refs: migrate a11oy.net->a-11-oy.com + trim top-level routes to 25

pages/console.html

@@ -5485,7 +5485,7 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
           // paint the honest organs count IMMEDIATELY (same-origin) so we never linger on 'probing'
           if(reachable!=null){ if(n){ n.textContent=reachable+(total!=null?(' / '+total):''); n.className='v teal'; } if(d) d.textContent='organs reachable'; }
           // then ENHANCE the sub-label with the GPU-node probe if/when it resolves (cross-origin, may be slow/blocked — non-blocking to the count)
-          try{ var cp=await gj('https://a11oy.net/api/a11oy/v1/compute-pool-hardened'); if(cp&&cp.counts){ gpu=cp.counts.gpu_nodes_reachable; } }catch(_e){}
+          try{ var cp=await gj('https://a-11-oy.com/api/a11oy/v1/compute-pool-hardened'); if(cp&&cp.counts){ gpu=cp.counts.gpu_nodes_reachable; } }catch(_e){}
           if(reachable!=null){
             if(d) d.textContent='organs reachable'+(gpu!=null?(' \u00b7 '+gpu+' GPU nodes'):'');
           } else if(drewGraph){
@@ -9414,7 +9414,7 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
         '<div class="brain-note">This 6/6 / 4-of-4 quorum is the <b>in-image capability mesh</b> a11oy actually runs on (probed live, same-origin, 0 CDN). It is <b>NOT</b> the same probe as Command Center’s “Services up”, which reports the <b>organ backends (Reasoning/Policy/Operator/Receipts)</b> that run on <b>dedicated infrastructure (roadmap)</b> — on this demo Space they are shown honestly as <b>not-deployed-here</b> rather than faked “up”. Same honest story, two probes: governed mesh healthy; organ backends not deployed on this Space.</div></div>'+
       '<div class="card"><div class="card-h"><span class="card-t">Deploy targets — same UDS bundle, cloud → edge → air-gap</span><span class="card-ep">honest · no secrets</span></div>'+
         '<div class="row"><span class="badge b-live">LIVE</span><span style="color:'+CR+'">Cloud — HF Space</span><span class="spacer mono dim">szlholdings-a11oy.hf.space · this demo deploy</span></div>'+
-        '<div class="row"><span class="badge b-live">LIVE</span><span style="color:'+CR+'">Hetzner — a11oy.net</span><span class="spacer mono dim">167.233.50.75 · self-hosted</span></div>'+
+        '<div class="row"><span class="badge b-live">LIVE</span><span style="color:'+CR+'">Hetzner — a-11-oy.com</span><span class="spacer mono dim">167.233.50.75 · self-hosted</span></div>'+
         '<div class="row"><span class="badge b-gold">ROADMAP</span><span style="color:'+CR+'">Tactical edge / air-gap</span><span class="spacer mono dim">same UDS bundle · offline-verifiable (cosign verify-blob, no egress)</span></div>'+
         '<div class="brain-note">One artifact, three targets: the same cosign-signed UDS/Zarf bundle deploys to cloud, on-prem, and a disconnected tactical edge. Air-gap is offline-<i>verifiable</i> (provenance checks run with zero network) — labelled ROADMAP because no air-gapped deploy is claimed live today. No hardcoded env / secrets surfaced. See the <b>Deploy Posture</b> tab for the bundle → SBOM → cosign → OCI artifact chain.</div></div>'+HON;
     poll(async function(){
@@ -10937,7 +10937,7 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
 (function(){
   "use strict";
   function esc(s){ return window.esc?window.esc(s):String(s==null?'':s).replace(/[&<>"]/g,function(c){return{'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c];}); }
-  var KB='https://killinchu.a11oy.net';
+  var KB='https://killinchu.a-11-oy.com';
   var CN_REFRESH_MS=30000;
   function cnAutoOn(){ return window.__cn_auto!==false; }
   var COL={good:['#4fb37f','#5fe39a'],warn:['#c0a05a','#e6c87a'],bad:['#c06a5a','#ff7b6b'],info:['#5aa0d0','#7ab8e6'],dim:['#6b6b6b','#9a9a9a']};
@@ -12457,7 +12457,7 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
 <script>
 /* anatomy-map-tab-patch :: SZL Anatomy — single honest map (formulas + agentic capabilities) ::
    Additive, self-contained, NS-aware. Snapshot mirror of the standalone deck
-   (a11oy.net/anatomy-map · HF static Space SZLHOLDINGS/anatomy). Honest by construction:
+   (a-11-oy.com/anatomy-map · HF static Space SZLHOLDINGS/anatomy). Honest by construction:
