--- title: "killinchu ā€” Andean Drone Intelligence" emoji: "šŸ¦…" thumbnail: "https://huggingface.co/spaces/SZLHOLDINGS/killinchu/resolve/main/static/og-card.png" colorFrom: gray colorTo: indigo sdk: docker app_port: 7860 pinned: true license: apache-2.0 short_description: Governed autonomous-systems command surface tags: - doctrine-v11 - defense - drone-intelligence - counter-uas - szl-holdings - agentic-ai - dsse - slsa-l1 - apache-2.0 ecosystem-stage: "operational" fullWidth: true header: mini models: [SZLHOLDINGS/KILLINCHU-EYE] datasets: [SZLHOLDINGS/killinchu-osint-corpus, SZLHOLDINGS/szl-lake] ---

SZL Holdings ā€” governed, receipted, verifiable

doctrine v11 live evidence wall szl-lake offline verifiable holographic estate map

Part of the SZL Holdings governed estate ā€” claims are designed to carry checkable receipts. Verification proves integrity & origin, never accuracy or performance.

# killinchu šŸ¦… [![org: szl-holdings](https://img.shields.io/badge/org-szl--holdings-black)](https://github.com/szl-holdings) [![doctrine](https://img.shields.io/badge/doctrine-control%20before%20action%20%C2%B7%20evidence%20after-blue)](https://a-11-oy.com) **Control before action. Evidence after.** Part of the [szl-holdings](https://github.com/szl-holdings) estate Ā· Product: [a-11-oy.com](https://a-11-oy.com) Ā· Proof: [a11oy.net](https://a11oy.net) > **Governed autonomy with a checkable receipt for every decision.** > Detect. Classify. Recommend under human authority. Detection, classification, and the governed-decision layer are LIVE. Physical effector engagement is operator-owned ā€” gated on customer authorization and hardware integration, never exercised by this Space. A DSSE Khipu receipt binds every decision. > **53 drone fingerprints Ā· 13-axis Ī›-gate Ā· DSSE-signed verdicts Ā· human-on-the-loop** [![SLSA L1 honest Ā· L2 build-attested Ā· L3 roadmap](https://img.shields.io/badge/SLSA-L1%20honest%20%C2%B7%20L2%20build--attested%20%C2%B7%20L3%20roadmap-c9b787?style=flat-square)](https://github.com/szl-holdings/killinchu) [![doctrine-v11](https://img.shields.io/badge/doctrine-v11%20LOCKED-0B1F3A?style=flat-square)](https://github.com/szl-holdings/.github/tree/main/doctrine) [![CI](https://github.com/szl-holdings/killinchu/actions/workflows/ci.yml/badge.svg)](https://github.com/szl-holdings/killinchu/actions) [![License](https://img.shields.io/badge/license-Apache--2.0-5fb3a3?style=flat-square)](https://www.apache.org/licenses/LICENSE-2.0) [![Ī› Conjecture 1](https://img.shields.io/badge/%CE%9B-Conjecture%201%20(conditional%20Theorem%20U)-B79BD6?style=flat-square)](https://github.com/szl-holdings/lutar-lean/blob/main/BOUNTY.md) [![Khipu Conjecture 2](https://img.shields.io/badge/Khipu%20BFT-Conjecture%202%20(Wave23%20conditional)-B79BD6?style=flat-square)](https://github.com/szl-holdings/khipu-consensus) **LOCKED kernel `c7c0ba17` Ā· 749 declarations Ā· 14 axioms Ā· 163 sorries Ā· Doctrine v11** **Proof posture (two-tier):** 8 locked-proven `{F1, F4, F7, F11, F12, F18, F19, F22}` + an **EXPERIMENTAL Ā· CI-green** tier (Lean v4.18.0 Ā· ~1323 decls / 22 unique axioms ā€” NOT folded into the locked count). Ī›-uniqueness is **Conjecture 1**; Byzantine BFT safety is **Khipu Conjecture 2 (open)**. Full map ā†’ [lutar-lean](https://github.com/szl-holdings/lutar-lean). [Live demo](#live) Ā· [What it does](#what-it-does) Ā· [Quickstart](#quickstart) Ā· [Verify](#verify-it-yourself) Ā· [Cookbook](#try-the-cookbook) Ā· [Architecture](#architecture) Ā· [Repo map](#repo-map) Ā· [API surface](#api-surface) Ā· [Parity vs. leaders](#parity-vs-leaders) Ā· [Why vs Anduril](#why-killinchu-vs-anduril-lattice) Ā· [Honest status](#honest-status) Ā· [Cite](#citation) --- ## Live **HF Space (one-click, no login):** [![Open in Spaces](https://img.shields.io/badge/%F0%9F%A4%97%20Open%20in%20Spaces-killinchu-FF9D00?style=flat-square)](https://huggingface.co/spaces/SZLHOLDINGS/killinchu) - **Primary face ā€” the full application:** https://szlholdings-killinchu.hf.space/elite - Space URL: https://szlholdings-killinchu.hf.space - Health: `curl -s https://szlholdings-killinchu.hf.space/api/killinchu/v1/honest | jq .kernel_commit` ā†’ `"c7c0ba17"` - Runtime source identity: https://szlholdings-killinchu.hf.space/api/build-info - Conditional public-risk contract: https://szlholdings-killinchu.hf.space/api/public-risk-status (`build.state=OBSERVED` only for a valid `SZL_GIT_SHA`; the deploy workflow requires `build.revision` to equal the exact GitHub commit being deployed) - Runtime source attestation: https://szlholdings-killinchu.hf.space/.well-known/szl-source.json (startup-captured deployed Git revision plus the GitHub OIDC receipt reference when available; Hugging Face repository revision remains explicitly unclaimed) - Edge Verdict Console: https://szlholdings-killinchu.hf.space/console - Compatibility entries: `/code` and `/chat` return HTTP 302 to the existing `/console`; they are aliases, not separate code or chat products - OpenAPI: https://szlholdings-killinchu.hf.space/openapi.json - Spaces registry: https://szlholdings-killinchu.hf.space/spaces (apps open on canonical isolated HF origins; legacy `/spaces/` links are no-store 307 handoffs) - Docs: https://szl-holdings.github.io/docs-site/flagships/killinchu - Release: [v1.0.0](https://github.com/szl-holdings/killinchu/releases/tag/v1.0.0) --- ## The application killinchu is a **full left-nav application** at `/elite` in the unified SZL house style (dark ground, gold `#c9b787` + teal `#5fb3a3`, Space Grotesk + JetBrains Mono), with a **product switcher** in the top ribbon between the two live SZL products (a11oy Ā· killinchu). **Primary app file:** [`killinchu_elite_console.py`](killinchu_elite_console.py) Ā· **served at** `/elite`. **44 views** in the left navigation, plus **7 maritime/drone live demos** and a **live 3D health twin** (real-time WebGL organism view). Representative views: | View | View | View | View | |---|---|---|---| | Live Track Board | Sensor-Fusion | Multi-Track Priority | ROE Editor | | 13-axis Ī› | 3-of-4 BFT | Beyond/Autonomy | Engagement Audit | | DSSE Verifier | PQC Signing | Protocol Decoders | Geofence | | Swarm Topology | Threat Class DB | Cross-Flagship | Mesh | | Maritime Track | Vessel Fusion | Drone Demo Suite | **3D Health Twin** | - **7 maritime/drone demos** ā€” scripted live scenarios (interdiction, swarm, vessel track, geofence breach, BFT quorum, ROE deny, receipt replay). - **Live 3D health twin** ā€” real-time WebGL rendering of the killinchu organism, organs pulsing with live receipt/formula flow. **Verify-it-yourself surface:** the app publishes its cosign public key at [`/cosign.pub`](https://szlholdings-killinchu.hf.space/cosign.pub) and exports verifiable DSSE receipts at `/api/killinchu/v1/receipt/export` ā€” receipts are **real-DSSE-or-honestly-UNSIGNED**, never silently fabricated. --- ## What it does **killinchu is the counter-UAS edge tool of the SZL drones & vessels product.** Detection, classification, and the governed-decision layer are LIVE and operational: it evaluates hostile UAS tracks at machine speed, signs every engagement *decision* with a DSSE Khipu receipt, and surfaces the result to a **human operator**. Physical effector engagement is operator-owned ā€” gated on customer authorization and hardware integration. This Space does not command a live weapon or establish production authorization. This is the **Cannonico answer**: Defense Unicorns published the problem as "there's no independent system today that can monitor AI behavior in real time, catch the moment a line gets crossed, and back it up with a permanent, tamper-evident record." killinchu is that system ā€” deployed in one signed UDS command. Key capabilities: - **Real protocol decoders (no mocks)** ā€” Remote ID (ASTM F3411-22a), ADS-B (Mode-S 1090ES via pyModeS), MAVLink v1/v2 (pymavlink) - **13-axis Ī›-gate** ā€” haversine geofence breach check fused with `yuyay_v3` score; decisions emit DSSE Khipu receipts in a real SHA-256 Merkle DAG - **53 drone fingerprints** ā€” pre-loaded drone signature library - **ROE / policy endpoint** ā€” `/roe/policy`, `/counter-uas/evaluate` (Anduril