Second Brain
RESEARCH SURFACERetrieves evidence handles for a proposal and abstains when retrieval misses. Production certification is not implied.
Explore evidence handles ↗A11OY / GOVERNED INTELLIGENCE
Make AI decisions inspectable.
Evidence enters with a request. Policy can stop it. A decision keeps its reasons, and a written change can carry a receipt for independent review.
SAMPLE · committed offline fixture · ephemeral demonstration key
THE PLATFORM / A CHECKABLE PATH
From request to a reason you can inspect.
Each stage names the source of authority. A read does not create a receipt; a state change can be recorded only after its gates are met.
- 01 / INPUT
Input
Attach the request and available source evidence. Missing evidence remains visible.
- 02 / POLICY
Policy
Apply doctrine, scope, and human authority before an action proceeds.
- 03 / DECISION
Decision
Return the outcome and reasons, including an explicit BLOCKED state.
- 04 / RECEIPT
Receipt
Record a governed write in a hash chain. Integrity and signer state stay separate.
- 05 / CHECK
Independent check
Use a supplied bundle and the offline verifier to examine the disclosed record.
WORKFLOW DIAGRAM · conceptual, not a live transactionRead the trust contract ↗
SOFTWARE / INTERFACES / RESEARCH
One discipline across different surfaces.
These are distinct views and research paths. Their links expose the current surface; opening one does not establish model readiness or operational status.
Living Anatomy
ENGINEERING VIEWMaps the system as shared organs and gates. The anatomy is an interface metaphor, not a live health reading.
Explore the map ↗Holographic
VISUAL INTERFACEPlaces evidence and system relationships in a spatial view. Motion and depth do not prove agent activity.
Open spatial view ↗Killinchu
SIMULATED EFFECTSSupports observation and decision rehearsal with human authority. Effectors remain simulated on this surface.
Open the surface ↗RESEARCH / THE CLAIM BOUNDARY
The math is readable. The limits are too.
The locked Lean results prove narrow kernel properties. They do not by themselves prove receipt replay integrity or a deployment’s readiness. Unconditional Λ uniqueness remains Conjecture 1.
EVIDENCE / THIS SESSION
Read the observed state.
The instrument below starts UNAVAILABLE and changes only when its read-only sources answer. Reachability, receipt-chain integrity, and signer verification are separate claims.
Evidence before status.
Runtime values are context, not customer metrics. A failed probe stays visible. A supplied receipt belongs in the verifier, while the independent RECORD index stays at a11oy.net.
Open honest status JSON ↗—
SAMPLE hash-link records · not operational receipts
ledger depth — a mechanism check, not customer traction
ledger depth — a mechanism check, not customer traction
Conjecture 1
Λ trust gate · advisory bound
8
Locked Lean-proven theorems
a proof of rigor, not a traction number
a proof of rigor, not a traction number
—
Overclaims caught by CI SAMPLE · STALE SNAPSHOT 2026-07-25 · SOURCE UNAVAILABLE
Observed correction time (source unavailable): — · open ledger
Observed correction time (source unavailable): — · open ledger
The honesty doctrine · v11 LOCKED
Every figure on this page is labelled — or it isn't shown.
We grade what we say. HTTP 200 is REACHABLE. MEASURED requires a live exporter or receipt delta this session. Missing evidence is UNAVAILABLE.
REACHABLE
The source answered HTTP 200 this browser session. Reachability is not correctness, not LIVE, and not MEASURED. A dead probe degrades to UNAVAILABLE.
MEASURED
A live exporter or receipt delta this session. HTTP 200 is not MEASURED. Joules stay SAMPLE/UNAVAILABLE without a meter. Signer state is disclosed separately only where an actual signer-status read is present.
REPORTED
Stated by a source we name — the locked-8 Lean kernel {F1,F4,F7,F11,F12,F18,F19,F22}, the 144-entry genome registry — cited here, not independently re-derived on this page.
ROADMAP
Future work or an empty Hub card. Not trained, not a product SKU, and not admitted as data. The ROADMAP collection exists so those cards are not sold as models.
SOFTWARE
Shipped code — kernels, consoles, gates. Not LoRA-trained weights. Hub mirrors GitHub; a SOFTWARE card is not a model SKU.
UNAVAILABLE
We don't have it right now. Rendered as N/A · UNAVAILABLE · BLOCKED — never a confident guess and never a fabricated number.
SIMULATED
A rehearsal path. killinchu effectors stay SIMULATED unless a real execution path is proved. Never painted LIVE or MEASURED.