    8 LOCKED formulas {F1,F4,F7,F11,F12,F18,F19,F22}; Λ = Conjecture 1. No fabricated live pills. */
 (function(){
   var NS=(window.__rd_ns||(location.pathname.indexOf('killinchu')>=0?'killinchu':'a11oy'));
@@ -12479,8 +12479,8 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
      p:'Append-only SIGNED receipt DAG (Khipu) + quorum consensus: acyclic (F4 locked), FIFO-ordered (F7 locked), emit-monotone (F22 locked), CONDITIONAL Byzantine safety under 3-of-4 quorum. Unconditional safety stays Conjecture 2.',
      e:'szl_khipu_lmdb.py \u00b7 MCP khipu_sign / khipu_verify (live)', f:'F4, F7, F22 (locked) \u00b7 B2 quorum'},
     {k:'receipts', n:'Receipt store (YAWAR / szl-receipts)', s:'LIVE',
-     p:'Append-only SHA-256 receipt bus: h=sha256(canonical(packet)), never mutated/deleted. Ed25519/DSSE signing, Merkle inclusion (F18 locked), receipt-completeness (P1), replay-determinism, hash-chain tamper-evidence (P5). Live chain at a11oy.net/receipts.',
-     e:'YAWAR bus \u00b7 szl-receipts server + Pepr webhook (repo PRIVATE) \u00b7 a11oy.net/receipts/', f:'F1, F18 (locked) \u00b7 P1, P5'},
+     p:'Append-only SHA-256 receipt bus: h=sha256(canonical(packet)), never mutated/deleted. Ed25519/DSSE signing, Merkle inclusion (F18 locked), receipt-completeness (P1), replay-determinism, hash-chain tamper-evidence (P5). Live chain at a-11-oy.com/receipts.',
+     e:'YAWAR bus \u00b7 szl-receipts server + Pepr webhook (repo PRIVATE) \u00b7 a-11-oy.com/receipts/', f:'F1, F18 (locked) \u00b7 P1, P5'},
     {k:'mesh', n:'Mesh + OTel observability (UDS / VSP)', s:'CI-GREEN',
      p:'UDS Core ambient mesh (Istio, restricted PSA) carrying W3C TraceContext span lineage across brain\u2192effectors (efferent / afferent / proprioceptive). Replay verifier checks child.parent_span_id == parent.span_id over a cycle (P4); Menger cut/path + reachability monotonicity back the resilience claims.',
      e:'szl-uds-deployment (k3d uds-szl-demo) \u00b7 vsp-otel \u00b7 HUKLLA deadman reflex', f:'P4, F1 \u00b7 W9_MENGER, W10_REACH'},
@@ -12493,7 +12493,7 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
     h+='<div style="border:1px solid #2a2f37;border-radius:10px;padding:14px 16px;margin-bottom:14px;background:#11151a">'
       +'<div style="font-family:var(--mono,monospace);font-size:11px;color:'+DIM+';letter-spacing:.08em">SINGLE HONEST MAP</div>'
       +'<div style="font-size:13px;color:#cfd4da;margin-top:6px;line-height:1.5">Every agentic capability mapped to the <b>real</b> app(s)/repo(s) that implement it, alongside the formula/theorem ladder. Snapshot mirror of the full interactive deck \u2014 '
-      +'<a href="https://a11oy.net/anatomy-map/" target="_blank" rel="noopener" style="color:'+TEAL+'">a11oy.net/anatomy-map</a> \u00b7 '
+      +'<a href="https://a-11-oy.com/anatomy-map/" target="_blank" rel="noopener" style="color:'+TEAL+'">a-11-oy.com/anatomy-map</a> \u00b7 '
       +'<a href="https://szlholdings-anatomy.hf.space/" target="_blank" rel="noopener" style="color:'+TEAL+'">HF Space</a>. '
       +'Honesty: <b>8 LOCKED</b> kernel-verified formulas {F1, F4, F7, F11, F12, F18, F19, F22}; \u039b uniqueness = <b>Conjecture 1</b> (advisory, never a pass/fail oracle).</div></div>';
     CAPS.forEach(function(c){
@@ -12512,7 +12512,7 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
   function reg(){
     var V=window.VIEWS; if(!V){ return setTimeout(reg,80); }
     V.anatomymap={ title:'Anatomy Map', badge:(CAPS.length+' capabilities \u00b7 8 LOCKED'),
-      sub:'The single honest map: every agentic capability (RAG, MCP, ouroboros loop, khipu/consensus, receipt store, mesh/OTel, math/AP-12) mapped to the real app(s)/repo(s) that implement it \u2014 mirrored from the a11oy.net/anatomy-map deck. 8 LOCKED formulas; \u039b = Conjecture 1.',
+      sub:'The single honest map: every agentic capability (RAG, MCP, ouroboros loop, khipu/consensus, receipt store, mesh/OTel, math/AP-12) mapped to the real app(s)/repo(s) that implement it \u2014 mirrored from the a-11-oy.com/anatomy-map deck. 8 LOCKED formulas; \u039b = Conjecture 1.',
       render:render };
   }
   reg();
@@ -14699,7 +14699,7 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
 
