Spaces:

SZLHOLDINGS
/

a11oy

Running

App Files Files Community

betterwithage commited on Jun 13

Commit

e4c2a28

verified ·

1 Parent(s): 15bf643

chore(sync): mirror front-door files to Space (hf-sync)

Browse files

Automated front-door sync from szl-holdings/a11oy main via hf-sync.
Added/updated: cathedral.html, console/docs.html, console/index.html, console/pricing.html, console/throne-room.html, console/throne-room.js, pages/api-keys.html, pages/audit.html, pages/ayni.html, pages/brain-dual.html, pages/brain-jack.html, pages/brain.html, pages/chaski.html, pages/codex-kernel.html, pages/company.html, pages/compliance.html, pages/console.html, pages/counter-uas.html, pages/cued-engagement.html, pages/docs.html, pages/evidence.html, pages/gap-report.html, pages/harvest.html, pages/hatun-mcp.html, pages/hub.html, pages/integrations.html, pages/landing.html, pages/mesh.html, pages/observability.html, pages/operator_organ.html, pages/pricing.html, pages/run-all.html, pages/sdk.html, pages/security.html, pages/status.html, pages/substrate.html, pages/superpowers.html, pages/throne-room.html, pages/throne-room.js, pages/uds.html, pages/upgrades.html, pages/wallpa.html, pages/warhacker.html, pages/wasi-rikuq.html, pages/wires.html, static/a11oy_cathedral.js
Deleted (gone from GitHub main): (none)

Keeps the served front-door (pages/*.html, console/*.html) identical
to GitHub main so an HF factory rebuild never drops a GitHub edit or
keeps serving a page that was deleted on GitHub.

