Platform health
CHECKINGChecking the deployed runtime.
Source /healthz →
Governed agent change management · verifiable by anyone, offline
Every AI action your agents take, policy-gated and signed into a receipt you can verify offline.
a11oy proves its receipt state — every governed state change produces a hash-chained receipt you can inspect offline, in your own browser. The interface says SIGNED only when persistent signer evidence is active and verification passes; otherwise it reports HASH-LINKED, UNSIGNED, DISABLED, or UNAVAILABLE. When the model is not sure, it returns an honest BLOCKED instead of a confident guess.
—
Receipts in the chain
ledger depth — a mechanism check, not customer traction
ledger depth — a mechanism check, not customer traction
Conjecture 1
Λ trust gate · advisory bound
8
Locked Lean-proven theorems
a proof of rigor, not a traction number
a proof of rigor, not a traction number
—
Overclaims caught by CI SAMPLE · SNAPSHOT 2026-07-25 · SOURCE UNAVAILABLE
Observed correction time (source unavailable): — · open ledger
Observed correction time (source unavailable): — · open ledger
The honesty doctrine · v11 LOCKED
Every figure on this page is labelled — or it isn't shown.
We grade what we say. If a claim isn't MEASURED live this session, we tell you exactly what it is instead of dressing it up as proof.
MEASURED
Read live from a running endpoint this session — receipt count, advisory Λ posture, and chain depth. Shown with a live chip; a dead probe degrades to an honest offline chip. Signer state is disclosed separately only where an actual signer-status read is present. Never used for GPU joules without a live exporter delta.
REPORTED
Stated by a source we name — the locked-8 Lean kernel {F1,F4,F7,F11,F12,F18,F19,F22}, the 144-entry genome registry — cited here, not independently re-derived on this page.
ROADMAP
Future work or an empty Hub card. Not trained, not a product SKU, and not admitted as data. The ROADMAP collection exists so those cards are not sold as models.
SOFTWARE
Shipped code — kernels, consoles, gates. Not LoRA-trained weights. Hub mirrors GitHub; a SOFTWARE card is not a model SKU.
UNAVAILABLE
We don't have it right now. Rendered as N/A · UNAVAILABLE · BLOCKED — never a confident guess and never a fabricated number.
SIMULATED
A rehearsal path. killinchu effectors stay SIMULATED unless a real execution path is proved. Never painted LIVE or MEASURED.
Λ = Conjecture 1
an advisory trust bound — never proven, never 1.0, and never rendered green. Theorem U is the proven conditional alternative; the unconditional claim is machine-checked false as stated.
No free energy. Joules are MEASURED only from a live exporter delta; with no live meter we label the reading SAMPLE or UNAVAILABLE and fabricate nothing. a11oy never claims over-unity, perpetual output, or free-energy efficiency — only what a real meter reports.
Runtime evidence
What is actually reachable right now.
Four read-only checks connect the product story to the running system. REACHABLE means the source answered this browser session; evidence mode (LIVE, SNAPSHOT, MODELED, or UNAVAILABLE) remains separate and never certifies model truth.
Tab contract
CHECKINGChecking the published tab inventory.
Source tab matrix →Receipt ledger
CHECKINGChecking the append-only evidence read.
Source receipt ledger →Sovereign mesh
CHECKINGChecking the current mesh posture.
Source mesh state →Checks have not completed.
Products · three flagships
Three products. One evidence contract.
The public product line is three flagships — not nine surfaces, not five verticals, and not forty Hub SKUs. Insurance, finance, and real-estate cards are not products. Λ uniqueness is Conjecture 1 — advisory, never a theorem, never green.
⌘
a11oy Command
Governed-AI command center: deny-by-default gates, receipt integrity, separately disclosed signer state, and an honest BLOCKED when the model is not sure.
SOFTWARE
Λ = Conjecture 1
—advisory Λ
⚔
killinchu
Counter-UAS and maritime vertical on the same receipt substrate. Public controls remain advisory. Effectors stay SIMULATED unless a real execution path is proved.
SOFTWARE
SIMULATED effectors
RUNTIME UNAVAILABLE
This document carries no live reading of the killinchu Space runtime, so the runtime is labelled UNAVAILABLE. The in-page probe below only reports REACHABLE on an actual HTTP 200 this visit; if the request is refused or has timed out, the label stays UNAVAILABLE. The Hugging Face Space hub page is the honest entry point while the runtime is down — it is not a live product surface.
—advisory Λ
⚙
Forge / own-metal
Owner-forged weights and kernels trained on metal you own. This is a training and evidence path — not a live GPU joule meter, and not forty fake model SKUs.
SOFTWARE
ROADMAP cards ≠ trained
Bound packages · not flagships
Cited in. Not a fourth product.
