matrix
    ================================================================== */
 async function loadMatrix() {
   var container = el('matrix-container');
@@ -729,8 +729,8 @@ async function loadMatrix() {
     data = await resp.json();
   } catch(e) {
     container.innerHTML = '<div class="matrix-loading" style="color:var(--amber)">'+
-      '⚠ Could not load matrix: '+escHTML(e.message)+'<br>'+
-      '<a href="/api/a11oy/v1/assurance/matrix" target="_blank" style="font-size:12px">Try API directly →</a>'+
       '</div>';
     return;
   }
@@ -751,7 +751,7 @@ async function loadMatrix() {
       : '';
     var sourceLink = r.source_url
       ? '<a class="source-link" href="'+escHTML(r.source_url)+'" target="_blank" rel="noopener">'+escHTML(r.source)+'</a>'
-      : escHTML(r.source || '—');
     html += '<tr>'+
       '<td class="status-col"><span class="req-id-badge">'+escHTML(r.req_id)+'</span></td>'+
@@ -769,7 +769,7 @@ async function loadMatrix() {
   // Honest note banner
   if (data.honest_note) {
     html += '<div style="margin-top:12px;background:var(--amber-dark);border:1px solid var(--amber-mid);border-radius:var(--radius);padding:12px 16px;font-size:12px;color:var(--amber)">'+
-      '⚠ '+escHTML(data.honest_note)+'</div>';
   }
   container.innerHTML = html;
@@ -825,14 +825,14 @@ async function importPubKeyFromPEM(pem) {
 }
 /* ==================================================================
-   SECTION C — Run governed decision → verify receipt
    ================================================================== */
 async function runProof() {
   var btn = el('proof-run-btn');
   btn.disabled = true;
   hide('proof-verdict');
   hide('proof-output');
-  setStatus('proof-status', 'Calling /api/a11oy/v1/govern/infer …', true);
   var data;
   try {
@@ -847,7 +847,7 @@ async function runProof() {
     btn.disabled = false; return;
   }
-  setStatus('proof-status', 'Fetching cosign.pub and verifying signature via WebCrypto …', true);
   var dsse    = data.dsse    || {};
   var receipt = data.receipt || {};
@@ -876,7 +876,7 @@ async function runProof() {
   var verified = false, verifyError = '', sigKeyid = '';
   if (!dsse.signed) {
-    verifyError = 'UNSIGNED envelope — private key not in runtime. Receipt chain still valid.';
   } else if (!sigs.length) {
     verifyError = 'No signatures in envelope.';
   } else {
@@ -884,7 +884,7 @@ async function runProof() {
     try {
       var sigBytes = b64Decode(sigEntry.sig||'');
       var rawSig = sigBytes;
-      if(sigBytes[0]===0x30){try{rawSig=derToRaw(sigBytes);}catch(e2){verifyError='DER→raw failed: '+e2.message;}}
       if(!verifyError){
         verified = await crypto.subtle.verify({name:'ECDSA',hash:'SHA-256'}, pubKey, rawSig.buffer, paeBytes.buffer);
         if(!verified && sigBytes[0]===0x30){
@@ -901,29 +901,29 @@ async function runProof() {
   var verdictHTML = '';
   if(verified){
-    verdictHTML='<div class="verdict-banner verdict-ok">✓ VERIFIED — WebCrypto ECDSA-P256 signature valid <span class="chip chip-ok">keyid: '+escHTML(sigKeyid)+'</span></div>';
   } else if(!dsse.signed){
-    verdictHTML='<div class="verdict-banner verdict-dim">⚠ UNSIGNED — private key not in runtime; receipt chain still valid</div>';
   } else {
-    verdictHTML='<div class="verdict-banner verdict-fail">✗ VERIFICATION FAILED — '+escHTML(verifyError)+'</div>';
   }
   var digestMatch = payloadDigestComputed===receiptDigest.substring(0,64);
   verdictHTML += '<div style="margin-bottom:12px">'+
     '<div class="hash-row"><span class="hash-label">Payload digest:</span>'+
-    '<span class="hash-val '+(digestMatch?'hash-match':'hash-mismatch')+'">'+payloadDigestComputed.substring(0,32)+'…</span>'+
     '<span class="chip '+(digestMatch?'chip-ok':'chip-err')+'">'+(digestMatch?'MATCH':'MISMATCH')+'</span></div>'+
     '<div class="hash-row"><span class="hash-label">PAE SHA-256:</span>'+
-    '<span class="hash-val">'+paeSHA.substring(0,32)+'…</span></div>'+
     '<div class="hash-row"><span class="hash-label">Chain prev:</span>'+
-    '<span class="hash-val">'+escHTML(String(chainPrev).substring(0,32))+'…</span></div>'+
     '<div class="hash-row"><span class="hash-label">Chain digest:</span>'+
-    '<span class="hash-val">'+escHTML(String(chainDigest).substring(0,32))+'…</span></div>'+
     '</div>'+
     '<div style="font-size:12px;color:var(--text-dim)">'+
-    '<span class="conj">Λ Conjecture 1 — advisory</span>'+
-    ' Λ = '+escHTML(String((data.governance||{}).lambda ?? 'N/A'))+
-    ' &nbsp;·&nbsp; Energy: <span class="chip chip-dim">'+escHTML(((data.energy||{}).label)||'UNAVAILABLE')+'</span>'+
     '</div>';
   el('proof-verdict').innerHTML = verdictHTML;
@@ -934,13 +934,13 @@ async function runProof() {
     'governance.lambda':      (data.governance||{}).lambda,
     'governance.lambda_kind': (data.governance||{}).lambda_kind,
     'receipt.seq':    receipt.seq,
-    'receipt.prev':   String(chainPrev).substring(0,32)+'…',
-    'receipt.digest': String(chainDigest).substring(0,32)+'…',
     'dsse.signed':        dsse.signed,
     'dsse.payloadType':   dsse.payloadType,
-    'verify.payload_sha256': payloadDigestComputed.substring(0,32)+'…',
-    'verify.pae_sha256':     paeSHA.substring(0,32)+'…',
-    'verify.result': verified ? 'VERIFIED ✓' : (dsse.signed===false ? 'UNSIGNED (no key in runtime)' : 'FAILED: '+verifyError),
     'energy.label':   (data.energy||{}).label,
     'honesty':        data.honesty,
   };
@@ -949,14 +949,14 @@ async function runProof() {
   show('proof-output');
   setStatus('proof-status',
-    verified ? '✓ WebCrypto verified — real ECDSA-P256 signature over DSSE PAE.' :
     (dsse.signed===false ? 'Unsigned receipt (key absent from runtime). Chain valid.' :
     'Verification result: '+verifyError));
   btn.disabled = false;
 }
 /* ==================================================================
-   SECTION E — Load fit data and mark live
    ================================================================== */
 async function checkFit() {
   var s = el('fit-status'); if(!s) return;
@@ -973,12 +973,12 @@ async function checkFit() {
 }
 /* ==================================================================
-   SECTION B' — Download Auditor Evidence Pack (sha3_256 self-verifiable)
    ================================================================== */
 async function downloadEvidencePack() {
   var btn = el('evidence-pack-btn');
   if (btn) btn.disabled = true;
-  setStatus('evidence-pack-status', 'Assembling evidence pack from live surfaces…', true);
   try {
     var resp = await fetch('/api/a11oy/v1/assurance/evidence-pack');
     var data = await resp.json();
@@ -996,16 +996,16 @@ async function downloadEvidencePack() {
     setTimeout(function(){ URL.revokeObjectURL(url); }, 4000);
     // We do NOT recompute sha3_256 in-browser (WebCrypto has no SHA3, and shipping a
-    // hand-rolled hash would risk a false result — honesty over a fake green check).
     // The digest + exact canonicalization are in the pack so an auditor re-verifies
     // offline with a trusted sha3_256 tool. We only surface what the server reported.
     var sig = (data.signature || {});
-    var sigMsg = sig.signed ? (' · signed [' + (sig.keyid || 'demo') + ']') : ' · honest-unsigned (DSSE_PLACEHOLDER)';
     setStatus('evidence-pack-status',
-      '✓ Downloaded. sha3_256=' + String(data.pack_sha3_256 || '').substring(0, 24) + '…' + sigMsg +
-      ' · re-verify offline per the pack’s digest_canonicalization note.', false);
   } catch(e) {
-    setStatus('evidence-pack-status', '⚠ Could not assemble evidence pack: ' + e.message, false);
   } finally {
     if (btn) btn.disabled = false;
   }
@@ -1020,3 +1020,4 @@ window.addEventListener('DOMContentLoaded', function() {
 </body>
 </html>

+<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>a11oy â€” AI Assurance for WDP-era Agentic AI</title>
 <style>
   /* =====================================================================
+     a11oy Assurance Surface â€” elite showcase aesthetic
+     Dark palette Â· Cabinet Grotesk / JetBrains Mono Â· honest-label chips
      ===================================================================== */
   @import url('https://fonts.googleapis.com/css2?family=JetBrains+Mono:ital,wght@0,400;0,600;1,400&display=swap');
   <nav class="nav-links">
     <a href="/verify" class="nav-back">Verify Receipt</a>
     <a href="/willay" class="nav-back">WILLAY</a>
+    <a href="/console" class="nav-back">â† Console</a>
   </nav>
 </header>
 <main class="page">
   <!-- =====================================================================
+       A â€” HERO
        ===================================================================== -->
   <section class="section">
     <div class="hero">
+      <div class="hero-eyebrow">WDP Â· Advana Â· CDAO Â· Agentic AI</div>
       <h1>Verifiable AI Assurance<br>for the <span class="hl">War Data Platform</span> era.</h1>
       <p class="hero-sub">
         The Jan-2026 DoD memo restructuring Advana into WDP calls for
         <strong>agentic AI</strong> + <strong>enhanced auditability</strong>.
         a11oy is the governance + verifiable-provenance overlay that produces
+        the auditability evidence CDAO/RMF demands â€” one cryptographically
         signed receipt per AI decision, buyer-verifiable offline.
       </p>
       <div class="hero-honest">
+        <span class="hero-honest-icon">âš </span>
         <span>
+          <strong>Honest status:</strong> a11oy is the assurance overlay â€” NOT an ATO-authorized system.
           ATO / IL5 / FedRAMP-High accreditation: <span class="chip chip-roadmap">ROADMAP</span>.
+          Stated plainly â€” the honesty is the sell to an auditor audience.
         </span>
       </div>
       <div class="hero-chips">
+        <span class="chip chip-live">DSSE Signed Receipts Â· LIVE</span>
+        <span class="chip chip-live">WebCrypto Verify Â· LIVE</span>
+        <span class="chip chip-live">Policy Gates Â· LIVE</span>
+        <span class="chip chip-roadmap">ATO / IL5 / FedRAMP Â· ROADMAP</span>
+        <span class="chip chip-info">a11oy = Overlay Â· NOT Replacement</span>
       </div>
     </div>
   </section>
   <!-- =====================================================================
+       B â€” ASSURANCE MATRIX
        ===================================================================== -->
   <section class="section" id="section-matrix">
     <div class="section-head">
       <div>
         <div class="section-title">CDAO / DoD AI Assurance Requirements Matrix</div>
         <div class="section-desc">
+          Each row: a real CDAO/DoD/OMB requirement â†’ the a11oy artifact that satisfies it,
+          with honest status. ROADMAP items are labeled plainly â€” no fabricated compliance.
         </div>
       </div>
     </div>
     <div id="matrix-container">
       <div class="matrix-loading">
+        <span class="spinner"></span> Loading assurance matrix from /api/a11oy/v1/assurance/matrixâ€¦
       </div>
     </div>
     <div style="margin-top:14px; font-size:12px; color:var(--text-mute);">
       Status key:
+      <span class="chip chip-live">LIVE</span> operational today Â·
+      <span class="chip chip-measured">MEASURED</span> real data Â·
+      <span class="chip chip-sample">SAMPLE</span> demo only Â·
+      <span class="chip chip-modeled">MODELED</span> model-derived Â·
       <span class="chip chip-roadmap">ROADMAP</span> planned / not yet delivered
     </div>
       <div style="font-size:12px;color:var(--text-dim);margin-bottom:12px;">
         One signed, offline-verifiable JSON bundling the assurance matrix, khipu chain heads
         (re-walked <code>links_intact</code>), the lake health snapshot, and the doctrine
+        snapshot â€” self-hashed with <strong>sha3_256</strong> so an auditor re-verifies offline.
         Honest: integrity is COMPUTED, not asserted; signature is the demo key (NOT production cosign).
       </div>
       <div class="btn-row">
         <button class="btn btn-primary" id="evidence-pack-btn" onclick="downloadEvidencePack()">
           Download Evidence Pack
         </button>
+        <a class="btn" href="/api/a11oy/v1/assurance/evidence-pack" target="_blank">View JSON â†’</a>
       </div>
       <div id="evidence-pack-status" class="status-line"></div>
     </div>
   </section>
   <!-- =====================================================================
+       C â€” LIVE PROOF WIDGET (run governed decision â†’ sign â†’ verify)
        ===================================================================== -->
   <section class="section" id="section-proof">
     <div class="section-head">
       <div class="section-letter">C</div>
       <div>
+        <div class="section-title">Live Proof: Run â†’ Sign â†’ Verify Yourself</div>
         <div class="section-desc">
+          Run a governed execution â†’ receive a DSSE-signed Khipu receipt â†’
           verify the ECDSA-P256 signature in-browser via WebCrypto (zero server round-trip for verification).
         </div>
       </div>
       <div class="proof-body">
         <div class="btn-row">
           <button class="btn btn-primary" id="proof-run-btn" onclick="runProof()">
+            Run Governed Decision â†’ Get Signed Receipt â†’ Verify
           </button>
         </div>
         <div id="proof-status" class="status-line"></div>
         <div id="proof-verdict" style="display:none"></div>
         <div id="proof-output" class="output" style="display:none"></div>
         <div style="margin-top:14px; font-size:12px; color:var(--text-mute);">
+          <span class="conj">Î› Conjecture 1 â€” advisory, NOT a theorem</span>
+          &nbsp;Â·&nbsp;
+          <a href="/verify" style="font-size:12px">Open full /verify page â†’</a>
         </div>
       </div>
     </div>
   </section>
   <!-- =====================================================================
+       D â€” WILLAY FOR DEFENSE
        ===================================================================== -->
   <section class="section" id="section-willay">
     <div class="section-head">
       <div class="section-letter">D</div>
       <div>
+        <div class="section-title">WILLAY â€” Signed Refusals for Defense</div>
         <div class="section-desc">
+          An agent that can refuse â€” and prove why, signed.
           Critical for agentic AI in defense: every denial is a
           cryptographically-signed, auditable artifact.
         </div>
     </div>
     <div class="willay-card">
+      <div class="willay-icon">âš¡</div>
       <div class="willay-content">
         <h3>What Makes a Signed Refusal Different</h3>
         <div class="willay-quote">
           WILLAY produces a DSSE-signed denial receipt that any auditor can verify.
         </div>
         <p>
+          Every WILLAY denial embeds: the triggering gate name, the Î› advisory score
+          (Conjecture 1 label), the hash-chain link (prevâ†’digest), and the timestamp â€”
           all under ECDSA-P256 signature. The authorization package has a machine-verifiable
           TEVV artifact for every denied call, not just allowed ones.
         </p>
         <div style="display:flex; gap:10px; flex-wrap:wrap; margin-bottom:16px">
+          <span class="chip chip-live">Signed denial receipts Â· LIVE</span>
+          <span class="conj">Î› Conjecture 1 â€” advisory</span>
           <span class="chip chip-info">Auditor-verifiable offline</span>
         </div>
+        <a href="/willay" class="btn-willay">Open WILLAY â€” Signed Refusals â†’</a>
       </div>
     </div>
   </section>
   <!-- =====================================================================
+       E â€” WHERE A11OY FITS (honest diagram)
        ===================================================================== -->
   <section class="section" id="section-fit">
     <div class="section-head">
           <rect x="20" y="12" width="600" height="70" rx="10" fill="#0c1a33" stroke="#1e3a8a" stroke-width="1.5"/>
           <text x="36" y="36" font-family="'JetBrains Mono', monospace" font-size="10" fill="#6c8ef5" font-weight="700" letter-spacing="1">GOVERNANCE + TRUST OVERLAY</text>
           <text x="36" y="56" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="16" fill="#e8eaf0" font-weight="800">a11oy</text>
+          <text x="100" y="56" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="13" fill="#8891a8">signed receipts Â· policy gates Â· honest labels Â· WILLAY refusals</text>
+          <text x="36" y="73" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="11" fill="#4a5068">DSSE Â· ECDSA-P256 Â· WebCrypto-verifiable Â· Î› advisory (Conjecture 1)</text>
           <!-- Arrow -->
+          <text x="280" y="103" font-family="monospace" font-size="12" fill="#4a5068" text-anchor="middle">sits on top of â†“</text>
           <!-- Platform layer -->
           <rect x="20" y="116" width="600" height="70" rx="10" fill="#0d1a0d" stroke="#2a3a1a" stroke-width="1.5"/>
           <text x="36" y="136" font-family="'JetBrains Mono', monospace" font-size="10" fill="#86efac" font-weight="700" letter-spacing="1">SYSTEM OF RECORD</text>
           <text x="36" y="158" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="14" fill="#86efac" font-weight="800">WDP / Advana</text>
+          <text x="150" y="158" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="13" fill="#8891a8"> Â· Palantir Foundry Â· Databricks Unity Catalog</text>
+          <text x="36" y="175" font-family="'Cabinet Grotesk', 'Inter', sans-serif" font-size="11" fill="#4a5068">data Â· ontology Â· lineage Â· column governance â†’ stays authoritative</text>
         </svg>
         <div class="fit-list">
           </div>
           <div class="fit-item fit-item-yes">
             <div class="fit-item-label yes">a11oy IS</div>
+            Signed refusal explainer (WILLAY) â€” not a black-box boolean gate
           </div>
           <div class="fit-item fit-item-no">
             <div class="fit-item-label no">a11oy IS NOT</div>
           </div>
           <div class="fit-item fit-item-no">
             <div class="fit-item-label no">a11oy IS NOT</div>
+            An accredited system (ATO / IL5 / FedRAMP-High: ROADMAP â€” stated plainly)
           </div>
           <div class="fit-item fit-item-no">
             <div class="fit-item-label no">a11oy IS NOT</div>
+            A certified classifier â€” Î› is Conjecture 1 (advisory; NOT a theorem)
           </div>
         </div>
           The Jan-2026 DoD memo explicitly calls for <em>agentic AI</em> + <em>enhanced auditability</em>
           toward a clean FY27/FY28 audit.
           Foundry shows data lineage. Unity Catalog shows column provenance.
+          a11oy gives you a cryptographic signature on the <em>AI decision itself</em> â€”
           something the buyer can verify offline, without trusting the provider.
         </div>
       </div>
       <div style="background:var(--bg-panel); border-top:1px solid var(--border); padding:14px 24px; display:flex; align-items:center; gap:12px; flex-wrap:wrap;">
         <span style="font-size:11px; color:var(--text-mute); font-weight:700; text-transform:uppercase; letter-spacing:.07em">API</span>
         <a href="/api/a11oy/v1/assurance/fit" style="font-size:12px; font-family:var(--mono);" target="_blank">/api/a11oy/v1/assurance/fit</a>
+        <span style="font-size:11px; color:var(--text-mute)">â†’ full machine-readable fit statement</span>
         <span id="fit-status" style="font-size:11px; color:var(--text-mute); margin-left:auto"></span>
       </div>
     </div>
 <!-- ===== FOOTER ===== -->
 <footer class="footer">
   <p>
+    SZL Holdings Â· a11oy Â· Doctrine v11 Â· 8 kernel-proven formulas @ c7c0ba17 Â·
+    Î› = Conjecture 1 (advisory) Â· Khipu BFT = Conjecture 2 Â·
+    ATO/IL5/FedRAMP = ROADMAP (not accredited) Â·
+    <a href="/api/a11oy/v1/assurance/matrix" target="_blank">Assurance Matrix API</a> Â·
+    <a href="/verify" target="_blank">Verify a Receipt</a> Â·
     <a href="/cosign.pub" target="_blank">cosign.pub</a>
   </p>
 </footer>
 <!-- ===================================================================
+     JAVASCRIPT â€” all in-browser, 0 CDN
      =================================================================== -->
 <script>
 "use strict";
 }
 /* ==================================================================
+   SECTION B â€” Load assurance matrix
    ================================================================== */
 async function loadMatrix() {
   var container = el('matrix-container');
     data = await resp.json();
   } catch(e) {
     container.innerHTML = '<div class="matrix-loading" style="color:var(--amber)">'+
+      'âš  Could not load matrix: '+escHTML(e.message)+'<br>'+
+      '<a href="/api/a11oy/v1/assurance/matrix" target="_blank" style="font-size:12px">Try API directly â†’</a>'+
       '</div>';
     return;
   }
       : '';
     var sourceLink = r.source_url
       ? '<a class="source-link" href="'+escHTML(r.source_url)+'" target="_blank" rel="noopener">'+escHTML(r.source)+'</a>'
+      : escHTML(r.source || 'â€”');
     html += '<tr>'+
       '<td class="status-col"><span class="req-id-badge">'+escHTML(r.req_id)+'</span></td>'+
   // Honest note banner
   if (data.honest_note) {
     html += '<div style="margin-top:12px;background:var(--amber-dark);border:1px solid var(--amber-mid);border-radius:var(--radius);padding:12px 16px;font-size:12px;color:var(--amber)">'+
+      'âš  '+escHTML(data.honest_note)+'</div>';
   }
   container.innerHTML = html;
 }
 /* ==================================================================
+   SECTION C â€” Run governed decision â†’ verify receipt
    ================================================================== */
 async function runProof() {
   var btn = el('proof-run-btn');
   btn.disabled = true;
   hide('proof-verdict');
   hide('proof-output');
+  setStatus('proof-status', 'Calling /api/a11oy/v1/govern/infer â€¦', true);
   var data;
   try {
     btn.disabled = false; return;
   }
+  setStatus('proof-status', 'Fetching cosign.pub and verifying signature via WebCrypto â€¦', true);
   var dsse    = data.dsse    || {};
   var receipt = data.receipt || {};
   var verified = false, verifyError = '', sigKeyid = '';
   if (!dsse.signed) {
+    verifyError = 'UNSIGNED envelope â€” private key not in runtime. Receipt chain still valid.';
   } else if (!sigs.length) {
     verifyError = 'No signatures in envelope.';
   } else {
     try {
       var sigBytes = b64Decode(sigEntry.sig||'');
       var rawSig = sigBytes;
+      if(sigBytes[0]===0x30){try{rawSig=derToRaw(sigBytes);}catch(e2){verifyError='DERâ†’raw failed: '+e2.message;}}
       if(!verifyError){
         verified = await crypto.subtle.verify({name:'ECDSA',hash:'SHA-256'}, pubKey, rawSig.buffer, paeBytes.buffer);
         if(!verified && sigBytes[0]===0x30){
   var verdictHTML = '';
   if(verified){
+    verdictHTML='<div class="verdict-banner verdict-ok">âœ“ VERIFIED â€” WebCrypto ECDSA-P256 signature valid <span class="chip chip-ok">keyid: '+escHTML(sigKeyid)+'</span></div>';
   } else if(!dsse.signed){
+    verdictHTML='<div class="verdict-banner verdict-dim">âš  UNSIGNED â€” private key not in runtime; receipt chain still valid</div>';
   } else {
+    verdictHTML='<div class="verdict-banner verdict-fail">âœ— VERIFICATION FAILED â€” '+escHTML(verifyError)+'</div>';
   }
   var digestMatch = payloadDigestComputed===receiptDigest.substring(0,64);
   verdictHTML += '<div style="margin-bottom:12px">'+
     '<div class="hash-row"><span class="hash-label">Payload digest:</span>'+
+    '<span class="hash-val '+(digestMatch?'hash-match':'hash-mismatch')+'">'+payloadDigestComputed.substring(0,32)+'â€¦</span>'+
     '<span class="chip '+(digestMatch?'chip-ok':'chip-err')+'">'+(digestMatch?'MATCH':'MISMATCH')+'</span></div>'+
     '<div class="hash-row"><span class="hash-label">PAE SHA-256:</span>'+
+    '<span class="hash-val">'+paeSHA.substring(0,32)+'â€¦</span></div>'+
     '<div class="hash-row"><span class="hash-label">Chain prev:</span>'+
+    '<span class="hash-val">'+escHTML(String(chainPrev).substring(0,32))+'â€¦</span></div>'+
     '<div class="hash-row"><span class="hash-label">Chain digest:</span>'+
+    '<span class="hash-val">'+escHTML(String(chainDigest).substring(0,32))+'â€¦</span></div>'+
     '</div>'+
     '<div style="font-size:12px;color:var(--text-dim)">'+
+    '<span class="conj">Î› Conjecture 1 â€” advisory</span>'+
+    ' Î› = '+escHTML(String((data.governance||{}).lambda ?? 'N/A'))+
+    ' &nbsp;Â·&nbsp; Energy: <span class="chip chip-dim">'+escHTML(((data.energy||{}).label)||'UNAVAILABLE')+'</span>'+
     '</div>';
   el('proof-verdict').innerHTML = verdictHTML;
     'governance.lambda':      (data.governance||{}).lambda,
     'governance.lambda_kind': (data.governance||{}).lambda_kind,
     'receipt.seq':    receipt.seq,
+    'receipt.prev':   String(chainPrev).substring(0,32)+'â€¦',
+    'receipt.digest': String(chainDigest).substring(0,32)+'â€¦',
     'dsse.signed':        dsse.signed,
     'dsse.payloadType':   dsse.payloadType,
+    'verify.payload_sha256': payloadDigestComputed.substring(0,32)+'â€¦',
+    'verify.pae_sha256':     paeSHA.substring(0,32)+'â€¦',
+    'verify.result': verified ? 'VERIFIED âœ“' : (dsse.signed===false ? 'UNSIGNED (no key in runtime)' : 'FAILED: '+verifyError),
     'energy.label':   (data.energy||{}).label,
     'honesty':        data.honesty,
   };
   show('proof-output');
   setStatus('proof-status',
+    verified ? 'âœ“ WebCrypto verified â€” real ECDSA-P256 signature over DSSE PAE.' :
     (dsse.signed===false ? 'Unsigned receipt (key absent from runtime). Chain valid.' :
     'Verification result: '+verifyError));
   btn.disabled = false;
 }
 /* ==================================================================
+   SECTION E â€” Load fit data and mark live
    ================================================================== */
 async function checkFit() {
   var s = el('fit-status'); if(!s) return;
 }
 /* ==================================================================
+   SECTION B' â€” Download Auditor Evidence Pack (sha3_256 self-verifiable)
    ================================================================== */
 async function downloadEvidencePack() {
   var btn = el('evidence-pack-btn');
   if (btn) btn.disabled = true;
+  setStatus('evidence-pack-status', 'Assembling evidence pack from live surfacesâ€¦', true);
   try {
     var resp = await fetch('/api/a11oy/v1/assurance/evidence-pack');
     var data = await resp.json();
     setTimeout(function(){ URL.revokeObjectURL(url); }, 4000);
     // We do NOT recompute sha3_256 in-browser (WebCrypto has no SHA3, and shipping a
+    // hand-rolled hash would risk a false result â€” honesty over a fake green check).
     // The digest + exact canonicalization are in the pack so an auditor re-verifies
     // offline with a trusted sha3_256 tool. We only surface what the server reported.
     var sig = (data.signature || {});
+    var sigMsg = sig.signed ? (' Â· signed [' + (sig.keyid || 'demo') + ']') : ' Â· honest-unsigned (DSSE_PLACEHOLDER)';
     setStatus('evidence-pack-status',
+      'âœ“ Downloaded. sha3_256=' + String(data.pack_sha3_256 || '').substring(0, 24) + 'â€¦' + sigMsg +
+      ' Â· re-verify offline per the packâ€™s digest_canonicalization note.', false);
   } catch(e) {
+    setStatus('evidence-pack-status', 'âš  Could not assemble evidence pack: ' + e.message, false);
   } finally {
     if (btn) btn.disabled = false;
   }
 </body>
 </html>

pages/chaski.html CHANGED Viewed

@@ -1,11 +1,11 @@
-<!DOCTYPE html>
-<!-- SPDX-License-Identifier: Apache-2.0 © 2026 Lutar, Stephen P. — SZL Holdings · Doctrine v13 -->
-<!-- CHASKI surface — reception/onboarding/first-touch organ. ADDITIVE per Doctrine v13 §2.1. -->
 <html lang="en">
 <head>
 <meta charset="utf-8"/>
 <meta name="viewport" content="width=device-width, initial-scale=1"/>
-<title>a11oy · Smart Routing — Intelligent Request Dispatch</title>
 <style>
 :root{--bg:#0b0d12;--panel:#12151d;--ink:#e7ecf3;--mut:#8a93a6;--acc:#7cc4ff;--ok:#54d18c;--warn:#ffcf5c;--bad:#ff6b6b;--line:#222838;--mono:'SF Mono',ui-monospace,'JetBrains Mono',Menlo,Consolas,monospace}
 *{box-sizing:border-box}
@@ -41,12 +41,12 @@ footer{margin-top:34px;border-top:1px solid var(--line);padding-top:14px;color:v
 <body>
 <div class="wrap">
   <div class="top">
-    <div><span class="brand">a11oy</span> <span class="tag">· Reception &amp; Routing · Doctrine v13 §2.1</span></div>
     <div class="nav"><a href="/">home</a><a href="/chaski">routing</a><a href="/willay">willay</a><a href="/verify">verify</a></div>
   </div>
   <h1>Intelligent Request Routing</h1>
-  <p class="sub">The a11oy reception layer: greets visitors, explains what a11oy does in one breath, and routes each request to the right capability by stated need. Routing factor: <code>exp(-κ·backpressure)·𝟙[routable] ∈ [0,1]</code> — the F7 admission gate (admissible multiplier: can only gate harder, never inflate utility).</p>
   <div class="scene"><canvas id="welcome3d" style="width:100%;height:100%;display:block;border-radius:12px"></canvas></div>
   <p class="mut" style="text-align:center;margin-top:-6px">The router delivers each visitor to the right capability node. Drag to orbit.</p>
@@ -56,36 +56,36 @@ footer{margin-top:34px;border-top:1px solid var(--line);padding-top:14px;color:v
     <div class="path">GET /api/a11oy/chaski/welcome</div>
     <button onclick="callWelcome()">Greet me</button>
     <div id="flags"></div>
-    <pre id="welcomeout">— click to receive the first-touch greeting + flagship map —</pre>
   </div>
   <div class="card">
-    <h3>Onboard — route by stated need</h3>
-    <div class="path">GET /onboard/start · POST /onboard/step</div>
     <input id="need" placeholder="what do you want to do? e.g. 'sync data', 'fly a drone'" size="46"/>
-    <button onclick="runOnboard()">Run onboarding → route me</button>
-    <pre id="onboardout">— enter a need and the router will dispatch you, applying the reception gate —</pre>
   </div>
   <div class="card">
     <h3>First-touch heatmap (UX metrics)</h3>
     <div class="path">GET /api/a11oy/chaski/heatmap</div>
     <button onclick="callHeat()">Load heatmap</button>
-    <pre id="heatout">— first-touch event counts, route distribution, completion rate, Khipu depth —</pre>
   </div>
   <div class="honest">
-    <b>Honest labels (Doctrine v13 §5):</b> every routing action emits a <b>signed-receipt</b> (SHA3-256 hash-chain). The routing factor is an <b>admissible</b> multiplier ∈ [0,1] — it can only gate harder, never inflate utility. The memory-cortex sync courier is a distinct lower layer.
   </div>
-  <footer>a11oy · reception &amp; routing layer · Doctrine v13 (additive over v12 / v11 LOCKED 749/14/163 · 13-axis · replay <code>bacf5443…631fc5</code>) · — Yachay</footer>
 </div>
 <script>
 const API='/api/a11oy/chaski';
 function show(id,o){document.getElementById(id).textContent=typeof o==='string'?o:JSON.stringify(o,null,2);}
 async function callWelcome(){try{const r=await fetch(API+'/welcome');const j=await r.json();show('welcomeout',j);
-  document.getElementById('flags').innerHTML=Object.entries(j.flagships||{}).map(([k,v])=>`<span class="flag">${k} · ${v.organ}</span>`).join('');
 }catch(e){show('welcomeout','error: '+e);}}
 async function runOnboard(){try{const need=document.getElementById('need').value||'route an llm';
   const s=await(await fetch(API+'/onboard/start')).json();const sid=s.session_id;let last;
@@ -115,7 +115,7 @@ const body=new THREE.Mesh(new THREE.CapsuleGeometry(0.35,0.9,8,16),mat);scene.ad
 const head=new THREE.Mesh(new THREE.SphereGeometry(0.28,24,24),mat);head.position.y=0.95;scene.add(head);
 const glow=new THREE.Mesh(new THREE.SphereGeometry(0.16,16,16),new THREE.MeshStandardMaterial({color:0x54d18c,emissive:0x54d18c,emissiveIntensity:1.6}));glow.position.set(0.55,1.0,0);scene.add(glow);
 // Five flagship nodes arranged in an arc (the chaskiwasi the messenger runs between)
-const labels=['governed inference','agents','killinchu','observability','a11oy'];const nodes=[];
 labels.forEach((lab,i)=>{const a=(-0.9+i*0.45);const x=Math.sin(a)*3.4,z=Math.cos(a)*-1.0-1.0;
   const n=new THREE.Mesh(new THREE.IcosahedronGeometry(0.26,0),new THREE.MeshStandardMaterial({color:0xffcf5c,emissive:0x6b5410,emissiveIntensity:0.7}));
   n.position.set(x,0.2,z);scene.add(n);nodes.push(n);
@@ -127,3 +127,4 @@ size();window.addEventListener('resize',()=>{size();cam.aspect=canvas.clientWidt
 </script>
 </body>
 </html>

