MEASURED public API. 93 public, 5 private, 34 archived. Anchor was 63.
Estate snapshot · MEASURED · 2026-08-29T18:23:00Z
Inventory on the proof origin. Runtime stays on the product.
This page is a dated public recapture. It is not a live operator console, not a receipt store, and not a-11-oy.com. The live a11oy organ can sign. This origin does not. Do not merge hosts. Never a11oy.com.
Operational boundary: GitHub Pages served this HTML. That proves reachability of this path only. Product honesty is https://a-11-oy.com/api/a11oy/v1/honest and is UNAVAILABLE this recapture (custom domain PENDING; Space HTTP timeout). Interactive verify is not cloned here. A Grok working copy is not a fourth public origin.
0 merge-qualified. Residuals: a11oy#1463 #1462 #1460 (required-check FAILURE), a11oy-net#55 (CONFLICTING).
Unauthenticated author-list. Factory and command-lab 401 private. remaining_joblib not re-counted.
Product remains a-11-oy.com.
Ninety seconds
What this snapshot claims.
A figure without method, date, and source is omitted.
| Claim | Class | Method / date | Bound |
|---|---|---|---|
| szl-holdings has 98 repositories (93 public, 5 private, 34 archived) | MEASURED | GitHub search API · 2026-08-29T18:23Z | Inventory count, not 98 products. |
| 4 open pull requests, 0 merge-qualified | MEASURED | gh pr view gates · 2026-08-29T18:23Z | HOLD, draft, dirty, failed checks, extra-approval stay unmerged. |
| Protected a11oy main is 5bcde41b (#1461) | MEASURED | GitHub commits/main | Source identity on GitHub. Packet 8 desks mounted. Not automatically the Space git object. |
| a-11-oy.com honest git_sha | UNAVAILABLE | /api/a11oy/v1/honest timed out · custom domain PENDING | Space SZLHOLDINGS/a11oy reports RUNNING cpu-basic, sha 505fab44. Live honesty JSON did not return. Not a deploy claim. |
| a11oy-net main is 671aa806 (#56) | MEASURED | GitHub commits/main | Prior snapshot after Packet 8 RECORD stubs. This page is the successor recapture. |
| SZLHOLDINGS Hub listing 43 / 28 / 6 public Spaces | MEASURED | Unauthenticated Hugging Face API | Public keepers: a11oy, killinchu, immune, governed-receipt-verifier, szl-khipu, szl-atelier. Private totals UNAVAILABLE this recapture. Atlas keep-7 is a prior 18:05Z snapshot, not this row. |
| GPU train | UNAVAILABLE | command-lab#12 e8eb159e · factory#22 N27 | Fail-closed gate on GitHub. Hub runtimes private (401). CUDA absent. willay/khipu-r3/waman not approved. Never a fabricated train. |
| Energy joules | UNAVAILABLE | RAPL/NVML only · command-lab Hub private | Prior wrap 17.095 J / 1.0002 s while T4 was RUNNING is not a live meter. Package joule ≠ inference joule. |
| Hub Space git is a distinct object | MEASURED | HfApi.space_info SZLHOLDINGS/a11oy sha 505fab44 | Not a GitHub commit. Matching GitHub and honest is not a deploy claim. |
| Λ uniqueness | UNAVAILABLE | Conjecture 1 | Never a theorem. Never green. proven_trust=false. |
| Private keys in public git = 0 | MEASURED | Public git scan · 2026-08-29T18:00Z | Key lives as Space secret SZL_COSIGN_PRIVATE_PEM. Do not mint a replacement. |
| Four published P-256 keys diverge | MEASURED | Live pubkey fetch + Node ECDSA verify · 18:00Z | Closeout MATCH only vs a11oy Space /cosign.pub (keyid 9926bf69). Org GitHub key d3028f8a did not produce the signature. |
| Live organ signed a closeout DSSE | MEASURED | POST /api/a11oy/khipu/sign then local verify · 18:00Z | REAL ECDSA. Not ALLOW. Envelope is not stored on this origin. Honesty later UNAVAILABLE at 18:23Z. |
| HMAC non-repudiation | MEASURED | /api/a11oy/v1/signing-status · 18:00Z | hmac_layer=placeholder. non_repudiation=false. A11OY_HMAC_KEY is not in public git. |
| Unauth Hub author-list | MEASURED | GET /api/spaces?author=SZLHOLDINGS · 18:37Z | Six public. README omitted from unauth list. Not a rewrite of atlas keep-7 (18:05Z). |
| Estate catalog hologram at /estate/os/ | REPORTED | Static Pages SPA · 17:35Z PUBLIC_PARTIAL bake | On-origin. READ-ONLY. Not a live dashboard. Not a fourth origin. Λ remains Conjecture 1. |
| This preview SPA as a fourth public origin | UNAVAILABLE | — | Rejected. Fold tables here; keep demos unpublished. The hologram is on this origin, not a Grok URL. |
Key hunt
The signer is a Space secret. Not git.
