RECORD
HANDLES ONLY
MINTING DENY
a11oy.net · estate · estate plane · thread-ops
Second brain, folded. Not ninety-five products.
Public home for this thread is the proof origin. Product stays on a-11-oy.com. Product retrieve is /command/brain. Product /brain is Hickok Dual-Stream receipts. Do not overwrite it. Hub second-brain stays ARCHIVE / family. No new Space.
Static RECORD. Not the live pulse. certified_production_ready false. Λ = Conjecture 1. Packet 4 freeze still binds.
Estate snapshot · Catalog hologram · Control plane · thread-ops.json · THREAD-OPS.md · GROWN source · Retrieve now
Guardian for the SOW
Holistic Guardian watches models. ServicePath watches quote-to-GL. Kantata, Certinia, and ConnectWise keep the record. Nobody issues inspectable receipts on SOW, staff, exception, and invoice. That membrane sits between CRM and PSA. Overlay. Do not replace.
Open membrane · REPORTED handles
Unowned gap, not a product. Generate-SOW tools mint documents. PSA MCP servers write tickets. Receipt standards sign AI invocations. Personal second brains store chat. None of those four bind SOW → STAFF → EXCEPTION → INVOICE as retrieve-or-abstain handles. Miss = ABSTAIN. Do not invent an id.
| Station | Handle job | What exists | What this origin is not |
|---|---|---|---|
| SOW | Signed scope schema | Common Paper PSA/SOW CC BY 4.0 | Not a signed SOW store |
| STAFF | Assigned roster | Incumbent PSA record | Not a staff directory |
| EXCEPTION | Scope drift | Kantata Expertise Agent writes plans from SOWs inside the PSA | Not an exception engine |
| INVOICE | Billed vs promised | PSA finance modules + MCP write tools | Not a billing host |
Cite only. Overlay corpus. Do not run extractors here. Do not wrap a PSA MCP. Do not stand up a 9000-node graph.
Why this origin
| Surface | Job | This thread |
|---|---|---|
| a11oy.net/estate/thread-ops/ | Proof RECORD fold | YES — public home |
| a-11-oy.com/command/brain | Product retrieve-or-abstain | YES — live pulse UI. Handles only. |
| a-11-oy.com/brain | Hickok Dual-Stream receipts | NO — do not overwrite |
| SZLHOLDINGS/szl-second-brain-inrepo | Public BM25 corpus · 575 DATA chunks | YES — point, do not mint |
| huggingface.co/SZLHOLDINGS | Artifact registry | NO — second-brain Space stays ARCHIVE / family |
| holdings.a-11-oy.com/brain/ | Pages hologram | NO — HTTP 200 this probe; not the public home; do not advertise |
Leaders · REPORTED · not partners
- Kantata Expertise Agent (2026-06-16) — generates project plans from SOWs inside the PSA. Closed incumbent.
- Kantata MCP Server — first-party write path into the PSA. Overlay only. Do not wrap.
- Certinia — Salesforce-native PSA. System of record. CData MCP is read-adjacent, not the membrane.
- ConnectWise / HaloPSA / Autotask — MSP record systems with public MCP write servers.
- Credo Agent Governor — watches harnesses, not SOW membranes.
- Holistic AI — Guardian Agents watch models, not SOWs.
- ServicePath — CRM-to-GL missing mile. Adjacent, not SOW receipts.
Open source · REPORTED · cite only
- Receipt / refusal prior art: ASARS Apache-2.0 (agent behavior, not SOW); AskLedger receipts-sdk Apache-2.0 (AI invocations); Openterms MCP (receipt before external action); IETF draft-noa-scitt-ai-agent-receipt-01.
- SOW schema: Common Paper PSA/SOW CC BY 4.0. Filler skill exists. Schema is not a membrane.
- Extract prior art, do not run here: CUAD CC BY 4.0; Contractex Apache-2.0; NuExtract3 Apache-2.0; SEC Exhibit 10 instructions; ContractNER.
- OSS PSA replacements, DENY-REPLACE: Worklenz AGPL; ITFlow GPL; Alga PSA.
- Ours, point do not mint: szl-lake; governed-receipts-bench.
szl-receiptagent-qwen35-0.8b-v3stays C1 quarantine.
Back doors · unclassified surfaces, not exploits
- PSA MCP write paths: WYRE-AI ConnectWise/Autotask/Halo; mspstack/mcp-connectwise-psa; connectwise-mcp on PyPI (finance gated); Servosity/msp-skills 67 connectors. Disposition DENY-REPLACE. Do not mint a competing wrapper.