+<!DOCTYPE html>
+<!-- SPDX-License-Identifier: Apache-2.0 Â© 2026 Lutar, Stephen P. â€” SZL Holdings Â· Doctrine v13 -->
+<!-- CHASKI surface â€” reception/onboarding/first-touch organ. ADDITIVE per Doctrine v13 Â§2.1. -->
 <html lang="en">
 <head>
 <meta charset="utf-8"/>
 <meta name="viewport" content="width=device-width, initial-scale=1"/>
+<title>a11oy Â· Smart Routing â€” Intelligent Request Dispatch</title>
 <style>
 :root{--bg:#0b0d12;--panel:#12151d;--ink:#e7ecf3;--mut:#8a93a6;--acc:#7cc4ff;--ok:#54d18c;--warn:#ffcf5c;--bad:#ff6b6b;--line:#222838;--mono:'SF Mono',ui-monospace,'JetBrains Mono',Menlo,Consolas,monospace}
 *{box-sizing:border-box}
 <body>
 <div class="wrap">
   <div class="top">
+    <div><span class="brand">a11oy</span> <span class="tag">Â· Reception &amp; Routing Â· Doctrine v13 Â§2.1</span></div>
     <div class="nav"><a href="/">home</a><a href="/chaski">routing</a><a href="/willay">willay</a><a href="/verify">verify</a></div>
   </div>
   <h1>Intelligent Request Routing</h1>
+  <p class="sub">The a11oy reception layer: greets visitors, explains what a11oy does in one breath, and routes each request to the right capability by stated need. Routing factor: <code>exp(-ÎºÂ·backpressure)Â·ðŸ™[routable] âˆˆ [0,1]</code> â€” the F7 admission gate (admissible multiplier: can only gate harder, never inflate utility).</p>
   <div class="scene"><canvas id="welcome3d" style="width:100%;height:100%;display:block;border-radius:12px"></canvas></div>
   <p class="mut" style="text-align:center;margin-top:-6px">The router delivers each visitor to the right capability node. Drag to orbit.</p>
     <div class="path">GET /api/a11oy/chaski/welcome</div>
     <button onclick="callWelcome()">Greet me</button>
     <div id="flags"></div>
+    <pre id="welcomeout">â€” click to receive the first-touch greeting + flagship map â€”</pre>
   </div>
   <div class="card">
+    <h3>Onboard â€” route by stated need</h3>
+    <div class="path">GET /onboard/start Â· POST /onboard/step</div>
     <input id="need" placeholder="what do you want to do? e.g. 'sync data', 'fly a drone'" size="46"/>
+    <button onclick="runOnboard()">Run onboarding â†’ route me</button>
+    <pre id="onboardout">â€” enter a need and the router will dispatch you, applying the reception gate â€”</pre>
   </div>
   <div class="card">
     <h3>First-touch heatmap (UX metrics)</h3>
     <div class="path">GET /api/a11oy/chaski/heatmap</div>
     <button onclick="callHeat()">Load heatmap</button>
+    <pre id="heatout">â€” first-touch event counts, route distribution, completion rate, Khipu depth â€”</pre>
   </div>
   <div class="honest">
+    <b>Honest labels (Doctrine v13 Â§5):</b> every routing action emits a <b>signed-receipt</b> (SHA3-256 hash-chain). The routing factor is an <b>admissible</b> multiplier âˆˆ [0,1] â€” it can only gate harder, never inflate utility. The memory-cortex sync courier is a distinct lower layer.
   </div>
+  <footer>a11oy Â· reception &amp; routing layer Â· Doctrine v13 (additive over v12 / v11 LOCKED 749/14/163 Â· 13-axis Â· replay <code>bacf5443â€¦631fc5</code>) Â· â€” Yachay</footer>
 </div>
 <script>
 const API='/api/a11oy/chaski';
 function show(id,o){document.getElementById(id).textContent=typeof o==='string'?o:JSON.stringify(o,null,2);}
 async function callWelcome(){try{const r=await fetch(API+'/welcome');const j=await r.json();show('welcomeout',j);
+  document.getElementById('flags').innerHTML=Object.entries(j.flagships||{}).map(([k,v])=>`<span class="flag">${k} Â· ${v.organ}</span>`).join('');
 }catch(e){show('welcomeout','error: '+e);}}
 async function runOnboard(){try{const need=document.getElementById('need').value||'route an llm';
   const s=await(await fetch(API+'/onboard/start')).json();const sid=s.session_id;let last;
 const head=new THREE.Mesh(new THREE.SphereGeometry(0.28,24,24),mat);head.position.y=0.95;scene.add(head);
 const glow=new THREE.Mesh(new THREE.SphereGeometry(0.16,16,16),new THREE.MeshStandardMaterial({color:0x54d18c,emissive:0x54d18c,emissiveIntensity:1.6}));glow.position.set(0.55,1.0,0);scene.add(glow);
 // Five flagship nodes arranged in an arc (the chaskiwasi the messenger runs between)
+const labels=['governed execution','agents','killinchu','observability','a11oy'];const nodes=[];
 labels.forEach((lab,i)=>{const a=(-0.9+i*0.45);const x=Math.sin(a)*3.4,z=Math.cos(a)*-1.0-1.0;
   const n=new THREE.Mesh(new THREE.IcosahedronGeometry(0.26,0),new THREE.MeshStandardMaterial({color:0xffcf5c,emissive:0x6b5410,emissiveIntensity:0.7}));
   n.position.set(x,0.2,z);scene.add(n);nodes.push(n);
 </script>
 </body>
 </html>

pages/console.html CHANGED Viewed

The diff for this file is too large to render. See raw diff

pages/fabric.html CHANGED Viewed

@@ -1,8 +1,8 @@
-<!DOCTYPE html>
 <html lang="en"><head>
 <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
-<title>Governed Distributed Compute Fabric · a11oy</title>
-<meta name="description" content="The Governed Distributed Compute Fabric — one unified system-of-systems view. Sovereign signal. Signed receipt. No node left dark. Sovereign GPU mesh under one governed router, honest TCP reachability, joules MEASURED per node, doctrine-locked. Terrestrial-proven core; orbital is a clearly-labeled ROADMAP frame. 0 runtime CDN.">
 <!-- SZL Estate shared modules (byte-identical cross-app), served in-image at /static/shared (0 CDN). -->
 <script src="/static/shared/szl_label_engine.js"></script>
 <script src="/static/shared/szl_holo3d.js"></script>
@@ -76,51 +76,51 @@ th{color:var(--mut);font-weight:600}
 <nav class="note"><a href="/">home</a><a href="/mesh">/mesh</a><a href="/wires">/wires</a><a href="/observability">/observability</a><a href="/holo">/holo</a></nav>
 <h1>Governed Distributed Compute Fabric</h1>
 <p class="sub" style="font-weight:700;color:var(--acc);margin-bottom:6px">Sovereign signal. Signed receipt. No node left dark.</p>
-<p class="sub">The <b>Governed Distributed Compute Fabric</b> as one unified system-of-systems view. Sovereign GPU mesh + honest TCP reachability + joules <b>MEASURED</b> per node + one governed OpenAI-compatible router + doctrine-locked provenance. <span class="hl">Terrestrial governed mesh is the proven core; orbital is a clearly-labeled ROADMAP frame.</span> Doctrine v11 · Λ = Conjecture 1 · 0 runtime CDN.</p>
-<p class="note" style="margin:0 0 14px">The fabric unites your sovereign nodes — each request governed by the trust score (Λ), recorded in the signed-receipt ledger, and relayed under one governed router — into a single honest system-of-systems.</p>
 <div class="card">
   <div style="display:flex;justify-content:space-between;align-items:center;flex-wrap:wrap;gap:10px">
-    <div class="note">Live sources (no fabrication): <code>/api/a11oy/v1/compute-pool-hardened</code> · <code>/api/a11oy/v1/energy/operator/status</code> · <code>/api/a11oy/v1/honest</code> · <code>/api/a11oy/provenance</code> · <span class="hl">live-work</span> (K-Verify · Govern-RAG · cheapest-watt, each probed independently, honestly PENDING until deployed)</div>
-    <button class="refresh" onclick="loadAll()">↻ refresh live</button>
   </div>
-  <div class="stamp" id="stamp" style="margin-top:8px">loading live fabric state…</div>
 </div>
-<h2>1 · Fabric at a glance</h2>
 <div class="card">
-  <div class="kpis" id="kpis"><div class="note">…</div></div>
-  <p class="note" style="margin-top:14px">Every figure is honestly labeled. <b>Reachability</b> is a real TCP probe THIS sweep — a timeout/refusal is reachable=false with the reason, never fabricated. <b>Joules</b> are MEASURED only via the on-box exporter (nodes with no exporter read SAMPLE / 0). <b>Sovereign</b> is a property of owned hardware, passed through, never inferred from reachability.</p>
 </div>
-<h2>2 · Live work — the fabric DOES verifiable work</h2>
 <div class="card">
-  <p class="note" style="margin:0 0 12px">The mesh does not just <i>prove it exists</i> — it does governed, receipted work. Three new capabilities surface here <b>as they go live</b>. Each tile probes its own endpoint independently via <code>Promise.allSettled</code>: a capability that is not yet deployed renders an honest <span style="color:var(--warn);font-weight:700">PENDING</span> with the reason — <b>never a fabricated result</b>.</p>
   <div class="work" id="work">
     <div class="wk" id="wk-kverify">
-      <h3>K-Verify · governed inference</h3>
       <p class="cap">A signed inference run over <code>k-verify-benchmark-v1</code>: N items, pass-rate, joules MEASURED, and a receipt hash you can verify.</p>
-      <div class="state" id="kv-state"><span class="pending">PENDING<span class="why">probing live endpoint…</span></span></div>
     </div>
     <div class="wk" id="wk-rag">
-      <h3>Govern-RAG · ask the doctrine</h3>
       <p class="cap">Ask a question; the fabric answers <b>only</b> from its own governed corpus, with citations. No corpus hit = honest "insufficient grounding," never a guess.</p>
       <div class="qa" id="rag-qa" style="display:none">
         <input id="rag-q" type="text" placeholder="e.g. How many formulas are locked, and at what kernel?" autocomplete="off">
         <button id="rag-ask" type="button" onclick="askRag()">ask</button>
       </div>
-      <div class="state" id="rag-state"><span class="pending">PENDING<span class="why">probing live endpoint…</span></span></div>
     </div>
     <div class="wk" id="wk-watt">
-      <h3>Cheapest-watt routing · last decision</h3>
-      <p class="cap">The governed router places each job on the lowest-€/MWh reachable node. Savings are labeled <b>honestly</b> — MEASURED only where a meter exists, else MODELED.</p>
-      <div class="state" id="watt-state"><span class="pending">PENDING<span class="why">probing live endpoint…</span></span></div>
     </div>
   </div>
-  <p class="note" style="margin-top:12px">Honesty contract: a tile only shows a <b>result</b> when its endpoint actually returned one this sweep. Joules are <b>MEASURED</b> only on the on-box exporter node; routing savings are <b>MEASURED</b> where a meter exists and <b>MODELED</b> (clearly labeled) otherwise. Receipts are <b>tamper-EVIDENT</b> (SHA3 hash-chain), not tamper-proof. No fused VRAM is implied by any "work" shown here — placement is horizontal.</p>
 </div>
-<h2>3 · System-of-systems mesh (3D)</h2>
 <div class="card">
   <div class="holo" id="holo"></div>
   <div class="legend">
@@ -129,47 +129,47 @@ th{color:var(--mut);font-weight:600}
     <span><span class="sw" style="background:#7aa2ff"></span>sovereign owned GPU/CPU</span>
     <span><span class="sw" style="background:#e0c060"></span>hosted-inference failover (non-sovereign)</span>
   </div>
-  <p class="note" style="margin-top:12px"><b>Scaling model — honest:</b> nodes scale <span class="hl">horizontally (placement + load-balance)</span> under one governed router. VRAM does <b>NOT</b> merge across the network — there is <b>no fused/combined VRAM</b>. The router places each job on a reachable node; it does not pool memory across machines.</p>
 </div>
-<h2>4 · Nodes — honest per-node board</h2>
-<div class="nodegrid" id="nodes"><div class="note">…</div></div>
-<h2>5 · Energy — joules MEASURED, climbing</h2>
 <div class="card">
-  <div class="kpis" id="energy"><div class="note">…</div></div>
   <table id="byNode" style="margin-top:14px"><tr><th>node</th><th>jobs</th><th>tokens</th><th>joules</th><th>label</th></tr></table>
-  <p class="note" style="margin-top:12px">Joules are MEASURED via the on-box exporter (node <code id="expnode">betterwithage</code>). Nodes without a local exporter contribute SAMPLE jobs (joules unmeasured) — shown honestly, never imputed. Signed receipts fold into the signed-receipt ledger: <code>/api/a11oy/v1/energy/provenance</code>.</p>
 </div>
-<h2>6 · Governed router + provenance</h2>
 <div class="card">
   <div class="flow">
-    <span class="node">request</span><span class="arr">→</span>
-    <span class="node">governed router</span><span class="arr">→</span>
-    <span class="node">placement (Λ-gated)</span><span class="arr">→</span>
-    <span class="node">sovereign node / failover</span><span class="arr">→</span>
-    <span class="node">signed receipt → ledger</span>
   </div>
-  <div id="prov" class="note" style="margin-top:8px">…</div>
 </div>
 <div class="orbit">
   <div class="band">
-    <span class="banner">Roadmap · orbital framing</span>
     <span id="orbitBadge"></span>
   </div>
-  <h2 style="margin-top:6px">7 · Orbital system-of-systems — ROADMAP / analogy (we do NOT run satellites)</h2>
-  <p class="note">The same governance primitives the terrestrial mesh PROVES on real metal — honest reachability, joules MEASURED per node, Λ-gated placement, signed-receipt provenance — are exactly what distributed / edge / <b>orbital</b> compute system-of-systems will require. <span style="color:#cdb4ff;font-weight:700">This band is the vision frame, clearly labeled ROADMAP.</span> SZL does <b>not</b> operate satellites; nothing in the mesh above is orbital. We prove on terrestrial metal what the orbital-architecture crowd only asserts.</p>
   <div class="kpis" id="orbit">
-    <div class="kpi"><div class="k">Terrestrial governed mesh</div><div class="v" id="orbReach">—</div><div class="l" id="orbReachL"></div></div>
     <div class="kpi"><div class="k">Per-node energy accounting</div><div class="v">joules</div><div class="l" id="orbJ"></div></div>
     <div class="kpi"><div class="k">Edge / orbital placement</div><div class="v">vision</div><div class="l" id="orbRm"></div></div>
   </div>
 </div>
 <div class="foot" id="foot">
-HONEST: all numbers above carry an explicit label — LIVE (real backend wired) · MEASURED (on-box exporter) · MODELED (deterministic, labeled) · ROADMAP (vision, not deployed). No fused/combined VRAM is claimed anywhere — nodes scale horizontally (placement + load-balance); memory does not merge across the network. The <b>live-work</b> tiles surface a capability only when its endpoint returns a real result this sweep; otherwise they render an honest PENDING and never fabricate. Orbital is analogy/ROADMAP; SZL does not run satellites. Reachability is a real TCP probe, never fabricated. trust &lt; 100% · tamper-EVIDENT not tamper-proof · Λ = Conjecture 1 · locked = 8 {F1,F4,F7,F11,F12,F18,F19,F22} @ kernel <code id="kernel">c7c0ba17</code> (749/14/163). SLSA L1 honest · L2 attested · L3 roadmap. Canonical numbers <a href="https://github.com/szl-holdings/.github/blob/main/.github/data/lean_numbers.json" target="_blank" rel="noopener">lean_numbers.json</a>.
 </div>
 </div>
@@ -177,16 +177,16 @@ HONEST: all numbers above carry an explicit label — LIVE (real backend wired)
 "use strict";
 var L = (window.SZLLabels && window.SZLLabels.badgeHTML) ? function(k,t){ return window.SZLLabels.badgeHTML(k, t?{label:t}:undefined); } : function(k,t){ return '<span class="szl-pill">'+(t||k)+'</span>'; };
 function $(id){ return document.getElementById(id); }
-function fmt(n){ if(n==null||isNaN(n)) return '—'; return Number(n).toLocaleString('en-US',{maximumFractionDigits:0}); }
-function fmt1(n){ if(n==null||isNaN(n)) return '—'; return Number(n).toLocaleString('en-US',{maximumFractionDigits:1}); }
 async function getJSON(url){ var r = await fetch(url, {headers:{'accept':'application/json'}}); if(!r.ok) throw new Error(url+' HTTP '+r.status); return r.json(); }
 var holoScene = null;
 function buildHolo(pool){
   var mount = $('holo');
-  if(!window.SZLHolo || !window.SZLHolo.Scene){ mount.innerHTML = '<p class="note" style="padding:18px">3D kit unavailable — node board below carries the full honest state.</p>'; return; }
   mount.innerHTML = '';
-  // λ here is a presentation parameter (Conjecture 1, <1.0), NOT a measured value.
   holoScene = new window.SZLHolo.Scene(mount, { title: 'GOVERNED DISTRIBUTED COMPUTE FABRIC', lambda: 0.42, autoRotate: true });
   var nodes = (pool.nodes||[]);
   // hub = the governed router (the host running this service / hetzner-box-cpu self node anchors center)
@@ -197,7 +197,7 @@ function buildHolo(pool){
     var y = (n.kind === 'hosted-inference') ? 0.55 : -0.25;  // failover ring sits above
     specNodes.push({
       id: n.name,
-      label: n.name + (n.reachable ? ' ✓' : ' ✕'),
       pos: [R*Math.cos(ang), y, R*Math.sin(ang)],
       // lower lambda => greener/larger (more trust); reachable+sovereign = most trusted
       lambda: n.reachable ? (n.sovereign ? 0.22 : 0.40) : 0.80
@@ -246,7 +246,7 @@ function renderNodes(pool, energy){
       '<div class="row">'+reach+'</div>'+
       '<div class="row">'+sov+'</div>'+
       '<div class="joule">energy: '+jVal+' &nbsp;'+jLabel+
-        (bn.jobs!=null ? ' &nbsp;<span class="muted-num">· '+fmt(bn.jobs)+' jobs · '+fmt(bn.tokens)+' tok</span>' : '')+
       '</div></div>';
   });
   $('nodes').innerHTML = html;
@@ -258,7 +258,7 @@ function renderEnergy(energy){
   html += kpi('Measured token-joules', fmt(energy.measured_token_joules), L('MEASURED'));
   html += kpi('Measured jobs', fmt(energy.measured_jobs), L('MEASURED'));
   html += kpi('Sample jobs (unmeasured)', fmt(energy.sample_jobs), L('SAMPLE'));
-  html += kpi('Grid price', fmt1(energy.grid_price_eur_mwh)+' €/MWh', L('LIVE'));
   html += kpi('Power sample', fmt1(energy.power_w_sample)+' W', L('SAMPLE'));
   $('energy').innerHTML = html;
   if(energy.exporter_node) $('expnode').textContent = energy.exporter_node;
@@ -275,12 +275,12 @@ function renderProv(prov, honest){
   var slsa = (honest && honest.footer) ? '' : '';
   var dl = (honest && honest.doctrine_lock) || {};
   var html = '';
-  html += '<p>SLSA: <b>'+(prov.slsa||'L1')+'</b> — L1 honest · L2 attested · L3 roadmap. '+L('LIVE')+' &nbsp; Λ = '+(dl.lambda||'Conjecture 1')+' '+L('LIVE','CONJECTURE 1')+'</p>';
   if(prov.khipu_dsse){
-    html += '<p>Provenance per answer: signed-receipt substrate · keyid <code>'+(prov.khipu_dsse.keyid||'?')+'</code> · verify at <code>'+(prov.khipu_dsse.verify_endpoint||'/api/a11oy/v1/govern/verify')+'</code>. tamper-EVIDENT (SHA3-256 hash-chain), not tamper-proof.</p>';
   }
   if(dl.locked_formula_ids){
-    html += '<p>Doctrine lock: <code>'+(dl.declarations||749)+'/'+(dl.axioms||14)+'/'+(dl.sorries||163)+'</code> @ kernel <code>'+(dl.commit||'c7c0ba17')+'</code> · locked = '+(dl.locked_formula_count||8)+' {'+(dl.locked_formula_ids||[]).join(',')+'} '+L('LIVE')+'</p>';
     if(dl.commit) $('kernel').textContent = dl.commit;
   }
   $('prov').innerHTML = html;
@@ -288,7 +288,7 @@ function renderProv(prov, honest){
 function renderOrbit(pool, energy){
   var c = pool.counts || {};
-  $('orbitBadge').innerHTML = L('ROADMAP','VISION FRAME — NOT DEPLOYED');
   $('orbReach').textContent = fmt(c.nodes_reachable) + '/' + fmt(c.nodes_total);
   $('orbReachL').innerHTML = L('LIVE','PROVEN ON METAL');
   $('orbJ').innerHTML = L('MEASURED','PER-NODE, REAL');
@@ -296,7 +296,7 @@ function renderOrbit(pool, energy){
 }
 // ---- Live-work panel: probe each new capability honestly; render result OR honest PENDING ----
-// Candidate endpoint lists — siblings (PowerD1-D4) may ship under any of these.
 // We take the FIRST that returns valid JSON this sweep; if none do, we render PENDING.
 var KV_EPS   = ['/api/a11oy/v1/kverify/summary','/api/a11oy/v1/kverify/status','/api/a11oy/v1/k-verify/summary','/api/a11oy/v1/k-verify/status','/api/a11oy/v1/verify/run/last','/api/a11oy/v1/kverify/last'];
 var RAG_EPS  = ['/api/a11oy/v1/rag/status','/api/a11oy/v1/rag/last','/api/a11oy/v1/govern-rag/status','/api/a11oy/rag/status','/api/a11oy/v1/rag/health'];
@@ -304,8 +304,8 @@ var WATT_EPS = ['/api/a11oy/v1/energy/cheapest-watt','/api/a11oy/v1/routing/chea
 var RAG_ASK_EPS = ['/api/a11oy/v1/rag/query','/api/a11oy/v1/rag/ask','/api/a11oy/v1/govern-rag/ask','/api/a11oy/rag/query'];
 var RAG_ASK_URL = null; // resolved once a status probe identifies a live RAG surface
-function pendingHTML(why){ return '<span class="pending">PENDING<span class="why">'+(why||'endpoint not yet live — shown honestly, not fabricated')+'</span></span>'; }
-function shortHash(h){ if(!h) return null; h=String(h); return h.length>20 ? h.slice(0,10)+'…'+h.slice(-6) : h; }
 // Try a list of endpoints; resolve with {url,data} of the first that returns ok JSON, else null.
 async function firstLive(urls){
@@ -319,12 +319,12 @@ function renderKVerify(hit){
   if(!hit){ el.innerHTML = pendingHTML('K-Verify endpoint not live this sweep'); return false; }
   var d = hit.data || {};
   // Honest idle state: endpoint is LIVE but no run has executed yet this process.
-  // Surface that truthfully — never synthesize a zero-item "run" that didn't happen.
   var runData = d.run || d.last_run || d.summary || d;
   var hasRun = (d.ran === true) || (d.ran == null && (runData.n!=null || runData.count!=null || runData.items!=null || runData.total!=null || runData.pass!=null));
   if(!hasRun){
-    el.innerHTML = '<div class="sub2"><b>endpoint live</b> '+L('LIVE','GOVERNED INFERENCE')+'</div>'+
-      '<div class="sub2">no run yet this process — a signed run posts N items, pass-rate, joules MEASURED + a receipt hash. Shown honestly: no fabricated run.</div>';
     return true;
   }
   d = runData;
@@ -336,20 +336,20 @@ function renderKVerify(hit){
   var rh    = d.receipt_hash || d.receipt || d.digest || (d.receipt_digest) || ((d.khipu&&d.khipu.hash)||null);
   var verify= d.verify_endpoint || d.receipt_verify_at || '/api/a11oy/khipu/verify';
   if(rate==null && typeof pass==='number' && typeof n==='number' && n>0) rate = pass/n;
-  var passStr = (typeof pass==='number' && typeof n==='number') ? (fmt(pass)+'/'+fmt(n)) : (n!=null?fmt(n)+' items':'—');
-  var rateStr = (typeof rate==='number') ? (' · '+(rate*100).toFixed(1)+'% pass') : '';
   var html = '<div class="big">'+passStr+'</div>';
   html += '<div class="sub2">items run / passed'+rateStr+'</div>';
-  html += '<hr><div class="sub2">energy: <b>'+(joules!=null?fmt(joules)+' J':'—')+'</b> '+(jmeas?L('MEASURED'):L('SAMPLE'))+'</div>';
   if(rh){ html += '<div class="receipt">receipt '+shortHash(rh)+'</div>'; html += '<div class="sub2">verify: <code>'+verify+'</code> '+L('LIVE')+'</div>'; }
-  html += '<div class="lbls">'+L('LIVE','GOVERNED INFERENCE')+'</div>';
   el.innerHTML = html;
   return true;
 }
 function renderRag(hit){
   var el = $('rag-state'); var qa = $('rag-qa');
-  if(!hit){ qa.style.display='none'; el.innerHTML = pendingHTML('Govern-RAG endpoint not live this sweep — ask-box activates when it is'); RAG_ASK_URL=null; return false; }
   var d = hit.data || {};
   // Resolve an ask URL: explicit field, sibling of the status path, or default candidate.
   RAG_ASK_URL = d.query_endpoint || d.ask_endpoint || hit.url.replace(/\/(status|health|last)$/,'/query') || RAG_ASK_EPS[0];
@@ -365,14 +365,14 @@ function renderRag(hit){
   if(chunks!=null) stat.push(fmt(chunks)+' chunks');
   if(files!=null)  stat.push(fmt(files)+' files');
   if(repos!=null)  stat.push(fmt(repos)+' repos');
-  var html = '<div class="sub2">governed corpus indexed: <b>'+(stat.length?stat.join(' · '):'ready')+'</b> '+L('LIVE')+'</div>';
   // Only show a 'last answer' if it carries a real grounded answer string (status citations are not answers).
   if(lastA && typeof lastA==='string'){
     html += '<div class="ans">'+(lastQ?'<b>Q:</b> '+escapeHTML(lastQ)+'<br>':'')+'<b>A:</b> '+escapeHTML(String(lastA))+'</div>';
-    if(cites && cites.length){ html += '<div class="cite">cited: '+cites.map(function(c){ return escapeHTML(typeof c==='string'?c:(c.citation||c.path||c.source||c.id||c.doc||JSON.stringify(c))); }).join(' · ')+'</div>'; }
     html += '<div class="lbls">'+L('LIVE','GROUNDED + CITED')+'</div>';
   } else {
-    html += '<div class="sub2">Ask the doctrine — answers come only from the governed corpus, with citations; off-corpus returns insufficient grounding.</div>';
   }
   el.innerHTML = html;
   return true;
@@ -383,7 +383,7 @@ async function askRag(){
   var btn = $('rag-ask'); var el = $('rag-state');
   if(!q){ return; }
   if(!RAG_ASK_URL){ el.innerHTML = pendingHTML('RAG query endpoint not live'); return; }
-  btn.disabled = true; var prev = el.innerHTML; el.innerHTML = '<div class="sub2">asking the governed corpus…</div>';
   try {
     var r = await fetch(RAG_ASK_URL, {method:'POST', headers:{'content-type':'application/json','accept':'application/json'}, body: JSON.stringify({question:q, query:q})});
     if(!r.ok) throw new Error('HTTP '+r.status);
@@ -394,10 +394,10 @@ async function askRag(){
     var html = '';
     if(grounded){
       html += '<div class="ans"><b>Q:</b> '+escapeHTML(q)+'<br><b>A:</b> '+escapeHTML(String(ans))+'</div>';
-      if(cites && cites.length){ html += '<div class="cite">cited: '+cites.map(function(c){ return escapeHTML(typeof c==='string'?c:(c.id||c.source||c.doc||JSON.stringify(c))); }).join(' · ')+'</div>'; }
       html += '<div class="lbls">'+L('LIVE','GROUNDED + CITED')+'</div>';
     } else {
-      html += '<div class="ans"><b>Q:</b> '+escapeHTML(q)+'<br><b>A:</b> insufficient grounding in the governed corpus — no answer returned.</div>';
       html += '<div class="lbls">'+L('LIVE','HONEST: NO GUESS')+'</div>';
     }
     el.innerHTML = html;
@@ -421,21 +421,21 @@ function renderWatt(hit){
   var reason = dec.reason || dec.detail || null;
   var chHead = (d.chain && d.chain.head) || dec.receipt_hash || dec.receipt || dec.digest || null;
   var html = '';
-  html += '<div class="big">'+(price!=null?fmt1(price)+' €/MWh':'—')+'</div>';
   html += '<div class="sub2">live grid price at decision '+(priceL==='MEASURED'?L('MEASURED'):L('LIVE'))+'</div>';
   if(node){
-    html += '<hr><div class="sub2">chosen node: <b>'+escapeHTML(node)+'</b> '+L('LIVE','LOWEST-€ REACHABLE')+'</div>';
     if(save!=null){
       var sv = (typeof save==='number') ? ((save<=1?(save*100):save).toFixed(1)+'%') : escapeHTML(String(save));
       var lk = (saveLabel==='MEASURED') ? L('MEASURED') : L('MODELED','ROUTING LAW');
       html += '<div class="sub2">honest savings vs most-expensive comparable: <b>'+sv+'</b> '+lk+'</div>';
     }
   } else {
-    // No placement this tick is an HONEST outcome, not a gap — surface the reason verbatim.
     html += '<hr><div class="sub2"><b>no placement this tick</b> '+L('LIVE','HONEST: NO FABRICATED SAVING')+'</div>';
     if(reason) html += '<div class="sub2">'+escapeHTML(reason)+'</div>';
   }
-  if(chHead){ html += '<div class="receipt">receipt-chain '+shortHash(chHead)+(d.chain&&d.chain.length!=null?' · len '+fmt(d.chain.length):'')+'</div>'; }
   el.innerHTML = html;
   return true;
 }
@@ -455,7 +455,7 @@ async function loadWork(){
 }
 async function loadAll(){
-  $('stamp').textContent = 'fetching live fabric state…';
   try {
     var results = await Promise.allSettled([
       getJSON('/api/a11oy/v1/compute-pool-hardened'),
@@ -481,9 +481,9 @@ async function loadAll(){
     var errs = results.filter(function(r){return r.status==='rejected';});
     var ts = pool.cached_at || new Date().toISOString();
-    $('stamp').innerHTML = 'live as of <code>'+ts+'</code> · '+L('LIVE','4 ENDPOINTS WIRED') +
-      ' · live work: <b>'+workLive+'/3</b> capabilities surfaced'+(workLive<3?' <span class="note">('+(3-workLive)+' honestly PENDING)</span>':'') +
-      (errs.length ? ' <span class="err">· '+errs.length+' source(s) unavailable (shown honestly empty)</span>' : '');
   } catch(e){
     $('stamp').innerHTML = '<span class="err">fabric load error: '+e+'</span>';
   }
@@ -491,3 +491,4 @@ async function loadAll(){
 loadAll();
 </script>
 </body></html>