Λ = Conjecture 1
an advisory trust bound — never proven, never 1.0, and never rendered green. Theorem U is the proven conditional alternative; the unconditional claim is machine-checked false as stated.
No free energy. Joules are MEASURED only from a live exporter delta; with no live meter we label the reading SAMPLE or UNAVAILABLE and fabricate nothing. a11oy never claims over-unity, perpetual output, or free-energy efficiency — only what a real meter reports.
Runtime evidence
What is actually reachable right now.
Four read-only checks connect the product story to the running system. REACHABLE means the source answered this browser session; evidence mode (LIVE, SNAPSHOT, MODELED, or UNAVAILABLE) remains separate and never certifies model truth.
Platform health
CHECKINGChecking the deployed runtime.
Source /healthz →Tab contract
CHECKINGChecking the published tab inventory.
Source tab matrix →Receipt ledger
CHECKINGChecking the append-only evidence read.
Source receipt ledger →Sovereign mesh
CHECKINGChecking the current mesh posture.
Source mesh state →Checks have not completed.
THE FULL RECORD / SOURCE AND LIMITSExplore the deeper system.Anatomy, products, proof tiers, and source catalog
Living command fabric · exact authority map
One intelligence fabric. Five public domain bodies. Six internal engines. One evidence bloodstream.
The estate is not 112 unrelated products. A11oy is the governed action and proof fabric; Living Anatomy makes the shared organs visible; Second Brain returns evidence handles; Forge qualifies inference; Hatun and policy gates can veto; every promoted body inherits the same locked-eight formula kernel and must end in a verifiable receipt or an honest BLOCKED.
Evidence synthesis
Second Brain handles and qualified inference assemble a cited proposal without publishing private memory.
F1Trust pulse
Hatun and A11oy admission apply policy, refusal and human approval before a consequential transition.
F4 · F11Evidence transport
State and provenance move through the fabric without severing the source, decision or outcome chain.
F7 · F22Signals and response
Observations, tool proposals and verifier outcomes travel through one explicit response path.
F12Structural integrity
Parity, integrity and receipt checks keep each body inspectable under failure rather than cosmetically green.
F18 · F19Locked kernel: exactly 8 · Λ remains Conjecture 1
Every domain body inherits {F1,F4,F7,F11,F12,F18,F19,F22}. No vertical invents a new F-number meaning. Any required organ DOWN—or a WILLAY/policy veto—blocks the body. Λ is advisory and never authorizes an action by itself.
Domain bodies · source-bound, not disconnected apps
Five public domain bodies, backed by six internal engines.
Each public body now has a distinct command grammar, signature instrument, bounded model route and explicit kernel path. Open a card to enter the source-bound Python intelligence room; no card grants execution authority, and a reachable link is never promoted into a readiness claim.
Real-estate intelligence
Terra
A parcel-to-capital evidence twin joining ownership, lease obligations, condition, permitting, climate constraints, underwriting assumptions and approval lineage.
Unserved job: expose every valuation assumption and constraint before a deal reaches approval.
Model routeKhipu 1.5B · ReceiptAgent
Kernel routekernel-suite · invariants · receipt-attn
DISCOVERDILIGENCEUNDERWRITEAPPROVEREPLAY
PUBLIC DATA ONLYHUMAN BINDNO PERSON PROSPECTING
Cyber-physical resilience intelligence
Killinchu
One public resilience product unifying Aegis assurance, CHAPAQ defense, IMMUNE admission, Vessels maritime intelligence and Counter-UAS airspace review.
Unserved job: preserve conflicting observations, uncertainty, policy and decision lineage inside one bounded common operating picture.
Model routeA11OY-MINI · Khipu 1.5B · ReceiptAgent
Kernel routeblocked · invariants · lambda-gate · block-kv
DETECTFUSEREHEARSEAUTHORIZEVERIFYDEBRIEF
FIVE CAPABILITY PLANESSIMULATED EFFECTSHUMAN AUTHORITY
Legal matter intelligence
PRISM Counsel
An attorney-reviewable matter twin joining authority passages, treatment state, deadlines, obligations, adverse evidence, work product and approvals.
Unserved job: keep supporting and adverse authority visible together instead of hiding uncertainty inside generated prose.
Model routeReceiptAgent · Khipu 1.5B
Kernel routeblocked · receipt-attn · block-kv
INTAKERESEARCHMAPDRAFTVERIFY
AUTHORITY-BOUNDATTORNEY-LEDNO FILING AUTHORITY
Financial intelligence
PURIQ Finance
A source-linked thesis and scenario system connecting filings, market observations, assumptions, contradictory evidence, probability changes and decision quality.
Unserved job: measure thesis decay and decision quality separately from whether the market happened to move in your favor.