parity, live HTTP 200) - **Named public contracts (MEASURED HTTP 200 on declared routes)** ā€” `/roe/policy`, `/counter-uas/evaluate`. Not competitive parity. Not an exclusivity claim. **Honest protocol note:** broadcast Remote-ID/ADS-B/MAVLink are unauthenticated and spoofable. Every decoded field is a *claim*, never ground truth. This is stated explicitly in `/v1/honest`. --- ## Quickstart ```bash pip install "szl-killinchu" # PyPI # or run the live, signed container: docker run --rm -p 7860:7860 ghcr.io/szl-holdings/killinchu:uds-v0.2.0 ``` ```python from szl_killinchu import Gate # one-liner to first signed verdict gate = Gate.from_doctrine("v11") # loads the LOCKED 749/14/163 posture verdict = gate.evaluate(receipt) # -> signed verdict + receipt id ``` > Prefer zero-install? Hit the **[live Space](https://szlholdings-killinchu.hf.space)** or run the [Verify](#verify-it-yourself) block below ā€” no credentials required. --- ## Verify it yourself ```bash # 1. Confirm live doctrine posture curl -s https://szlholdings-killinchu.hf.space/api/killinchu/v1/honest | jq .kernel_commit # => "c7c0ba17" # 2. Observe the source revision reported by the running process curl -s https://szlholdings-killinchu.hf.space/api/build-info \ | jq '{state: .build.state, revision: .build.revision, source: .build.revision_source}' # The source-bound deploy fails unless state=OBSERVED and revision equals its GitHub SHA. # 3. Verify image signature + build-provenance attestation. SLSA L1 honest Ā· # L2 build-attested: container provenance via attest-build-provenance # (Sigstore keyless, Fulcio + Rekor). Verify with `cosign verify-attestation`. # SLSA L3 is roadmap; we do NOT claim L3 today. cosign verify \ ghcr.io/szl-holdings/killinchu:uds-v0.2.0 \ --certificate-identity-regexp='^https://github.com/szl-holdings/' \ --certificate-oidc-issuer='https://token.actions.githubusercontent.com' # 4. Inspect the public transparency-log entry for this image (Sigstore Rekor). # Image digest: sha256:dedfc3ā€¦718a # Rekor log index: 1710339915 rekor-cli get --log-index 1710339915 # Or open in a browser: https://search.sigstore.dev/?logIndex=1710339915 # 5. Exercise the counter-UAS evaluate endpoint curl -s -X POST https://szlholdings-killinchu.hf.space/api/killinchu/counter-uas/evaluate \ -H 'content-type: application/json' \ -d '{"track":{"lat":32.71,"lon":-117.15,"alt_m":120,"vel_ms":25}}' # => {"verdict":"CLASSIFY","lambda_score":0.73,"receipt_signed":true} # 6. Deploy as part of the signed mesh bundle uds-cli bundle deploy oci://ghcr.io/szl-holdings/szl-uds-bundle:uds-v0.2.0 --confirm ``` > Honest note: rule-engine receipts are now wired to the **real cosign DSSE** signer > (`szl_dsse`). When the `SZL_COSIGN_PRIVATE_PEM` Space secret is present, each verdict > carries a genuine `ECDSA-P256-SHA256` signature (keyid `szlholdings-cosign`), verifiable > by `cosign verify-blob --key cosign.pub` and `POST /khipu/verify`. When the secret is > **absent**, receipts keep a clearly-labelled placeholder ā€” **no signature is ever > fabricated**. The `/v1/honest` endpoint is the authoritative live posture probe. **Full guide:** [developers/VERIFY.md](https://github.com/szl-holdings/developers/blob/main/VERIFY.md) ### Sign a verdict and verify it (real DSSE round-trip) ```bash # Real ECDSA-P256-SHA256 DSSE over a verdict payload (PQC/hybrid also available). curl -s -X POST 'https://szlholdings-killinchu.hf.space/khipu/sign?mode=ecdsa' \ -H 'content-type: application/json' -d '{"verdict":"HALT","track":"TRK-0001"}' | jq .verified # => true # Cosign DSSE path (keyed) ā†’ cosign-CLI verifiable: curl -s -X POST 'https://szlholdings-killinchu.hf.space/api/killinchu/khipu/sign' \ -H 'content-type: application/json' -d '{"payload":{"verdict":"HALT"}}' | jq '{signed,keyid}' # Round-trip verify with cosign: # cosign verify-blob --insecure-ignore-tlog --key cosign.pub --signature ``` **Public proof:** cosign keyless cert (Fulcio) + Rekor transparency log entry [`#1710339915`](https://search.sigstore.dev/?logIndex=1710339915) for image `ghcr.io/szl-holdings/killinchu:uds-v0.2.0` (`sha256:dedfc3ā€¦718a`). --- ## Try the cookbook New here? The **[SZL Cookbook](https://github.com/szl-holdings/szl-cookbook)** has runnable recipes for your use case: - **[Recipe 04 ā€” Drone counter-UAS verdict](https://github.com/szl-holdings/szl-cookbook/blob/main/recipes/04-drone-counter-uas-verdict.md)** - **[Recipe 11 ā€” Kitaev surface drift detection](https://github.com/szl-holdings/szl-cookbook/blob/main/recipes/11-kitaev-surface-drift-detection.md)** - **[Recipe 14 ā€” Replicate the Walrus Ī±-gap measurement](https://github.com/szl-holdings/szl-cookbook/blob/main/recipes/14-replicate-walrus-alpha-gap.md)** Full index: [szl-cookbook/recipes](https://github.com/szl-holdings/szl-cookbook/tree/main/recipes). --- ## Architecture ```mermaid graph TD RID[Remote ID\nASTM F3411-22a] --> DEC[Protocol decoder\nno mocks] ADS[ADS-B\nMode-S 1090ES] --> DEC MAV[MAVLink v1/v2] --> DEC DEC --> FP[53 drone fingerprints\nclassification] FP --> GATE[13-axis Ī›-gate\nyuyay_v3\nhaversine geofence] GATE --> VRD[DSSE Khipu receipt\nP-256 signed\nMerkle DAG node] VRD --> ROE[ROE policy check\n/roe/policy\nsigned deny/allow] ROE --> OP[Operator console\nhuman-on-the-loop\nconfirm + authorize] VRD --> A11[a11oy Khipu DAG\nreceipts.in = receipts.out] ``` Full layout, the `register()` pattern, and the doctrine CI hard-gates ā†’ [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md). --- ## Repo map killinchu is **flat-rooted** ā€” most modules live beside `serve.py` (the boot entry + route assembly). The table below is a **logical** "where things live" guide; the modules listed already exist and run live. A user-visible surface is a self-contained module that exposes `register(app, ns="killinchu")` and is registered **before** the SPA catch-all (FastAPI matches routes in declaration order). Full table in [`docs/ARCHITECTURE.md`](docs/ARCHITECTURE.md). | Layer | Role | Representative modules | |---|---|---| | **entry** | boot + route assembly + SPA mount | `serve.py` | | **showcase console** | the `/elite` operator console (44 views) + view pages | `killinchu_elite_console`, `killinchu_elite_wiring`, `*_view`, `killinchu_nav_wireup` | | **decoders** | real protocol parsers (no mocks) | `killinchu_protocols`, `killinchu_kalman`, `killinchu_fusion`, `build_drone_db` | | **counter-UAS logic** | geofence + 13-axis Ī›-gate + ROE | `killinchu_drone_routes`, `killinchu_autonomy`, `killinchu_ops_control`, `szl_cuas_formulas` | | **maritime / intel** | maritime risk, OSINT, globe surfaces | `killinchu_maritime_*`, `killinchu_osint`, `killinchu_mosaic` | | **provenance** | signed receipts (audit fiber) | `szl_dsse`, `szl_khipu_consensus`, `szl_provenance`, `szl_rekor` | | **governance** | doctrine gate + restraint / Ī› + guards | `szl_qhawaq`, `szl_restraint`, `szl_codename_gate`, `szl_unay` | | **shared substrate** | **byte-identical** across a11oy + killinchu (CI-enforced) | `szl_*.py`, `a11oy_hf_assets.py` | --- ## API surface | Endpoint | Method | Description | |---|---|---| | `/api/build-info` | GET, HEAD | Allowlisted runtime source revision; `UNKNOWN` unless `SZL_GIT_SHA` is a valid 40-hex SHA | | `/api/public-risk-status` | GET, HEAD | Dated Option A public-Space exception, enforced controls, startup-captured source identity, and explicit exceptions | | `/api/killinchu/healthz` | GET | Liveness | | `/api/killinchu/readyz` | GET | Readiness (DB + decoders loaded) | | `/api/killinchu/v1/honest` | GET | Doctrine v11 honesty disclosure | | `/api/killinchu/v1/version` | GET | Build + version metadata | | `/api/killinchu/v1/remote-id/decode` | POST | Decode OpenDroneID / ASTM F3411 hex | | `/api/killinchu/v1/counter-uas/evaluate` | POST | Geofence + 13-axis Ī›-gate + receipt | | `/api/killinchu/v1/lambda` | GET | Ī›-gate axis definitions | | `/console` | GET | Existing Edge Verdict Console | | `/code`, `/chat` | GET, HEAD | Explicit HTTP 302 aliases to `/console`; no SPA soft-404 fallthrough | The full, canonical endpoint list is on the [docs site](https://szl-holdings.github.io/docs-site/flagships/killinchu) and the [API reference](https://szl-holdings.github.io/docs-site/api/). --- ## Parity vs. leaders | Capability | Anduril | killinchu | Differentiator | |---|---|---|---| | UAS track classification | āœ… | āœ… 53 fingerprints, 13-axis | ā€” | | Protocol decoders | āœ… (proprietary) | āœ… **open-source** (ASTM/ADS-B/MAVLink) | Open, auditable | | Signed verdicts per interdiction | ā€” | āœ… **DSSE receipt per decision** | Each block is a verifiable artifact | | Human-on-the-loop gate | āœ… | āœ… operator confirmation | ā€” | | Supply-chain provenance | ā€” | āœ… **cosign keyless + build-attested (SLSA L1 honest Ā· L2 build-attested)** | container provenance via attest-build-provenance, Rekor-anchored; SLSA L3 roadmap | | Air-gap deployment | āœ… | āœ… **UDS bundle** | Open-source | | BFT receipt quorum | ā€” | āœ… | ā€” | --- ## Why killinchu vs Anduril Lattice Lattice is a closed, proprietary autonomy OS. killinchu takes the opposite posture: **open, formally-governed, and air-gap-deployable** ā€” built for sovereign defense buyers who must *audit* the decision path, not trust a black box. | Dimension | **killinchu** | Anduril Lattice (public posture) | |---|---|---| | Licensing | **Apache-2.0, fully open source** | Proprietary, closed | | Decision governance | **13-axis Ī›-gate, formally specified (Lean); Ī› = Conjecture 1, never overclaimed** | ML autonomy, internal | | Verdict provenance | **DSSE-signed receipts in a SHA-256 Khipu DAG; `cosign verify-blob`** | Vendor-internal logging | | Supply-chain attestation | **SLSA L1 honest Ā· L2 build-attested (container provenance, Sigstore keyless); `cosign verify-attestation`; L3 roadmap** | Not publicly verifiable | | Human authority | **Human-on-the-loop required; defensive scope locked in doctrine** | Human-on-the-loop | | Protocol decoders | **Real ASTM F3411 RID / Mode-S ADS-B / MAVLink (no mocks)** | Proprietary sensor fusion | | Honest posture | **`/honest` self-discloses every claim limit + unsigned/placeholder state** | Marketing-led | | Deployment | **Single signed OCI image Ā· Zarf/UDS air-gap bundle** | Appliance / cloud | | Banned vendors | **Section 889 = exactly 5 (Huawei, ZTE, Hytera, Hikvision, Dahua)** | Compliant | > killinchu is a **precision substrate**, not a turnkey weapon system. The decision layer is LIVE. > It governs and signs the *decision*; the operator and the platform own the *engagement* ā€” under human authority, always. --- ## Governed Post-Determinism (GPD) **Governed Post-Determinism (GPD)** is SZL's own framework. Classical systems demand that every correct node produce the *same bytes*; autonomous agents produce *different but still-correct* reasoning paths ā€” so the unit of agreement shifts from "identical output" to **certified semantic admissibility**, and SZL proves that certification with a signed, Lean-anchored receipt. Five pillars, each mapped to a component SZL runs in production with an honest proof artifact: - **Protocol-Bounded Execution** ā€” governed-decision loop + YUYAY 13-axis conjunctive gate (deny-by-default). *Gate soundness proven over the locked F-set.* - **Verifiable Intent-to-Execution** ā€” DSSE-signed receipt chain + Lean-theorem trace. *ECDSA-P256 signed, SHA-256 hash-chained, tamper-evident.* - **Bounded-Recursion Control Plane** ā€” Ouroboros bounded-recursion loop (P1ā€“P6), following the estate's canonical bounded-loop pattern ([`ouroboros/src/loop-kernel.ts`](https://github.com/szl-holdings/ouroboros/blob/main/src/loop-kernel.ts) `runLoop`) and instilled here as the governed agent loop ([`szl_agentic_loop.py`](szl_agentic_loop.py), registered identically in a11oy + killinchu). *Loop invariants proven.* - **Semantic Quorum Assurance** ā€” Khipu BFT quorum + Wave23 conditional safety theorem (`khipu_quorum_safety_conditional`, agreement under non-equivocation). *Conditional theorem; unconditional Byzantine safety = Conjecture 2 (open).* - **Epistemic State Replication** ā€” YAWAR append-only receipt bus + deterministic replay + Verifiable Semantic Rollback. *Receipts/replay live; full ESR semantics = open R&D (roadmap).