+<!DOCTYPE html>
 <html lang="en"><head>
 <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Governed Distributed Compute Fabric Â· a11oy</title>
+<meta name="description" content="The Governed Distributed Compute Fabric â€” one unified system-of-systems view. Sovereign signal. Signed receipt. No node left dark. Sovereign GPU mesh under one governed router, honest TCP reachability, joules MEASURED per node, doctrine-locked. Terrestrial-proven core; orbital is a clearly-labeled ROADMAP frame. 0 runtime CDN.">
 <!-- SZL Estate shared modules (byte-identical cross-app), served in-image at /static/shared (0 CDN). -->
 <script src="/static/shared/szl_label_engine.js"></script>
 <script src="/static/shared/szl_holo3d.js"></script>
 <nav class="note"><a href="/">home</a><a href="/mesh">/mesh</a><a href="/wires">/wires</a><a href="/observability">/observability</a><a href="/holo">/holo</a></nav>
 <h1>Governed Distributed Compute Fabric</h1>
 <p class="sub" style="font-weight:700;color:var(--acc);margin-bottom:6px">Sovereign signal. Signed receipt. No node left dark.</p>
+<p class="sub">The <b>Governed Distributed Compute Fabric</b> as one unified system-of-systems view. Sovereign GPU mesh + honest TCP reachability + joules <b>MEASURED</b> per node + one governed OpenAI-compatible router + doctrine-locked provenance. <span class="hl">Terrestrial governed mesh is the proven core; orbital is a clearly-labeled ROADMAP frame.</span> Doctrine v11 Â· Î› = Conjecture 1 Â· 0 runtime CDN.</p>
+<p class="note" style="margin:0 0 14px">The fabric unites your sovereign nodes â€” each request governed by the trust score (Î›), recorded in the signed-receipt ledger, and relayed under one governed router â€” into a single honest system-of-systems.</p>
 <div class="card">
   <div style="display:flex;justify-content:space-between;align-items:center;flex-wrap:wrap;gap:10px">
+    <div class="note">Live sources (no fabrication): <code>/api/a11oy/v1/compute-pool-hardened</code> Â· <code>/api/a11oy/v1/energy/operator/status</code> Â· <code>/api/a11oy/v1/honest</code> Â· <code>/api/a11oy/provenance</code> Â· <span class="hl">live-work</span> (K-Verify Â· Govern-RAG Â· cheapest-watt, each probed independently, honestly PENDING until deployed)</div>
+    <button class="refresh" onclick="loadAll()">â†» refresh live</button>
   </div>
+  <div class="stamp" id="stamp" style="margin-top:8px">loading live fabric stateâ€¦</div>
 </div>
+<h2>1 Â· Fabric at a glance</h2>
 <div class="card">
+  <div class="kpis" id="kpis"><div class="note">â€¦</div></div>
+  <p class="note" style="margin-top:14px">Every figure is honestly labeled. <b>Reachability</b> is a real TCP probe THIS sweep â€” a timeout/refusal is reachable=false with the reason, never fabricated. <b>Joules</b> are MEASURED only via the on-box exporter (nodes with no exporter read SAMPLE / 0). <b>Sovereign</b> is a property of owned hardware, passed through, never inferred from reachability.</p>
 </div>
+<h2>2 Â· Live work â€” the fabric DOES verifiable work</h2>
 <div class="card">
+  <p class="note" style="margin:0 0 12px">The mesh does not just <i>prove it exists</i> â€” it does governed, receipted work. Three new capabilities surface here <b>as they go live</b>. Each tile probes its own endpoint independently via <code>Promise.allSettled</code>: a capability that is not yet deployed renders an honest <span style="color:var(--warn);font-weight:700">PENDING</span> with the reason â€” <b>never a fabricated result</b>.</p>
   <div class="work" id="work">
     <div class="wk" id="wk-kverify">
+      <h3>K-Verify Â· governed execution</h3>
       <p class="cap">A signed inference run over <code>k-verify-benchmark-v1</code>: N items, pass-rate, joules MEASURED, and a receipt hash you can verify.</p>
+      <div class="state" id="kv-state"><span class="pending">PENDING<span class="why">probing live endpointâ€¦</span></span></div>
     </div>
     <div class="wk" id="wk-rag">
+      <h3>Govern-RAG Â· ask the doctrine</h3>
       <p class="cap">Ask a question; the fabric answers <b>only</b> from its own governed corpus, with citations. No corpus hit = honest "insufficient grounding," never a guess.</p>
       <div class="qa" id="rag-qa" style="display:none">
         <input id="rag-q" type="text" placeholder="e.g. How many formulas are locked, and at what kernel?" autocomplete="off">
         <button id="rag-ask" type="button" onclick="askRag()">ask</button>
       </div>
+      <div class="state" id="rag-state"><span class="pending">PENDING<span class="why">probing live endpointâ€¦</span></span></div>
     </div>
     <div class="wk" id="wk-watt">
+      <h3>Cheapest-watt routing Â· last decision</h3>
+      <p class="cap">The governed router places each job on the lowest-â‚¬/MWh reachable node. Savings are labeled <b>honestly</b> â€” MEASURED only where a meter exists, else MODELED.</p>
+      <div class="state" id="watt-state"><span class="pending">PENDING<span class="why">probing live endpointâ€¦</span></span></div>
     </div>
   </div>
+  <p class="note" style="margin-top:12px">Honesty contract: a tile only shows a <b>result</b> when its endpoint actually returned one this sweep. Joules are <b>MEASURED</b> only on the on-box exporter node; routing savings are <b>MEASURED</b> where a meter exists and <b>MODELED</b> (clearly labeled) otherwise. Receipts are <b>tamper-EVIDENT</b> (SHA3 hash-chain), not tamper-proof. No fused VRAM is implied by any "work" shown here â€” placement is horizontal.</p>
 </div>
+<h2>3 Â· System-of-systems mesh (3D)</h2>
 <div class="card">
   <div class="holo" id="holo"></div>
   <div class="legend">
     <span><span class="sw" style="background:#7aa2ff"></span>sovereign owned GPU/CPU</span>
     <span><span class="sw" style="background:#e0c060"></span>hosted-inference failover (non-sovereign)</span>
   </div>
+  <p class="note" style="margin-top:12px"><b>Scaling model â€” honest:</b> nodes scale <span class="hl">horizontally (placement + load-balance)</span> under one governed router. VRAM does <b>NOT</b> merge across the network â€” there is <b>no fused/combined VRAM</b>. The router places each job on a reachable node; it does not pool memory across machines.</p>
 </div>
+<h2>4 Â· Nodes â€” honest per-node board</h2>
+<div class="nodegrid" id="nodes"><div class="note">â€¦</div></div>
+<h2>5 Â· Energy â€” joules MEASURED, climbing</h2>
 <div class="card">
+  <div class="kpis" id="energy"><div class="note">â€¦</div></div>
   <table id="byNode" style="margin-top:14px"><tr><th>node</th><th>jobs</th><th>tokens</th><th>joules</th><th>label</th></tr></table>
+  <p class="note" style="margin-top:12px">Joules are MEASURED via the on-box exporter (node <code id="expnode">betterwithage</code>). Nodes without a local exporter contribute SAMPLE jobs (joules unmeasured) â€” shown honestly, never imputed. Signed receipts fold into the signed-receipt ledger: <code>/api/a11oy/v1/energy/provenance</code>.</p>
 </div>
+<h2>6 Â· Governed router + provenance</h2>
 <div class="card">
   <div class="flow">
+    <span class="node">request</span><span class="arr">â†’</span>
+    <span class="node">governed router</span><span class="arr">â†’</span>
+    <span class="node">placement (Î›-gated)</span><span class="arr">â†’</span>
+    <span class="node">sovereign node / failover</span><span class="arr">â†’</span>
+    <span class="node">signed receipt â†’ ledger</span>
   </div>
+  <div id="prov" class="note" style="margin-top:8px">â€¦</div>
 </div>
 <div class="orbit">
   <div class="band">
+    <span class="banner">Roadmap Â· orbital framing</span>
     <span id="orbitBadge"></span>
   </div>
+  <h2 style="margin-top:6px">7 Â· Orbital system-of-systems â€” ROADMAP / analogy (we do NOT run satellites)</h2>
+  <p class="note">The same governance primitives the terrestrial mesh PROVES on real metal â€” honest reachability, joules MEASURED per node, Î›-gated placement, signed-receipt provenance â€” are exactly what distributed / edge / <b>orbital</b> compute system-of-systems will require. <span style="color:#cdb4ff;font-weight:700">This band is the vision frame, clearly labeled ROADMAP.</span> SZL does <b>not</b> operate satellites; nothing in the mesh above is orbital. We prove on terrestrial metal what the orbital-architecture crowd only asserts.</p>
   <div class="kpis" id="orbit">
+    <div class="kpi"><div class="k">Terrestrial governed mesh</div><div class="v" id="orbReach">â€”</div><div class="l" id="orbReachL"></div></div>
     <div class="kpi"><div class="k">Per-node energy accounting</div><div class="v">joules</div><div class="l" id="orbJ"></div></div>
     <div class="kpi"><div class="k">Edge / orbital placement</div><div class="v">vision</div><div class="l" id="orbRm"></div></div>
   </div>
 </div>
 <div class="foot" id="foot">
+HONEST: all numbers above carry an explicit label â€” LIVE (real backend wired) Â· MEASURED (on-box exporter) Â· MODELED (deterministic, labeled) Â· ROADMAP (vision, not deployed). No fused/combined VRAM is claimed anywhere â€” nodes scale horizontally (placement + load-balance); memory does not merge across the network. The <b>live-work</b> tiles surface a capability only when its endpoint returns a real result this sweep; otherwise they render an honest PENDING and never fabricate. Orbital is analogy/ROADMAP; SZL does not run satellites. Reachability is a real TCP probe, never fabricated. trust &lt; 100% Â· tamper-EVIDENT not tamper-proof Â· Î› = Conjecture 1 Â· locked = 8 {F1,F4,F7,F11,F12,F18,F19,F22} @ kernel <code id="kernel">c7c0ba17</code> (749/14/163). SLSA L1 honest Â· L2 attested Â· L3 roadmap. Canonical numbers <a href="https://github.com/szl-holdings/.github/blob/main/.github/data/lean_numbers.json" target="_blank" rel="noopener">lean_numbers.json</a>.
 </div>
 </div>
 "use strict";
 var L = (window.SZLLabels && window.SZLLabels.badgeHTML) ? function(k,t){ return window.SZLLabels.badgeHTML(k, t?{label:t}:undefined); } : function(k,t){ return '<span class="szl-pill">'+(t||k)+'</span>'; };
 function $(id){ return document.getElementById(id); }
+function fmt(n){ if(n==null||isNaN(n)) return 'â€”'; return Number(n).toLocaleString('en-US',{maximumFractionDigits:0}); }
+function fmt1(n){ if(n==null||isNaN(n)) return 'â€”'; return Number(n).toLocaleString('en-US',{maximumFractionDigits:1}); }
 async function getJSON(url){ var r = await fetch(url, {headers:{'accept':'application/json'}}); if(!r.ok) throw new Error(url+' HTTP '+r.status); return r.json(); }
 var holoScene = null;
 function buildHolo(pool){
   var mount = $('holo');
+  if(!window.SZLHolo || !window.SZLHolo.Scene){ mount.innerHTML = '<p class="note" style="padding:18px">3D kit unavailable â€” node board below carries the full honest state.</p>'; return; }
   mount.innerHTML = '';
+  // Î» here is a presentation parameter (Conjecture 1, <1.0), NOT a measured value.
   holoScene = new window.SZLHolo.Scene(mount, { title: 'GOVERNED DISTRIBUTED COMPUTE FABRIC', lambda: 0.42, autoRotate: true });
   var nodes = (pool.nodes||[]);
   // hub = the governed router (the host running this service / hetzner-box-cpu self node anchors center)
     var y = (n.kind === 'hosted-inference') ? 0.55 : -0.25;  // failover ring sits above
     specNodes.push({
       id: n.name,
+      label: n.name + (n.reachable ? ' âœ“' : ' âœ•'),
       pos: [R*Math.cos(ang), y, R*Math.sin(ang)],
       // lower lambda => greener/larger (more trust); reachable+sovereign = most trusted
       lambda: n.reachable ? (n.sovereign ? 0.22 : 0.40) : 0.80
       '<div class="row">'+reach+'</div>'+
       '<div class="row">'+sov+'</div>'+
       '<div class="joule">energy: '+jVal+' &nbsp;'+jLabel+
+        (bn.jobs!=null ? ' &nbsp;<span class="muted-num">Â· '+fmt(bn.jobs)+' jobs Â· '+fmt(bn.tokens)+' tok</span>' : '')+
       '</div></div>';
   });
   $('nodes').innerHTML = html;
   html += kpi('Measured token-joules', fmt(energy.measured_token_joules), L('MEASURED'));
   html += kpi('Measured jobs', fmt(energy.measured_jobs), L('MEASURED'));
   html += kpi('Sample jobs (unmeasured)', fmt(energy.sample_jobs), L('SAMPLE'));
+  html += kpi('Grid price', fmt1(energy.grid_price_eur_mwh)+' â‚¬/MWh', L('LIVE'));
   html += kpi('Power sample', fmt1(energy.power_w_sample)+' W', L('SAMPLE'));
   $('energy').innerHTML = html;
   if(energy.exporter_node) $('expnode').textContent = energy.exporter_node;
   var slsa = (honest && honest.footer) ? '' : '';
   var dl = (honest && honest.doctrine_lock) || {};
   var html = '';
+  html += '<p>SLSA: <b>'+(prov.slsa||'L1')+'</b> â€” L1 honest Â· L2 attested Â· L3 roadmap. '+L('LIVE')+' &nbsp; Î› = '+(dl.lambda||'Conjecture 1')+' '+L('LIVE','CONJECTURE 1')+'</p>';
   if(prov.khipu_dsse){
+    html += '<p>Provenance per answer: signed-receipt substrate Â· keyid <code>'+(prov.khipu_dsse.keyid||'?')+'</code> Â· verify at <code>'+(prov.khipu_dsse.verify_endpoint||'/api/a11oy/v1/govern/verify')+'</code>. tamper-EVIDENT (SHA3-256 hash-chain), not tamper-proof.</p>';
   }
   if(dl.locked_formula_ids){
+    html += '<p>Doctrine lock: <code>'+(dl.declarations||749)+'/'+(dl.axioms||14)+'/'+(dl.sorries||163)+'</code> @ kernel <code>'+(dl.commit||'c7c0ba17')+'</code> Â· locked = '+(dl.locked_formula_count||8)+' {'+(dl.locked_formula_ids||[]).join(',')+'} '+L('LIVE')+'</p>';
     if(dl.commit) $('kernel').textContent = dl.commit;
   }
   $('prov').innerHTML = html;
 function renderOrbit(pool, energy){
   var c = pool.counts || {};
+  $('orbitBadge').innerHTML = L('ROADMAP','VISION FRAME â€” NOT DEPLOYED');
   $('orbReach').textContent = fmt(c.nodes_reachable) + '/' + fmt(c.nodes_total);
   $('orbReachL').innerHTML = L('LIVE','PROVEN ON METAL');
   $('orbJ').innerHTML = L('MEASURED','PER-NODE, REAL');
 }
 // ---- Live-work panel: probe each new capability honestly; render result OR honest PENDING ----
+// Candidate endpoint lists â€” siblings (PowerD1-D4) may ship under any of these.
 // We take the FIRST that returns valid JSON this sweep; if none do, we render PENDING.
 var KV_EPS   = ['/api/a11oy/v1/kverify/summary','/api/a11oy/v1/kverify/status','/api/a11oy/v1/k-verify/summary','/api/a11oy/v1/k-verify/status','/api/a11oy/v1/verify/run/last','/api/a11oy/v1/kverify/last'];
 var RAG_EPS  = ['/api/a11oy/v1/rag/status','/api/a11oy/v1/rag/last','/api/a11oy/v1/govern-rag/status','/api/a11oy/rag/status','/api/a11oy/v1/rag/health'];
 var RAG_ASK_EPS = ['/api/a11oy/v1/rag/query','/api/a11oy/v1/rag/ask','/api/a11oy/v1/govern-rag/ask','/api/a11oy/rag/query'];
 var RAG_ASK_URL = null; // resolved once a status probe identifies a live RAG surface
+function pendingHTML(why){ return '<span class="pending">PENDING<span class="why">'+(why||'endpoint not yet live â€” shown honestly, not fabricated')+'</span></span>'; }
+function shortHash(h){ if(!h) return null; h=String(h); return h.length>20 ? h.slice(0,10)+'â€¦'+h.slice(-6) : h; }
 // Try a list of endpoints; resolve with {url,data} of the first that returns ok JSON, else null.
 async function firstLive(urls){
   if(!hit){ el.innerHTML = pendingHTML('K-Verify endpoint not live this sweep'); return false; }
   var d = hit.data || {};
   // Honest idle state: endpoint is LIVE but no run has executed yet this process.
+  // Surface that truthfully â€” never synthesize a zero-item "run" that didn't happen.
   var runData = d.run || d.last_run || d.summary || d;
   var hasRun = (d.ran === true) || (d.ran == null && (runData.n!=null || runData.count!=null || runData.items!=null || runData.total!=null || runData.pass!=null));
   if(!hasRun){
+    el.innerHTML = '<div class="sub2"><b>endpoint live</b> '+L('LIVE','EVIDENCE-FIRST AI')+'</div>'+
+      '<div class="sub2">no run yet this process â€” a signed run posts N items, pass-rate, joules MEASURED + a receipt hash. Shown honestly: no fabricated run.</div>';
     return true;
   }
   d = runData;
   var rh    = d.receipt_hash || d.receipt || d.digest || (d.receipt_digest) || ((d.khipu&&d.khipu.hash)||null);
   var verify= d.verify_endpoint || d.receipt_verify_at || '/api/a11oy/khipu/verify';
   if(rate==null && typeof pass==='number' && typeof n==='number' && n>0) rate = pass/n;
+  var passStr = (typeof pass==='number' && typeof n==='number') ? (fmt(pass)+'/'+fmt(n)) : (n!=null?fmt(n)+' items':'â€”');
+  var rateStr = (typeof rate==='number') ? (' Â· '+(rate*100).toFixed(1)+'% pass') : '';
   var html = '<div class="big">'+passStr+'</div>';
   html += '<div class="sub2">items run / passed'+rateStr+'</div>';
+  html += '<hr><div class="sub2">energy: <b>'+(joules!=null?fmt(joules)+' J':'â€”')+'</b> '+(jmeas?L('MEASURED'):L('SAMPLE'))+'</div>';
   if(rh){ html += '<div class="receipt">receipt '+shortHash(rh)+'</div>'; html += '<div class="sub2">verify: <code>'+verify+'</code> '+L('LIVE')+'</div>'; }
+  html += '<div class="lbls">'+L('LIVE','EVIDENCE-FIRST AI')+'</div>';
   el.innerHTML = html;
   return true;
 }
 function renderRag(hit){
   var el = $('rag-state'); var qa = $('rag-qa');
+  if(!hit){ qa.style.display='none'; el.innerHTML = pendingHTML('Govern-RAG endpoint not live this sweep â€” ask-box activates when it is'); RAG_ASK_URL=null; return false; }
   var d = hit.data || {};
   // Resolve an ask URL: explicit field, sibling of the status path, or default candidate.
   RAG_ASK_URL = d.query_endpoint || d.ask_endpoint || hit.url.replace(/\/(status|health|last)$/,'/query') || RAG_ASK_EPS[0];
   if(chunks!=null) stat.push(fmt(chunks)+' chunks');
   if(files!=null)  stat.push(fmt(files)+' files');
   if(repos!=null)  stat.push(fmt(repos)+' repos');
+  var html = '<div class="sub2">governed corpus indexed: <b>'+(stat.length?stat.join(' Â· '):'ready')+'</b> '+L('LIVE')+'</div>';
   // Only show a 'last answer' if it carries a real grounded answer string (status citations are not answers).
   if(lastA && typeof lastA==='string'){
     html += '<div class="ans">'+(lastQ?'<b>Q:</b> '+escapeHTML(lastQ)+'<br>':'')+'<b>A:</b> '+escapeHTML(String(lastA))+'</div>';
+    if(cites && cites.length){ html += '<div class="cite">cited: '+cites.map(function(c){ return escapeHTML(typeof c==='string'?c:(c.citation||c.path||c.source||c.id||c.doc||JSON.stringify(c))); }).join(' Â· ')+'</div>'; }
     html += '<div class="lbls">'+L('LIVE','GROUNDED + CITED')+'</div>';
   } else {
+    html += '<div class="sub2">Ask the doctrine â€” answers come only from the governed corpus, with citations; off-corpus returns insufficient grounding.</div>';
   }
   el.innerHTML = html;
   return true;
   var btn = $('rag-ask'); var el = $('rag-state');
   if(!q){ return; }
   if(!RAG_ASK_URL){ el.innerHTML = pendingHTML('RAG query endpoint not live'); return; }
+  btn.disabled = true; var prev = el.innerHTML; el.innerHTML = '<div class="sub2">asking the governed corpusâ€¦</div>';
   try {
     var r = await fetch(RAG_ASK_URL, {method:'POST', headers:{'content-type':'application/json','accept':'application/json'}, body: JSON.stringify({question:q, query:q})});
     if(!r.ok) throw new Error('HTTP '+r.status);
     var html = '';
     if(grounded){
       html += '<div class="ans"><b>Q:</b> '+escapeHTML(q)+'<br><b>A:</b> '+escapeHTML(String(ans))+'</div>';
+      if(cites && cites.length){ html += '<div class="cite">cited: '+cites.map(function(c){ return escapeHTML(typeof c==='string'?c:(c.id||c.source||c.doc||JSON.stringify(c))); }).join(' Â· ')+'</div>'; }
       html += '<div class="lbls">'+L('LIVE','GROUNDED + CITED')+'</div>';
     } else {
+      html += '<div class="ans"><b>Q:</b> '+escapeHTML(q)+'<br><b>A:</b> insufficient grounding in the governed corpus â€” no answer returned.</div>';
       html += '<div class="lbls">'+L('LIVE','HONEST: NO GUESS')+'</div>';
     }
     el.innerHTML = html;
   var reason = dec.reason || dec.detail || null;
   var chHead = (d.chain && d.chain.head) || dec.receipt_hash || dec.receipt || dec.digest || null;
   var html = '';
+  html += '<div class="big">'+(price!=null?fmt1(price)+' â‚¬/MWh':'â€”')+'</div>';
   html += '<div class="sub2">live grid price at decision '+(priceL==='MEASURED'?L('MEASURED'):L('LIVE'))+'</div>';
   if(node){
+    html += '<hr><div class="sub2">chosen node: <b>'+escapeHTML(node)+'</b> '+L('LIVE','LOWEST-â‚¬ REACHABLE')+'</div>';
     if(save!=null){
       var sv = (typeof save==='number') ? ((save<=1?(save*100):save).toFixed(1)+'%') : escapeHTML(String(save));
       var lk = (saveLabel==='MEASURED') ? L('MEASURED') : L('MODELED','ROUTING LAW');
       html += '<div class="sub2">honest savings vs most-expensive comparable: <b>'+sv+'</b> '+lk+'</div>';
     }
   } else {
+    // No placement this tick is an HONEST outcome, not a gap â€” surface the reason verbatim.
     html += '<hr><div class="sub2"><b>no placement this tick</b> '+L('LIVE','HONEST: NO FABRICATED SAVING')+'</div>';
     if(reason) html += '<div class="sub2">'+escapeHTML(reason)+'</div>';
   }
+  if(chHead){ html += '<div class="receipt">receipt-chain '+shortHash(chHead)+(d.chain&&d.chain.length!=null?' Â· len '+fmt(d.chain.length):'')+'</div>'; }
   el.innerHTML = html;
   return true;
 }
 }
 async function loadAll(){
+  $('stamp').textContent = 'fetching live fabric stateâ€¦';
   try {
     var results = await Promise.allSettled([
       getJSON('/api/a11oy/v1/compute-pool-hardened'),
     var errs = results.filter(function(r){return r.status==='rejected';});
     var ts = pool.cached_at || new Date().toISOString();
+    $('stamp').innerHTML = 'live as of <code>'+ts+'</code> Â· '+L('LIVE','4 ENDPOINTS WIRED') +
+      ' Â· live work: <b>'+workLive+'/3</b> capabilities surfaced'+(workLive<3?' <span class="note">('+(3-workLive)+' honestly PENDING)</span>':'') +
+      (errs.length ? ' <span class="err">Â· '+errs.length+' source(s) unavailable (shown honestly empty)</span>' : '');
   } catch(e){
     $('stamp').innerHTML = '<span class="err">fabric load error: '+e+'</span>';
   }
 loadAll();
 </script>
 </body></html>

pages/landing.html CHANGED Viewed

@@ -574,7 +574,7 @@ img,svg,canvas,video{max-width:100%;height:auto;}
   </div>
   <section class="inv-hero">
-    <p class="ds-eyebrow">Governed inference</p>
     <h1>AI that signs its work<br><span class="accent">and refuses to lie.</span></h1>
     <p>Every AI decision arrives with a signed receipt you can verify yourself. The trust math is a
       machine-checked theorem. When the model is not sure, it refuses rather than guesses. It runs on