 <!-- energy-harvest-tab-patch — live wasted-energy grid signal (a11oy console tab).
      Additive: registers V['energy'] + injects a nav item. Fetches the ABSOLUTE public
-     a11oy.net harvest API so this tab renders identically on a11oy.net/console AND the
+     a-11-oy.com harvest API so this tab renders identically on a-11-oy.com/console AND the
      mirrored HuggingFace Space. Doctrine v11: real grid data only, joules SAMPLE,
      sovereign untouched, no free-energy, honest degradation when feeds are down. -->
 <script>
@@ -14842,7 +14842,7 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
          (NOT measured) — it never claims joules, never creates energy. Doctrine v11. */
       h+=await ehThermalPanel();
       h+='<div class="dim" style="font-size:11px;margin-top:.5rem">'+esc(d.feeds_live)+'/'+esc(d.feeds_total)+' feeds live · '+(d.cached?'cached':'fresh')+' · '+esc(when)
-        +' · <a href="'+EH_API+'/posture" target="_blank" rel="noopener">raw API</a> · <a href="https://a11oy.net/energy/" target="_blank" rel="noopener">standalone page ↗</a></div>';
+        +' · <a href="'+EH_API+'/posture" target="_blank" rel="noopener">raw API</a> · <a href="https://a-11-oy.com/energy/" target="_blank" rel="noopener">standalone page ↗</a></div>';
       c.innerHTML=h;
       /* BATCH2B: animate the hero count-up to the real measured price via requestAnimationFrame. */
       (function(){ var el=document.getElementById('eh-hero-num'); if(!el) return; var target=d.price_now_eur_mwh; if(target==null) return;

serve.py

@@ -1300,7 +1300,7 @@ except Exception as _prov_e:
 # their fetch() calls keep working.
 #
 # allow_origin_regex covers the HF Space wildcard (szlholdings-*.hf.space) and the
-# planned a11oy.net / killinchu.a11oy.net subdomains in one place. We do NOT set
+# planned a-11-oy.com / killinchu.a-11-oy.com subdomains in one place. We do NOT set
 # allow_credentials=True (cookies/Authorization are not used cross-origin), so
 # there is no "* + credentials" footgun and the allow-list stays the security
 # boundary. Methods/headers are scoped to what the read+governed-write API uses.
@@ -1309,9 +1309,9 @@ except Exception as _prov_e:
 import os as _cors_os
 
 _CORS_ALLOWED_ORIGINS = [
-    "https://a11oy.net",
-    "https://www.a11oy.net",
-    "https://killinchu.a11oy.net",
+    "https://a-11-oy.com",
+    "https://www.a-11-oy.com",
+    "https://killinchu.a-11-oy.com",
     "https://szlholdings-a11oy.hf.space",
     "https://szlholdings-killinchu.hf.space",
     "http://localhost:8000",
@@ -1325,9 +1325,9 @@ if _cors_extra:
     )
 
