Add Evidence & Research tab + curated/live evidence layer (#185)

Ayni-OS: event-source ledger from real signed receipts + live Reciprocity console tab

Front door: cathedral-style sovereign 3D hero at / (console one click in at /console); current updates; 0 CDN

fix(a11oy): COPY szl_wave910_proofs.py into image (per-file Dockerfile) so /proven-formulas + proven/* + governance matrix-health resolve

re-sweep wave2: ship 4 REAL 0-CDN operator surfaces — /sovereign-search (tantivy-wasm MIT), /consensus-clusters (ngraph.leiden MIT), /mission-ledger (research-arcade MIT), /budget-router (BudgetMem+MemSkill Apache, GraphPlanner MIT)

MINED UPGRADES: governance-gateway + abacus-verify + decision-uncertainty + gor-audit (4 permissive patterns, evolved, 0-CDN, NOTICE)

fix(docker): COPY a11oy_code.py into image so the /api/a11oy/v1/code router surface registers

a11oy: live-data layer + a11oy Code live HF inference + framing/mobile pass

feat(console): BATCH-2 tab uniqueness (15 distinct real-data viz) + sec data module

chore: serve.py vendor allowlist + Dockerfile per-file COPY + NOTICE attributions

a11oy: Warhacker EXHAUSTIVE demos (5 full step-by-step demos)

COPY szl_formula_wiring.py into a11oy image (per-file)

Forge OPEN-WEIGHT alloy model layer into a11oy (DeepSeek CODE_PRIMARY; C20/W7-5 router; W5-3/W7-4 conformal; C10-C12 consensus) — UNIFIED into LLM registry

Vendor viz libs no-CDN (air-gap) + bind graph-substrate proofs to console graphs

a11oy: 5 real mission surfaces (AI Oversight / Deploy Posture / Mission Health / Trajectory Picture / Edge Run)

fix(docker): drop COPY of 3 files absent from Space (szl_llm_registry.py, szl_elite_console.py, web/elite_console.html) that caused BUILD_ERROR; keep only the new COPY szl_agentic_loop.py. Rebased on last-good Dockerfile.

feat(loop): operational RAG->tool-call->policy/trust gate->signed-receipt loop + canonical live MCP at /mcp/ + /ask-and-act consumer UI; de-advertise retired hatun-mcp Space on /hatun-mcp page

fix(docker): COPY a11oy_warhacker_obs.py (per-file Dockerfile omitted it -> /warhacker + /observability 404)

sync(space): complete build context — fix BUILD_ERROR (CTO)

sync(space): Dockerfile COPY fix so parity endpoints register (CTO)

closeout: repin to digest @sha256 :8aaea251 (bridge #232 + formulas #233 + path fix #234, main 87b5d4bc)

closeout: repin to immutable digest @sha256 :a35df795 (bridge #232 + formulas #233, main cbbe727b)

feat(space): recreate a11oy as minimal GHCR proxy (recovers exit-128; original preserved at a11oy-broken-archive)