feat(frontier): NEW neuromorphic/spiking organ (LIF, MODELED) + honesty/sunset-domain fixes

Adds /api/a11oy/v1/neuromorphic/spikes + neuromorphic 3D surface; repoints 6 user-facing a11oy.net refs to a-11-oy.com; ecosystem label LIVE->LIVE-STATIC.

spaces/sda/assets/sda-fabric.js

@@ -0,0 +1,150 @@
+/* ============================================================================
+ * SZL SDA — sda-fabric.js
+ * Honest, vendored, 0-CDN runtime wiring:
+ *   1. Live read of a11oy /v1/compute-pool with captured SNAPSHOT fallback.
+ *   2. Optional live read of killinchu /mosaic feed -> COP score panel (LIVE label).
+ *   3. Mount the "ask the fabric — verify a receipt" widget.
+ *   4. Poll for an SDA validation figure and swap it in when present.
+ * NEVER fabricates live status / numbers. Honest degradation per doctrine v11.
+ * ==========================================================================*/
+(function () {
+  'use strict';
+  var A11OY = 'https://a-11-oy.com';
+  var POOL  = '/api/a11oy/v1/compute-pool';
+  var KILLINCHU = 'https://szlholdings-killinchu.hf.space'; // estate killinchu surface (HF Space host)
+  var MOSAIC_COP = '/api/killinchu/v1/mosaic/cop';          // fused COP + anomaly scores (PR #118)
+  var TIMEOUT = 9000;
+
+  function esc(s){ return String(s==null?'':s).replace(/[&<>"]/g,function(c){
+    return {'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c]; }); }
+
+  function pull(url, timeoutMs){
+    var ctl = (typeof AbortController!=='undefined') ? new AbortController() : null;
+    var to  = ctl ? setTimeout(function(){ try{ctl.abort();}catch(e){} }, timeoutMs||TIMEOUT) : null;
+    return fetch(url, { signal: ctl ? ctl.signal : undefined, cache:'no-store' })
+      .then(function(r){ if(to)clearTimeout(to); if(!r.ok) throw new Error('http '+r.status); return r.json(); })
+      .catch(function(e){ if(to)clearTimeout(to); throw e; });
+  }
+
+  /* ---- compute-pool node list ---- */
+  function nodeRow(n){
+    var up = !!n.reachable;
+    var sov = !!n.sovereign;
+    var kindCls = sov ? 'sov' : (n.kind && n.kind.indexOf('hosted')===0 ? 'hosted' : '');
+    var kindLabel = sov ? 'sovereign' : (n.kind || 'node');
+    var meta = (n.endpoint ? esc(n.endpoint) : '') +
+      (sov ? '' : (n.kind && n.kind.indexOf('hosted')===0 ? ' · hosted fallback — not compute you own' : ''));
+    return '<li class="node">'+
+      '<span class="ndot '+(up?'up':'down')+'" title="'+(up?'reachable':'unreachable')+'"></span>'+
+      '<span class="ninfo"><span class="nname">'+esc(n.name||'node')+
+        (up?'':' · <span style="color:#FF6B7A">unreachable</span>')+'</span>'+
+        '<span class="nmeta">'+meta+'</span></span>'+
+      '<span class="nkind '+kindCls+'">'+esc(kindLabel)+'</span>'+
+    '</li>';
+  }
+
+  function renderPool(d, isLive){
+    var list = document.getElementById('node-list');
+    var srcBadge = document.getElementById('pool-src');
+    var connBadge = document.getElementById('conn-badge');
+    var connLabel = document.getElementById('conn-label');
+    if(!list) return;
+
+    var nodes = (d && d.nodes) || [];
+    list.innerHTML = nodes.map(nodeRow).join('') || '<li class="node"><span class="ninfo"><span class="nname">No nodes reported.</span></span></li>';
+
+    var c = (d && d.counts) || {};
+    var summary = document.createElement('li');
+    summary.className = 'node'; summary.style.background='transparent'; summary.style.border='none';
