deploy(hf): sync szl-holdings/a11oy@329fb9acb0e9bdf253e9f598f738566383a75618 derived COPY set

Reusable Dockerfile-COPY-derived deploy from szl-holdings/a11oy 329fb9acb0e9bdf253e9f598f738566383a75618.
Files: 1374 Pruned: 0
Derived from Dockerfile COPY sources (NO hand-maintained allowlist).

Signed-off-by: SZL Holdings <noreply@szlholdings.ai>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

a11oy_command_center.py

@@ -13,6 +13,7 @@ API-schema, evidence-source, and canonical-number contracts are not release-read
 Additive routes:
   GET+HEAD /command
   GET+HEAD /command-v2
+  GET+HEAD /killinchu
   GET+HEAD /command/constellation
   GET+HEAD /command/brain
   GET+HEAD /command/ops
@@ -30,6 +31,8 @@ from typing import List
 MOUNTS = ("/command",)
 SPECIFIC = (
     ("/command-v2", "command-v2.html"),
+    ("/killinchu", "killinchu.html"),
+    ("/killinchu/", "killinchu.html"),
     ("/command/constellation", "constellation.html"),
     ("/command/brain", "second-brain.html"),
     ("/command/ops", "operator-pane.html"),
@@ -156,8 +159,9 @@ def register(app, ns: str = "a11oy") -> List[str]:
     _add(CATCHALL, _spa, ["GET", "HEAD"])
     _front_move(app, [path for path, _name in SPECIFIC] + list(MOUNTS))
     registered.append(
-        "command-center reviewed-public on /command (dormant elite excluded); /command-v2 additive; "
-        "constellation/brain/ops beat catch-all; /console and host-root /brain untouched"
+        "command-center reviewed-public on /command; /command-v2 additive; "
+        "/killinchu on-origin; constellation/brain/ops beat catch-all; "
+        "/console and host-root /brain untouched"
     )
     return registered
 
@@ -204,6 +208,12 @@ def _selftest() -> None:
         assert "googleapis" not in response.text
         assert "jsdelivr" not in response.text
 
+    if _page("killinchu.html").is_file():
+        response = client.get("/killinchu")
+        assert response.status_code == 200
+        assert "Killinchu" in response.text
+        assert "huggingface.co/spaces" not in response.text
+
     if _page("constellation.html").is_file():
         for path in ("/command/constellation", "/constellation"):
             body = client.get(path).text
@@ -228,7 +238,7 @@ def _selftest() -> None:
     assert client.get("/console").status_code == 200
     print(
         "a11oy_command_center: ALL OK "
-        "(v2 additive; exact pages beat catch-all; /console and /brain untouched)"
+        "(v2 additive; killinchu on-origin; exact pages beat catch-all)"
     )
 
 

a11oy_decision_integrity.py

@@ -65,6 +65,39 @@ def _read_json(path: Path) -> Any:
     return json.loads(path.read_text(encoding="utf-8"))
 