* **Honest posture:** locked-proven = exactly 8 {F1, F4, F7, F11, F12, F18, F19, F22}; Ī› (trust score) = **Conjecture 1** (unconditional uniqueness machine-checked false; conditional uniqueness holds); Semantic Quorum Assurance safety = Wave23 **conditional** (unconditional = Conjecture 2); full Epistemic State Replication = **open R&D**. **Foundation ā€” SZL's own prior art only (no external citation):** *The Loop Is the Product* v1/v2 ([Zenodo 19867281](https://doi.org/10.5281/zenodo.19867281), [19934129](https://doi.org/10.5281/zenodo.19934129)), *Lineage-Aware RAG / Prisca-GraphRAG v5* ([20020846](https://doi.org/10.5281/zenodo.20020846)), *Sealed Constitutional Guardrails v6* ([20020845](https://doi.org/10.5281/zenodo.20020845)), *The Lutar Omega Formalism v4* ([20020841](https://doi.org/10.5281/zenodo.20020841)), *SZL Doctrine v2 ā€” 9 Canonical Axes* ([20174600](https://doi.org/10.5281/zenodo.20174600)) ā€” all Stephen P. Lutar, ORCID 0009-0001-0110-4173. See [`docs/GOVERNED_POST_DETERMINISM.md`](https://github.com/szl-holdings/platform/blob/main/docs/GOVERNED_POST_DETERMINISM.md) (platform repo) for the full write-up. ## Doctrine - **Doctrine v11 LOCKED** ā€” 749/14/163 Ā· kernel `c7c0ba17` (never bumped) - **Ī› = Conjecture 1** (NOT a theorem) ā€” depends on the open CAUCHY_ND sorry + a missing symmetry axiom - **SLSA L1 honest Ā· L2 build-attested** (container build-provenance via attest-build-provenance, Sigstore keyless; verify with `cosign verify-attestation`) Ā· L3 roadmap Ā· **Section 889 = exactly 5 vendors** (Huawei, ZTE, Hytera, Hikvision, Dahua) - No Iron Bank / FedRAMP / CMMC / SWFT / Mission Owner claims --- ## Honest status **Label legend (a-11-oy tab standard):** **MEASURED** = independently verified live this session Ā· **REPORTED** = self-disclosed by the running app at [`/v1/honest`](https://szlholdings-killinchu.hf.space/api/killinchu/v1/honest) Ā· **UNKNOWN** = not independently verifiable here. Live probe 2026-07-09: HF Space `/elite` ā†’ **MEASURED HTTP 200** (page title `killinchu ā€” Counter-UAS Governance Ā· SZL Holdings`). | Claim | Status | |---|---| | Live HF Space (HTTP 200) | āœ… | | SLSA **L1 honest Ā· L2 build-attested** | āœ… ā€” cosign keyless-signed image + container build-provenance attestation (attest-build-provenance, Sigstore keyless), Rekor-anchored, verifiable via `cosign verify-attestation`. | | SLSA **L3** | šŸ›£ļø **Roadmap** ā€” hardened/isolated builder + non-falsifiable provenance. **Not claimed as achieved today.** | | cosign keyless signed | āœ… (GitHub Sigstore instance) | | 53 drone fingerprints | āœ… | | Real protocol decoders | āœ… ā€” ASTM F3411-22a / pyModeS / pymavlink (no mocks) | | Spoofing vulnerability | āš ļø **Explicit** ā€” broadcast protocols are unauthenticated; every field is a claim, not ground truth | | Lean 749/14/163 @ `c7c0ba17` | āœ… | | Locked-proven PURIQ formulas | āœ… Exactly **8** ā€” F1, F4, F7, F11, F12, F18, F19, F22 (Lean 4; the count is the no-axiom theorem `locked_count_eight`; F4 Khipu DAG acyclicity, F7 Chaski FIFO ordering, F22 Khipu emit append-only monotonicity newly proven) | | Experimental theorems (main `@c7c0ba17`) | āœ… CI-green, **~185 machine-checked theorems** across **Waves 11ā€“22** (+ agentic P1ā€“P6 + coder; all `#print axioms āŠ† {propext, Classical.choice, Quot.sound}`). **NOT** in the locked count. Wave 11 CF-1/2/3/5; Wave 12 CUT-2 + CF-13 + CF-17; Wave 13 replay-root + single-valued NON-Byzantine vote (BFT safety stays Conjecture 2) + HM-bottleneck; Waves 14ā€“22 incl. CF-18/19/20/21 (CF-19 RS-MDS lower bound only). Ī›-uniqueness CONDITIONAL on separability (CUT-2, axiom-free); unconditional = Conjecture 1. Khipu BFT safety = Conjecture 2. Key: M2 tamper-evidence. | | Ī›-uniqueness | āš ļø **Conjecture 1** ā€” never a theorem | | SLSA L3 | āŒ Not claimed | | Decision layer (detect / classify / govern / sign) | āœ… LIVE ā€” real decoders, 53 fingerprints, Ī›-gate, DSSE receipts | | Physical effector engagement | Operator-owned ā€” not exercised by this Space; no production ATO claimed | | FedRAMP / CMMC | āŒ Not claimed | --- ## SLSA L1 honest Ā· L2 build-attested provenance (verify) Every `ghcr.io/szl-holdings/killinchu` image is cosign keyless-signed and carries a container build-provenance attestation (attest-build-provenance, Sigstore keyless ā€” Fulcio + Rekor). SLSA L1 honest Ā· L2 build-attested. SLSA L3 (hardened/isolated builder) is roadmap; not claimed. Verify the attestation: ```bash gh attestation verify oci://ghcr.io/szl-holdings/killinchu:uds-v0.2.0 --owner szl-holdings ``` SLSA L3 (hardened/isolated builder + non-falsifiable provenance) is roadmap; not claimed. --- ## šŸ”Œ UDS Mesh ā€” the nervous system This product is part of the **SZL UDS mesh**: a trace + receipt substrate. Only two products ship (a11oy, killinchu); the other nodes are roadmap **roles** (the retired codenames map to the honest roles **Operator / Policy / Provenance Anchor** and surface inside a11oy ā€” they are not standalone live products). ```mermaid flowchart LR classDef live fill:#0f3a2e,stroke:#5ad1c0,color:#e8eef7; classDef inproc fill:#2a3550,stroke:#7aa2ff,color:#e8eef7; classDef roadmap fill:#3a2f0f,stroke:#e0c060,color:#e8eef7; OPERATOR["šŸ§  Operator role
(in a11oy)"]:::roadmap -->|Wire C| A11OY["ā¤ļø a11oy
heart / fabric"]:::live A11OY -->|Wire B| POLICY["šŸ›”ļø Policy role
(in a11oy)"]:::roadmap A11OY -->|Wire E| PROVENANCE["šŸ©ø Provenance Anchor role
(in a11oy)"]:::roadmap A11OY -->|Wire F| VESSELS["šŸ¦“ vessels
skeleton"]:::roadmap KILLINCHU["šŸ“” killinchu
courier"]:::roadmap -.->|relay| RECEIPTS["šŸ“œ receipts
DSSE Khipu"]:::inproc A11OY -->|traceparent embedded| RECEIPTS WIRES["šŸ”Œ wires / W3C traceparent"]:::live -.-> A11OY ``` **Honest mesh status (verified 2026-06-03):** every organ emits **real W3C trace context** (`traceparent` / `tracestate` / `x-szl-wire-d: LIVE`) and a11oy binds it into **DSSE Khipu receipts** ā€” this is **LIVE in-process**. Spans are **not** yet OTLP-exported, DSSE receipts are currently **unsigned**, and cross-pod organ routing is **roadmap (v0.4.0)**. Honesty over checklist. ā†’ Full diagram + wire-status table: **[docs-site / mesh](https://szl-holdings.github.io/docs-site/mesh)** Ī› Conjecture 1 (not a theorem) Ā· 749/14/163 v11 LOCKED Ā· SLSA L1 honest Ā· L2 build-attested Ā· L3 roadmap Ā· Section 889 = 5 vendors --- ## Real-edge formulas (real-edge-v2) Killinchu, the edge organ, runs five thesis-v22 formulas at the courier edge ā€” each with a real thesis citation and a real Lean theorem/obligation permalinked into `szl-holdings/lutar-lean`. No mocks: every endpoint operates on caller-supplied telemetry; the verdict carries a real DSSE-v1 ECDSA-P256 receipt. | Formula | Edge role | Lean theorem (permalink) | |---|---|---| | **PAC-Bayes (Catoni)** | high-prob. upper bound on verdict risk ā†’ honest confidence | [`pacBayesBound_eq_add_slack`](https://github.com/szl-holdings/lutar-lean/blob/abd58d159f1bdb79a017d71a6b94ab160ead8d9d/Lutar/PACBayes.lean#L165) | | **Kalman (numpy)** | constant-velocity smoothing of noisy drone telemetry | [`gain_in_unit_interval`](https://github.com/szl-holdings/lutar-lean/blob/f3153a684e7d9b77462d58185bd1eae0aeacd1bc/Lutar/Innovations/round11/FrontierKalmanGain.lean#L72) | | **Byzantine quorum** | nā‰„3f+1 over 5 sensors, tolerate 1 byzantine fault | [`faultyCount` / Conjecture 2](https://github.com/szl-holdings/lutar-lean/blob/abd58d159f1bdb79a017d71a6b94ab160ead8d9d/Lutar/KhipuConsensus.lean#L116) | | **Welford** | online variance for streaming Ī› / z-score gate | [`welford_mean_exact`](https://github.com/szl-holdings/lutar-lean/blob/f3153a684e7d9b77462d58185bd1eae0aeacd1bc/Lutar/Innovations/round11/FrontierWelfordVariance.lean#L89) | | **Bloom filter** | fast threat-signature membership (FN-free) | [`query_after_insert`](https://github.com/szl-holdings/lutar-lean/blob/f3153a684e7d9b77462d58185bd1eae0aeacd1bc/Lutar/Innovations/round11/FrontierBloomCacheBypass.lean#L77) | **Endpoints** - `POST /api/killinchu/v1/edge/verdict` ā€” real telemetry ā†’ Ī› āˆˆ [0,1] + DSSE receipt - `POST /api/killinchu/v1/edge/track-smooth` ā€” Kalman smoothing