   </div>
   <section class="inv-hero">
+    <p class="ds-eyebrow">Evidence-first AI</p>
     <h1>AI that signs its work<br><span class="accent">and refuses to lie.</span></h1>
     <p>Every AI decision arrives with a signed receipt you can verify yourself. The trust math is a
       machine-checked theorem. When the model is not sure, it refuses rather than guesses. It runs on

pages/pinn-console.html CHANGED Viewed

@@ -1,11 +1,11 @@
-<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1" />
-<title>a11oy — Governed Inverse-PINN Console</title>
 <!--
-  Governed Inverse-PINN Console — runs the LIVE governed parameter-discovery
   engine at POST /api/a11oy/v1/pinn/identify and SHOWS the governance:
   the discovered parameter(s) with 95% CI, the GREEN/YELLOW/RED convergence
   badge, the FIM identifiability / self-doubt result (the REFUSAL is the hero
@@ -15,7 +15,7 @@
   Doctrine v11 LOCKED. Values are MODELED (a fit to data, never MEASURED).
   Locked-proven = 8 {F1,F4,F7,F11,F12,F18,F19,F22}. Lambda = Conjecture 1.
-  Pure HTML/JS/CSS — 0 runtime CDN, no server-side numpy. Reuses the
   pages/verify.html design system (CSS variables, JetBrains Mono, chips).
 -->
 <style>
@@ -250,8 +250,8 @@
     <circle cx="16" cy="16" r="2.5" fill="#8aaaf8"/>
   </svg>
   <span class="site-title">a11oy</span>
-  <span class="site-tagline">Governed Inference · Verifiable by Design</span>
-  <a href="/console" class="nav-back">← Console</a>
 </header>
 <!-- ===== MAIN ===== -->
@@ -260,13 +260,13 @@
   <div class="page-hero">
     <h1>Governed Inverse-PINN Console</h1>
     <p>
-      Discover an unknown <strong>physical</strong> parameter of an ODE from data + physics —
       then watch the governance work. Every discovered value is <span class="chip chip-info">MODELED</span>
       (a fit to data, never MEASURED), carries a 95% confidence interval, a GREEN/YELLOW/RED convergence
       badge, a Fisher-information self-doubt gate that <em>refuses</em> non-identifiable parameters,
-      a Λ advisory, an F19/Bekenstein plausibility check, and a signed Khipu receipt you can re-verify.
     </p>
-    <span class="eq">Duffing oscillator&nbsp;&nbsp;m·x″ + c·x′ + δ·x + <strong>α</strong>·x³ = F·cos(ωt)&nbsp;&nbsp;— α is unknown</span>
   </div>
   <!-- ===== RUN ===== -->
@@ -282,11 +282,11 @@
       <div class="btn-row">
         <button class="btn btn-green" id="btn-green" onclick="runIdentify('green')">
           Run Duffing demo (GREEN)
-          <span class="btn-sub">identify α — converges, asserts with CI</span>
         </button>
         <button class="btn btn-red" id="btn-red" onclick="runIdentify('red')">
-          Run non-identifiable case (RED — see it refuse)
-          <span class="btn-sub">ask for α + a ghost param — engine REFUSES</span>
         </button>
       </div>
       <div id="status" class="status-line"></div>
@@ -303,7 +303,7 @@
         <p>The 3-state governance verdict from the causal-weight / gradient / FIM-conditioning criteria.</p>
       </div>
       <div class="section-body">
-        <div id="verdict" class="verdict-banner verdict-dim">—</div>
         <div class="metric-grid" id="conv-metrics"></div>
       </div>
     </section>
@@ -314,7 +314,7 @@
         <h2><span class="section-label">2</span> Discovered parameter(s)</h2>
         <p>
           Each value is <span class="chip chip-info">MODELED</span> with a 95% CI. A parameter the
-          self-doubt gate cannot support is <strong>REFUSED</strong> verbatim — no value invented.
         </p>
         <p class="moat-line">"We don't report what we can't support."</p>
       </div>
@@ -326,10 +326,10 @@
     <!-- self-doubt / FIM -->
     <section class="section">
       <div class="section-head">
-        <h2><span class="section-label">3</span> Identifiability — the self-doubt gate</h2>
         <p>
           Fisher Information Matrix conditioning decides whether the data actually constrain the
-          parameter. κ(FIM) → ∞ or Fisher below floor ⇒ <strong>UNIDENTIFIABLE</strong> ⇒ the engine refuses.
         </p>
       </div>
       <div class="section-body">
@@ -340,16 +340,16 @@
     <!-- lambda advisory -->
     <section class="section">
       <div class="section-head">
-        <h2><span class="section-label">4</span> Λ advisory</h2>
         <p>
-          A single advisory trust score. <span class="conj">Conjecture 1 — advisory, NOT a theorem</span>
-          — capped ≤ 0.99, <strong>never a proof, never 1.0</strong>.
         </p>
       </div>
       <div class="section-body">
         <div style="display:flex; align-items:center; gap:24px; flex-wrap:wrap;">
           <div>
-            <div class="lambda-big" id="lambda-val">—</div>
             <div class="small" id="lambda-status"></div>
           </div>
           <div class="small" id="lambda-basis" style="max-width:420px;"></div>
@@ -363,13 +363,13 @@
       <div class="section-head">
         <h2><span class="section-label">5</span> F19 / Bekenstein check</h2>
         <p>
-          The Bekenstein bound (F19) is a <strong>locked-proven inequality</strong> — here it is
           <em>applied</em>, not re-claimed. It checks the discovery doesn't encode more information
           than the system can physically hold.
         </p>
       </div>
       <div class="section-body">
-        <div id="bek" class="small">—</div>
       </div>
     </section>
@@ -379,7 +379,7 @@
         <h2><span class="section-label">6</span> Signed receipt + ledger</h2>
         <p>
           The discovery is sealed as a DSSE-enveloped Khipu receipt in the unified ledger organ
-          <code>a11oy-pinn</code>. Signature state is shown exactly as returned — never faked.
         </p>
       </div>
       <div class="section-body">
@@ -392,14 +392,14 @@
   <section class="section">
     <div class="section-head">
       <h2><span class="section-label">Doctrine</span> Honest labels</h2>
-      <p>What is proven, what is wired, what is advisory. The half-state — claiming more than is real — is the only unacceptable outcome.</p>
     </div>
     <div class="section-body">
       <div class="corpus-diagram">
         <div class="corpus-tier">
           <div class="corpus-count proven">8</div>
           <div class="corpus-tier-label">Locked-proven</div>
-          <div class="corpus-tier-desc">No-axiom theorems {F1,F4,F7,F11,F12,F18,F19,F22}. F19 Bekenstein is one of them — applied here, not re-claimed.</div>
         </div>
         <div class="corpus-tier">
           <div class="corpus-count wired">~35</div>
@@ -413,10 +413,10 @@
         </div>
       </div>
       <div class="never-claim">
-        Discovered values are <strong>MODELED</strong> (a fit to data, never MEASURED). Λ is
-        <strong>Conjecture 1</strong> — advisory, capped ≤ 0.99, never a theorem, never 1.0. The Bekenstein
         bound is a PROVEN inequality whose <em>application</em> here is MODELED. Receipts are signed or
-        unsigned exactly as the engine returns — never fabricated.
       </div>
     </div>
   </section>
@@ -424,8 +424,8 @@
 </main>
 <footer class="footer">
-  a11oy · Governed Inverse-PINN · Doctrine v11 LOCKED · values MODELED · Λ = Conjecture 1 ·
-  <a href="/console">Console</a> · <a href="/verify">Verify</a>
 </footer>
 <script>
@@ -458,7 +458,7 @@ function badgeClass(label) {
 async function runIdentify(kind) {
   const bg = el("btn-green"), br = el("btn-red");
   bg.disabled = true; br.disabled = true;
-  el("status").innerHTML = '<span class="spinner"></span>Calling the live governed engine at ' + API + ' …';
   el("results").classList.add("hidden");
   try {
     const res = await fetch(API, {
@@ -469,12 +469,12 @@ async function runIdentify(kind) {
     const data = await res.json();
     if (!res.ok && !data.convergence) {
       el("status").innerHTML = '<span style="color:var(--red)">Engine returned ' + res.status +
-        ' — ' + (data.error || "unexpected") + '</span>';
       return;
     }
     render(data);
     el("status").innerHTML = 'Live response received (HTTP ' + res.status +
-      ') · system <code>' + (data.system || "?") + '</code> · honest label MODELED.';
   } catch (e) {
     el("status").innerHTML = '<span style="color:var(--red)">Network error: ' + e + '</span>';
   } finally {
@@ -485,15 +485,15 @@ async function runIdentify(kind) {
 function render(d) {
   el("results").classList.remove("hidden");
   const conv = d.convergence || {};
-  const label = conv.label || "—";
   // ---- verdict ----
   const v = el("verdict");
   v.className = "verdict-banner verdict-" + badgeClass(label);
   let head = "Convergence: " + label;
-  if (label === "GREEN") head += " — parameter asserted";
-  else if (label === "RED") head += " — the engine REFUSES";
-  else if (label === "YELLOW") head += " — partial / keep running";
   v.innerHTML = '<span class="chip chip-' + badgeClass(label) + '">' + label + '</span>' +
     '<span>' + head + '</span>' +
     '<span class="vsub">' + (conv.epochs_run != null ? conv.epochs_run + " epochs" : "") + '</span>';
@@ -503,8 +503,8 @@ function render(d) {
   const cmRows = [
     ["min causal weight", cm.min_causal_weight || fmt(conv.min_causal_weight)],
     ["grad norm",         cm.grad_norm || fmt(conv.grad_norm)],
-    ["κ(FIM)",            cm.kappa_fim || fmt(conv.kappa_fim)],
-    ["min Fisher",        cm.min_fisher || "—"],
     ["residual rms",      fmt(conv.residual_rms)],
     ["data rms",          fmt(conv.data_rms)]
   ];
@@ -521,15 +521,15 @@ function render(d) {
       return '<div class="param-card asserted">' +
         '<div class="param-card-head">' +
           '<span class="param-name">' + p.name + '</span>' +
-          '<span class="chip chip-' + pl + '">' + (p.convergence_label || "—") + '</span>' +
           '<span class="chip chip-info">MODELED</span>' +
           '<span class="chip chip-green">IDENTIFIABLE</span>' +
         '</div>' +
         '<div class="param-value">' + fmt(p.value) + '</div>' +
-        '<div class="param-ci">' + ci + (p.std != null ? ' · σ ' + fmt(p.std) : '') + '</div>' +
         '</div>';
     }
-    // REFUSED — hero honesty moment
     return '<div class="param-card refused">' +
       '<div class="param-card-head">' +
         '<span class="param-name">' + p.name + '</span>' +
@@ -537,7 +537,7 @@ function render(d) {
         '<span class="chip chip-red">REFUSED</span>' +
       '</div>' +
       '<div class="param-value null">value = null</div>' +
-      '<div class="refusal-box"><span class="rh">Self-doubt gate · not asserted</span>' +
         (p.refusal || "UNIDENTIFIABLE: the engine refuses to assert this parameter.") + '</div>' +
       '</div>';
   }).join("");
@@ -545,9 +545,9 @@ function render(d) {
   // ---- FIM / self-doubt ----
   const anyRefused = params.some(p => !p.asserted);
   const fimRows = [
-    ["κ(FIM)", cm.kappa_fim || fmt(conv.kappa_fim), badgeClass(label) === "red" ? "red" : "green"],
-    ["min Fisher", cm.min_fisher || "—", ""],
-    ["gate", anyRefused ? "REFUSED ≥1 parameter" : "all parameters identifiable",
       anyRefused ? "red" : "green"]
   ];
   el("fim-metrics").innerHTML = fimRows.map(r =>
@@ -556,9 +556,9 @@ function render(d) {
   // ---- lambda ----
   const lam = d.lambda_advisory || {};
-  el("lambda-val").textContent = (lam.value != null) ? fmt(lam.value, 4) : "—";
   el("lambda-status").innerHTML = '<span class="conj">' + (lam.status || "ADVISORY") + '</span>';
-  el("lambda-basis").textContent = lam.basis || "Λ = Conjecture 1 (advisory, capped ≤ 0.99; NEVER a proof).";
   const lf = lam.factors || {};
   el("lambda-factors").innerHTML = Object.keys(lf).map(k =>
     '<div class="metric"><div class="metric-k">' + k + '</div><div class="metric-v">' + fmt(lf[k], 4) + '</div></div>'
@@ -579,7 +579,7 @@ function render(d) {
       '</div>' +
       '<div class="small" style="margin-top:10px;">' + (b.basis || "") + '</div>';
   } else {
-    el("bek").innerHTML = '<span class="small">No asserted parameter to check — Bekenstein is applied only to an asserted discovery (the engine refused all parameters here).</span>';
   }
   // ---- receipt ----
@@ -591,20 +591,20 @@ function render(d) {
   let html =
     '<div class="hash-row"><span class="hash-label">signature</span>' +
       '<span class="chip chip-' + (signed ? "green" : "amber") + '">' + (signed ? "SIGNED" : "UNSIGNED") + '</span>' +
-      '<span class="small">' + (signed ? "DSSE envelope present (payloadType " + ((r.dsse||{}).payloadType || "application/vnd.szl.ipinn+json") + ")" : "honest UNSIGNED — no cosign key in this env") + '</span>' +
     '</div>' +
     '<div class="hash-row"><span class="hash-label">ledger</span>' +
       '<span class="chip chip-' + (ledger.recorded ? "green" : "dim") + '">' + (ledger.recorded ? "RECORDED" : "NOT RECORDED") + '</span>' +
       '<span class="small">organ <code>a11oy-pinn</code>' +
-        (lres.chain_index != null ? ' · chain index ' + lres.chain_index : '') + '</span>' +
     '</div>';
   if (rid) {
     html += '<div class="hash-row"><span class="hash-label">receipt id</span>' +
       '<span class="hash-val">' + rid + '</span></div>' +
       '<div class="hash-row"><span class="hash-label">verify</span>' +
       '<a class="hash-val" href="' + VERIFY_BASE + rid + '" target="_blank" rel="noopener">' +
-      VERIFY_BASE + rid + ' ↗</a></div>' +
-      '<div class="small" style="margin-top:6px;">Re-verify independently — the Khipu hash-chain integrity is recomputed server-side and is publicly checkable.</div>';
   }
   if (lres.chain_head) {
     html += '<hr class="divider"><div class="hash-row"><span class="hash-label">chain head</span>' +
@@ -617,3 +617,4 @@ function render(d) {
 </script>
 </body>
 </html>

+<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>a11oy â€” Governed Inverse-PINN Console</title>
 <!--
+  Governed Inverse-PINN Console â€” runs the LIVE governed parameter-discovery
   engine at POST /api/a11oy/v1/pinn/identify and SHOWS the governance:
   the discovered parameter(s) with 95% CI, the GREEN/YELLOW/RED convergence
   badge, the FIM identifiability / self-doubt result (the REFUSAL is the hero
   Doctrine v11 LOCKED. Values are MODELED (a fit to data, never MEASURED).
   Locked-proven = 8 {F1,F4,F7,F11,F12,F18,F19,F22}. Lambda = Conjecture 1.
+  Pure HTML/JS/CSS â€” 0 runtime CDN, no server-side numpy. Reuses the
   pages/verify.html design system (CSS variables, JetBrains Mono, chips).
 -->
 <style>
     <circle cx="16" cy="16" r="2.5" fill="#8aaaf8"/>
   </svg>
   <span class="site-title">a11oy</span>
+  <span class="site-tagline">AI that can demonstrate its work Â· Verifiable by Design</span>
+  <a href="/console" class="nav-back">â† Console</a>
 </header>
 <!-- ===== MAIN ===== -->
   <div class="page-hero">
     <h1>Governed Inverse-PINN Console</h1>
     <p>
+      Discover an unknown <strong>physical</strong> parameter of an ODE from data + physics â€”
       then watch the governance work. Every discovered value is <span class="chip chip-info">MODELED</span>
       (a fit to data, never MEASURED), carries a 95% confidence interval, a GREEN/YELLOW/RED convergence
       badge, a Fisher-information self-doubt gate that <em>refuses</em> non-identifiable parameters,
+      a Î› advisory, an F19/Bekenstein plausibility check, and a signed Khipu receipt you can re-verify.
     </p>
+    <span class="eq">Duffing oscillator&nbsp;&nbsp;mÂ·xâ€³ + cÂ·xâ€² + Î´Â·x + <strong>Î±</strong>Â·xÂ³ = FÂ·cos(Ï‰t)&nbsp;&nbsp;â€” Î± is unknown</span>
   </div>
   <!-- ===== RUN ===== -->
       <div class="btn-row">
         <button class="btn btn-green" id="btn-green" onclick="runIdentify('green')">
           Run Duffing demo (GREEN)
+          <span class="btn-sub">identify Î± â€” converges, asserts with CI</span>
         </button>
         <button class="btn btn-red" id="btn-red" onclick="runIdentify('red')">
+          Run non-identifiable case (RED â€” see it refuse)
+          <span class="btn-sub">ask for Î± + a ghost param â€” engine REFUSES</span>
         </button>
       </div>
       <div id="status" class="status-line"></div>
         <p>The 3-state governance verdict from the causal-weight / gradient / FIM-conditioning criteria.</p>
       </div>
       <div class="section-body">
+        <div id="verdict" class="verdict-banner verdict-dim">â€”</div>
         <div class="metric-grid" id="conv-metrics"></div>
       </div>
     </section>
         <h2><span class="section-label">2</span> Discovered parameter(s)</h2>
         <p>
           Each value is <span class="chip chip-info">MODELED</span> with a 95% CI. A parameter the
+          self-doubt gate cannot support is <strong>REFUSED</strong> verbatim â€” no value invented.
         </p>
         <p class="moat-line">"We don't report what we can't support."</p>
       </div>
     <!-- self-doubt / FIM -->
     <section class="section">
       <div class="section-head">
+        <h2><span class="section-label">3</span> Identifiability â€” the self-doubt gate</h2>
         <p>
           Fisher Information Matrix conditioning decides whether the data actually constrain the
+          parameter. Îº(FIM) â†’ âˆž or Fisher below floor â‡’ <strong>UNIDENTIFIABLE</strong> â‡’ the engine refuses.
         </p>
       </div>
       <div class="section-body">
     <!-- lambda advisory -->
     <section class="section">
       <div class="section-head">
+        <h2><span class="section-label">4</span> Î› advisory</h2>
         <p>
+          A single advisory trust score. <span class="conj">Conjecture 1 â€” advisory, NOT a theorem</span>
+          â€” capped â‰¤ 0.99, <strong>never a proof, never 1.0</strong>.
         </p>
       </div>
       <div class="section-body">
         <div style="display:flex; align-items:center; gap:24px; flex-wrap:wrap;">
           <div>
+            <div class="lambda-big" id="lambda-val">â€”</div>
             <div class="small" id="lambda-status"></div>
           </div>
           <div class="small" id="lambda-basis" style="max-width:420px;"></div>
       <div class="section-head">
         <h2><span class="section-label">5</span> F19 / Bekenstein check</h2>
         <p>
+          The Bekenstein bound (F19) is a <strong>locked-proven inequality</strong> â€” here it is
           <em>applied</em>, not re-claimed. It checks the discovery doesn't encode more information
           than the system can physically hold.
         </p>
       </div>
       <div class="section-body">
+        <div id="bek" class="small">â€”</div>
       </div>
     </section>
         <h2><span class="section-label">6</span> Signed receipt + ledger</h2>
         <p>
           The discovery is sealed as a DSSE-enveloped Khipu receipt in the unified ledger organ
+          <code>a11oy-pinn</code>. Signature state is shown exactly as returned â€” never faked.
         </p>
       </div>
       <div class="section-body">
   <section class="section">
     <div class="section-head">
       <h2><span class="section-label">Doctrine</span> Honest labels</h2>
+      <p>What is proven, what is wired, what is advisory. The half-state â€” claiming more than is real â€” is the only unacceptable outcome.</p>
     </div>
     <div class="section-body">
       <div class="corpus-diagram">
         <div class="corpus-tier">
           <div class="corpus-count proven">8</div>
           <div class="corpus-tier-label">Locked-proven</div>
+          <div class="corpus-tier-desc">No-axiom theorems {F1,F4,F7,F11,F12,F18,F19,F22}. F19 Bekenstein is one of them â€” applied here, not re-claimed.</div>
         </div>
         <div class="corpus-tier">
           <div class="corpus-count wired">~35</div>
         </div>
       </div>
       <div class="never-claim">
+        Discovered values are <strong>MODELED</strong> (a fit to data, never MEASURED). Î› is
+        <strong>Conjecture 1</strong> â€” advisory, capped â‰¤ 0.99, never a theorem, never 1.0. The Bekenstein
         bound is a PROVEN inequality whose <em>application</em> here is MODELED. Receipts are signed or
+        unsigned exactly as the engine returns â€” never fabricated.
       </div>
     </div>
   </section>
 </main>
 <footer class="footer">
+  a11oy Â· Governed Inverse-PINN Â· Doctrine v11 LOCKED Â· values MODELED Â· Î› = Conjecture 1 Â·
+  <a href="/console">Console</a> Â· <a href="/verify">Verify</a>
 </footer>
 <script>
 async function runIdentify(kind) {
   const bg = el("btn-green"), br = el("btn-red");
   bg.disabled = true; br.disabled = true;
+  el("status").innerHTML = '<span class="spinner"></span>Calling the live governed engine at ' + API + ' â€¦';
   el("results").classList.add("hidden");
   try {
     const res = await fetch(API, {
     const data = await res.json();
     if (!res.ok && !data.convergence) {
       el("status").innerHTML = '<span style="color:var(--red)">Engine returned ' + res.status +
+        ' â€” ' + (data.error || "unexpected") + '</span>';
       return;
     }
     render(data);
     el("status").innerHTML = 'Live response received (HTTP ' + res.status +
+      ') Â· system <code>' + (data.system || "?") + '</code> Â· honest label MODELED.';
   } catch (e) {
     el("status").innerHTML = '<span style="color:var(--red)">Network error: ' + e + '</span>';
   } finally {
 function render(d) {
   el("results").classList.remove("hidden");
   const conv = d.convergence || {};
+  const label = conv.label || "â€”";
   // ---- verdict ----
   const v = el("verdict");
   v.className = "verdict-banner verdict-" + badgeClass(label);
   let head = "Convergence: " + label;
+  if (label === "GREEN") head += " â€” parameter asserted";
+  else if (label === "RED") head += " â€” the engine REFUSES";
+  else if (label === "YELLOW") head += " â€” partial / keep running";
   v.innerHTML = '<span class="chip chip-' + badgeClass(label) + '">' + label + '</span>' +
     '<span>' + head + '</span>' +
     '<span class="vsub">' + (conv.epochs_run != null ? conv.epochs_run + " epochs" : "") + '</span>';
   const cmRows = [
     ["min causal weight", cm.min_causal_weight || fmt(conv.min_causal_weight)],
     ["grad norm",         cm.grad_norm || fmt(conv.grad_norm)],
+    ["Îº(FIM)",            cm.kappa_fim || fmt(conv.kappa_fim)],
+    ["min Fisher",        cm.min_fisher || "â€”"],
     ["residual rms",      fmt(conv.residual_rms)],
     ["data rms",          fmt(conv.data_rms)]
   ];
       return '<div class="param-card asserted">' +
         '<div class="param-card-head">' +
           '<span class="param-name">' + p.name + '</span>' +
+          '<span class="chip chip-' + pl + '">' + (p.convergence_label || "â€”") + '</span>' +
           '<span class="chip chip-info">MODELED</span>' +
           '<span class="chip chip-green">IDENTIFIABLE</span>' +
         '</div>' +
         '<div class="param-value">' + fmt(p.value) + '</div>' +
+        '<div class="param-ci">' + ci + (p.std != null ? ' Â· Ïƒ ' + fmt(p.std) : '') + '</div>' +
         '</div>';
     }
+    // REFUSED â€” hero honesty moment
     return '<div class="param-card refused">' +
       '<div class="param-card-head">' +
         '<span class="param-name">' + p.name + '</span>' +
         '<span class="chip chip-red">REFUSED</span>' +
       '</div>' +
       '<div class="param-value null">value = null</div>' +
+      '<div class="refusal-box"><span class="rh">Self-doubt gate Â· not asserted</span>' +
         (p.refusal || "UNIDENTIFIABLE: the engine refuses to assert this parameter.") + '</div>' +
       '</div>';
   }).join("");
   // ---- FIM / self-doubt ----
   const anyRefused = params.some(p => !p.asserted);
   const fimRows = [
+    ["Îº(FIM)", cm.kappa_fim || fmt(conv.kappa_fim), badgeClass(label) === "red" ? "red" : "green"],
+    ["min Fisher", cm.min_fisher || "â€”", ""],
+    ["gate", anyRefused ? "REFUSED â‰¥1 parameter" : "all parameters identifiable",
       anyRefused ? "red" : "green"]
   ];
   el("fim-metrics").innerHTML = fimRows.map(r =>
   // ---- lambda ----
   const lam = d.lambda_advisory || {};
+  el("lambda-val").textContent = (lam.value != null) ? fmt(lam.value, 4) : "â€”";
   el("lambda-status").innerHTML = '<span class="conj">' + (lam.status || "ADVISORY") + '</span>';
+  el("lambda-basis").textContent = lam.basis || "Î› = Conjecture 1 (advisory, capped â‰¤ 0.99; NEVER a proof).";
   const lf = lam.factors || {};
   el("lambda-factors").innerHTML = Object.keys(lf).map(k =>
     '<div class="metric"><div class="metric-k">' + k + '</div><div class="metric-v">' + fmt(lf[k], 4) + '</div></div>'
       '</div>' +
       '<div class="small" style="margin-top:10px;">' + (b.basis || "") + '</div>';
   } else {
+    el("bek").innerHTML = '<span class="small">No asserted parameter to check â€” Bekenstein is applied only to an asserted discovery (the engine refused all parameters here).</span>';
   }
   // ---- receipt ----
   let html =
     '<div class="hash-row"><span class="hash-label">signature</span>' +
       '<span class="chip chip-' + (signed ? "green" : "amber") + '">' + (signed ? "SIGNED" : "UNSIGNED") + '</span>' +
+      '<span class="small">' + (signed ? "DSSE envelope present (payloadType " + ((r.dsse||{}).payloadType || "application/vnd.szl.ipinn+json") + ")" : "honest UNSIGNED â€” no cosign key in this env") + '</span>' +
     '</div>' +
     '<div class="hash-row"><span class="hash-label">ledger</span>' +
       '<span class="chip chip-' + (ledger.recorded ? "green" : "dim") + '">' + (ledger.recorded ? "RECORDED" : "NOT RECORDED") + '</span>' +
       '<span class="small">organ <code>a11oy-pinn</code>' +
+        (lres.chain_index != null ? ' Â· chain index ' + lres.chain_index : '') + '</span>' +
     '</div>';
   if (rid) {
     html += '<div class="hash-row"><span class="hash-label">receipt id</span>' +
       '<span class="hash-val">' + rid + '</span></div>' +
       '<div class="hash-row"><span class="hash-label">verify</span>' +
       '<a class="hash-val" href="' + VERIFY_BASE + rid + '" target="_blank" rel="noopener">' +
+      VERIFY_BASE + rid + ' â†—</a></div>' +
+      '<div class="small" style="margin-top:6px;">Re-verify independently â€” the Khipu hash-chain integrity is recomputed server-side and is publicly checkable.</div>';
   }
   if (lres.chain_head) {
     html += '<hr class="divider"><div class="hash-row"><span class="hash-label">chain head</span>' +
 </script>
 </body>
 </html>

pages/pricing.html CHANGED Viewed

@@ -9,7 +9,7 @@
 <meta charset="utf-8"/>
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover"/>
 <title>a11oy — Pricing</title>
-<meta name="description" content="a11oy pricing: three honest tiers — Developer, Team, and Enterprise (air-gapped). Governed inference that signs its work and refuses to lie. Talk to us for a quote."/>
 <link rel="canonical" href="https://a-11-oy.com/pricing"/>
 <style>
 /* KANCHAY palette — one palette org-wide. 0 runtime CDN: named font families
@@ -141,7 +141,7 @@ footer a{color:var(--muted)} footer a:hover{color:var(--text)}
 <main>
   <section class="hero wrap">
     <p class="eyebrow">Pricing</p>
-    <h1>Governed inference,<br>priced honestly.</h1>
     <p>a11oy is AI that signs its work and refuses to lie — every decision ships a signed receipt you
       can verify yourself. Three tiers below. Where we have not fixed a public price yet, we say
       "Contact us" instead of inventing one.</p>
@@ -156,7 +156,7 @@ footer a{color:var(--muted)} footer a:hover{color:var(--text)}
       <div class="price">Free<small>Self-serve · open-weight models</small></div>
       <ul>
         <li>Signed receipts on every decision, verifiable in your browser</li>
-        <li>Governed inference API + the operator console</li>
         <li>Deny-by-default policy gate</li>
         <li>Community support</li>
         <li>For evaluation and non-production use</li>

 <meta charset="utf-8"/>
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover"/>
 <title>a11oy — Pricing</title>
+<meta name="description" content="a11oy pricing: three honest tiers — Developer, Team, and Enterprise (air-gapped). Evidence-first AI that signs its work and refuses to lie. Talk to us for a quote."/>
 <link rel="canonical" href="https://a-11-oy.com/pricing"/>
 <style>
 /* KANCHAY palette — one palette org-wide. 0 runtime CDN: named font families
 <main>
   <section class="hero wrap">
     <p class="eyebrow">Pricing</p>
+    <h1>Evidence-first AI,<br>priced honestly.</h1>
     <p>a11oy is AI that signs its work and refuses to lie — every decision ships a signed receipt you
       can verify yourself. Three tiers below. Where we have not fixed a public price yet, we say
       "Contact us" instead of inventing one.</p>
       <div class="price">Free<small>Self-serve · open-weight models</small></div>
       <ul>
         <li>Signed receipts on every decision, verifiable in your browser</li>
+        <li>Evidence-first AI API + the operator console</li>
         <li>Deny-by-default policy gate</li>
         <li>Community support</li>
         <li>For evaluation and non-production use</li>