+    summary.innerHTML = '<span class="ninfo"><span class="nmeta tabular">'+
+      (c.nodes_reachable!=null?esc(c.nodes_reachable):'?')+'/'+(c.nodes_total!=null?esc(c.nodes_total):'?')+' reachable · '+
+      (c.gpu_nodes_reachable!=null?esc(c.gpu_nodes_reachable):'?')+' GPU node(s) · sovereign_gpu_live='+
+      esc(String((c.sovereign_gpu_live!=null)?c.sovereign_gpu_live:'?'))+'</span></span>';
+    list.appendChild(summary);
+
+    if(isLive){
+      if(srcBadge){ srcBadge.textContent='LIVE'; srcBadge.classList.add('live'); }
+      if(connBadge){ connBadge.classList.remove('snapshot'); }
+      if(connLabel){ connLabel.textContent='FABRIC: LIVE'; }
+    } else {
+      if(srcBadge){ srcBadge.textContent='SNAPSHOT'; srcBadge.classList.remove('live'); }
+      if(connBadge){ connBadge.classList.add('snapshot'); }
+      if(connLabel){ connLabel.textContent='FABRIC: SNAPSHOT'; }
+    }
+  }
+
+  function loadPool(){
+    pull(A11OY+POOL)
+      .then(function(d){ renderPool(d, true); })
+      .catch(function(){
+        pull('./assets/snapshot-compute-pool.json', 4000)
+          .then(function(d){ renderPool(d, false); })
+          .catch(function(){
+            var list = document.getElementById('node-list');
+            var connLabel = document.getElementById('conn-label');
+            if(list) list.innerHTML = '<li class="node"><span class="ninfo"><span class="nname">Fabric unreachable.</span>'+
+              '<span class="nmeta">Live read and snapshot both unavailable — status not shown rather than faked.</span></span></li>';
+            if(connLabel) connLabel.textContent='FABRIC: UNREACHABLE';
+          });
+      });
+  }
+
+  /* ---- killinchu /mosaic COP feed (LIVE upgrade of the demo COP) ----
+   * If killinchu's /mosaic/cop is reachable, push real anomaly scores into the
+   * COP panel and re-label the COP badges LIVE. Otherwise the demo stands,
+   * clearly labelled. NEVER fakes a live read. */
+  function loadMosaicCOP(){
+    pull(KILLINCHU+MOSAIC_COP)
+      .then(function(d){
+        var tracks = (d && (d.tracks || d.cop || d.fused)) || [];
+        var norm = tracks.map(function(t){
+          return { id: t.track_id || t.id || ('T-'+(t.fused_track_id||'?')),
+                   score: (t.anomaly_score!=null?t.anomaly_score:(t.score!=null?t.score:0)) };
+        }).filter(function(t){ return t.id; });
+        if (norm.length && window.SDA_COP && window.SDA_COP.setTracks){
+          window.SDA_COP.setTracks(norm);
+          markCopLive();
+        }
+      })
+      .catch(function(){ /* keep honest DEMO label; no fabrication */ });
+  }
+  function markCopLive(){
+    ['cop-src','cop-feed-src'].forEach(function(id){
+      var b=document.getElementById(id); if(b){ b.textContent='LIVE · killinchu /mosaic'; b.classList.add('live'); }
+    });
+    var note=document.getElementById('cop-demo-note');
+    if(note){ note.innerHTML='<strong>Live read.</strong> The COP panel is showing real anomaly scores from the killinchu <code>/api/killinchu/v1/mosaic/cop</code> endpoint. Track motion remains an illustrative rendering; the scores and verdicts are live.'; }
+  }
+
+  /* ---- SDA validation figure swap-in (silent HEAD probe; no 404 noise) ---- */
+  function tryFigure(){
+    var img = document.getElementById('sda-fig-img');
+    if(!img) return;
