---
title: "amaru โ Memory Cortex"
emoji: "๐"
colorFrom: green
colorTo: blue
sdk: docker
app_port: 7860
pinned: true
license: apache-2.0
short_description: "amaru โ cited reasoning that refuses to fabricate; DSSE receipts"
tags:
- memory
- rag
- faiss
- doctrine-v11
- amaru
- slsa-l1
- apache-2.0
ecosystem-stage: "operational"
---
# amaru ๐
> **โ ๏ธ Archived โ retired & consolidated into [szl-holdings/a11oy](https://github.com/szl-holdings/a11oy).** The `amaru` codename has been retired; its capabilities now ship as the **Memory** vertical inside the a11oy flagship. The standalone `szl-holdings/amaru` GitHub repository and the `szlholdings-amaru.hf.space` Hugging Face Space **no longer exist**. The clone URLs, Space links, badges, and deploy commands below are preserved for historical reference only and are **not live** โ use [szl-holdings/a11oy](https://github.com/szl-holdings/a11oy) instead.
> **Reasoning that refuses to fabricate. Every answer cites a real source or declines. Every memory op wrapped in a DSSE Khipu receipt.**
[-555?style=flat-square)](.compliance/SLSA_LEVEL.md)
[](https://search.sigstore.dev/?logIndex=1723784350)
[](https://github.com/szl-holdings/.github/tree/main/doctrine)
[](LICENSE)
**749 declarations ยท 14 axioms ยท 163 sorries ยท Doctrine v11 LOCKED ยท kernel `c7c0ba17`**
[Live demo](#live) ยท [What it does](#what-it-does) ยท [Verify](#verify-it-yourself) ยท [Architecture](#architecture) ยท [Parity vs. leaders](#parity-vs-leaders) ยท [Honest status](#honest-status)
---
## Live
**HF Space (one-click, no login):** [](https://huggingface.co/spaces/SZLHOLDINGS/amaru)
- Space URL: https://szlholdings-amaru.hf.space
- Health: `curl -s https://szlholdings-amaru.hf.space/api/amaru/v1/honest | jq '{doctrine,declarations}'` โ `{"doctrine":"v11","declarations":749}`
- Docs: https://docs.szlholdings.com/flagships/amaru
- Release: v1.0.0
---
## What it does
**amaru is the reasoning cortex.** It answers questions with citations and refuses when evidence is absent โ it never invents a justification. This is the trust layer for any commander-facing readiness or assessment dashboard: automation bias kills trust; amaru produces reasoning an operator can act on.
Key capabilities:
- **Cited reasoning** โ every answer tied to a chunk-level source; refuses to fabricate when evidence is absent
- **FAISS RAG memory** โ provenance receipts on every memory read/write; COSE_Sign1-wrapped (RFC 9052) per op
- **7-Chakra scheduler** โ ASCEND/DESCEND pipeline; each chakra emits a receipt trace entry
- **Cardano L1 anchor** โ checkpoint hashes as transaction metadata (hash anchoring only โ not a token)
- **Competitive parity** โ Splunk-style analytics, Credo AI-style bias detection (live, HTTP 200)
**NATO Explainability/Traceability fit:** amaru produces the cited rationale doctrine requires. When an operator asks *why* the system flagged a track, amaru produces a cited answer or refuses โ it never invents a justification.
---
## Verify it yourself
```bash
# 1. Confirm live doctrine numbers
curl -s https://szlholdings-amaru.hf.space/api/amaru/v1/honest \
| jq '{doctrine, declarations, axioms_unique, sorries_total}'
# => {"doctrine":"v11","declarations":749,"axioms_unique":14,"sorries_total":163}
# 2. Sign a Khipu receipt and verify the DSSE envelope
DSSE=$(curl -s -X POST https://szlholdings-amaru.hf.space/api/amaru/khipu/sign \
-H 'content-type: application/json' \
-d '{"receipt":{"action_id":"demo"}}' | jq .dsse)
curl -s -X POST https://szlholdings-amaru.hf.space/api/amaru/khipu/verify \
-H 'content-type: application/json' -d "{\"dsse\":$DSSE}" | jq '{verified, signatures}'
# => {"verified": true, "signatures": [{"keyid":"szlholdings-cosign","verified":true}]}
# 3. Verify cosign keyless signature on the published image (SLSA L1 honest)
cosign verify ghcr.io/szl-holdings/amaru:uds-v0.2.0 \
--certificate-identity-regexp="^https://github.com/szl-holdings/" \
--certificate-oidc-issuer="https://token.actions.githubusercontent.com"