 
+def _vessels_ais_standards_pack() -> dict[str, Any] | None:
+    path = VERTICALS_DIR / "vessels" / "ais_standards.json"
+    if not path.is_file():
+        return None
+    packed = _read_json(path)
+    return packed if isinstance(packed, dict) else None
+
+
+def _vessels_ais_standards_echo(pack: dict[str, Any] | None = None) -> dict[str, Any]:
+    standards = pack if isinstance(pack, dict) else _vessels_ais_standards_pack() or {}
+    instruments = [
+        row.get("id")
+        for row in (standards.get("instruments") or [])
+        if isinstance(row, dict) and row.get("id")
+    ]
+    return {
+        "honesty": "CITATION_ONLY",
+        "licensed_ais_admitted": False,
+        "licensed_ais_queries": 0,
+        "ais_equipment_class": "NONE",
+        "ais_transmit": False,
+        "solas_v19_applies": False,
+        "aton_provider": False,
+        "vhf_data_link_occupied": False,
+        "vessels_e03_licensed_ais_tpr": standards.get("vessels_e03_licensed_ais_tpr", "OUTSTANDING"),
+        "fail_closed_eval": "VESSELS-E-DENY-AIS",
+        "proof": "https://a11oy.net/vessels/ais-standards.json",
+        "instruments": instruments,
+        "stamps_live": False,
+        "production_ready": False,
+    }
+
+
 def load_vertical(vertical_id: str) -> dict[str, Any]:
     folder = VERTICALS_DIR / vertical_id
     manifest = _read_json(folder / "vertical_manifest.json")
@@ -76,7 +109,7 @@ def load_vertical(vertical_id: str) -> dict[str, Any]:
             item = _read_json(path)
             item.setdefault("eval_id", path.stem)
             cases.append(item)
-    return {
+    packed = {
         "id": vertical_id,
         "display_name": manifest.get("display_name", vertical_id),
         "wedge": manifest.get("wedge", ""),
@@ -85,6 +118,11 @@ def load_vertical(vertical_id: str) -> dict[str, Any]:
         "policy": policy,
         "cases": cases,
     }
+    if vertical_id == "vessels":
+        standards = _vessels_ais_standards_pack()
+        if standards is not None:
+            packed["ais_standards"] = standards
+    return packed
 
 
 def catalog() -> dict[str, Any]:
@@ -118,6 +156,15 @@ def catalog() -> dict[str, Any]:
                 "wedge": item["wedge"],
                 "role": item["role"],
                 "case_count": len(item["cases"]),
+                **(
+                    {
+                        "ais_standards_honesty": "CITATION_ONLY",
+                        "licensed_ais_admitted": False,
+                        "vessels_e03_licensed_ais_tpr": "OUTSTANDING",
+                    }
+                    if item["id"] == "vessels"
+                    else {}
+                ),
             }
             for item in verticals
         ],
@@ -126,6 +173,7 @@ def catalog() -> dict[str, Any]:
             "demo": "/demo",
             "evaluations": "/evaluations",
             "vessels": "/vessels",
+            "ais_standards": "https://a11oy.net/vessels/ais-standards.json",
             "proof": "https://a11oy.net/decision/",
         },
     }
@@ -143,6 +191,9 @@ def evaluate_case(vertical_id: str, payload: dict[str, Any]) -> dict[str, Any]:
     result["data_label"] = DATA_LABEL
     result["vertical_id"] = vertical_id
     result["runtime_claimed"] = False
+    if vertical_id == "vessels":
+        result["licensed_ais_admitted"] = False
+        result["ais_standards"] = _vessels_ais_standards_echo()
     return result
 
 
@@ -193,20 +244,22 @@ def register(app, ns: str = "a11oy") -> dict[str, Any]:
             packed = load_vertical(vertical_id)
         except FileNotFoundError as exc:
             return _json({"error": str(exc), "status": STATUS}, 503)
-        return _json(
-            {
-                "id": packed["id"],
-                "display_name": packed["display_name"],
-                "wedge": packed["wedge"],
-                "role": packed["role"],
-                "status": STATUS,
-                "data_label": DATA_LABEL,
-                "formula_authority": "NONE",
-                "manifest": packed["manifest"],
-                "policy": packed["policy"],
-                "cases": packed["cases"],
-            }
-        )
+        body = {
+            "id": packed["id"],
+            "display_name": packed["display_name"],
+            "wedge": packed["wedge"],
+            "role": packed["role"],
+            "status": STATUS,
+            "data_label": DATA_LABEL,
+            "formula_authority": "NONE",
+            "manifest": packed["manifest"],
+            "policy": packed["policy"],
+            "cases": packed["cases"],
+        }
+        if packed.get("ais_standards") is not None:
+            body["licensed_ais_admitted"] = False
+            body["ais_standards"] = packed["ais_standards"]
+        return _json(body)
 
     async def _evaluate(request):
         vertical_id = request.path_params["vertical"]

