series-a: sync Command Center from merged a11oy#1484 (MEASURED inventory, not a Hub write)

routers/series_a_web/app.js

@@ -1,5 +1,264 @@
 (() => {
   "use strict";
+
+  const VIEWS = ["command", "estate", "claims", "policy", "twin", "passport", "audit"];
+  const KEEP = [
+    { id: "SZLHOLDINGS/README", role: "Org card", href: "https://huggingface.co/SZLHOLDINGS" },
+    { id: "SZLHOLDINGS/a11oy", role: "Product Command Center", href: "https://a-11-oy.com" },
+    { id: "SZLHOLDINGS/killinchu", role: "Defense vertical", href: "https://huggingface.co/spaces/SZLHOLDINGS/killinchu" },
+    { id: "SZLHOLDINGS/immune", role: "Safety kernel", href: "https://huggingface.co/spaces/SZLHOLDINGS/immune" },
+    { id: "SZLHOLDINGS/szl-khipu", role: "Model demo", href: "https://huggingface.co/spaces/SZLHOLDINGS/szl-khipu" },
+    { id: "SZLHOLDINGS/szl-atelier", role: "Artifact walk", href: "https://huggingface.co/spaces/SZLHOLDINGS/szl-atelier" },
+    { id: "SZLHOLDINGS/governed-receipt-verifier", role: "Receipt replay", href: "https://a11oy.net" }
+  ];
+  const CLAIMS = [
+    ["CLM-ORG-REPOS", "Public GitHub repositories in org szl-holdings", "98", "LIVE"],
+    ["CLM-HF-MODELS", "Hugging Face models under SZLHOLDINGS", "43", "LIVE"],
+    ["CLM-HF-SPACES", "Hugging Face Spaces under SZLHOLDINGS", "authenticated 7 including README card · unauth author-list 6 · 45 total", "MEASURED"],
+    ["CLM-HF-DATASETS", "Hugging Face datasets under SZLHOLDINGS", "36", "LIVE"],
+    ["CLM-KHIPU-DL", "SZL-Khipu-1.5B downloads", "502", "LIVE"],
+    ["CLM-KHIPU-GGUF-DL", "SZL-Khipu-1.5B-GGUF downloads", "553", "LIVE"],
+    ["CLM-FORGE-DL", "SZL-Forge-1.5B-ReceiptAgent downloads", "493", "LIVE"],
+    ["CLM-NORM-DL", "szl-governed-norm downloads", "209", "SNAPSHOT"],
+    ["CLM-LAMBDA-DL", "szl-lambda-gate downloads", "100", "SNAPSHOT"],
+    ["CLM-TABLES-848", "Database tables (verified 2026-05-12)", "848", "SNAPSHOT"],
+    ["CLM-ENDPOINTS-5524", "API endpoint declarations (verified 2026-05-12)", "5,524", "SNAPSHOT"],
+    ["CLM-TESTS-1220", "Passing platform tests (verified 2026-05-12)", "1,220", "SNAPSHOT"],
+    ["CLM-LAMBDA-MS", "Λ overhead median (verified 2026-05-12)", "≤0.59 ms", "SNAPSHOT"],
+    ["CLM-DOCTRINE", "Doctrine lock", "v11 LOCKED", "LIVE"],
+    ["CLM-LAMBDA", "Λ uniqueness", "Conjecture 1 — not a closed theorem", "LIVE"],
+    ["CLM-LOCKED-8", "Locked-proven formulas", "8 · F1 F4 F7 F11 F12 F18 F19 F22", "LIVE"],
+    ["CLM-LEAN-COUNTS", "lutar-lean pin (declarations / axioms / sorries)", "749 / 14 / 163", "LIVE"],
+    ["CLM-TRUST-CEILING", "Trust ceiling claimed on README", "omitted from /honest", "SNAPSHOT"],
+    ["CLM-SHARE-LINKS", "Four ChatGPT share-link transcripts", "unfetchable", "UNKNOWN"],
+    ["CLM-HF-WRITE", "Hugging Face write from this surface", "not claimed here", "UNAVAILABLE"],
+    ["CLM-BOSS", "boss.technologies identity", "BLOCKED_IDENTITY", "UNKNOWN"]
+  ];
+  const CONTRADICTIONS = [
+    ["CTR-KHIPU-DL", "BLOCKER", "Khipu download count", "Prior ~2.36k vs live 502. Retire 2.36k."],
+    ["CTR-LEXICON", "HIGH", "Naming lexicon drift", "Canonical: a11oy — governed execution fabric. Product a-11-oy.com · proof a11oy.net · never a11oy.com."],
+    ["CTR-STALE-METRICS", "HIGH", "May 12 platform metrics", "848 tables / 5,524 endpoints / 1,220 tests / ≤0.59 ms Λ stay SNAPSHOT."],
+    ["CTR-SPACES", "MEDIUM", "Keep-set listings disagree", "Unauth author-list is 6. Authenticated recapture includes README card. This page does not rewrite the published atlas."],
+    ["CTR-SPRAWL", "MEDIUM", "Repo sprawl vs canonical home", "98 repositories. Bind as packages. Do not mint a new flagship."],
+    ["CTR-TRUST-CEILING", "LOW", "Trust ceiling missing from honest API", "Either emit it from /honest or stop putting it on the first fold."]
