{
  "contract_version": "1.2.0",
  "surface": {
    "name": "Estate snapshot",
    "url": "https://a11oy.net/estate/",
    "publisher": "SZL Holdings",
    "meaning": "Dated MEASURED public inventory snapshot on the proof origin, plus a closeout recapture. Not product runtime. Not a live dashboard. Not a receipt store. This origin does not host a DSSE signer.",
    "implementation": "static GitHub Pages JSON"
  },
  "reader_guide": "captured_at is this file's own bake time. huggingface block is the org-authenticated REPORTED view (44 models / 38 datasets / 49 Spaces, 48 publicly readable including README). unauth_author_list is the unauthenticated MEASURED view (44 models / 30 datasets / 47 Spaces). Prior dated snapshots (2026-08-28: 17/27; 2026-08-29: 43/36 keep-7; recapture_2026_08_30) are historical and not rewritten. Counts are not quality, safety, or readiness. a-11-oy.com remains the product. This origin remains RECORD. Never a11oy.com.",
  "captured_at": "2026-08-31T18:59:11Z",
  "evidence_class": "MEASURED",
  "github": {
    "org": "szl-holdings",
    "repositories_search_total": 103,
    "bound": "GitHub search org:szl-holdings authenticated as stephenlutar2-hash REPORTED 103 on 2026-08-31 (includes archived). Unauthenticated search MEASURED 95 public. 8 private.",
    "public_search_total": 95
  },
  "huggingface": {
    "org": "SZLHOLDINGS",
    "models": 44,
    "datasets": 38,
    "spaces_total": 49,
    "spaces_public": 48,
    "spaces_private": 1,
    "public_spaces": [
      "SZLHOLDINGS/README",
      "SZLHOLDINGS/a11oy",
      "SZLHOLDINGS/a11oy-factory",
      "SZLHOLDINGS/anatomy",
      "SZLHOLDINGS/ayllu",
      "SZLHOLDINGS/cosmos",
      "SZLHOLDINGS/counsel",
      "SZLHOLDINGS/david-leads",
      "SZLHOLDINGS/energy-attest-holo",
      "SZLHOLDINGS/energy-attested-runs",
      "SZLHOLDINGS/evidence-studio",
      "SZLHOLDINGS/experiments",
      "SZLHOLDINGS/governed-agent-bench",
      "SZLHOLDINGS/governed-norm-holo",
      "SZLHOLDINGS/governed-receipt-verifier",
      "SZLHOLDINGS/guardrail-receipt",
      "SZLHOLDINGS/hatun-mcp",
      "SZLHOLDINGS/holographic",
      "SZLHOLDINGS/immune",
      "SZLHOLDINGS/immune-lattice",
      "SZLHOLDINGS/khipu-lab",
      "SZLHOLDINGS/killinchu",
      "SZLHOLDINGS/lambda-gate-holo",
      "SZLHOLDINGS/llm-router-live",
      "SZLHOLDINGS/lyte-services",
      "SZLHOLDINGS/nexus",
      "SZLHOLDINGS/probe-test-connector",
      "SZLHOLDINGS/prove-it",
      "SZLHOLDINGS/receipt-chain-live",
      "SZLHOLDINGS/sda",
      "SZLHOLDINGS/second-brain",
      "SZLHOLDINGS/szl-atelier",
      "SZLHOLDINGS/szl-blocked-live",
      "SZLHOLDINGS/szl-command-lab",
      "SZLHOLDINGS/szl-estate-live",
      "SZLHOLDINGS/szl-experiments",
      "SZLHOLDINGS/szl-forge-lab",
      "SZLHOLDINGS/szl-frontier",
      "SZLHOLDINGS/szl-govsign-live",
      "SZLHOLDINGS/szl-kernels-live",
      "SZLHOLDINGS/szl-khipu",
      "SZLHOLDINGS/szl-model-inference-lab",
      "SZLHOLDINGS/szl-provctl-live",
      "SZLHOLDINGS/szl-quant-live",
      "SZLHOLDINGS/szl-real-estate",
      "SZLHOLDINGS/szl-sovereign-os",
      "SZLHOLDINGS/terra-assurance",
      "SZLHOLDINGS/yarqa"
    ],
    "action": "pause+private, never delete",
    "collection": "https://huggingface.co/collections/SZLHOLDINGS/canonical-public-spaces-7-6a9315ac72207f841dff230d",
    "bound": "Org-authenticated Hub view 2026-08-31 as org admin betterwithage: 44 models, 38 datasets, 49 Spaces. 48 Spaces publicly readable (47 list-API rows plus the README profile card, which the list API omits); 1 not publicly listed. Visibility expanded 7 -> 48 public between 2026-08-30 and this recapture, off this runtime. pause+private, never delete stands as policy; nothing was deleted."
