Generated listing snapshot from the unauthenticated Hub API, observed 2026-10-03T11:01:47Z. Not a live read. Source /estate/hf-current.json.
Estate snapshot · HISTORICAL · 2026-08-29T18:23:00Z
Dated estate inventory on the proof origin.
This page preserves a dated recapture, not present estate or product-runtime state. An a11oy signing probe succeeded at 18:00Z then; this origin does not host a signer or receipt store. Current product state requires a fresh product-origin readback. Do not merge hosts. Never a11oy.com.
Open estate catalog hologram
Open estate OS plane
Open second-brain fold
Read later 2026-08-31 machine snapshot
Open product
Operational boundary: GitHub Pages served this HTML at the recapture, proving reachability then only. Product honesty at https://a-11-oy.com/api/a11oy/v1/honest was UNAVAILABLE in this historical recapture (custom domain PENDING; Space HTTP timeout); its current state is UNKNOWN here. Interactive verify is not cloned here. A Grok working copy is not a fourth public origin.
Private datasets are NOT_OBSERVED, never counted as zero.
Author listing plus the README profile Space. Stage is provider-reported, not health.
Kernel repositories, included in the model count. Full detail at /public-inventory.json.
Historical below: every count, status, pull-request gate, key observation, and finding after this line belongs to the 2026-08-29 snapshot or an explicitly dated later note. None asserts current state. The generated public Hub rail above is a separate, date-stamped listing snapshot; inspect its observation time before use.
Historical public-API snapshot: 93 public, 5 private, 34 archived. Anchor was 63. Not a current count.
0 merge-qualified at the recapture. Then-residuals: a11oy#1463 #1462 #1460 (required-check FAILURE), a11oy-net#55 (CONFLICTING).
Unauthenticated author-list. Factory and command-lab 401 private. remaining_joblib not re-counted.
Product remains a-11-oy.com.
Ninety seconds
What this snapshot claims.
A figure without method, date, and source is omitted.
| Claim at snapshot | Class now | Method / date | Bound |
|---|---|---|---|
| szl-holdings had 98 repositories (93 public, 5 private, 34 archived) | SNAPSHOT | GitHub search API · 2026-08-29T18:23Z | Historical inventory count, not 98 products or a current count. |
| 4 pull requests were open, 0 merge-qualified | SNAPSHOT | gh pr view gates · 2026-08-29T18:23Z | Historical gate state only; no claim about their present disposition. |
| Protected a11oy main was 5bcde41b (#1461) | SNAPSHOT | GitHub commits/main · 2026-08-29 | GitHub source identity at recapture, not current main or automatically the Space git object. |
| a-11-oy.com honest git_sha | UNAVAILABLE | /api/a11oy/v1/honest timed out · custom domain PENDING | Space SZLHOLDINGS/a11oy reports RUNNING cpu-basic, sha 505fab44. Live honesty JSON did not return. Not a deploy claim. |
| a11oy-net main was 671aa806 (#56) | SNAPSHOT | GitHub commits/main · 2026-08-29 | Prior source revision after Packet 8 RECORD stubs, not current main. |
| SZLHOLDINGS Hub listing showed 43 / 28 / 6 public Spaces | SNAPSHOT | Unauthenticated Hugging Face API · 2026-08-29 | Then-public keepers: a11oy, killinchu, immune, governed-receipt-verifier, szl-khipu, szl-atelier. Private totals were UNAVAILABLE. Atlas keep-7 was an earlier 18:05Z snapshot. |
| GPU train | UNAVAILABLE | command-lab#12 e8eb159e · factory#22 N27 | Fail-closed gate on GitHub. Hub runtimes private (401). CUDA absent. willay/khipu-r3/waman not approved. Never a fabricated train. |
| Energy joules | UNAVAILABLE | RAPL/NVML only · command-lab Hub private | Prior wrap 17.095 J / 1.0002 s while T4 was RUNNING is not a live meter. Package joule ≠ inference joule. |
| Hub Space git was a distinct object | SNAPSHOT | HfApi.space_info SZLHOLDINGS/a11oy sha 505fab44 · 2026-08-29 | Not a GitHub commit or a current Hub revision. Matching GitHub and honest is not a deploy claim. |
| Λ uniqueness | UNAVAILABLE | Conjecture 1 | Never a theorem. Never green. proven_trust=false. |
| No private key was found in the public repositories scanned then | SNAPSHOT | Bounded public-git scan · 2026-08-29T18:00Z | Not a whole-estate or current absence claim; private repositories and provider secrets were not inspected. A Space secret named SZL_COSIGN_PRIVATE_PEM was reported then. Do not mint a replacement. |