+    fetch('assets/sda_validation.png', { method:'HEAD', cache:'no-store' })
+      .then(function(r){ if(!r.ok) throw new Error('absent'); return r; })
+      .then(function(){
+        img.onload = function(){
+          img.style.display='block';
+          var stage=document.querySelector('.cop-stage');
+          var note=document.getElementById('cop-demo-note');
+          var src=document.getElementById('cop-src');
+          if(stage) stage.parentNode && stage.parentNode.insertBefore(img, stage);
+          if(note){ note.innerHTML='<strong>SZL SDA validation figure.</strong> Produced by the khipu-sda-core validation harness.'; }
+          if(src){ src.textContent='SZL SDA — VALIDATION'; src.classList.add('live'); }
+        };
+        img.src='assets/sda_validation.png';
+      })
+      .catch(function(){ /* keep honest labelled demo COP */ });
+  }
+
+  function boot(){
+    loadPool();
+    loadMosaicCOP();
+    tryFigure();
+    if (window.SZLVerify && typeof window.SZLVerify.mount === 'function') {
+      try { window.SZLVerify.mount('#verify-mount', { base: A11OY }); } catch(e){}
+    }
+  }
+  if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', boot);
+  else boot();
+})();

spaces/sda/assets/szl_verify_widget.js

@@ -0,0 +1,214 @@
+/* ============================================================================
+ * SZL "ask the fabric" — verify-a-claim widget  (vendored, self-contained)
+ * ----------------------------------------------------------------------------
+ * 0 runtime CDN · system fonts only · AbortController · honest fallback.
+ * Calls the REAL a11oy verify endpoint and renders its REAL honest verdict.
+ *   POST {base}/api/a11oy/v1/verify   body = a receipt / DSSE envelope / in-toto stmt
+ *   GET  {base}/api/a11oy/v1/verify?url=<public receipt url>
+ *
+ * Doctrine v11: this widget NEVER fabricates a verdict. It shows exactly what
+ * the server returns (verdict: VERIFIED | STRUCTURAL-ONLY | FAILED | UNRECOGNISED).
+ * "STRUCTURAL-ONLY" is shown as advisory, NOT green. Network/timeout/429 degrade
+ * to an honest "unreachable / rate-limited" state — never to a false green.
+ *
+ * Attribution (clean-room rebuild of permissive ideas — see dev7 report):
+ *   - Tool-call / receipt trace UI pattern inspired by smolagents (Apache-2.0,
+ *     huggingface/smolagents) and assistant-ui (MIT). Rebuilt SZL-native; no code copied.
+ *   - AbortController fetch contract reuses anatomy V8 (SZL own prior art).
+ * ==========================================================================*/
+(function (global) {
+  'use strict';
+
+  var DEFAULT_BASE = 'https://a-11-oy.com'; // same fabric the estate already talks to
+  var TIMEOUT_MS   = 12000;
+  var SAMPLE = {
+    _type: 'https://in-toto.io/Statement/v1',
+    subject: [{ name: 'szl-lake/homflyreceipt_gate',
+      digest: { sha256: '0a2d153d81c00688b576e5a012ae6117465639807456d1bb72eb590cac3b1e9d' } }],
+    predicateType: 'https://szlholdings.com/attestations/innovation/v1',
+    predicate: { note: 'paste your own receipt JSON here, or a public receipt URL' }
+  };
+
+  function esc(s){ return String(s==null?'':s).replace(/[&<>"]/g,function(c){
+    return {'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c]; }); }
+
+  /* honest fetch contract: AbortController + try/catch. NEVER throws. ----- */
+  function pull(url, opts, timeoutMs){
+    var ctl = (typeof AbortController!=='undefined') ? new AbortController() : null;
