The evidence behind a11oy.
RECORD, Hub atlas, diligence, audit trail, and ROADMAP cuts live on this origin, not on a-11-oy.com. Inspect them without relying on the product interface. A listed URL is location only. Reachability, if observed, is REACHABLE only — never quality. This origin is not a receipt database.
Labs stay labs.
Overflow from this origin. Not a fifth flagship and not a new homepage. Atelier, Ayllu, experiments, chat, code, notes, and estate stay live URLs. They are not primary nav and they are not the first fold.
- Atelier — forty-model Hub walk. Canonical playable Space is SZLHOLDINGS/szl-atelier. Not product runtime.
- Decision — Packet 8 Integrity RECORD. Kernel is not run here. Evaluate on a-11-oy.com/decision. Hub Spaces not required.
- Terra — NYC Property Risk-to-Committee RECORD stub. Evaluate on a-11-oy.com/terra. Kernel is not run here.
- Aegis → Killinchu — historical Exposure-to-Remediation cases preserved as a consolidation RECORD. Current product authority is SZLHOLDINGS/killinchu. Kernel is not run here.
- Puriq Markets — Event Definition-to-Decision RECORD stub. Evaluate on a-11-oy.com/puriq-markets. Not a trading bot. Kernel is not run here.
- Counsel — Matter Decision RECORD stub. Evaluate on a-11-oy.com/counsel. Not legal advice. Kernel is not run here.
- Five-space operator — BIND RECORD stub. Command · Loop · Queue · Memory · Ledger. Evaluate on a-11-oy.com/five-space. Does not replace /console. Kernel is not run here.
- Ayllu — counsel showcase. Does not run the council. Lab. Wiñay/Huklla honesty at /ayllu/psyche/.
- KHIPU — original-cut RECORD. Kernel is not run here. Evaluate on a-11-oy.com/khipu. CUDA UNAVAILABLE. Conjecture 1 OPEN.
- Experiments — experimental split-outs. Not locked-8. Not a Λ theorem.
- Chat — diligence handoff. No local execution claim.
- Code — diligence handoff. No local execution claim.
- Notes — dated status pointer, not a capability feed.
- Estate — MEASURED inventory snapshot. Counts are not quality.
- Machine contracts — evidence.json, record.json, atlas.json, health.json, decision.json, llms.txt.
- PyPI provenance — MEASURED RECORD of publisher identity, attested source digest and release-tag binding for 20 released packages (PEP 740, read from PyPI); 19 re-released on 2026-10-01 from release tags with a PyPI-verified GitHub Source link. Earlier capture kept at 03:10Z. Not a code-quality or deployment claim.
What is MEASURED, ROADMAP, or UNAVAILABLE.
Scan this table first. A figure without method, date, and N is omitted. Product-runtime state is not implied by this origin being up.
| Claim | Class | Method / date / N | Bound |
|---|---|---|---|
| This origin is a static proof registry | MEASURED | This document · GitHub Pages · 2026-08-28 | Reachability of a11oy.net only. Not product readiness. |
| Origin health document | MEASURED | /health.json · committed static file · 2026-08-28 | Not DSSE-LIVE. signer=unavailable. sha is last published main. Not uptime. /readyz is HTML. /healthz is not published (404 HTML). |
| Receipt store on this origin | MEASURED | This repository · 2026-08-28 | None. RECORD is pointers. Live receipts stay on the product Space. |
| Public Hub listing | MEASURED | Generated from the unauthenticated Hub API · observed 2026-10-02T01:39:26Z | 46 models, 35 public datasets, 34 public Spaces, 14 kernels, rendered from /estate/hf-current.json. Private assets NOT_OBSERVED. The dated estate.json snapshot is historical. Listing metadata, not quality. |
| Eight locked-proven formulas | REPORTED | Lean kernel c7c0ba17 in public source | Source-bounded. Live kernel count is the chip bound to /honest locked_formula_count, not this row. Λ is not among the eight. |
| Packet 8 Decision Integrity | ROADMAP | a-11-oy.com/terra · /aegis · /puriq-markets · /counsel · a11oy.net/decision/ · 2026-08-29 | Frozen evals. Formula authority NONE. Kernel not run here. Hub Spaces not required. Same kernel, four vanity paths. Not four Spaces. |
| SZL KHIPU original cuts | MEASURED | a11oy.net/khipu/ · holdings.a-11-oy.com/khipu/ · a-11-oy.com/khipu · 2026-08-29 | RECORD here. Kernel is not run here. CUDA UNAVAILABLE. Energy UNAVAILABLE. Conjecture 1 OPEN. FIFO Hub cards stay 401. |
| Λ uniqueness | UNAVAILABLE | Conjecture 1 · advisory | Never a theorem. Never green. |
| Fall 2026 empty cards vs adapters | ROADMAP | Roadmap snapshot · 2026-08-29 | qantu/waman/chakana/tinku/YARQA-ATTN stay empty ROADMAP. KHIPU-R2, WILLAY, A11OY-MINI, chaski and sibling adapters with bytes are REPORTED, not empty. Kernel source is SOFTWARE; throughput unmeasured. Not OPERATIONAL. |
| Interactive receipt verification | UNAVAILABLE | — | Tool stays at a-11-oy.com/verify. Not run here. |
| Product runtime honesty / health | UNAVAILABLE | — | Kernel chip may GET locked_formula_count only. Product health/readiness is not probed. |
| Eval leaderboard or quality scores | UNAVAILABLE | — | No method+date+N figure is published on this origin. |
| SLSA L3 | ROADMAP | — | L1 honest · L2 attested · L3 not claimed here. |
Canonical receipt record, hosted here.