| Four published P-256 keys diverged at recapture | SNAPSHOT | Public-key fetch + Node ECDSA verify · 2026-08-29T18:00Z | Then-closeout MATCH only vs a11oy Space /cosign.pub (keyid 9926bf69). The recorded org URL, .github/keys/cosign.pub, did not match. See the later key-hunt correction; current key state is UNKNOWN here. |
| The organ signed the 2026-08-29 closeout DSSE | SNAPSHOT | POST /api/a11oy/khipu/sign then local verify · 2026-08-29T18:00Z | ECDSA verified then. Not ALLOW or current signer health. Envelope is not stored on this origin. Honesty was later UNAVAILABLE at 18:23Z. |
| HMAC non-repudiation at recapture | SNAPSHOT | /api/a11oy/v1/signing-status · 2026-08-29T18:00Z | hmac_layer=placeholder and non_repudiation=false then. Current state UNKNOWN here. A11OY_HMAC_KEY was not found in the bounded public-git scan. |
| Unauth Hub author-list at recapture | SNAPSHOT | GET /api/spaces?author=SZLHOLDINGS · 2026-08-29T18:37Z | Six public then. README omitted from that unauthenticated list. Not a rewrite of atlas keep-7 (18:05Z) or the newer generated listing above. |
| Estate catalog hologram at /estate/os/ in September | SNAPSHOT | Static Pages SPA · 2026-09-11T18:42:46Z PUBLIC_PARTIAL unauth bake (240 rows; 117 GitHub / 21 Spaces / 46 models / 35 datasets) | On-origin, READ-ONLY, and not a live dashboard or fourth origin. Dated Aug-29 counts were not rewritten. estate.json keep-7 spaces_public=48 is historical. Λ remains Conjecture 1. |
| This preview SPA as a fourth public origin | UNAVAILABLE | — | Rejected. Fold tables here; keep demos unpublished. The hologram is on this origin, not a Grok URL. |
Key hunt · historical
Recorded public-key match at the closeout.
The scan covered public git only; it did not establish the absence of private keys estate-wide. The signer and current provider-secret state are not inspected by this page.
| Published key at recapture | Class now | Identity then | Closeout match then |
|---|---|---|---|
| GitHub .github/keys/cosign.pub | SNAPSHOT | keyid 421a1422, observed 2026-09-26 (estate.json labels this entry d3028f8a, the root key) · PEM SHA-256 31b8c7f1… | mismatch |
| a11oy Space /cosign.pub | SNAPSHOT | keyid 9926bf69 · a Space secret named SZL_COSIGN_PRIVATE_PEM was reported then | MATCH at 18:00Z |
| a11oy /khipu/pubkey.pem | SNAPSHOT | Distinct from Space /cosign.pub at 18:00Z; which key it served then was not recorded. At 2026-09-26T02:37Z it served the .github root cosign.pub key (keyid d3028f8a). | mismatch |
| killinchu Space /cosign.pub | SNAPSHOT | Distinct P-256 key at recapture | mismatch |
| A11OY_HMAC_KEY | SNAPSHOT | Not found in the scanned public git paths then | placeholder then |
Correction 2026-09-26: the keys/cosign.pub row said keyid d3028f8a. That is the root .github/cosign.pub. keys/cosign.pub is keyid 421a1422: measured 2026-09-26, and unchanged in git since 2026-06-09. 31b8c7f1 is the SHA-256 of that key's PEM with one trailing newline; the served file has an extra blank line. estate.json records the keys/cosign.pub URL for the org file, with pem_sha256 31b8c7f1 re-hashed at 18:16Z, keyid_reported d3028f8a and no match. It does not record keyid 421a1422, and which org PEM the 18:00Z verify loaded was not recorded. The root cosign.pub was not recorded as fetched; that it did not match is inferred (MODELED in record.json): the signature verified under the Space /cosign.pub key, which estate.json gives as keyid_reported 9926bf69, a different key. The a11oy Space /cosign.pub row's keyid 9926bf69 is also estate.json's keyid_reported: estate.json recorded no PEM hash for that key, and its fingerprint was not re-hashed after the ceremony. That URL served keyid 9926bf69 when fetched 2026-09-26 (record.json public_key). Observations are otherwise unchanged. PEM SHA-256 for the org GitHub key was re-hashed at 18:16Z. Space GETs timed out after the ceremony; Space match remains the 18:00Z observation. Product honesty timed out at 18:23Z. This page does not embed private material and does not host a signer.