+    var to  = ctl ? setTimeout(function(){ try{ctl.abort();}catch(e){} }, timeoutMs||TIMEOUT_MS) : null;
+    opts = opts || {};
+    opts.signal = ctl ? ctl.signal : undefined;
+    opts.cache  = 'no-store';
+    opts.mode   = 'cors';
+    return fetch(url, opts).then(function(r){
+      if(to) clearTimeout(to);
+      var status = r.status;
+      return r.json().then(function(data){ return {ok:r.ok, status:status, data:data}; },
+                          function(){ return {ok:false, status:status, data:null}; });
+    }).catch(function(e){
+      if(to) clearTimeout(to);
+      var aborted = e && (e.name==='AbortError');
+      return {ok:false, status:0, data:null, err:String(e&&e.message||e), aborted:aborted};
+    });
+  }
+
+  /* map an HONEST verdict string -> {label, cls, advisory} ---------------- */
+  function verdictView(v){
+    var s = String(v||'').toUpperCase();
+    if(s==='VERIFIED')        return {label:'VERIFIED',        cls:'ok',   advisory:false};
+    if(s==='STRUCTURAL-ONLY') return {label:'STRUCTURAL-ONLY', cls:'warn', advisory:true};
+    if(s==='FAILED')          return {label:'FAILED',          cls:'fail', advisory:false};
+    if(s==='UNRECOGNISED')    return {label:'UNRECOGNISED',    cls:'muted',advisory:false};
+    return {label: s||'—', cls:'muted', advisory:false};
+  }
+
+  function renderChecks(checks){
+    if(!Array.isArray(checks) || !checks.length) return '';
+    var rows = checks.map(function(c){
+      var st = String(c.status||'').toLowerCase();
+      var cls = st==='pass' ? 'ok' : (st==='fail' ? 'fail' : 'muted');
+      return '<li class="szlv-chk"><span class="szlv-pill '+cls+'">'+esc(c.status||'?')+'</span>'+
+             '<code>'+esc(c.name||'check')+'</code>'+
+             (c.detail ? '<span class="szlv-det">'+esc(c.detail)+'</span>' : '')+'</li>';
+    }).join('');
+    return '<ul class="szlv-checks">'+rows+'</ul>';
+  }
+
+  function renderResult(res){
+    // res is the {ok,status,data,err,aborted} envelope from pull()
+    if(res.status===429){
+      return '<div class="szlv-state fail">rate-limited · the fabric caps at 60/min per IP. '+
+             'This is honest backpressure, not a failure of your receipt. Try again shortly.</div>';
+    }
+    if(!res.ok || !res.data){
+      var why = res.aborted ? 'timed out' : (res.status ? ('HTTP '+res.status) : 'unreachable');
+      return '<div class="szlv-state muted">offline · fabric '+esc(why)+
+             '. No verdict shown — the widget never invents a green. '+
+             'Re-run the checks yourself per docs/developers/VERIFY.md.</div>';
+    }
+    var d = res.data;
+    var vv = verdictView(d.verdict);
+    var head = '<div class="szlv-verdict '+vv.cls+'">'+
+      '<span class="szlv-dot"></span><b>'+esc(vv.label)+'</b>'+
+      (vv.advisory ? '<span class="szlv-adv">advisory · not a cryptographic green</span>' : '')+
+      '</div>';
+    var detail = d.detail ? '<p class="szlv-detail">'+esc(d.detail)+'</p>' : '';
+    var kinds  = (Array.isArray(d.kinds)&&d.kinds.length)
+      ? '<p class="szlv-kinds">recognised as: '+d.kinds.map(esc).join(', ')+'</p>' : '';
+    var checks = renderChecks(d.checks);
+    var foot = '<p class="szlv-foot">engine '+esc(d.engine_version||'?')+
+      ' · doctrine '+esc((d.doctrine&&d.doctrine.version)||'v11')+
+      ' · Λ='+esc((d.doctrine&&d.doctrine.lambda)||'Conjecture 1')+
