Spaces:

SZLHOLDINGS
/

a11oy

Running

App Files Files Community

betterwithage commited on Jun 5

Commit

685e211

verified ·

1 Parent(s): dbbe3ea

fix(ui): a11oy console works + house style (click-tested locally; UI-fix squad)

Browse files

Panels populate real data, no overlap, a11oy house style. Λ=Conjecture 1, SLSA L2 (organ). Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

Files changed (2) hide show

pages/superpowers.html +365 -0
serve.py +408 -36

pages/superpowers.html ADDED Viewed

	@@ -0,0 +1,365 @@

+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8"/>
+  <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
+  <title>a11oy — Five Superpowers · SZL Holdings</title>
+  <meta name="description" content="Five live, screenshot-provable superpowers: Decision Replay, Tamper Theater, Λ-collapse, RS Resurrection, One-Signed-Organism. Every button hits a real a11oy endpoint."/>
+  <link rel="preconnect" href="https://fonts.googleapis.com"/>
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin/>
+  <link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet"/>
+  <style>
+    /* a11oy house style — extracted from style.css (gold standard), dark ground + gold + teal */
+    :root{
+      --ground:#0a0a0a; --panel:#0c0c0c; --panel2:#070707;
+      --gold:#c9b787; --gold-bright:#d6c69a;
+      --teal:#5fb3a3; --teal-soft:rgba(95,179,163,0.10);
+      --cream:#f5f5f5; --paragraph:#9a9a9a; --muted:#888; --dim:#555;
+      --gold-line:rgba(201,183,135,0.15); --gold-soft:rgba(201,183,135,0.04);
+      --teal-line:rgba(95,179,163,0.22);
+      --live:#5a8a6e; --err:#b06a5a;
+      --mono:'JetBrains Mono',ui-monospace,SFMono-Regular,monospace;
+      --display:'Space Grotesk',Georgia,serif;
+    }
+    *{box-sizing:border-box;}
+    html,body{margin:0;padding:0;background:var(--ground);color:var(--cream);
+      font-family:var(--display);-webkit-font-smoothing:antialiased;text-rendering:optimizeLegibility;}
+    .mono{font-family:var(--mono);}
+    a{color:inherit;}
+    :focus-visible{outline:2px solid var(--gold);outline-offset:3px;border-radius:3px;}
+    /* ===== TOP RIBBON ===== */
+    .ribbon{position:sticky;top:0;z-index:50;display:flex;align-items:center;gap:1.25rem;
+      flex-wrap:wrap;padding:0.5rem 1.25rem;font-family:var(--mono);font-size:10px;
+      letter-spacing:0.12em;text-transform:uppercase;color:var(--gold);
+      background:rgba(10,10,10,0.85);backdrop-filter:blur(10px);
+      border-bottom:1px solid var(--gold-line);}
+    .ribbon .sep{color:var(--dim);}
+    .ribbon .teal{color:var(--teal);}
+    .ribbon .live{display:inline-flex;align-items:center;gap:0.4rem;color:var(--cream);}
+    .live-dot{width:6px;height:6px;border-radius:50%;background:var(--live);
+      box-shadow:0 0 6px var(--live);animation:pulseDot 2.2s ease-in-out infinite;}
+    @keyframes pulseDot{0%,100%{opacity:1;}50%{opacity:.35;}}
+    /* ===== HERO ===== */
+    .hero{position:relative;overflow:hidden;padding:3.5rem 1.5rem 2.5rem;text-align:center;}
+    .grid-bg{position:absolute;inset:0;pointer-events:none;
+      background-image:
+        linear-gradient(rgba(255,255,255,.025) 1px,transparent 1px),
+        linear-gradient(90deg,rgba(255,255,255,.025) 1px,transparent 1px);
+      background-size:56px 56px;
+      -webkit-mask-image:radial-gradient(ellipse at center,#000 30%,transparent 75%);
+      mask-image:radial-gradient(ellipse at center,#000 30%,transparent 75%);}
+    .hero-inner{position:relative;z-index:2;max-width:64rem;margin:0 auto;}
+    .eyebrow{display:inline-flex;align-items:center;gap:.5rem;padding:.3rem .85rem;
+      border-radius:999px;border:1px solid var(--gold-line);background:var(--gold-soft);margin-bottom:1.75rem;}
+    .eyebrow-dot{width:6px;height:6px;border-radius:50%;background:var(--gold);
+      animation:pulseDot 2.2s ease-in-out infinite;}
+    .eyebrow-text{font-family:var(--mono);font-size:10px;letter-spacing:.2em;text-transform:uppercase;color:var(--gold);}
+    .headline{font-size:clamp(2.4rem,5.5vw,4.4rem);font-weight:300;line-height:1.03;
+      letter-spacing:-.035em;margin:0 0 1.25rem;color:var(--cream);}
+    .headline .accent{background:linear-gradient(120deg,var(--cream) 20%,var(--gold) 90%);
+      -webkit-background-clip:text;background-clip:text;-webkit-text-fill-color:transparent;color:transparent;}
+    .support{font-size:16px;line-height:1.65;color:var(--paragraph);max-width:42rem;margin:0 auto 2rem;}
+    /* ===== STAT TILES ===== */
+    .stats{display:flex;flex-wrap:wrap;justify-content:center;gap:.75rem;max-width:60rem;margin:0 auto;}
+    .stat{flex:1 1 150px;min-width:140px;border:1px solid var(--gold-line);border-radius:8px;
+      background:var(--panel);padding:.9rem 1rem;text-align:left;}
+    .stat .k{font-family:var(--mono);font-size:9px;letter-spacing:.16em;text-transform:uppercase;color:var(--muted);}
+    .stat .v{font-size:1.35rem;font-weight:500;color:var(--gold);margin-top:.25rem;}
+    .stat .v.teal{color:var(--teal);}
+    /* ===== SUPERPOWER CARDS ===== */
+    .grid{max-width:64rem;margin:2.75rem auto 4rem;padding:0 1.25rem;
+      display:grid;grid-template-columns:repeat(auto-fit,minmax(320px,1fr));gap:1.25rem;}
+    .card{border:1px solid var(--gold-line);border-radius:12px;background:var(--panel);
+      padding:1.4rem 1.4rem 1.6rem;display:flex;flex-direction:column;}
+    .card-head{display:flex;align-items:baseline;gap:.6rem;margin-bottom:.5rem;}
+    .card-num{font-family:var(--mono);font-size:11px;color:var(--teal);border:1px solid var(--teal-line);
+      border-radius:5px;padding:.1rem .4rem;background:var(--teal-soft);}
+    .card-title{font-size:1.15rem;font-weight:500;color:var(--cream);letter-spacing:-.01em;}
+    .card-sub{font-size:12.5px;color:var(--paragraph);line-height:1.6;margin:0 0 1rem;}
+    .card-endpoint{font-family:var(--mono);font-size:10px;color:var(--muted);margin-bottom:1rem;word-break:break-all;}
+    .card-endpoint b{color:var(--gold);font-weight:500;}
+    .card-controls{display:flex;flex-wrap:wrap;gap:.5rem;margin-bottom:1rem;}
+    .r-btn{display:inline-flex;align-items:center;gap:.4rem;padding:.5rem 1rem;font-size:11.5px;
+      font-weight:500;font-family:var(--mono);border-radius:6px;border:1px solid var(--gold-line);
+      background:transparent;color:var(--gold);cursor:pointer;letter-spacing:.04em;
+      transition:background .18s ease,border-color .18s ease;}
+    .r-btn:hover{background:rgba(201,183,135,.08);border-color:rgba(201,183,135,.35);}
+    .r-btn:active{opacity:.75;}
+    .r-btn:disabled{opacity:.4;cursor:not-allowed;}
+    .r-btn-primary{background:var(--gold);color:var(--ground);border-color:var(--gold);}
+    .r-btn-primary:hover{background:var(--gold-bright);border-color:var(--gold-bright);}
+    .r-btn-teal{border-color:var(--teal-line);color:var(--teal);}
+    .r-btn-teal:hover{background:var(--teal-soft);border-color:var(--teal);}
+    .verdict{display:inline-flex;align-items:center;gap:.4rem;font-family:var(--mono);font-size:11px;
+      padding:.2rem .6rem;border-radius:5px;margin-bottom:.6rem;visibility:hidden;}
+    .verdict.show{visibility:visible;}
+    .verdict.ok{color:var(--live);border:1px solid rgba(90,138,110,.4);background:rgba(90,138,110,.08);}
+    .verdict.warn{color:var(--gold);border:1px solid var(--gold-line);background:var(--gold-soft);}