+  ];
+  const TOOLS = [
+    ["echo.ping", "NONE", "admitted"],
+    ["receipt.inspect", "NONE", "admitted"],
+    ["policy.propose", "NONE", "operator"],
+    ["aql.query", "NONE", "admitted"],
+    ["fixture.rollback", "REVERSIBLE", "operator"],
+    ["prod.write", "IRREVERSIBLE", "prohibited"],
+    ["shell.exec", "IRREVERSIBLE", "prohibited"]
+  ];
+  const AUDIT = [
+    ["B1", "LIVE", "Canonical home is szl-holdings/a11oy — no 20th repo minted this session"],
+    ["B2", "LIVE", "Lexicon locked: a11oy — governed execution fabric"],
+    ["B3", "LIVE", "Claims ledger exists; May 12 metrics degraded to SNAPSHOT"],
+    ["B4", "LIVE", "Contradiction ledger scored separately from claims"],
+    ["B5", "LIVE", "Vertical slice uses a fixture tool, never a production connector"],
+    ["B6", "LIVE", "Receipts DEMO_SIGNED; DSSE UNAVAILABLE; PENDING_SYNC visible"],
+    ["B7", "MEASURED", "This page does not claim a Hub write. Authenticated recapture includes the README card; unauth author-list omits it."],
+    ["B8", "UNKNOWN", "ChatGPT share-link transcripts UNKNOWN — not fabricated"],
+    ["B9", "MODELED", "Bricklayer IP-risk register populated before policy-enforcement code"],
+    ["B10", "LIVE", "Calibration Plane proposal-only, outside TCB"]
+  ];
+
+  const badgeClass = (state) => {
+    const key = String(state || "").toLowerCase();
+    if (key === "live" || key === "admitted" || key === "measured") return "badge live";
+    if (key === "snapshot" || key === "modeled") return "badge snapshot";
+    if (key === "blocker" || key === "prohibited") return "badge blocker";
+    return "badge unknown";
+  };
+
+  const showView = () => {
+    const raw = (location.hash || "#command").replace(/^#/, "");
+    const view = VIEWS.includes(raw) ? raw : "command";
+    document.querySelectorAll("[data-view]").forEach((el) => {
+      el.hidden = el.getAttribute("data-view") !== view;
+    });
+    document.querySelectorAll("[data-nav]").forEach((a) => {
+      if (a.getAttribute("data-nav") === view) a.setAttribute("aria-current", "page");
+      else a.removeAttribute("aria-current");
+    });
+  };
+  window.addEventListener("hashchange", showView);
+  showView();
+
+  const fillList = (id, rows, render) => {
+    const node = document.getElementById(id);
+    if (!node) return;
+    node.replaceChildren(...rows.map(render));
+  };
+  fillList("keep-list", KEEP, (item) => {
+    const li = document.createElement("li");
+    const a = document.createElement("a");
+    a.className = "id";
+    a.href = item.href;
+    a.textContent = item.id;
+    if (/^https?:/.test(item.href)) {
+      a.target = "_blank";
+      a.rel = "noopener";
+    }
+    const role = document.createElement("span");
+    role.className = "badge live";
+    role.textContent = item.role;
+    li.append(a, role);
+    return li;
+  });
+  const claimsBody = document.getElementById("claims-body");
+  if (claimsBody) {
+    claimsBody.replaceChildren(...CLAIMS.map(([id, statement, value, state]) => {
+      const tr = document.createElement("tr");
+      const cells = [id, statement, value, state];
+      cells.forEach((text, index) => {
+        const td = document.createElement("td");
+        if (index === 3) {
+          const span = document.createElement("span");
+          span.className = badgeClass(state);
+          span.textContent = state;
+          td.append(span);
+        } else {
+          td.textContent = text;
+        }
+        tr.append(td);
+      });
+      return tr;
+    }));
+  }
+  fillList("ctr-list", CONTRADICTIONS, ([id, sev, title, remedy]) => {
+    const li = document.createElement("li");
+    const name = document.createElement("span");
+    name.className = "id";
+    name.textContent = `${id} · ${title}`;
+    const note = document.createElement("span");
+    note.textContent = remedy;
+    note.style.color = "var(--muted)";
+    note.style.flex = "1";
+    const badge = document.createElement("span");
+    badge.className = badgeClass(sev);
+    badge.textContent = sev;
+    li.append(name, note, badge);
+    return li;
+  });
+  fillList("tools-list", TOOLS, ([name, cls, status]) => {
+    const li = document.createElement("li");
+    const id = document.createElement("span");
+    id.className = "id";
+    id.textContent = `${name} · ${cls}`;
+    const badge = document.createElement("span");
+    badge.className = badgeClass(status);
+    badge.textContent = status;
+    li.append(id, badge);
+    return li;
+  });
+  fillList("audit-list", AUDIT, ([id, state, item]) => {
+    const li = document.createElement("li");
+    const idEl = document.createElement("span");
+    idEl.className = "id";
+    idEl.textContent = `${id} · ${item}`;
+    const badge = document.createElement("span");
+    badge.className = badgeClass(state);
+    badge.textContent = state;
+    li.append(idEl, badge);
+    return li;
+  });
+
+  const encoder = new TextEncoder();
+  const sha256 = async (text) => {
