FIX: honest proven count + Live System Map redesign (service-health dashboard)

NOTICE: attribute vendored MIT/Apache viz libs (3d-force-graph/globe.gl/force-graph vasturiano MIT, ECharts/echarts-gl Apache-2.0, Cytoscape MIT, d3 ISC) for frontier tabs

a11oy frontier tabs: +7 live 3D tabs (Governance Atlas, AI Oversight, Model Atlas, MELT Observability, Threat Graph, Deploy Posture, Warhacker Proofs) — additive, reads existing live APIs, vendored MIT viz

a11oy frontier tabs: +7 live 3D tabs (Governance Atlas, AI Oversight, Model Atlas, MELT Observability, Threat Graph, Deploy Posture, Warhacker Proofs) — additive, reads existing live APIs, vendored MIT viz

a11oy Code: governed agentic coder tab (chat/code/research) + per-run-genesis tamper-evidence fix

Forge OPEN-WEIGHT alloy model layer into a11oy (DeepSeek CODE_PRIMARY; C20/W7-5 router; W5-3/W7-4 conformal; C10-C12 consensus) — UNIFIED into LLM registry

Vendor viz libs no-CDN (air-gap) + bind graph-substrate proofs to console graphs

console: agentic Exposure Priority panel on CVE Watch (leader-grade, additive)

console: agentic Exposure Priority panel on CVE Watch (leader-grade, additive)

fix(loop): relocate uvicorn.run entry-point to EOF so the governed 6-receipt agent loop + warhacker tabs register (were dead code after a mid-file blocking uvicorn.run); ship proven 6-receipt szl_agentic_loop (retrieve->quarantine->tool->policy->kernel->emit, P3 non-interference). Surgical: only serve.py entry-point moved + module updated. Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

a11oy: 5 real mission surfaces (AI Oversight / Deploy Posture / Mission Health / Trajectory Picture / Edge Run)

fix(loop): move GOVERNED AGENT LOOP block BEFORE `if __name__=='__main__'` uvicorn.run() — it was dead code after the blocking call (never executed under `python serve.py`), so /mcp/ + /api/<ns>/v1/agent/* never registered. Now registers at boot.

diag: add /api/a11oy/v1/agent/_diag (inserted at 0) to surface loop-registration result/traceback at runtime

instill: knowledge.json v6.0.0 proof_summary + anatomy, conformal Trust Score, formulas tab

fix(docker): drop COPY of 3 files absent from Space (szl_llm_registry.py, szl_elite_console.py, web/elite_console.html) that caused BUILD_ERROR; keep only the new COPY szl_agentic_loop.py. Rebased on last-good Dockerfile.

feat(loop): operational RAG->tool-call->policy/trust gate->signed-receipt loop + canonical live MCP at /mcp/ + /ask-and-act consumer UI; de-advertise retired hatun-mcp Space on /hatun-mcp page

a11oy build wave: leader-grade console v4. INSTILL canonical knowledge (v5.1.0: locked-5 F1/F11/F12/F18/F19 proven, wave3/4/5 proof blocks, 23 puriq formulas, 10 vertical policies, plain-language maturity labels). ADD 4 out-of-this-world tabs: Trust Ledger (entity graph + verified hash-chain proof timeline), Knowledge Lineage (axiom->theorem->formula->DOI DAG colored by proof maturity + AIBOM export), Mission Health (Workloads honeycomb + business-outcome banner + signed trust floor), Reasoning Replay (3D run-tree + eval-on-span + chain receipt). UPGRADE graphs: live auto-refresh, animated, tooltips/legends/units, 3D where it helps. 33 tabs. HONEST: Lambda=Conjecture 1; only kernel-verified labeled proven; SLSA L2 (not L3); UNSIGNED receipts labeled honest; 0 amaru/sentra/rosie user-visible refs. All in-image data REAL (live local endpoints).

a11oy build wave: leader-grade console v4. INSTILL canonical knowledge (v5.1.0: locked-5 F1/F11/F12/F18/F19 proven, wave3/4/5 proof blocks, 23 puriq formulas, 10 vertical policies, plain-language maturity labels). ADD 4 out-of-this-world tabs: Trust Ledger (entity graph + verified hash-chain proof timeline), Knowledge Lineage (axiom->theorem->formula->DOI DAG colored by proof maturity + AIBOM export), Mission Health (Workloads honeycomb + business-outcome banner + signed trust floor), Reasoning Replay (3D run-tree + eval-on-span + chain receipt). UPGRADE graphs: live auto-refresh, animated, tooltips/legends/units, 3D where it helps. 33 tabs. HONEST: Lambda=Conjecture 1; only kernel-verified labeled proven; SLSA L2 (not L3); UNSIGNED receipts labeled honest; 0 amaru/sentra/rosie user-visible refs. All in-image data REAL (live local endpoints).

Scrub internal codenames from user-visible API responses: generic a11oy capability names in mesh/state, warhacker launch/index, observability trace; eval-arena domain=logistics; vertical-pack id=voyage. Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

Deploy a11oy console v3 to pages/console.html (the actual / front-door served by serve.py spa_root). v3: self-contained 3D (Living Organism / Live System Map / Service Map render real interactive content, no black), in-image ECDSA DSSE signing (receipts PASS + tamper FAIL), 4 new tabs (Governed Decision, Eval Arena, Business Observability, Vertical-Pack Ecosystem), upgraded Forecast (8 metrics + 80/95% PI bands), 30 nav tabs, organ-name scrub (0 amaru/sentra/rosie/killinchu/drones/vessels user-visible refs). Keeps console/index.html in sync.