Model routeKhipu 1.5B · ReceiptAgent · A11OY-MINI
Kernel routeinvariants · lambda-gate · block-kv
INGESTRESEARCHSTRESSDECIDEAUDIT
NO TRADE EXECUTIONNO CUSTODYHUMAN REVIEW
Business and agent observability
LYTE
A business-causality braid linking services, traces, agents, tool calls, customer journeys, cost, risk, decisions and measurable outcomes.
Unserved job: prove whether technical recovery actually restored the customer journey and business result.
Model routeKhipu 1.5B · A11OY-MINI · ReceiptAgent
Kernel routekernel-suite · receipt-attn · block-kv
OBSERVETRACEDIAGNOSEREPLAYVERIFY
OTEL-NATIVE DIRECTIONOUTCOME RECEIPTSHUMAN BIND
Carlota Jo remains an incubation lane. The visual system recognizes the brand, but the current six-engine publisher does not expose a canonical source/runtime authority for it. It will not be promoted as operational until that authority, domain object and measurable workflow are explicit.
Products · three flagships
Three products. One evidence contract.
Three commercial flagships anchor the public line. Five public domain bodies, backed by six internal engines, inherit the same evidence contract and graduate only when canonical source, runtime revision, domain probes and claim labels agree. Aegis is an internal Killinchu capability plane; CHAPAQ, Immune and Vessels do not become competing public products. Hub cards remain artifacts rather than automatic products. Λ uniqueness is Conjecture 1 — advisory, never a theorem, never green.
⌘
a11oy Command
Governed-AI command center: deny-by-default gates, receipt integrity, separately disclosed signer state, and an honest BLOCKED when the model is not sure.
SOFTWARE
Λ = Conjecture 1
—advisory Λ
⚔
killinchu
Counter-UAS and maritime vertical on the same receipt substrate. Public controls remain advisory. Effectors stay SIMULATED unless a real execution path is proved.
SOFTWARE
SIMULATED effectors
RUNTIME UNAVAILABLE
This document carries no live reading of the killinchu Space runtime, so the runtime is labelled UNAVAILABLE. The in-page probe below only reports REACHABLE on an actual HTTP 200 this visit; if the request is refused or has timed out, the label stays UNAVAILABLE. The Hugging Face Space hub page is the honest entry point while the runtime is down — it is not a live product surface.
—advisory Λ
⚙
Forge / own-metal
Owner-forged weights and kernels trained on metal you own. This is a training and evidence path — not a live GPU joule meter, and not forty fake model SKUs.
SOFTWARE
ROADMAP cards ≠ trained
Shared organs · bound into the fabric
Capabilities flow through the same governed body.
These organs and packages bind into a-11-oy.com without creating competing authorities. They do not independently certify the product. Hugging Face remains the artifact registry; source/runtime proof and A11oy admission determine readiness.
⚖
LYTE lattice
BIND package, not a flagship. Named frontiers N1–N25 cited from GitHub. STRUCTURAL-ONLY hub. UNSIGNED-honest receipts. Joule UNAVAILABLE unless RAPL energy_uj is actually read. Occupancy UNAVAILABLE. Not a production certificate.
Open /lyte →
⬡
N1–N25 organs
Factory organs execute on this origin with per-organ SIMULATED, MODELED, MEASURED, or UNAVAILABLE evidence classes. Public Hub admission false. GPU tune UNAVAILABLE. Not 25 public Spaces. Proof RECORD is a11oy.net/factory/.
Open /organs →
⬡
IMMUNE kernel
Fail-closed admission organ (Hukulla). CHAPAQ / YAWAR / HUKLLA / NEMO on this origin at /immune. Channel A/B Spaces are kept; a missing Hub runtime is UNAVAILABLE, never fabricated LIVE or PASS. First paint CONNECTING.
Open /immune →
▦
Five-space operator
BIND package. Command / Loop / Queue / Memory / Ledger on this origin at /five-space. Does not replace /console. First paint CONNECTING. Energy UNAVAILABLE. sovereign=false. Proof RECORD is a11oy.net/five-space/.
Open /five-space →
Experimental software labs
Inspect the software and its limits.
Software-lab manifest · Current version and source binding · Hub source · Proof RECORD. Software labs have their own admission contract and do not enter the locked formula count.
The thesis
Governed AI you can prove — not AI you're asked to trust.
Most AI asks for trust. a11oy earns it the way auditable systems do: every governed state change is recorded in a hash-chained receipt, while signer state and signature verification are disclosed separately and never inferred; a trust gate can only tighten an answer, never wave it through; and the kernel rests on machine-checked theorems you can read. The honest part is the product — when a claim isn't proven, we label it, and you can open the check yourself.