 # Regex catch-all for the HF Space subdomains (szlholdings-<name>.hf.space) and
-# any *.a11oy.net subdomain (immune.a11oy.net, killinchu.a11oy.net, ...).
+# any *.a-11-oy.com subdomain (immune.a-11-oy.com, killinchu.a-11-oy.com, ...).
 _CORS_ALLOWED_ORIGIN_REGEX = (
-    r"^https://(szlholdings-[a-z0-9-]+\.hf\.space|([a-z0-9-]+\.)?a11oy\.net)$"
+    r"^https://(szlholdings-[a-z0-9-]+\.hf\.space|([a-z0-9-]+\.)?a-11-oy\.com)$"
 )
 
 app.add_middleware(
@@ -1444,7 +1444,7 @@ def _ptg_serve(filename: str):
 
 try:
     # Upgraded genius surfaces (win over module + SPA handlers by ordered match).
-    app.add_api_route("/conduction", _ptg_serve("conduction.html"), methods=["GET"], include_in_schema=False)
+    app.add_api_route("/conduction", lambda: _PTG_Redirect(url="/console", status_code=307), methods=["GET"], include_in_schema=False)
     app.add_api_route("/bridge",     _ptg_serve("bridge.html"),     methods=["GET"], include_in_schema=False)
     app.add_api_route("/agent",      _ptg_serve("agent.html"),      methods=["GET"], include_in_schema=False)
     app.add_api_route("/predict",    _ptg_serve("predict.html"),    methods=["GET"], include_in_schema=False)
@@ -1501,7 +1501,7 @@ try:
     app.add_api_route("/sda", _ptg_serve("sda.html"), methods=["GET"], include_in_schema=False)
     app.add_api_route("/a11oy/sda", _ptg_serve("sda.html"), methods=["GET"], include_in_schema=False)
     # DNS & SUBDOMAINS tab (2026-06-16): a static, honest internal infrastructure
-    # roadmap that tracks the DNS records we want to add (e.g. immune.a11oy.net A
+    # roadmap that tracks the DNS records we want to add (e.g. immune.a-11-oy.com A
     # 167.233.50.75, on hold until founder is back from the trip; immune itself is
     # already served on Hugging Face so there is no outage). Standalone page, 0
     # runtime CDN, NO live data (statuses are hand-maintained + dated). NEVER a
@@ -8030,7 +8030,7 @@ async def _hero_vendor(fname: str) -> Response:
 
 
 # === ADDITIVE: /cathedral — the ONE canonical genius cathedral, GitHub-aligned. ===
-# Unifies the cathedral front door so a11oy.net/cathedral renders the IDENTICAL
+# Unifies the cathedral front door so a-11-oy.com/cathedral renders the IDENTICAL
 # "Constellation · Khipu" scene as the SZLHOLDINGS/cathedral HF static space and
 # killinchu/cathedral. The page (cathedral_genius.html at the repo root) is the
 # canonical HF index.html byte-for-byte EXCEPT its two asset paths, which are
@@ -8137,18 +8137,14 @@ async def chaski_page() -> Response:
 
 @app.get("/wallpa")
 async def wallpa_page() -> Response:
-    f = PAGES_DIR / "wallpa.html"
-    if f.is_file():
-        return FileResponse(f, media_type="text/html")
-    return FileResponse(INDEX_HTML, media_type="text/html")
+    # RETIRED 2026-06-27: codename violates NO user-visible codenames doctrine.
+    return _PTG_Redirect(url="/console", status_code=307)
 
 
 @app.get("/wasi-rikuq")
 async def wasi_rikuq_page() -> Response:
-    f = PAGES_DIR / "wasi-rikuq.html"
-    if f.is_file():
-        return FileResponse(f, media_type="text/html")
-    return FileResponse(INDEX_HTML, media_type="text/html")
+    # RETIRED 2026-06-27: Quechua codename violates NO user-visible codenames doctrine.
+    return _PTG_Redirect(url="/console", status_code=307)
 
 
 # /superpowers — Five live, screenshot-provable superpowers (Decision Replay,
@@ -8182,7 +8178,7 @@ async def command_console_page() -> Response:
 # demo is the console SPA view V.wowtoggle, reachable today via the left-nav
 # but NOT via its obvious top-level URLs: /ungoverned, /ungoverned-vs-a11oy,
 # /vs, /compare all fell through to the SPA catch-all → generic Command Center,
-# so a founder/investor typing a11oy.net/ungoverned saw the wrong page and
+# so a founder/investor typing a-11-oy.com/ungoverned saw the wrong page and
 # "nothing happened." The console boots into the view named by location.hash
 # (pages/console.html: `start=(location.hash||'#command').slice(1)`), so these
 # pretty paths just need to land on /console#wowtoggle. Registered BEFORE the
@@ -8208,7 +8204,7 @@ async def marketing_landing_page() -> Response:
     return FileResponse(INDEX_HTML, media_type="text/html")
 