Deploy a11oy console v3 + serve_v2: self-contained 3D (Living Organism / Live System Map / Service Map render real interactive content, no black scenes), in-image ECDSA DSSE signing (receipts PASS + tamper FAIL), 4 new tabs (Governed Decision, Eval Arena, Business Observability, Vertical-Pack Ecosystem), upgraded Forecast (8 metrics + 80/95% PI bands), 30 nav tabs, organ-name scrub (0 amaru/sentra/rosie/killinchu/drones/vessels user-visible refs).

a11oy landing: strip remaining jargon from user-facing copy per honesty rules (no greek/internal symbols in marketing text) — 'Trust score (lambda-symbol)'->'Trust score', formula 'lambda-Cone Monotonicity'->'Trust-Floor Monotonicity', footer line now reads 'TRUST SCORE = RESEARCH CONJECTURE (NOT A THEOREM)'. pages/landing.html only; no serve.py / console.html change.

a11oy: wire /landing route (SMALLEST additive serve.py edit) so the investor-grade marketing landing (pages/landing.html) is served instead of the SPA soft-404. Added one @app .get('/landing') decorator route mirroring the proven /console route, placed BEFORE the SPA catch-all. NO change to console.html or any other route — pure additive insertion atop the current raw/main serve.py (verified byte-identical base).

a11oy: add investor-grade marketing landing at /landing (pages/landing.html) leading into the live command console; register the /landing route inside the already-imported a11oy_frontier_patch.py (NO serve.py / console.html edit). Animated orbital brain, live KPIs from /api/a11oy/v1/* (services-up, trust score, gates), shared SZL house style.

a11oy: add investor-grade marketing landing at /landing (pages/landing.html) leading into the live command console; register the /landing route inside the already-imported a11oy_frontier_patch.py (NO serve.py / console.html edit). Animated orbital brain, live KPIs from /api/a11oy/v1/* (services-up, trust score, gates), shared SZL house style.

a11oy: add investor-grade marketing landing at /landing (pages/landing.html) leading into the live command console; register the /landing route inside the already-imported a11oy_frontier_patch.py (NO serve.py / console.html edit). Animated orbital brain, live KPIs from /api/a11oy/v1/* (services-up, trust score, gates), shared SZL house style.

Self-contain organ endpoints into a11oy (sentra/amaru/rosie -> native same-origin routes); console.html ORG map -> same-origin so sibling Spaces can be retired.

Genius command platform: 8 showstopper 3D/globe/graph tabs + knowledge base (ontology, KaTeX formulas, vertical policies, perf constants)

Genius command platform: 8 showstopper 3D/globe/graph tabs + knowledge base (ontology, KaTeX formulas, vertical policies, perf constants)

a11oy fix: add barV chart helper (threats tab), strip jargon from forecast note. Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

a11oy = THE consolidated platform: plain-language tabs (Ask&Act, Safety Gates, Trust Score, Live Decisions, Readiness, Compliance, Forecast, Signed Receipts, Threat Library...) all wired to live services, real charts+3D, no jargon. Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

a11oy app: REAL VISUALS — 3D mesh organism, Lambda radar+gauge, gate/formula doughnuts, throughput bars. Product face, not JSON dumps. Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

a11oy Command Center: instant mesh+evidence paint, non-blocking fleet probe with honest in-progress label. Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

a11oy app: fast fleet KPI (public-URL probe not slow /v4/fleet), honest empty-bounty + deep-probe labels. Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

a11oy app: expand orchestrator to 18 real tabs (Fleet, Gates, Lambda, Audit, Brain, MCP, Reasoner, Bounty, Honest) — all wired to live endpoints. Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>

docs(slsa): sync Space card with GitHub README (SLSA L1 honest; L2 roadmap, not yet claimed)

fix(a11oy app): null-safe DOM writes (eliminate innerHTML race when navigating during async fetch)

feat(a11oy): root / serves the full application directly (primary face = the app, like amaru opens into operational-core)

fix(a11oy app): real endpoint contracts (replay {action}, lambda {axes}, puriq formulas) — no guessed payloads

feat(a11oy): full left-nav application at /console (10 live views + cross-flag switcher, unified house style)

feat(a11oy): real /console + /wires pages backed by live endpoints (no SPA soft-404, no stub)

fix(warhacker): P5 self-call off-loop via to_thread + loopback (resolves single-worker deadlock)

fix(warhacker): P5 Raven self-call via loopback (avoid HF self-loopback timeout)

fix(observability): probe organs over PUBLIC hf.space health URLs -> 5/5 reachable on HF (env-configurable for cluster)

fix(docker): COPY a11oy_warhacker_obs.py (per-file Dockerfile omitted it -> /warhacker + /observability 404)

fix(a11oy): never proxy v1/warhacker + v1/observability to Node backend (local routes win); honest 404

feat(a11oy): /warhacker orchestration (5 problems) + /observability (signed AI-obs, Λ-drift)

fix(superpowers): gate-registry rebind bug -> replay+tamper buttons now return real data

fix(ui): a11oy console works + house style (click-tested locally; UI-fix squad)

docs(slsa): sync Space card with GitHub README (SLSA L1 honest; L2 roadmap, not yet claimed)