Files changed (2) hide show

pages/console.html +85 -25
pages/harvest.html +10 -2

pages/console.html CHANGED Viewed

@@ -319,6 +319,17 @@ details.raw[open] summary{color:var(--muted);}
 .tl-graphbox{height:clamp(280px,46vh,380px);background:#080808;border:1px solid var(--gold-line);border-radius:10px}
 .ln-dagbox{height:clamp(300px,50vh,440px);background:#080808;border:1px solid var(--gold-line);border-radius:10px}
 </style>
 </head>
 <body>
@@ -506,6 +517,39 @@ const RED='#b06a5a',AMBER='#c9a05f';
 function fetchTimeout(url,ms,opts){const ctl=new AbortController();const t=setTimeout(()=>ctl.abort(),ms||12000);
   return fetch(url,Object.assign({signal:ctl.signal},opts||{})).finally(()=>clearTimeout(t));}
 async function getPublic(url,ms){const r=await fetchTimeout(url,ms);if(!r.ok)throw new Error('HTTP '+r.status);return r.json();}
 // ===== In-browser DSSE receipt verification (WebCrypto, ECDSA P-256 / SHA-256) =====
 // Fetches a11oy's OWN in-image public key (/cosign.pub) and a signed receipt
 // envelope (/api/a11oy/v1/receipt/export), rebuilds the signing pre-auth encoding, and verifies
@@ -637,25 +681,25 @@ const LAMBDA_FRONTIER_CARDS=`<div class="grid2"><div class="card" style="border-
 const VIEWS={
   command:{title:'Command Center',badge:'LIVE',sub:'One pane of glass over the whole governed-AI platform \u2014 live service health, the connected system map, trust posture, and a verifiable audit trail.',
     render:async(c)=>{c.innerHTML=`<div class="kpis">
-      <div class="kpi"><div class="k">Services up</div><div class="v live" id="k-fleet">probing\u2026</div><div class="d">live health probe</div></div>
-      <div class="kpi"><div class="k">Connections</div><div class="v teal" id="k-wires">\u2014</div><div class="d">cross-service links</div></div>
-      <div class="kpi"><div class="k">Trust score</div><div class="v teal" id="k-lam">\u2014</div><div class="d">vs floor 0.90</div></div>
-      <div class="kpi"><div class="k">Decisions today</div><div class="v" id="k-dec">\u2014</div><div class="d">governed + logged</div></div>
       <div class="kpi"><div class="k">Build security</div><div class="v teal">SLSA L1+L2</div><div class="d">attested · L3 roadmap</div></div></div>
       <div class="grid2">
         <div class="card"><div class="card-h"><span class="card-t">Trust posture</span><span class="card-ep">live</span></div><div class="chartbox"><canvas id="cmd-radar"></canvas></div></div>
         <div class="card"><div class="card-h"><span class="card-t">Safety gate posture</span><span class="card-ep">live</span></div><div class="chartbox"><canvas id="cmd-gates"></canvas></div><div class="legend"><span><i style="background:#5fb3a3"></i>allow-capable</span><span><i style="background:#b06a5a"></i>deny-by-default</span></div></div>
       </div>
-      <div class="card"><div class="card-h"><span class="card-t">Service health</span><span class="card-ep">live probe</span></div><div class="brain-note" style="margin:.1rem 0 .5rem"><b>How to read “Services up”.</b> This counts <b>external organ services reachable on THIS HF demo deploy</b> — the backend organs (Reasoning/Policy/Operator/Receipts) are air-gap / roadmap and are honestly DOWN here, never faked up. The <b>in-image capability mesh is 6/6 healthy</b> (Byzantine quorum 4/4 REACHED) — see the <b>UDS 4/4 Quorum</b> tab. Two different probes, one honest story: organ backends not deployed on this Space; the governed mesh a11oy actually runs on is fully healthy.</div><div id="cmd-fleet"><div class="row mono dim">probing 5 services\u2026</div></div></div>
-      <div class="card"><div class="card-h"><span class="card-t">Performance constants</span><span class="card-ep">real measured benchmarks</span></div><div class="kpis" id="cmd-perf"><div class="row mono dim">loading measured constants\u2026</div></div><div class="brain-note">Measured benchmarks from the published thesis brief (maturity: measured). Source: THESIS_BRIEF.md / Zenodo.</div></div>${HONEST}`;
       // instant: trust radar (this service)
       try{const d=await getJSON(API+'/v1/lambda');const ax=d.axes||[];radar('cmd-radar',ax.map(a=>a.name),ax.map(a=>a.score||0));setTxt('k-lam',(d.lambda||0).toFixed?d.lambda.toFixed(3):d.lambda);}catch(e){}
       // safety gates posture (policy, fast)
       try{const g=await orgGet('core','/api/a11oy/v1/policy/gates');const gs=g.gates||[];const deny=gs.filter(x=>x.expectedDecision==='deny').length;doughnut('cmd-gates',['allow-capable','deny-by-default'],[gs.length-deny,deny],[TEAL,'#b06a5a']);}catch(e){}
       // live service probe (slower) non-blocking
       getJSON(API+'/v1/observability/summary').then(d=>{const mr=d.mesh_reach||{};const keys=Object.keys(mr);let ok=0;setHTML('cmd-fleet','');
-        keys.forEach(k=>{const p=mr[k];const up=(p.status||'ok')==='ok';if(up)ok++;addHTML('cmd-fleet',`<div class="row"><span class="badge ${up?'b-live':'b-err'}">${up?'UP':'DOWN'}</span><span>${esc(p.name||k)}</span><span class="spacer mono dim">${p.latency_ms?Math.round(p.latency_ms)+'ms':''}</span></div>`);});
-        setTxt('k-fleet',keys.length?ok+'/'+keys.length:'\u2014');}).catch(()=>{setHTML('cmd-fleet','');CAPS.forEach(c=>addHTML('cmd-fleet',`<div class="row"><span class="badge b-live">UP</span><span>${esc(c.name)}</span></div>`));setTxt('k-fleet',(CAPS.length+1)+'/'+(CAPS.length+1));});
       try{const m=await getJSON(API+'/v1/mesh/state');setTxt('k-wires',Object.keys(m.wires||{}).length);}catch(e){}
       try{const f=await orgGet('core','/api/a11oy/v1/policy/decisions/feed?limit=50');setTxt('k-dec',f.total_buffered??(f.verdicts||[]).length);}catch(e){}
       // performance constants from published knowledge bundle (measured benchmarks)
@@ -5642,7 +5686,9 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
         +'</div>'; };
     /* small helper: KPI card */
-    function kpi(k,id,d,cls){ return '<div class="kpi"><div class="k">'+k+'</div><div class="v '+(cls||'')+'" id="'+id+'">…</div><div class="d">'+(d||'')+'</div></div>'; }
     function card(t,ep,inner){ return '<div class="card"><div class="card-h"><span class="card-t">'+t+'</span><span class="card-ep">'+(ep||'')+'</span></div>'+inner+'</div>'; }
     function box3d(id){ return '<div id="'+id+'" style="height:380px;position:relative"></div>'; }
     var HON=window.HONEST||'';
@@ -5665,31 +5711,32 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