Closeout recapture · historical
SIGNED_BY_LIVE_ORGAN did not mean PRODUCTION_VERIFIED.
The 2026-08-29 W8 signing observation did not settle W9, HMAC, or current live honesty. Those require fresh evidence outside this surface.
What was measured at 18:00Z
- Organ
SZLHOLDINGS/a11oyacceptedaction=estate-atlas-closeout. - Payload type
application/vnd.szl.khipu+json. DSSE PAE verified with Nodecrypto.verify. - Local verify MATCH against Space
/cosign.pubonly (keyid 9926bf69). - Doctrine v11 LOCKED at
c7c0ba17at ceremony. Lean 749 / 14 / 163. Λ remains Conjecture 1.
What this is not
- Not ALLOW. Not a production certificate. Trust stays UNAVAILABLE.
- Not org-key match. The signature verified under the Space /cosign.pub key (recorded as keyid 9926bf69), not under szl-holdings/.github keys/cosign.pub (421a1422; mismatch recorded). The root cosign.pub (d3028f8a) mismatch is inferred.
- Not HMAC non-repudiation.
hmac_layer=placeholder. - Not live honesty at 18:23Z. Custom domain PENDING. Space HTTP timeout.
- Envelope is not stored here. RECORD is pointers. No
*.dsse.jsonon this origin.
Findings · historical
Four P0 were open at the 2026-08-29 recapture.
Table statuses are historical, not current dispositions. Current state is UNKNOWN here; no green check is inferred.
| ID | Class then | Title then | Status then |
|---|---|---|---|
| P0-JOBLIB | REPORTED | Unsafe serialization on public model serving | open |
| P0-PROD-LAG | SNAPSHOT | Honesty UNAVAILABLE at 18:23Z; ceremony SHA e198c1a lagged then-locked main | open |
| P0-UNSIGNED | SNAPSHOT | Assurance pack was unsigned at recapture | open |
| P0-KERNEL-DIVERGE | REPORTED | Two kernel / model code divergences | open |
| P1-KEY-DIVERGE | SNAPSHOT | Published cosign keys diverged across organs at recapture | open |
| P1-HMAC | SNAPSHOT | HMAC non-repudiation layer was placeholder at recapture | blocked |
| P1-SOURCEMAP | REPORTED | Space source-map drift (27 of 44) | open |
| P1-VIEWER | REPORTED | Dataset viewer failures | open |
| P1-LICENSE | REPORTED | Missing license metadata | open |
| P1-BUCKET | REPORTED | Stale bucket-manifest evidence | open |
| P1-PRIVATE-GAP | REPORTED | Public / authenticated inventory gap | blocked |
| P2-STALL | REPORTED | Cooling and stalled organs | open |
Workgraph · historical
Codex loop as frozen at recapture.
W1–W2 were done, W3–W8 ready, W9 external, and W10 blocked in the snapshot. This does not describe the current queue.
| ID | Phase then | Title then | State then |
|---|---|---|---|
| W1 | reconnaissance | Freeze public audit digest | done |
| W2 | exact-base lock | Lock merged main SHA | done |
| W3 | minimal implementation | Quarantine joblib serving | ready |
| W4 | minimal implementation | Reconcile two kernel/model divergences | ready |
| W5 | focused tests | License and card pass | ready |
| W6 | focused tests | Repair dataset viewers | ready |
| W7 | repository gates | Lock Space source-maps | ready |
| W8 | evidence packet | Sign closeout via live a11oy organ | ready |
| W9 | exact-SHA deployment | Deploy merged SHA to production | external |
| W10 | live readback | Independent post-deploy verification | blocked |
Origins
Product | Proof. Do not merge.
Keep
- a-11-oy.com — command center, /verify, honesty manifest. Custom domain PENDING this recapture; Space host is szlholdings-a11oy.hf.space.
- a11oy.net — RECORD, diligence, this estate snapshot.
- huggingface.co/SZLHOLDINGS — public artifacts. Not a front door.
- /estate/os/ — Estate catalog hologram. Static. Index, not nav.
- /estate/plane/ — Estate OS control-plane hologram. PROPOSE_ONLY. Index, not nav.
Do not
- Do not publish a Grok Build SPA as a fourth public origin.
- Do not clone /verify onto this origin.
- Do not treat a11oy.com (home-and-garden storefront) as canonical.
- Do not bill a CPU fit as a GPU train. Do not flip approved=true on willay/khipu-r3/waman.
- Do not host a DSSE signer or receipt bodies here.