a11oy is the enterprise / regulated-AI platform (the code spine); killinchu is the defense & maritime front-end built on it. One doctrine, one receipt bus, two buyers.
◆ Estate hub — every Space, live → · Verify a receipt → · Read the docs → · docs-site repo →
| Space | What it is | Open |
|---|---|---|
| ◆ estate hub — one flag | The single index of the whole estate: every Space read from the live Hugging Face API at page load, each card's title & description passed through verbatim (REPORTED), per-Space runtime status fetched live (RUNNING = running now), honest UNAVAILABLE on any failure. New Spaces appear automatically. 0 runtime CDN. | open → |
| a11oy — flagship | Governed-AI Command Center: ask-and-act behind deny-by-default gates, a live decision feed, and a signed receipt for every action. | a-11-oy.com |
| Holographic Estate — 3D showcase | The frontier tier as one live holographic lattice — 70+ live surfaces (frontier organs, energy, counter-UAS, governance, PINN, anatomy) in navigable 3D, the exact live count self-verifiable at /api/a11oy/v1/frontier/surfaces. 0 runtime CDN; WebGL2 with optional WebGPU; every value carries its honesty label. |
a-11-oy.com/holographic |
| the Brain | Shared governed memory + energy substrate under a11oy — a receipt-vault agents pull context from, feeding the governed agent-loop and energy allocation. Every read/write is Λ-gated (Conjecture 1, never green) and receipted. | a-11-oy.com/brain |
| killinchu | Counter-UAS & maritime command demonstration — multi-sensor fusion with signed engagement receipts (effector link is a labeled simulation). | demo → |
| anatomy | Living anatomy map — the locked-8 ladder and the four honesty tiers, visualized. | view → |
| david-leads | Sovereign insurance intelligence — audit-defensible lead intelligence from public data only. | view → |
| energy-attest-holo | Honest energy-attestation surface: attests the sovereign mesh's live NVML meters and shows RED / UNAVAILABLE when none are live (the honest current state), with GB grid carbon intensity as REPORTED context. 0 runtime CDN. | view → |
| governed-norm-holo | Inspectable rendering of the a11oy WILLAY refusal classifiers — every governed-refusal rule discloses its category, what it fires on, its rationale and its lineage. The live list is fetched keyless from a11oy /willay/classifiers (REPORTED; honest UNAVAILABLE if the gate is unreachable). Trust ceiling 0.97; 0 runtime CDN. |
view → |
| lambda-gate-holo | The Λ governance-trust gate as a holographic explainer: Λ = Conjecture 1 (never a theorem, never green), status read live from the machine-checked szl-formula-ledger — unconditional uniqueness is machine-checked FALSE, only a conditional Theorem U is proven. Trust ceiling 0.97; 0 runtime CDN. | view → |
| receipt-chain-live | The Khipu receipt lake's sha3-256 hash chain re-verified in your browser — fetches the live lake keyless and recomputes every link locally (verification = MEASURED-in-your-browser; lake values REPORTED; honest UNAVAILABLE if the lake is unreachable). | view → |
| szl-provctl-live | Provenance-DAG verify hologram for the szl-provctl kernel — in-browser hash verification over the kernel's real provenance sample (labeled as a sample, not live telemetry). | view → |
| szl-kernels-live | The governed-kernel suite hub — every kernel hologram in one surface, LIVE/ROADMAP status fetched from the HF Spaces API at page load (REPORTED: a roadmap item only shows LIVE when its Space is actually running). | view → |
| szl-govsign-live | The szl-govsign kernel's DSSE / in-toto signing story — real kernel source fetched live + keyless (REPORTED verbatim), PAE cross-checked against the DSSE spec vector and ECDSA P-256 sign/verify run in your browser via WebCrypto (MEASURED; demo keypair explicitly labeled NOT a production key). | view → |
| szl-blocked-live | honest-BLOCKED as a first-class state — the szl-blocked deny-by-default lattice (HARD_DENY > advisory-Λ-tighten > HARD_ALLOW) felt interactively (labeled DEMO), kernel source passed through verbatim, EU AI Act Annex IV DRAFT-skeleton doctrine passed through exactly (NOT legal advice). | view → |
Not claims — receipts. Three independent surfaces over the same signed evidence:
| Surface | What it is | Open |
|---|---|---|
| Quant signals wall | Every signal & backtest as a DSSE-signed receipt, re-verified server-side against a pinned key on every request — plus the engine's autonomous ~6-hourly paper ledger (hash-chain-sealed; the wall MEASURES what the ledger recorded, promises nothing). ADVISORY / PAPER-ONLY: verification proves integrity + origin, never accuracy or profitability. | a-11-oy.com/signals |
| szl-lake dataset | The canonical receipt corpus (khipu chains · quant family · papers · trajectories · SBOMs), mirrored GitHub ↔ Hugging Face with per-file sha256 manifests; the quant ledger is re-verified in CI against the pinned engine key before every mirror lands. | 🤗 szl-lake |
| Autonomous ledger (raw) | The append-only data branch written by the engine's scheduled CI — DSSE receipts + hash chain, independently walkable with the published verifier. GitHub cron is best-effort: gaps mean runs did not fire. | szl-quant@ledger |
8 formulas locked-proven · Λ = Conjecture 1, never green · honest by design · public data only.
lutar-lean · 🤗 SZLHOLDINGS · concept DOI 10.5281/zenodo.19944926 · No production ATO claimed · SLSA L1 honest / L2 attested / L3 roadmap · trust ceiling 0.97, never 100%