           +card('Trust posture (13-axis Λ)','live '+window.a11oyPoweredBy(['F19','F1']),'<div class="chartbox"><canvas id="cc-radar"></canvas></div>')
           +card('Governed throughput by vertical','live · auto-poll','<div class="chartbox"><canvas id="cc-bars"></canvas></div>')
           +'</div>'
-          +card('Service health','live probe · <span id="cc-stamp" class="mono dim" style="font-size:10px"></span>','<div class="brain-note" style="margin:.1rem 0 .5rem"><b>How to read “Services up”.</b> This counts <b>external organ services reachable on THIS HF demo deploy</b> — the backend organs (Reasoning/Policy/Operator/Receipts) are air-gap / roadmap and are honestly DOWN here, never faked up. The <b>in-image capability mesh is 6/6 healthy</b> (Byzantine quorum 4/4 REACHED) — see the <b>UDS 4/4 Quorum</b> tab. Two probes, one honest story: organ backends are not deployed on this Space; the governed mesh a11oy actually runs on is fully healthy.</div><div id="cc-fleet"><div class="row mono dim">probing…</div></div>')
-          +card('Rolling receipt stream — ALL verticals',''+liveDot()+'live · one tamper-evident chain','<div id="cc-stream"><div class="row mono dim">loading…</div></div>')
           +'<div class="card"><div class="card-h"><span class="card-t">Governance engine — powered by the proven formulas</span><span class="card-ep">honest maturity labels</span></div>'
           +'<div id="cc-formulas"></div></div>'
           +HON;
         // formulas instilled
         H('cc-formulas', window.a11oyFormula('F1')+window.a11oyFormula('F19')+window.a11oyFormula('F11')+window.a11oyFormula('F18')+window.a11oyFormula('F12'));
-        // trust radar
-        try{var d=await gj(API+'/v1/lambda');var ax=d.axes||[];if(window.radar)window.radar('cc-radar',ax.map(function(a){return a.name;}),ax.map(function(a){return a.score||0;}));T('cc-lam',(d.lambda||0).toFixed?d.lambda.toFixed(3):d.lambda);}catch(e){}
-        // auto-poll: services + decisions + chain depth + ledger stream + throughput bars
         window.a11oyPoll(async function(){
-          try{ var s=await gj(API+'/v1/observability/summary'); var mr=s.mesh_reach||{};var keys=Object.keys(mr);var ok=0;var html='';
             keys.forEach(function(k){var p=mr[k];var up=(p.status||'ok')==='ok';if(up)ok++;
-              html+='<div class="row"><span class="badge '+(up?'b-live':'b-err')+'">'+(up?'UP':'DOWN')+'</span><span>'+esc(p.name||k)+'</span><span class="spacer mono dim">'+(p.latency_ms?Math.round(p.latency_ms)+'ms':'')+'</span></div>';});
-            H('cc-fleet',html); T('cc-svc',keys.length?ok+'/'+keys.length:'—');
             T('cc-chain', s.dag_depth!=null?s.dag_depth:'—');
-          }catch(e){}
-          try{ var f=await gj(API+'/v1/policy/decisions/feed?limit=50'); T('cc-dec', f.total_buffered!=null?f.total_buffered:((f.verdicts||[]).length)); }catch(e){}
-          try{ var L=await gj(API+'/v1/wow/ledger?limit=12'); var rs=L.receipts||[]; var sh='';
             rs.forEach(function(r){ sh+=window.a11oyReceiptRow(r); });
             H('cc-stream', sh||'<div class="row mono dim">no receipts yet</div>');
-            T('cc-chain', L.chain_depth);
             var counts=L.verticals_in_window||{}; var labs=Object.keys(counts); var vals=labs.map(function(k){return counts[k];});
             if(window.barH&&labs.length) window.barH('cc-bars',labs,vals,labs.map(function(){return TEAL;}));
-          }catch(e){}
         }, 'cc-stamp');
         T('cc-slsa','SLSA L1+L2');
       }
@@ -8778,7 +8825,7 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
         '<div class="card"><div class="card-h"><span class="card-t">Node roster</span><span class="card-ep" id="udm-fresh">live</span></div><div id="udm-list"><div class="row mono dim">probing mesh\u2026</div></div>'+
           '<div class="brain-note" id="udm-note"></div></div></div>'+
       '<div class="card"><div class="card-h"><span class="card-t">In-image mesh vs external organs — honest reconciliation</span><span class="card-ep">read with Command Center</span></div>'+
-        '<div class="brain-note">This 6/6 / 4-of-4 quorum is the <b>in-image capability mesh</b> a11oy actually runs on (probed live, same-origin, 0 CDN). It is <b>NOT</b> the same probe as Command Center’s “Services up 1/5”, which counts <b>external organ backends reachable on this HF demo deploy</b> — those backends (Reasoning/Policy/Operator/Receipts) are air-gap / roadmap and honestly DOWN here, never faked up. Same honest story, two probes: governed mesh healthy; organ backends not deployed on this Space.</div></div>'+
       '<div class="card"><div class="card-h"><span class="card-t">Deploy targets — same UDS bundle, cloud → edge → air-gap</span><span class="card-ep">honest · no secrets</span></div>'+
         '<div class="row"><span class="badge b-live">LIVE</span><span style="color:'+CR+'">Cloud — HF Space</span><span class="spacer mono dim">szlholdings-a11oy.hf.space · this demo deploy</span></div>'+
         '<div class="row"><span class="badge b-live">LIVE</span><span style="color:'+CR+'">Hetzner — a11oy.net</span><span class="spacer mono dim">167.233.50.75 · self-hosted</span></div>'+
@@ -13917,9 +13964,13 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
     return '<div class="card"><div style="display:flex;justify-content:space-between;align-items:center"><b>'+esc(title)+'</b>'+b+'</div><div class="dim" style="font-size:11px">'+esc(src)+'</div>'+body+'</div>';
   }
   window.energy_render=async function(c){
-    c.innerHTML='<div class="card"><div class="dim">reading live grid feeds…</div></div>';
     try{
-      var r=await fetch(EH_API+"/posture",{cache:"no-store"});
       if(!r.ok) throw new Error("HTTP "+r.status);
       var d=await r.json();
       var p=EH_POS[d.grid_price_posture]||EH_POS.unknown;
@@ -13948,6 +13999,15 @@ window.warboard_init=warboard_init; window.warboard_all=warboard_all;
         +'<div class="dim" style="font-size:11px">grid index: '+esc(d.uk_carbon_index||'—')+'</div>');
       h+='</div>';
       var when=d.ts?new Date(d.ts*1000).toLocaleTimeString():'now';
       h+='<div class="dim" style="font-size:11px;margin-top:.5rem">'+esc(d.feeds_live)+'/'+esc(d.feeds_total)+' feeds live · '+(d.cached?'cached':'fresh')+' · '+esc(when)
         +' · <a href="'+EH_API+'/harvest" target="_blank" rel="noopener">raw API</a> · <a href="https://a11oy.net/energy/" target="_blank" rel="noopener">standalone page ↗</a></div>';
       c.innerHTML=h;

