fix: make receipt evaluation portable

chore(estate): record managed generation 3c20fe2a6b0c

chore(estate): record managed generation 9103857fb407

chore(estate): record managed generation c138c8ef5069

chore(estate): record managed generation d11b55f24dc4

chore(estate): record managed generation 8dc039c66dff

chore(estate): record managed generation c2549d77d900

chore(estate): record managed generation 1d7d8abeeffb

chore(estate): record managed generation c5965d61cdf3

chore(estate): record managed generation aa08b69b460f

chore(estate): record managed generation a5f761b7e307

chore(estate): record managed generation 5590c2e05d38

chore(estate): record managed generation 187ad69c632d

chore(estate): record managed generation 2f8fd5775336

chore(estate): record managed generation 8d036143ec12

chore(estate): record managed generation a8be4fe65b97

chore(estate): record managed generation 0d83e76c67a5

card: honest source-of-record + family cross-links (kernels unification)

surrogate v1: REAL trained BLOCK/ALLOW HistGB (fidelity 0.9977 MEASURED) + receipt + scripts + honest card/provenance

docs: publish staged house card (szl-blocked)

docs: honesty plate — NOT A RUNNABLE MODEL (why no pipeline/base_model tags)

card: estate header v2 (holographic banner + evidence links)

Link verified first-class Kernel Hub package (#4)

Clarify refusal and Annex IV draft scope (#3)

docs(provenance): attest model source of record (#2)

docs: correct companion-package import pattern + verified hash-algo labels

docs: download-ready card — live demo links, install lines, file map (honest labels preserved)

docs: quickstart-first card layout (kernels-community pattern)

docs(cite): add doi: tags + Cite this/BibTeX + PAPERS_INDEX cross-link

Add top-of-card runnable kernels get_kernel() quickstart (governed_call ALLOW/BLOCK) + honest structural output block

W-HF: cross-link estate router + receipt hub in kernel-suite footer

docs: cross-link Governed Kernels collection + live a11oy console

fix: correct security contact to live domain (szlholdings.com; .ai does not resolve)

Add SECURITY.md (responsible disclosure policy) — DevOps hygiene

Add LICENSE file (Apache-2.0) to match declared license — DevOps hygiene

fix: replace sunset a11oy.net with canonical a-11-oy.com (#1)

Complete suite back-link table (add meter+provctl); add eu-ai-act/compliance tags; add live-Spaces note

docs: add Install section with pip install step before Quickstart

docs: add Ouroboros Thesis concept DOI 10.5281/zenodo.19944926

add szl-blocked model card

add szl_euaiact metadata.json

Add EU AI Act Annex IV auto-derivation from provenance

Add GovernedGate + governed_call (honest-BLOCKED first-class state)

Add hard security rules

Add szl_euaiact package init

Add chain re-export (suite-identical digest scheme)

Add build manifest

Add szl_blocked metadata

Add szl_blocked package init

initial commit