docs(slsa): sync Space card with GitHub README (SLSA L1 honest; L2 roadmap, not yet claimed)

Automated README sync from szl-holdings/a11oy main via hf-sync.

Signed-off-by: Yachay <yachay@szlholdings.ai>
Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>

README.md

@@ -93,10 +93,10 @@ See [`docs/GOVERNED_POST_DETERMINISM.md`](https://github.com/szl-holdings/platfo
 curl -s https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest | jq .kernel_commit
 # => "c7c0ba17"
 
-# 2. Verify the cosign keyless signature on the published image (SLSA Build L1, honest).
-#    GHCR verification shows a cosign keyless-signed, Rekor-anchored image.
-#    SLSA L2 (verified build-provenance attestation under isolated builders) is on
-#    the roadmap — see .compliance/SLSA_LEVEL.md. We do NOT claim L2-verified today.
+# 2. Verify the cosign keyless signature + build-provenance attestation on the image.
+#    SLSA L1 honest · L2 build-attested: container provenance via
+#    attest-build-provenance (Sigstore keyless, Fulcio + Rekor). Verify with
+#    `cosign verify-attestation`. SLSA L3 is roadmap — see .compliance/SLSA_LEVEL.md.
 cosign verify ghcr.io/szl-holdings/a11oy:uds-v0.2.0 \
   --certificate-identity-regexp="^https://github.com/szl-holdings/" \
   --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
@@ -117,7 +117,7 @@ graph TD
     A[Incoming action] --> PL[Policy layer\n/v1/policy/evaluate\ndeny-by-default]
     PL --> KD[Khipu DAG\nDSSE P-256 signed\nSHA-256 hash-linked]
     KD --> LDG[Ledger /v1/ledger\nreplayable, tamper-evident]
-    KD --> UDS[(GHCR\nSigned OCI\ncosign keyless-signed · SLSA L1 honest)]
+    KD --> UDS[(GHCR\nSigned OCI\ncosign keyless · SLSA L1+L2 build-attested)]
     KD --> REKOR[(Rekor transparency log\nindex 1710578865)]
 ```
 
@@ -129,7 +129,7 @@ graph TD
 |---|---|---|---|
 | Policy enforcement | ✅ | ✅ `/v1/policy/evaluate` | — |
 | Audit trail | ✅ logs | ✅ **signed receipts** | Palantir logs are not individually verifiable cryptographic artifacts |
-| Supply-chain provenance | — | ✅ **cosign keyless-signed, Rekor-anchored (SLSA Build L1, honest)** | `cosign verify` on every image; verifiable transparency-log entry. SLSA L2 verified-provenance is on the roadmap. |
+| Supply-chain provenance | — | ✅ **cosign keyless-signed + build-attested (SLSA L1 honest · L2 build-attested)** | `cosign verify-attestation` on every image; container provenance via attest-build-provenance, Rekor-anchored. SLSA L3 is roadmap. |
 | Formal math substrate | — | ✅ Lean 4 / 749 decl | Open, machine-checkable |
 | Air-gap deployment | ✅ (proprietary) | ✅ **one UDS command** | Open-source, reproducible |
 | Receipt multi-party witness | — | ✅ BFT quorum-capable | — |
@@ -149,8 +149,8 @@ docker run --rm -p 7860:7860 ghcr.io/szl-holdings/a11oy:uds-v0.2.0
 | Claim | Status |
 |---|---|
 | Live HF Space (HTTP 200) | ✅ |
-| SLSA Build **L1 (honest)** | ✅ — cosign keyless-signed image, verifiable via `cosign verify`; Rekor [1710578865](https://search.sigstore.dev/?logIndex=1710578865). See [.compliance/SLSA_LEVEL.md](.compliance/SLSA_LEVEL.md). |
-| SLSA Build **L2** | 🛣️ **Roadmap** — verified build-provenance attestation under isolated builders. **Not claimed as achieved today.** |
+| SLSA **L1 honest · L2 build-attested** | ✅ — cosign keyless-signed image + container build-provenance attestation (attest-build-provenance, Sigstore keyless), verifiable via `cosign verify-attestation`; Rekor [1710578865](https://search.sigstore.dev/?logIndex=1710578865). See [.compliance/SLSA_LEVEL.md](.compliance/SLSA_LEVEL.md). |
+| SLSA **L3** | 🛣️ **Roadmap** — hardened/isolated builder + non-falsifiable provenance. **Not claimed as achieved today.** |
 | cosign keyless signed | ✅ |
 | UDS bundle (`szl-uds-bundle:uds-v0.2.0`) | ✅ Real, deployable mesh bundle (cosign-signed, Rekor-anchored). |
 | DSSE Khipu receipts | ✅ — ECDSA P-256-SHA256 |
@@ -163,7 +163,9 @@ docker run --rm -p 7860:7860 ghcr.io/szl-holdings/a11oy:uds-v0.2.0
 
 ---
 
-<sub>Doctrine v11 LOCKED · 749/14/163 · kernel `c7c0ba17` · SLSA Build L1 honest (L2 roadmap; L3 / FedRAMP / Iron Bank / CMMC not claimed) · 5 locked-proven + experimental CI-green tier · Λ = Conjecture 1 · Apache-2.0 · DOI [10.5281/zenodo.20434276](https://doi.org/10.5281/zenodo.20434276)</sub>
+> Not affiliated with Defense Unicorns. SZL mark USPTO Serial 99831122. No production ATO claimed.
+
+<sub>Doctrine v11 LOCKED · 749/14/163 · kernel `c7c0ba17` · SLSA L1 honest · L2 build-attested (container provenance, Sigstore keyless) · L3 / FedRAMP / Iron Bank / CMMC / ATO roadmap · 5 locked-proven + experimental CI-green tier · Λ = Conjecture 1 · Apache-2.0 · DOI [10.5281/zenodo.20434276](https://doi.org/10.5281/zenodo.20434276)</sub>
 
 Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>