The RECORD index lives at https://a11oy.net/record/. The tool that checks a record is https://a-11-oy.com/verify — linked, not cloned. Different hosts. Receipt IDs are not enumerated here; empty is UNAVAILABLE, never invented.
Static HTML index of public receipt stores, keys, and bounds.
a11oy.net/record/ Machinerecord.jsonFetchable contract. Live chain state is UNAVAILABLE on this origin.
a11oy.net/record.json VerifierInteractive /verifyOpen the public verification entry point before relying on a receipt or subject digest.
a-11-oy.com/verify Public keycosign.pubServed by the signing product origin itself. As of 2026-09-26 it is not published in szl-holdings/.github; publishing one org key is a pending owner key ceremony. The 2026-08-29 closeout matched the a11oy Space /cosign.pub, recorded as keyid 9926bf69, the key this link served on 2026-09-26; the .github org keys did not match (one recorded, one inferred). Fingerprints, hashing methods and the product repository's recovered copy: /record/. This page does not re-verify signatures.
a-11-oy.com/cosign.pubOne public record, three ways in.
Start with the questions you need answered; each path preserves the same evidence labels and operating boundaries.
Investor diligence
Review thesis, controls, source, public estate, and known boundaries without relying on a product demo.
BUILDDeveloper entry
Start with executable contracts, machine endpoints, verification commands, and versioned source.
OPERATEOperational evidence
Inspect bounded browser observations without promoting a response into readiness or capability.
Public ways to inspect the estate.
These links expose public evidence directly. Dynamic state remains labeled at the source; an HTTP response alone is never promoted to proof of quality or readiness.
Read the deployed revision and honesty posture from the product runtime.
/api/a11oy/v1/honest AssuranceControls and evidenceInspect the assurance surface and its linked evidence rather than a marketing summary.
a-11-oy.com/assurance Public sourceGoverned-agent benchmarkReview the benchmark schema, cases, and implementation in versioned source.
benchmarks/governed-agent-bench Public sourceSource and CIInspect implementation history, checks, releases, and open review state.
github.com/szl-holdings/a11oy Public registryModels, datasets, and SpacesInspect the current public Hub inventory; runtime stage is transport evidence only.
huggingface.co/SZLHOLDINGSAn architecture designed to make claims accountable.
a11oy is designed to conduct agents across providers through callsigns, evidence labels, and audit logs. Operational behavior remains subject to the linked runtime evidence.
Doctrine-gated inference
The architecture applies doctrine gates to outputs: evidence labels are explicit, overclaim patterns are checked, and exceptions are designed to fail closed.
Receipts, not vibes
Qualifying work products can carry DSSE-wrapped receipts with subject digests that can be checked offline.
Estate control plane
The public architecture organizes models, kernels, datasets, and consoles around a shared evidence vocabulary.
Brain, body, proof, and control — one navigable surface.
The estate stays modular at the source and unified at the interface. Each card opens a public Hub listing. REPORTED identifies listing metadata only; runtime state, capability, and availability are not checked in this section.
Lean-8 kernel = N/A formulas · live /honest locked_formula_count · not ROADMAP
SZL-Khipu-1.5B
The flagship governed retrieval navigator, with public weights, adapter, schema, receipts, and GGUF path.
Open model line →Sovereign router
The public Hub listing for the routing interface and its stated provider-status and bounded-inference scope.
Open router →Living anatomy
The body map for organs, contracts, trust boundaries, and the controller outside model weights.