 
-# /company — SZL Holdings story folded into a11oy.net (the holding-company front
+# /company — SZL Holdings story folded into a-11-oy.com (the holding-company front
 # door: "Governed AI, proven in Lean", the PURIQ doctrine, the five flagships, and
 # the evidence/proof framing). Replaces the retired standalone szlholdings.com site.
 # Served from pages/company.html (COPYed wholesale by the Dockerfile). Registered
@@ -8250,8 +8246,6 @@ async def wires_page() -> Response:
 # /fabric keeps working unchanged. Both registered before the SPA catch-all.
 @app.get("/fabric")
 @app.get("/a11oy/fabric")
-@app.get("/tawantin")
-@app.get("/a11oy/tawantin")
 async def fabric_page() -> Response:
     f = PAGES_DIR / "fabric.html"
     if f.is_file():
@@ -8259,13 +8253,18 @@ async def fabric_page() -> Response:
     return FileResponse(INDEX_HTML, media_type="text/html")
 
 
+# RETIRED 2026-06-27: /tawantin + /a11oy/tawantin were codename aliases for
+# /fabric. Quechua codename violates NO user-visible codenames doctrine.
+@app.get("/tawantin")
+@app.get("/a11oy/tawantin")
+async def tawantin_redirect() -> Response:
+    return _PTG_Redirect(url="/console", status_code=307)
+
+
 @app.get("/ayni")
 async def ayni_page() -> Response:
-    # ADDITIVE (Yachay / AYNI-OS): reciprocity gauges + replay scrubber + Tinkuy meter.
-    f = PAGES_DIR / "ayni.html"
-    if f.is_file():
-        return FileResponse(f, media_type="text/html")
-    return FileResponse(INDEX_HTML, media_type="text/html")
+    # RETIRED 2026-06-27: Quechua codename violates NO user-visible codenames doctrine.
+    return _PTG_Redirect(url="/console", status_code=307)
 
 
 # --- Throne Room (ADDITIVE; Doctrine v12 PURIQ / Yachay CTO) ---
@@ -8275,10 +8274,9 @@ async def ayni_page() -> Response:
 @app.get("/throne-room")
 @app.get("/throne")
 async def throne_room_page() -> Response:
-    f = PAGES_DIR / "throne-room.html"
-    if f.is_file():
-        return FileResponse(f, media_type="text/html")
-    return FileResponse(INDEX_HTML, media_type="text/html")
+    # RETIRED 2026-06-27: internal codenames (PURIQ/Yachay) violate NO user-visible
+    # codenames doctrine. Old bookmarks preserved via 307.
+    return _PTG_Redirect(url="/console", status_code=307)
 
 
 @app.get("/throne-room.js")
@@ -8683,10 +8681,8 @@ async def api_a11oy_v4_fleet() -> JSONResponse:
 # by the Dockerfile) so no image-layout change. ADDITIVE.
 @app.get("/warhacker")
 async def warhacker_page() -> Response:
-    f = PAGES_DIR / "warhacker.html"
-    if f.is_file():
-        return FileResponse(f, media_type="text/html")
-    return FileResponse(INDEX_HTML, media_type="text/html")
+    # RETIRED 2026-06-27: archived per founder (BRIEF.md: "warhacker is ARCHIVED").
+    return _PTG_Redirect(url="/console", status_code=307)
 
 
 # ---------------------------------------------------------------------------
@@ -9784,7 +9780,7 @@ except Exception as _szlfac_e:  # pragma: no cover
 
 
 # ============================================================================
-# SPACES ON a11oy.net (Dev2+3) — surface all 11 live HF Spaces same-origin.
+# SPACES ON a-11-oy.com (Dev2+3) — surface all 11 live HF Spaces same-origin.
 # (1) szl_spaces_proxy: reverse-proxy each Space under /spaces/<name> (server-side
 #     fetch, honest 502 on flap, allowlist only, a11oy/killinchu skipped as self/own-
 #     host). (2) szl_spaces_surface: /api/<ns>/v1/spaces/health (REAL probe + HF-API
@@ -9811,7 +9807,7 @@ try:
 except Exception as _szl_ss_e:  # pragma: no cover
     print(f"[a11oy] Spaces surface NOT registered: {_szl_ss_e!r}; SPA + API unaffected", file=__import__("sys").stderr)
 # ============================================================================
-# END: SPACES ON a11oy.net (Dev2+3)
+# END: SPACES ON a-11-oy.com (Dev2+3)
 # ============================================================================