  },
  "unauth_author_list": {
    "observed_at": "2026-08-31T18:59:11Z",
    "evidence_class": "MEASURED",
    "method": "Unauthenticated Hugging Face API GET /api/spaces?author=SZLHOLDINGS&limit=100",
    "spaces_public": 47,
    "public_spaces": [
      "SZLHOLDINGS/a11oy",
      "SZLHOLDINGS/a11oy-factory",
      "SZLHOLDINGS/anatomy",
      "SZLHOLDINGS/ayllu",
      "SZLHOLDINGS/cosmos",
      "SZLHOLDINGS/counsel",
      "SZLHOLDINGS/david-leads",
      "SZLHOLDINGS/energy-attest-holo",
      "SZLHOLDINGS/energy-attested-runs",
      "SZLHOLDINGS/evidence-studio",
      "SZLHOLDINGS/experiments",
      "SZLHOLDINGS/governed-agent-bench",
      "SZLHOLDINGS/governed-norm-holo",
      "SZLHOLDINGS/governed-receipt-verifier",
      "SZLHOLDINGS/guardrail-receipt",
      "SZLHOLDINGS/hatun-mcp",
      "SZLHOLDINGS/holographic",
      "SZLHOLDINGS/immune",
      "SZLHOLDINGS/immune-lattice",
      "SZLHOLDINGS/khipu-lab",
      "SZLHOLDINGS/killinchu",
      "SZLHOLDINGS/lambda-gate-holo",
      "SZLHOLDINGS/llm-router-live",
      "SZLHOLDINGS/lyte-services",
      "SZLHOLDINGS/nexus",
      "SZLHOLDINGS/probe-test-connector",
      "SZLHOLDINGS/prove-it",
      "SZLHOLDINGS/receipt-chain-live",
      "SZLHOLDINGS/sda",
      "SZLHOLDINGS/second-brain",
      "SZLHOLDINGS/szl-atelier",
      "SZLHOLDINGS/szl-blocked-live",
      "SZLHOLDINGS/szl-command-lab",
      "SZLHOLDINGS/szl-estate-live",
      "SZLHOLDINGS/szl-experiments",
      "SZLHOLDINGS/szl-forge-lab",
      "SZLHOLDINGS/szl-frontier",
      "SZLHOLDINGS/szl-govsign-live",
      "SZLHOLDINGS/szl-kernels-live",
      "SZLHOLDINGS/szl-khipu",
      "SZLHOLDINGS/szl-model-inference-lab",
      "SZLHOLDINGS/szl-provctl-live",
      "SZLHOLDINGS/szl-quant-live",
      "SZLHOLDINGS/szl-real-estate",
      "SZLHOLDINGS/szl-sovereign-os",
      "SZLHOLDINGS/terra-assurance",
      "SZLHOLDINGS/yarqa"
    ],
    "bound": "Unauthenticated GET /api/{models,datasets,spaces}?author=SZLHOLDINGS&limit=100 on 2026-08-31: 44 models, 30 datasets, 47 Spaces. README Space is public but omitted from the unauth author-list (profile card). 8 org datasets are private.",
    "models": 44,
    "datasets": 30
  },
  "origins": {
    "product": "https://a-11-oy.com",
    "product_command": "https://a-11-oy.com/series-a",
    "proof": "https://a11oy.net/",
    "proof_command_record": "https://a11oy.net/command/",
