docs: clarify empty Hub mirror and canonical energy-attest source

README.md

@@ -1,28 +1,56 @@
 ---
 license: apache-2.0
 tags:
-- szl
-- governed-inference
-- energy-attestation
-- receipts
+  - szl
+  - governed-inference
+  - energy-attestation
+  - receipts
+  - source-pointer
+  - no-implementation-here
 ---
 
 # szl-energy-attest
 
-Attestable energy receipts for governed compute — MEASURED NVML joules, or an honest `UNAVAILABLE`/`null` when no meter is present. Never fabricates a joule.
+> **SOURCE POINTER · HUB MIRROR EMPTY · NOT AN INSTALLABLE IMPLEMENTATION**
+>
+> This Hugging Face repository is a public pointer to the canonical `szl-energy-attest` source. The canonical source's `HUB_MIRROR_STATUS.json` records this Hub artifact as `MIRROR_EMPTY` on 2026-09-04. Do not infer that package files, tests, a Kernel Hub loader, or a runnable implementation are published here.
 
-**Canonical GitHub source:** https://github.com/szl-holdings/szl-energy-attest (this Hub repo is the publish mirror).
+## Canonical implementation
 
-## What it does
+The maintained implementation, test suite, examples, migration evidence, and package manifest are in the canonical GitHub repository:
 
-- Records measured GPU energy (NVML joules), tokens-per-joule, advisory policy-gate status, and tamper-evident SHA-256 hash-chained receipts for inference runs.
-- Absorbs the deprecated `governed-inference-meter` surface (see its Hub card, tagged `deprecated`).
-- Energy labels are typed: `MEASURED` (live meter), `REPORTED` (external context), `UNAVAILABLE` (no meter — recorded as null, never invented).
+https://github.com/szl-holdings/szl-energy-attest
 
-## Doctrine boundary
+The source repository contains `pyproject.toml`, `szl_energy_attest/`, `energy_core/`, `examples/`, `tests/`, `MIGRATION_PROVENANCE.json`, `SPEC.md`, and CI that installs pytest plus the pinned `szl-receipt` dependency before running `pytest -q`.
 
-- Λ (Lambda-Spine) aggregation is **Conjecture 1** — advisory, never a theorem.
-- Unsigned receipts are labeled `UNSIGNED` honestly; DSSE/ECDSA-P256 signing rolls in via `szl-receipt`.
-- Locked-proven formula count is exactly **8** `{F1,F4,F7,F11,F12,F18,F19,F22}`.
+## What the canonical source provides
 
-Part of the SZL Holdings governed-AI estate: https://github.com/szl-holdings · product https://a-11-oy.com · proof https://a11oy.net
+- NVML-backed energy attestation when a live meter is available.
+- Honest null / unavailable energy fields when no meter is available.
+- Tokens-per-joule only when joules are actually measured.
+- Tamper-evident receipt-chain support.
+- Optional signing and interop paths through `szl-receipt`.
+- Migration evidence for the deprecated `governed-inference-meter` surface.
+
+This Hub card does not itself establish that any of those interfaces are loadable from Hugging Face, currently tested, runnable in a particular environment, or producing measured energy on your hardware.
+
+## Evidence boundary
+
+```text
+Hub repository      = source pointer / mirror-empty record
+Canonical source    = GitHub repository named above
+NVML joules         = measured only when a live compatible meter is available
+No meter            = UNAVAILABLE / null; never fabricated
+Λ aggregation       = Conjecture 1; advisory, never a theorem
+Unsigned receipt    = UNSIGNED; never represented as signed
+```
+
+## Legacy relationship
+
+`governed-inference-meter` is deprecated. It remains a historical tombstone and must not be used as new integration guidance. The canonical successor source is `szl-energy-attest`; consult its migration evidence before changing an existing integration.
+
+## Use boundary
+
+Do not treat this Hub repository as a model, checkpoint, benchmark, deployment, current runtime-status assertion, or energy-performance claim. Follow the canonical source and its tests for installation, verification, and migration instructions.
+
+Apache-2.0.