The Immune organ (Quechua role Hukulla) is a fail-closed, deny-by-default egress gate.
Every action is inspected against a real threat-signature corpus, a 1 MB size guard and a
Λ-gate floor (MIN of supplied trust axes < 0.5 → deny). Each verdict is signed into the
shared Khipu chain (SZL.Immune.Verdict.v1). Proven Lean backing:
ImmuneNeymanPearsonOpt.lean (Neyman–Pearson-optimal egress) and
FrontierWelfordVariance.lean (Welford online variance). These back the gate but are
not folded into the locked-8 proven set. Λ = Conjecture 1 (not a theorem);
Khipu = Conjecture 2; trust is never 100%; effectors simulated; no fabricated data.
Submit a real action payload. The gate runs the live inspection and signs a Khipu receipt.
Optionally include axes (a JSON array of trust scores) to exercise the Λ-gate floor.
| id | name | label | category | sample → expected |
|---|---|---|---|---|
| loading… | ||||
| time | decision | signals | Λ | receipt |
|---|---|---|---|---|
| loading… | ||||