    "hub": "https://huggingface.co/SZLHOLDINGS",
    "never": "a11oy.com \u2014 foreign storefront"
  },
  "boundaries": {
    "this_origin_is_not_a_product_host": true,
    "http_response_proves_capability": false,
    "live_dashboard_cloned": false,
    "verify_cloned": false,
    "receipt_database_hosted_here": false,
    "spaces_deleted": false,
    "fourth_public_origin": false,
    "lambda_uniqueness": "Conjecture 1 OPEN",
    "dsse_signer_hosted_here": false,
    "dsse_envelope_hosted_here": false,
    "grok_spa_published_here": false,
    "grok_spa_published_as_fourth_origin": false,
    "fourth_public_origin_published": false,
    "hologram_is_on_origin": true
  },
  "closeout_recapture_at": "2026-08-29T18:00:00Z",
  "keys": {
    "evidence_class": "MEASURED",
    "private_keys_in_public_git": 0,
    "hmac_keys_in_public_git": 0,
    "observed_at": "2026-08-29T18:00:00Z",
    "note": "Deep public scan of szl-receipt, szl-govsign, a11oy, killinchu, .github/keys, developers/VERIFY.md, and szl-lake. Private key is never committed. It lives as HF Space secret SZL_COSIGN_PRIVATE_PEM. HMAC key A11OY_HMAC_KEY is not in public git. Do not mint a replacement identity.",
    "org_github_cosign_pub": {
      "url": "https://raw.githubusercontent.com/szl-holdings/.github/main/keys/cosign.pub",
      "pem_sha256": "31b8c7f11a57c05986c6ee8b7f21aefef4af1072c11e8058ce79c0f11502e0ad",
      "keyid_reported": "d3028f8a",
      "matches_live_closeout": false,
      "observed_at": "2026-08-29T18:16:00Z"
    },
    "a11oy_space_cosign_pub": {
      "url": "https://szlholdings-a11oy.hf.space/cosign.pub",
      "keyid_reported": "9926bf69",
      "matches_live_closeout": true,
      "observed_at": "2026-08-29T18:00:00Z",
      "bound": "Node ECDSA-P256-SHA256 verify of live /khipu/sign against Space /cosign.pub. MATCH. Space GET timed out at 18:16Z and honesty timed out at 18:23Z; fingerprint is not re-hashed after the ceremony."
    },
    "a11oy_khipu_pubkey": {
      "url": "https://szlholdings-a11oy.hf.space/khipu/pubkey.pem",
      "matches_live_closeout": false,
      "bound": "Distinct P-256 key from Space /cosign.pub. Ceremony mismatch."
    },
    "killinchu_cosign_pub": {
      "url": "https://szlholdings-killinchu.hf.space/cosign.pub",
      "matches_live_closeout": false,
      "bound": "Distinct P-256 key. Ceremony mismatch."