+      (d.verified_at ? ' · '+esc(d.verified_at) : '')+
+      '<br><span class="szlv-trust">No trust in the server is required — re-verify with cosign / rekor-cli / lake build.</span></p>';
+    return head+detail+kinds+checks+foot;
+  }
+
+  var CSS = [
+    '.szlv{font-family:system-ui,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;',
+    'color:#cdccca;background:#1c1b19;border:1px solid #393836;border-radius:10px;padding:16px;max-width:640px}',
+    '.szlv h3{font-size:15px;margin:0 0 4px;font-weight:600;letter-spacing:.2px}',
+    '.szlv .szlv-sub{font-size:12px;color:#797876;margin:0 0 12px}',
+    '.szlv textarea{width:100%;min-height:120px;box-sizing:border-box;background:#171614;color:#cdccca;',
+    'border:1px solid #393836;border-radius:8px;padding:10px;font:12px/1.5 ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;resize:vertical}',
+    '.szlv-row{display:flex;gap:8px;flex-wrap:wrap;margin:10px 0}',
+    '.szlv input[type=text]{flex:1;min-width:200px;background:#171614;color:#cdccca;border:1px solid #393836;border-radius:8px;padding:8px 10px;font-size:12px}',
+    '.szlv button{background:#01696f;color:#fff;border:0;border-radius:8px;padding:9px 16px;font-size:13px;font-weight:600;cursor:pointer}',
+    '.szlv button:hover{background:#0c4e54}.szlv button:disabled{opacity:.5;cursor:wait}',
+    '.szlv button.ghost{background:transparent;color:#4f98a3;border:1px solid #393836}',
+    '.szlv-out{margin-top:12px;font-size:13px;min-height:24px}',
+    '.szlv-load{color:#797876;font-size:12px}',
+    '.szlv-verdict{display:flex;align-items:center;gap:8px;font-size:15px;padding:8px 10px;border-radius:8px;border:1px solid #393836}',
+    '.szlv-verdict .szlv-dot{width:9px;height:9px;border-radius:50%}',
+    '.szlv-verdict.ok .szlv-dot{background:#6daa45}.szlv-verdict.ok{border-color:#3a5a26}',
+    '.szlv-verdict.warn .szlv-dot{background:#e8af34}.szlv-verdict.warn{border-color:#6b5418}',
+    '.szlv-verdict.fail .szlv-dot{background:#d163a7}.szlv-verdict.fail{border-color:#7a2c5a}',
+    '.szlv-verdict.muted .szlv-dot{background:#797876}',
+    '.szlv-adv{font-size:11px;color:#e8af34;font-weight:400;margin-left:auto}',
+    '.szlv-detail{font-size:12px;color:#a9a8a5;margin:8px 0}',
+    '.szlv-kinds{font-size:11px;color:#797876;margin:4px 0}',
+    '.szlv-checks{list-style:none;margin:8px 0 0;padding:0;display:flex;flex-direction:column;gap:4px}',
+    '.szlv-chk{display:flex;align-items:center;gap:8px;font-size:12px;flex-wrap:wrap}',
+    '.szlv-pill{font-size:10px;text-transform:uppercase;letter-spacing:.4px;padding:2px 6px;border-radius:4px;font-weight:700}',
+    '.szlv-pill.ok{background:rgba(109,170,69,.18);color:#6daa45}',
+    '.szlv-pill.fail{background:rgba(209,99,167,.18);color:#d163a7}',
+    '.szlv-pill.muted{background:#2a2927;color:#797876}',
+    '.szlv-chk code{color:#cdccca}.szlv-det{color:#797876;font-size:11px}',
+    '.szlv-foot{font-size:10px;color:#5a5957;margin:10px 0 0;line-height:1.5}',
+    '.szlv-trust{color:#797876}',
+    '.szlv-state{font-size:12px;padding:8px 10px;border-radius:8px}',
+    '.szlv-state.fail{background:rgba(209,99,167,.10);color:#d163a7}',
+    '.szlv-state.muted{background:#211f1d;color:#a9a8a5}',
+    /* DEV B mobile refinement: 12px type floor + 44px touch targets (additive, no logic change) */
+    '@media (max-width:768px){',