Solo build. Search was public git only. Private keys were not committed.
| Published key | Class | Identity | Closeout match |
|---|---|---|---|
| GitHub .github/keys/cosign.pub | MEASURED | PEM SHA-256 31b8c7f1… · keyid d3028f8a | mismatch |
| a11oy Space /cosign.pub | MEASURED | keyid 9926bf69 · persistent SZL_COSIGN_PRIVATE_PEM | MATCH at 18:00Z |
| a11oy /khipu/pubkey.pem | MEASURED | Distinct P-256 key | mismatch |
| killinchu Space /cosign.pub | MEASURED | Distinct P-256 key | mismatch |
| A11OY_HMAC_KEY | MEASURED | Not in public git | placeholder |
PEM SHA-256 for the org GitHub key was re-hashed at 18:16Z. Space GETs timed out after the ceremony; Space match remains the 18:00Z observation. Product honesty timed out at 18:23Z. This page does not embed private material and does not host a signer.
Closeout recapture
SIGNED_BY_LIVE_ORGAN is not PRODUCTION_VERIFIED.
W8 can talk to the live organ when it answers. W9, HMAC, and live honesty stay outside this surface.
What was measured at 18:00Z
- Organ
SZLHOLDINGS/a11oyacceptedaction=estate-atlas-closeout. - Payload type
application/vnd.szl.khipu+json. DSSE PAE verified with Nodecrypto.verify. - Local verify MATCH against Space
/cosign.pubonly (keyid 9926bf69). - Doctrine v11 LOCKED at
c7c0ba17at ceremony. Lean 749 / 14 / 163. Λ remains Conjecture 1.
What this is not
- Not ALLOW. Not a production certificate. Trust stays UNAVAILABLE.
- Not org-key match. Published GitHub cosign.pub did not produce the signature.
- Not HMAC non-repudiation.
hmac_layer=placeholder. - Not live honesty at 18:23Z. Custom domain PENDING. Space HTTP timeout.
- Envelope is not stored here. RECORD is pointers. No
*.dsse.jsonon this origin.
Findings
Four P0 remain open. No fabricated green checks.
Status is fail-closed. Contained is not claimed.
| ID | Class | Title | Status |
|---|---|---|---|
| P0-JOBLIB | REPORTED | Unsafe serialization on public model serving | open |
| P0-PROD-LAG | MEASURED | Honesty UNAVAILABLE at 18:23Z; ceremony SHA e198c1a lagged then-locked main | open |
| P0-UNSIGNED | MEASURED | Assurance pack is unsigned | open |
| P0-KERNEL-DIVERGE | REPORTED | Two kernel / model code divergences | open |
| P1-KEY-DIVERGE | MEASURED | Published cosign keys diverge across organs | open |
| P1-HMAC | MEASURED | HMAC non-repudiation layer is placeholder | blocked |
| P1-SOURCEMAP | REPORTED | Space source-map drift (27 of 44) | open |
| P1-VIEWER | REPORTED | Dataset viewer failures | open |
| P1-LICENSE | REPORTED | Missing license metadata | open |
| P1-BUCKET | REPORTED | Stale bucket-manifest evidence | open |
| P1-PRIVATE-GAP | REPORTED | Public / authenticated inventory gap | blocked |
| P2-STALL | REPORTED | Cooling and stalled organs | open |
Workgraph
Codex loop, frozen.
W1–W2 done. W3–W8 ready. W9 external. W10 blocked. This PR is the protected-PR step for the proof origin only.
| ID | Phase | Title | State |
|---|---|---|---|
| W1 | reconnaissance | Freeze public audit digest | done |
| W2 | exact-base lock | Lock merged main SHA | done |
| W3 | minimal implementation | Quarantine joblib serving | ready |
| W4 | minimal implementation | Reconcile two kernel/model divergences | ready |
| W5 | focused tests | License and card pass | ready |
| W6 | focused tests | Repair dataset viewers | ready |
| W7 | repository gates | Lock Space source-maps | ready |
| W8 | evidence packet | Sign closeout via live a11oy organ | ready |
| W9 | exact-SHA deployment | Deploy merged SHA to production | external |
| W10 | live readback | Independent post-deploy verification | blocked |
Origins
Product | Proof. Do not merge.
Keep
- a-11-oy.com — command center, /verify, honesty manifest. Custom domain PENDING this recapture; Space host is szlholdings-a11oy.hf.space.
- a11oy.net — RECORD, diligence, this estate snapshot.
- huggingface.co/SZLHOLDINGS — public artifacts. Not a front door.
- /estate/os/ — Estate catalog hologram. Static. Index, not nav.
- /estate/plane/ — Estate OS control-plane hologram. PROPOSE_ONLY. Index, not nav.
Do not
- Do not publish a Grok Build SPA as a fourth public origin.
- Do not clone /verify onto this origin.
- Do not treat a11oy.com (home-and-garden storefront) as canonical.
- Do not bill a CPU fit as a GPU train. Do not flip approved=true on willay/khipu-r3/waman.
- Do not host a DSSE signer or receipt bodies here.