+    const digest = await crypto.subtle.digest("SHA-256", encoder.encode(text));
+    return [...new Uint8Array(digest)].map((value) => value.toString(16).padStart(2, "0")).join("");
+  };
+  const hmacHex = async (keyRaw, msg) => {
+    const key = await crypto.subtle.importKey(
+      "raw",
+      encoder.encode(keyRaw),
+      { name: "HMAC", hash: "SHA-256" },
+      false,
+      ["sign"]
+    );
+    const sig = await crypto.subtle.sign("HMAC", key, encoder.encode(msg));
+    return [...new Uint8Array(sig)].map((value) => value.toString(16).padStart(2, "0")).join("");
+  };
+  const getDemoKey = async () => {
+    const existing = localStorage.getItem("a11oy.demo-key");
+    if (existing) return existing;
+    const bytes = crypto.getRandomValues(new Uint8Array(32));
+    const key = [...bytes].map((b) => b.toString(16).padStart(2, "0")).join("");
+    localStorage.setItem("a11oy.demo-key", key);
+    return key;
+  };
+  const FIXTURE = {
+    id: "acc-fixture-v1",
+    version: "1.0.0",
+    expiresAt: "2026-11-27T16:00:00Z",
+    prohibited: ["shell.exec", "prod.write", "unsloth.codex"],
+    tools: {
+      "echo.ping": { allowed: true, cls: "NONE" },
+      "receipt.inspect": { allowed: true, cls: "NONE" },
+      "policy.propose": { allowed: true, cls: "NONE" },
+      "shell.exec": { allowed: false, cls: "IRREVERSIBLE" },
+      "prod.write": { allowed: false, cls: "IRREVERSIBLE" }
+    }
+  };
+  const twinForm = document.getElementById("twin-form");
+  if (twinForm) {
+    twinForm.addEventListener("submit", async (event) => {
+      event.preventDefault();
+      const tool = document.getElementById("twin-tool").value;
+      const arg = document.getElementById("twin-arg").value;
+      const spec = FIXTURE.tools[tool];
+      const expired = Date.parse(FIXTURE.expiresAt) < Date.now();
+      let decision = "ALLOW";
+      let reason = "Constitution admits the fixture.";
+      if (expired) {
+        decision = "DENY";
+        reason = "Constitution expired. Authority that cannot go stale cannot be audited.";
+      } else if (!spec) {
+        decision = "DENY";
+        reason = `Unknown tool ${tool}. Deny by default.`;
+      } else if (!spec.allowed || FIXTURE.prohibited.includes(tool)) {
+        decision = "DENY";
+        reason = `${tool} is prohibited. Not in the trusted computing base of this slice.`;
+      }
+      let payload;
+      if (decision === "ALLOW") {
+        if (tool === "echo.ping") payload = { pong: arg || "ok", ts: new Date().toISOString() };
+        else if (tool === "receipt.inspect") payload = { target: arg, intact: true };
+        else payload = { proposal: arg, executed: false, note: "Propose never execute." };
+      } else {
+        payload = { denied: tool, reason };
+      }
+      const payloadStr = JSON.stringify(payload);
+      const payloadHash = await sha256(payloadStr);
+      const body = JSON.stringify({
+        tool,
+        decision,
+        constitutionId: FIXTURE.id,
+        constitutionVersion: FIXTURE.version,
+        payloadHash
+      });
+      const receiptHash = await sha256(body);
+      const signature = await hmacHex(await getDemoKey(), receiptHash);
+      document.getElementById("twin-result").textContent = JSON.stringify({
+        tool,
+        decision,
+        reason,
+        payload,
+        payloadHash,
+        receiptHash,
+        signature,
+        signatureState: "DEMO_SIGNED",
+        dsseEnvelope: "UNAVAILABLE",
+        flightStatus: "LOCAL",
+        blastRadius: spec && spec.cls === "NONE"
+          ? "In-memory fixture only. No network, no disk, no prod."
+          : "Would touch production. Refused in this slice."
+      }, null, 2);
+    });
+  }
+
   const API = "/api/a11oy/v1/series-a";
   const EXECUTION_TIMEOUT_MS = 135000;
   const DEFAULT_TARGETS = {
@@ -33,16 +292,11 @@
     evaluationRevision += 1;
     resetExecution();
   };
-  const sha256 = async (text) => {
-    const bytes = new TextEncoder().encode(text);
-    const digest = await crypto.subtle.digest("SHA-256", bytes);
-    return [...new Uint8Array(digest)].map(value => value.toString(16).padStart(2, "0")).join("");
-  };
   const request = async (path, options = {}, timeoutMs = 8000) => {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), timeoutMs);
     try {
-      const response = await fetch(API + path, {cache: "no-store", ...options, signal: controller.signal});
+      const response = await fetch(API + path, { cache: "no-store", ...options, signal: controller.signal });
       if (!response.ok) throw new Error(`HTTP ${response.status}`);
       return await response.json();
     } finally { clearTimeout(timer); }
@@ -77,14 +331,14 @@
       } : null;
       document.getElementById("updated").textContent = status.observed_at ? `Observed ${status.observed_at}` : status.detail || "Terminal state reached";
       const list = document.getElementById("receipts");
-      list.replaceChildren(...(receipts.items || []).slice(0, 8).map(item => {