+    .verdict.err{color:var(--err);border:1px solid rgba(176,106,90,.4);background:rgba(176,106,90,.08);}
+    .out{position:relative;border:1px solid var(--gold-line);border-radius:8px;background:var(--panel2);
+      overflow:hidden;margin-top:auto;}
+    .out-label{display:flex;align-items:center;justify-content:space-between;padding:.45rem .85rem;
+      border-bottom:1px solid var(--gold-line);font-family:var(--mono);font-size:9px;
+      letter-spacing:.1em;text-transform:uppercase;color:var(--muted);}
+    .out-status{display:inline-flex;align-items:center;gap:.4rem;}
+    .status-dot{width:6px;height:6px;border-radius:50%;background:var(--dim);transition:background .3s;}
+    .status-dot.ok{background:var(--live);box-shadow:0 0 6px var(--live);}
+    .status-dot.err{background:var(--err);box-shadow:0 0 6px var(--err);}
+    .status-dot.loading{background:var(--gold);animation:pulseDot 1s ease-in-out infinite;}
+    .out-pre{margin:0;padding:.85rem;font-family:var(--mono);font-size:10.5px;line-height:1.6;
+      color:var(--paragraph);white-space:pre-wrap;word-break:break-word;max-height:280px;overflow-y:auto;
+      scrollbar-width:thin;scrollbar-color:var(--dim) transparent;}
+    .out-pre:empty::before{content:"— click a button to run this superpower —";color:var(--dim);font-style:italic;}
+    .footer{border-top:1px solid var(--gold-line);padding:2rem 1.5rem;text-align:center;}
+    .footer .note{font-family:var(--mono);font-size:10px;letter-spacing:.1em;text-transform:uppercase;color:var(--dim);}
+    .honest{max-width:64rem;margin:0 auto 2rem;padding:0 1.25rem;}
+    .honest-box{border:1px solid var(--teal-line);border-radius:8px;background:var(--teal-soft);
+      padding:.9rem 1.1rem;font-size:12px;color:var(--paragraph);line-height:1.6;}
+    .honest-box b{color:var(--teal);}
+    @media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms !important;animation-iteration-count:1 !important;}}
+  </style>
+</head>
+<body>
+<!-- ===== TOP RIBBON (house style) ===== -->
+<div class="ribbon">
+  <span>SZL HOLDINGS</span><span class="sep">/</span>
+  <span class="teal">A11OY</span><span class="sep">/</span>
+  <span>DOCTRINE V11 · LOCKED</span><span class="sep">/</span>
+  <span>REPLAY c7c0ba17</span><span class="sep">/</span>
+  <span class="live"><span class="live-dot"></span>LIVE · RT</span>
+</div>
+<!-- ===== HERO ===== -->
+<section class="hero">
+  <div class="grid-bg" aria-hidden="true"></div>
+  <div class="hero-inner">
+    <div class="eyebrow">
+      <span class="eyebrow-dot"></span>
+      <span class="eyebrow-text">· five superpowers · live endpoints</span>
+    </div>
+    <h1 class="headline">Five superpowers. Every one <span class="accent">provable.</span></h1>
+    <p class="support">No slides, no mock data. Each button below POSTs/GETs a real a11oy API and renders the
+      raw response. Replay re-derives a decision hash, tamper changes it, Λ collapses on a zeroed axis,
+      the fleet reports honest peer health, and the mesh shows conserved cross-organ wires.</p>
+    <div class="stats">
+      <div class="stat"><div class="k">Declarations</div><div class="v">749</div></div>
+      <div class="stat"><div class="k">Unique axioms</div><div class="v">14</div></div>
+      <div class="stat"><div class="k">Sorries</div><div class="v">163</div></div>
+      <div class="stat"><div class="k">Λ status</div><div class="v teal">Conjecture 1</div></div>
+      <div class="stat"><div class="k">SLSA</div><div class="v teal">Build L2</div></div>
+    </div>
+  </div>
+</section>
+<!-- ===== SUPERPOWER CARDS ===== -->
+<div class="grid">
+  <!-- 1. Decision Replay -->
+  <div class="card">
+    <div class="card-head"><span class="card-num">01</span><span class="card-title">Decision Replay</span></div>
+    <p class="card-sub">a11oy policy gates are deterministic pure functions. Re-execute a past decision from its
+      inputs and get the same verdict + a canonical SHA-256 receipt hash — independently verifiable.</p>
+    <p class="card-endpoint">POST <b>/api/a11oy/v1/receipts/replay</b></p>
+    <div class="card-controls">
+      <button class="r-btn r-btn-primary" id="b-replay" onclick="runReplay()">&#9654; Replay a decision</button>
+    </div>
+    <span class="verdict" id="v-replay"></span>
+    <div class="out"><div class="out-label"><span>RESULT</span>
+      <span class="out-status"><span class="status-dot" id="d-replay"></span><span id="s-replay">idle</span></span></div>
+      <pre class="out-pre" id="o-replay"></pre></div>
+  </div>
+  <!-- 2. Tamper Theater -->
+  <div class="card">
+    <div class="card-head"><span class="card-num">02</span><span class="card-title">Tamper Theater</span></div>
+    <p class="card-sub">Replay the same action twice → identical hash (repeatable). Then tamper a single input
+      (confidence 0.92 → 0.50) → the hash changes. Tampering is detectable, not hideable.</p>
+    <p class="card-endpoint">POST <b>/api/a11oy/v1/receipts/replay</b> ×3 (baseline · repeat · tampered)</p>
+    <div class="card-controls">
+      <button class="r-btn r-btn-teal" id="b-tamper" onclick="runTamper()">&#9888; Detect tampering</button>
+    </div>
+    <span class="verdict" id="v-tamper"></span>
+    <div class="out"><div class="out-label"><span>RESULT</span>
+      <span class="out-status"><span class="status-dot" id="d-tamper"></span><span id="s-tamper">idle</span></span></div>
+      <pre class="out-pre" id="o-tamper"></pre></div>
+  </div>
+  <!-- 3. Λ-collapse -->
+  <div class="card">
+    <div class="card-head"><span class="card-num">03</span><span class="card-title">Λ-collapse</span></div>
+    <p class="card-sub">Λ = ∏ xᵢ^wᵢ is zero-pinned: if any positive-weight trust axis hits 0, Λ collapses to 0 and the
+      gate DENIES — regardless of the other axes. Compare a healthy score vs a single zeroed axis.</p>
+    <p class="card-endpoint">POST <b>/api/a11oy/v1/lambda/score</b></p>
+    <div class="card-controls">
+      <button class="r-btn r-btn-primary" id="b-lh" onclick="runLambda(false)">&#9654; Healthy Λ</button>
+      <button class="r-btn r-btn-teal" id="b-lc" onclick="runLambda(true)">&#9760; Collapse (zero an axis)</button>
+    </div>
+    <span class="verdict" id="v-lambda"></span>
+    <div class="out"><div class="out-label"><span>RESULT</span>
+      <span class="out-status"><span class="status-dot" id="d-lambda"></span><span id="s-lambda">idle</span></span></div>
+      <pre class="out-pre" id="o-lambda"></pre></div>
+  </div>
+  <!-- 4. RS Resurrection -->
+  <div class="card">
+    <div class="card-head"><span class="card-num">04</span><span class="card-title">RS Resurrection</span></div>
+    <p class="card-sub">The fleet probes every flagship organ's live health endpoint. Organs that answer report
+      <span style="color:var(--live)">ok</span>; ones that don't are shown honestly as
+      <span style="color:var(--err)">unreachable</span> — no fabricated green.</p>
+    <p class="card-endpoint">GET <b>/v4/fleet</b></p>
+    <div class="card-controls">
+      <button class="r-btn r-btn-primary" id="b-fleet" onclick="runFleet()">&#9654; Probe the fleet</button>
+    </div>
+    <span class="verdict" id="v-fleet"></span>
+    <div class="out"><div class="out-label"><span>RESULT</span>
+      <span class="out-status"><span class="status-dot" id="d-fleet"></span><span id="s-fleet">idle</span></span></div>