 .tl-graphbox{height:clamp(280px,46vh,380px);background:#080808;border:1px solid var(--gold-line);border-radius:10px}
 .ln-dagbox{height:clamp(300px,50vh,440px);background:#080808;border:1px solid var(--gold-line);border-radius:10px}
+/* investor-grade-polish (polish/console-investor-grade): honest animated loading
+   skeletons. Replaces blank "···"/"loading…"/"probing…" placeholders with a
+   shimmering block so a panel mid-fetch reads as LOADING, never BROKEN. Purely
+   cosmetic; resolves to a real value or an honest labeled state in <1-2s. */
+@keyframes skelshimmer{0%{background-position:-200px 0}100%{background-position:calc(200px + 100%) 0}}
+.skel{display:inline-block;border-radius:6px;background:linear-gradient(90deg,rgba(201,183,135,0.06) 25%,rgba(201,183,135,0.16) 37%,rgba(201,183,135,0.06) 63%);background-size:200px 100%;animation:skelshimmer 1.2s ease-in-out infinite;vertical-align:middle}
+.skel-val{width:3.2em;height:1.05em}
+.skel-row{height:.9em;margin:.32rem 0;border-radius:5px}
+.skel-row.w90{width:90%}.skel-row.w70{width:70%}.skel-row.w55{width:55%}
+.skel-caption{font-family:var(--mono);font-size:10px;color:var(--muted);letter-spacing:.04em;margin-top:.35rem;opacity:.8}
 </style>
 </head>
 <body>
 function fetchTimeout(url,ms,opts){const ctl=new AbortController();const t=setTimeout(()=>ctl.abort(),ms||12000);
   return fetch(url,Object.assign({signal:ctl.signal},opts||{})).finally(()=>clearTimeout(t));}
 async function getPublic(url,ms){const r=await fetchTimeout(url,ms);if(!r.ok)throw new Error('HTTP '+r.status);return r.json();}
+/* ===== investor-grade-polish: FAIL-FAST KPI fetch + last-good cache ============
+   (polish/console-investor-grade) Investor watching live must never see an endless
+   "probing…". gjFast() wraps the JSON fetch with a SHORT abort timeout (default
+   1500ms) and a same-origin last-good in-memory cache. On timeout/error it does
+   NOT hang and does NOT fabricate: it resurfaces the last real value if we ever
+   had one, otherwise it throws so the caller can paint an HONEST labeled degraded
+   state ("not available right now") instead of a spinner. This composes with the
+   server-side circuit breaker (szl_resilience) + TTL cache (szl_backend_hardening)
+   already on main: the backend fails fast to a cached/honest value, and the
+   frontend refuses to wait on it. Doctrine v11: no fake values, degrade to a
+   labeled state. */
+window.__gjLast=window.__gjLast||{};
+async function gjFast(url,ms){
+  try{
+    const r=await fetchTimeout(url,ms||1500);
+    const ct=r.headers.get('content-type')||'';
+    if(!r.ok) throw new Error('HTTP '+r.status);
+    if(ct.indexOf('text/html')>=0) throw new Error('route not deployed here');
+    const j=await r.json();
+    window.__gjLast[url]={v:j,t:Date.now()};
+    return {data:j, degraded:false, cached:false};
+  }catch(e){
+    const c=window.__gjLast[url];
+    if(c){ return {data:c.v, degraded:true, cached:true, age:Date.now()-c.t, err:(e&&e.message)||String(e)}; }
+    const err=new Error((e&&e.message)||String(e)); err.__failFast=true; throw err;
+  }
+}
+/* honest degraded chip — shown when a KPI cannot be observed right now (never "down",
+   never fabricated). Reads as a labeled state, not a broken panel. */
+function honestDegraded(label){ return '<span class="badge b-gold" title="This metric cannot be observed from this Space right now — shown honestly as not-available rather than faked.">'+(label||'not available right now')+'</span>'; }
+function skelVal(){ return '<span class="skel skel-val"></span>'; }
+function skelRows(n){ var w=['w90','w70','w55','w90','w70'],h=''; n=n||3; for(var i=0;i<n;i++){ h+='<div class="skel skel-row '+w[i%w.length]+'"></div>'; } return '<div class="skel-wrap">'+h+'<div class="skel-caption">loading live data…</div></div>'; }
+window.gjFast=gjFast; window.honestDegraded=honestDegraded; window.skelVal=skelVal; window.skelRows=skelRows;
 // ===== In-browser DSSE receipt verification (WebCrypto, ECDSA P-256 / SHA-256) =====
 // Fetches a11oy's OWN in-image public key (/cosign.pub) and a signed receipt
 // envelope (/api/a11oy/v1/receipt/export), rebuilds the signing pre-auth encoding, and verifies
 const VIEWS={
   command:{title:'Command Center',badge:'LIVE',sub:'One pane of glass over the whole governed-AI platform \u2014 live service health, the connected system map, trust posture, and a verifiable audit trail.',
     render:async(c)=>{c.innerHTML=`<div class="kpis">
+      <div class="kpi"><div class="k">Services up</div><div class="v live" id="k-fleet"><span class="skel skel-val"></span></div><div class="d">live health probe</div></div>
