The evidence behind a11oy.
RECORD, Hub atlas, diligence, audit trail, and ROADMAP cuts live on this origin, not on a-11-oy.com. Inspect them without relying on the product interface. A listed URL is location only. Reachability, if observed, is REACHABLE only — never quality. This origin is not a receipt database.
Labs stay labs.
Overflow from this origin. Not a fifth flagship and not a new homepage. Atelier, Ayllu, experiments, chat, code, notes, and estate stay live URLs. They are not primary nav and they are not the first fold.
- Atelier — forty-model Hub walk. Canonical playable Space is SZLHOLDINGS/szl-atelier. Not product runtime.
- Decision — Packet 8 Integrity RECORD. Kernel is not run here. Evaluate on a-11-oy.com/decision. Hub Spaces not required.
- Terra — NYC Property Risk-to-Committee RECORD stub. Evaluate on a-11-oy.com/terra. Kernel is not run here.
- Aegis → Killinchu — historical Exposure-to-Remediation cases preserved as a consolidation RECORD. Current product authority is SZLHOLDINGS/killinchu. Kernel is not run here.
- Puriq Markets — Event Definition-to-Decision RECORD stub. Evaluate on a-11-oy.com/puriq-markets. Not a trading bot. Kernel is not run here.
- Counsel — Matter Decision RECORD stub. Evaluate on a-11-oy.com/counsel. Not legal advice. Kernel is not run here.
- Five-space operator — BIND RECORD stub. Command · Loop · Queue · Memory · Ledger. Evaluate on a-11-oy.com/five-space. Does not replace /console. Kernel is not run here.
- Ayllu — counsel showcase. Does not run the council. Lab. Wiñay/Huklla honesty at /ayllu/psyche/.
- KHIPU — original-cut RECORD. Kernel is not run here. Evaluate on a-11-oy.com/khipu. CUDA UNAVAILABLE. Conjecture 1 OPEN.
- Experiments — experimental split-outs. Not locked-8. Not a Λ theorem.
- Chat — diligence handoff. No local execution claim.
- Code — diligence handoff. No local execution claim.
- Notes — dated status pointer, not a capability feed.
- Estate — MEASURED inventory snapshot. Counts are not quality.
- Machine contracts — evidence.json, record.json, atlas.json, health.json, decision.json, llms.txt.
What is MEASURED, ROADMAP, or UNAVAILABLE.
Scan this table first. A figure without method, date, and N is omitted. Product-runtime state is not implied by this origin being up.
| Claim | Class | Method / date / N | Bound |
|---|---|---|---|
| This origin is a static proof registry | MEASURED | This document · GitHub Pages · 2026-08-28 | Reachability of a11oy.net only. Not product readiness. |
| Origin health document | MEASURED | /health.json · committed static file · 2026-08-28 | Not DSSE-LIVE. signer=unavailable. sha is last published main. Not uptime. /readyz is HTML. /healthz is not published (404 HTML). |
| Receipt store on this origin | MEASURED | This repository · 2026-08-28 | None. RECORD is pointers. Live receipts stay on the product Space. |
| Public Hub listing snapshot | REPORTED | Committed Hub metadata · 2026-08-31 | Estate counts render from the estate.json manifest — see github.com/szl-holdings. Listing metadata, not quality. |
| Eight locked-proven formulas | REPORTED | Lean kernel c7c0ba17 in public source | Source-bounded. Live kernel count is the chip bound to /honest locked_formula_count, not this row. Λ is not among the eight. |
| Packet 8 Decision Integrity | ROADMAP | a-11-oy.com/terra · /aegis · /puriq-markets · /counsel · a11oy.net/decision/ · 2026-08-29 | Frozen evals. Formula authority NONE. Kernel not run here. Hub Spaces not required. Same kernel, four vanity paths. Not four Spaces. |
| SZL KHIPU original cuts | MEASURED | a11oy.net/khipu/ · holdings.a-11-oy.com/khipu/ · a-11-oy.com/khipu · 2026-08-29 | RECORD here. Kernel is not run here. CUDA UNAVAILABLE. Energy UNAVAILABLE. Conjecture 1 OPEN. FIFO Hub cards stay 401. |
| Λ uniqueness | UNAVAILABLE | Conjecture 1 · advisory | Never a theorem. Never green. |
| Fall 2026 empty cards vs adapters | ROADMAP | Hub listings · 2026-08-29 | qantu/waman/chakana/tinku/YARQA-ATTN stay empty ROADMAP. KHIPU-R2, WILLAY, A11OY-MINI, chaski and sibling adapters with bytes are REPORTED, not empty. Kernel source is SOFTWARE; throughput unmeasured. Not OPERATIONAL. |
| Interactive receipt verification | UNAVAILABLE | — | Tool stays at a-11-oy.com/verify. Not run here. |
| Product runtime honesty / health | UNAVAILABLE | — | Kernel chip may GET locked_formula_count only. Product health/readiness is not probed. |
| Eval leaderboard or quality scores | UNAVAILABLE | — | No method+date+N figure is published on this origin. |
| SLSA L3 | ROADMAP | — | L1 honest · L2 attested · L3 not claimed here. |
Canonical receipt record, hosted here.