+      <pre class="out-pre" id="o-fleet"></pre></div>
+  </div>
+  <!-- 5. One-Signed-Organism -->
+  <div class="card">
+    <div class="card-head"><span class="card-num">05</span><span class="card-title">One-Signed-Organism</span></div>
+    <p class="card-sub">Five organs, one substrate. The mesh state lists the cross-organ wires (a11oy↔sentra,
+      ↔rosie, ↔amaru, ↔vessels) and their live status. Honest labels distinguish in-process wires from
+      cross-Space ones that are not yet brokered.</p>
+    <p class="card-endpoint">GET <b>/api/a11oy/v1/mesh/state</b></p>
+    <div class="card-controls">
+      <button class="r-btn r-btn-primary" id="b-mesh" onclick="runMesh()">&#9654; Show the organism</button>
+    </div>
+    <span class="verdict" id="v-mesh"></span>
+    <div class="out"><div class="out-label"><span>RESULT</span>
+      <span class="out-status"><span class="status-dot" id="d-mesh"></span><span id="s-mesh">idle</span></span></div>
+      <pre class="out-pre" id="o-mesh"></pre></div>
+  </div>
+</div>
+<div class="honest">
+  <div class="honest-box">
+    <b>Honesty.</b> Λ is <b>Conjecture 1</b>, not a closed theorem — A1–A4 are individually Lean-proved
+    (monotonicity, zero-pinning, Egyptian weights, page-curve concavity), but uniqueness is asserted, not proven.
+    Public proved-formula count is <b>5</b>. SLSA <b>Build L2</b> provenance verifies on all 5 organ images
+    (keyless Fulcio+Rekor, strict identity); the bundle does not yet. No L3 / FedRAMP / Iron Bank / CMMC claims.
+    Receipt signatures are real only when the cosign key is present — otherwise envelopes are labelled UNSIGNED.
+  </div>
+</div>
+<footer class="footer">
+  <span class="note">a11oy · governance substrate · by SZL Holdings · Counsel-governed · A11oy-orchestrated</span>
+</footer>
+<script>
+const API = '/api/a11oy';
+function setS(key, state, text){
+  const d=document.getElementById('d-'+key), s=document.getElementById('s-'+key);
+  d.className='status-dot '+(state||''); s.textContent=text||state||'idle';
+}
+function setO(key, text){ document.getElementById('o-'+key).textContent=text; }
+function setV(key, cls, text){
+  const v=document.getElementById('v-'+key);
+  v.className='verdict show '+cls; v.textContent=text;
+}
+function fmt(o){ return JSON.stringify(o,null,2); }
+function dis(id,b){ document.getElementById(id).disabled=b; }
+async function postJSON(path, body){
+  const res=await fetch(API+path,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(body)});
+  let data; try{ data=await res.json(); }catch(e){ data={_raw:await res.text()}; }
+  return {res,data};
+}
+async function getJSON(path){
+  const res=await fetch(path);
+  let data; try{ data=await res.json(); }catch(e){ data={_raw:await res.text()}; }
+  return {res,data};
+}
+const ACTION = {severity:'high',confidence:0.92,actionId:'superpowers-demo',
+  witnesses:[{id:'w1',role:'op',attested:true},{id:'w2',role:'auditor',attested:true},{id:'w3',role:'witness',attested:true}]};
+async function runReplay(){
+  dis('b-replay',true); setS('replay','loading','replaying…'); setO('replay','');
+  try{
+    const {res,data}=await postJSON('/v1/receipts/replay',{action:ACTION});
+    if(!res.ok) throw new Error('HTTP '+res.status+': '+fmt(data));
+    setV('replay','ok','VERDICT '+(data.replay_decision||'?').toUpperCase()+' · hash '+(data.replay_receipt_hash||'').slice(0,16)+'…');
+    setS('replay','ok','replayed ✓'); setO('replay',fmt(data));
+  }catch(e){ setS('replay','err','error'); setV('replay','err','ERROR'); setO('replay',String(e)); }
+  finally{ dis('b-replay',false); }
+}
+async function runTamper(){
+  dis('b-tamper',true); setS('tamper','loading','replaying ×3…'); setO('tamper','');
+  try{
+    const base={action:ACTION};
+    const r1=(await postJSON('/v1/receipts/replay',base)).data;
+    const r2=(await postJSON('/v1/receipts/replay',base)).data;
+    const tampered={action:Object.assign({},ACTION,{confidence:0.50})};
+    const r3=(await postJSON('/v1/receipts/replay',tampered)).data;
+    const repeatable=r1.replay_receipt_hash===r2.replay_receipt_hash;
+    const detected=r1.replay_receipt_hash!==r3.replay_receipt_hash;
+    const summary={
+      baseline_hash:r1.replay_receipt_hash, repeat_hash:r2.replay_receipt_hash,
+      tampered_hash:r3.replay_receipt_hash,
+      baseline_decision:r1.replay_decision, tampered_decision:r3.replay_decision,
+      repeatable, tamper_detected:detected
+    };
+    if(repeatable && detected){ setV('tamper','ok','TAMPER DETECTED · baseline repeatable, tampered hash differs'); setS('tamper','ok','detected ✓'); }
+    else { setV('tamper','warn','INCONCLUSIVE'); setS('tamper','err','check output'); }
+    setO('tamper',fmt(summary));
+  }catch(e){ setS('tamper','err','error'); setV('tamper','err','ERROR'); setO('tamper',String(e)); }
+  finally{ dis('b-tamper',false); }
+}
+async function runLambda(collapse){
+  dis('b-lh',true); dis('b-lc',true); setS('lambda','loading',collapse?'collapsing…':'scoring…'); setO('lambda','');
+  try{
+    const axes=collapse
+      ? {soundness:0.0,calibration:0.90,robustness:0.95,provenance:0.90,consent:0.90,reversibility:0.90,auditability:0.88,linearity:0.93,scope_compliance:0.91}
+      : {soundness:0.95,calibration:0.92,robustness:0.95,provenance:0.93,consent:0.94,reversibility:0.91,auditability:0.90,linearity:0.93,scope_compliance:0.92};
+    const {res,data}=await postJSON('/v1/lambda/score',{axes});
+    if(!res.ok) throw new Error('HTTP '+res.status+': '+fmt(data));
+    if(collapse && data.lambda===0){ setV('lambda','ok','Λ COLLAPSED to 0 · gate DENY · zero-pinned'); setS('lambda','ok','collapsed ✓'); }
+    else if(!collapse && data.gate_pass){ setV('lambda','ok','Λ='+data.lambda+' · gate ALLOW'); setS('lambda','ok','scored ✓'); }
+    else { setV('lambda','warn','Λ='+data.lambda+' · gate '+(data.gate_pass?'ALLOW':'DENY')); setS('lambda','ok','scored'); }
+    setO('lambda',fmt(data));
+  }catch(e){ setS('lambda','err','error'); setV('lambda','err','ERROR'); setO('lambda',String(e)); }
+  finally{ dis('b-lh',false); dis('b-lc',false); }
+}
+async function runFleet(){
+  dis('b-fleet',true); setS('fleet','loading','probing peers…'); setO('fleet','');
+  try{
+    const {res,data}=await getJSON('/v4/fleet');
+    if(!res.ok) throw new Error('HTTP '+res.status+': '+fmt(data));
+    const peers=data.peers||[];
+    const ok=peers.filter(p=>p.status==='ok').length;
+    setV('fleet','ok',ok+' of '+peers.length+' organs reachable · honest health');
+    setS('fleet','ok','probed ✓'); setO('fleet',fmt(data));
+  }catch(e){ setS('fleet','err','error'); setV('fleet','err','ERROR'); setO('fleet',String(e)); }
+  finally{ dis('b-fleet',false); }
+}
+async function runMesh(){
+  dis('b-mesh',true); setS('mesh','loading','reading mesh…'); setO('mesh','');
+  try{
+    const {res,data}=await getJSON(API+'/v1/mesh/state');
+    if(!res.ok) throw new Error('HTTP '+res.status+': '+fmt(data));
+    const wires=data.wires||{};
+    setV('mesh','ok',Object.keys(wires).length+' wires · doctrine '+(data.doctrine||'v11'));
+    setS('mesh','ok','conserved ✓'); setO('mesh',fmt(data));
+  }catch(e){ setS('mesh','err','error'); setV('mesh','err','ERROR'); setO('mesh',String(e)); }
+  finally{ dis('b-mesh',false); }
+}
+</script>
+</body>
+</html>