pages/decision.html

@@ -58,6 +58,9 @@ pre { background:var(--ink-3); border-radius:10px; padding:1rem; overflow:auto;
 .rail b { display:block; font-family:var(--font-mono); font-size:11px; letter-spacing:.14em; text-transform:uppercase; color:var(--muted); }
 .rail.on { box-shadow:0 0 0 1px var(--cord); }
 .rail.done b { color:var(--ok); }
+#ais-panel table { width:100%; border-collapse:collapse; font-size:12px; }
+#ais-panel td { padding:.35rem .4rem; border-top:1px solid var(--line); vertical-align:top; color:var(--paper-dim); }
+#ais-panel td:first-child { color:var(--paper); font-family:var(--font-mono); white-space:nowrap; }
 footer { margin-top:3rem; font-size:.8rem; color:var(--muted); }
 </style>
   <link rel="stylesheet" href="/assets/szl-flow.css" data-szl-flow-asset="style" />
@@ -100,15 +103,21 @@ footer { margin-top:3rem; font-size:.8rem; color:var(--muted); }
       <p>One primary action. Execute is not offered on this desk. The kernel evaluates and refuses. It does not stamp LIVE.</p>
       <p><button class="primary" id="primary" type="button" disabled>Select a frozen case</button></p>
       <h2>Receipt</h2>
-      <pre id="out">Select a frozen case. The kernel is fail-closed. Licensed AIS is CLOSED. No Hugging Face Space is required for this desk.</pre>
+      <pre id="out">Select a frozen case. The kernel is fail-closed. Licensed AIS is CLOSED. AIS standards are CITATION_ONLY. No Hugging Face Space is required for this desk.</pre>
     </section>
   </div>
+  <section class="panel" id="ais-panel" hidden>
+    <h2>Maritime AIS standards · CITATION_ONLY</h2>
+    <p>This desk is not Class A or Class B shipborne AIS equipment. It does not transmit. Licensed AIS stays CLOSED without a live key. Citing the instruments names the gate. It does not claim type approval, SOLAS V/19 carriage, AtoN service, or a licensed-AIS true-positive rate. VESSELS-E03 stays OUTSTANDING. Proof: <a href="https://a11oy.net/vessels/ais-standards.json">a11oy.net/vessels/ais-standards.json</a>.</p>
+    <div id="ais"></div>
+  </section>
   <footer>
     Status ROADMAP. Data label SAMPLE. Formula authority NONE. Λ = Conjecture 1 / advisory.
-    Licensed AIS CLOSED. Production ready false.
+    Licensed AIS CLOSED. AIS standards CITATION_ONLY. Production ready false.
     Not legal advice. Not investment advice. Not a trading bot. Not a Palantir clone.
     Canonical source: szl-holdings/a11oy/verticals.
     Proof: <a href="https://a11oy.net/decision/">a11oy.net/decision</a>.
+    Vessels AIS: <a href="https://a11oy.net/vessels/ais-standards.json">a11oy.net/vessels/ais-standards.json</a>.
     Product: a-11-oy.com. Never a11oy.com.
   </footer>
 </main>
@@ -130,6 +139,8 @@ const vtitle = document.getElementById("vtitle");
 const vwedge = document.getElementById("vwedge");
 const primary = document.getElementById("primary");
 const rail = document.getElementById("rail");
+const aisPanel = document.getElementById("ais-panel");
+const aisEl = document.getElementById("ais");
 let current = "aegis";
 let selected = null;
 
@@ -170,6 +181,7 @@ async function boot() {
     chip(cat.status || "ROADMAP"),
     chip("formula authority NONE", "mute"),
     chip("licensed AIS CLOSED", "mute"),
+    chip("AIS standards CITATION_ONLY", "mute"),
     chip((cat.verticals || []).length + " desks", "mute")
   );
   tabs.replaceChildren();
@@ -185,6 +197,31 @@ async function boot() {
   if (first) show(first.dataset.id, first, false);
 }
 
