README.md

metadata

title: a11oy — Governance Substrate
emoji: 🔬
colorFrom: indigo
colorTo: gray
sdk: docker
app_port: 7860
pinned: true
license: apache-2.0
short_description: a11oy — policy + receipt substrate
tags:
  - governance
  - agentic-ai
  - doctrine-v11
  - a11oy
  - execution-fabric
  - apache-2.0
ecosystem-stage: operational

Live

HF Space (one-click, no login):

• Space URL: https://szlholdings-a11oy.hf.space
• Health: curl -s https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest | jq .kernel_commit → "c7c0ba17"
• Docs: https://docs.szlholdings.com/flagships/a11oy
• Release: v1.0.0

---

What it does

a11oy is the audit-fiber continuity layer for the SZL mesh. Every AI action routes through a11oy and leaves a DSSE-enveloped Khipu receipt on a SHA-256 hash-linked Merkle DAG. The invariant is receipts.in ≡ receipts.out: nothing is lost between the decision and the proof.

Key capabilities:

• Policy + receipt substrate — /v1/policy/evaluate, /v1/verify, /v1/ledger: deny-by-default; every action signed
• Honest disclosure — /v1/honest reports live doctrine posture (749/14/163, Λ = Conjecture 1)
• 8 TS workspace libs — @szl-holdings/a11oy-knowledge, a11oy-policy, a11oy-qec-integrity, a11oy-receipt-substrate, perception-loop, rae1, sequence-pipeline, sparse-attention-kit
• DSSE Khipu receipts — ECDSA P-256-SHA256; multi-party-witnessed; BFT quorum-capable

---

Verify it yourself

# 1. Confirm live doctrine posture
curl -s https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest | jq .kernel_commit
# => "c7c0ba17"

# 2. Verify the cosign keyless signature on the published image (SLSA L1).
#    GHCR verification shows a cosign-signed image (L1); the SLSA provenance
#    attestation (L2) verifies via `cosign verify-attestation --type slsaprovenance`
#    with strict identity. See .compliance/SLSA_LEVEL.md.
cosign verify ghcr.io/szl-holdings/a11oy:uds-v0.2.0 \
  --certificate-identity-regexp="^https://github.com/szl-holdings/" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
# Public Rekor entry for the image signature: log index 1710578865

# 3. Verify the SLSA L2 provenance attestation (strict identity)
cosign verify-attestation --type slsaprovenance ghcr.io/szl-holdings/a11oy:uds-v0.2.0 \
  --certificate-identity-regexp="https://github.com/szl-holdings/a11oy/" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"

# 4. Deploy as part of the signed, attested mesh bundle
uds-cli bundle deploy oci://ghcr.io/szl-holdings/szl-uds-bundle:uds-v0.2.1 --confirm

Full guide: developers/VERIFY.md

---

Architecture

graph TD
    A[Incoming action] --> PL[Policy layer\n/v1/policy/evaluate\ndeny-by-default]
    PL --> KD[Khipu DAG\nDSSE P-256 signed\nSHA-256 hash-linked]
    KD --> LDG[Ledger /v1/ledger\nreplayable, tamper-evident]
    KD --> UDS[(GHCR\nSigned OCI\ncosign-signed · SLSA L2 attested)]
    KD --> REKOR[(Rekor transparency log\nindex 1710578865)]

---

Parity vs. leaders

Capability	Palantir AIP	a11oy	Differentiator
Policy enforcement	✅	✅ /v1/policy/evaluate	—
Audit trail	✅ logs	✅ signed receipts	Palantir logs are not individually verifiable cryptographic artifacts
Supply-chain provenance	—	✅ cosign-signed + SLSA L2 attested	cosign verify + cosign verify-attestation --type slsaprovenance on every image — they don't offer this.
Formal math substrate	—	✅ Lean 4 / 749 decl	Open, machine-checkable
Air-gap deployment	✅ (proprietary)	✅ one UDS command	Open-source, reproducible
Receipt multi-party witness	—	✅ BFT quorum-capable	—

---

Quickstart

docker run --rm -p 7860:7860 ghcr.io/szl-holdings/a11oy:uds-v0.2.0

---

Honest status

Claim	Status
Live HF Space (HTTP 200)	✅
SLSA Build L1 + L2	✅ — cosign-signed image (L1), verifiable via cosign verify; Rekor 1710578865. L2 SLSA provenance attestation verifies via cosign verify-attestation --type slsaprovenance (strict identity, keyless Fulcio+Rekor). See .compliance/SLSA_LEVEL.md.
cosign keyless signed	✅
UDS bundle (szl-uds-bundle:uds-v0.2.1)	✅ — real signed, build-provenance-attested 5-organ bundle
DSSE Khipu receipts	✅ — ECDSA P-256-SHA256
Lean 749/14/163 @ c7c0ba17	✅
Λ-uniqueness	⚠️ Conjecture 1 (F23 open bounty) — not a theorem
SLSA L3	❌ Not claimed
FedRAMP / CMMC	❌ Not claimed

---

_{Doctrine v11 LOCKED · 749/14/163 · kernel c7c0ba17 · SLSA L1 + L2 (provenance attestation verified; L3 not claimed) · Λ = Conjecture 1 · Apache-2.0 · DOI 10.5281/zenodo.20434276}

Signed-off-by: stephenlutar2-hash stephenlutar2@gmail.com