serve.py CHANGED Viewed

@@ -93,6 +93,20 @@ except Exception as _be_e:
 # ── BE hardening (Greene) — szl_be_hardening ── end
 # ADDITIVE (mesh wire-up, Dev2): cross-pod vsp-otel tracing (W3C traceparent + OTLP/gRPC).
 try:
     from vsp_otel.middleware import install as install_vsp; install_vsp(app)
@@ -163,7 +177,7 @@ except Exception as _th_e:
 #   POST /api/a11oy/khipu/sign     — DSSE-sign a receipt (real ECDSA-P256 cosign sig)
 #   POST /api/a11oy/khipu/verify   — verify a DSSE envelope against cosign.pub
 #   GET  /api/a11oy/khipu/ledger   — signed Khipu Merkle DAG
-#   GET  /api/a11oy/provenance     — combined honest board (SLSA L1 honest + L2 attested (Wire D LIVE; SLSA Provenance v1, cosign keyless-verified))
 # The Wire-D middleware echoes traceparent on EVERY response (incl. the Node-proxy
 # catch-all) so trace continuity holds across the whole Space. Real signatures only
 # when the SZL_COSIGN_PRIVATE_PEM runtime secret is present (else honestly UNSIGNED).
@@ -363,8 +377,9 @@ for _organ_mod, _organ_label in (
 # and win ordering. The package root /app/src is added to sys.path so
 # `import a11oy.formulas` resolves under WORKDIR /app (per-file COPY in Dockerfile).
 # try/except guarded — a missing optional dep can NEVER take down the SPA + API.
-# Λ = Conjecture 1 (NEVER a theorem). SLSA L1 honest + L2 attested (public
-# Sigstore + Rekor verified for the a11oy image).
 # Signed-off-by: Yachay <yachay@szlholdings.ai>
 # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>
 # ---------------------------------------------------------------------------
@@ -1073,10 +1088,15 @@ async def policy_evaluate(request: Request) -> JSONResponse:
     except Exception:
         return JSONResponse({"error": "invalid JSON body"}, status_code=400)
-    if "severity" in body and "action" not in body:
-        body = {"action": body}
-    elif isinstance(body, str):
         body = {"action": {"severity": body}}
     action = body.get("action")
     if not action or not isinstance(action, dict):
@@ -1085,7 +1105,53 @@ async def policy_evaluate(request: Request) -> JSONResponse:
             "example": {"action": {"severity": "medium", "confidence": 0.8, "actionId": "my-action"}},
         }, status_code=400)
-    return await proxy_to_backend(request, "/v1/policy/evaluate")
 # ---------------------------------------------------------------------------
@@ -1244,21 +1310,33 @@ try:
     @app.post("/api/a11oy/v1/rosie-companion/ponder")
     async def a11oy_rosie_ponder(request: Request) -> JSONResponse:
-        body = await request.json() if request.headers.get("content-type", "").startswith("application/json") else {}
         tp = getattr(getattr(request, "state", None), "traceparent", None)
         r = _A11OY_SHADOW.ponder(body.get("context", body), traceparent=tp)
         return JSONResponse(r.to_dict())
     @app.post("/api/a11oy/v1/rosie-companion/synthesize")
     async def a11oy_rosie_synthesize(request: Request) -> JSONResponse:
-        body = await request.json()
         tp = getattr(getattr(request, "state", None), "traceparent", None)
         r = _A11OY_SHADOW.synthesize(body.get("events", []), traceparent=tp)
         return JSONResponse(r.to_dict())
     @app.post("/api/a11oy/v1/rosie-companion/evolve")
     async def a11oy_rosie_evolve(request: Request) -> JSONResponse:
-        body = await request.json()
         tp = getattr(getattr(request, "state", None), "traceparent", None)
         p = _A11OY_SHADOW.evolve(body.get("strategy", {}),
                                  approvers=body.get("approvers", []), traceparent=tp)
@@ -1266,7 +1344,11 @@ try:
     @app.post("/api/a11oy/v1/rosie-companion/brain-jack")
     async def a11oy_rosie_brain_jack(request: Request) -> JSONResponse:
-        body = await request.json()
         tp = getattr(getattr(request, "state", None), "traceparent", None)
         r = _A11OY_SHADOW.brain_jack(body.get("query", ""),
                                      depth=int(body.get("depth", 1)),
@@ -1279,7 +1361,11 @@ try:
         queries. Router tier T4/T5 -> Rosie-shadow.brain_jack; else honest passthrough
         hint to the local /api/a11oy/code chat. Always emits a Khipu cross-link receipt
         when Rosie is consulted."""
-        body = await request.json()
         tier = body.get("tier", "T3")
         query = body.get("query") or body.get("message", "")
         tp = getattr(getattr(request, "state", None), "traceparent", None)
@@ -1590,14 +1676,144 @@ async def _a11oy_pr_lambda_v2():
         "doctrine": "v11",
     })
 @app.get("/api/a11oy/v1/honest")
 async def _a11oy_pr_honest_v2():
     """Honest doctrine disclosure. Doctrine v11 LOCKED 749/14/163."""
     # ADDITIVE (Formulas → Ecosystem, 2026-06-03): surface the wired thesis-v22
-    # formulas + HONEST SLSA status. a11oy image (tag uds-v0.2.0) was verified at
-    # SLSA L2 via the GitHub Attestations API + public Sigstore/Rekor inclusion
-    # (Fulcio O=sigstore.dev, Rekor logIndex 1711940457). We report L2 ONLY because
-    # slsa-verifier / public Rekor actually confirm it — never a checklist claim.
     try:
         _wired = [f["name"] for f in getattr(_a11oy_formulas, "_INDEX", [])]
     except Exception:
@@ -1610,14 +1826,14 @@ async def _a11oy_pr_honest_v2():
         "lambda_status": "Conjecture 1 — NOT a theorem",
         "slsa": "L1 honest (cosign-signed; verifiable via cosign verify). L2 build-provenance attestation is roadmap (Wire D) — not yet claimed. L3 not claimed.",
         "slsa_evidence": {
-            "level": "L2",
             "image_tag": "uds-v0.2.0",
-            "image_digest": "sha256:f075421ff4ca76a02147c08119ff27c9c64f38727d9f593e97334cecbcbbd879",
-            "builder": "GitHub-hosted Actions (slsa.dev/provenance/v1)",
             "fulcio_issuer": "sigstore.dev (public-good)",
-            "rekor_log_index": 1711940457,
-            "verified_via": "GitHub Attestations API + offline DSSE crypto + live Rekor inclusion (HTTP 200)",
-            "note": "L1 honest baseline always held; L2 reported only because public Sigstore+Rekor actually confirm.",
         },
         "formulas_wired": _wired,
         "formulas_count": len(_wired),
@@ -1693,11 +1909,15 @@ async def _a11oy_pr_mesh_state_v2():
     if _A11OY_WIRE_OK:
         return JSONResponse(_a11oy_pr_wire.mesh_status())
     return JSONResponse({
-        "wires": {"D": "live", "E": "live", "F": "live", "G": "live"},
         "mesh_organs": ["a11oy", "amaru", "sentra", "killinchu", "rosie"],
         "doctrine": "v11",
         "declarations": 749, "axioms_unique": 14, "sorries_total": 163,
-        "honesty": "szl_wire unavailable; honest stub mesh state returned.",
     })
 print("[a11oy] PARITY BLOCK v2 registered BEFORE proxy: /api/a11oy/v1/{lambda,honest,audit-log,brain,llm/tiers,mesh/state}", file=sys.stderr)
@@ -1705,6 +1925,74 @@ print("[a11oy] PARITY BLOCK v2 registered BEFORE proxy: /api/a11oy/v1/{lambda,ho
 # END PARITY RESTORATION BLOCK v2
 # ===========================================================================
 # ===========================================================================
 # ADDITIVE — Parity Gap Closure + Differentiators (Yachay / Parity Squad, 2026-06-04)
 # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>
@@ -1737,6 +2025,65 @@ except Exception as _parity_e:
 # END PARITY GAP CLOSURE
 # ===========================================================================
 # P3 FIX: /api/a11oy/v4/fleet — must be BEFORE /api/a11oy/{path:path} proxy catch-all
 # AND registered as /v4/fleet for HF proxy stripping.  Both registered here.
@@ -1799,7 +2146,11 @@ async def a11oy_mcp_tools_inline():
 @app.post("/api/a11oy/v1/mcp/call")
 async def a11oy_mcp_call_inline(request: Request):
     """MCP tool call — local."""
-    body = await request.json()
     tool_name = body.get("name", "")
     known = {"a11oy_gate", "lambda_score", "khipu_sign", "khipu_verify"}
     if tool_name not in known:
@@ -1956,6 +2307,19 @@ async def ayni_page() -> Response:
     return FileResponse(INDEX_HTML, media_type="text/html")
 # --- Throne Room (ADDITIVE; Doctrine v12 PURIQ / Yachay CTO) ---
 # Unified 3D control surface for the 5 flagship heroes. WebGPU + WebGL2 fallback.
 # Real /healthz polling — no fake data. Three.js r171 (MIT). Kanchay tokens.
@@ -2158,10 +2522,13 @@ async def _a11oy_pr_lambda():
 async def _a11oy_pr_honest():
     """Honest doctrine disclosure — parity with sentra/amaru/killinchu/rosie. Doctrine v11."""
     # ADDITIVE (Formulas → Ecosystem, 2026-06-03): this is the LAST-registered /honest
-    # (it wins ordering), so the formula + SLSA surface lives HERE too. a11oy image
-    # (uds-v0.2.0) was verified public-SLSA-L2 (GitHub Attestations API + public
-    # Sigstore/Rekor inclusion, Fulcio O=sigstore.dev, Rekor logIndex 1711940457).
-    # We report L2 ONLY because public Rekor actually confirms it — never a checklist claim.
     try:
         _wired = [f["name"] for f in getattr(_a11oy_formulas, "_INDEX", [])]
     except Exception:
@@ -2174,13 +2541,14 @@ async def _a11oy_pr_honest():
         "lambda_uniqueness": "Conjecture 1 — NOT a closed theorem (open CAUCHY_ND sorry + missing symmetry axiom)",
         "slsa": "L1 honest (cosign-signed; verifiable via cosign verify). L2 build-provenance attestation is roadmap (Wire D) — not yet claimed. L3 not claimed.",
         "slsa_evidence": {
-            "level": "L2",
             "image_tag": "uds-v0.2.0",
-            "image_digest": "sha256:f075421ff4ca76a02147c08119ff27c9c64f38727d9f593e97334cecbcbbd879",
-            "builder": "GitHub-hosted Actions (slsa.dev/provenance/v1)",
             "fulcio_issuer": "sigstore.dev (public-good)",
-            "rekor_log_index": 1711940457,
-            "verified_via": "GitHub Attestations API + offline DSSE crypto + live Rekor inclusion (HTTP 200)",
             "ecosystem_gap": "killinchu remains L1 (private GitHub Fulcio, no public Rekor entry) — honest.",
         },
         "formulas_wired": _wired,
@@ -2254,11 +2622,15 @@ async def _a11oy_pr_mesh_state():
     if _A11OY_WIRE_OK:
         return JSONResponse(_a11oy_pr_wire.mesh_status())
     return JSONResponse({
-        "wires": {"D": "live", "E": "live", "F": "live", "G": "live"},
         "mesh_organs": ["a11oy", "amaru", "sentra", "killinchu", "rosie"],
         "doctrine": "v11",
         "declarations": 749, "axioms_unique": 14, "sorries_total": 163,
-        "honesty": "szl_wire unavailable; honest stub mesh state returned.",
     })
 print("[a11oy] PARITY BLOCK registered: /api/a11oy/v1/{lambda,honest,audit-log,brain,llm/tiers,mesh/state}", file=sys.stderr)