+      list.replaceChildren(...(receipts.items || []).slice(0, 8).map((item) => {
         const li = document.createElement("li");
         li.textContent = `${item.kind} · ${item.receipt_hash.slice(0, 14)}… · ${item.envelope.signature_status}`;
         return li;
       }));
       if (!list.children.length) list.innerHTML = "<li>OBSERVED · no receipts yet</li>";
     } catch (error) {
-      ["estate", "trust", "signer"].forEach(key => set(key, error.name === "AbortError" ? "TIMED_OUT" : "UNAVAILABLE"));
+      ["estate", "trust", "signer"].forEach((key) => set(key, error.name === "AbortError" ? "TIMED_OUT" : "UNAVAILABLE"));
       document.getElementById("updated").textContent = error.name === "AbortError" ? "Timed out after 8 seconds" : String(error.message || error);
     }
   };
@@ -98,7 +352,7 @@
       }
       const evaluated = await request("/passports/evaluate", {
         method: "POST",
-        headers: {"content-type": "application/json"},
+        headers: { "content-type": "application/json" },
         body: JSON.stringify({
           principal_id: "series-a-ui",
           action: {
@@ -107,7 +361,7 @@
             impact: "MODERATE",
             irreversible: false
           },
-          evidence: [{...currentEvidence}],
+          evidence: [{ ...currentEvidence }],
           expected_if_withheld: "Current estate observation remains unchanged",
           expected_if_acted: "A bounded governed estate refresh completes or fails closed"
         })
@@ -121,8 +375,8 @@
       }
       const value = await request("/passports/execute", {
         method: "POST",
-        headers: {"content-type": "application/json"},
-        body: JSON.stringify({passport_digest: evaluated.passport_digest})
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ passport_digest: evaluated.passport_digest })
       }, EXECUTION_TIMEOUT_MS);
       if (value.outcome?.status !== "SUCCEEDED") {
         throw new Error(
@@ -160,14 +414,14 @@
     });
     const evidence = (
       selectedLabel === "OBSERVED" && currentEvidence
-    ) ? [{...currentEvidence}] : [{
+    ) ? [{ ...currentEvidence }] : [{
       evidence_id: "ui-unverified",
       label: "UNKNOWN",
       content_digest: await sha256(evidenceStatement)
     }];
     const body = {
       principal_id: "series-a-ui",
-      action: {type: form.get("type"), target: form.get("target"), impact: "MODERATE", irreversible: false},
+      action: { type: form.get("type"), target: form.get("target"), impact: "MODERATE", irreversible: false },
       evidence,
       expected_if_withheld: "Current state persists",
       expected_if_acted: "Bounded action completes or fails closed"
@@ -175,12 +429,12 @@
     const output = document.getElementById("passport-result");
     output.textContent = "EVALUATING";
     try {
-      const value = await request("/passports/evaluate", {method: "POST", headers: {"content-type": "application/json"}, body: JSON.stringify(body)});
+      const value = await request("/passports/evaluate", { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(body) });
       if (revision !== evaluationRevision) {
         output.textContent = "STALE · form changed before evaluation completed";
         return;
       }
-      output.textContent = JSON.stringify({decision: value.passport.decision, reason_codes: value.passport.reason_codes, passport_digest: value.passport_digest, signature_status: value.decision_receipt.envelope.signature_status}, null, 2);
+      output.textContent = JSON.stringify({ decision: value.passport.decision, reason_codes: value.passport.reason_codes, passport_digest: value.passport_digest, signature_status: value.decision_receipt.envelope.signature_status }, null, 2);
       if (value.passport.decision === "ALLOW") {
         executableDigest = value.passport_digest;
         executeButton.disabled = false;
@@ -209,9 +463,9 @@
         const value = await request(
           `/passports/outcomes/${encodeURIComponent(passportDigest)}`
         );
-        return {outcome: value.outcome, receipt: value.outcome_receipt};
+        return { outcome: value.outcome, receipt: value.outcome_receipt };
       } catch {}
-      await new Promise(resolve => setTimeout(resolve, 2000));
+      await new Promise((resolve) => setTimeout(resolve, 2000));
     }
     return null;
   };
@@ -224,8 +478,8 @@
     try {
       const value = await request("/passports/execute", {
         method: "POST",
-        headers: {"content-type": "application/json"},
-        body: JSON.stringify({passport_digest: passportDigest})
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ passport_digest: passportDigest })
       }, EXECUTION_TIMEOUT_MS);
       renderOutcome(value.outcome, value.outcome_receipt);
     } catch (error) {
@@ -251,7 +505,7 @@
   };
   if ("EventSource" in window) {
     const source = new EventSource(API + "/events");
-    EVENT_KINDS.forEach(kind => source.addEventListener(kind, appendEvent));