    }
  },
  "signing": {
    "this_origin_has_signer": false,
    "live_organ": "SZLHOLDINGS/a11oy",
    "sign_endpoint": "https://szlholdings-a11oy.hf.space/api/a11oy/khipu/sign",
    "payload_type": "application/vnd.szl.khipu+json",
    "honesty": "REAL \u2014 ECDSA-P256-SHA256 over DSSE PAE, verified against a11oy Space /cosign.pub. Does not match published org GitHub cosign.pub. HMAC remains PLACEHOLDER. Not ALLOW. Not a production certificate.",
    "hmac_layer": "placeholder",
    "hmac_key_id": "hmac-sha256:PLACEHOLDER",
    "non_repudiation": false,
    "matches_published_org_key": false,
    "key_persistent": true,
    "application_git_sha_at_ceremony": "e198c1a49fa6c8d8cfb411fe26d8bda7db842cea",
    "doctrine": "v11",
    "doctrine_lock_at_ceremony": "c7c0ba17",
    "envelope_hosted_here": false,
    "observed_at": "2026-08-29T18:00:00Z",
    "bound": "Ceremony ran while the Space answered. At 18:23Z product honesty was UNAVAILABLE (custom domain PENDING; Space HTTP timeout). This origin records the facts. It does not store the envelope and does not re-sign."
  },
  "closeout": {
    "state": "BLOCKED_EXTERNAL_AUTHORITY",
    "evidence_class": "REPORTED",
    "reason": "Live organ produced a verifiable closeout DSSE earlier this date. Exact-SHA deploy, HMAC non-repudiation, and org-key match remain outside this surface. At 18:23Z product honesty is UNAVAILABLE. GPU train is UNAVAILABLE. Open P0 findings remain. Trust stays UNAVAILABLE."
  },
  "findings": [
    {
      "id": "P0-JOBLIB",
      "severity": "P0",
      "status": "open",
      "evidence": "REPORTED",
      "title": "Unsafe serialization on public model serving"
    },
    {
      "id": "P0-PROD-LAG",
      "severity": "P0",
      "status": "open",
      "evidence": "MEASURED",
      "title": "Production honesty UNAVAILABLE; prior ceremony SHA lagged GitHub main"
    },
    {
      "id": "P0-UNSIGNED",
      "severity": "P0",
      "status": "open",
      "evidence": "MEASURED",
      "title": "Assurance pack is unsigned"
    },
    {
      "id": "P0-KERNEL-DIVERGE",
      "severity": "P0",
      "status": "open",
      "evidence": "REPORTED",
      "title": "Two kernel / model code divergences"
    },
    {
      "id": "P1-KEY-DIVERGE",
      "severity": "P1",
      "status": "open",
      "evidence": "MEASURED",
      "title": "Published cosign keys diverge across organs"
    },
    {
      "id": "P1-HMAC",
      "severity": "P1",
      "status": "blocked",
      "evidence": "MEASURED",
      "title": "HMAC non-repudiation layer is placeholder"
    },
    {
      "id": "P1-SOURCEMAP",
      "severity": "P1",
      "status": "open",
      "evidence": "REPORTED",
      "title": "Space source-map drift"
    },
    {
      "id": "P1-VIEWER",
      "severity": "P1",
      "status": "open",
      "evidence": "REPORTED",
      "title": "Dataset viewer failures"
    },
    {
      "id": "P1-LICENSE",
      "severity": "P1",
      "status": "open",
      "evidence": "REPORTED",
      "title": "Missing license metadata"
    },
    {
      "id": "P1-BUCKET",
      "severity": "P1",
      "status": "open",
      "evidence": "REPORTED",
      "title": "Stale bucket-manifest evidence"
    },
    {
      "id": "P1-PRIVATE-GAP",
      "severity": "P1",
      "status": "blocked",
      "evidence": "REPORTED",
      "title": "Public / authenticated inventory gap"
    },
    {
      "id": "P2-STALL",
      "severity": "P2",
      "status": "open",
      "evidence": "REPORTED",
      "title": "Cooling and stalled organs"
    }
  ],
  "workgraph": [
    {
      "id": "W1",
      "phase": "reconnaissance",
      "state": "done",