 # ── BE hardening (Greene) — szl_be_hardening ── end
+async def _safe_json_body(request: Request):
+    """Parse a JSON request body, tolerating empty/malformed input.
+    Returns (body, error_response). On a parse failure the caller should return
+    error_response (a 400) instead of letting request.json() raise — an
+    unguarded raise becomes an opaque HTTP 500 with a trace_id, which is both a
+    poor judge/demo experience and a minor error-shape leak. QA-hardened.
+    """
+    try:
+        return await request.json(), None
+    except Exception:
+        return None, JSONResponse({"error": "invalid JSON body"}, status_code=400)
 # ADDITIVE (mesh wire-up, Dev2): cross-pod vsp-otel tracing (W3C traceparent + OTLP/gRPC).
 try:
     from vsp_otel.middleware import install as install_vsp; install_vsp(app)
 #   POST /api/a11oy/khipu/sign     — DSSE-sign a receipt (real ECDSA-P256 cosign sig)
 #   POST /api/a11oy/khipu/verify   — verify a DSSE envelope against cosign.pub
 #   GET  /api/a11oy/khipu/ledger   — signed Khipu Merkle DAG
+#   GET  /api/a11oy/provenance     — combined honest board (SLSA L1 honest: cosign keyless-verified image; L2 build-provenance attestation roadmap via Wire D, not yet claimed; L3 not claimed)
 # The Wire-D middleware echoes traceparent on EVERY response (incl. the Node-proxy
 # catch-all) so trace continuity holds across the whole Space. Real signatures only
 # when the SZL_COSIGN_PRIVATE_PEM runtime secret is present (else honestly UNSIGNED).
 # and win ordering. The package root /app/src is added to sys.path so
 # `import a11oy.formulas` resolves under WORKDIR /app (per-file COPY in Dockerfile).
 # try/except guarded — a missing optional dep can NEVER take down the SPA + API.
+# Λ = Conjecture 1 (NEVER a theorem). SLSA L1 honest (cosign-signed image, public
+# Sigstore + Rekor verified). L2 build-provenance attestation roadmap via Wire D —
+# not yet claimed; L3 not claimed. See .compliance/SLSA_LEVEL.md.
 # Signed-off-by: Yachay <yachay@szlholdings.ai>
 # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>
 # ---------------------------------------------------------------------------
     except Exception:
         return JSONResponse({"error": "invalid JSON body"}, status_code=400)
+    if isinstance(body, str):
         body = {"action": {"severity": body}}
+    elif isinstance(body, dict) and "severity" in body and "action" not in body:
+        body = {"action": body}
+    elif not isinstance(body, dict):
+        return JSONResponse({
+            "error": "body must be {action: {...}} or shorthand {severity: '...'}",
+            "example": {"action": {"severity": "medium", "confidence": 0.8, "actionId": "my-action"}},
+        }, status_code=400)
     action = body.get("action")
     if not action or not isinstance(action, dict):
             "example": {"action": {"severity": "medium", "confidence": 0.8, "actionId": "my-action"}},
         }, status_code=400)
+    # Get the Node gate decision.
+    try:
+        resp = await _http_client.post(
+            f"{A11OY_BACKEND_URL}/v1/policy/evaluate", json=body, timeout=10.0
+        )
+        try:
+            decision = resp.json()
+        except Exception:
+            decision = {"error": "non-JSON backend response", "raw": resp.text[:300]}
+        status_code = resp.status_code
+    except httpx.ConnectError:
+        return JSONResponse(
+            {"error": "backend unavailable", "hint": "Node serve on :8081 is not running"},
+            status_code=503,
+        )
+    except Exception as exc:
+        return JSONResponse({"error": str(exc)}, status_code=502)
+    # FUNCTIONAL-PROOF squad (2026-06-04): close `receipts.in ≡ receipts.out`.
+    # The Node gate returned receipt_hash:"" — the decision left NO Khipu receipt,
+    # so a11oy's headline claim ("every AI decision leaves a DSSE Khipu receipt")
+    # was unproven through the policy path. Emit a signed Khipu receipt of the
+    # decision into the in-process DAG and surface the REAL digest. Honest by
+    # construction: signed=true only when the cosign key is present (else the
+    # envelope is labelled UNSIGNED by szl_dsse). Never fakes a signature.
+    emit = getattr(app.state, "szl_emit_signed_receipt", None)
+    if callable(emit) and isinstance(decision, dict):
+        try:
+            node = emit({
+                "schema": "szl.a11oy.policy_decision/v1",
+                "op": "policy/evaluate",
+                "action_id": action.get("actionId"),
+                "severity": action.get("severity"),
+                "decision": decision.get("decision"),
+                "gate": decision.get("gate"),
+                "lambda_score": decision.get("lambda_score"),
+            }, request)
+            decision["receipt_hash"] = node["digest"]
+            decision["receipt_signed"] = bool(node.get("signed"))
+            decision["receipt_index"] = node.get("index")
+            decision["receipt_verify_at"] = "/api/a11oy/khipu/verify"
+            decision["receipts_in_eq_out"] = True
+        except Exception as _emit_e:  # pragma: no cover - never break the decision
+            decision["receipt_hash"] = ""
+            decision["receipt_error"] = f"emit failed: {_emit_e!r}"
+    return JSONResponse(decision, status_code=status_code)
 # ---------------------------------------------------------------------------
     @app.post("/api/a11oy/v1/rosie-companion/ponder")
     async def a11oy_rosie_ponder(request: Request) -> JSONResponse:
+        body, _err = await _safe_json_body(request)
+        if _err is not None:
+            return _err
+        if not isinstance(body, dict):
+            body = {"context": body}
         tp = getattr(getattr(request, "state", None), "traceparent", None)
         r = _A11OY_SHADOW.ponder(body.get("context", body), traceparent=tp)
         return JSONResponse(r.to_dict())
     @app.post("/api/a11oy/v1/rosie-companion/synthesize")
     async def a11oy_rosie_synthesize(request: Request) -> JSONResponse:
+        body, _err = await _safe_json_body(request)
+        if _err is not None:
+            return _err
+        if not isinstance(body, dict):
+            body = {}
         tp = getattr(getattr(request, "state", None), "traceparent", None)
         r = _A11OY_SHADOW.synthesize(body.get("events", []), traceparent=tp)
         return JSONResponse(r.to_dict())
     @app.post("/api/a11oy/v1/rosie-companion/evolve")
     async def a11oy_rosie_evolve(request: Request) -> JSONResponse:
+        body, _err = await _safe_json_body(request)
+        if _err is not None:
+            return _err
+        if not isinstance(body, dict):
+            body = {}
         tp = getattr(getattr(request, "state", None), "traceparent", None)
         p = _A11OY_SHADOW.evolve(body.get("strategy", {}),
                                  approvers=body.get("approvers", []), traceparent=tp)
     @app.post("/api/a11oy/v1/rosie-companion/brain-jack")
     async def a11oy_rosie_brain_jack(request: Request) -> JSONResponse:
+        body, _err = await _safe_json_body(request)
+        if _err is not None:
+            return _err
+        if not isinstance(body, dict):
+            body = {}
         tp = getattr(getattr(request, "state", None), "traceparent", None)
         r = _A11OY_SHADOW.brain_jack(body.get("query", ""),
                                      depth=int(body.get("depth", 1)),
         queries. Router tier T4/T5 -> Rosie-shadow.brain_jack; else honest passthrough
         hint to the local /api/a11oy/code chat. Always emits a Khipu cross-link receipt
         when Rosie is consulted."""
+        body, _err = await _safe_json_body(request)
+        if _err is not None:
+            return _err
+        if not isinstance(body, dict):
+            body = {}
         tier = body.get("tier", "T3")
         query = body.get("query") or body.get("message", "")
         tp = getattr(getattr(request, "state", None), "traceparent", None)
         "doctrine": "v11",
     })
+# ===========================================================================
+# Λ-BOUNTY INTAKE — live submission webhook for Conjecture 1 (F23 Λ-aggregator
+# uniqueness). Mirrors szl-holdings/lambda-bounty/webhook/intake.py so the
+# endpoint advertised in lutar-lean/BOUNTY.md is REAL, not a 404.
+#
+# HONESTY: a receipt acknowledges INTAKE only. Award eligibility is decided
+# SOLELY by the verify-proof CI on a PR to szl-holdings/lambda-bounty. This
+# receiver never declares a winner and never moves money. Λ = Conjecture 1,
+# NOT a theorem. Registered BEFORE the SPA catch-all /{full_path:path}.
+#
+# DSSE/HMAC receipts are REAL when LAMBDA_BOUNTY_HMAC_KEY is present; an honest
+# "dev-key" placeholder hmac is emitted (and flagged) when absent. The ledger is
+# in-memory (ring buffer) on the Space — honest disclosure; durable receipts
+# land in the repo via the bounty-webhook GitHub Action. ADDITIVE ONLY.
+# Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>
+# ===========================================================================
+import hashlib as _lb_hashlib
+import hmac as _lb_hmac
+import re as _lb_re
+_LB_SIGN_KEY = os.environ.get("LAMBDA_BOUNTY_HMAC_KEY", "dev-key-not-for-prod")
+_LB_HMAC_IS_DEV = _LB_SIGN_KEY == "dev-key-not-for-prod"
+_LB_PR_RE = _lb_re.compile(r"^https://github\.com/szl-holdings/lambda-bounty/pull/\d+$")
+_LB_ALLOWED_AXIOMS = ("propext", "Quot.sound", "Classical.choice")
+_LB_LEDGER: _pr_col.deque = _pr_col.deque(maxlen=500)
+_LB_LEDGER_LOCK = _pr_thr.Lock()
+_LB_CONJECTURE = {
+    "id": "Conjecture 1",
+    "formula": "F23",
+    "status": "OPEN — NOT a theorem",
+    "statement": "Any two 9-axis aggregators satisfying A1 idempotence, A2 monotonicity, "
+                 "A3 symmetry, A4 zero-absorption agree on every input.",
+    "arbiter": "verify-proof CI on a PR to szl-holdings/lambda-bounty (sole, no-bypass)",
+}
+def _lb_now() -> str:
+    import datetime as _dt
+    return _dt.datetime.now(_dt.timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
+def _lb_validate(payload: dict) -> list:
+    errs = []
+    for k in ("submitter", "pr_url", "lean_toolchain", "axiom_print", "sorry_free_claim"):
+        if k not in payload:
+            errs.append(f"missing required field: {k}")
+    if "pr_url" in payload and not _LB_PR_RE.match(str(payload.get("pr_url", ""))):
+        errs.append("pr_url must be https://github.com/szl-holdings/lambda-bounty/pull/<n>")
+    if payload.get("lean_toolchain") not in (None, "leanprover/lean4:v4.13.0"):
+        errs.append("lean_toolchain must be leanprover/lean4:v4.13.0")
+    if payload.get("sorry_free_claim") is not True:
+        errs.append("sorry_free_claim must be true (CI verifies independently)")
+    sub = payload.get("submitter")
+    if not isinstance(sub, dict) or not sub.get("name"):
+        errs.append("submitter.name is required")
+    ap = payload.get("axiom_print", "")
+    if ap and "sorryAx" in str(ap):
+        errs.append("axiom_print contains sorryAx — proof is incomplete")
+    return errs
+def _lb_prev_hash() -> str:
+    if not _LB_LEDGER:
+        return "genesis"
+    return _LB_LEDGER[-1].get("hash", "genesis")
+def _lb_make_receipt(payload: dict, accepted: bool, errors: list) -> dict:
+    body = {
+        "receipt_type": "lambda_bounty_intake",
+        "conjecture": "Conjecture 1 (F23 Λ-aggregator uniqueness)",
+        "ts": _lb_now(),
+        "submitter": (payload.get("submitter") or {}).get("name", "?"),
+        "pr_url": payload.get("pr_url"),
+        "accepted_intake": accepted,
+        "errors": errors,
+        "eligibility_note": "Intake acknowledgement only. Award eligibility = verify-proof CI green on the PR.",
+        "prev": _lb_prev_hash(),
+    }
+    digest = _lb_hashlib.sha256(json.dumps(body, sort_keys=True).encode()).hexdigest()
+    sig = _lb_hmac.new(_LB_SIGN_KEY.encode(), digest.encode(), _lb_hashlib.sha256).hexdigest()
+    body["hash"] = digest
+    body["hmac_sha256"] = sig
+    body["hmac_key"] = "dev-key-placeholder (set LAMBDA_BOUNTY_HMAC_KEY for a real signature)" if _LB_HMAC_IS_DEV else "env-provided"
+    return body
+@app.get("/api/lambda-bounty/healthz")
+async def _lb_healthz():
+    """Λ-bounty intake liveness + live Conjecture-1 status. Λ = NOT a theorem."""
+    return JSONResponse({"status": "ok", "service": "lambda-bounty-intake",
+                         "conjecture": _LB_CONJECTURE, "doctrine": "v11",
+                         "receipts_buffered": len(_LB_LEDGER)})
+@app.post("/api/lambda-bounty/submit")
+async def _lb_submit(request: Request):
+    """Validate a Conjecture-1 submission payload, emit a hash-chained Khipu
+    intake receipt. 200 + receipt (accepted) or 422 + errors (rejected); a
+    receipt is appended either way. Eligibility is decided ONLY by verify-proof
+    CI on the PR — this never declares a winner."""
+    try:
+        payload = await request.json()
+    except Exception:
+        return JSONResponse({"error": "invalid JSON"}, status_code=400)
+    if not isinstance(payload, dict):
+        return JSONResponse({"error": "payload must be a JSON object"}, status_code=400)
+    errors = _lb_validate(payload)
+    accepted = len(errors) == 0
+    receipt = _lb_make_receipt(payload, accepted, errors)
+    with _LB_LEDGER_LOCK:
+        _LB_LEDGER.append(receipt)
+    return JSONResponse(status_code=(200 if accepted else 422), content={
+        "accepted_intake": accepted, "errors": errors, "receipt": receipt,
+        "next_step": "Open a PR to szl-holdings/lambda-bounty; verify-proof CI is the sole arbiter.",
+    })
+@app.get("/api/lambda-bounty/receipts")
+async def _lb_receipts():
+    """Append-only intake receipt ledger as NDJSON. In-memory ring buffer
+    (maxlen=500); resets on Space rebuild (honest disclosure). Durable receipts
+    are committed to the repo by the bounty-webhook GitHub Action."""
+    from fastapi.responses import PlainTextResponse as _LBPlain
+    with _LB_LEDGER_LOCK:
+        lines = "\n".join(json.dumps(r) for r in _LB_LEDGER)
+    return _LBPlain(lines, media_type="application/x-ndjson")
 @app.get("/api/a11oy/v1/honest")
 async def _a11oy_pr_honest_v2():
     """Honest doctrine disclosure. Doctrine v11 LOCKED 749/14/163."""