+    EVENT_KINDS.forEach((kind) => source.addEventListener(kind, appendEvent));
     source.addEventListener("open", () => {
       if (eventRail.firstElementChild?.textContent === "CONNECTING") {
         eventRail.firstElementChild.textContent = "CONNECTED · waiting for governed events";

routers/series_a_web/index.html

@@ -3,56 +3,163 @@
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width,initial-scale=1">
-  <title>A11oy Series-A Live Control Plane</title>
+  <meta name="theme-color" content="#080c14">
+  <meta name="color-scheme" content="dark">
+  <title>a11oy Series-A Command Center</title>
+  <meta name="description" content="Control before action. Evidence after. Series-A command center on a-11-oy.com — keep-7 Hub estate, claims ledger, fixture constitution, signed passports. Proof lives at a11oy.net.">
+  <link rel="canonical" href="https://a-11-oy.com/series-a">
   <link rel="stylesheet" href="/series-a/styles.css?v=__STYLE_ASSET_DIGEST__">
 </head>
 <body>
-<a class="skip" href="#main">Skip to control plane</a>
-<header>
-  <p class="eyebrow">A11OY · ACTION ASSURANCE</p>
-  <h1>Series‑A Live Control Plane</h1>
-  <p>Current estate truth, counterfactual action passports, signed receipts, and one-attempt execution—observed, not assumed.</p>
+<a class="skip" href="#main">Skip to command center</a>
+<header class="topbar">
+  <div class="wrap nav">
+    <a class="wordmark" href="https://a-11-oy.com/">
+      <span class="glyph" aria-hidden="true">Λ</span>
+      <span class="scope"><span class="scope-name">A11OY</span><span class="scope-sep">/</span><span class="scope-role">SERIES-A</span></span>
+    </a>
+    <div class="nav-chips">
+      <span class="chip live"><span class="dot"></span>PRODUCT</span>
+      <span class="chip honesty"><span class="dot"></span>DEMO_SIGNED · fixture</span>
+    </div>
+    <nav class="tabs" aria-label="Command views">
+      <a href="#command" data-nav="command" aria-current="page">Command</a>
+      <a href="#estate" data-nav="estate">Estate</a>
+      <a href="#claims" data-nav="claims">Claims</a>
+      <a href="#policy" data-nav="policy">Policy</a>
+      <a href="#twin" data-nav="twin">Twin</a>
+      <a href="#passport" data-nav="passport">Passport</a>
+      <a href="#audit" data-nav="audit">Audit</a>
+    </nav>
+    <span class="origin-switch" aria-label="Origins">
+      <a class="origin-product" href="https://a-11-oy.com/" aria-current="true">Product</a>
+      <span class="origin-sep" aria-hidden="true">|</span>
+      <a href="https://a11oy.net/" target="_blank" rel="noopener">Proof ↗</a>
+    </span>
+  </div>
 </header>
+
 <main id="main" tabindex="-1">
-  <section class="toolbar" aria-label="Control plane actions">
+  <section class="toolbar wrap" aria-label="Live observation">
     <button id="refresh" type="button">Run governed refresh</button>
     <span id="updated" aria-live="polite">Not observed yet</span>
   </section>
-  <section class="grid" id="cards" aria-label="Live status">
+
+  <section class="grid wrap" id="cards" aria-label="Live status">
     <article><h2>Estate</h2><strong data-key="estate">CHECKING</strong><p>Signed current observation.</p></article>
     <article><h2>GitHub repos</h2><strong data-key="repos">—</strong><p>Complete paginated census.</p></article>
     <article><h2>Open PRs</h2><strong data-key="prs">—</strong><p>Current public queue.</p></article>
-    <article><h2>HF Spaces</h2><strong data-key="spaces">—</strong><p>One canonical A11oy required.</p></article>
+    <article><h2>HF Spaces</h2><strong data-key="spaces">—</strong><p>Org census from signed observation.</p></article>
     <article><h2>Models</h2><strong data-key="models">—</strong><p>Official Hub listing.</p></article>
     <article><h2>Datasets</h2><strong data-key="datasets">—</strong><p>Official Hub listing.</p></article>
     <article><h2>Trust factor</h2><strong data-key="trust">CHECKING</strong><p>Derived from signed local decisions.</p></article>
     <article><h2>Receipt signer</h2><strong data-key="signer">CHECKING</strong><p>Persistent P‑256 preferred.</p></article>
   </section>
-  <section class="panel">
-    <h2>Counterfactual Action Passport</h2>
-    <form id="passport">
-      <label>Action
-        <select name="type"><option value="estate.refresh">Refresh estate truth</option><option value="probe.public_surface">Probe public surface</option></select>
+
+  <section class="view wrap" data-view="command">
+    <p class="eyebrow">Ninety seconds · Series‑A Live Control Plane</p>
+    <h1>Control before action. <span class="muted">Evidence after.</span></h1>
+    <p class="lede">Operators, security, and compliance who cannot take a model’s word for what it did. Four primitives sit in the path: Capability Constitution, Assurance Query Language, Operational Twin, Policy-to-Evidence Coverage Graph.</p>
+    <dl class="facts">
