Spaces:
Running
Running
docs(slsa): sync Space card with GitHub README (SLSA L1 honest; L2 roadmap, not yet claimed)
Browse filesAutomated README sync from szl-holdings/a11oy main via hf-sync.
Signed-off-by: Yachay <yachay@szlholdings.ai>
Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>
README.md
CHANGED
|
@@ -34,21 +34,21 @@ ecosystem-stage: "operational"
|
|
| 34 |
|
| 35 |
## The application
|
| 36 |
|
| 37 |
-
a11oy is a **full left-nav application** — not a landing page or a single console panel. It opens directly to the Command Center and carries the unified SZL house style (dark ground, gold `#c9b787` + teal `#5fb3a3` accents, Space Grotesk + JetBrains Mono) with a **
|
| 38 |
|
| 39 |
**Primary app file:** [`pages/console.html`](pages/console.html) · **served at** `/` and `/console`.
|
| 40 |
|
| 41 |
-
|
| 42 |
|
| 43 |
| View | What it does |
|
| 44 |
|---|---|
|
| 45 |
-
| **Command Center** | Live operational overview —
|
| 46 |
-
| **Five Superpowers** | The five orchestrated capabilities a11oy coordinates
|
| 47 |
-
| **Warhacker** | Maps the five Warhacker problems to the
|
| 48 |
| **Observability** | MELT + distributed tracing where every span is a signed Khipu receipt (vs New Relic / Datadog / OTel) |
|
| 49 |
-
| **
|
| 50 |
-
| **
|
| 51 |
-
| **Formulas** | The PURIQ formula set — **5
|
| 52 |
| **Evidence** | Body-of-evidence export — DSSE Khipu receipts, replayable and tamper-evident |
|
| 53 |
| **LLM Router** | The governed LLM routing surface |
|
| 54 |
|
|
@@ -56,10 +56,11 @@ Working views in the left navigation:
|
|
| 56 |
|
| 57 |
## What it does
|
| 58 |
|
| 59 |
-
**a11oy is the audit-fiber continuity layer
|
| 60 |
|
| 61 |
Key capabilities:
|
| 62 |
- **Policy + receipt substrate** — `/v1/policy/evaluate`, `/v1/verify`, `/v1/ledger`: deny-by-default; every action signed
|
|
|
|
| 63 |
- **Honest disclosure** — `/v1/honest` reports live doctrine posture (749/14/163, Λ = Conjecture 1)
|
| 64 |
- **8 TS workspace libs** — `@szl-holdings/a11oy-knowledge`, `a11oy-policy`, `a11oy-qec-integrity`, `a11oy-receipt-substrate`, `perception-loop`, `rae1`, `sequence-pipeline`, `sparse-attention-kit`
|
| 65 |
- **DSSE Khipu receipts** — ECDSA P-256-SHA256; multi-party-witnessed; BFT quorum-capable
|
|
@@ -87,8 +88,8 @@ cosign verify-attestation --type slsaprovenance ghcr.io/szl-holdings/a11oy:uds-v
|
|
| 87 |
--certificate-identity-regexp="https://github.com/szl-holdings/a11oy/" \
|
| 88 |
--certificate-oidc-issuer="https://token.actions.githubusercontent.com"
|
| 89 |
|
| 90 |
-
# 4. Deploy as part of the signed
|
| 91 |
-
# (
|
| 92 |
uds-cli bundle deploy oci://ghcr.io/szl-holdings/szl-uds-bundle:uds-v0.2.0 --confirm
|
| 93 |
```
|
| 94 |
|
|
@@ -137,10 +138,11 @@ docker run --rm -p 7860:7860 ghcr.io/szl-holdings/a11oy:uds-v0.2.0
|
|
| 137 |
| Live HF Space (HTTP 200) | ✅ |
|
| 138 |
| SLSA Build L1 + L2 | ✅ — cosign-signed image (L1), verifiable via `cosign verify`; Rekor [1710578865](https://search.sigstore.dev/?logIndex=1710578865). L2 SLSA provenance attestation verifies via `cosign verify-attestation --type slsaprovenance` (strict identity, keyless Fulcio+Rekor). See [.compliance/SLSA_LEVEL.md](.compliance/SLSA_LEVEL.md). |
|
| 139 |
| cosign keyless signed | ✅ |
|
| 140 |
-
| UDS bundle (`szl-uds-bundle:uds-v0.2.0`) | ✅ Real, deployable
|
| 141 |
| DSSE Khipu receipts | ✅ — ECDSA P-256-SHA256 |
|
| 142 |
| Lean 749/14/163 @ `c7c0ba17` | ✅ |
|
| 143 |
-
|
|
|
|
|
| 144 |
| Λ-uniqueness | ⚠️ **Conjecture 1** (F23 open bounty) — never a theorem |
|
| 145 |
| SLSA L3 | ❌ Not claimed |
|
| 146 |
| FedRAMP / CMMC | ❌ Not claimed |
|
|
|
|
| 34 |
|
| 35 |
## The application
|
| 36 |
|
| 37 |
+
a11oy is a **full left-nav application** — not a landing page or a single console panel. It opens directly to the Command Center and carries the unified SZL house style (dark ground, gold `#c9b787` + teal `#5fb3a3` accents, Space Grotesk + JetBrains Mono) with a **product switcher** in the top ribbon that jumps between the two live SZL products — a11oy (command platform) and killinchu (drones & vessels) — in one click.