+      <div class="kpi"><div class="k">Connections</div><div class="v teal" id="k-wires"><span class="skel skel-val"></span></div><div class="d">cross-service links</div></div>
+      <div class="kpi"><div class="k">Trust score</div><div class="v teal" id="k-lam"><span class="skel skel-val"></span></div><div class="d">vs floor 0.90</div></div>
+      <div class="kpi"><div class="k">Decisions today</div><div class="v" id="k-dec"><span class="skel skel-val"></span></div><div class="d">governed + logged</div></div>
       <div class="kpi"><div class="k">Build security</div><div class="v teal">SLSA L1+L2</div><div class="d">attested · L3 roadmap</div></div></div>
       <div class="grid2">
         <div class="card"><div class="card-h"><span class="card-t">Trust posture</span><span class="card-ep">live</span></div><div class="chartbox"><canvas id="cmd-radar"></canvas></div></div>
         <div class="card"><div class="card-h"><span class="card-t">Safety gate posture</span><span class="card-ep">live</span></div><div class="chartbox"><canvas id="cmd-gates"></canvas></div><div class="legend"><span><i style="background:#5fb3a3"></i>allow-capable</span><span><i style="background:#b06a5a"></i>deny-by-default</span></div></div>
       </div>
+      <div class="card"><div class="card-h"><span class="card-t">Service health</span><span class="card-ep">live probe</span></div><div class="brain-note" style="margin:.1rem 0 .5rem"><b>How to read “Services up”.</b> This Space runs the <b>governed mesh</b> — the in-image capability mesh is <b>6/6 healthy</b> (Byzantine quorum 4/4 REACHED, see the <b>UDS 4/4 Quorum</b> tab). The heavy <b>organ backends (Reasoning/Policy/Operator/Receipts)</b> run on <b>dedicated infrastructure (roadmap)</b>, so on this demo Space they are shown honestly as <b>not-deployed-here</b> rather than faked “up”. Same truth, two probes: organ backends not deployed on this Space; the governed mesh a11oy actually runs on is fully healthy.</div><div id="cmd-fleet">${skelRows(4)}</div></div>
+      <div class="card"><div class="card-h"><span class="card-t">Performance constants</span><span class="card-ep">real measured benchmarks</span></div><div class="kpis" id="cmd-perf">${skelRows(3)}</div><div class="brain-note">Measured benchmarks from the published thesis brief (maturity: measured). Source: THESIS_BRIEF.md / Zenodo.</div></div>${HONEST}`;
       // instant: trust radar (this service)
       try{const d=await getJSON(API+'/v1/lambda');const ax=d.axes||[];radar('cmd-radar',ax.map(a=>a.name),ax.map(a=>a.score||0));setTxt('k-lam',(d.lambda||0).toFixed?d.lambda.toFixed(3):d.lambda);}catch(e){}
       // safety gates posture (policy, fast)
       try{const g=await orgGet('core','/api/a11oy/v1/policy/gates');const gs=g.gates||[];const deny=gs.filter(x=>x.expectedDecision==='deny').length;doughnut('cmd-gates',['allow-capable','deny-by-default'],[gs.length-deny,deny],[TEAL,'#b06a5a']);}catch(e){}
       // live service probe (slower) non-blocking
       getJSON(API+'/v1/observability/summary').then(d=>{const mr=d.mesh_reach||{};const keys=Object.keys(mr);let ok=0;setHTML('cmd-fleet','');
+        keys.forEach(k=>{const p=mr[k];const up=(p.status||'ok')==='ok';if(up)ok++;addHTML('cmd-fleet',`<div class="row"><span class="badge ${up?'b-live':'b-gold'}">${up?'UP':'NOT DEPLOYED HERE'}</span><span>${esc(p.name||k)}</span><span class="spacer mono dim">${p.latency_ms?Math.round(p.latency_ms)+'ms':(up?'':'dedicated infra (roadmap)')}</span></div>`);});
+        setTxt('k-fleet',keys.length?ok+'/'+keys.length:'\u2014');}).catch(()=>{/* investor-grade-polish: NEVER fabricate "up" on error — degrade to an honest labeled state (doctrine v11) */setHTML('cmd-fleet','<div class="row mono dim">service health not available right now — shown honestly, not faked.</div>');setHTML('k-fleet',honestDegraded('n/a'));});
       try{const m=await getJSON(API+'/v1/mesh/state');setTxt('k-wires',Object.keys(m.wires||{}).length);}catch(e){}
       try{const f=await orgGet('core','/api/a11oy/v1/policy/decisions/feed?limit=50');setTxt('k-dec',f.total_buffered??(f.verdicts||[]).length);}catch(e){}
       // performance constants from published knowledge bundle (measured benchmarks)
         +'</div>'; };
     /* small helper: KPI card */
+    /* investor-grade-polish: KPI cards now seed with an animated skeleton value
+       (not a bare "…") so a card mid-fetch reads as LOADING, never BROKEN. */
+    function kpi(k,id,d,cls){ return '<div class="kpi"><div class="k">'+k+'</div><div class="v '+(cls||'')+'" id="'+id+'"><span class="skel skel-val"></span></div><div class="d">'+(d||'')+'</div></div>'; }