+    '.szlv-adv,.szlv-kinds,.szlv-chk .szlv-det,.szlv-foot,.szlv-pill{font-size:12px}',
+    '.szlv button{min-height:44px;padding:11px 18px;font-size:14px}',
+    '.szlv input[type=text]{min-height:44px;font-size:13px}',
+    '.szlv textarea{font-size:13px}',
+    '.szlv-sub,.szlv-load,.szlv-detail,.szlv-state{font-size:13px}',
+    '}'].join('');
+
+  function injectCSS(){
+    if(document.getElementById('szlv-css')) return;
+    var st = document.createElement('style'); st.id='szlv-css'; st.textContent = CSS;
+    document.head.appendChild(st);
+  }
+
+  /* Public mount: SZLVerify.mount('#id', {base})  ------------------------- */
+  function mount(target, opts){
+    opts = opts || {};
+    var base = (opts.base || DEFAULT_BASE).replace(/\/+$/,'');
+    var host = (typeof target==='string') ? document.querySelector(target) : target;
+    if(!host) return null;
+    injectCSS();
+    host.classList.add('szlv');
+    host.innerHTML =
+      '<h3>ask the fabric — verify a receipt</h3>'+
+      '<p class="szlv-sub">Paste a Khipu receipt / DSSE envelope / in-toto statement, '+
+      'or fetch a public receipt by URL. Verdicts are the fabric\u2019s real, honest output '+
+      '(unsigned \u2192 STRUCTURAL-ONLY, never a false green).</p>'+
+      '<textarea class="szlv-ta" spellcheck="false"></textarea>'+
+      '<div class="szlv-row">'+
+        '<input type="text" class="szlv-url" placeholder="\u2026or a public receipt URL (https://\u2026/receipt.json)">'+
+      '</div>'+
+      '<div class="szlv-row">'+
+        '<button class="szlv-go" type="button">Verify</button>'+
+        '<button class="szlv-sample ghost" type="button">Load sample receipt</button>'+
+      '</div>'+
+      '<div class="szlv-out" aria-live="polite"></div>';
+
+    var ta  = host.querySelector('.szlv-ta');
+    var url = host.querySelector('.szlv-url');
+    var out = host.querySelector('.szlv-out');
+    var go  = host.querySelector('.szlv-go');
+    var smp = host.querySelector('.szlv-sample');
+
+    smp.addEventListener('click', function(){ ta.value = JSON.stringify(SAMPLE, null, 2); url.value=''; });
+
+    go.addEventListener('click', function(){
+      go.disabled = true;
+      out.innerHTML = '<span class="szlv-load">calling <code>'+esc(base)+'/api/a11oy/v1/verify</code>\u2026</span>';
+      var p, u = url.value.trim(), body = ta.value.trim();
+      if(u){
+        p = pull(base+'/api/a11oy/v1/verify?url='+encodeURIComponent(u), {method:'GET'});
+      } else if(body){
+        var parsed = null;
+        try{ parsed = JSON.parse(body); }catch(e){
+          out.innerHTML = '<div class="szlv-state muted">input is not valid JSON — paste a receipt object or use a URL.</div>';
+          go.disabled = false; return;
+        }
+        p = pull(base+'/api/a11oy/v1/verify', {method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(parsed)});
+      } else {
+        out.innerHTML = '<div class="szlv-state muted">paste a receipt JSON, or enter a public receipt URL.</div>';
+        go.disabled = false; return;
+      }
+      p.then(function(res){ out.innerHTML = renderResult(res); go.disabled = false; });
+    });
+
+    return { reload:function(){}, base:base };
+  }
+
+  var api = { mount: mount, pull: pull, _sample: SAMPLE, version: '1.0.0' };
+  if (typeof module!=='undefined' && module.exports) module.exports = api;
+  global.SZLVerify = api;
+})(typeof window!=='undefined' ? window : this);