|
| 38 |
|
| 39 |
**Primary app file:** [`pages/console.html`](pages/console.html) · **served at** `/` and `/console`.
|
| 40 |
|
| 41 |
+
**43 unique tabs** in the left navigation (plus **7 Warhacker live demos**). Representative views:
|
| 42 |
|
| 43 |
| View | What it does |
|
| 44 |
|---|---|
|
| 45 |
+
| **Command Center** | Live operational overview — service health, recent verdicts, receipt stream |
|
| 46 |
+
| **Five Superpowers** | The five orchestrated capabilities a11oy coordinates internally |
|
| 47 |
+
| **Warhacker** | Maps the five Warhacker problems to the a11oy capability that solves each, with a live signed receipt |
|
| 48 |
| **Observability** | MELT + distributed tracing where every span is a signed Khipu receipt (vs New Relic / Datadog / OTel) |
|
| 49 |
+
| **Capabilities** | The built-in a11oy capability fabric — reasoning, policy, and operator paths wired into the receipt substrate |
|
| 50 |
+
| **Services** | Live service reachability — real probes, honest when a service is unreachable |
|
| 51 |
+
| **Formulas** | The PURIQ formula set — **5 locked-proven in Lean 4 {F1, F11, F12, F18, F19}** + **~36 experimental** theorems CI-green on main `@7885fd9` (e.g. M2 hash-chain tamper-evidence, CP1 split-conformal coverage); remaining formulas are Roadmap |
|
| 52 |
| **Evidence** | Body-of-evidence export — DSSE Khipu receipts, replayable and tamper-evident |
|
| 53 |
| **LLM Router** | The governed LLM routing surface |
|
| 54 |
|
|
|
|
| 56 |
|
| 57 |
## What it does
|
| 58 |
|
| 59 |
+
**a11oy is the audit-fiber continuity layer of the SZL command platform.** Every AI action routes through a11oy and leaves a DSSE-enveloped Khipu receipt on a SHA-256 hash-linked Merkle DAG. The invariant is `receipts.in ≡ receipts.out`: nothing is lost between the decision and the proof.
|
| 60 |
|
| 61 |
Key capabilities:
|
| 62 |
- **Policy + receipt substrate** — `/v1/policy/evaluate`, `/v1/verify`, `/v1/ledger`: deny-by-default; every action signed
|
| 63 |
+
- **Built-in capability fabric** — reasoning, policy, and operator paths are internal to a11oy (not external services); each emits signed receipts
|
| 64 |
- **Honest disclosure** — `/v1/honest` reports live doctrine posture (749/14/163, Λ = Conjecture 1)
|
| 65 |
- **8 TS workspace libs** — `@szl-holdings/a11oy-knowledge`, `a11oy-policy`, `a11oy-qec-integrity`, `a11oy-receipt-substrate`, `perception-loop`, `rae1`, `sequence-pipeline`, `sparse-attention-kit`
|
| 66 |
- **DSSE Khipu receipts** — ECDSA P-256-SHA256; multi-party-witnessed; BFT quorum-capable
|
|
|
|
| 88 |
--certificate-identity-regexp="https://github.com/szl-holdings/a11oy/" \
|
| 89 |
--certificate-oidc-issuer="https://token.actions.githubusercontent.com"
|
| 90 |
|
| 91 |
+
# 4. Deploy as part of the signed mesh bundle
|
| 92 |
+
# (service images are L2-attested; the bundle artifact itself is not yet attested)
|
| 93 |
uds-cli bundle deploy oci://ghcr.io/szl-holdings/szl-uds-bundle:uds-v0.2.0 --confirm
|
| 94 |
```
|
| 95 |
|
|
|
|
| 138 |
| Live HF Space (HTTP 200) | ✅ |
|
| 139 |
| SLSA Build L1 + L2 | ✅ — cosign-signed image (L1), verifiable via `cosign verify`; Rekor [1710578865](https://search.sigstore.dev/?logIndex=1710578865). L2 SLSA provenance attestation verifies via `cosign verify-attestation --type slsaprovenance` (strict identity, keyless Fulcio+Rekor). See [.compliance/SLSA_LEVEL.md](.compliance/SLSA_LEVEL.md). |
|
| 140 |
| cosign keyless signed | ✅ |
|
| 141 |
+
| UDS bundle (`szl-uds-bundle:uds-v0.2.0`) | ✅ Real, deployable mesh bundle. **Note:** the bundle artifact itself is **not yet SLSA-attested** (owner-only GHCR package-write grant pending). The L2 build-provenance attestation that verifies is on the **service images**, not the bundle. |
|
| 142 |
| DSSE Khipu receipts | ✅ — ECDSA P-256-SHA256 |
|
| 143 |
| Lean 749/14/163 @ `c7c0ba17` | ✅ |
|
| 144 |
+
| Locked-proven PURIQ formulas | ✅ Exactly **5** — F1, F11, F12, F18, F19 (Lean 4, depend on **no** axioms; machine-enforced `locked_count_five`). |
|
| 145 |
+
| Experimental theorems (main `@7885fd9`) | ✅ **~36** CI-green, kernel-verified results (waves 5/6/7/8 + agentic P1–P6 + coder + the strengthened-axiom Λ set, where Λ-uniqueness remains **Conjecture 1**). **NOT** in the locked count. Key: M2 tamper-evidence (`#print axioms = [propext]` only), CP1 split-conformal coverage (not Hoeffding). |
|
| 146 |
| Λ-uniqueness | ⚠️ **Conjecture 1** (F23 open bounty) — never a theorem |
|
| 147 |
| SLSA L3 | ❌ Not claimed |
|
| 148 |
| FedRAMP / CMMC | ❌ Not claimed |
|