+      <div><dt>What is live</dt><dd>This origin is the product. Proof is a11oy.net. Receipts on the Twin tab from the fixture are DEMO_SIGNED. Passports below are the live Series-A controller. This page does not write the Hub and does not rewrite the published atlas keep-set.</dd></div>
+      <div><dt>OSS vs product</dt><dd>Source github.com/szl-holdings/a11oy (Apache-2.0). Hugging Face is the artifact registry, not the front door.</dd></div>
+      <div><dt>Why now</dt><dd>Agents are being handed tools. Ungoverned tool authority is the incident. Governance has to live in the path, not in a slide.</dd></div>
+    </dl>
+  </section>
+
+  <section class="view wrap" data-view="estate" hidden>
+    <p class="eyebrow">Hub inventory · MEASURED</p>
+    <h1>Operator keep-set. This page does not write the Hub.</h1>
+    <p class="lede">Product lives here. Proof lives at a11oy.net. Archive means pause and private — never delete. Authenticated recapture includes the org README card. Unauthenticated author-list omits README. This surface does not rewrite the published atlas keep-set.</p>
+    <ul class="keep" id="keep-list"></ul>
+    <p class="bound">amaru / sentra / vessels / rosie do not exist as Spaces. Collection: canonical-public-spaces-7. Live totals come from the signed observation above, not from a Hub write on this page.</p>
+  </section>
+
+  <section class="view wrap" data-view="claims" hidden>
+    <p class="eyebrow">P0 · Claims ledger</p>
+    <h1>Every public number has a home.</h1>
+    <p class="lede">Marketing copy reads this ledger. Default is UNKNOWN. Stale May 12 metrics stay SNAPSHOT.</p>
+    <div class="table-wrap">
+      <table class="ledger">
+        <thead><tr><th>ID</th><th>Statement</th><th>Value</th><th>State</th></tr></thead>
+        <tbody id="claims-body"></tbody>
+      </table>
+    </div>
+    <h2 class="sub">Contradictions</h2>
+    <ul class="keep" id="ctr-list"></ul>
+  </section>
+
+  <section class="view wrap" data-view="policy" hidden>
+    <p class="eyebrow">acc-fixture-v1 · expires 2026-11-27</p>
+    <h1>Authority that cannot expire cannot be audited.</h1>
+    <p class="lede">Two-person mode. Writes per run: 0. Prohibited: shell.exec, prod.write, unsloth.codex. This constitution is the fixture slice, not a production MCP gateway.</p>
+    <ul class="keep" id="tools-list"></ul>
+  </section>
+
+  <section class="view wrap" data-view="twin" hidden>
+    <p class="eyebrow">Operational Twin · fixture</p>
+    <h1>Preview the blast radius. Then maybe act.</h1>
+    <p class="lede">Safe fixture only. Signatures here are DEMO_SIGNED HMAC in the browser. DSSE is UNAVAILABLE. The live passport on the next tab is the product controller.</p>
+    <form id="twin-form" class="twin">
+      <label>Tool
+        <select id="twin-tool" name="tool">
+          <option value="echo.ping">echo.ping · NONE · admitted</option>
+          <option value="receipt.inspect">receipt.inspect · NONE · admitted</option>
+          <option value="policy.propose">policy.propose · NONE · operator</option>
+          <option value="shell.exec">shell.exec · IRREVERSIBLE · prohibited</option>
+          <option value="prod.write">prod.write · IRREVERSIBLE · prohibited</option>
+        </select>
       </label>
-      <label>Target <input name="target" value="szl://estate/current" required></label>
-      <label>Evidence label <select name="label"><option value="OBSERVED">OBSERVED · server-signed snapshot</option><option value="UNKNOWN">UNKNOWN · fail-closed demo</option></select></label>
-      <button type="submit">Evaluate passport</button>
-      <button id="execute" type="button" disabled>Execute authorized action</button>
+      <label>Ping / proposal <input id="twin-arg" name="arg" value="fabric-ok"></label>
+      <button type="submit">Execute fixture</button>
     </form>
-    <pre id="passport-result" aria-live="polite">No passport evaluated.</pre>
-    <pre id="execution-result" aria-live="polite">No authorized execution attempted.</pre>
-    <p>Execution is bounded to one attempt and is enabled only for an ALLOW passport.</p>
+    <pre id="twin-result" aria-live="polite">No fixture receipt yet.</pre>
   </section>
-  <section class="panel">
-    <h2>Live event rail</h2>
-    <ol id="events" aria-live="polite"><li>CONNECTING</li></ol>
+
+  <section class="view wrap" data-view="passport" hidden>
+    <div class="panel">
+      <h2>Counterfactual Action Passport</h2>
+      <p>Live product controller. GET never mutates. Refresh, evaluate, and execute are explicit POSTs. One attempt. Fail closed.</p>
+      <form id="passport">
+        <label>Action
+          <select name="type"><option value="estate.refresh">Refresh estate truth</option><option value="probe.public_surface">Probe public surface</option></select>
+        </label>
+        <label>Target <input name="target" value="szl://estate/current" required></label>
+        <label>Evidence label <select name="label"><option value="OBSERVED">OBSERVED · server-signed snapshot</option><option value="UNKNOWN">UNKNOWN · fail-closed demo</option></select></label>