Hub Space SZLHOLDINGS/anatomy · HTTP 401 to the public, 404 to an authenticated org-admin read (checked 2026-09-26 UTC) · link removedHolographic estate
A spatial front door into the wider public estate, built as a distinct interface over shared evidence.
Hub Space SZLHOLDINGS/holographic · HTTP 401 to the public, 404 to an authenticated org-admin read (checked 2026-09-26 UTC) · link removedAyllu Counsel
Eleven Quechua seats, fail-closed Λ-gate, dissent retained. Wiñay closure and Huklla cheapest-cut are scored on the split-out organ. IIT φ_s UNAVAILABLE. Presence CONJECTURE. RECORD here; runtime stays on product origin / Space.
Open Ayllu RECORD →SZL KHIPU
Original cuts of the field, never rehosts. Duals Ari=GreenLight and Kay Pacha=Anatomy. RECORD here; evaluate on a-11-oy.com/khipu. CUDA UNAVAILABLE. Conjecture 1 OPEN.
Open KHIPU RECORD →Experiments lab
Allodial AI, neuroplasticity, chain of title — operational Python, still EXPERIMENTAL, never folded into locked-8.
Open experiments RECORD →Governed kernels
Reusable verifier and policy components with explicit source, license, and provenance boundaries.
Open kernel suite →a11oy command surface
The public Hub listing for the control-plane interface and its stated formulas, inventory, governance, and route scope.
Open control plane →IMMUNE
Product tab a-11-oy.com/immune. Channel A SZLHOLDINGS/immune and Channel B SZLHOLDINGS/immune-lattice kept. Lorenz OP sealed on hashes input c5fcc502… output 4071a2f2… Energy UNAVAILABLE. Λ = Conjecture 1 OPEN. RECORD of a measured run — not a live probe and not a LIVE claim.
Open product tab →Adapters that exist, and cards that still do not.
KHIPU-R2, WILLAY, A11OY-MINI, and chaski are REPORTED Hub listings with adapter or GGUF bytes — not empty cutting cards. Sibling adapters khipu-r3, chaski-r2, brain-navigator-r2, and szl-receiptagent-qwen35-0.8b-v3 are also REPORTED listings with bytes; they are not a forty-SKU rewrite of keep-7. qantu, waman, chakana, tinku, and YARQA-ATTN stay ROADMAP: no admitted train data or no kernel binary. Killinchu-named resources stay outside this inventory. Train loss is not eval. publication_eligible remains false until held-out generate says otherwise.
KHIPU-R2
Public adapter listing for the Khipu successor. Weights exist as an adapter; publication_eligible stays false. Does not overwrite signed SZL-Khipu-1.5B.
Open Hub card →WILLAY
Public adapter listing for a signed-refusal specialist. Not an authorizer or executor. Listing metadata plus adapter bytes; not a capability claim.
Open Hub card →YARQA-ATTN
KERNEL-owned cutting card. Named silhouette only; not an ATELIER model, not a Triton stack, and not a published binary. Throughput remains unmeasured here.
Open Hub card →A11OY-MINI
GGUF conversion path of live Chaski, not a second train. Bytes exist on the listing. Proposal-only, never execute. Not a new 1.5B checkpoint.
Open Hub card →chaski
Atelier messenger. Adapter listing on the Hub. Sibling SKU chaski-r2 is a separate 0.8B bf16 LoRA; this card is not overwritten by r2.
Open Hub card →qantu
Atelier document/receipt VLM cut. No public Hub listing or adapter in the current inventory; not a trained vision checkpoint.
No public Hub cardwaman
Atelier object-detection cut. No public Hub listing or weights in the current inventory; not a trained detector.
No public Hub cardchakana
Named Atelier cutting card. No public Hub listing, README, weights, or capability claim in the current inventory.
No public Hub cardtinku
Named Atelier cutting card. No public Hub listing, README, weights, or capability claim in the current inventory.
No public Hub cardIn-tree source. Hub class SOFTWARE; throughput ROADMAP.
These GitHub repositories hold original in-tree source on main — not Hub-card-only stubs. Hub collection is SOFTWARE (not LoRA). Throughput stays ROADMAP: not OPERATIONAL, not live, and not a measured speed. Canonical source is GitHub; Hub mirrors are extra links. Only szl-receipt-attn has Triton bytes on main. szl-maskmod v0 is original torch score_mod + block-mask. szl-block-kv v0 is an original torch paged KV gather; its Triton page kernel remains ROADMAP. Sage INT8/FP8 stays a fourth ROADMAP kernel and is not listed as shipped. YARQA-ATTN is KERNEL-owned and stays the Fall 2026 cutting card above, not a fourth Triton stack. szl-serve stays a CPU Khipu lab pin, not an operational kernel. Killinchu-named resources stay outside this inventory. Λ remains Conjecture 1.
szl-receipt-attn
Original tiled fused attention on GitHub main (FlashAttention silhouette, not a Dao rehost). Triton bytes are in-tree with an SDPA reference and receipts; no throughput is claimed here.