      "title": "Freeze public audit digest"
    },
    {
      "id": "W2",
      "phase": "exact-base lock",
      "state": "done",
      "title": "Lock merged main SHA"
    },
    {
      "id": "W3",
      "phase": "minimal implementation",
      "state": "ready",
      "title": "Quarantine joblib serving"
    },
    {
      "id": "W4",
      "phase": "minimal implementation",
      "state": "ready",
      "title": "Reconcile two kernel/model divergences"
    },
    {
      "id": "W5",
      "phase": "focused tests",
      "state": "ready",
      "title": "License and card pass"
    },
    {
      "id": "W6",
      "phase": "focused tests",
      "state": "ready",
      "title": "Repair dataset viewers"
    },
    {
      "id": "W7",
      "phase": "repository gates",
      "state": "ready",
      "title": "Lock Space source-maps"
    },
    {
      "id": "W8",
      "phase": "evidence packet",
      "state": "ready",
      "title": "Sign closeout via live a11oy organ"
    },
    {
      "id": "W9",
      "phase": "exact-SHA deployment",
      "state": "external",
      "title": "Deploy merged SHA to production"
    },
    {
      "id": "W10",
      "phase": "live readback",
      "state": "blocked",
      "title": "Independent post-deploy verification"
    }
  ],
  "hologram": {
    "url": "https://a11oy.net/estate/os/",
    "meaning": "Static on-origin hologram of the PUBLIC_PARTIAL public catalog. READ-ONLY. Not a live dashboard. Not product runtime. Not a fourth origin.",
    "captured_at": "2026-08-29T17:35:39Z",
    "scope": "PUBLIC_PARTIAL",
    "github_public": 93,
    "space_public": 6,
    "space_gated": 37,
    "hub_models": 43,
    "hub_datasets": 28,
    "hub_collections": 18,
    "bound": "Hologram bake is 17:35Z PUBLIC_PARTIAL unauthenticated catalog. This file's captured_at keep-7 Hub recapture (43/36/7) is later and is not overwritten."
  },
  "recapture_2026_08_30": {
    "observed_at": "2026-08-30T16:15:00Z",
    "evidence_class": "MEASURED",
    "spaces_json_keep": 6,
    "spaces_json_fold": 38,
    "unauth_application_spaces": [
      "SZLHOLDINGS/a11oy",
      "SZLHOLDINGS/killinchu",
      "SZLHOLDINGS/immune",
      "SZLHOLDINGS/szl-khipu",
      "SZLHOLDINGS/szl-atelier",
      "SZLHOLDINGS/governed-receipt-verifier"
    ],
    "models_record": "https://a11oy.net/models.json",
    "spaces_record": "https://a11oy.net/spaces.json",
    "hub_models_public": 43,
    "hub_models_private": 0,
    "unprivate_38": false,
    "atlas_keep_7_rewritten": false,
    "gpu_train": "UNAVAILABLE",
    "energy": "UNAVAILABLE",
    "operational": false,
    "bound": "Unauthenticated Hub author-list recapture 2026-08-30. Application KEEP is the six public Spaces. README remains a profile card. anatomy, david-leads, and szl-real-estate stay PAUSED+PRIVATE (pause+private, never delete). No Hub write token in this runtime. Atlas keep-7 at 18:05Z is not rewritten. Product remains a-11-oy.com. Proof remains a11oy.net. Never a11oy.com."
  },
  "hologram_plane": {
    "url": "https://a11oy.net/estate/plane/",
    "meaning": "Static on-origin Estate OS control-plane hologram. PROPOSE_ONLY. Not a live dashboard. Not product runtime. Not a fourth origin.",
    "captured_at": "2026-08-29T16:49:00Z",
    "scope": "PUBLIC_PARTIAL",
    "github_observed": 91,
    "github_public": 84,
    "github_archived": 7,
    "private_unavailable": 5,
    "hub_models": 20,
    "hub_datasets": 28,
    "hub_spaces": 29,
    "kernels_in_model_ns": 14,
    "frontiers": 17,
    "bound": "Plane bake is 16:49Z PUBLIC_PARTIAL. Catalog hologram stays /estate/os/. This file's later keep-7 Hub recapture is not overwritten."
  }
}