- Pin drift vs target six: .github, a11oy, platform, docs-site, a11oy-net, killinchu.
- Hub Spaces sprawl vs public KEEP 6. SZLHOLDINGS/second-brain classified family.
- Operator Spaces exist even though .github#496 closed without merge.
- trusted-contract still red. Green light does not override a red check.
Production path · REPORTED · not certified
The 2026-09-20 leader scrape does not flip certified_production_ready. It names the enforcement stack everyone else is shipping, and where this fold stays an overlay.
- Typed admit/abstain: TypeSafe Jev is a hosted decision model (not open-source weights). LiteLLM proxy and jev-judgment are tooling. Overlay candidate for retrieve miss = ABSTAIN. No key on this origin. Do not run here.
- Pre-action refusal: ACE Apache-2.0 (mandate / proposal / receipt / refusal); refusal-receipt-chain MIT (ALLOW/DENY/HOLD). Prior art for ABSTAIN. Agent-action object, not SOW→invoice.
- Deploy admission: SLSA + in-toto + Kyverno/OPA. Provenance without a gate is metadata. SZL SLSA L1 stays honest. Isolated L2 builders remain ROADMAP.
- Tool gate: Red Hat MCP gateway; Solo.io agentdesktop Apache-2.0. Govern the harness. Do not wrap ConnectWise/Autotask/Halo MCP.
- Billing leak named in the field: PAI ConnectWise agreement billing integrity (scope / time / exception / invoice). Workflow, not inspectable receipts.
- OSS PSA cores stay DENY-REPLACE: Worklenz AGPL, ITFlow GPL, AlgaPSA AGPL-CE.
China OSS · REPORTED · cite only
PRC legal and invoice open source independently built the four stations as isolated skills. None bind SOW → STAFF → EXCEPTION → INVOICE as retrieve-or-abstain handles. Overlay corpus. Do not run extractors here. Do not fork into a new Hub brand.
| Station | Cite | What it does | What this origin is not |
|---|---|---|---|
| SOW | openlawkit Apache-2.0 · PEAT-LLM4LCR MIT · contract-sense MIT · legal-skills | Word-native comments without mutating contract body; Chinese Civil Code review; DeepSeek risk + element extract; agent contract skills | Not a signed SOW store |
| STAFF | lumos 契光鉴微 · LawClaw | Labor-law worker-side ten-pitfall scan; lawyer desktop skills with local memory | Not a staff directory |
| EXCEPTION | openlawkit legal-deadline-extractor · tender-extract | No deadline without a verified trigger fact; rules/NER first, LLM only on low-confidence. Closest public ABSTAIN analog. | Not an exception engine |
| INVOICE | Invoice-Manager MIT · TextIn / xparse-sample-projects | PRC VAT dual-source OCR+LLM verify; overseas invoice schema extract | Not a billing host |
- Map index: awesome-legal-ai-zh — 200+ verified PRC legal AI repos. Catalog, not partners.
- Graph engines stay HOLD: Hyper-Extract, HKUDS LightRAG, LegalGraphRAG, Legal-RAG. Cite. Do not stand up a 9000-node graph on this origin.
- Frontier read: the four stations exist in China OSS as isolated skills. The unowned gap is still the membrane that binds them. Same gap as the Western PSA/MCP scrape.
Recapture
- GitHub authenticated search 95 · public 90 · packet 76
- Hub MEASURED this scrape: models 47 · datasets 35 · Spaces 22 public listing. KEEP remains 6. Counts are listing metadata, not quality.
- 9000-node graph UNAVAILABLE. Private 9464 unpublished.
- Product retrieve UI MEASURED 2026-09-20T11:25Z · honest.git_sha db9333c4 MATCH GitHub a11oy tip (a11oy#2209). Prior hf-sync 35473126287 FAILED attest. Runtime moved; fold recaptured. Capabilities overall PARTIALLY OPERATIONAL. OPERATIONAL count 0. certified_production_ready false.
- Web + Hub scrape 2026-09-20 folded as REPORTED handles only. China OSS scrape 2026-09-20T11:40Z folded as cite-only. No new Space. No new brand.
GitHub Pages serving this HTML proves reachability of /estate/thread-ops/ only. It cannot start energy, mint a signer, overwrite Hickok /brain, or flip a Space to Docker READY.