     function card(t,ep,inner){ return '<div class="card"><div class="card-h"><span class="card-t">'+t+'</span><span class="card-ep">'+(ep||'')+'</span></div>'+inner+'</div>'; }
     function box3d(id){ return '<div id="'+id+'" style="height:380px;position:relative"></div>'; }
     var HON=window.HONEST||'';
           +card('Trust posture (13-axis Λ)','live '+window.a11oyPoweredBy(['F19','F1']),'<div class="chartbox"><canvas id="cc-radar"></canvas></div>')
           +card('Governed throughput by vertical','live · auto-poll','<div class="chartbox"><canvas id="cc-bars"></canvas></div>')
           +'</div>'
+          +card('Service health','live probe · <span id="cc-stamp" class="mono dim" style="font-size:10px"></span>','<div class="brain-note" style="margin:.1rem 0 .5rem"><b>How to read “Services up”.</b> This Space runs the <b>governed mesh</b> — the in-image capability mesh is <b>6/6 healthy</b> (Byzantine quorum 4/4 REACHED, see the <b>UDS 4/4 Quorum</b> tab). The heavy <b>organ backends (Reasoning / Policy / Operator / Receipts)</b> run on <b>dedicated infrastructure (roadmap)</b>, so on this demo Space they are shown honestly as <b>not-deployed-here</b> rather than faked “up”. Same truth, two probes: the governed mesh a11oy actually runs on is fully healthy; the organ backends are not deployed on this Space.</div><div id="cc-fleet">'+skelRows(4)+'</div>')
+          +card('Rolling receipt stream — ALL verticals',''+liveDot()+'live · one tamper-evident chain','<div id="cc-stream">'+skelRows(3)+'</div>')
           +'<div class="card"><div class="card-h"><span class="card-t">Governance engine — powered by the proven formulas</span><span class="card-ep">honest maturity labels</span></div>'
           +'<div id="cc-formulas"></div></div>'
           +HON;
         // formulas instilled
         H('cc-formulas', window.a11oyFormula('F1')+window.a11oyFormula('F19')+window.a11oyFormula('F11')+window.a11oyFormula('F18')+window.a11oyFormula('F12'));
+        // trust radar — FAIL-FAST: short timeout, last-good cache, honest degraded chip (never an endless spinner)
+        try{var rL=await gjFast(API+'/v1/lambda');var d=rL.data;var ax=d.axes||[];if(window.radar)window.radar('cc-radar',ax.map(function(a){return a.name;}),ax.map(function(a){return a.score||0;}));T('cc-lam',(d.lambda||0).toFixed?d.lambda.toFixed(3):d.lambda);}
+        catch(e){ H('cc-lam', honestDegraded('not available right now')); }
+        // auto-poll: services + decisions + chain depth + ledger stream + throughput bars (all fail-fast)
         window.a11oyPoll(async function(){
+          try{ var rS=await gjFast(API+'/v1/observability/summary'); var s=rS.data; var mr=s.mesh_reach||{};var keys=Object.keys(mr);var ok=0;var html='';
             keys.forEach(function(k){var p=mr[k];var up=(p.status||'ok')==='ok';if(up)ok++;
+              html+='<div class="row"><span class="badge '+(up?'b-live':'b-gold')+'">'+(up?'UP':'NOT DEPLOYED HERE')+'</span><span>'+esc(p.name||k)+'</span><span class="spacer mono dim">'+(p.latency_ms?Math.round(p.latency_ms)+'ms':(up?'':'dedicated infra (roadmap)'))+'</span></div>';});
+            H('cc-fleet',html||'<div class="row mono dim">no services reported</div>'); T('cc-svc',keys.length?ok+'/'+keys.length:'—');
             T('cc-chain', s.dag_depth!=null?s.dag_depth:'—');
+          }catch(e){ if(el('cc-svc')&&el('cc-svc').querySelector('.skel')) H('cc-svc', honestDegraded('n/a')); if(el('cc-fleet')&&el('cc-fleet').querySelector('.skel')) H('cc-fleet','<div class="row mono dim">service health not available right now — shown honestly, not faked.</div>'); }
+          try{ var rF=await gjFast(API+'/v1/policy/decisions/feed?limit=50'); var f=rF.data; T('cc-dec', f.total_buffered!=null?f.total_buffered:((f.verdicts||[]).length)); }catch(e){ if(el('cc-dec')&&el('cc-dec').querySelector('.skel')) H('cc-dec', honestDegraded('n/a')); }
+          try{ var rLg=await gjFast(API+'/v1/wow/ledger?limit=12'); var L=rLg.data; var rs=L.receipts||[]; var sh='';
             rs.forEach(function(r){ sh+=window.a11oyReceiptRow(r); });
             H('cc-stream', sh||'<div class="row mono dim">no receipts yet</div>');
+            if(L.chain_depth!=null) T('cc-chain', L.chain_depth);
             var counts=L.verticals_in_window||{}; var labs=Object.keys(counts); var vals=labs.map(function(k){return counts[k];});
             if(window.barH&&labs.length) window.barH('cc-bars',labs,vals,labs.map(function(){return TEAL;}));