The signed RECORD index lives at https://a11oy.net/record/. The tool that checks a record is https://a-11-oy.com/verify — linked, not cloned. Different hosts. Receipt IDs are not enumerated here; empty is UNAVAILABLE, never invented.
Static HTML index of public receipt stores, keys, and bounds.
a11oy.net/record/ Machinerecord.jsonFetchable contract. Live chain state is UNAVAILABLE on this origin.
a11oy.net/record.json VerifierInteractive /verifyOpen the public verification entry point before relying on a receipt or subject digest.
a-11-oy.com/verify Public keycosign.pubOrg-published key listing. This page does not re-verify signatures.
github.com/szl-holdings/.githubOne public record, three ways in.
Start with the questions you need answered; each path preserves the same evidence labels and operating boundaries.
Investor diligence
Review thesis, controls, source, public estate, and known boundaries without relying on a product demo.
BUILDDeveloper entry
Start with executable contracts, machine endpoints, verification commands, and versioned source.
OPERATEOperational evidence
Inspect bounded browser observations without promoting a response into readiness or capability.
Public ways to inspect the estate.
These links expose public evidence directly. Dynamic state remains labeled at the source; an HTTP response alone is never promoted to proof of quality or readiness.
Read the deployed revision and honesty posture from the product runtime.
/api/a11oy/v1/honest AssuranceControls and evidenceInspect the assurance surface and its linked evidence rather than a marketing summary.
a-11-oy.com/assurance Public sourceGoverned-agent benchmarkReview the benchmark schema, cases, and implementation in versioned source.
benchmarks/governed-agent-bench Public sourceSource and CIInspect implementation history, checks, releases, and open review state.
github.com/szl-holdings/a11oy Public registryModels, datasets, and SpacesInspect the current public Hub inventory; runtime stage is transport evidence only.
huggingface.co/SZLHOLDINGSAn architecture designed to make claims accountable.
a11oy is designed to conduct agents across providers through callsigns, evidence labels, and audit logs. Operational behavior remains subject to the linked runtime evidence.
Doctrine-gated inference
The architecture applies doctrine gates to outputs: evidence labels are explicit, overclaim patterns are checked, and exceptions are designed to fail closed.
Receipts, not vibes
Qualifying work products can carry DSSE-wrapped receipts with subject digests that can be checked offline.
Estate control plane
The public architecture organizes models, kernels, datasets, and consoles around a shared evidence vocabulary.
Brain, body, proof, and control — one navigable surface.
The estate stays modular at the source and unified at the interface. Each card opens a public Hub listing. REPORTED identifies listing metadata only; runtime state, capability, and availability are not checked in this section.
Lean-8 kernel = N/A formulas · live /honest locked_formula_count · not ROADMAP
SZL-Khipu-1.5B
The flagship governed retrieval navigator, with public weights, adapter, schema, receipts, and GGUF path.
Open model line →Sovereign router
The public Hub listing for the routing interface and its stated provider-status and bounded-inference scope.