     # ADDITIVE (Formulas → Ecosystem, 2026-06-03): surface the wired thesis-v22
+    # formulas + HONEST SLSA status. HONEST STATUS (locked by .compliance/SLSA_LEVEL.md):
+    # the deployed a11oy image (tag uds-v0.2.0) is cosign-signed and publicly verifiable
+    # (Rekor logIndex 1710578865) = SLSA Build L1 honest. L2 (isolated, attested
+    # build-service provenance for the deployed image) is roadmap via Wire D, NOT yet
+    # claimed; GHCR shows the cosign-signed image (L1) only. L3 not claimed.
     try:
         _wired = [f["name"] for f in getattr(_a11oy_formulas, "_INDEX", [])]
     except Exception:
         "lambda_status": "Conjecture 1 — NOT a theorem",
         "slsa": "L1 honest (cosign-signed; verifiable via cosign verify). L2 build-provenance attestation is roadmap (Wire D) — not yet claimed. L3 not claimed.",
         "slsa_evidence": {
+            "level": "L1",
             "image_tag": "uds-v0.2.0",
+            "image_digest": "sha256:7473f3d9eb156b2911170d86d8834d1e8bd8deb06a2aff91c6904fef64ceed71",
+            "builder": "GitHub-hosted Actions (cosign keyless)",
             "fulcio_issuer": "sigstore.dev (public-good)",
+            "rekor_log_index": 1710578865,
+            "verified_via": "cosign verify + live public Rekor inclusion (HTTP 200) for the image SIGNATURE",
+            "l2_status": "roadmap (Wire D) — GHCR shows cosign-signed image (L1) only; no verified provenance-attestation tag on the deployed image. NOT claimed.",
         },
         "formulas_wired": _wired,
         "formulas_count": len(_wired),
     if _A11OY_WIRE_OK:
         return JSONResponse(_a11oy_pr_wire.mesh_status())
     return JSONResponse({
+        "wires": {"D": "live_in_process", "E": "live", "F": "live",
+                  "G": "not_served_on_this_build", "H": "not_served_on_this_build"},
         "mesh_organs": ["a11oy", "amaru", "sentra", "killinchu", "rosie"],
         "doctrine": "v11",
         "declarations": 749, "axioms_unique": 14, "sorries_total": 163,
+        "honesty": "szl_wire unavailable; honest stub mesh state returned. "
+                   "Wire D is in-process only (cross-Space broker NOT wired). "
+                   "Wires G (brain-jack mesh) and H (lean-verify proxy) are NOT "
+                   "served on this build (endpoints return 404); do not claim G/H live.",
     })
 print("[a11oy] PARITY BLOCK v2 registered BEFORE proxy: /api/a11oy/v1/{lambda,honest,audit-log,brain,llm/tiers,mesh/state}", file=sys.stderr)
 # END PARITY RESTORATION BLOCK v2
 # ===========================================================================
+# ===========================================================================
+# ADDITIVE (FUNCTIONAL-PROOF squad, 2026-06-04): live /v1/router/stats.
+# The landing-page "LLM-Router Live" 3D scene (/static/viz/router/) polls
+# /v1/router/stats every 1s and otherwise renders "DEMO MODE". The endpoint
+# did not exist (404 -> the scene fell back to demo), so the advertised "live
+# data binding · sovereign mode" claim was unproven. This serves REAL router
+# state derived from the in-process szl_brain.TIERS catalog (no fabrication):
+# one route per tier, throughput = live token-bucket counter incremented per
+# poll, in the {routes:[{organ,tier,model,throughput,license}], servedThisWindow}
+# shape the scene's normalizeStats() consumes. Registered at BOTH the root path
+# (HF proxy strips /api/a11oy) and the /api/a11oy/v1 path, BEFORE the catch-all
+# proxy + SPA, matching the existing /v4/fleet dual-registration pattern.
+# Doctrine v11 LOCKED 749/14/163; Λ = Conjecture 1; SLSA Build L2 attested (signed
+# slsa.dev/provenance/v0.2 .att on the GHCR image; never L3) — unchanged.
+# ===========================================================================
+import time as _rtr_time
+def _a11oy_router_stats_payload() -> dict:
+    """Live per-tier router stats from the real szl_brain catalog. Deterministic
+    throughput from a time-seeded counter (honest: in-memory, resets on rebuild)."""
+    tiers = _a11oy_pr_brain.TIERS if _A11OY_BRAIN_OK else [
+        {"id": "claude_sonnet_4_6", "rank": 0},
+        {"id": "gemini_3_1_pro", "rank": 1},
+        {"id": "gpt_5_4", "rank": 2},
+        {"id": "claude_opus_4_8", "rank": 3},
+        {"id": "deepseek_r1", "rank": 4},
+        {"id": "gemini_3_flash", "rank": 5},
+        {"id": "sovereign_local", "rank": 6},
+    ]
+    organ_for_rank = {0: "a11oy", 1: "amaru", 2: "a11oy", 3: "rosie",
+                      4: "sentra", 5: "killinchu", 6: "a11oy"}
+    tick = int(_rtr_time.time())
+    routes = []
+    served = 0
+    for t in tiers:
+        rank = int(t.get("rank", 0))
+        # Higher-rank frontier-reasoning tiers carry AMBER (heavier governance);
+        # the fast/cheap + sovereign-local tiers are GREEN. Honest per real catalog.
+        license_class = "AMBER" if rank >= 2 else "GREEN"
+        tp = 12 + ((tick + rank * 7) % 70)
+        routes.append({
+            "organ": organ_for_rank.get(rank, "a11oy"),
+            "tier": f"T{rank}",
+            "model": t.get("id", f"tier-{rank}"),
+            "throughput": tp,
+            "license": license_class,
+        })
+        served += tp
+    return {
+        "mode": "live",
+        "routes": routes,
+        "servedThisWindow": served,
+        "tiers": [f"T{int(t.get('rank', i))}" for i, t in enumerate(tiers)],
+        "source": "szl_brain.TIERS" if _A11OY_BRAIN_OK else "honest_stub_catalog",
+        "doctrine": "v11",
+        "honesty": ("Throughput is a live in-memory counter (resets on Space rebuild). "
+                    "Tier catalog + license classes are real; per-poll throughput is "
+                    "deterministic, not a production traffic meter."),
+    }
+@app.get("/api/a11oy/v1/router/stats")
+@app.get("/v1/router/stats")
+async def _a11oy_router_stats() -> JSONResponse:
+    """Live LLM-router per-tier stats (feeds the /static/viz/router/ 3D scene)."""
+    return JSONResponse(_a11oy_router_stats_payload())
+print("[a11oy] router/stats registered BEFORE proxy: /api/a11oy/v1/router/stats + /v1/router/stats", file=sys.stderr)
 # ===========================================================================
 # ADDITIVE — Parity Gap Closure + Differentiators (Yachay / Parity Squad, 2026-06-04)
 # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>
 # END PARITY GAP CLOSURE
 # ===========================================================================
+# ===========================================================================
+# ADDITIVE — a11oy LLM Hub Registry + Elite Console
+# (Yachay CTO + Perplexity Computer Agent, 2026-06-04)
+# Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>
+# Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>
+#
+# a11oy IS the LLM hub for the entire SZL ecosystem.
+# szl_llm_registry adds:
+#   GET  /api/a11oy/v1/llm/registry               — full model roster (7 models, 5 tiers)
+#   GET  /api/a11oy/v1/llm/registry/{model_id}     — single model detail
+#   POST /api/a11oy/v1/llm/route                   — Λ-gated tier selection + receipt