+        <button type="submit">Evaluate passport</button>
+        <button id="execute" type="button" disabled>Execute authorized action</button>
+      </form>
+      <pre id="passport-result" aria-live="polite">No passport evaluated.</pre>
+      <pre id="execution-result" aria-live="polite">No authorized execution attempted.</pre>
+      <p>Execution is bounded to one attempt and is enabled only for an ALLOW passport.</p>
+    </div>
+    <div class="panel">
+      <h2>Live event rail</h2>
+      <ol id="events" aria-live="polite"><li>CONNECTING</li></ol>
+    </div>
+    <div class="panel">
+      <h2>Latest signed receipts</h2>
+      <ol id="receipts"><li>CHECKING</li></ol>
+    </div>
   </section>
-  <section class="panel">
-    <h2>Latest signed receipts</h2>
-    <ol id="receipts"><li>CHECKING</li></ol>
+
+  <section class="view wrap" data-view="audit" hidden>
+    <p class="eyebrow">FRONTIER_BASELINE_AUDIT</p>
+    <h1>Inventory before abstraction.</h1>
+    <ul class="keep" id="audit-list"></ul>
   </section>
 </main>
-<footer>MEASURED · REPORTED · MODELED · UNKNOWN · UNAVAILABLE · no private reasoning collected</footer>
+<footer>
+  <div class="wrap footer">
+    <p>MEASURED · REPORTED · MODELED · UNKNOWN · UNAVAILABLE · no private reasoning collected. Never a11oy.com.</p>
+    <div class="footer-links">
+      <a href="https://a-11-oy.com/console">Console</a>
+      <a href="https://a-11-oy.com/api/a11oy/v1/honest">/honest</a>
+      <a href="https://a11oy.net/estate/">Proof estate</a>
+      <a href="https://github.com/szl-holdings/a11oy">Source</a>
+    </div>
+  </div>
+</footer>
 <script src="/series-a/app.js?v=__APP_ASSET_DIGEST__" defer></script>
 </body>
 </html>

routers/series_a_web/styles.css

@@ -1 +1,91 @@
-:root{color-scheme:dark;--bg:#07101e;--card:#0d192a;--line:#24344d;--text:#eef5ff;--muted:#9db0c9;--accent:#83d6ff;--good:#7ce7ba}*{box-sizing:border-box}body{margin:0;background:radial-gradient(circle at top,#13223a 0,#07101e 42%);color:var(--text);font:16px/1.5 system-ui,-apple-system,Segoe UI,sans-serif}.skip{position:absolute;left:-9999px}.skip:focus{left:1rem;top:1rem;background:white;color:black;padding:.7rem;z-index:5}header,main,footer{width:min(1180px,calc(100% - 2rem));margin:auto}header{padding:4rem 0 2rem}.eyebrow{color:var(--accent);letter-spacing:.16em;font-weight:800}h1{font-size:clamp(2.2rem,6vw,5rem);line-height:1;margin:.3rem 0}header>p:last-child{max-width:760px;color:var(--muted);font-size:1.12rem}.toolbar{display:flex;gap:1rem;align-items:center;justify-content:space-between;margin-bottom:1rem}.grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:1rem}.grid article,.panel{background:linear-gradient(180deg,rgba(18,34,57,.96),rgba(10,22,38,.96));border:1px solid var(--line);border-radius:18px;padding:1.2rem;box-shadow:0 16px 60px rgba(0,0,0,.25)}.grid h2{font-size:.92rem;color:var(--muted);margin:0 0 .5rem}.grid strong{font-size:1.7rem;color:var(--good)}.grid p,.panel>p{color:var(--muted);margin:.4rem 0 0}.panel{margin-top:1rem}form{display:grid;grid-template-columns:1fr 2fr 1fr auto auto;gap:.8rem;align-items:end}label{display:grid;gap:.35rem;color:var(--muted)}input,select,button{font:inherit;border-radius:10px;border:1px solid var(--line);padding:.7rem .8rem;background:#071321;color:var(--text)}button{background:#dff5ff;color:#06101b;font-weight:800;cursor:pointer}button:disabled{opacity:.55}pre{white-space:pre-wrap;overflow-wrap:anywhere;background:#06101b;border-radius:12px;padding:1rem}#events,#receipts{display:grid;gap:.55rem;padding-left:1.4rem}#events li,#receipts li{overflow-wrap:anywhere}footer{padding:2rem 0 4rem;color:var(--muted)}@media(max-width:900px){.grid{grid-template-columns:repeat(2,minmax(0,1fr))}form{grid-template-columns:1fr 1fr}}@media(max-width:560px){header{padding-top:2.5rem}.grid,form{grid-template-columns:1fr}.toolbar{align-items:flex-start;flex-direction:column}.grid article{min-height:130px}}
+:root{
+  color-scheme:dark;
+  --void:#080c14;
+  --deep:#0a1019;
+  --surface:#0e1626;
+  --card:#121d30;
+  --border:#1c2942;
+  --ink:#eef4fb;
+  --muted:#aebccf;
+  --ghost:#7f90a6;
+  --proof:#3af4c8;
+  --lattice:#5b8dee;
+  --gold:#d7b96b;
+  --down:#e8746e;
+  --sans:"Space Grotesk",-apple-system,BlinkMacSystemFont,"Segoe UI",Inter,sans-serif;
+  --mono:"JetBrains Mono","SF Mono",ui-monospace,Menlo,Consolas,monospace;
+}
+*{box-sizing:border-box}
+html,body{margin:0;min-height:100%;background:var(--void);color:var(--ink);font:16px/1.5 var(--sans)}
+a{color:var(--proof);text-decoration:none}
+a:hover{text-decoration:underline}
+.skip{position:absolute;left:-9999px}
+.skip:focus{left:1rem;top:1rem;background:var(--proof);color:var(--void);padding:.7rem;z-index:9}
+.wrap{width:min(1180px,calc(100% - 2rem));margin-inline:auto}
+.topbar{position:sticky;top:0;z-index:10;border-bottom:1px solid var(--border);background:rgba(8,12,20,.92);backdrop-filter:blur(10px)}