# => Verified OK (Rekor index 1723784350)
# 4. SLSA L2 provenance attestation is roadmap (Wire D), not yet earned.
# Currently returns "no matching attestations":
# cosign verify-attestation --type slsaprovenance ghcr.io/szl-holdings/amaru:uds-v0.2.0 \
# --certificate-identity-regexp="^https://github.com/szl-holdings/" \
# --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
```
**Full guide:** [developers/VERIFY.md](https://github.com/szl-holdings/developers/blob/main/VERIFY.md)
---
## Architecture
```mermaid
graph TD
Q[Query] --> FAISS[FAISS RAG\nchunk-level retrieval\nprovenance hash per chunk]
FAISS --> CH[7-Chakra scheduler\nASCEND/DESCEND\neach chakra emits receipt]
CH --> ANS{Evidence found?}
ANS --> |Yes| CITE[Cited answer\nreceipt signed\nChakra trace entry]
ANS --> |No| REFUSE[Explicit refusal\nreceipt signed\nnever fabricates]
CITE & REFUSE --> KD[Khipu DAG\nDSSE P-256 signed\nCOSE_Sign1 per op]
KD --> CARD[Cardano anchor\ncheckpoint hash\ntx metadata only]
```
---
## Parity vs. leaders
| Capability | Palantir / Splunk | amaru | Differentiator |
|---|---|---|---|
| RAG / retrieval | โ
| โ
FAISS chunk-level | โ |
| Citation of sources | partial | โ
**chunk-level provenance** | Every claim tied to a verifiable source chunk |
| Refusal when no evidence | โ | โ
**explicit refusal** | Never fabricates; Palantir doesn't guarantee this |
| Receipt per reasoning op | โ | โ
**COSE_Sign1 per op** | โ |
| Supply-chain provenance | โ | โ
**cosign-signed (SLSA L1 honest; L2 roadmap)** | Individually verifiable via `cosign verify` |
| Bias detection | โ
(Credo AI) | โ
parity endpoint | โ |
---
## Quickstart
```bash
docker run --rm -p 7860:7860 ghcr.io/szl-holdings/amaru:uds-v0.2.0
```
> Note: in-Space Khipu DSSE receipts are signed with real ECDSA-P256 when `SZL_COSIGN_PRIVATE_PEM` runtime secret is present; otherwise receipts are emitted unsigned and labelled โ never silently fabricated.
---
## Honest status
| Claim | Status |
|---|---|
| Live HF Space (HTTP 200) | โ
|
| SLSA Build L1 honest (L2 roadmap via Wire D) | โ
L1 โ cosign-signed, Rekor [1723784350](https://search.sigstore.dev/?logIndex=1723784350). L2 attestation not yet earned (`cosign verify-attestation` returns "no matching attestations"). |
| cosign keyless signed | โ
|
| DSSE Khipu receipts | โ
โ ECDSA P-256-SHA256 when secret present; labelled UNSIGNED otherwise |
| Cardano anchor | โ ๏ธ Demo-seeded; not on mainnet |
| Lean 749/14/163 @ `c7c0ba17` | โ
|
| ฮ-uniqueness | โ ๏ธ Conjecture 1 โ not a theorem |
| SLSA L3 | โ Not claimed |
---
Doctrine v11 LOCKED ยท 749/14/163 ยท kernel `c7c0ba17` ยท SLSA L1 honest (L2 roadmap) ยท ฮ = Conjecture 1 ยท Apache-2.0
Signed-off-by: stephenlutar2-hash