Open GitHub source →Hub mirror →szl-maskmod
v0 is original torch score_mod + block-mask on GitHub main (FlexAttention silhouette). Not a flex_attention.py copy and not Triton-in-tree; no CUDA timing is published here.
Open GitHub source →Hub mirror →szl-block-kv
v0 is original torch paged KV gather and receipts on GitHub main. Not a vLLM .cu copy, and the gather is not a Triton kernel. The Triton page kernel remains ROADMAP; no speedup is claimed here.
Open GitHub source →Hub mirror →How a claim earns its label
The pipeline is deliberately boring — and deliberately auditable.
- 01Emit
An agent produces a claim, artifact, or action proposal.
- 02Gate
Doctrine guards check labels, banned tokens, and overclaim patterns.
- 03Sign
Qualifying artifacts get DSSE receipts with subject digests.
- 04Publish
Surfaces ship with the label visible — UNKNOWN stays UNKNOWN.
- 05Verify
Anyone can re-check the receipt chain — trust ceiling 0.97, never blind.
Public surfaces and bounded reads
Product routes below are public links only and are not probed. The Hugging Face rows are generated from /estate/hf-current.json: the /spaces.json KEEP Spaces that the public Hub listing still returns. Each row uses the public runtime-metadata API from this browser; a reported stage remains transport metadata, not capability or uptime evidence.
REPORTED metadata is not promoted to measured capability or quality.
CHECKING, RUNNING · REPORTED, transitional states, and UNAVAILABLE describe this browser session only.
- NOT PROBED · UNKNOWN
- NOT PROBED · UNKNOWN
- NOT PROBED · UNKNOWN
- NOT PROBED · UNKNOWN
- NOT OBSERVED · UNAVAILABLE
- NOT OBSERVED · UNAVAILABLE
- NOT OBSERVED · UNAVAILABLE
- NOT OBSERVED · UNAVAILABLE
- NOT OBSERVED · UNAVAILABLE
No public Hub runtime metadata was observed by this document.
Product routes remain NOT PROBED · UNKNOWN. A schema-valid public Hub stage is REPORTED transport metadata only; malformed, missing, or failed metadata reads fail closed.
A dated public Hub snapshot, as cards. Not a live count.
These cards are rendered in your browser from the JSON documents committed to this repository — /public-inventory.json (dated unauthenticated public Hugging Face API snapshot, generated by scripts/generate_hf_inventory.py and refreshed only through a reviewed pull request) and /models.json (dated MEASURED classification). Counts, hashes, licences, dates, stages, and object totals are read fields, never typed here. Every count in this section is read from one of these dated documents at that document's own observation time; none is re-read from the Hub when this page loads, so none should be taken as today's inventory. The count bar and the badge above it come from /public-inventory.json. Model, dataset, collection, and bucket listing counts read by this browser session render in the browser-read registry below when that read succeeds; that registry has no Spaces count. A missing field renders UNAVAILABLE. Killinchu-named resources are withheld from the cards on this front door, but the snapshot's own totals in the count bar still include them, so a card group can list fewer cards than the matching bar count.
Committed public Hub inventory
Provenance renders with the cards: document, schema, observation time, and observation mode.
The public artifact registry, consolidated.
Search reported model, dataset, collection, and bucket listings on this RECORD surface. Hub atlas and ROADMAP live here on a11oy.net, not on a-11-oy.com. Executable Spaces and Killinchu-named resources are outside this evidence inventory.
Public metadata observation
REPORTED means point-in-time public Hub listing metadata only. It does not prove capability, quality, safety, data rights, or deployed equivalence.
Static snapshot observed 2026-10-02; live browser refresh pending.
Estate counts render from /estate/hf-current.json — see github.com/szl-holdings.
Public source inventory, committed here.
These URLs are a static inventory on this origin. They are not probed. A listed URL is location only — never quality. Killinchu-named resources stay outside this inventory.
Machine copy: /atlas.json. Hub live chips may go UNAVAILABLE; this GitHub inventory remains in the document.
The governed estate
a11oy is the conductor; these are the sections of the orchestra.