+.nav{display:flex;flex-wrap:wrap;gap:.75rem 1rem;align-items:center;padding:.75rem 0}
+.wordmark{display:inline-flex;align-items:center;gap:.6rem;color:var(--ink);font-weight:700}
+.glyph{width:26px;height:26px;border-radius:7px;border:1px solid var(--border);display:grid;place-items:center;color:var(--ghost);font-family:var(--mono)}
+.scope-role{font-family:var(--mono);font-size:10.5px;letter-spacing:.16em;color:var(--ghost)}
+.scope-sep{color:var(--ghost);padding:0 .35rem}
+.nav-chips{display:flex;gap:.5rem;flex-wrap:wrap}
+.chip{display:inline-flex;align-items:center;gap:7px;padding:5px 11px;border-radius:999px;font:600 11px/1 var(--mono);letter-spacing:.08em;text-transform:uppercase;border:1px solid var(--border);color:var(--ghost)}
+.chip .dot{width:7px;height:7px;border-radius:50%;background:currentColor}
+.chip.live{color:var(--proof);border-color:rgba(58,244,200,.32)}
+.chip.honesty{color:var(--ghost)}
+.tabs{display:flex;gap:.2rem;flex-wrap:wrap;flex:1}
+.tabs a{color:var(--muted);padding:.55rem .7rem;border-radius:8px;min-height:44px;display:inline-flex;align-items:center}
+.tabs a[aria-current="page"]{color:var(--ink);background:var(--card)}
+.origin-switch{display:inline-flex;align-items:center;gap:7px;padding-left:12px;border-left:1px solid var(--border);font-family:var(--mono);font-size:12px}
+.origin-product{color:var(--proof);font-weight:700}
+.origin-sep{color:var(--ghost)}
+.toolbar{display:flex;gap:1rem;align-items:center;justify-content:space-between;margin:1.2rem auto}
+.grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:1rem}
+.grid article,.panel{background:linear-gradient(180deg,rgba(18,34,57,.96),rgba(10,22,38,.96));border:1px solid var(--border);border-radius:16px;padding:1.1rem}
+.grid h2,.panel h2{font-size:.92rem;color:var(--muted);margin:0 0 .5rem;font-weight:600}
+.grid strong{font-size:1.55rem;color:var(--proof);font-variant-numeric:tabular-nums}
+.grid p,.panel>p,.lede,.bound,.muted{color:var(--muted)}
+.view{padding:1.5rem 0 3rem}
+.view[hidden]{display:none!important}
+.view[data-view="passport"]:not([hidden]){display:grid;gap:1rem}
+.eyebrow{font:600 11px/1 var(--mono);letter-spacing:.16em;text-transform:uppercase;color:var(--ghost);margin:0 0 .6rem}
+h1{font-size:clamp(2rem,5vw,3.4rem);line-height:1.08;margin:.2rem 0 1rem;letter-spacing:-.02em}
+.lede{max-width:44rem;font-size:1.05rem}
+.facts{display:grid;gap:1.1rem;margin:2rem 0 0}
+.facts dt{font:600 11px/1 var(--mono);letter-spacing:.12em;text-transform:uppercase;color:var(--ghost)}
+.facts dd{margin:.4rem 0 0}
+.keep{list-style:none;padding:0;margin:1.2rem 0;display:grid;gap:.55rem}
+.keep li{border:1px solid var(--border);border-radius:12px;padding:.85rem 1rem;display:flex;justify-content:space-between;gap:1rem;flex-wrap:wrap;align-items:center;min-height:44px}
+.keep .id{font-family:var(--mono);font-size:.92rem}
+.badge{font:600 10px/1 var(--mono);letter-spacing:.08em;text-transform:uppercase;border:1px solid var(--border);padding:.3rem .45rem;border-radius:4px;color:var(--ghost)}
+.badge.live{color:var(--proof);border-color:rgba(58,244,200,.3)}
+.badge.snapshot{color:var(--gold);border-color:rgba(215,185,107,.35)}
+.badge.unknown{color:var(--ghost)}
+.badge.blocker{color:var(--down);border-color:rgba(232,116,110,.4)}
+.table-wrap{overflow-x:auto;border:1px solid var(--border);border-radius:14px}
+.ledger{width:100%;min-width:640px;border-collapse:collapse;font-size:.92rem}
+.ledger th{text-align:left;font:600 11px/1 var(--mono);letter-spacing:.08em;text-transform:uppercase;color:var(--ghost);padding:.8rem;background:var(--card)}
+.ledger td{padding:.8rem;border-top:1px solid var(--border);vertical-align:top}
+.sub{margin:2rem 0 .8rem;font-size:1.2rem}
+.twin,.panel form{display:grid;grid-template-columns:1fr 2fr auto;gap:.8rem;align-items:end}
+label{display:grid;gap:.35rem;color:var(--muted);font-size:.92rem}
+input,select,button{font:inherit;border-radius:10px;border:1px solid var(--border);padding:.75rem .85rem;background:var(--deep);color:var(--ink);min-height:44px}
+button{background:var(--proof);color:var(--void);font-weight:800;cursor:pointer}
+button:disabled{opacity:.55;cursor:not-allowed}
+pre{white-space:pre-wrap;overflow-wrap:anywhere;background:var(--deep);border-radius:12px;padding:1rem;border:1px solid var(--border);font:13px/1.45 var(--mono)}
+#events,#receipts{display:grid;gap:.55rem;padding-left:1.4rem}
+#events li,#receipts li{overflow-wrap:anywhere}
+.footer{display:flex;justify-content:space-between;gap:1rem;flex-wrap:wrap;padding:2rem 0 4rem;color:var(--muted);font-size:.9rem}
+.footer-links{display:flex;gap:1rem;flex-wrap:wrap}
+@media(max-width:900px){
+  .grid{grid-template-columns:repeat(2,minmax(0,1fr))}
+  .twin,.panel form{grid-template-columns:1fr}
+  .origin-switch{border-left:0;padding-left:0;width:100%}
+}
+@media(max-width:560px){
+  .grid{grid-template-columns:1fr}
+  .tabs a{flex:1;justify-content:center}
+}
+@media (prefers-reduced-motion:reduce){
+  *{animation:none!important;transition:none!important}
+}