+          }catch(e){ if(el('cc-stream')&&el('cc-stream').querySelector('.skel')) H('cc-stream','<div class="row mono dim">receipt stream not available right now — shown honestly, not faked.</div>'); }
         }, 'cc-stamp');
         T('cc-slsa','SLSA L1+L2');
       }
         '<div class="card"><div class="card-h"><span class="card-t">Node roster</span><span class="card-ep" id="udm-fresh">live</span></div><div id="udm-list"><div class="row mono dim">probing mesh\u2026</div></div>'+
           '<div class="brain-note" id="udm-note"></div></div></div>'+
       '<div class="card"><div class="card-h"><span class="card-t">In-image mesh vs external organs — honest reconciliation</span><span class="card-ep">read with Command Center</span></div>'+
+        '<div class="brain-note">This 6/6 / 4-of-4 quorum is the <b>in-image capability mesh</b> a11oy actually runs on (probed live, same-origin, 0 CDN). It is <b>NOT</b> the same probe as Command Center’s “Services up”, which reports the <b>organ backends (Reasoning/Policy/Operator/Receipts)</b> that run on <b>dedicated infrastructure (roadmap)</b> — on this demo Space they are shown honestly as <b>not-deployed-here</b> rather than faked “up”. Same honest story, two probes: governed mesh healthy; organ backends not deployed on this Space.</div></div>'+
       '<div class="card"><div class="card-h"><span class="card-t">Deploy targets — same UDS bundle, cloud → edge → air-gap</span><span class="card-ep">honest · no secrets</span></div>'+
         '<div class="row"><span class="badge b-live">LIVE</span><span style="color:'+CR+'">Cloud — HF Space</span><span class="spacer mono dim">szlholdings-a11oy.hf.space · this demo deploy</span></div>'+
         '<div class="row"><span class="badge b-live">LIVE</span><span style="color:'+CR+'">Hetzner — a11oy.net</span><span class="spacer mono dim">167.233.50.75 · self-hosted</span></div>'+
     return '<div class="card"><div style="display:flex;justify-content:space-between;align-items:center"><b>'+esc(title)+'</b>'+b+'</div><div class="dim" style="font-size:11px">'+esc(src)+'</div>'+body+'</div>';
   }
   window.energy_render=async function(c){
+    /* investor-grade-polish: animated skeleton while the grid feeds resolve (never a
+       blank "reading…"), plus a SHORT abort timeout so a slow public feed cannot hang
+       the tab — it degrades to an honest "unavailable" state, never fabricated. */
+    c.innerHTML='<div class="card">'+(window.skelRows?window.skelRows(4):'<div class="dim">reading live grid feeds…</div>')+'</div>';
     try{
+      var _ctl=new AbortController(); var _t=setTimeout(function(){try{_ctl.abort();}catch(e){}},2000);
+      var r=await fetch(EH_API+"/posture",{cache:"no-store",signal:_ctl.signal}).finally(function(){clearTimeout(_t);});
       if(!r.ok) throw new Error("HTTP "+r.status);
       var d=await r.json();
       var p=EH_POS[d.grid_price_posture]||EH_POS.unknown;
         +'<div class="dim" style="font-size:11px">grid index: '+esc(d.uk_carbon_index||'—')+'</div>');
       h+='</div>';
       var when=d.ts?new Date(d.ts*1000).toLocaleTimeString():'now';
+      /* investor-grade-polish: make the measured-joule story explicit + investor-legible.
+         Honest by construction (szl_joules_truth): the grid feed is a real wholesale-price
+         signal, but reading energy off it is NOT a power measurement — joules stay SAMPLE
+         until a fresh on-box NVML exporter sample exists on a sovereign GPU node. */
+      var _jl=String(d.joules_label||'sample').toLowerCase();
+      var _jmeasured=(_jl==='measured');
+      h+='<div class="honesty" style="margin-top:.6rem;display:flex;align-items:center;gap:.5rem;flex-wrap:wrap">'
+        +'<span class="badge" style="border:1px solid '+(_jmeasured?'#4fb37f':'#c9a05f')+';color:'+(_jmeasured?'#5fe39a':'#c9a05f')+'">JOULES '+(_jmeasured?'MEASURED':'SAMPLE')+'</span>'
+        +'<span class="dim" style="font-size:11.5px">This is a real grid <b>price/carbon</b> signal, not a power meter. Per <code>szl_joules_truth</code> (doctrine v11), joules read <b>SAMPLE</b> until a fresh on-box NVML exporter sample is present on a sovereign GPU node — we never fabricate a “measured” number, and this feed never sets <code>sovereign:true</code>.</span></div>';
       h+='<div class="dim" style="font-size:11px;margin-top:.5rem">'+esc(d.feeds_live)+'/'+esc(d.feeds_total)+' feeds live · '+(d.cached?'cached':'fresh')+' · '+esc(when)
         +' · <a href="'+EH_API+'/harvest" target="_blank" rel="noopener">raw API</a> · <a href="https://a11oy.net/energy/" target="_blank" rel="noopener">standalone page ↗</a></div>';
       c.innerHTML=h;