Open router →Living anatomy
The body map for organs, contracts, trust boundaries, and the controller outside model weights.
Open anatomy →Holographic estate
A spatial front door into the wider public estate, built as a distinct interface over shared evidence.
Open holographic →Ayllu Counsel
Eleven Quechua seats, fail-closed Λ-gate, dissent retained. Wiñay closure and Huklla cheapest-cut are scored on the split-out organ. IIT φ_s UNAVAILABLE. Presence CONJECTURE. RECORD here; runtime stays on product origin / Space.
Open Ayllu RECORD →SZL KHIPU
Original cuts of the field, never rehosts. Duals Ari=GreenLight and Kay Pacha=Anatomy. RECORD here; evaluate on a-11-oy.com/khipu. CUDA UNAVAILABLE. Conjecture 1 OPEN.
Open KHIPU RECORD →Experiments lab
Allodial AI, neuroplasticity, chain of title — operational Python, still EXPERIMENTAL, never folded into locked-8.
Open experiments RECORD →Governed kernels
Reusable verifier and policy components with explicit source, license, and provenance boundaries.
Open kernel suite →a11oy command surface
The public Hub listing for the control-plane interface and its stated formulas, inventory, governance, and route scope.
Open control plane →IMMUNE
Product tab a-11-oy.com/immune. Channel A SZLHOLDINGS/immune and Channel B SZLHOLDINGS/immune-lattice kept. Lorenz OP sealed on hashes input c5fcc502… output 4071a2f2… Energy UNAVAILABLE. Λ = Conjecture 1 OPEN. RECORD of a measured run — not a live probe and not a LIVE claim.
Open product tab →Adapters that exist, and cards that still do not.
KHIPU-R2, WILLAY, A11OY-MINI, and chaski are REPORTED Hub listings with adapter or GGUF bytes — not empty cutting cards. Sibling adapters khipu-r3, chaski-r2, brain-navigator-r2, and szl-receiptagent-qwen35-0.8b-v3 are also REPORTED listings with bytes; they are not a forty-SKU rewrite of keep-7. qantu, waman, chakana, tinku, and YARQA-ATTN stay ROADMAP: no admitted train data or no kernel binary. Killinchu-named resources stay outside this inventory. Train loss is not eval. publication_eligible remains false until held-out generate says otherwise.
KHIPU-R2
Public adapter listing for the Khipu successor. Weights exist as an adapter; publication_eligible stays false. Does not overwrite signed SZL-Khipu-1.5B.
Open Hub card →WILLAY
Public adapter listing for a signed-refusal specialist. Not an authorizer or executor. Listing metadata plus adapter bytes; not a capability claim.
Open Hub card →YARQA-ATTN
KERNEL-owned cutting card. Named silhouette only; not an ATELIER model, not a Triton stack, and not a published binary. Throughput remains unmeasured here.
Open Hub card →A11OY-MINI
GGUF conversion path of live Chaski, not a second train. Bytes exist on the listing. Proposal-only, never execute. Not a new 1.5B checkpoint.
Open Hub card →chaski
Atelier messenger. Adapter listing on the Hub. Sibling SKU chaski-r2 is a separate 0.8B bf16 LoRA; this card is not overwritten by r2.
Open Hub card →qantu
Atelier document/receipt VLM cut. Adapter not uploaded; listing metadata only, not a trained vision checkpoint.
Open Hub card →waman
Atelier object-detection cut. No weights uploaded; a named silhouette on the Hub, not a trained detector.
Open Hub card →chakana
Named Atelier cutting card on the public Hub. Listing only; no README, weights, or capability claim is attached yet.
Open Hub card →tinku
Named Atelier cutting card on the public Hub. Listing only; no README, weights, or capability claim is attached yet.
Open Hub card →In-tree source. Hub class SOFTWARE; throughput ROADMAP.