pages/substrate.html CHANGED Viewed

@@ -1,9 +1,9 @@
-<!DOCTYPE html>
-<!-- SPDX-License-Identifier: Apache-2.0 © 2026 Lutar, Stephen P. — SZL Holdings · Doctrine v10 -->
-<!-- ADDITIVE moat surface — shipped via HfApi.create_commit (never GitHub Actions). -->
 <html lang="en"><head>
 <meta charset="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/>
-<title>a11oy · Substrate Inspector — @szl/substrate</title>
 <style>:root{--bg:#0b0d12;--panel:#12151d;--ink:#e7ecf3;--mut:#8a93a6;--acc:#7cc4ff;--ok:#54d18c;--warn:#ffcf5c;--bad:#ff6b6b;--line:#222838;--mono:'SF Mono',ui-monospace,'JetBrains Mono',Menlo,Consolas,monospace}
 *{box-sizing:border-box}
 body{margin:0;background:var(--bg);color:var(--ink);font:15px/1.55 -apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif}
@@ -55,28 +55,28 @@ code{font-family:var(--mono);color:var(--acc);font-size:12.5px}
 .mono{font-family:var(--mono);font-size:12px}
 footer{margin-top:34px;border-top:1px solid var(--line);padding-top:14px;color:var(--mut);font-size:12px}</style></head><body><div class="wrap">
 <div class="top">
-  <div><span class="brand">a11oy</span> <span class="tag">· Governance Substrate · Doctrine v10</span></div>
   <div class="nav">
     <a href="/">home</a><a href="/wires">wires</a><a href="/codex-kernel">codex-kernel</a>
     <a href="/substrate">substrate</a><a href="/evidence">evidence</a><a href="/run-all">run-all</a>
   </div>
 </div>
-<h1>Substrate Inspector — @szl/substrate v0.2.0</h1>
-<p class="sub">Sovereign Execution Substrate — policy-shaped graphs, evidence-chained transitions, confidence-budget routing, and counterfactual replay for all SZL workflows.<br>
-Source: <a href="https://github.com/szl-holdings/platform/tree/main/packages/substrate">https://github.com/szl-holdings/platform/tree/main/packages/substrate</a> · public package (<code>private:false</code>) · #2 — compile-time Kahn-sort approval-DAG (packages/substrate/src/compiler.ts).</p>
 <div class="row"><span class='pill acc'>Reason()</span><span class='pill acc'>Retrieve()</span><span class='pill acc'>ToolCall()</span><span class='pill acc'>Verify()</span><span class='pill acc'>Decide()</span><span class='pill acc'>ApprovalGate()</span></div>
 <div class="row"><span class="mut" style="font-size:12px">modes:</span><span class='pill'>live</span><span class='pill'>dry-run</span><span class='pill'>replay</span><span class='pill'>counterfactual</span></div>
 <div class="grid">
   <div class="card"><h3>The moat in one line</h3>
-    <p>The single, opinionated execution runtime every SZL product surface (Lyte · Aegis · Vessels · Terra · Counsel · Carlota Jo) calls the same way.
-    <code>defineWorkflow(&#123;stages, policy, budget&#125;)</code> → <code>runtime.start(workflow, input, &#123;mode&#125;)</code> → <code>PipelineRun</code>.</p></div>
-  <div class="card"><h3>Innovation #2 — compile-time approval-DAG</h3>
     <p><code>compiler.ts</code> runs a Kahn topological sort over the approval DAG <b>at compile time</b> and throws
     <code>SubstrateCompilerError</code> for cycles, orphan gates, or high-risk side-effects reachable without an ancestor
-    <code>ApprovalGate()</code>. Topology-enforced, not runtime-checked. Tests: <code>vitest — src/engine.test.ts · src/compiler.test.ts · src/workflows/phase2.test.ts</code>.</p></div>
 </div>
 <h2>Substrate packages (the moat)</h2>
@@ -85,23 +85,23 @@ Source: <a href="https://github.com/szl-holdings/platform/tree/main/packages/sub
   <span class='pill'>@szl/substrate-adapters</span><span class='pill'>@szl/substrate-client</span>
 </div>
-<h2>Public API surface — core files</h2>
-<table class="tbl"><tr><th>File</th><th>Purpose</th><th>LOC</th><th>Exports</th></tr><tr><td class='mono'>src/index.ts</td><td>Public package entry — re-exports every primitive, type, runtime, compiler, journal, telemetry &amp; workflow symbol.</td><td style='text-align:right' class='mut'>332</td><td class='mono mut'>AdvisorMatch, AegisThreatTriageInput, AegisThreatTriageResult, AnomalyFinding, AnyStage, ApprovalGate, BriefSection, CarlotaJoTaskRoutingInput…</td></tr><tr><td class='mono'>src/types.ts</td><td>Core TypeScript interfaces + Zod schemas: ExecutionMode, SideEffectCategory, 7 StageTypes, WorkflowDefinition, PipelineRun, EvidenceBundle.</td><td style='text-align:right' class='mut'>559</td><td class='mono mut'>AnyStage, AnyStageSchema, ApprovalGate, ApprovalGateSchema, BaseStage, CompiledGraph, CompiledStageNode, ConfidenceBudget…</td></tr><tr><td class='mono'>src/stage-primitives.ts</td><td>Five stage primitive factories — Reason() · Retrieve() · ToolCall() · Verify() · Decide() — plus ApprovalGate(), definePolicy(), defineBudget().</td><td style='text-align:right' class='mut'>161</td><td class='mono mut'>ApprovalGate, Decide, Reason, Retrieve, ToolCall, Verify, defineBudget, definePolicy</td></tr><tr><td class='mono'>src/compiler.ts</td><td>Innovation #2 — compile-time Kahn topological sort over the approval DAG; throws SubstrateCompilerError for cycles, orphan gates, or high-risk side-effects reachable without an ancestor ApprovalGate. Topology-enforced, not runtime-checked.</td><td style='text-align:right' class='mut'>276</td><td class='mono mut'>SubstrateCompilerError, compile</td></tr><tr><td class='mono'>src/engine.ts</td><td>SubstrateRuntime: start(workflow, input, {mode}) → PipelineRun. Workflow registry (register/lookup/list/clear), defaultRuntime singleton.</td><td style='text-align:right' class='mut'>1105</td><td class='mono mut'>SubstrateRuntime, SubstrateRuntimeOptions, clearWorkflowRegistry, defaultRuntime, listWorkflows, lookupWorkflow, registerWorkflow</td></tr><tr><td class='mono'>src/journal.ts</td><td>Evidence-chained journal: computeBundleHash, hashValue, sign/verify bundle signatures, SubstrateJournal store, runtime event bus.</td><td style='text-align:right' class='mut'>540</td><td class='mono mut'>JournalStore, RunStore, SubstrateJournal, SubstrateRuntimeEvent, SubstrateRuntimeEventType, computeBundleHash, defaultJournal, defaultJournalStore…</td></tr><tr><td class='mono'>src/budget-router.ts</td><td>Confidence-budget routing — routeByBudget, aggregatePipelineConfidence, validateFinalConfidence (escalate when budget exceeded).</td><td style='text-align:right' class='mut'>110</td><td class='mono mut'>RoutingDecision, aggregatePipelineConfidence, routeByBudget, validateFinalConfidence</td></tr><tr><td class='mono'>src/adapters.ts</td><td>Adapter registries (model/policy/resource/retriever/tool) + wirePolicyEngineAdapter / wireToolMeshAdapter bridges to platform packages.</td><td style='text-align:right' class='mut'>494</td><td class='mono mut'>McpCapabilitySpec, McpToolCall, McpToolDefinition, McpToolResult, ModelAdapter, ModelAdapterInput, ModelAdapterOutput, PolicyAdapter…</td></tr><tr><td class='mono'>src/telemetry.ts</td><td>OpenTelemetry spans: SubstrateTelemetry, getMetrics, getRecentSpans, getRunSpans (SubstrateSpan).</td><td style='text-align:right' class='mut'>279</td><td class='mono mut'>SubstrateSpan, SubstrateTelemetry, getMetrics, getRecentSpans, getRunSpans</td></tr><tr><td class='mono'>src/python-worker.ts</td><td>Bridge to services/substrate-py-workers — protocol messages (claim/result/error/heartbeat/register), PYTHON_WORKER_PROTOCOL_VERSION.</td><td style='text-align:right' class='mut'>386</td><td class='mono mut'>PYTHON_WORKER_PROTOCOL_VERSION, PythonWorkerBaseMessage, PythonWorkerChannel, PythonWorkerMessage, PythonWorkerMessageType, RegisteredWorker, StageClaimMessage, StageErrorMessage…</td></tr><tr><td class='mono'>src/cli/bin.ts</td><td>`substrate` CLI binary entrypoint.</td><td style='text-align:right' class='mut'>80</td><td class='mono mut'></td></tr><tr><td class='mono'>src/cli/replay.ts</td><td>Replay &amp; counterfactual — replay(), handleReplayRequest, resolvePolicyProfileById, formatDiff (deterministic re-execution of a recorded run).</td><td style='text-align:right' class='mut'>312</td><td class='mono mut'>PolicyNotFoundError, ReplayEndpointRequest, ReplayEndpointResponse, ReplayOptions, ReplayResult, formatDiff, handleReplayRequest, replay…</td></tr></table>
 <h2>Reference + vertical workflow packs</h2>
-<table class="tbl"><tr><th>Workflow</th><th>Purpose</th><th>Exports</th></tr><tr><td class='mono'>opportunity-audit.ts</td><td>Phase-1 reference workflow — anomaly→remediation opportunity audit (Lyte retriever).</td><td class='mono mut'>AnomalyFinding, OpportunityAuditInput, OpportunityAuditResult, RemediationDecision, isLyteRetrieverRegistered, opportunityAuditWorkflow</td></tr><tr><td class='mono'>cross-system-reconciliation.ts</td><td>Reconcile discrepancies across systems → reconciliation decision.</td><td class='mono mut'>CrossSystemReconciliationInput, CrossSystemReconciliationResult, ReconciliationDecision, ReconciliationDiscrepancy, crossSystemReconciliationWorkflow, runCrossSystemReconciliation</td></tr><tr><td class='mono'>evidence-based-recommendation.ts</td><td>Evidence-cited recommendation decision packet.</td><td class='mono mut'>EvidenceBasedRecommendationInput, EvidenceBasedRecommendationResult, EvidenceCitation, RecommendationDecisionPacket, evidenceBasedRecommendationWorkflow, runEvidenceBasedRecommendation</td></tr><tr><td class='mono'>executive-brief.ts</td><td>Multi-section executive brief generation.</td><td class='mono mut'>BriefSection, ExecutiveBriefInput, ExecutiveBriefOutput, ExecutiveBriefResult, executiveBriefWorkflow, runExecutiveBrief</td></tr><tr><td class='mono'>risk-escalation.ts</td><td>Risk-signal summary → escalation decision.</td><td class='mono mut'>RiskEscalationDecision, RiskEscalationInput, RiskEscalationResult, RiskSignalSummary, riskEscalationWorkflow, runRiskEscalation</td></tr><tr><td class='mono'>aegis-threat-triage.ts</td><td>Aegis vertical pack — threat triage decision.</td><td class='mono mut'>AegisThreatTriageInput, AegisThreatTriageResult, ThreatTriageDecision, TriagedThreat, aegisThreatTriageWorkflow, runAegisThreatTriage</td></tr><tr><td class='mono'>carlota-jo-task-routing.ts</td><td>Carlota Jo vertical pack — advisor-match task routing.</td><td class='mono mut'>AdvisorMatch, CarlotaJoTaskRoutingInput, CarlotaJoTaskRoutingResult, TaskRoutingDecision, carlotaJoTaskRoutingWorkflow, runCarlotaJoTaskRouting</td></tr><tr><td class='mono'>lyte-operational-drift.ts</td><td>Lyte vertical pack — operational drift detection decision.</td><td class='mono mut'>DriftItem, LyteOperationalDriftInput, LyteOperationalDriftResult, OperationalDriftDecision, lyteOperationalDriftWorkflow, runLyteOperationalDrift</td></tr><tr><td class='mono'>prism-counsel-evidence-packaging.ts</td><td>Prism Counsel vertical pack — legal evidence packaging + matter deadlines.</td><td class='mono mut'>EvidencePackage, MatterDeadline, PrismCounselDecision, PrismCounselEvidencePackagingInput, PrismCounselEvidencePackagingResult, prismCounselEvidencePackagingWorkflow</td></tr><tr><td class='mono'>terra-portfolio-anomaly.ts</td><td>Terra vertical pack — portfolio anomaly decision.</td><td class='mono mut'>PortfolioAnomaly, PortfolioAnomalyDecision, TerraPortfolioAnomalyInput, TerraPortfolioAnomalyResult, runTerraPortfolioAnomaly, terraPortfolioAnomalyWorkflow</td></tr><tr><td class='mono'>vessels-voyage-anomaly.ts</td><td>Vessels vertical pack — voyage anomaly decision.</td><td class='mono mut'>VesselsVoyageAnomalyInput, VesselsVoyageAnomalyResult, VoyageAnomaly, VoyageAnomalyDecision, runVesselsVoyageAnomaly, vesselsVoyageAnomalyWorkflow</td></tr><tr><td class='mono'>index.ts</td><td>Demo seed inputs for the reference workflows.</td><td class='mono mut'>ALL_WORKFLOW_SEEDS, WorkflowSeedKey, aegisThreatTriageSeed, carlotaJoTaskRoutingSeed, crossSystemReconciliationSeed, evidenceBasedRecommendationSeed</td></tr></table>
 <h2>Subpath exports (package.json)</h2>
-<div class="row"><span class='pill mut'>.</span><span class='pill mut'>./adapters</span><span class='pill mut'>./budget-router</span><span class='pill mut'>./compiler</span><span class='pill mut'>./engine</span><span class='pill mut'>./journal</span><span class='pill mut'>./python-worker</span><span class='pill mut'>./telemetry</span><span class='pill mut'>./types</span><span class='pill mut'>./workflows/aegis-threat-triage</span><span class='pill mut'>./workflows/carlota-jo-task-routing</span><span class='pill mut'>./workflows/cross-system-reconciliation</span><span class='pill mut'>./workflows/evidence-based-recommendation</span><span class='pill mut'>./workflows/executive-brief</span><span class='pill mut'>./workflows/lyte-operational-drift</span><span class='pill mut'>./workflows/opportunity-audit</span><span class='pill mut'>./workflows/prism-counsel-evidence-packaging</span><span class='pill mut'>./workflows/risk-escalation</span><span class='pill mut'>./workflows/seeds</span><span class='pill mut'>./workflows/terra-portfolio-anomaly</span><span class='pill mut'>./workflows/vessels-voyage-anomaly</span></div>
 <div class="honest"><b>What is honest right now.</b> This page reads the real
 <code>packages/substrate/</code> source in <code>szl-holdings/platform</code> and lists every public file, its purpose, and its
 exported symbols. The substrate is <b>real code</b> (compiler + engine + journal + budget-router + 11 workflow packs).
-It is shipped here as an <b>inspector / documentation surface</b> — the live TypeScript runtime executes inside the platform
 monorepo (and the substrate-py-workers GPU fleet), not inside this static HF Space. The side-effect categories enforced by the
 compiler are: read-only, write-internal, write-external, financial, notification, deletion, escalation, infrastructure.</div>
-<footer>SZL Holdings · Apache-2.0 · ORCID <a href="https://orcid.org/0009-0001-0110-4173">0009-0001-0110-4173</a> ·
-Doctrine v10 (749 declarations · 14 unique axioms · 163 tracked sorries · lutar-v18.0.0 @ c7c0ba17).
 Shipped additively via HfApi.create_commit.</footer>
-</div></body></html>

+<!DOCTYPE html>
+<!-- SPDX-License-Identifier: Apache-2.0 Â© 2026 Lutar, Stephen P. â€” SZL Holdings Â· Doctrine v10 -->
+<!-- ADDITIVE moat surface â€” shipped via HfApi.create_commit (never GitHub Actions). -->
 <html lang="en"><head>
 <meta charset="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/>
+<title>a11oy Â· Substrate Inspector â€” @szl/substrate</title>
 <style>:root{--bg:#0b0d12;--panel:#12151d;--ink:#e7ecf3;--mut:#8a93a6;--acc:#7cc4ff;--ok:#54d18c;--warn:#ffcf5c;--bad:#ff6b6b;--line:#222838;--mono:'SF Mono',ui-monospace,'JetBrains Mono',Menlo,Consolas,monospace}
 *{box-sizing:border-box}
 body{margin:0;background:var(--bg);color:var(--ink);font:15px/1.55 -apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif}
 .mono{font-family:var(--mono);font-size:12px}
 footer{margin-top:34px;border-top:1px solid var(--line);padding-top:14px;color:var(--mut);font-size:12px}</style></head><body><div class="wrap">
 <div class="top">
+  <div><span class="brand">a11oy</span> <span class="tag">Â· Governance Substrate Â· Doctrine v10</span></div>
   <div class="nav">
     <a href="/">home</a><a href="/wires">wires</a><a href="/codex-kernel">codex-kernel</a>
     <a href="/substrate">substrate</a><a href="/evidence">evidence</a><a href="/run-all">run-all</a>
   </div>
 </div>
+<h1>Substrate Inspector â€” @szl/substrate v0.2.0</h1>
+<p class="sub">Sovereign Execution Substrate â€” policy-shaped graphs, evidence-chained transitions, confidence-budget routing, and counterfactual replay for all SZL workflows.<br>
+Source: <a href="https://github.com/szl-holdings/platform/tree/main/packages/substrate">https://github.com/szl-holdings/platform/tree/main/packages/substrate</a> Â· public package (<code>private:false</code>) Â· #2 â€” compile-time Kahn-sort approval-DAG (packages/substrate/src/compiler.ts).</p>
 <div class="row"><span class='pill acc'>Reason()</span><span class='pill acc'>Retrieve()</span><span class='pill acc'>ToolCall()</span><span class='pill acc'>Verify()</span><span class='pill acc'>Decide()</span><span class='pill acc'>ApprovalGate()</span></div>
 <div class="row"><span class="mut" style="font-size:12px">modes:</span><span class='pill'>live</span><span class='pill'>dry-run</span><span class='pill'>replay</span><span class='pill'>counterfactual</span></div>
 <div class="grid">
   <div class="card"><h3>The moat in one line</h3>
+    <p>The single, opinionated execution runtime every SZL product surface (Aegis Â· Vessels Â· Terra Â· Counsel Â· Carlota Jo Â· Structured) calls the same way.
+    <code>defineWorkflow(&#123;stages, policy, budget&#125;)</code> â†’ <code>runtime.start(workflow, input, &#123;mode&#125;)</code> â†’ <code>PipelineRun</code>.</p></div>
+  <div class="card"><h3>Innovation #2 â€” compile-time approval-DAG</h3>
     <p><code>compiler.ts</code> runs a Kahn topological sort over the approval DAG <b>at compile time</b> and throws
     <code>SubstrateCompilerError</code> for cycles, orphan gates, or high-risk side-effects reachable without an ancestor
+    <code>ApprovalGate()</code>. Topology-enforced, not runtime-checked. Tests: <code>vitest â€” src/engine.test.ts Â· src/compiler.test.ts Â· src/workflows/phase2.test.ts</code>.</p></div>
 </div>
 <h2>Substrate packages (the moat)</h2>
   <span class='pill'>@szl/substrate-adapters</span><span class='pill'>@szl/substrate-client</span>
 </div>
+<h2>Public API surface â€” core files</h2>
+<table class="tbl"><tr><th>File</th><th>Purpose</th><th>LOC</th><th>Exports</th></tr><tr><td class='mono'>src/index.ts</td><td>Public package entry â€” re-exports every primitive, type, runtime, compiler, journal, telemetry &amp; workflow symbol.</td><td style='text-align:right' class='mut'>332</td><td class='mono mut'>AdvisorMatch, AegisThreatTriageInput, AegisThreatTriageResult, AnomalyFinding, AnyStage, ApprovalGate, BriefSection, CarlotaJoTaskRoutingInputâ€¦</td></tr><tr><td class='mono'>src/types.ts</td><td>Core TypeScript interfaces + Zod schemas: ExecutionMode, SideEffectCategory, 7 StageTypes, WorkflowDefinition, PipelineRun, EvidenceBundle.</td><td style='text-align:right' class='mut'>559</td><td class='mono mut'>AnyStage, AnyStageSchema, ApprovalGate, ApprovalGateSchema, BaseStage, CompiledGraph, CompiledStageNode, ConfidenceBudgetâ€¦</td></tr><tr><td class='mono'>src/stage-primitives.ts</td><td>Five stage primitive factories â€” Reason() Â· Retrieve() Â· ToolCall() Â· Verify() Â· Decide() â€” plus ApprovalGate(), definePolicy(), defineBudget().</td><td style='text-align:right' class='mut'>161</td><td class='mono mut'>ApprovalGate, Decide, Reason, Retrieve, ToolCall, Verify, defineBudget, definePolicy</td></tr><tr><td class='mono'>src/compiler.ts</td><td>Innovation #2 â€” compile-time Kahn topological sort over the approval DAG; throws SubstrateCompilerError for cycles, orphan gates, or high-risk side-effects reachable without an ancestor ApprovalGate. Topology-enforced, not runtime-checked.</td><td style='text-align:right' class='mut'>276</td><td class='mono mut'>SubstrateCompilerError, compile</td></tr><tr><td class='mono'>src/engine.ts</td><td>SubstrateRuntime: start(workflow, input, {mode}) â†’ PipelineRun. Workflow registry (register/lookup/list/clear), defaultRuntime singleton.</td><td style='text-align:right' class='mut'>1105</td><td class='mono mut'>SubstrateRuntime, SubstrateRuntimeOptions, clearWorkflowRegistry, defaultRuntime, listWorkflows, lookupWorkflow, registerWorkflow</td></tr><tr><td class='mono'>src/journal.ts</td><td>Evidence-chained journal: computeBundleHash, hashValue, sign/verify bundle signatures, SubstrateJournal store, runtime event bus.</td><td style='text-align:right' class='mut'>540</td><td class='mono mut'>JournalStore, RunStore, SubstrateJournal, SubstrateRuntimeEvent, SubstrateRuntimeEventType, computeBundleHash, defaultJournal, defaultJournalStoreâ€¦</td></tr><tr><td class='mono'>src/budget-router.ts</td><td>Confidence-budget routing â€” routeByBudget, aggregatePipelineConfidence, validateFinalConfidence (escalate when budget exceeded).</td><td style='text-align:right' class='mut'>110</td><td class='mono mut'>RoutingDecision, aggregatePipelineConfidence, routeByBudget, validateFinalConfidence</td></tr><tr><td class='mono'>src/adapters.ts</td><td>Adapter registries (model/policy/resource/retriever/tool) + wirePolicyEngineAdapter / wireToolMeshAdapter bridges to platform packages.</td><td style='text-align:right' class='mut'>494</td><td class='mono mut'>McpCapabilitySpec, McpToolCall, McpToolDefinition, McpToolResult, ModelAdapter, ModelAdapterInput, ModelAdapterOutput, PolicyAdapterâ€¦</td></tr><tr><td class='mono'>src/telemetry.ts</td><td>OpenTelemetry spans: SubstrateTelemetry, getMetrics, getRecentSpans, getRunSpans (SubstrateSpan).</td><td style='text-align:right' class='mut'>279</td><td class='mono mut'>SubstrateSpan, SubstrateTelemetry, getMetrics, getRecentSpans, getRunSpans</td></tr><tr><td class='mono'>src/python-worker.ts</td><td>Bridge to services/substrate-py-workers â€” protocol messages (claim/result/error/heartbeat/register), PYTHON_WORKER_PROTOCOL_VERSION.</td><td style='text-align:right' class='mut'>386</td><td class='mono mut'>PYTHON_WORKER_PROTOCOL_VERSION, PythonWorkerBaseMessage, PythonWorkerChannel, PythonWorkerMessage, PythonWorkerMessageType, RegisteredWorker, StageClaimMessage, StageErrorMessageâ€¦</td></tr><tr><td class='mono'>src/cli/bin.ts</td><td>`substrate` CLI binary entrypoint.</td><td style='text-align:right' class='mut'>80</td><td class='mono mut'></td></tr><tr><td class='mono'>src/cli/replay.ts</td><td>Replay &amp; counterfactual â€” replay(), handleReplayRequest, resolvePolicyProfileById, formatDiff (deterministic re-execution of a recorded run).</td><td style='text-align:right' class='mut'>312</td><td class='mono mut'>PolicyNotFoundError, ReplayEndpointRequest, ReplayEndpointResponse, ReplayOptions, ReplayResult, formatDiff, handleReplayRequest, replayâ€¦</td></tr></table>
 <h2>Reference + vertical workflow packs</h2>
+<table class="tbl"><tr><th>Workflow</th><th>Purpose</th><th>Exports</th></tr><tr><td class='mono'>opportunity-audit.ts</td><td>Phase-1 reference workflow â€” anomalyâ†’remediation opportunity audit (structured retriever).</td><td class='mono mut'>AnomalyFinding, OpportunityAuditInput, OpportunityAuditResult, RemediationDecision, isStructuredRetrieverRegistered, opportunityAuditWorkflow</td></tr><tr><td class='mono'>cross-system-reconciliation.ts</td><td>Reconcile discrepancies across systems â†’ reconciliation decision.</td><td class='mono mut'>CrossSystemReconciliationInput, CrossSystemReconciliationResult, ReconciliationDecision, ReconciliationDiscrepancy, crossSystemReconciliationWorkflow, runCrossSystemReconciliation</td></tr><tr><td class='mono'>evidence-based-recommendation.ts</td><td>Evidence-cited recommendation decision packet.</td><td class='mono mut'>EvidenceBasedRecommendationInput, EvidenceBasedRecommendationResult, EvidenceCitation, RecommendationDecisionPacket, evidenceBasedRecommendationWorkflow, runEvidenceBasedRecommendation</td></tr><tr><td class='mono'>executive-brief.ts</td><td>Multi-section executive brief generation.</td><td class='mono mut'>BriefSection, ExecutiveBriefInput, ExecutiveBriefOutput, ExecutiveBriefResult, executiveBriefWorkflow, runExecutiveBrief</td></tr><tr><td class='mono'>risk-escalation.ts</td><td>Risk-signal summary â†’ escalation decision.</td><td class='mono mut'>RiskEscalationDecision, RiskEscalationInput, RiskEscalationResult, RiskSignalSummary, riskEscalationWorkflow, runRiskEscalation</td></tr><tr><td class='mono'>aegis-threat-triage.ts</td><td>Aegis vertical pack â€” threat triage decision.</td><td class='mono mut'>AegisThreatTriageInput, AegisThreatTriageResult, ThreatTriageDecision, TriagedThreat, aegisThreatTriageWorkflow, runAegisThreatTriage</td></tr><tr><td class='mono'>carlota-jo-task-routing.ts</td><td>Carlota Jo vertical pack â€” advisor-match task routing.</td><td class='mono mut'>AdvisorMatch, CarlotaJoTaskRoutingInput, CarlotaJoTaskRoutingResult, TaskRoutingDecision, carlotaJoTaskRoutingWorkflow, runCarlotaJoTaskRouting</td></tr><tr><td class='mono'>structured-operational-drift.ts</td><td>structured vertical pack â€” operational drift detection decision.</td><td class='mono mut'>DriftItem, StructuredOperationalDriftInput, StructuredOperationalDriftResult, OperationalDriftDecision, structuredOperationalDriftWorkflow, runStructuredOperationalDrift</td></tr><tr><td class='mono'>prism-counsel-evidence-packaging.ts</td><td>Prism Counsel vertical pack â€” legal evidence packaging + matter deadlines.</td><td class='mono mut'>EvidencePackage, MatterDeadline, PrismCounselDecision, PrismCounselEvidencePackagingInput, PrismCounselEvidencePackagingResult, prismCounselEvidencePackagingWorkflow</td></tr><tr><td class='mono'>terra-portfolio-anomaly.ts</td><td>Terra vertical pack â€” portfolio anomaly decision.</td><td class='mono mut'>PortfolioAnomaly, PortfolioAnomalyDecision, TerraPortfolioAnomalyInput, TerraPortfolioAnomalyResult, runTerraPortfolioAnomaly, terraPortfolioAnomalyWorkflow</td></tr><tr><td class='mono'>vessels-voyage-anomaly.ts</td><td>Vessels vertical pack â€” voyage anomaly decision.</td><td class='mono mut'>VesselsVoyageAnomalyInput, VesselsVoyageAnomalyResult, VoyageAnomaly, VoyageAnomalyDecision, runVesselsVoyageAnomaly, vesselsVoyageAnomalyWorkflow</td></tr><tr><td class='mono'>index.ts</td><td>Demo seed inputs for the reference workflows.</td><td class='mono mut'>ALL_WORKFLOW_SEEDS, WorkflowSeedKey, aegisThreatTriageSeed, carlotaJoTaskRoutingSeed, crossSystemReconciliationSeed, evidenceBasedRecommendationSeed</td></tr></table>
 <h2>Subpath exports (package.json)</h2>
+<div class="row"><span class='pill mut'>.</span><span class='pill mut'>./adapters</span><span class='pill mut'>./budget-router</span><span class='pill mut'>./compiler</span><span class='pill mut'>./engine</span><span class='pill mut'>./journal</span><span class='pill mut'>./python-worker</span><span class='pill mut'>./telemetry</span><span class='pill mut'>./types</span><span class='pill mut'>./workflows/aegis-threat-triage</span><span class='pill mut'>./workflows/carlota-jo-task-routing</span><span class='pill mut'>./workflows/cross-system-reconciliation</span><span class='pill mut'>./workflows/evidence-based-recommendation</span><span class='pill mut'>./workflows/executive-brief</span><span class='pill mut'>./workflows/structured-operational-drift</span><span class='pill mut'>./workflows/opportunity-audit</span><span class='pill mut'>./workflows/prism-counsel-evidence-packaging</span><span class='pill mut'>./workflows/risk-escalation</span><span class='pill mut'>./workflows/seeds</span><span class='pill mut'>./workflows/terra-portfolio-anomaly</span><span class='pill mut'>./workflows/vessels-voyage-anomaly</span></div>
 <div class="honest"><b>What is honest right now.</b> This page reads the real
 <code>packages/substrate/</code> source in <code>szl-holdings/platform</code> and lists every public file, its purpose, and its
 exported symbols. The substrate is <b>real code</b> (compiler + engine + journal + budget-router + 11 workflow packs).
+It is shipped here as an <b>inspector / documentation surface</b> â€” the live TypeScript runtime executes inside the platform
 monorepo (and the substrate-py-workers GPU fleet), not inside this static HF Space. The side-effect categories enforced by the
 compiler are: read-only, write-internal, write-external, financial, notification, deletion, escalation, infrastructure.</div>
+<footer>SZL Holdings Â· Apache-2.0 Â· ORCID <a href="https://orcid.org/0009-0001-0110-4173">0009-0001-0110-4173</a> Â·
+Doctrine v10 (749 declarations Â· 14 unique axioms Â· 163 tracked sorries Â· lutar-v18.0.0 @ c7c0ba17).
 Shipped additively via HfApi.create_commit.</footer>
+</div></body></html>

