feat(console): make GitHub + Hugging Face topbar links permanent

a11oy frontier: server-side live feeds (NVD/KEV/arXiv) + research corpus; +3 Wave9/10 cards (RA-1/OE-2/MR-1) live; doctrine cleanup (dead rosie.hf.space removed, codenames scrubbed from companion output, capability-labelled fleet); SLSA L1-honest/L2-roadmap across console + serve

feat(warhacker): a11oy 7->25 demos + doctrine

Hero polish: fully hide boot overlay after fade (no lingering text)

Front door: cathedral-style sovereign 3D hero at / (console one click in at /console); current updates; 0 CDN

Add sovereign ES-module Three.js + OrbitControls for cathedral-style front-door hero (0 CDN)

Tab cleanup (conservative): remove 6 merged-away nav entries (Signed Receipts, Trust Ledger, Threat Library, Known-Exploited, Business Observability, MELT, System Health); fold ECDSA verify panel into Receipt Chain (A1) and Threat Library list into Adversary Techniques (A3). Endpoints + view code untouched; doctrine intact (Lambda=Conjecture 1, locked-5, 0 codenames, 0 CDN).

fix(a11oy): COPY szl_wave910_proofs.py into image (per-file Dockerfile) so /proven-formulas + proven/* + governance matrix-health resolve

feat(a11oy): instill Wave9/10 proven formulas (experimental, CI-green) — proven-formulas tab + Gershgorin matrix-health pre-flight in governance gateway + audit/replay theorem cards in gor-audit

re-sweep wave2: ship 4 REAL 0-CDN operator surfaces — /sovereign-search (tantivy-wasm MIT), /consensus-clusters (ngraph.leiden MIT), /mission-ledger (research-arcade MIT), /budget-router (BudgetMem+MemSkill Apache, GraphPlanner MIT)

Add experimental proof tier (1304/22 @ 7885fd9) to szl_be_hardening.py honest block alongside locked floor (749/14/163, 5 proven); Λ=Conjecture 1 verbatim

Doctrine: surface BOTH proof tiers (locked 749/14/163 + experimental 1304/22, ~36 CI-green); locked-proven=5, Λ=Conjecture 1 unchanged

MINED UPGRADES: governance-gateway + abacus-verify + decision-uncertainty + gor-audit (4 permissive patterns, evolved, 0-CDN, NOTICE)

fix(honesty): warhacker /index locked_proven = exactly 5; Wave8 demo formulas split to experimental_ci_green

rename: AMARU->YACHAY, SENTRA->CHAPAQ (user-visible) + SLSA reconcile

Warhacker: expand demo tab to full 5x5 = 25 demos (per-problem demos, real tamper, honest formula panels, sovereign canvas globe fallback)

fix(a11oy.code): scrub deep-reasoning co-pilot codename from /v1/code/chat-deep response payload

fix(docker): COPY a11oy_code.py into image so the /api/a11oy/v1/code router surface registers

fix(a11oy.code): register /api/a11oy/v1/code/{tiers,health,index,roster,route,auto,complete} before catch-all; live HF-router inference with honest deterministic fallback; rename chat-with-rosie -> chat-deep (scrub codename)

a11oy: framing pass v2 — flex-column body lock + kbformulas/mobile overflow fix

a11oy: framing pass v2 — flex-column body lock + kbformulas/mobile overflow fix

a11oy: live-data layer + a11oy Code live HF inference + framing/mobile pass

feat: BATCH-3 final tab uniqueness (15 distinct viz) + 2 new Warhacker demos (ai-sbom, agentic-provenance)

feat: BATCH-3 final tab uniqueness (15 distinct viz) + 2 new Warhacker demos (ai-sbom, agentic-provenance)

fix(api): register batch-2 /api/a11oy/v1/sec/* BEFORE the Node proxy catch-all

feat(console): BATCH-2 tab uniqueness (15 distinct real-data viz) + sec data module

feat(console): batch-1 tab uniqueness (distinct real-data viz per tab) + sovereign fonts

feat(console): batch-1 tab uniqueness (distinct real-data viz per tab) + sovereign fonts

feat(console): batch-1 tab uniqueness (distinct real-data viz per tab) + sovereign fonts

feat(console): batch-1 tab uniqueness (distinct real-data viz per tab) + sovereign fonts

chore: serve.py vendor allowlist + Dockerfile per-file COPY + NOTICE attributions

feat(console): batch-1 tab uniqueness (distinct real-data viz per tab) + sovereign fonts

chore: serve.py vendor allowlist + Dockerfile per-file COPY + NOTICE attributions

fix(fonts): self-host @font-face in SPA shells (remove Google Fonts CDN)

feat(vendor): add dagre+cytoscape-dagre+d3-sankey (MIT/ISC) for batch-1 viz

feat(vendor): add ngraph.graph/path/forcelayout+panzoom (BSD-3/MIT, anvaka)

fix(warhacker): make shallow launch endpoint genuinely mode-aware + real per-run receipts

a11oy: wh-demo run handler honors ?mode= query param (robustness)

a11oy: Warhacker EXHAUSTIVE demos (5 full step-by-step demos)

yuyay licenseHygiene: word-boundary match (disclosed != closed)

yuyay heuristic fix: 'never 100%' is honest hedge (not overclaim) + honest preset wording

deep-upgrade: vendor fonts (zero CDN), Prometheus proxy + YUYAY 13-axis conjunctive gate endpoint, Organism anatomy tab + Warhacker play-by-play (step timeline + boolean cascade + tamper-fail + hollow-pass guard)

add capability_map (theorem->mechanism wiring) to a11oy proof_summary

COPY szl_formula_wiring.py into a11oy image (per-file)

register formula-wiring surface on a11oy app (additive, pre-catchall)

add szl_formula_wiring (shared): live theorem mechanisms + endpoints

wire ~80 theorems into governed loop (a11oy): formula_proof per run

FIX: honest proven count + Live System Map redesign (service-health dashboard)

NOTICE: attribute vendored MIT/Apache viz libs (3d-force-graph/globe.gl/force-graph vasturiano MIT, ECharts/echarts-gl Apache-2.0, Cytoscape MIT, d3 ISC) for frontier tabs

a11oy frontier tabs: +7 live 3D tabs (Governance Atlas, AI Oversight, Model Atlas, MELT Observability, Threat Graph, Deploy Posture, Warhacker Proofs) — additive, reads existing live APIs, vendored MIT viz