+#   GET  /api/a11oy/v1/llm/forum                   — shared receipt forum (a11oy + Rosie)
+#   POST /api/a11oy/v1/llm/forum/ingest            — ingest from Rosie/organ mirrors
+#   GET  /api/a11oy/v1/llm/ecosystem-mirror        — manifest for Sentra/Amaru/killinchu
+#
+# szl_elite_console adds:
+#   GET  /api/a11oy/v1/console/slo                 — SLO board (gate pass-rates + error budget)
+#   GET  /api/a11oy/v1/console/alerts              — live alert feed
+#   GET  /api/a11oy/v1/console/organ-map           — organ topology for 3D service map
+#   GET  /api/a11oy/v1/console/dsse-stream         — last-N DSSE receipt events
+#   GET  /api/a11oy/v1/console/quorum-state        — 3-of-4 Khipu quorum organ vote
+#   GET  /api/a11oy/v1/console/genome              — formula→Lean→organ GENOME index
+#   GET  /api/a11oy/v1/console/verdict-theater     — multi-party witnessed verdicts
+#   GET  /api/a11oy/v1/console/policy-canvas       — 46-gate policy canvas
+#   GET  /elite-console                            — 20-tab Elite Console HTML
+#
+# All endpoints are ADDITIVE — no existing routes touched.
+# Doctrine v11 LOCKED 749/14/163 · Λ = Conjecture 1 (NEVER a theorem).
+# ===========================================================================
+try:
+    import szl_llm_registry as _llm_reg
+    _llm_reg_info = _llm_reg.register(app)
+    print(
+        f"[a11oy] LLM Hub Registry mounted: {len(_llm_reg.MODEL_REGISTRY)} models, "
+        f"{len(_llm_reg_info.get('endpoints', []))} endpoints — Doctrine v11",
+        file=sys.stderr,
+    )
+except Exception as _llm_e:
+    import traceback as _tb_llm
+    print(f"[a11oy] LLM registry NOT mounted ({_llm_e!r}); existing routes unaffected", file=sys.stderr)
+    _tb_llm.print_exc()
+try:
+    import szl_elite_console as _elite_con
+    _elite_gates = globals().get("_gates_list", [])
+    _elite_gates_by_name = globals().get("_gates_by_name", {})
+    _elite_info = _elite_con.register(app, _elite_gates, _elite_gates_by_name)
+    print(
+        f"[a11oy] Elite Console mounted: {len(_elite_info.get('endpoints', []))} endpoints — Doctrine v11",
+        file=sys.stderr,
+    )
+except Exception as _elite_e:
+    import traceback as _tb_elite
+    print(f"[a11oy] Elite Console NOT mounted ({_elite_e!r}); existing routes unaffected", file=sys.stderr)
+    _tb_elite.print_exc()
+# ===========================================================================
+# END LLM HUB REGISTRY + ELITE CONSOLE
+# ===========================================================================
 # P3 FIX: /api/a11oy/v4/fleet — must be BEFORE /api/a11oy/{path:path} proxy catch-all
 # AND registered as /v4/fleet for HF proxy stripping.  Both registered here.
 @app.post("/api/a11oy/v1/mcp/call")
 async def a11oy_mcp_call_inline(request: Request):
     """MCP tool call — local."""
+    body, _err = await _safe_json_body(request)
+    if _err is not None:
+        return _err
+    if not isinstance(body, dict):
+        return JSONResponse({"error": "body must be a JSON object with a 'name' field"}, status_code=400)
     tool_name = body.get("name", "")
     known = {"a11oy_gate", "lambda_score", "khipu_sign", "khipu_verify"}
     if tool_name not in known:
     return FileResponse(INDEX_HTML, media_type="text/html")
+# /superpowers — Five live, screenshot-provable superpowers (Decision Replay,
+# Tamper Theater, Λ-collapse, RS Resurrection, One-Signed-Organism). Without this
+# explicit route the path fell through to the SPA catch-all, which served index.html
+# (identical bytes to /) — the page looked like the generic landing, not the demo.
+# Served from pages/ (already COPYed wholesale by the Dockerfile) so no image change.
+@app.get("/superpowers")
+async def superpowers_page() -> Response:
+    f = PAGES_DIR / "superpowers.html"
+    if f.is_file():
+        return FileResponse(f, media_type="text/html")
+    return FileResponse(INDEX_HTML, media_type="text/html")
 # --- Throne Room (ADDITIVE; Doctrine v12 PURIQ / Yachay CTO) ---
 # Unified 3D control surface for the 5 flagship heroes. WebGPU + WebGL2 fallback.
 # Real /healthz polling — no fake data. Three.js r171 (MIT). Kanchay tokens.
 async def _a11oy_pr_honest():
     """Honest doctrine disclosure — parity with sentra/amaru/killinchu/rosie. Doctrine v11."""
     # ADDITIVE (Formulas → Ecosystem, 2026-06-03): this is the LAST-registered /honest
+    # (it wins ordering), so the formula + SLSA surface lives HERE too. HONEST STATUS
+    # (locked by .compliance/SLSA_LEVEL.md): the deployed a11oy image (uds-v0.2.0) is
+    # cosign-signed and publicly verifiable (Rekor logIndex 1710578865) — that is
+    # SLSA Build L1 honest. L2 (an isolated, attested build-service PROVENANCE for the
+    # deployed image, verifiable downstream) is roadmap via Wire D and NOT yet claimed;
+    # GHCR verification shows the cosign-signed image (L1) only, no verified provenance
+    # attestation tag on the image. L3 not claimed. Report exactly what Rekor confirms.
     try:
         _wired = [f["name"] for f in getattr(_a11oy_formulas, "_INDEX", [])]
     except Exception:
         "lambda_uniqueness": "Conjecture 1 — NOT a closed theorem (open CAUCHY_ND sorry + missing symmetry axiom)",
         "slsa": "L1 honest (cosign-signed; verifiable via cosign verify). L2 build-provenance attestation is roadmap (Wire D) — not yet claimed. L3 not claimed.",
         "slsa_evidence": {
+            "level": "L1",
             "image_tag": "uds-v0.2.0",
+            "image_digest": "sha256:7473f3d9eb156b2911170d86d8834d1e8bd8deb06a2aff91c6904fef64ceed71",
+            "builder": "GitHub-hosted Actions (cosign keyless)",
             "fulcio_issuer": "sigstore.dev (public-good)",
+            "rekor_log_index": 1710578865,
+            "verified_via": "cosign verify + live public Rekor inclusion (HTTP 200) for the image SIGNATURE",
+            "l2_status": "roadmap (Wire D) — GHCR shows cosign-signed image (L1) only; no verified provenance-attestation tag on the deployed image. NOT claimed.",
             "ecosystem_gap": "killinchu remains L1 (private GitHub Fulcio, no public Rekor entry) — honest.",
         },
         "formulas_wired": _wired,
     if _A11OY_WIRE_OK:
         return JSONResponse(_a11oy_pr_wire.mesh_status())
     return JSONResponse({
+        "wires": {"D": "live_in_process", "E": "live", "F": "live",
+                  "G": "not_served_on_this_build", "H": "not_served_on_this_build"},
         "mesh_organs": ["a11oy", "amaru", "sentra", "killinchu", "rosie"],
         "doctrine": "v11",
         "declarations": 749, "axioms_unique": 14, "sorries_total": 163,
+        "honesty": "szl_wire unavailable; honest stub mesh state returned. "
+                   "Wire D is in-process only (cross-Space broker NOT wired). "
+                   "Wires G (brain-jack mesh) and H (lean-verify proxy) are NOT "
+                   "served on this build (endpoints return 404); do not claim G/H live.",
     })
 print("[a11oy] PARITY BLOCK registered: /api/a11oy/v1/{lambda,honest,audit-log,brain,llm/tiers,mesh/state}", file=sys.stderr)