Governed AI,
proven in Lean.
SZL Holdings builds governed agentic systems whose decisions are recorded as cryptographically signed, tamper-evident receipts — verifiable offline, by anyone, with nothing but a public key. That receipt layer is proven and running today; the governance gate and proof core around it are real engineering, openly staged. Defense-grade rigor. Air-gapped capable. Sovereign by design.
Proof over hype.
SZL Holdings operates at the intersection of high-assurance defense and frontier AI. We reject the black-box paradigm — and we reject the pitch-deck paradigm too. On this page, what is proven and running today is marked Live. What is real code, staged for release, is marked Staged. What we are racing toward is marked Frontier. We would rather show you exactly where each piece stands than sell you a slide.
Honesty, by construction.
PURIQ is the operating doctrine of the house: we tell you exactly what is proven, what is experimental, and what is roadmap — and the line is enforced by the kernel, not by a marketing department. The trust score never reads 100%. The locked theorem count is checked in CI; experimental work is labelled experimental; a conjecture is named a conjecture. Provenance isn't a slogan here — it's how the system refuses to lie about itself.
What runs and verifies, right now.
Three things are real, running, and independently checkable today. Everything else on this page is built on top of them — or honestly labeled as roadmap.
The Governance Receipt
When a governed system makes a consequential decision, it writes a cryptographically signed, hash-chained receipt. Anyone can verify it offline with only a public key. Change a single byte and verification fails — tampering is impossible to hide. This is the asset everything else rests on.
Execution Fabric
The governed agentic substrate — policy, measurement, and a knowledge graph — wired to the receipt layer. A live, public demonstration runs today with real backend APIs and live data feeds: a system you can open and operate, not a screenshot.
Drone Intelligence — Counter-UAS
A counter-drone command surface: an autonomous craft crosses a restricted-airspace line, the system denies it, and a signed receipt of that decision is written and chained. The console is live; the receipt of every verdict is provable and tamper-evident.
What is proven today is the governance receipt layer: every verdict is an Ed25519/DSSE-signed, hash-chained receipt you can verify offline, and tampering is rejected on cue. The live multi-gate decision engine behind the drone scenario is documented and staged — not booted in the demo. We draw that line ourselves, because the honesty is the differentiator.
Two shipping products. One proven primitive underneath — and a frontier roadmap.
The same tamper-evident, offline-verifiable record of why a machine did what it did runs beneath everything SZL builds. Two products are live today; the rest are the frontier roles we are building toward — named as ambition, not achievement.
Execution Fabric
The governed agentic substrate and command platform — reasoning, policy, operator control and a signed knowledge graph in one auditable mind. The front door you are reading runs on it.
Drone Intelligence
Counter-UAS command and control. Every airspace verdict is denied or allowed under policy and written to a tamper-evident receipt chain — provable months later, with no trust in the operator required.
Provenance Anchor
Anchoring governance receipts to a public ledger, with post-quantum-hardened provenance, so a record's existence is independently witnessed beyond any single operator. Staged; not yet exercised live.
Drift Detector
Continuous detection of behavioral drift — a system quietly diverging from its governed posture — on a dedicated observability axis. The research ambition is resilience that watches itself. Staged.
Receipt Orchestration
A control plane that manages, verifies, and routes proofs across an entire agentic fleet. The receipts it would orchestrate are real today; the orchestration layer itself is conceptual. Staged.
The Provenance Anchor, Policy and Operator roles are roadmap. The quantum and ledger language describes where the research is pointed, not capability you can run today. An investor doing technical due diligence will find exactly that — stated here first. The proven core is above; this is the upside, honestly drawn.
Where it began — and who runs it now.
SZL did not start with a thesis about AI. It started at sea. Vessels was a smarter navigation and monitoring system for a shipping line: multilingual alerts so a captain could hear the warnings others miss, port-availability intelligence answering the only question that matters at sea — do you actually have somewhere to land? — an AI that pre-filled arrival and customs paperwork before a ship reached port, and an R&D track listening, acoustically, for the faint sound of trouble under the hull.
The same instinct runs through everything since: catch the danger early, and give the operator a call they can trust. Today that instinct is governance — proving the call was sound and the record is real.
Vessels is heritage: built and shipped under real-world pressure, not running today and not reproducible from the current code. We present it as lineage — the conceptual parent of the governance work — never as a live demo.
And SZL is not a slide deck. It is an operating workshop. The company runs its own tribe — a working set of governed agents that build, deploy, and watch over SZL's own infrastructure every day. The doctrine isn't theory we sell; it's the rail we run on. The governance, the receipts, the honest labels — they are how we operate before they are ever a product.
That is the heritage we offer a partner: a founder who has shipped real systems under pressure, and a house that dogfoods its own discipline. The maritime origin proves the instinct. The tribe proves it's still alive.
Verifiable by default.
Our commitment to transparency is a public trail of Lean proofs, DOIs, and cryptographically verifiable receipts. Independent verification isn't an option we offer — it's the default the system is built around. Below is the shape of a receipt: actor, operation, and a chained hash that breaks if anyone edits the record.
Ouroboros / governed-systems concept record
The stable concept DOI for the associated research program. This identifies the program; it is not silently reused as a software-version DOI.
Formal verification + governance receipts
The existing archival record for formal and receipt artifacts. It remains separately typed from the next A11oy software release.
From Build Success to Admissible Proof
A 24-page preprint on evidence-typed governance across a mixed Lean and executable formula corpus. Public archival record; not peer reviewed.
Readiness Is Not Evidence
A 24-page preprint on fail-closed epistemic boundaries for governed AI services. Public archival record; not peer reviewed.
Immutable publication packages
A11oy release channel
The next version DOI remains pending until immutable release bytes are published and Zenodo returns a resolvable record. No placeholder is presented as a DOI.
a-11-oy.com
a-11-oy.com is the canonical product surface. a11oy.net is retained as a legacy alias and permanently redirects here.
| Timestamp | Actor | Operation | Receipt hash | Status |
|---|---|---|---|---|
| 2025-05-12T08:14:22Z | a11oy-core-04 | POLICY_EVAL | 0x3f9a8b2c | VERIFIED |
| 2025-05-12T08:14:21Z | killinchu-uas-01 | GEOFENCE_DENY | 0x7d2e1f4a | VERIFIED |
| 2025-05-12T08:14:19Z | receipts-server | CHAIN_APPEND | 0x9c4b3a1d | VERIFIED |
| 2025-05-12T08:14:15Z | receipts-server | GENESIS | 0x1a2b3c4d | VERIFIED |
Illustrative receipt format — sample values shown for layout. Live receipts are Ed25519/DSSE-signed and verified offline with the public key; tampering is rejected.
Build on proven ground.
For partnership, pilot deployment, or technical due diligence, reach the SZL Holdings team directly. We respond to every serious request — and we'll show you exactly where every line falls.