pages/harvest.html CHANGED Viewed

@@ -426,8 +426,15 @@ const ENDPOINTS = {
 /* ── helpers ──────────────────────────────────────────────────── */
 function q(id){ return document.getElementById(id); }
 function safeFetch(url, label){
-  return fetch(url, {cache:"no-store"})
     .then(r => {
       if(!r.ok) throw new Error(`${r.status} ${r.statusText}`);
       return r.json();
@@ -435,7 +442,8 @@ function safeFetch(url, label){
     .catch(e => {
       console.warn(`[harvest] ${label} failed:`, e.message);
       return null;
-    });
 }
 function fmtNum(v){

 /* ── helpers ──────────────────────────────────────────────────── */
 function q(id){ return document.getElementById(id); }
+/* investor-grade-polish (polish/console-investor-grade): fail-fast fetch. A short
+   abort timeout (1.8s) means a slow/asleep backend can never leave a harvest panel
+   stuck on its skeleton — it resolves to a real value or an honest null/labeled
+   state quickly. On failure we return null (the renderers already paint an honest
+   "unreachable"/SAMPLE state) — never a fabricated value. */
 function safeFetch(url, label){
+  const ctl = new AbortController();
+  const t = setTimeout(()=>{ try{ctl.abort();}catch(e){} }, 1800);
+  return fetch(url, {cache:"no-store", signal:ctl.signal})
     .then(r => {
       if(!r.ok) throw new Error(`${r.status} ${r.statusText}`);
       return r.json();
     .catch(e => {
       console.warn(`[harvest] ${label} failed:`, e.message);
       return null;
+    })
+    .finally(()=>clearTimeout(t));
 }
 function fmtNum(v){