of a trajectory - `GET /api/killinchu/v1/edge/quorum-status` ā€” Byzantine quorum on sensor fusion (5 sensors, f=1) - `GET /api/killinchu/v1/formulas/index` ā€” wired formulas + thesis citation + Lean permalink **Tests** ā€” `tests/test_formulas_real.py` feeds real numpy-generated telemetry and asserts Ī› āˆˆ [0,1] and that every DSSE receipt verifies in-process; `tests/test_no_mock.py` greps the non-test formula sources for `mock|fake|stub|dummy` and FAILS if found. --- ## License + DOI - **License:** Apache-2.0 (OSS across all SZL Holdings repos). - **Concept DOI:** [`10.5281/zenodo.20434276`](https://doi.org/10.5281/zenodo.20434276) ā€” cite the archived release on Zenodo. ## Built with / learned from This repository's structure and documentation conventions were learned from open-source publication leaders ā€” we adapted their *patterns*, not their words. Inspired by patterns from **Polymathic AI** ([the_well](https://github.com/PolymathicAI/the_well), [walrus](https://github.com/PolymathicAI/walrus)), **Anthropic**, **OpenAI** ([whisper](https://github.com/openai/whisper)), **Stripe** (docs craft), Google DeepMind ([alphafold3](https://github.com/google-deepmind/alphafold3)), Meta FAIR ([segment-anything](https://github.com/facebookresearch/segment-anything)), EleutherAI ([lm-evaluation-harness](https://github.com/EleutherAI/lm-evaluation-harness)), and Hugging Face ([transformers](https://github.com/huggingface/transformers)). We are a precision substrate, not a vibes company. ## Citation ```bibtex @software{szl_killinchu_2026, author = {Lutar, Stephen P.}, title = {killinchu: Andean drone intelligence}, year = {2026}, publisher = {SZL Holdings}, version = {v1.0.0}, url = {https://github.com/szl-holdings/killinchu}, doi = {10.5281/zenodo.20434276}, note = {Doctrine v11 LOCKED 749/14/163, kernel c7c0ba17} } ``` --- > Not affiliated with Defense Unicorns. SZL mark USPTO Serial 99831122. No production ATO claimed. Doctrine v11 LOCKED Ā· 749/14/163 Ā· kernel `c7c0ba17` Ā· SLSA L1 honest Ā· L2 build-attested (container provenance, Sigstore keyless) Ā· L3 / FedRAMP / Iron Bank / CMMC / ATO roadmap Ā· 8 locked-proven + experimental CI-green tier Ā· Ī› = Conjecture 1 Ā· Khipu Conjecture 2 open Ā· Apache-2.0 --- ## ā—‡ Part of the SZL Holdings estate ā€” *governed AI you can prove* One sovereign substrate, many organs ā€” every decision carries a signed, checkable receipt. **[a-11-oy.com ā€” the estate front-door](https://a-11-oy.com)** ā€” the live estate hub (a11oy flagship). killinchu's own live face is its HF Space `/elite` below. **[ā—‡ Holographic Estate ā€” the showcase](https://szlholdings-holographic.hf.space)** Ā· [šŸ›”ļø a11oy](https://huggingface.co/spaces/SZLHOLDINGS/a11oy) Ā· [šŸ§¬ IMMUNE](https://huggingface.co/spaces/SZLHOLDINGS/immune) Ā· [šŸ¦… killinchu](https://huggingface.co/spaces/SZLHOLDINGS/killinchu) Ā· [šŸ«€ anatomy](https://huggingface.co/spaces/SZLHOLDINGS/anatomy) Ā· [šŸŒŒ cosmos](https://huggingface.co/spaces/SZLHOLDINGS/cosmos) Ā· [šŸ›°ļø SDA](https://huggingface.co/spaces/SZLHOLDINGS/sda) Ā· [šŸŒŠ yarqa](https://huggingface.co/spaces/SZLHOLDINGS/yarqa) Ā· [šŸ¤— all Spaces](https://huggingface.co/SZLHOLDINGS) **Governed-receipt cluster** ā€” the open receipt format, an offline verifier, and a conformance bench (the DSSE Khipu receipts killinchu emits conform to this spec): [šŸ“ governed-receipt-spec](https://github.com/szl-holdings/governed-receipt-spec) Ā· [āœ… receipt verifier](https://huggingface.co/spaces/SZLHOLDINGS/governed-receipt-verifier) Ā· [šŸ“¦ receipts bench](https://huggingface.co/datasets/SZLHOLDINGS/governed-receipts-bench) **Formula provenance** ā€” killinchu's edge formulas and 13-axis Ī›-gate are machine-checked in the estate's formula ledger and Lean corpus (honest ledger; Ī› = Conjecture 1, never proven): [šŸ§® szl-formula-ledger](https://github.com/szl-holdings/szl-formula-ledger) Ā· [šŸ“ lutar-lean](https://github.com/szl-holdings/lutar-lean) Doctrine v11 Ā· Ī› = Conjecture 1, never green Ā· honest by design Ā· public data only. Signed-off-by: Stephen P. Lutar Jr.