sync README from GitHub canonical (task #153 parity)

README.md

@@ -7,18 +7,33 @@ sdk: docker
 app_port: 7860
 pinned: true
 license: apache-2.0
-short_description: "a11oy — policy + receipt substrate"
+short_description: "a11oy — signed-receipt substrate; receipts.in ≡ receipts.out"
 tags:
   - governance
   - agentic-ai
   - doctrine-v11
   - a11oy
-  - execution-fabric
+  - slsa-l2
   - apache-2.0
 ecosystem-stage: "operational"
 ---
-<!-- HF Space front-matter is REQUIRED (sdk: docker). Injected by hf-sync
-     so the Space builds the Dockerfile. Do not remove. -->
+
+# a11oy 🔬
+
+> **The signed-receipt substrate. Every AI decision leaves a DSSE Khipu receipt. `receipts.in ≡ receipts.out`.**
+
+[![SLSA L1 + L2](https://img.shields.io/badge/SLSA-L1%20%2B%20L2%20attested-2C5F2D?style=flat-square)](.compliance/SLSA_LEVEL.md)
+[![cosign signed](https://img.shields.io/badge/cosign-keyless%20signed-blueviolet?style=flat-square)](https://search.sigstore.dev/?logIndex=1710578865)
+[![doctrine-v11](https://img.shields.io/badge/doctrine-v11%20LOCKED-0B1F3A?style=flat-square)](https://github.com/szl-holdings/.github/tree/main/doctrine)
+[![CI](https://github.com/szl-holdings/a11oy/actions/workflows/ci.yml/badge.svg)](https://github.com/szl-holdings/a11oy/actions)
+[![License](https://img.shields.io/badge/license-Apache--2.0-blue?style=flat-square)](LICENSE)
+
+**LOCKED kernel `c7c0ba17` · 749 declarations · 14 axioms · 163 sorries · Doctrine v11**
+**Proof posture (two-tier):** 5 locked-proven `{F1, F11, F12, F18, F19}` + **~36 experimental** theorems CI-green on main `@7885fd9` (Lean v4.18.0 · 1304 decls / 22 axioms — NOT in the locked count).
+
+[Live demo](#live) · [What it does](#what-it-does) · [Verify](#verify-it-yourself) · [Architecture](#architecture) · [Parity vs. leaders](#parity-vs-leaders) · [Honest status](#honest-status)
+
+---
 
 ## Live