+function renderAis(data) {
+  const std = data && data.ais_standards;
+  if (!std) {
+    aisPanel.hidden = true;
+    aisEl.replaceChildren();
+    return;
+  }
+  aisPanel.hidden = false;
+  const table = document.createElement("table");
+  (std.instruments || []).forEach((row) => {
+    const tr = document.createElement("tr");
+    const id = typeof row === "string" ? row : (row && row.id) || "";
+    const title = typeof row === "string" ? "" : (row && row.title) || "";
+    const bound = typeof row === "string" ? "CITATION_ONLY" : (row && row.bound) || "CITATION_ONLY";
+    const cells = [id, title, bound];
+    cells.forEach((text) => {
+      const td = document.createElement("td");
+      td.textContent = text;
+      tr.appendChild(td);
+    });
+    table.appendChild(tr);
+  });
+  aisEl.replaceChildren(table);
+}
+
 async function show(id, btn, push) {
   current = id;
   selected = null;
@@ -193,6 +230,7 @@ async function show(id, btn, push) {
   const data = await fetch("/api/a11oy/v1/decision/" + encodeURIComponent(id)).then((r) => r.json());
   vtitle.textContent = data.display_name || id;
   vwedge.textContent = data.wedge || "";
+  renderAis(data);
   casesEl.replaceChildren();
   (data.cases || []).forEach((item) => {
     const b = document.createElement("button");

pages/killinchu.html

@@ -0,0 +1,43 @@
+<!DOCTYPE html>
+<!-- SPDX-License-Identifier: Apache-2.0
+     Killinchu on-origin twin status. Eyes and decision, not the trigger.
+     Does not hand canonical to huggingface.co. -->
+<html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/>
+<title>a11oy · Killinchu</title>
+<style>
+:root{--bg:#0a0a0a;--s1:#111;--ink:#f4f1ea;--dim:#c8c5bc;--mute:#7a776f;--rule:#2a2a2a}
+*{box-sizing:border-box;margin:0;padding:0}html,body{background:var(--bg);color:var(--ink);font:16px/1.5 system-ui,sans-serif}
+main{max-width:720px;margin:0 auto;padding:48px 24px}
+.chip{display:inline-block;border:1px solid var(--rule);padding:4px 8px;font:11px/1 ui-monospace,monospace;color:var(--dim);margin-right:8px}
+h1{font-weight:500;font-size:36px;letter-spacing:-.03em;margin:16px 0}
+p{color:var(--dim);max-width:60ch;margin:12px 0}
+a{color:var(--ink)}
+</style></head>
+<body>
+<main>
+<p><span class="chip" id="st">PROBING</span><span class="chip">ON ORIGIN</span></p>
+<h1>Killinchu</h1>
+<p>Eyes and decision. Not the trigger. Effectors stay SIMULATED. This page stays on a-11-oy.com so the product origin does not hand canonical to Hugging Face.</p>
+<p>Twin Space runtime is reported honestly. If the Space is down, this page stays up.</p>
+<p id="detail" class="chip">…</p>
+<p><a href="/command-v2#defense">Command · Defense</a> · <a href="/hatun-mcp">Hatun</a></p>
+</main>
+<script>
+const ORIGIN = (location.hostname.endsWith('a-11-oy.com')||location.hostname.includes('hf.space')) ? '' : 'https://a-11-oy.com';
+async function boot(){
+  const el=document.getElementById('st');
+  const d=document.getElementById('detail');
+  try{
+    const r=await fetch(ORIGIN+'/healthz',{headers:{accept:'application/json'}});
+    const j=await r.json();
+    const sig=(j.signer&&j.signer.status)||'UNKNOWN';
+    el.textContent='ORIGIN '+ (j.status||r.status);
+    d.textContent='healthz signer '+sig+' · doctrine '+(j.doctrine||'v11');
+  }catch(e){
+    el.textContent='ORIGIN DEGRADED';
+    d.textContent=String(e);
+  }
+}
+boot();
+</script>
+</body></html>