SZL HOLDINGS/a11oy IMMUNE · CONNECTING Immune Nemo Energy Fleet C2 Living Anatomy Code

IMMUNE — fail-closed kerneldeny-by-default · connecting

The IMMUNE kernel (organ role Hukulla) is a fail-closed, deny-by-default admission and egress gate: SENTRA inspection, YAWAR SHA-256 receipts, HUKLLA tripwires, MESH 3-of-4, NEMO R1–R5. This tab is first-class on a-11-oy.com. The public kernel lives at SZLHOLDINGS/immune; the COP overlay sibling is SZLHOLDINGS/immune-lattice. Neither Space is deleted. Channel B Field cells (RANGE.CLOUD.EXILE, RANGE.FALLBACK.MESH, CERT.CELL.QUORUM, FIELD.LATTICE.DELTA) compile public Ukraine COP doctrine as hunt / isolate / deceive — never strike people. RANGE twins only; actuation is SIMULATED. This flagship tab cites the lattice; it is not a second COP. This page never fabricates LIVE or PASS — first paint is CONNECTING; a failed probe is UNAVAILABLE; a successful /readyz read is REACHABLE (and WRITE-READY only when the kernel says so). Submitted actions below hit the live Hukulla inspection path (MIN of supplied trust axes < 0.5 → deny). No receipt or signature state is inferred by this page. Proven Lean backing: ImmuneNeymanPearsonOpt.lean (Neyman–Pearson-optimal egress) and FrontierWelfordVariance.lean (Welford online variance). These back the gate but are not folded into the locked-8 proven set. Λ = Conjecture 1 (not a theorem); Khipu = Conjecture 2; trust is never 100%; effectors simulated; no fabricated data.

Live kernel GET /api/a11oy/v1/immune/kernel → SZLHOLDINGS/immune /readyz

Same-origin probe so this page stays 0-CDN. Channel A is the public kernel. Channel B is the lattice COP overlay — its /readyz is intercepted by the Hub proxy; that 502 HTML is not kernel death. Click-to-embed is operator-initiated, never first-paint.

Reachability
CONNECTING
first paint — not UNAVAILABLE
Write-ready
forwarded only when observed
Authority
never inferred PASS
Receipts / kid
ledger + key id
statusCONNECTING

Field lattice GET /api/a11oy/v1/immune/field → Channel B /api/field

Same-origin probe of SZLHOLDINGS/immune-lattice. Cells are compiled as hunt / isolate / deceive — never strike people. First paint is CONNECTING. A failed probe is UNAVAILABLE (cells are not invented). A JSON catalog is REACHABLE, not LIVE. This page is a citation, not a second COP.

Reachability
CONNECTING
first paint — not UNAVAILABLE
Λ / doctrine
Conjecture 1 — not a theorem
Actuation
SIMULATED only
Rule
never strike people
statusCONNECTING
Verdicts (this process)
resets on restart
Deny rate
deny / total
Signature corpus
active signatures
Khipu chain depth
verified

Inspect an action POST /api/a11oy/v1/immune/verdict

Submit an action payload to the live inspection endpoint. Returned receipt and signing evidence is shown without inference. Optionally include axes (a JSON array of trust scores) to exercise the Λ-gate floor.

rm -rf / DROP TABLE <script> XSS path traversal echo hello (clean) low Λ axis

Live status GET /api/a11oy/v1/immune/status

statusCONNECTING
Λ = Conjecture 1 (NOT a theorem). Khipu = Conjecture 2. Trust never 100%. Effectors simulated. Decision feed is in-memory (resets on restart) — empty means IDLE, never faked.

Gates GET /api/a11oy/v1/immune/gates

idnamelabelcategorysample → expected
loading…

Decision feed GET /api/a11oy/v1/immune/feed

timedecisionsignalsΛreceipt
loading…
Proven Lean backing: Lutar/Wave11/ImmuneNeymanPearsonOpt.lean · Lutar/Innovations/round11/FrontierWelfordVariance.lean. Locked-proven set = EXACTLY 8 {F1,F4,F7,F11,F12,F18,F19,F22} @ kernel c7c0ba17 — the immune Lean backing is cited, NOT folded in. SLSA L1/L2/L3-roadmap · 0 runtime CDN. This page reads only the live /api/a11oy/v1/immune/* endpoints (Hukulla organ + same-origin kernel and Field probes). Channel A = SZLHOLDINGS/immune. Channel B = SZLHOLDINGS/immune-lattice Field (exile/mesh/quorum/delta). Neither Space is deleted. Hunt / isolate / deceive — never strike people.
🌐Spaces