betterwithage Perplexity Computer Agent commited on
Commit
4469193
·
verified ·
1 Parent(s): 338b7c0

docs(slsa): sync Space card with GitHub README (SLSA L1 honest; L2 roadmap, not yet claimed)

Browse files

Automated README sync from szl-holdings/a11oy main via hf-sync.

Signed-off-by: Yachay <yachay@szlholdings.ai>
Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>

Files changed (1) hide show
  1. README.md +15 -13
README.md CHANGED
@@ -34,21 +34,21 @@ ecosystem-stage: "operational"
34
 
35
  ## The application
36
 
37
- a11oy is a **full left-nav application** — not a landing page or a single console panel. It opens directly to the Command Center and carries the unified SZL house style (dark ground, gold `#c9b787` + teal `#5fb3a3` accents, Space Grotesk + JetBrains Mono) with a **cross-flag switcher** in the top ribbon that jumps to a11oy · sentra · amaru · rosie · killinchu in one click.
38
 
39
  **Primary app file:** [`pages/console.html`](pages/console.html) · **served at** `/` and `/console`.
40
 
41
- Working views in the left navigation:
42
 
43
  | View | What it does |
44
  |---|---|
45
- | **Command Center** | Live operational overview — organ health, recent verdicts, receipt stream |
46
- | **Five Superpowers** | The five orchestrated capabilities a11oy coordinates across the mesh |
47
- | **Warhacker** | Maps the five Warhacker problems to the organ(s) that solve each, with a live signed receipt |
48
  | **Observability** | MELT + distributed tracing where every span is a signed Khipu receipt (vs New Relic / Datadog / OTel) |
49
- | **Wires** | The live inter-organ wires (a11oy↔sentra immune, a11oy↔rosie receipts, a11oy↔amaru cortex) |
50
- | **Mesh** | Live cross-organ reachability — real probes, honest when an organ is unreachable |
51
- | **Formulas** | The PURIQ formula set — **5 proved in Lean 4 {F1, F11, F12, F18, F19}**, the rest Roadmap |
52
  | **Evidence** | Body-of-evidence export — DSSE Khipu receipts, replayable and tamper-evident |
53
  | **LLM Router** | The governed LLM routing surface |
54
 
@@ -56,10 +56,11 @@ Working views in the left navigation:
56
 
57
  ## What it does
58
 
59
- **a11oy is the audit-fiber continuity layer for the SZL mesh.** Every AI action routes through a11oy and leaves a DSSE-enveloped Khipu receipt on a SHA-256 hash-linked Merkle DAG. The invariant is `receipts.in ≡ receipts.out`: nothing is lost between the decision and the proof.
60
 
61
  Key capabilities:
62
  - **Policy + receipt substrate** — `/v1/policy/evaluate`, `/v1/verify`, `/v1/ledger`: deny-by-default; every action signed
 
63
  - **Honest disclosure** — `/v1/honest` reports live doctrine posture (749/14/163, Λ = Conjecture 1)
64
  - **8 TS workspace libs** — `@szl-holdings/a11oy-knowledge`, `a11oy-policy`, `a11oy-qec-integrity`, `a11oy-receipt-substrate`, `perception-loop`, `rae1`, `sequence-pipeline`, `sparse-attention-kit`
65
  - **DSSE Khipu receipts** — ECDSA P-256-SHA256; multi-party-witnessed; BFT quorum-capable
@@ -87,8 +88,8 @@ cosign verify-attestation --type slsaprovenance ghcr.io/szl-holdings/a11oy:uds-v
87
  --certificate-identity-regexp="https://github.com/szl-holdings/a11oy/" \
88
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
89
 