01 · RECEIPTS
It proves receipt integrity and signer state
Every governed state change enters a SHA3-256 hash chain. DSSE / ECDSA-P256 is a separate cryptographic state and is labeled SIGNED only when persistent signer evidence is active and independent verification passes. Verify the disclosed state in your own browser.
02 · REFUSES
It refuses when unsure
A self-doubt gate measures uncertainty against a bound and returns a truthful BLOCKED rather than a confident wrong answer. A refusal beats a fabrication.
03 · PROVES
It is formally backed
8 locked, axiom-free Lean 4 theorems back the kernel. The Λ trust gate is Conjecture 1 — an advisory bound, never dressed up as a theorem.
The proof · four honest tiers
Every claim carries exactly one honesty tier.
The first figure is the locked Lean-8 kernel from
GET /api/a11oy/v1/honest locked_formula_count (8 or N/A) —
never the genome LOCKED-PROVEN catalog. The other three figures are catalog tiers
from the genome registry. A conjecture is shown in gray and is never rendered as proven.
—
LOCKED-PROVEN · KERNEL
Lean-8 kernel count from /honest locked_formula_count
(show 8 or N/A). Not genome catalog LOCKED-PROVEN. F18 is Reed-Solomon
parity (erasure tolerance), not "DSSE seal".
Genome catalog tag LOCKED-PROVEN (a different count, from
/api/a11oy/v1/genome tier_counts):
— of 144 catalog entries. Catalog tag,
not the kernel chip above.
—
SEMANTIC-VERIFIED
Sorry-free real theorems outside the frozen locked-8: the Λ min≤Λ≤max bounds, Theorem U (conditional uniqueness), DSSE verifiability. Where the real trust math lives.
—
EVIDENCE-BACKED
Runtime / algorithmic rules backed by real code and live endpoints, with no proof claim attached. Honest operational tier — not dressed up as proven.
—
CONJECTURE · ADVISORY
Λ unconditional uniqueness = Conjecture 1 (machine-checked false as stated). Gray, advisory, never green. Theorem U is the proven conditional alternative.
Proof lives at a11oy.net — RECORD, diligence, atlas. It is not a product host. Λ uniqueness is Conjecture 1, never a theorem.
Hub catalog · four collections
Collections are the catalog — not forty product SKUs.
Open a collection for its current inventory. A reachable URL is reachability only — not source/runtime alignment, not model quality, and not a claim that every Hub card is trained. ROADMAP cards are empty on purpose.
TRAINED WEIGHTS
Flagship models
Trained weights only. Kernels and empty ROADMAP cards live elsewhere. Λ uniqueness remains Conjecture 1.
Open collection →
SOFTWARE
Kernels
Software kernels. Not LoRA-trained models. Source on GitHub; Hub is the mirror.
Open collection →
ROADMAP
Roadmap
Honest empty cards. Not trained. Do not treat as product SKUs or admitted data.
Open collection →
SOFTWARE
Flagship Spaces
Running product surfaces. Extra holograms are paused, not deleted. Proof stays at a11oy.net.
Open collection →
One chain · live ledger
One ledger. Every receipt record. Replayable to the byte.
Every vertical emits into a single SHA3-256 hash-chain — append-only, fsync-durable, replayable to a byte-identical root instead of trusting a dashboard. Record count is not a decision count: it includes legacy MODELED probe records, broken out beneath the count when the runtime reports them.
—
Source-labelled chain records · state pending
sha3_256
Chain algorithm
—
Chain depth (a11oy)
—
Last receipt id
Verify it yourself
The trust center.
The versioned honesty posture, the locked-8 with truthful Lean refs, Theorem U vs Conjecture 1 explained honestly, SLSA posture, and the offline receipt-verify flow. Every claim links to its check.
TASK-FIRST ENTRY POINTS
Choose the view that matches your job.
The product, implementation evidence, and operating status stay separate so users, developers, and investors can verify the layer they need without navigating the entire estate.
Users and operatorsRun the governed experienceExplore evidence-labelled operational surfaces and defensive workbenches.
DevelopersInspect source and contractsReview APIs, tests, deployment authority, and reproducible evidence.
Investors and diligenceVerify operating statusSeparate observed deployment evidence from modeled claims and roadmap work.
SZL HOLDINGS / COMPANY
Software, math, and research under one evidence standard.
SZL publishes product source, research, and a separate proof index so a visitor can inspect each claim at its own level. A product route, source repository, and independently maintained RECORD answer different questions.
Explore SZL source ↗