These GitHub repositories hold original in-tree source on main — not Hub-card-only stubs. Hub collection is SOFTWARE (not LoRA). Throughput stays ROADMAP: not OPERATIONAL, not live, and not a measured speed. Canonical source is GitHub; Hub mirrors are extra links. Only szl-receipt-attn has Triton bytes on main. szl-maskmod v0 is original torch score_mod + block-mask. szl-block-kv v0 is an original torch paged KV gather; its Triton page kernel remains ROADMAP. Sage INT8/FP8 stays a fourth ROADMAP kernel and is not listed as shipped. YARQA-ATTN is KERNEL-owned and stays the Fall 2026 cutting card above, not a fourth Triton stack. szl-serve stays a CPU Khipu lab pin, not an operational kernel. Killinchu-named resources stay outside this inventory. Λ remains Conjecture 1.
szl-receipt-attn
Original tiled fused attention on GitHub main (FlashAttention silhouette, not a Dao rehost). Triton bytes are in-tree with an SDPA reference and receipts; no throughput is claimed here.
Open GitHub source →Hub mirror →szl-maskmod
v0 is original torch score_mod + block-mask on GitHub main (FlexAttention silhouette). Not a flex_attention.py copy and not Triton-in-tree; no CUDA timing is published here.
Open GitHub source →Hub mirror →szl-block-kv
v0 is original torch paged KV gather and receipts on GitHub main. Not a vLLM .cu copy, and the gather is not a Triton kernel. The Triton page kernel remains ROADMAP; no speedup is claimed here.
Open GitHub source →Hub mirror →How a claim earns its label
The pipeline is deliberately boring — and deliberately auditable.
- 01Emit
An agent produces a claim, artifact, or action proposal.
- 02Gate
Doctrine guards check labels, banned tokens, and overclaim patterns.
- 03Sign
Qualifying artifacts get DSSE receipts with subject digests.
- 04Publish
Surfaces ship with the label visible — UNKNOWN stays UNKNOWN.
- 05Verify
Anyone can re-check the receipt chain — trust ceiling 0.97, never blind.
Public surfaces and bounded reads
Product routes below are public links only and are not probed. The two Hugging Face rows use public runtime-metadata APIs from this browser; a reported stage remains transport metadata, not capability or uptime evidence.
REPORTED metadata is not promoted to measured capability or quality.
CHECKING, RUNNING · REPORTED, transitional states, and UNAVAILABLE describe this browser session only.
- NOT PROBED · UNKNOWN
- NOT PROBED · UNKNOWN
- NOT PROBED · UNKNOWN
- NOT PROBED · UNKNOWN
- NOT OBSERVED · UNAVAILABLE
- NOT OBSERVED · UNAVAILABLE
No public Hub runtime metadata was observed by this document.
Product routes remain NOT PROBED · UNKNOWN. A schema-valid public Hub stage is REPORTED transport metadata only; malformed, missing, or failed metadata reads fail closed.
Every public artifact this origin already publishes, as cards.
These cards are rendered in your browser from the JSON documents committed to this repository — /public-inventory.json (dated unauthenticated public Hugging Face API snapshot) and /models.json (dated MEASURED classification). Counts, hashes, licences, dates, stages, and object totals are read fields, never typed here. A missing field renders UNAVAILABLE. Killinchu-named resources are withheld from this front door.
Provenance renders with the cards: document, schema, observation time, and observation mode.
The public artifact registry, consolidated.
Search reported model, dataset, collection, and bucket listings on this RECORD surface. Hub atlas and ROADMAP live here on a11oy.net, not on a-11-oy.com. Executable Spaces and Killinchu-named resources are outside this evidence inventory.
Public metadata observation
REPORTED means point-in-time public Hub listing metadata only. It does not prove capability, quality, safety, data rights, or deployed equivalence.
Static snapshot observed 2026-08-31; live browser refresh pending.
Estate counts render from the estate.json manifest — see github.com/szl-holdings.
Public source inventory, committed here.
These URLs are a static inventory on this origin. They are not probed. A listed URL is location only — never quality. Killinchu-named resources stay outside this inventory.
Machine copy: /atlas.json. Hub live chips may go UNAVAILABLE; this GitHub inventory remains in the document.
The governed estate
a11oy is the conductor; these are the sections of the orchestra.