90
- # 4. Deploy as part of the signed 5-organ mesh bundle
91
- # (organ images are L2-attested; the bundle artifact itself is not yet attested)
92
  uds-cli bundle deploy oci://ghcr.io/szl-holdings/szl-uds-bundle:uds-v0.2.0 --confirm
93
  ```
94
 
@@ -137,10 +138,11 @@ docker run --rm -p 7860:7860 ghcr.io/szl-holdings/a11oy:uds-v0.2.0
137
  | Live HF Space (HTTP 200) | ✅ |
138
  | SLSA Build L1 + L2 | ✅ — cosign-signed image (L1), verifiable via `cosign verify`; Rekor [1710578865](https://search.sigstore.dev/?logIndex=1710578865). L2 SLSA provenance attestation verifies via `cosign verify-attestation --type slsaprovenance` (strict identity, keyless Fulcio+Rekor). See [.compliance/SLSA_LEVEL.md](.compliance/SLSA_LEVEL.md). |
139
  | cosign keyless signed | ✅ |
140
- | UDS bundle (`szl-uds-bundle:uds-v0.2.0`) | ✅ Real, deployable 5-organ bundle. **Note:** the bundle artifact itself is **not yet SLSA-attested** (owner-only GHCR package-write grant pending). The L2 build-provenance attestation that verifies is on the **5 organ images**, not the bundle. |
141
  | DSSE Khipu receipts | ✅ — ECDSA P-256-SHA256 |
142
  | Lean 749/14/163 @ `c7c0ba17` | ✅ |
143
- | Proved PURIQ formulas | ✅ Exactly **5** — F1, F11, F12, F18, F19 (Lean 4, zero-sorry). Remaining formulas are Roadmap. |
 
144
  | Λ-uniqueness | ⚠️ **Conjecture 1** (F23 open bounty) — never a theorem |
145
  | SLSA L3 | ❌ Not claimed |
146
  | FedRAMP / CMMC | ❌ Not claimed |
 
34
 
35
  ## The application
36
 
37
+ a11oy is a **full left-nav application** — not a landing page or a single console panel. It opens directly to the Command Center and carries the unified SZL house style (dark ground, gold `#c9b787` + teal `#5fb3a3` accents, Space Grotesk + JetBrains Mono) with a **product switcher** in the top ribbon that jumps between the two live SZL products a11oy (command platform) and killinchu (drones & vessels) — in one click.
38
 
39
  **Primary app file:** [`pages/console.html`](pages/console.html) · **served at** `/` and `/console`.
40
 
41
+ **43 unique tabs** in the left navigation (plus **7 Warhacker live demos**). Representative views:
42
 
43
  | View | What it does |
44
  |---|---|
45
+ | **Command Center** | Live operational overview — service health, recent verdicts, receipt stream |
46
+ | **Five Superpowers** | The five orchestrated capabilities a11oy coordinates internally |
47
+ | **Warhacker** | Maps the five Warhacker problems to the a11oy capability that solves each, with a live signed receipt |
48
  | **Observability** | MELT + distributed tracing where every span is a signed Khipu receipt (vs New Relic / Datadog / OTel) |
49
+ | **Capabilities** | The built-in a11oy capability fabric — reasoning, policy, and operator paths wired into the receipt substrate |
50
+ | **Services** | Live service reachability — real probes, honest when a service is unreachable |
51
+ | **Formulas** | The PURIQ formula set — **5 locked-proven in Lean 4 {F1, F11, F12, F18, F19}** + **~36 experimental** theorems CI-green on main `@7885fd9` (e.g. M2 hash-chain tamper-evidence, CP1 split-conformal coverage); remaining formulas are Roadmap |
52
  | **Evidence** | Body-of-evidence export — DSSE Khipu receipts, replayable and tamper-evident |
53
  | **LLM Router** | The governed LLM routing surface |
54
 
 
56
 
57
  ## What it does
58
 
59
+ **a11oy is the audit-fiber continuity layer of the SZL command platform.** Every AI action routes through a11oy and leaves a DSSE-enveloped Khipu receipt on a SHA-256 hash-linked Merkle DAG. The invariant is `receipts.in ≡ receipts.out`: nothing is lost between the decision and the proof.
60
 
61
  Key capabilities:
62
  - **Policy + receipt substrate** — `/v1/policy/evaluate`, `/v1/verify`, `/v1/ledger`: deny-by-default; every action signed
63
+ - **Built-in capability fabric** — reasoning, policy, and operator paths are internal to a11oy (not external services); each emits signed receipts
64
  - **Honest disclosure** — `/v1/honest` reports live doctrine posture (749/14/163, Λ = Conjecture 1)
65
  - **8 TS workspace libs** — `@szl-holdings/a11oy-knowledge`, `a11oy-policy`, `a11oy-qec-integrity`, `a11oy-receipt-substrate`, `perception-loop`, `rae1`, `sequence-pipeline`, `sparse-attention-kit`
66
  - **DSSE Khipu receipts** — ECDSA P-256-SHA256; multi-party-witnessed; BFT quorum-capable
 
88
  --certificate-identity-regexp="https://github.com/szl-holdings/a11oy/" \
89
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
90
 
91
+ # 4. Deploy as part of the signed mesh bundle
92
+ # (service images are L2-attested; the bundle artifact itself is not yet attested)
93
  uds-cli bundle deploy oci://ghcr.io/szl-holdings/szl-uds-bundle:uds-v0.2.0 --confirm
94
  ```
95
 
 
138
  | Live HF Space (HTTP 200) | ✅ |
139
  | SLSA Build L1 + L2 | ✅ — cosign-signed image (L1), verifiable via `cosign verify`; Rekor [1710578865](https://search.sigstore.dev/?logIndex=1710578865). L2 SLSA provenance attestation verifies via `cosign verify-attestation --type slsaprovenance` (strict identity, keyless Fulcio+Rekor). See [.compliance/SLSA_LEVEL.md](.compliance/SLSA_LEVEL.md). |
140
  | cosign keyless signed | ✅ |
141
+ | UDS bundle (`szl-uds-bundle:uds-v0.2.0`) | ✅ Real, deployable mesh bundle. **Note:** the bundle artifact itself is **not yet SLSA-attested** (owner-only GHCR package-write grant pending). The L2 build-provenance attestation that verifies is on the **service images**, not the bundle. |
142
  | DSSE Khipu receipts | ✅ — ECDSA P-256-SHA256 |
143
  | Lean 749/14/163 @ `c7c0ba17` | ✅ |
144
+ | Locked-proven PURIQ formulas | ✅ Exactly **5** — F1, F11, F12, F18, F19 (Lean 4, depend on **no** axioms; machine-enforced `locked_count_five`). |
145
+ | Experimental theorems (main `@7885fd9`) | ✅ **~36** CI-green, kernel-verified results (waves 5/6/7/8 + agentic P1–P6 + coder + the strengthened-axiom Λ set, where Λ-uniqueness remains **Conjecture 1**). **NOT** in the locked count. Key: M2 tamper-evidence (`#print axioms = [propext]` only), CP1 split-conformal coverage (not Hoeffding). |
146
  | Λ-uniqueness | ⚠️ **Conjecture 1** (F23 open bounty) — never a theorem |
147
  | SLSA L3 | ❌ Not claimed |
148
  | FedRAMP / CMMC | ❌ Not claimed |