These tabs bind onto a-11-oy.com as packages. They are not flagships and they do not certify the product. Hugging Face stays the artifact registry, not the front door.
⚖
LYTE lattice
BIND package. Named frontiers N1–N25 cited from GitHub. STRUCTURAL-ONLY hub. UNSIGNED-honest receipts. Joule UNAVAILABLE unless RAPL energy_uj is actually read. Occupancy UNAVAILABLE. Not a production certificate.
Open /lyte →
⬡
N1–N25 organs
Factory organs execute on this origin with per-organ SIMULATED, MODELED, MEASURED, or UNAVAILABLE evidence classes. Public Hub admission false. GPU tune UNAVAILABLE. Not 25 public Spaces. Proof RECORD is a11oy.net/factory/.
Open /organs →
The thesis
Governed AI you can prove — not AI you're asked to trust.
Most AI asks for trust. a11oy earns it the way auditable systems do: every governed state change is recorded in a hash-chained receipt, while signer state and signature verification are disclosed separately and never inferred; a trust gate can only tighten an answer, never wave it through; and the kernel rests on machine-checked theorems you can read. The honest part is the product — when a claim isn't proven, we label it, and you can open the check yourself.
01 · RECEIPTS
It proves receipt integrity and signer state
Every governed state change enters a SHA3-256 hash chain. DSSE / ECDSA-P256 is a separate cryptographic state and is labeled SIGNED only when persistent signer evidence is active and independent verification passes. Verify the disclosed state in your own browser.
02 · REFUSES
It refuses when unsure
A self-doubt gate measures uncertainty against a bound and returns a truthful BLOCKED rather than a confident wrong answer. A refusal beats a fabrication.
03 · PROVES
It is formally backed
8 locked, axiom-free Lean 4 theorems back the kernel. The Λ trust gate is Conjecture 1 — an advisory bound, never dressed up as a theorem.
The proof · four honest tiers
Every claim carries exactly one honesty tier.
The first figure is the locked Lean-8 kernel from
GET /api/a11oy/v1/honest locked_formula_count (8 or N/A) —
never the genome LOCKED-PROVEN catalog. The other three figures are catalog tiers
from the genome registry. A conjecture is shown in gray and is never rendered as proven.
—
LOCKED-PROVEN · KERNEL
Lean-8 kernel count from /honest locked_formula_count
(show 8 or N/A). Not genome catalog LOCKED-PROVEN. F18 is Reed-Solomon
parity (erasure tolerance), not "DSSE seal".
Genome catalog tag LOCKED-PROVEN (a different count, from
/api/a11oy/v1/genome tier_counts):
— of 144 catalog entries. Catalog tag,
not the kernel chip above.
—
SEMANTIC-VERIFIED
Sorry-free real theorems outside the frozen locked-8: the Λ min≤Λ≤max bounds, Theorem U (conditional uniqueness), DSSE verifiability. Where the real trust math lives.
—
EVIDENCE-BACKED
Runtime / algorithmic rules backed by real code and live endpoints, with no proof claim attached. Honest operational tier — not dressed up as proven.
—
CONJECTURE · ADVISORY
Λ unconditional uniqueness = Conjecture 1 (machine-checked false as stated). Gray, advisory, never green. Theorem U is the proven conditional alternative.
Proof lives at a11oy.net — RECORD, diligence, atlas. It is not a product host. Λ uniqueness is Conjecture 1, never a theorem.
Hub catalog · four collections
Collections are the catalog — not forty product SKUs.
Open a collection for its current inventory. A reachable URL is reachability only — not source/runtime alignment, not model quality, and not a claim that every Hub card is trained. ROADMAP cards are empty on purpose.
TRAINED WEIGHTS
Flagship models
Trained weights only. Kernels and empty ROADMAP cards live elsewhere. Λ uniqueness remains Conjecture 1.
Open collection →
SOFTWARE
Kernels
Software kernels. Not LoRA-trained models. Source on GitHub; Hub is the mirror.
Open collection →
ROADMAP
Roadmap
Honest empty cards. Not trained. Do not treat as product SKUs or admitted data.
Open collection →
SOFTWARE
Flagship Spaces
Running product surfaces. Extra holograms are paused, not deleted. Proof stays at a11oy.net.
Open collection →
One chain · live ledger
One ledger. Every decision. Replayable to the byte.
Every vertical emits into a single SHA3-256 hash-chain — append-only, fsync-durable, replayable to a byte-identical root instead of trusting a dashboard.
—
Receipt records · signer state separate
sha3_256
Chain algorithm
—
Chain depth (a11oy)
—
Last receipt id
Verify it yourself
The trust center.
The versioned honesty posture, the locked-8 with truthful Lean refs, Theorem U vs Conjecture 1 explained honestly, SLSA posture, and the offline receipt-verify flow. Every claim links to its check.