pages/verify.html CHANGED Viewed

@@ -1,13 +1,13 @@
-<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1" />
-<title>a11oy — Verifiable Inference</title>
 <style>
   /* =====================================================================
-     a11oy Tier-1 Demo — elite showcase aesthetic
-     Dark palette · Cabinet Grotesk / JetBrains Mono · honest-label chips
      ===================================================================== */
   @import url('https://fonts.googleapis.com/css2?family=JetBrains+Mono:ital,wght@0,400;0,600;1,400&display=swap');
@@ -288,8 +288,8 @@
     <circle cx="16" cy="16" r="2.5" fill="#8aaaf8"/>
   </svg>
   <span class="site-title">a11oy</span>
-  <span class="site-tagline">Governed Inference · Verifiable by Design</span>
-  <a href="/" class="nav-back">← Console</a>
 </header>
 <!-- ===== MAIN ===== -->
@@ -297,11 +297,11 @@
   <div class="page-hero">
     <h1>Verifiable Inference</h1>
-    <p>Real, verifiable governance receipts — including our own public ledger. Every receipt is signed and independently verifiable. The honesty is the product.</p>
   </div>
   <!-- ===================================================================
-       SECTION A — Buyer-Verifiable Receipt (BVIR)
        =================================================================== -->
   <section class="section" id="section-bvir">
     <div class="section-head">
@@ -311,7 +311,7 @@
       </h2>
       <p>
         Makes a real POST /api/a11oy/v1/govern/infer call, then verifies the DSSE ECDSA-P256
-        signature <strong>in-browser</strong> using WebCrypto — no server round-trip for verification.
         SHA-256 of the decoded payload is recomputed and matched to <code>receipt.payload_digest</code>.
       </p>
       <p class="moat-line">
@@ -334,20 +334,20 @@
   </section>
   <!-- ===================================================================
-       SECTION B — Λ-Gated Honest Refusal
        =================================================================== -->
   <section class="section" id="section-govern">
     <div class="section-head">
       <h2>
         <span class="section-label">B</span>
-        Λ-Gated Honest Refusal
       </h2>
       <p>
         Three preset governance cases. Each returns a REAL signed receipt via
-        <code>szl_dsse.sign_khipu_receipt</code>. Λ is always labeled
-        <span class="conj">Conjecture 1 — advisory, NOT a theorem</span>.
       </p>
-      <p class="moat-line">"Even our refusals are signed and explained — no black-box boolean."</p>
     </div>
     <div class="section-body">
@@ -372,7 +372,7 @@
   </section>
   <!-- ===================================================================
-       SECTION C — Verifiable Thesis
        =================================================================== -->
   <section class="section" id="section-thesis">
     <div class="section-head">
@@ -382,9 +382,9 @@
       </h2>
       <p>
         The 8 PROVEN formulas with verbatim Lean 4 statements, the 3-tier honest corpus
-        (8 / ~35 / ~185), and the honest conjecture labels for Λ and Khipu BFT.
       </p>
-      <p class="moat-line">"The honesty is the product. Click any formula — verify it yourself."</p>
     </div>
     <div class="section-body">
@@ -419,13 +419,13 @@
   </section>
   <!-- ===================================================================
-       SECTION D — Public Ledger (real receipts from szl-lake)
        =================================================================== -->
   <section class="section" id="section-ledger">
     <div class="section-head">
       <h2>
         <span class="section-label">D</span>
-        Public Ledger — Real Receipts
       </h2>
       <p>
         Real signed Khipu receipts from our public dataset
@@ -433,9 +433,9 @@
         (snapshot 2026-07-02). This page recomputes the <strong>hash-chain linkage in your browser</strong>;
         the DSSE / sigstore signatures verify <strong>offline</strong> with the
         <a href="https://pypi.org/project/szl-receipt/" target="_blank" rel="noopener">szl-receipt</a>
-        library and cross-check against the canonical rows on Hugging Face — infrastructure we do not control.
       </p>
-      <p class="moat-line">"The receipts you would read in diligence — including the ones where we mark our own central claim, &Lambda;, still OPEN."</p>
     </div>
     <div class="section-body">
       <div class="btn-row">
@@ -455,15 +455,15 @@
 </main>
 <footer class="footer">
-  <p>SZL Holdings · a11oy · Doctrine v11 · 8 kernel-verified formulas @ c7c0ba17 ·
-     Λ = Conjecture 1 (advisory) · Khipu BFT = Conjecture 2 ·
-     <a href="/govern/health" target="_blank">Governance Health</a> ·
      <a href="/api/a11oy/v1/demo/thesis" target="_blank">Thesis API</a>
   </p>
 </footer>
 <!-- ===================================================================
-     JAVASCRIPT — all in-browser, no CDN
      =================================================================== -->
 <script>
 "use strict";
@@ -495,7 +495,7 @@ function escHTML(s) {
 /* ---- base64 helpers ---- */
 function b64Decode(s) {
-  // standard base64 → Uint8Array (not URL-safe; WebCrypto importKey returns SPKI base64)
   const bin = atob(s);
   const b = new Uint8Array(bin.length);
   for (let i = 0; i < bin.length; i++) b[i] = bin.charCodeAt(i);
@@ -509,10 +509,10 @@ function b64Encode(buf) {
   return btoa(s);
 }
-/* ---- DER ASN.1 → raw r‖s converter (for WebCrypto ECDSA P-256) ----
    cosign / cryptography-lib ECDSA signs in DER (ASN.1 SEQUENCE { INTEGER r, INTEGER s }).
-   WebCrypto ECDSA P-256 SHA-256 expects IEEE P-1363 raw r‖s (64 bytes: 32+32).
-   We decode the DER SEQUENCE here entirely in JS — no library needed.
 */
 function derToRaw(derBytes) {
   let i = 0;
@@ -594,14 +594,14 @@ async function importPubKeyFromPEM(pem) {
 }
 /* ====================================================================
-   SECTION A — BVIR
    ==================================================================== */
 async function runBVIR() {
   const btn = el('bvir-run');
   btn.disabled = true;
   hide('bvir-verdict');
   hide('bvir-output');
-  setStatus('bvir-status', 'Calling /api/a11oy/v1/govern/infer …', true);
   let data;
   try {
@@ -617,7 +617,7 @@ async function runBVIR() {
     return;
   }
-  setStatus('bvir-status', 'Verifying signature in-browser via WebCrypto …', true);
   const dsse   = data.dsse   || {};
   const receipt= data.receipt|| {};
@@ -666,7 +666,7 @@ async function runBVIR() {
   let sigKeyid = '';
   if (!dsse.signed) {
-    verifyError = 'UNSIGNED envelope — private key not available in this runtime. Receipt chain is still valid.';
   } else if (sigs.length === 0) {
     verifyError = 'No signatures in envelope.';
   } else {
@@ -682,7 +682,7 @@ async function runBVIR() {
         try {
           rawSig = derToRaw(sigBytes);
         } catch(e2) {
-          verifyError = 'DER→raw conversion failed: ' + e2.message;
         }
       }
@@ -729,26 +729,26 @@ async function runBVIR() {
   let verdictHTML = '';
   if (verified && isDemoKey) {
     verdictHTML = `<div class="verdict-banner verdict-ok">
-      ✓ VERIFIED (demo-signing-key — not the production cosign key)
       <span class="chip chip-ok">keyid: ${escHTML(sigKeyid)}</span>
       <div style="font-size:12px;font-weight:400;margin-top:6px;color:var(--text-dim)">
         Real ECDSA-P256 signature, verified in your browser against /demo-cosign.pub.
-        This is a clearly-labelled DEMO key — the production cosign key stays
         founder-gated and is never placed in this runtime.
       </div>
     </div>`;
   } else if (verified) {
     verdictHTML = `<div class="verdict-banner verdict-ok">
-      ✓ VERIFIED — WebCrypto ECDSA-P256 signature valid
       <span class="chip chip-ok">keyid: ${escHTML(sigKeyid)}</span>
     </div>`;
   } else if (!dsse.signed) {
     verdictHTML = `<div class="verdict-banner verdict-dim">
-      ⚠ UNSIGNED — private key not in runtime; receipt chain still valid
     </div>`;
   } else {
     verdictHTML = `<div class="verdict-banner verdict-fail">
-      ✗ VERIFICATION FAILED — ${escHTML(verifyError)}
     </div>`;
   }
@@ -780,33 +780,33 @@ async function runBVIR() {
       </div>
       <div class="hash-row">
         <span class="hash-label">Payload digest:</span>
-        <span class="hash-val ${digestValClass}">${payloadDigestComputed.substring(0,32)}…</span>
         <span class="chip ${digestChipClass}">${digestChipText}</span>
       </div>
       ${hasDeclaredDigest ? `<div class="hash-row">
         <span class="hash-label">Declared digest:</span>
-        <span class="hash-val">${escHTML(declaredPayloadDigest.substring(0,32))}…</span>
       </div>` : `<div class="hash-row">
         <span class="hash-label">Declared digest:</span>
-        <span class="hash-val" style="color:var(--text-dim)">(none declared — nothing to compare against)</span>
       </div>`}
       <div class="hash-row">
         <span class="hash-label">PAE SHA-256:</span>
-        <span class="hash-val">${paeSHA.substring(0,32)}…</span>
       </div>
       <div class="hash-row">
         <span class="hash-label">Chain prev:</span>
-        <span class="hash-val">${escHTML(String(chainPrev).substring(0,32))}…</span>
       </div>
       <div class="hash-row">
         <span class="hash-label">Chain digest:</span>
-        <span class="hash-val">${escHTML(String(chainDigest).substring(0,32))}…</span>
       </div>
     </div>
     <div style="font-size:12px;color:var(--text-dim);margin-bottom:8px">
-      <span class="conj">Λ Conjecture 1 — advisory</span>
-      Λ = ${escHTML(String((data.governance||{}).lambda ?? 'N/A'))}
-      &nbsp;·&nbsp;
       Energy: <span class="chip chip-dim">${escHTML((data.energy||{}).label || 'UNAVAILABLE')}</span>
     </div>
   `;
@@ -819,18 +819,18 @@ async function runBVIR() {
     'governance.lambda': (data.governance||{}).lambda,
     'governance.lambda_kind': (data.governance||{}).lambda_kind,
     'receipt.seq': receipt.seq,
-    'receipt.prev': String(chainPrev).substring(0,32) + '…',
-    'receipt.digest': String(chainDigest).substring(0,32) + '…',
     'dsse.signed': dsse.signed,
     'dsse.keyid': dsseKeyid || null,
-    'dsse.key_kind': isDemoKey ? 'demo (demo-signing-key — NOT production cosign)' : (dsse.signed ? 'production cosign' : null),
     'dsse.payloadType': dsse.payloadType,
     'verify.public_key_url': pubKeyURL,
-    'verify.computed_payload_sha256': payloadDigestComputed.substring(0,32) + '…',
-    'verify.declared_payload_digest': hasDeclaredDigest ? declaredPayloadDigest.substring(0,32) + '…' : null,
     'verify.payload_digest_match': hasDeclaredDigest ? (payloadDigestMatches ? 'MATCH' : 'MISMATCH') : 'no declared digest to compare',
-    'verify.pae_sha256': paeSHA.substring(0,32) + '…',
-    'verify.result': verified ? (isDemoKey ? 'VERIFIED ✓ (demo-signing-key — not production cosign)' : 'VERIFIED ✓') : (dsse.signed === false ? 'UNSIGNED (no private key in runtime)' : 'FAILED: ' + verifyError),
     'energy.label': (data.energy||{}).label,
   };
   el('bvir-output').textContent = JSON.stringify(outputData, null, 2);
@@ -839,8 +839,8 @@ async function runBVIR() {
   setStatus('bvir-status', verified
     ? (isDemoKey
-        ? '✓ WebCrypto verified — real ECDSA-P256 over DSSE PAE with demo-signing-key (NOT the production cosign key).'
-        : '✓ WebCrypto verified — real ECDSA-P256 signature over DSSE PAE.')
     : (dsse.signed === false
         ? 'Unsigned receipt (private key absent from runtime). Chain valid.'
         : 'Verification result: ' + verifyError));
@@ -848,11 +848,11 @@ async function runBVIR() {
 }
 /* ====================================================================
-   SECTION B — Governed Refusal
    ==================================================================== */
 async function runGovern(caseKey) {
   hide('govern-panel');
-  setStatus('govern-status', `Calling /api/a11oy/v1/demo/govern case="${caseKey}" …`, true);
   let data;
   try {
@@ -875,20 +875,20 @@ async function runGovern(caseKey) {
   // Verdict banner
   const decClasses = { allow:'verdict-ok', review:'verdict-dim', deny:'verdict-fail' };
-  const decLabels  = { allow:'✓ ALLOW — governance passed', review:'⚠ REVIEW — below advisory floor', deny:'✗ DENY — gate fired' };
   const bannerCls  = decClasses[decision] || 'verdict-dim';
   const bannerLbl  = decLabels[decision]  || decision.toUpperCase();
   el('govern-verdict-banner').innerHTML = `<div class="verdict-banner ${bannerCls}">${bannerLbl}</div>`;
-  // Λ row
   const lambdaPass = gov.lambda_pass;
   el('govern-lambda-row').innerHTML = `
     <div style="display:flex;align-items:center;gap:10px;flex-wrap:wrap">
-      <span style="font-size:14px;font-weight:700">Λ = ${escHTML(String(gov.lambda ?? 'N/A'))}</span>
       <span class="chip ${lambdaPass ? 'chip-ok' : 'chip-err'}">
         ${lambdaPass ? 'PASS' : 'FAIL'} (floor ${escHTML(String(gov.lambda_floor ?? 0.9))})
       </span>
-      <span class="conj">Conjecture 1 — advisory, NOT a theorem</span>
     </div>
     <div style="font-size:12px;color:var(--text-dim);margin-top:4px">
       ${escHTML(gov.lambda_kind || 'Conjecture 1 (advisory; NOT a theorem)')}
@@ -902,9 +902,9 @@ async function runGovern(caseKey) {
     const fired = g.fired;
     gatesHTML += `
       <div class="gate-row">
-        <span class="gate-name">${escHTML(g.name || '—')}</span>
         <span class="gate-fired ${fired ? 'chip chip-err' : 'chip chip-ok'}">${fired ? 'FIRED' : 'PASS'}</span>
-        <span class="chip chip-dim">${escHTML(g.decision || '—')}</span>
       </div>`;
   });
   el('govern-gates').innerHTML = gatesHTML;
@@ -918,8 +918,8 @@ async function runGovern(caseKey) {
       lambda: receipt.lambda,
       lambda_kind: receipt.lambda_kind,
       gates: receipt.gates,
-      prev: String(chain.prev || '').substring(0,32) + '…',
-      digest: String(chain.digest || '').substring(0,32) + '…',
       'dsse.signed': signed,
       'dsse.keyid': ((dsse.signatures||[])[0]||{}).keyid,
       honesty: data.honesty,
@@ -932,17 +932,17 @@ async function runGovern(caseKey) {
   }
   show('govern-panel');
-  setStatus('govern-status', `Decision: ${decision.toUpperCase()} · Λ = ${gov.lambda} · ${dsse.signed ? 'Receipt signed ✓' : 'Receipt unsigned (key absent)'}`);
 }
 /* ====================================================================
-   SECTION C — Verifiable Thesis
    ==================================================================== */
 async function loadThesis() {
   const btn = el('thesis-load');
   btn.disabled = true;
   hide('thesis-panel');
-  setStatus('thesis-status', 'Loading /api/a11oy/v1/demo/thesis …', true);
   let data;
   try {
@@ -973,7 +973,7 @@ async function loadThesis() {
   });
   corpusHTML += `</div>`;
   corpusHTML += `<div class="corpus-never-claim">
-    ⚠ ${escHTML(corpus.honest_note || 'We never claim 183 proven.')}
   </div>`;
   el('thesis-corpus').innerHTML = corpusHTML;
@@ -988,7 +988,7 @@ async function loadThesis() {
         </div>
         <div class="formula-lean">${escHTML(f.lean)}</div>
         <div class="formula-desc">${escHTML(f.description)}</div>
-        <div class="formula-status">✓ ${escHTML(f.status)}</div>
       </div>`;
   });
   el('thesis-formulas').innerHTML = formulasHTML;
@@ -1000,14 +1000,14 @@ async function loadThesis() {
     </div>
     <div style="display:flex;gap:14px;flex-wrap:wrap">
       <div style="flex:1;min-width:220px;background:var(--bg-panel);border:1px solid #92400e;border-radius:var(--radius);padding:14px">
-        <div style="font-size:11px;font-weight:700;color:var(--amber);text-transform:uppercase;letter-spacing:.07em;margin-bottom:6px">Conjecture 1 — Λ (Lambda)</div>
         <div style="font-size:13px;color:var(--text-dim)">${escHTML(doctrine.lambda_kind || 'Conjecture 1 (advisory; NOT a theorem)')}</div>
         <div style="font-size:12px;color:var(--text-mute);margin-top:6px">Open bounty: szl-holdings/lambda-bounty</div>
       </div>
       <div style="flex:1;min-width:220px;background:var(--bg-panel);border:1px solid #991b1b;border-radius:var(--radius);padding:14px">
-        <div style="font-size:11px;font-weight:700;color:var(--red);text-transform:uppercase;letter-spacing:.07em;margin-bottom:6px">Conjecture 2 — Khipu BFT</div>
         <div style="font-size:13px;color:var(--text-dim)">${escHTML(doctrine.bft_kind || 'Conjecture 2 (NOT proven; NOT a theorem)')}</div>
-        <div style="font-size:12px;color:var(--text-mute);margin-top:6px">Labeled honestly everywhere — no false safety claim</div>
       </div>
     </div>
     <div style="margin-top:14px;font-size:12px;color:var(--text-dim)">
@@ -1016,12 +1016,12 @@ async function loadThesis() {
   `;
   show('thesis-panel');
-  setStatus('thesis-status', `Loaded ${formulas.length} proven formulas · 3-tier corpus · live doctrine`);
   btn.disabled = false;
 }
 /* ====================================================================
-   SECTION D — Public Ledger (real receipts from szl-lake, snapshot)
    In-browser: hash-chain linkage check. Offline: signatures via szl-receipt.
    ==================================================================== */
 const LEDGER_SNAPSHOT = {"source": "https://huggingface.co/datasets/SZLHOLDINGS/szl-lake", "captured_utc": "2026-07-02", "lutar_lean": [{"branch": "theorem-u-kernel", "chain_index": 1, "doctrine": "v11", "honesty": {"conjecture_1": "OPEN: unconditional Lambda uniqueness is Conjecture 1 and is machine-checked FALSE as stated. Theorem U does NOT close it.", "doctrine": "v11", "locked_five_unchanged": true, "locked_set": ["F1", "F11", "F12", "F18", "F19"], "theorem_u": "REAL-conditional: Lutar.Uniqueness Theorem U is kernel-verified (axiom footprint within the Lean/Mathlib trust base, no sorry) but CONDITIONAL on its stated checkable hypotheses; it is NOT part of the locked-proven baseline."}, "kernel_commit": "e736decd244ae06e8bb48531c6c7dc0f1029b25a", "kernel_commit_short": "e736decd244a", "kind": "theorem-u-anchor", "lambda_status": "Conjecture_1 (OPEN; unconditional uniqueness machine-checked FALSE)", "numbers": {"axioms_unique": 22, "declarations": 1323, "sorries_noncomment": 254}, "organ": "lutar-lean", "prev_hash": null, "receipt_id": "d70f444db57df9a4a2d52e69408ce61b511e4b50152f7fbf97456b1af66fe9a0", "schema": "szl.khipu.receipt/v1", "signing": {"format": "sigstore-keyless-bundle", "bytes": 18428, "b64_head": "eyJtZWRpYVR5cGUiOiJhcHBsaWNhdGlvbi92bmQuZGV2\u2026"}, "source_run": {"conclusion": "success", "id": "27186151340", "url": "https://github.com/szl-holdings/lutar-lean/actions/runs/27186151340", "workflow": "Lake build (gate + numbers)"}, "subject": {"name": "theorem_u_snapshot.json", "sha256": "82d08a4e892579e815d880d51f61cb8035a3325e077c29e412f310f76b50985e", "snapshot": {"branch": "theorem-u-kernel", "built_at_utc": "2026-06-09T05:37:45Z", "honesty": {"conjecture_1": "OPEN: unconditional Lambda uniqueness is Conjecture 1 and is machine-checked FALSE as stated. Theorem U does NOT close it.", "doctrine": "v11", "locked_five_unchanged": true, "locked_set": ["F1", "F11", "F12", "F18", "F19"], "theorem_u": "REAL-conditional: Lutar.Uniqueness Theorem U is kernel-verified (axiom footprint within the Lean/Mathlib trust base, no sorry) but CONDITIONAL on its stated checkable hypotheses; it is NOT part of the locked-proven baseline."}, "kernel_commit": "e736decd244ae06e8bb48531c6c7dc0f1029b25a", "kernel_commit_short": "e736decd244a", "lean_numbers": {"lean_numbers_sha256": "50098073e92aefdf275ec53e60faafc0f1bd5d4a1a88023e819490aaaa69d4d6", "numbers": {"axiom_names": ["A6'_block_consistent", "KS_theorem_1_1", "MomentSubGaussian", "audit_reidemeister_invariance", "canonicalReceipt", "chromotopology_code_bijection", "compression_collision_resistant", "domain_separation", "gleason_length_mod_8", "klDivergence_nonneg", "lambda_schur_concave_n_axis", "lambda_stationary_unique", "leaf_collision_resistant", "liu_hui_pi_converges", "node_collision_resistant", "pinsker", "r1_invariance", "r2_invariance", "setAlpha_cauchy", "setDelta_stage2", "sha256", "sha256_collision_resistant"], "axioms_raw": 23, "axioms_unique": 22, "declarations": 1323, "sorries_baseline": 251, "sorries_noncomment": 254, "sorries_putnam": 56, "sorries_raw": 307}, "reference_vectors_sha256": "857967629daf5e5c45a167306ea0e0091569a29766b01ac91bef15a539b816dc", "replay_hash": "9860c3332a2d0b0553b775dcd27111b0ce4fae4bc5cebe2827dc6148be4cbebe", "schema": "szl.lean_numbers/v1"}, "repo": "szl-holdings/lutar-lean", "schema": "szl.theorem_u.snapshot/v1", "theorem_u": {"decl_source_sha256": {"Lutar/Uniqueness/AxiomCheck.lean": "f45781ef2becf15eccd0c31702603a55cfab1eb7960483593a045202b66f4887", "Lutar/Uniqueness/Identifiability.lean": "fa340e6a999eac7ea1cd035d90647548baaa290b7376d7fcbdcbd165e475dedf", "Lutar/Uniqueness/LambdaEquiv.lean": "03f63e36f3a9b19e8e9d4f48313a450bae7c85fcb53049d52e0f6d4adf4b1c23", "Lutar/Uniqueness/TheoremU.lean": "c958520ba31d6fc1f48a9b49871d67812f178e168b31bf2be9e3d5fb2061386c"}, "full_axiom_footprint": {"Lutar.Uniqueness.AxiomCheck.conjecture1_still_open": [], "Lutar.Uniqueness.AxiomCheck.locked_count_five": [], "Lutar.Uniqueness.AxiomCheck.theoremU_axiom_sets_kernel_only": [], "Lutar.Uniqueness.AxiomCheck.theoremU_excluded_from_locked": [], "Lutar.Uniqueness.CorollaryU1_LambdaUnique_Separable": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.CorollaryU2_LambdaUnique_Factors": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.TheoremU_LambdaUnique": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.TheoremU_LambdaUnique_eq": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.identifiability_forces_lambda": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.lambda_equiv_to_eq_of_anchored": ["Classical.choice", "Quot.sound", "propext"]}, "headline_axiom_footprint": {"CorollaryU1_LambdaUnique_Separable": ["Classical.choice", "Quot.sound", "propext"], "CorollaryU2_LambdaUnique_Factors": ["Classical.choice", "Quot.sound", "propext"], "TheoremU_LambdaUnique": ["Classical.choice", "Quot.sound", "propext"], "TheoremU_LambdaUnique_eq": ["Classical.choice", "Quot.sound", "propext"], "identifiability_forces_lambda": ["Classical.choice", "Quot.sound", "propext"], "lambda_equiv_to_eq_of_anchored": ["Classical.choice", "Quot.sound", "propext"]}, "headline_decls": ["CorollaryU1_LambdaUnique_Separable", "CorollaryU2_LambdaUnique_Factors", "TheoremU_LambdaUnique", "TheoremU_LambdaUnique_eq", "identifiability_forces_lambda", "lambda_equiv_to_eq_of_anchored"], "kernel_only": true, "kernel_trust_base": ["Classical.choice", "Quot.sound", "funext", "propext"], "module": "Lutar.Uniqueness", "status": "REAL-conditional"}}}, "theorem_u_status": "REAL-conditional", "timestamp": "2026-06-09T05:39:22Z"}, {"branch": "main", "chain_index": 2, "doctrine": "v11", "honesty": {"conjecture": "This is a GENERATED, OPEN conjecture \u2014 NOT a theorem and NOT machine-verified. It remains OPEN until a solution is independently verified.", "difficulty": "Difficulty 'open-resistant' / grade 'OPEN' come from a REAL bounded solver run. OPEN means searched-to-budget, not proven true; VERIFIED-FINITE certifies only the finite enumerated domain; REFUTED carries a concrete witness. No score is fabricated.", "doctrine": "v11", "kernel_only": false, "novelty": "Novelty verdict 'novel-candidate' is an advisory screen, not a proof of originality; external prior-art sources are labelled live/cached/unreachable and an unreachable source never confirms novelty.", "signing": "Disclosure is cosign keyless-OIDC signed and anchored into the szl-lake DSSE Khipu ledger; the signature attests the timestamp + content, NOT the truth of the conjecture.", "status": "OPEN"}, "kernel_commit": "d851aefe86b9f12f9d4423200bd9e5257d05c41e", "kernel_commit_short": "d851aefe86b9", "kind": "conjecture-disclosure-anchor", "milestone_kind": "conjecture-disclosure", "milestone_status": "OPEN", "milestone_title": "SZL mixing-map convergence conjecture", "numbers": {"axioms_unique": null, "declarations": null, "sorries_noncomment": null}, "organ": "lutar-lean", "prev_hash": "d70f444db57df9a4a2d52e69408ce61b511e4b50152f7fbf97456b1af66fe9a0", "receipt_id": "08744b67b647039f87abbf0b29587638ae777308ca7fc2434ed3ae4033687b50", "schema": "szl.khipu.receipt/v1", "signing": {"format": "sigstore-keyless-bundle", "bytes": 17488, "b64_head": "eyJtZWRpYVR5cGUiOiJhcHBsaWNhdGlvbi92bmQuZGV2\u2026"}, "source_run": {"conclusion": "success", "id": "27318564784", "url": "https://github.com/szl-holdings/lutar-lean/actions/runs/27318564784", "workflow": "Conjecture Factory (generate -> timestamp -> grade -> anchor)"}, "subject": {"name": "conjecture_snapshot.json", "sha256": "7faded7df9ac5bea4ca7ddaa1e5c38c247c237fd49b8a1a39d35a260c2189fb0", "snapshot": {"branch": "main", "built_at_utc": "2026-06-11T01:54:20Z", "candidate": {"created_utc": "2026-06-11T01:54:19Z", "doctrine": "v11", "domain": "number-theory / arithmetic dynamics", "id": "cf-5ddbbe7571a9", "intended_solution_outline": "Bound the orbit by a Lyapunov / drift argument on the 2-adic valuation: show the\ncontracting branch (n = 3 mod 4) dominates the accelerating branch (n = 1 mod 4)\nin expectation, then rule out non-trivial cycles via a residue-class descent.\nStatus: OPEN \u2014 no proof is claimed; the predicate only performs bounded testing.", "predicate": {"description": "Sound bounded-orbit checker: returns False only on a detected non-1 cycle (a certain counterexample); inconclusive bounded runs assert no counterexample.", "entry": "holds", "kind": "python-callable", "module": "conjectures/samples/szl-mixing-map/predicate.py"}, "references": ["conjectures/corpus/collatz.md (related but distinct: classical 3n+1 map)", "Lagarias, J. (2010). The 3x+1 problem: an annotated bibliography."], "schema": "szl.conjecture.candidate/v1", "statement": "Define M : Z+ -> Z+ by\n    M(n) = n / 2          if n is even,\n    M(n) = (3n + 1) / 2    if n is odd and n = 1 (mod 4),\n    M(n) = (n + 1) / 2     if n is odd and n = 3 (mod 4).\nConjecture: for every integer n >= 1 there exists k >= 0 with M^k(n) = 1.", "statement_canonical": "Define M : Z+ -> Z+ by M(n) = n / 2 if n is even, M(n) = (3n + 1) / 2 if n is odd and n = 1 (mod 4), M(n) = (n + 1) / 2 if n is odd and n = 3 (mod 4). Conjecture: for every integer n >= 1 there exists k >= 0 with M^k(n) = 1.", "statement_hash": "sha256:5ddbbe7571a93f9ed3d49c37dbb3559eb339a51380e427882bd3783b7cb2743a", "taxonomy": "OPEN", "title": "SZL mixing-map convergence conjecture"}, "grade": {"budget": 100000, "candidate_id": "cf-5ddbbe7571a9", "difficulty": "open-resistant", "graded_utc": "2026-06-11T01:54:20Z", "honesty": "Grade from a REAL ensemble run. REFUTED carries a concrete witness. VERIFIED-FINITE certifies only the finite enumerated domain, not the conjecture in general. OPEN means searched-to-budget with no counterexample \u2014 NOT a proof of truth. The candidate stays OPEN (doctrine v11).", "result": "OPEN", "schema": "szl.conjecture.grade/v1", "seed": 1729, "solver_ensemble": [{"budget": 100000, "checked": 100000, "elapsed_sec": 0.411268, "note": "infinite/streaming domain", "resolved": false, "result": "OPEN", "solver": "exhaustive", "witness": null}, {"budget": 100000, "checked": 100000, "elapsed_sec": 0.654207, "note": "random sampling found no counterexample (not a proof)", "resolved": false, "result": "OPEN", "solver": "sampler", "witness": null}], "success_rate": 0.0, "witness": null}, "honesty": {"conjecture": "This is a GENERATED, OPEN conjecture \u2014 NOT a theorem and NOT machine-verified. It remains OPEN until a solution is independently verified.", "difficulty": "Difficulty 'open-resistant' / grade 'OPEN' come from a REAL bounded solver run. OPEN means searched-to-budget, not proven true; VERIFIED-FINITE certifies only the finite enumerated domain; REFUTED carries a concrete witness. No score is fabricated.", "doctrine": "v11", "kernel_only": false, "novelty": "Novelty verdict 'novel-candidate' is an advisory screen, not a proof of originality; external prior-art sources are labelled live/cached/unreachable and an unreachable source never confirms novelty.", "signing": "Disclosure is cosign keyless-OIDC signed and anchored into the szl-lake DSSE Khipu ledger; the signature attests the timestamp + content, NOT the truth of the conjecture.", "status": "OPEN"}, "kernel_commit": "d851aefe86b9f12f9d4423200bd9e5257d05c41e", "kernel_commit_short": "d851aefe86b9", "kind": "conjecture-disclosure", "milestone": {"difficulty": "open-resistant", "grade_result": "OPEN", "headline_decls": [], "id": "cf-5ddbbe7571a9", "kernel_only": false, "novelty_verdict": "novel-candidate", "release_stage": "statement", "statement_hash": "sha256:5ddbbe7571a93f9ed3d49c37dbb3559eb339a51380e427882bd3783b7cb2743a", "status": "OPEN", "title": "SZL mixing-map convergence conjecture"}, "novelty": {"candidate_id": "cf-5ddbbe7571a9", "external": [{"hits": 0, "note": "offline run (--online not set)", "source": "arxiv", "status": "unreachable", "top": []}, {"hits": 0, "note": "offline run (--online not set)", "source": "crossref", "status": "unreachable", "top": []}], "honesty": "Novelty is a screen, not a proof of originality. External sources are labelled live/cached/unreachable; an unreachable source contributes no hits and is never silently treated as confirming novelty. The candidate stays OPEN regardless of this verdict (doctrine v11).", "local_corpus": {"corpus_dir": "conjectures/corpus", "documents_scanned": 2, "max_similarity": 0.0688, "method": "char-5-gram shingle Jaccard", "near_duplicate": false, "nearest": {"doc": "collatz.md", "similarity": 0.0688}, "threshold": 0.8, "top": [{"doc": "collatz.md", "similarity": 0.0688}, {"doc": "goldbach.md", "similarity": 0.0451}]}, "schema": "szl.conjecture.novelty/v1", "screened_utc": "2026-06-11T01:54:19Z", "statement_hash": "sha256:5ddbbe7571a93f9ed3d49c37dbb3559eb339a51380e427882bd3783b7cb2743a", "verdict": "novel-candidate", "verdict_reason": "no near-duplicate found (local-only; external prior-art not fully screened \u2014 unreachable: ['arxiv', 'crossref'])"}, "predicate_type": "https://szl-holdings/conjecture-disclosure/v1", "repo": "szl-holdings/lutar-lean", "schema": "szl.conjecture.disclosure/v1"}}, "timestamp": "2026-06-11T01:54:27Z"}, {"branch": "main", "chain_index": 3, "doctrine": "v11", "honesty": {"conjecture_1": "OPEN: unconditional Lambda uniqueness is Conjecture 1 and is machine-checked FALSE as stated; conjecture1_still_open re-asserts it stays open.", "doctrine": "v11", "locked_baseline": "REAL-invariant: kernel-verified meta-theorems in Lutar/Uniqueness/AxiomCheck.lean (locked_count_eight, theoremU_excluded_from_locked, theoremU_axiom_sets_kernel_only, conjecture1_still_open) \u2014 each proven by `decide`, axiom footprint within the Lean/Mathlib trust base, no sorry. They ASSERT that the locked-proven baseline is EXACTLY the eight {F1,F4,F7,F11,F12,F18,F19,F22}; they do NOT themselves re-prove those formulas (the formula proofs live in Lutar/Puriq/Formulas/ProvedFormulas.lean).", "locked_set": ["F1", "F4", "F7", "F11", "F12", "F18", "F19", "F22"], "theorem_u": "Theorem U stays REAL-conditional and EXCLUDED from this locked baseline (theoremU_excluded_from_locked); anchoring this milestone does not change Theorem U's status."}, "kernel_commit": "25e0b2af781f5fb10324945ea10c861bcc28cc83", "kernel_commit_short": "25e0b2af781f", "kind": "locked-baseline-anchor", "milestone_kind": "locked-baseline", "milestone_status": "REAL-invariant", "milestone_title": "Locked-proven baseline (Doctrine v11) \u2014 kernel meta-invariants", "numbers": {"axioms_unique": 22, "declarations": 1323, "sorries_noncomment": 254}, "organ": "lutar-lean", "prev_hash": "08744b67b647039f87abbf0b29587638ae777308ca7fc2434ed3ae4033687b50", "receipt_id": "dcdad01763241e4d7af6b45e59949e6596c12ccf43ed6b784471c1f05b4715c0", "schema": "szl.khipu.receipt/v1", "signing": {"format": "sigstore-keyless-bundle", "bytes": 19036, "b64_head": "eyJtZWRpYVR5cGUiOiJhcHBsaWNhdGlvbi92bmQuZGV2\u2026"}, "source_run": {"conclusion": "success", "id": "27319352318", "url": "https://github.com/szl-holdings/lutar-lean/actions/runs/27319352318", "workflow": "Lake build (gate + numbers)"}, "subject": {"name": "locked_baseline_snapshot.json", "sha256": "19ea5946195f7437cfb881eb5489898d0d45f5f074dfa210c22eb6c8bbfc3bc9", "snapshot": {"branch": "main", "built_at_utc": "2026-06-11T02:18:27Z", "honesty": {"conjecture_1": "OPEN: unconditional Lambda uniqueness is Conjecture 1 and is machine-checked FALSE as stated; conjecture1_still_open re-asserts it stays open.", "doctrine": "v11", "locked_baseline": "REAL-invariant: kernel-verified meta-theorems in Lutar/Uniqueness/AxiomCheck.lean (locked_count_eight, theoremU_excluded_from_locked, theoremU_axiom_sets_kernel_only, conjecture1_still_open) \u2014 each proven by `decide`, axiom footprint within the Lean/Mathlib trust base, no sorry. They ASSERT that the locked-proven baseline is EXACTLY the eight {F1,F4,F7,F11,F12,F18,F19,F22}; they do NOT themselves re-prove those formulas (the formula proofs live in Lutar/Puriq/Formulas/ProvedFormulas.lean).", "locked_set": ["F1", "F4", "F7", "F11", "F12", "F18", "F19", "F22"], "theorem_u": "Theorem U stays REAL-conditional and EXCLUDED from this locked baseline (theoremU_excluded_from_locked); anchoring this milestone does not change Theorem U's status."}, "kernel_commit": "25e0b2af781f5fb10324945ea10c861bcc28cc83", "kernel_commit_short": "25e0b2af781f", "kind": "locked-baseline", "lean_numbers": {"lean_numbers_sha256": "38f9a69cb289110e44ffa9bc4a8575d811220c4654a7985b85694d6f1bb3f7f9", "numbers": {"axiom_names": ["A6'_block_consistent", "KS_theorem_1_1", "MomentSubGaussian", "audit_reidemeister_invariance", "canonicalReceipt", "chromotopology_code_bijection", "compression_collision_resistant", "domain_separation", "gleason_length_mod_8", "klDivergence_nonneg", "lambda_schur_concave_n_axis", "lambda_stationary_unique", "leaf_collision_resistant", "liu_hui_pi_converges", "node_collision_resistant", "pinsker", "r1_invariance", "r2_invariance", "setAlpha_cauchy", "setDelta_stage2", "sha256", "sha256_collision_resistant"], "axioms_raw": 23, "axioms_unique": 22, "declarations": 1323, "sorries_baseline": 251, "sorries_noncomment": 254, "sorries_putnam": 56, "sorries_raw": 307}, "reference_vectors_sha256": "857967629daf5e5c45a167306ea0e0091569a29766b01ac91bef15a539b816dc", "replay_hash": "1f0c9d9938b96b3d56fe01e37b955e1b91ff1aec0610fe30c30e515cc8ab469c", "schema": "szl.lean_numbers/v1"}, "milestone": {"decl_source_sha256": {"Lutar/Uniqueness/AxiomCheck.lean": "5e7998d33a1928c12f2e07595ec929544ac04e37f17ad7693ab2838136ab540f", "Lutar/Uniqueness/Identifiability.lean": "fa340e6a999eac7ea1cd035d90647548baaa290b7376d7fcbdcbd165e475dedf", "Lutar/Uniqueness/LambdaEquiv.lean": "03f63e36f3a9b19e8e9d4f48313a450bae7c85fcb53049d52e0f6d4adf4b1c23", "Lutar/Uniqueness/TheoremU.lean": "c958520ba31d6fc1f48a9b49871d67812f178e168b31bf2be9e3d5fb2061386c"}, "full_axiom_footprint": {"Lutar.Uniqueness.AxiomCheck.conjecture1_still_open": [], "Lutar.Uniqueness.AxiomCheck.locked_count_eight": [], "Lutar.Uniqueness.AxiomCheck.theoremU_axiom_sets_kernel_only": [], "Lutar.Uniqueness.AxiomCheck.theoremU_excluded_from_locked": [], "Lutar.Uniqueness.CorollaryU1_LambdaUnique_Separable": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.CorollaryU2_LambdaUnique_Factors": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.TheoremU_LambdaUnique": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.TheoremU_LambdaUnique_eq": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.identifiability_forces_lambda": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.lambda_equiv_to_eq_of_anchored": ["Classical.choice", "Quot.sound", "propext"]}, "headline_axiom_footprint": {"conjecture1_still_open": [], "locked_count_eight": [], "theoremU_axiom_sets_kernel_only": [], "theoremU_excluded_from_locked": []}, "headline_decls": ["conjecture1_still_open", "locked_count_eight", "theoremU_axiom_sets_kernel_only", "theoremU_excluded_from_locked"], "id": "locked-baseline", "kernel_only": true, "kernel_trust_base": ["Classical.choice", "Quot.sound", "funext", "propext"], "module": "Lutar.Uniqueness.AxiomCheck", "status": "REAL-invariant", "title": "Locked-proven baseline (Doctrine v11) \u2014 kernel meta-invariants"}, "repo": "szl-holdings/lutar-lean", "schema": "szl.proof.snapshot/v1"}}, "timestamp": "2026-06-11T02:20:21Z"}], "amaru": [{"receipt_id": "4c9c3f2b8d6452d9bc0e9a9144fc9e1743b3ca76544a988d4d9e4b39df87ba73", "timestamp": "2026-06-02T02:13:07.827680+00:00", "organ": "amaru", "kind": "tick", "index": 0, "lambda": 0.9, "lambda_pass": true, "predicted_hash": "", "actual_hash": "4c9c3f2b8d6452d9bc0e9a9144fc9e1743b3ca76544a988d4d9e4b39df87ba73", "delta": 0.0, "lutar_anchor": "c7c0ba17", "doctrine": "v11", "decl": 749, "axioms": 14, "sorries": 163, "neuro_citations": "[]", "dsse_payload_type": "application/vnd.szl.khipu+json", "dsse_pae_sha256": "6a8ba013ddcd1938e0fc2174ef79287ca49266277b0195595f324dacb9eb02c9", "dsse_sig": "MEQCIBIZjd6T0E4Bhl0OGkhcMZmAuqmnN0ZxmWrL+7U/h31JAiAmF2U1DBEQieaDrFkHcjBcOW91PY1glK0X+/2EKprpVQ==", "dsse_keyid": "szlholdings-cosign", "dsse_signed": true, "verify_key_url": "https://github.com/szl-holdings/.github/blob/main/cosign.pub"}, {"receipt_id": "bc4d6a1629c01584eb6789d19a432fbc9448ce92ada8d47e14552fe94dee9fa1", "timestamp": "2026-06-02T02:13:08.490579+00:00", "organ": "amaru", "kind": "tick", "index": 1, "lambda": 0.9, "lambda_pass": true, "predicted_hash": "4c9c3f2b8d6452d9bc0e9a9144fc9e1743b3ca76544a988d4d9e4b39df87ba73", "actual_hash": "bc4d6a1629c01584eb6789d19a432fbc9448ce92ada8d47e14552fe94dee9fa1", "delta": 0.0, "lutar_anchor": "c7c0ba17", "doctrine": "v11", "decl": 749, "axioms": 14, "sorries": 163, "neuro_citations": "[]", "dsse_payload_type": "application/vnd.szl.khipu+json", "dsse_pae_sha256": "3cb923bc57002b34cd52124601bfbeeff68c6232e598dd06eccb4ff2847f1371", "dsse_sig": "MEUCIQDBB4xUJMFm4YKcZ0mcz6n3q6XomOKEepJWmaplX9Xo0gIgUIg3Xm316oVN05pvIoNxhJBDyL6Vhp1xfEq9nx9V5Wg=", "dsse_keyid": "szlholdings-cosign", "dsse_signed": true, "verify_key_url": "https://github.com/szl-holdings/.github/blob/main/cosign.pub"}, {"receipt_id": "2f872c5144585602dd1016ce732912134ad30423e442fda009cdc0d168c6732d", "timestamp": "2026-06-02T02:13:09.173270+00:00", "organ": "amaru", "kind": "tick", "index": 2, "lambda": 0.9, "lambda_pass": true, "predicted_hash": "bc4d6a1629c01584eb6789d19a432fbc9448ce92ada8d47e14552fe94dee9fa1", "actual_hash": "2f872c5144585602dd1016ce732912134ad30423e442fda009cdc0d168c6732d", "delta": 0.0, "lutar_anchor": "c7c0ba17", "doctrine": "v11", "decl": 749, "axioms": 14, "sorries": 163, "neuro_citations": "[]", "dsse_payload_type": "application/vnd.szl.khipu+json", "dsse_pae_sha256": "f72e37f1ea8d785d862ec7469d3908fc7b455360964d6cdea61e430d89b3e66d", "dsse_sig": "MEYCIQDvfS5l1nyk5zHz9wsNwe/wj6ZPNAMbbJ4KzMG2ZXEQkwIhAJ4mkTOAnOdNWFb2SuweFbQnjP0QPORGAA/IU8sHB+X5", "dsse_keyid": "szlholdings-cosign", "dsse_signed": true, "verify_key_url": "https://github.com/szl-holdings/.github/blob/main/cosign.pub"}]};
@@ -1029,7 +1029,7 @@ const LEDGER_SNAPSHOT = {"source": "https://huggingface.co/datasets/SZLHOLDINGS/
 function renderLedger() {
   const btn = el('ledger-load');
   btn.disabled = true;
-  setStatus('ledger-status', 'Checking hash-chain linkage in-browser …', true);
   const lut = LEDGER_SNAPSHOT.lutar_lean || [];
   const ama = LEDGER_SNAPSHOT.amaru || [];
@@ -1045,7 +1045,7 @@ function renderLedger() {
   });
   const intact = broken === 0;
   let chainHTML = '<div class="verdict-banner ' + (intact ? 'verdict-ok' : 'verdict-fail') + '">'
-    + (intact ? '✓ CHAIN INTACT' : '✗ CHAIN BROKEN') + ' — ' + links + '/' + lut.length
     + ' hash-links verified in your browser <span class="chip chip-dim">organ: lutar-lean</span></div>'
     + '<div style="font-size:12px;color:var(--text-dim);margin-bottom:8px">Each receipt\'s <code>prev_hash</code> '
     + 'is compared to the previous receipt\'s <code>receipt_id</code>. This proves append-only ordering. '
@@ -1053,8 +1053,8 @@ function renderLedger() {
   rows.forEach(({ r, i, prev, ok }) => {
     chainHTML += '<div class="hash-row"><span class="hash-label">#' + escHTML(String(r.chain_index)) + ' '
       + escHTML(r.kind || '') + '</span><span class="hash-val">id ' + escHTML(String(r.receipt_id).substring(0,16))
-      + '…</span><span class="hash-val ' + (ok ? 'hash-match' : 'hash-mismatch') + '">prev '
-      + escHTML(prev == null ? '(genesis)' : String(prev).substring(0,16) + '…') + '</span>'
       + '<span class="chip ' + (ok ? 'chip-ok' : 'chip-err') + '">' + (ok ? 'LINK OK' : 'BROKEN') + '</span></div>';
   });
   el('ledger-chain').innerHTML = chainHTML;
@@ -1075,40 +1075,41 @@ function renderLedger() {
       + '<span class="formula-id">lutar-lean</span><span class="formula-name">' + escHTML(r.kind || 'receipt') + '</span>'
       + '<span class="chip chip-dim">schema ' + escHTML(r.schema || '') + '</span></div>'
       + '<div class="hash-row"><span class="hash-label">receipt_id</span><span class="hash-val">'
-      + escHTML(String(r.receipt_id).substring(0,40)) + '…</span></div>'
       + (r.numbers ? '<div style="font-size:12px;color:var(--text-dim);margin:6px 0">declarations '
-          + escHTML(String(r.numbers.declarations)) + ' · axioms ' + escHTML(String(r.numbers.axioms_unique))
-          + ' · sorries ' + escHTML(String(r.numbers.sorries_noncomment)) + ' · kernel '
           + escHTML(String(r.kernel_commit_short || '')) + '</div>' : '')
       + '<div style="margin:8px 0">' + honestyHTML + '</div>'
-      + '<div style="font-size:12px;color:var(--text-mute)">signing: ' + escHTML(sg.format || '—')
       + (sg.bytes ? ' (' + escHTML(String(sg.bytes)) + ' bytes)' : '') + '</div>'
-      + '<div style="margin-top:8px;font-size:12px"><a href="' + hfBase + 'lutar_lean_receipts.ndjson" target="_blank" rel="noopener">Canonical rows on Hugging Face ↗</a>'
-      + ' &nbsp;·&nbsp; <a href="https://pypi.org/project/szl-receipt/" target="_blank" rel="noopener">Verify offline (szl-receipt)</a></div></div>';
   });
   ama.forEach(r => {
     cardsHTML += '<div class="formula-card"><div class="formula-card-head">'
       + '<span class="formula-id">amaru</span><span class="formula-name">' + escHTML(r.kind || 'tick') + '</span>'
-      + '<span class="chip ' + (r.lambda_pass ? 'chip-ok' : 'chip-err') + '">Λ ' + escHTML(String(r.lambda)) + ' '
-      + (r.lambda_pass ? 'PASS' : 'FAIL') + '</span><span class="conj">Conjecture 1 — advisory</span></div>'
       + '<div class="hash-row"><span class="hash-label">receipt_id</span><span class="hash-val">'
-      + escHTML(String(r.receipt_id).substring(0,40)) + '…</span></div>'
       + '<div style="font-size:12px;color:var(--text-dim);margin:6px 0">doctrine ' + escHTML(String(r.doctrine))
-      + ' · decl ' + escHTML(String(r.decl)) + ' · axioms ' + escHTML(String(r.axioms)) + ' · sorries '
-      + escHTML(String(r.sorries)) + ' · anchor ' + escHTML(String(r.lutar_anchor || '')) + '</div>'
-      + '<div style="font-size:12px;color:var(--text-mute)">DSSE ' + (r.dsse_signed ? 'signed ✓' : 'unsigned')
-      + ' · keyid ' + escHTML(String(r.dsse_keyid || '—')) + '</div>'
-      + '<div style="margin-top:8px;font-size:12px"><a href="' + hfBase + 'amaru_receipts.ndjson" target="_blank" rel="noopener">Canonical rows on Hugging Face ↗</a>'
-      + ' &nbsp;·&nbsp; <a href="' + escHTML(String(r.verify_key_url || '#')) + '" target="_blank" rel="noopener">Public key ↗</a></div></div>';
   });
   el('ledger-cards').innerHTML = cardsHTML;
   show('ledger-panel');
   setStatus('ledger-status', 'Chain: ' + (intact ? 'INTACT' : 'BROKEN') + ' (' + links + '/' + lut.length
-    + ' links) · ' + (lut.length + ama.length) + ' real receipts shown · signatures verify offline against Hugging Face.');
   btn.disabled = false;
 }
 </script>
 </body>
 </html>

+<!DOCTYPE html>
 <html lang="en">
 <head>
 <meta charset="utf-8" />
 <meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>a11oy â€” Verifiable Inference</title>
 <style>
   /* =====================================================================
+     a11oy Tier-1 Demo â€” elite showcase aesthetic
+     Dark palette Â· Cabinet Grotesk / JetBrains Mono Â· honest-label chips
      ===================================================================== */
   @import url('https://fonts.googleapis.com/css2?family=JetBrains+Mono:ital,wght@0,400;0,600;1,400&display=swap');
     <circle cx="16" cy="16" r="2.5" fill="#8aaaf8"/>
   </svg>
   <span class="site-title">a11oy</span>
+  <span class="site-tagline">AI that can demonstrate its work Â· Verifiable by Design</span>
+  <a href="/" class="nav-back">â† Console</a>
 </header>
 <!-- ===== MAIN ===== -->
   <div class="page-hero">
     <h1>Verifiable Inference</h1>
+    <p>Real, verifiable governance receipts â€” including our own public ledger. Every receipt is signed and independently verifiable. The honesty is the product.</p>
   </div>
   <!-- ===================================================================
+       SECTION A â€” Buyer-Verifiable Receipt (BVIR)
        =================================================================== -->
   <section class="section" id="section-bvir">
     <div class="section-head">
       </h2>
       <p>
         Makes a real POST /api/a11oy/v1/govern/infer call, then verifies the DSSE ECDSA-P256
+        signature <strong>in-browser</strong> using WebCrypto â€” no server round-trip for verification.
         SHA-256 of the decoded payload is recomputed and matched to <code>receipt.payload_digest</code>.
       </p>
       <p class="moat-line">
   </section>
   <!-- ===================================================================
+       SECTION B â€” Î›-Gated Honest Refusal
        =================================================================== -->
   <section class="section" id="section-govern">
     <div class="section-head">
       <h2>
         <span class="section-label">B</span>
+        Î›-Gated Honest Refusal
       </h2>
       <p>
         Three preset governance cases. Each returns a REAL signed receipt via
+        <code>szl_dsse.sign_khipu_receipt</code>. Î› is always labeled
+        <span class="conj">Conjecture 1 â€” advisory, NOT a theorem</span>.
       </p>
+      <p class="moat-line">"Even our refusals are signed and explained â€” no black-box boolean."</p>
     </div>
     <div class="section-body">
   </section>
   <!-- ===================================================================
+       SECTION C â€” Verifiable Thesis
        =================================================================== -->
   <section class="section" id="section-thesis">
     <div class="section-head">
       </h2>
       <p>
         The 8 PROVEN formulas with verbatim Lean 4 statements, the 3-tier honest corpus
+        (8 / ~35 / ~185), and the honest conjecture labels for Î› and Khipu BFT.
       </p>
+      <p class="moat-line">"The honesty is the product. Click any formula â€” verify it yourself."</p>
     </div>
     <div class="section-body">
   </section>
   <!-- ===================================================================
+       SECTION D â€” Public Ledger (real receipts from szl-lake)
        =================================================================== -->
   <section class="section" id="section-ledger">
     <div class="section-head">
       <h2>
         <span class="section-label">D</span>
+        Public Ledger â€” Real Receipts
       </h2>
       <p>
         Real signed Khipu receipts from our public dataset
         (snapshot 2026-07-02). This page recomputes the <strong>hash-chain linkage in your browser</strong>;
         the DSSE / sigstore signatures verify <strong>offline</strong> with the
         <a href="https://pypi.org/project/szl-receipt/" target="_blank" rel="noopener">szl-receipt</a>
+        library and cross-check against the canonical rows on Hugging Face â€” infrastructure we do not control.
       </p>
+      <p class="moat-line">"The receipts you would read in diligence â€” including the ones where we mark our own central claim, &Lambda;, still OPEN."</p>
     </div>
     <div class="section-body">
       <div class="btn-row">
 </main>
 <footer class="footer">
+  <p>SZL Holdings Â· a11oy Â· Doctrine v11 Â· 8 kernel-verified formulas @ c7c0ba17 Â·
+     Î› = Conjecture 1 (advisory) Â· Khipu BFT = Conjecture 2 Â·
+     <a href="/govern/health" target="_blank">Governance Health</a> Â·
      <a href="/api/a11oy/v1/demo/thesis" target="_blank">Thesis API</a>
   </p>
 </footer>
 <!-- ===================================================================
+     JAVASCRIPT â€” all in-browser, no CDN
      =================================================================== -->
 <script>
 "use strict";
 /* ---- base64 helpers ---- */
 function b64Decode(s) {
+  // standard base64 â†’ Uint8Array (not URL-safe; WebCrypto importKey returns SPKI base64)
   const bin = atob(s);
   const b = new Uint8Array(bin.length);
   for (let i = 0; i < bin.length; i++) b[i] = bin.charCodeAt(i);
   return btoa(s);
 }
+/* ---- DER ASN.1 â†’ raw râ€–s converter (for WebCrypto ECDSA P-256) ----
    cosign / cryptography-lib ECDSA signs in DER (ASN.1 SEQUENCE { INTEGER r, INTEGER s }).
+   WebCrypto ECDSA P-256 SHA-256 expects IEEE P-1363 raw râ€–s (64 bytes: 32+32).
+   We decode the DER SEQUENCE here entirely in JS â€” no library needed.
 */
 function derToRaw(derBytes) {
   let i = 0;
 }
 /* ====================================================================
+   SECTION A â€” BVIR
    ==================================================================== */
 async function runBVIR() {
   const btn = el('bvir-run');
   btn.disabled = true;
   hide('bvir-verdict');
   hide('bvir-output');
+  setStatus('bvir-status', 'Calling /api/a11oy/v1/govern/infer â€¦', true);
   let data;
   try {
     return;
   }
+  setStatus('bvir-status', 'Verifying signature in-browser via WebCrypto â€¦', true);
   const dsse   = data.dsse   || {};
   const receipt= data.receipt|| {};
   let sigKeyid = '';
   if (!dsse.signed) {
+    verifyError = 'UNSIGNED envelope â€” private key not available in this runtime. Receipt chain is still valid.';
   } else if (sigs.length === 0) {
     verifyError = 'No signatures in envelope.';
   } else {
         try {
           rawSig = derToRaw(sigBytes);
         } catch(e2) {
+          verifyError = 'DERâ†’raw conversion failed: ' + e2.message;
         }
       }
   let verdictHTML = '';
   if (verified && isDemoKey) {
     verdictHTML = `<div class="verdict-banner verdict-ok">
+      âœ“ VERIFIED (demo-signing-key â€” not the production cosign key)
       <span class="chip chip-ok">keyid: ${escHTML(sigKeyid)}</span>
       <div style="font-size:12px;font-weight:400;margin-top:6px;color:var(--text-dim)">
         Real ECDSA-P256 signature, verified in your browser against /demo-cosign.pub.
+        This is a clearly-labelled DEMO key â€” the production cosign key stays
         founder-gated and is never placed in this runtime.
       </div>
     </div>`;
   } else if (verified) {
     verdictHTML = `<div class="verdict-banner verdict-ok">
+      âœ“ VERIFIED â€” WebCrypto ECDSA-P256 signature valid
       <span class="chip chip-ok">keyid: ${escHTML(sigKeyid)}</span>
     </div>`;
   } else if (!dsse.signed) {
     verdictHTML = `<div class="verdict-banner verdict-dim">
+      âš  UNSIGNED â€” private key not in runtime; receipt chain still valid
     </div>`;
   } else {
     verdictHTML = `<div class="verdict-banner verdict-fail">
+      âœ— VERIFICATION FAILED â€” ${escHTML(verifyError)}
     </div>`;
   }
       </div>
       <div class="hash-row">
         <span class="hash-label">Payload digest:</span>
+        <span class="hash-val ${digestValClass}">${payloadDigestComputed.substring(0,32)}â€¦</span>
         <span class="chip ${digestChipClass}">${digestChipText}</span>
       </div>
       ${hasDeclaredDigest ? `<div class="hash-row">
         <span class="hash-label">Declared digest:</span>
+        <span class="hash-val">${escHTML(declaredPayloadDigest.substring(0,32))}â€¦</span>
       </div>` : `<div class="hash-row">
         <span class="hash-label">Declared digest:</span>
+        <span class="hash-val" style="color:var(--text-dim)">(none declared â€” nothing to compare against)</span>
       </div>`}
       <div class="hash-row">
         <span class="hash-label">PAE SHA-256:</span>
+        <span class="hash-val">${paeSHA.substring(0,32)}â€¦</span>
       </div>
       <div class="hash-row">
         <span class="hash-label">Chain prev:</span>
+        <span class="hash-val">${escHTML(String(chainPrev).substring(0,32))}â€¦</span>
       </div>
       <div class="hash-row">
         <span class="hash-label">Chain digest:</span>
+        <span class="hash-val">${escHTML(String(chainDigest).substring(0,32))}â€¦</span>
       </div>
     </div>
     <div style="font-size:12px;color:var(--text-dim);margin-bottom:8px">
+      <span class="conj">Î› Conjecture 1 â€” advisory</span>
+      Î› = ${escHTML(String((data.governance||{}).lambda ?? 'N/A'))}
+      &nbsp;Â·&nbsp;
       Energy: <span class="chip chip-dim">${escHTML((data.energy||{}).label || 'UNAVAILABLE')}</span>
     </div>
   `;
     'governance.lambda': (data.governance||{}).lambda,
     'governance.lambda_kind': (data.governance||{}).lambda_kind,
     'receipt.seq': receipt.seq,
+    'receipt.prev': String(chainPrev).substring(0,32) + 'â€¦',
+    'receipt.digest': String(chainDigest).substring(0,32) + 'â€¦',
     'dsse.signed': dsse.signed,
     'dsse.keyid': dsseKeyid || null,
+    'dsse.key_kind': isDemoKey ? 'demo (demo-signing-key â€” NOT production cosign)' : (dsse.signed ? 'production cosign' : null),
     'dsse.payloadType': dsse.payloadType,
     'verify.public_key_url': pubKeyURL,
+    'verify.computed_payload_sha256': payloadDigestComputed.substring(0,32) + 'â€¦',
+    'verify.declared_payload_digest': hasDeclaredDigest ? declaredPayloadDigest.substring(0,32) + 'â€¦' : null,
     'verify.payload_digest_match': hasDeclaredDigest ? (payloadDigestMatches ? 'MATCH' : 'MISMATCH') : 'no declared digest to compare',
+    'verify.pae_sha256': paeSHA.substring(0,32) + 'â€¦',
+    'verify.result': verified ? (isDemoKey ? 'VERIFIED âœ“ (demo-signing-key â€” not production cosign)' : 'VERIFIED âœ“') : (dsse.signed === false ? 'UNSIGNED (no private key in runtime)' : 'FAILED: ' + verifyError),
     'energy.label': (data.energy||{}).label,
   };
   el('bvir-output').textContent = JSON.stringify(outputData, null, 2);
   setStatus('bvir-status', verified
     ? (isDemoKey
+        ? 'âœ“ WebCrypto verified â€” real ECDSA-P256 over DSSE PAE with demo-signing-key (NOT the production cosign key).'
+        : 'âœ“ WebCrypto verified â€” real ECDSA-P256 signature over DSSE PAE.')
     : (dsse.signed === false
         ? 'Unsigned receipt (private key absent from runtime). Chain valid.'
         : 'Verification result: ' + verifyError));
 }
 /* ====================================================================
+   SECTION B â€” Governed Refusal
    ==================================================================== */
 async function runGovern(caseKey) {
   hide('govern-panel');
+  setStatus('govern-status', `Calling /api/a11oy/v1/demo/govern case="${caseKey}" â€¦`, true);
   let data;
   try {
   // Verdict banner
   const decClasses = { allow:'verdict-ok', review:'verdict-dim', deny:'verdict-fail' };
+  const decLabels  = { allow:'âœ“ ALLOW â€” governance passed', review:'âš  REVIEW â€” below advisory floor', deny:'âœ— DENY â€” gate fired' };
   const bannerCls  = decClasses[decision] || 'verdict-dim';
   const bannerLbl  = decLabels[decision]  || decision.toUpperCase();
   el('govern-verdict-banner').innerHTML = `<div class="verdict-banner ${bannerCls}">${bannerLbl}</div>`;
+  // Î› row
   const lambdaPass = gov.lambda_pass;
   el('govern-lambda-row').innerHTML = `
     <div style="display:flex;align-items:center;gap:10px;flex-wrap:wrap">
+      <span style="font-size:14px;font-weight:700">Î› = ${escHTML(String(gov.lambda ?? 'N/A'))}</span>
       <span class="chip ${lambdaPass ? 'chip-ok' : 'chip-err'}">
         ${lambdaPass ? 'PASS' : 'FAIL'} (floor ${escHTML(String(gov.lambda_floor ?? 0.9))})
       </span>
+      <span class="conj">Conjecture 1 â€” advisory, NOT a theorem</span>
     </div>
     <div style="font-size:12px;color:var(--text-dim);margin-top:4px">
       ${escHTML(gov.lambda_kind || 'Conjecture 1 (advisory; NOT a theorem)')}
     const fired = g.fired;
     gatesHTML += `
       <div class="gate-row">
+        <span class="gate-name">${escHTML(g.name || 'â€”')}</span>
         <span class="gate-fired ${fired ? 'chip chip-err' : 'chip chip-ok'}">${fired ? 'FIRED' : 'PASS'}</span>
+        <span class="chip chip-dim">${escHTML(g.decision || 'â€”')}</span>
       </div>`;
   });
   el('govern-gates').innerHTML = gatesHTML;
       lambda: receipt.lambda,
       lambda_kind: receipt.lambda_kind,
       gates: receipt.gates,
+      prev: String(chain.prev || '').substring(0,32) + 'â€¦',
+      digest: String(chain.digest || '').substring(0,32) + 'â€¦',
       'dsse.signed': signed,
       'dsse.keyid': ((dsse.signatures||[])[0]||{}).keyid,
       honesty: data.honesty,
   }
   show('govern-panel');
+  setStatus('govern-status', `Decision: ${decision.toUpperCase()} Â· Î› = ${gov.lambda} Â· ${dsse.signed ? 'Receipt signed âœ“' : 'Receipt unsigned (key absent)'}`);
 }
 /* ====================================================================
+   SECTION C â€” Verifiable Thesis
    ==================================================================== */
 async function loadThesis() {
   const btn = el('thesis-load');
   btn.disabled = true;
   hide('thesis-panel');
+  setStatus('thesis-status', 'Loading /api/a11oy/v1/demo/thesis â€¦', true);
   let data;
   try {
   });
   corpusHTML += `</div>`;
   corpusHTML += `<div class="corpus-never-claim">
+    âš  ${escHTML(corpus.honest_note || 'We never claim 183 proven.')}
   </div>`;
   el('thesis-corpus').innerHTML = corpusHTML;
         </div>
         <div class="formula-lean">${escHTML(f.lean)}</div>
         <div class="formula-desc">${escHTML(f.description)}</div>
+        <div class="formula-status">âœ“ ${escHTML(f.status)}</div>
       </div>`;
   });
   el('thesis-formulas').innerHTML = formulasHTML;
     </div>
     <div style="display:flex;gap:14px;flex-wrap:wrap">
       <div style="flex:1;min-width:220px;background:var(--bg-panel);border:1px solid #92400e;border-radius:var(--radius);padding:14px">
+        <div style="font-size:11px;font-weight:700;color:var(--amber);text-transform:uppercase;letter-spacing:.07em;margin-bottom:6px">Conjecture 1 â€” Î› (Lambda)</div>
         <div style="font-size:13px;color:var(--text-dim)">${escHTML(doctrine.lambda_kind || 'Conjecture 1 (advisory; NOT a theorem)')}</div>
         <div style="font-size:12px;color:var(--text-mute);margin-top:6px">Open bounty: szl-holdings/lambda-bounty</div>
       </div>
       <div style="flex:1;min-width:220px;background:var(--bg-panel);border:1px solid #991b1b;border-radius:var(--radius);padding:14px">
+        <div style="font-size:11px;font-weight:700;color:var(--red);text-transform:uppercase;letter-spacing:.07em;margin-bottom:6px">Conjecture 2 â€” Khipu BFT</div>
         <div style="font-size:13px;color:var(--text-dim)">${escHTML(doctrine.bft_kind || 'Conjecture 2 (NOT proven; NOT a theorem)')}</div>
+        <div style="font-size:12px;color:var(--text-mute);margin-top:6px">Labeled honestly everywhere â€” no false safety claim</div>
       </div>
     </div>
     <div style="margin-top:14px;font-size:12px;color:var(--text-dim)">
   `;
   show('thesis-panel');
+  setStatus('thesis-status', `Loaded ${formulas.length} proven formulas Â· 3-tier corpus Â· live doctrine`);
   btn.disabled = false;
 }
 /* ====================================================================
+   SECTION D â€” Public Ledger (real receipts from szl-lake, snapshot)
    In-browser: hash-chain linkage check. Offline: signatures via szl-receipt.
    ==================================================================== */
 const LEDGER_SNAPSHOT = {"source": "https://huggingface.co/datasets/SZLHOLDINGS/szl-lake", "captured_utc": "2026-07-02", "lutar_lean": [{"branch": "theorem-u-kernel", "chain_index": 1, "doctrine": "v11", "honesty": {"conjecture_1": "OPEN: unconditional Lambda uniqueness is Conjecture 1 and is machine-checked FALSE as stated. Theorem U does NOT close it.", "doctrine": "v11", "locked_five_unchanged": true, "locked_set": ["F1", "F11", "F12", "F18", "F19"], "theorem_u": "REAL-conditional: Lutar.Uniqueness Theorem U is kernel-verified (axiom footprint within the Lean/Mathlib trust base, no sorry) but CONDITIONAL on its stated checkable hypotheses; it is NOT part of the locked-proven baseline."}, "kernel_commit": "e736decd244ae06e8bb48531c6c7dc0f1029b25a", "kernel_commit_short": "e736decd244a", "kind": "theorem-u-anchor", "lambda_status": "Conjecture_1 (OPEN; unconditional uniqueness machine-checked FALSE)", "numbers": {"axioms_unique": 22, "declarations": 1323, "sorries_noncomment": 254}, "organ": "lutar-lean", "prev_hash": null, "receipt_id": "d70f444db57df9a4a2d52e69408ce61b511e4b50152f7fbf97456b1af66fe9a0", "schema": "szl.khipu.receipt/v1", "signing": {"format": "sigstore-keyless-bundle", "bytes": 18428, "b64_head": "eyJtZWRpYVR5cGUiOiJhcHBsaWNhdGlvbi92bmQuZGV2\u2026"}, "source_run": {"conclusion": "success", "id": "27186151340", "url": "https://github.com/szl-holdings/lutar-lean/actions/runs/27186151340", "workflow": "Lake build (gate + numbers)"}, "subject": {"name": "theorem_u_snapshot.json", "sha256": "82d08a4e892579e815d880d51f61cb8035a3325e077c29e412f310f76b50985e", "snapshot": {"branch": "theorem-u-kernel", "built_at_utc": "2026-06-09T05:37:45Z", "honesty": {"conjecture_1": "OPEN: unconditional Lambda uniqueness is Conjecture 1 and is machine-checked FALSE as stated. Theorem U does NOT close it.", "doctrine": "v11", "locked_five_unchanged": true, "locked_set": ["F1", "F11", "F12", "F18", "F19"], "theorem_u": "REAL-conditional: Lutar.Uniqueness Theorem U is kernel-verified (axiom footprint within the Lean/Mathlib trust base, no sorry) but CONDITIONAL on its stated checkable hypotheses; it is NOT part of the locked-proven baseline."}, "kernel_commit": "e736decd244ae06e8bb48531c6c7dc0f1029b25a", "kernel_commit_short": "e736decd244a", "lean_numbers": {"lean_numbers_sha256": "50098073e92aefdf275ec53e60faafc0f1bd5d4a1a88023e819490aaaa69d4d6", "numbers": {"axiom_names": ["A6'_block_consistent", "KS_theorem_1_1", "MomentSubGaussian", "audit_reidemeister_invariance", "canonicalReceipt", "chromotopology_code_bijection", "compression_collision_resistant", "domain_separation", "gleason_length_mod_8", "klDivergence_nonneg", "lambda_schur_concave_n_axis", "lambda_stationary_unique", "leaf_collision_resistant", "liu_hui_pi_converges", "node_collision_resistant", "pinsker", "r1_invariance", "r2_invariance", "setAlpha_cauchy", "setDelta_stage2", "sha256", "sha256_collision_resistant"], "axioms_raw": 23, "axioms_unique": 22, "declarations": 1323, "sorries_baseline": 251, "sorries_noncomment": 254, "sorries_putnam": 56, "sorries_raw": 307}, "reference_vectors_sha256": "857967629daf5e5c45a167306ea0e0091569a29766b01ac91bef15a539b816dc", "replay_hash": "9860c3332a2d0b0553b775dcd27111b0ce4fae4bc5cebe2827dc6148be4cbebe", "schema": "szl.lean_numbers/v1"}, "repo": "szl-holdings/lutar-lean", "schema": "szl.theorem_u.snapshot/v1", "theorem_u": {"decl_source_sha256": {"Lutar/Uniqueness/AxiomCheck.lean": "f45781ef2becf15eccd0c31702603a55cfab1eb7960483593a045202b66f4887", "Lutar/Uniqueness/Identifiability.lean": "fa340e6a999eac7ea1cd035d90647548baaa290b7376d7fcbdcbd165e475dedf", "Lutar/Uniqueness/LambdaEquiv.lean": "03f63e36f3a9b19e8e9d4f48313a450bae7c85fcb53049d52e0f6d4adf4b1c23", "Lutar/Uniqueness/TheoremU.lean": "c958520ba31d6fc1f48a9b49871d67812f178e168b31bf2be9e3d5fb2061386c"}, "full_axiom_footprint": {"Lutar.Uniqueness.AxiomCheck.conjecture1_still_open": [], "Lutar.Uniqueness.AxiomCheck.locked_count_five": [], "Lutar.Uniqueness.AxiomCheck.theoremU_axiom_sets_kernel_only": [], "Lutar.Uniqueness.AxiomCheck.theoremU_excluded_from_locked": [], "Lutar.Uniqueness.CorollaryU1_LambdaUnique_Separable": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.CorollaryU2_LambdaUnique_Factors": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.TheoremU_LambdaUnique": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.TheoremU_LambdaUnique_eq": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.identifiability_forces_lambda": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.lambda_equiv_to_eq_of_anchored": ["Classical.choice", "Quot.sound", "propext"]}, "headline_axiom_footprint": {"CorollaryU1_LambdaUnique_Separable": ["Classical.choice", "Quot.sound", "propext"], "CorollaryU2_LambdaUnique_Factors": ["Classical.choice", "Quot.sound", "propext"], "TheoremU_LambdaUnique": ["Classical.choice", "Quot.sound", "propext"], "TheoremU_LambdaUnique_eq": ["Classical.choice", "Quot.sound", "propext"], "identifiability_forces_lambda": ["Classical.choice", "Quot.sound", "propext"], "lambda_equiv_to_eq_of_anchored": ["Classical.choice", "Quot.sound", "propext"]}, "headline_decls": ["CorollaryU1_LambdaUnique_Separable", "CorollaryU2_LambdaUnique_Factors", "TheoremU_LambdaUnique", "TheoremU_LambdaUnique_eq", "identifiability_forces_lambda", "lambda_equiv_to_eq_of_anchored"], "kernel_only": true, "kernel_trust_base": ["Classical.choice", "Quot.sound", "funext", "propext"], "module": "Lutar.Uniqueness", "status": "REAL-conditional"}}}, "theorem_u_status": "REAL-conditional", "timestamp": "2026-06-09T05:39:22Z"}, {"branch": "main", "chain_index": 2, "doctrine": "v11", "honesty": {"conjecture": "This is a GENERATED, OPEN conjecture \u2014 NOT a theorem and NOT machine-verified. It remains OPEN until a solution is independently verified.", "difficulty": "Difficulty 'open-resistant' / grade 'OPEN' come from a REAL bounded solver run. OPEN means searched-to-budget, not proven true; VERIFIED-FINITE certifies only the finite enumerated domain; REFUTED carries a concrete witness. No score is fabricated.", "doctrine": "v11", "kernel_only": false, "novelty": "Novelty verdict 'novel-candidate' is an advisory screen, not a proof of originality; external prior-art sources are labelled live/cached/unreachable and an unreachable source never confirms novelty.", "signing": "Disclosure is cosign keyless-OIDC signed and anchored into the szl-lake DSSE Khipu ledger; the signature attests the timestamp + content, NOT the truth of the conjecture.", "status": "OPEN"}, "kernel_commit": "d851aefe86b9f12f9d4423200bd9e5257d05c41e", "kernel_commit_short": "d851aefe86b9", "kind": "conjecture-disclosure-anchor", "milestone_kind": "conjecture-disclosure", "milestone_status": "OPEN", "milestone_title": "SZL mixing-map convergence conjecture", "numbers": {"axioms_unique": null, "declarations": null, "sorries_noncomment": null}, "organ": "lutar-lean", "prev_hash": "d70f444db57df9a4a2d52e69408ce61b511e4b50152f7fbf97456b1af66fe9a0", "receipt_id": "08744b67b647039f87abbf0b29587638ae777308ca7fc2434ed3ae4033687b50", "schema": "szl.khipu.receipt/v1", "signing": {"format": "sigstore-keyless-bundle", "bytes": 17488, "b64_head": "eyJtZWRpYVR5cGUiOiJhcHBsaWNhdGlvbi92bmQuZGV2\u2026"}, "source_run": {"conclusion": "success", "id": "27318564784", "url": "https://github.com/szl-holdings/lutar-lean/actions/runs/27318564784", "workflow": "Conjecture Factory (generate -> timestamp -> grade -> anchor)"}, "subject": {"name": "conjecture_snapshot.json", "sha256": "7faded7df9ac5bea4ca7ddaa1e5c38c247c237fd49b8a1a39d35a260c2189fb0", "snapshot": {"branch": "main", "built_at_utc": "2026-06-11T01:54:20Z", "candidate": {"created_utc": "2026-06-11T01:54:19Z", "doctrine": "v11", "domain": "number-theory / arithmetic dynamics", "id": "cf-5ddbbe7571a9", "intended_solution_outline": "Bound the orbit by a Lyapunov / drift argument on the 2-adic valuation: show the\ncontracting branch (n = 3 mod 4) dominates the accelerating branch (n = 1 mod 4)\nin expectation, then rule out non-trivial cycles via a residue-class descent.\nStatus: OPEN \u2014 no proof is claimed; the predicate only performs bounded testing.", "predicate": {"description": "Sound bounded-orbit checker: returns False only on a detected non-1 cycle (a certain counterexample); inconclusive bounded runs assert no counterexample.", "entry": "holds", "kind": "python-callable", "module": "conjectures/samples/szl-mixing-map/predicate.py"}, "references": ["conjectures/corpus/collatz.md (related but distinct: classical 3n+1 map)", "Lagarias, J. (2010). The 3x+1 problem: an annotated bibliography."], "schema": "szl.conjecture.candidate/v1", "statement": "Define M : Z+ -> Z+ by\n    M(n) = n / 2          if n is even,\n    M(n) = (3n + 1) / 2    if n is odd and n = 1 (mod 4),\n    M(n) = (n + 1) / 2     if n is odd and n = 3 (mod 4).\nConjecture: for every integer n >= 1 there exists k >= 0 with M^k(n) = 1.", "statement_canonical": "Define M : Z+ -> Z+ by M(n) = n / 2 if n is even, M(n) = (3n + 1) / 2 if n is odd and n = 1 (mod 4), M(n) = (n + 1) / 2 if n is odd and n = 3 (mod 4). Conjecture: for every integer n >= 1 there exists k >= 0 with M^k(n) = 1.", "statement_hash": "sha256:5ddbbe7571a93f9ed3d49c37dbb3559eb339a51380e427882bd3783b7cb2743a", "taxonomy": "OPEN", "title": "SZL mixing-map convergence conjecture"}, "grade": {"budget": 100000, "candidate_id": "cf-5ddbbe7571a9", "difficulty": "open-resistant", "graded_utc": "2026-06-11T01:54:20Z", "honesty": "Grade from a REAL ensemble run. REFUTED carries a concrete witness. VERIFIED-FINITE certifies only the finite enumerated domain, not the conjecture in general. OPEN means searched-to-budget with no counterexample \u2014 NOT a proof of truth. The candidate stays OPEN (doctrine v11).", "result": "OPEN", "schema": "szl.conjecture.grade/v1", "seed": 1729, "solver_ensemble": [{"budget": 100000, "checked": 100000, "elapsed_sec": 0.411268, "note": "infinite/streaming domain", "resolved": false, "result": "OPEN", "solver": "exhaustive", "witness": null}, {"budget": 100000, "checked": 100000, "elapsed_sec": 0.654207, "note": "random sampling found no counterexample (not a proof)", "resolved": false, "result": "OPEN", "solver": "sampler", "witness": null}], "success_rate": 0.0, "witness": null}, "honesty": {"conjecture": "This is a GENERATED, OPEN conjecture \u2014 NOT a theorem and NOT machine-verified. It remains OPEN until a solution is independently verified.", "difficulty": "Difficulty 'open-resistant' / grade 'OPEN' come from a REAL bounded solver run. OPEN means searched-to-budget, not proven true; VERIFIED-FINITE certifies only the finite enumerated domain; REFUTED carries a concrete witness. No score is fabricated.", "doctrine": "v11", "kernel_only": false, "novelty": "Novelty verdict 'novel-candidate' is an advisory screen, not a proof of originality; external prior-art sources are labelled live/cached/unreachable and an unreachable source never confirms novelty.", "signing": "Disclosure is cosign keyless-OIDC signed and anchored into the szl-lake DSSE Khipu ledger; the signature attests the timestamp + content, NOT the truth of the conjecture.", "status": "OPEN"}, "kernel_commit": "d851aefe86b9f12f9d4423200bd9e5257d05c41e", "kernel_commit_short": "d851aefe86b9", "kind": "conjecture-disclosure", "milestone": {"difficulty": "open-resistant", "grade_result": "OPEN", "headline_decls": [], "id": "cf-5ddbbe7571a9", "kernel_only": false, "novelty_verdict": "novel-candidate", "release_stage": "statement", "statement_hash": "sha256:5ddbbe7571a93f9ed3d49c37dbb3559eb339a51380e427882bd3783b7cb2743a", "status": "OPEN", "title": "SZL mixing-map convergence conjecture"}, "novelty": {"candidate_id": "cf-5ddbbe7571a9", "external": [{"hits": 0, "note": "offline run (--online not set)", "source": "arxiv", "status": "unreachable", "top": []}, {"hits": 0, "note": "offline run (--online not set)", "source": "crossref", "status": "unreachable", "top": []}], "honesty": "Novelty is a screen, not a proof of originality. External sources are labelled live/cached/unreachable; an unreachable source contributes no hits and is never silently treated as confirming novelty. The candidate stays OPEN regardless of this verdict (doctrine v11).", "local_corpus": {"corpus_dir": "conjectures/corpus", "documents_scanned": 2, "max_similarity": 0.0688, "method": "char-5-gram shingle Jaccard", "near_duplicate": false, "nearest": {"doc": "collatz.md", "similarity": 0.0688}, "threshold": 0.8, "top": [{"doc": "collatz.md", "similarity": 0.0688}, {"doc": "goldbach.md", "similarity": 0.0451}]}, "schema": "szl.conjecture.novelty/v1", "screened_utc": "2026-06-11T01:54:19Z", "statement_hash": "sha256:5ddbbe7571a93f9ed3d49c37dbb3559eb339a51380e427882bd3783b7cb2743a", "verdict": "novel-candidate", "verdict_reason": "no near-duplicate found (local-only; external prior-art not fully screened \u2014 unreachable: ['arxiv', 'crossref'])"}, "predicate_type": "https://szl-holdings/conjecture-disclosure/v1", "repo": "szl-holdings/lutar-lean", "schema": "szl.conjecture.disclosure/v1"}}, "timestamp": "2026-06-11T01:54:27Z"}, {"branch": "main", "chain_index": 3, "doctrine": "v11", "honesty": {"conjecture_1": "OPEN: unconditional Lambda uniqueness is Conjecture 1 and is machine-checked FALSE as stated; conjecture1_still_open re-asserts it stays open.", "doctrine": "v11", "locked_baseline": "REAL-invariant: kernel-verified meta-theorems in Lutar/Uniqueness/AxiomCheck.lean (locked_count_eight, theoremU_excluded_from_locked, theoremU_axiom_sets_kernel_only, conjecture1_still_open) \u2014 each proven by `decide`, axiom footprint within the Lean/Mathlib trust base, no sorry. They ASSERT that the locked-proven baseline is EXACTLY the eight {F1,F4,F7,F11,F12,F18,F19,F22}; they do NOT themselves re-prove those formulas (the formula proofs live in Lutar/Puriq/Formulas/ProvedFormulas.lean).", "locked_set": ["F1", "F4", "F7", "F11", "F12", "F18", "F19", "F22"], "theorem_u": "Theorem U stays REAL-conditional and EXCLUDED from this locked baseline (theoremU_excluded_from_locked); anchoring this milestone does not change Theorem U's status."}, "kernel_commit": "25e0b2af781f5fb10324945ea10c861bcc28cc83", "kernel_commit_short": "25e0b2af781f", "kind": "locked-baseline-anchor", "milestone_kind": "locked-baseline", "milestone_status": "REAL-invariant", "milestone_title": "Locked-proven baseline (Doctrine v11) \u2014 kernel meta-invariants", "numbers": {"axioms_unique": 22, "declarations": 1323, "sorries_noncomment": 254}, "organ": "lutar-lean", "prev_hash": "08744b67b647039f87abbf0b29587638ae777308ca7fc2434ed3ae4033687b50", "receipt_id": "dcdad01763241e4d7af6b45e59949e6596c12ccf43ed6b784471c1f05b4715c0", "schema": "szl.khipu.receipt/v1", "signing": {"format": "sigstore-keyless-bundle", "bytes": 19036, "b64_head": "eyJtZWRpYVR5cGUiOiJhcHBsaWNhdGlvbi92bmQuZGV2\u2026"}, "source_run": {"conclusion": "success", "id": "27319352318", "url": "https://github.com/szl-holdings/lutar-lean/actions/runs/27319352318", "workflow": "Lake build (gate + numbers)"}, "subject": {"name": "locked_baseline_snapshot.json", "sha256": "19ea5946195f7437cfb881eb5489898d0d45f5f074dfa210c22eb6c8bbfc3bc9", "snapshot": {"branch": "main", "built_at_utc": "2026-06-11T02:18:27Z", "honesty": {"conjecture_1": "OPEN: unconditional Lambda uniqueness is Conjecture 1 and is machine-checked FALSE as stated; conjecture1_still_open re-asserts it stays open.", "doctrine": "v11", "locked_baseline": "REAL-invariant: kernel-verified meta-theorems in Lutar/Uniqueness/AxiomCheck.lean (locked_count_eight, theoremU_excluded_from_locked, theoremU_axiom_sets_kernel_only, conjecture1_still_open) \u2014 each proven by `decide`, axiom footprint within the Lean/Mathlib trust base, no sorry. They ASSERT that the locked-proven baseline is EXACTLY the eight {F1,F4,F7,F11,F12,F18,F19,F22}; they do NOT themselves re-prove those formulas (the formula proofs live in Lutar/Puriq/Formulas/ProvedFormulas.lean).", "locked_set": ["F1", "F4", "F7", "F11", "F12", "F18", "F19", "F22"], "theorem_u": "Theorem U stays REAL-conditional and EXCLUDED from this locked baseline (theoremU_excluded_from_locked); anchoring this milestone does not change Theorem U's status."}, "kernel_commit": "25e0b2af781f5fb10324945ea10c861bcc28cc83", "kernel_commit_short": "25e0b2af781f", "kind": "locked-baseline", "lean_numbers": {"lean_numbers_sha256": "38f9a69cb289110e44ffa9bc4a8575d811220c4654a7985b85694d6f1bb3f7f9", "numbers": {"axiom_names": ["A6'_block_consistent", "KS_theorem_1_1", "MomentSubGaussian", "audit_reidemeister_invariance", "canonicalReceipt", "chromotopology_code_bijection", "compression_collision_resistant", "domain_separation", "gleason_length_mod_8", "klDivergence_nonneg", "lambda_schur_concave_n_axis", "lambda_stationary_unique", "leaf_collision_resistant", "liu_hui_pi_converges", "node_collision_resistant", "pinsker", "r1_invariance", "r2_invariance", "setAlpha_cauchy", "setDelta_stage2", "sha256", "sha256_collision_resistant"], "axioms_raw": 23, "axioms_unique": 22, "declarations": 1323, "sorries_baseline": 251, "sorries_noncomment": 254, "sorries_putnam": 56, "sorries_raw": 307}, "reference_vectors_sha256": "857967629daf5e5c45a167306ea0e0091569a29766b01ac91bef15a539b816dc", "replay_hash": "1f0c9d9938b96b3d56fe01e37b955e1b91ff1aec0610fe30c30e515cc8ab469c", "schema": "szl.lean_numbers/v1"}, "milestone": {"decl_source_sha256": {"Lutar/Uniqueness/AxiomCheck.lean": "5e7998d33a1928c12f2e07595ec929544ac04e37f17ad7693ab2838136ab540f", "Lutar/Uniqueness/Identifiability.lean": "fa340e6a999eac7ea1cd035d90647548baaa290b7376d7fcbdcbd165e475dedf", "Lutar/Uniqueness/LambdaEquiv.lean": "03f63e36f3a9b19e8e9d4f48313a450bae7c85fcb53049d52e0f6d4adf4b1c23", "Lutar/Uniqueness/TheoremU.lean": "c958520ba31d6fc1f48a9b49871d67812f178e168b31bf2be9e3d5fb2061386c"}, "full_axiom_footprint": {"Lutar.Uniqueness.AxiomCheck.conjecture1_still_open": [], "Lutar.Uniqueness.AxiomCheck.locked_count_eight": [], "Lutar.Uniqueness.AxiomCheck.theoremU_axiom_sets_kernel_only": [], "Lutar.Uniqueness.AxiomCheck.theoremU_excluded_from_locked": [], "Lutar.Uniqueness.CorollaryU1_LambdaUnique_Separable": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.CorollaryU2_LambdaUnique_Factors": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.TheoremU_LambdaUnique": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.TheoremU_LambdaUnique_eq": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.identifiability_forces_lambda": ["Classical.choice", "Quot.sound", "propext"], "Lutar.Uniqueness.lambda_equiv_to_eq_of_anchored": ["Classical.choice", "Quot.sound", "propext"]}, "headline_axiom_footprint": {"conjecture1_still_open": [], "locked_count_eight": [], "theoremU_axiom_sets_kernel_only": [], "theoremU_excluded_from_locked": []}, "headline_decls": ["conjecture1_still_open", "locked_count_eight", "theoremU_axiom_sets_kernel_only", "theoremU_excluded_from_locked"], "id": "locked-baseline", "kernel_only": true, "kernel_trust_base": ["Classical.choice", "Quot.sound", "funext", "propext"], "module": "Lutar.Uniqueness.AxiomCheck", "status": "REAL-invariant", "title": "Locked-proven baseline (Doctrine v11) \u2014 kernel meta-invariants"}, "repo": "szl-holdings/lutar-lean", "schema": "szl.proof.snapshot/v1"}}, "timestamp": "2026-06-11T02:20:21Z"}], "amaru": [{"receipt_id": "4c9c3f2b8d6452d9bc0e9a9144fc9e1743b3ca76544a988d4d9e4b39df87ba73", "timestamp": "2026-06-02T02:13:07.827680+00:00", "organ": "amaru", "kind": "tick", "index": 0, "lambda": 0.9, "lambda_pass": true, "predicted_hash": "", "actual_hash": "4c9c3f2b8d6452d9bc0e9a9144fc9e1743b3ca76544a988d4d9e4b39df87ba73", "delta": 0.0, "lutar_anchor": "c7c0ba17", "doctrine": "v11", "decl": 749, "axioms": 14, "sorries": 163, "neuro_citations": "[]", "dsse_payload_type": "application/vnd.szl.khipu+json", "dsse_pae_sha256": "6a8ba013ddcd1938e0fc2174ef79287ca49266277b0195595f324dacb9eb02c9", "dsse_sig": "MEQCIBIZjd6T0E4Bhl0OGkhcMZmAuqmnN0ZxmWrL+7U/h31JAiAmF2U1DBEQieaDrFkHcjBcOW91PY1glK0X+/2EKprpVQ==", "dsse_keyid": "szlholdings-cosign", "dsse_signed": true, "verify_key_url": "https://github.com/szl-holdings/.github/blob/main/cosign.pub"}, {"receipt_id": "bc4d6a1629c01584eb6789d19a432fbc9448ce92ada8d47e14552fe94dee9fa1", "timestamp": "2026-06-02T02:13:08.490579+00:00", "organ": "amaru", "kind": "tick", "index": 1, "lambda": 0.9, "lambda_pass": true, "predicted_hash": "4c9c3f2b8d6452d9bc0e9a9144fc9e1743b3ca76544a988d4d9e4b39df87ba73", "actual_hash": "bc4d6a1629c01584eb6789d19a432fbc9448ce92ada8d47e14552fe94dee9fa1", "delta": 0.0, "lutar_anchor": "c7c0ba17", "doctrine": "v11", "decl": 749, "axioms": 14, "sorries": 163, "neuro_citations": "[]", "dsse_payload_type": "application/vnd.szl.khipu+json", "dsse_pae_sha256": "3cb923bc57002b34cd52124601bfbeeff68c6232e598dd06eccb4ff2847f1371", "dsse_sig": "MEUCIQDBB4xUJMFm4YKcZ0mcz6n3q6XomOKEepJWmaplX9Xo0gIgUIg3Xm316oVN05pvIoNxhJBDyL6Vhp1xfEq9nx9V5Wg=", "dsse_keyid": "szlholdings-cosign", "dsse_signed": true, "verify_key_url": "https://github.com/szl-holdings/.github/blob/main/cosign.pub"}, {"receipt_id": "2f872c5144585602dd1016ce732912134ad30423e442fda009cdc0d168c6732d", "timestamp": "2026-06-02T02:13:09.173270+00:00", "organ": "amaru", "kind": "tick", "index": 2, "lambda": 0.9, "lambda_pass": true, "predicted_hash": "bc4d6a1629c01584eb6789d19a432fbc9448ce92ada8d47e14552fe94dee9fa1", "actual_hash": "2f872c5144585602dd1016ce732912134ad30423e442fda009cdc0d168c6732d", "delta": 0.0, "lutar_anchor": "c7c0ba17", "doctrine": "v11", "decl": 749, "axioms": 14, "sorries": 163, "neuro_citations": "[]", "dsse_payload_type": "application/vnd.szl.khipu+json", "dsse_pae_sha256": "f72e37f1ea8d785d862ec7469d3908fc7b455360964d6cdea61e430d89b3e66d", "dsse_sig": "MEYCIQDvfS5l1nyk5zHz9wsNwe/wj6ZPNAMbbJ4KzMG2ZXEQkwIhAJ4mkTOAnOdNWFb2SuweFbQnjP0QPORGAA/IU8sHB+X5", "dsse_keyid": "szlholdings-cosign", "dsse_signed": true, "verify_key_url": "https://github.com/szl-holdings/.github/blob/main/cosign.pub"}]};
 function renderLedger() {
   const btn = el('ledger-load');
   btn.disabled = true;
+  setStatus('ledger-status', 'Checking hash-chain linkage in-browser â€¦', true);
   const lut = LEDGER_SNAPSHOT.lutar_lean || [];
   const ama = LEDGER_SNAPSHOT.amaru || [];
   });
   const intact = broken === 0;
   let chainHTML = '<div class="verdict-banner ' + (intact ? 'verdict-ok' : 'verdict-fail') + '">'
+    + (intact ? 'âœ“ CHAIN INTACT' : 'âœ— CHAIN BROKEN') + ' â€” ' + links + '/' + lut.length
     + ' hash-links verified in your browser <span class="chip chip-dim">organ: lutar-lean</span></div>'
     + '<div style="font-size:12px;color:var(--text-dim);margin-bottom:8px">Each receipt\'s <code>prev_hash</code> '
     + 'is compared to the previous receipt\'s <code>receipt_id</code>. This proves append-only ordering. '
   rows.forEach(({ r, i, prev, ok }) => {
     chainHTML += '<div class="hash-row"><span class="hash-label">#' + escHTML(String(r.chain_index)) + ' '
       + escHTML(r.kind || '') + '</span><span class="hash-val">id ' + escHTML(String(r.receipt_id).substring(0,16))
+      + 'â€¦</span><span class="hash-val ' + (ok ? 'hash-match' : 'hash-mismatch') + '">prev '
+      + escHTML(prev == null ? '(genesis)' : String(prev).substring(0,16) + 'â€¦') + '</span>'
       + '<span class="chip ' + (ok ? 'chip-ok' : 'chip-err') + '">' + (ok ? 'LINK OK' : 'BROKEN') + '</span></div>';
   });
   el('ledger-chain').innerHTML = chainHTML;
       + '<span class="formula-id">lutar-lean</span><span class="formula-name">' + escHTML(r.kind || 'receipt') + '</span>'
       + '<span class="chip chip-dim">schema ' + escHTML(r.schema || '') + '</span></div>'
       + '<div class="hash-row"><span class="hash-label">receipt_id</span><span class="hash-val">'
+      + escHTML(String(r.receipt_id).substring(0,40)) + 'â€¦</span></div>'
       + (r.numbers ? '<div style="font-size:12px;color:var(--text-dim);margin:6px 0">declarations '
+          + escHTML(String(r.numbers.declarations)) + ' Â· axioms ' + escHTML(String(r.numbers.axioms_unique))
+          + ' Â· sorries ' + escHTML(String(r.numbers.sorries_noncomment)) + ' Â· kernel '
           + escHTML(String(r.kernel_commit_short || '')) + '</div>' : '')
       + '<div style="margin:8px 0">' + honestyHTML + '</div>'
+      + '<div style="font-size:12px;color:var(--text-mute)">signing: ' + escHTML(sg.format || 'â€”')
       + (sg.bytes ? ' (' + escHTML(String(sg.bytes)) + ' bytes)' : '') + '</div>'
+      + '<div style="margin-top:8px;font-size:12px"><a href="' + hfBase + 'lutar_lean_receipts.ndjson" target="_blank" rel="noopener">Canonical rows on Hugging Face â†—</a>'
+      + ' &nbsp;Â·&nbsp; <a href="https://pypi.org/project/szl-receipt/" target="_blank" rel="noopener">Verify offline (szl-receipt)</a></div></div>';
   });
   ama.forEach(r => {
     cardsHTML += '<div class="formula-card"><div class="formula-card-head">'
       + '<span class="formula-id">amaru</span><span class="formula-name">' + escHTML(r.kind || 'tick') + '</span>'
+      + '<span class="chip ' + (r.lambda_pass ? 'chip-ok' : 'chip-err') + '">Î› ' + escHTML(String(r.lambda)) + ' '
+      + (r.lambda_pass ? 'PASS' : 'FAIL') + '</span><span class="conj">Conjecture 1 â€” advisory</span></div>'
       + '<div class="hash-row"><span class="hash-label">receipt_id</span><span class="hash-val">'
+      + escHTML(String(r.receipt_id).substring(0,40)) + 'â€¦</span></div>'
       + '<div style="font-size:12px;color:var(--text-dim);margin:6px 0">doctrine ' + escHTML(String(r.doctrine))
+      + ' Â· decl ' + escHTML(String(r.decl)) + ' Â· axioms ' + escHTML(String(r.axioms)) + ' Â· sorries '
+      + escHTML(String(r.sorries)) + ' Â· anchor ' + escHTML(String(r.lutar_anchor || '')) + '</div>'
+      + '<div style="font-size:12px;color:var(--text-mute)">DSSE ' + (r.dsse_signed ? 'signed âœ“' : 'unsigned')
+      + ' Â· keyid ' + escHTML(String(r.dsse_keyid || 'â€”')) + '</div>'
+      + '<div style="margin-top:8px;font-size:12px"><a href="' + hfBase + 'amaru_receipts.ndjson" target="_blank" rel="noopener">Canonical rows on Hugging Face â†—</a>'
+      + ' &nbsp;Â·&nbsp; <a href="' + escHTML(String(r.verify_key_url || '#')) + '" target="_blank" rel="noopener">Public key â†—</a></div></div>';
   });
   el('ledger-cards').innerHTML = cardsHTML;
   show('ledger-panel');
   setStatus('ledger-status', 'Chain: ' + (intact ? 'INTACT' : 'BROKEN') + ' (' + links + '/' + lut.length
+    + ' links) Â· ' + (lut.length + ama.length) + ' real receipts shown Â· signatures verify offline against Hugging Face.');
   btn.disabled = false;
 }
 </script>
 </body>
 </html>