loading…
The plain-English version of what the operator console does. Every claim below is labeled with what is genuinely live versus a demonstration — no fabricated state, ever.
Real ECDSA P-256 signature over a DSSE envelope, chained into a tamper-evident ledger. Verify it offline — no SZL service required.
ROE + geofence containment are enforced by a proven gate — not a config file anyone can quietly loosen. Nothing acts unless the gate admits it.
Four independent witnesses (Policy / Reasoning / a11oy / Killinchu) must agree. One faulty or compromised node cannot force an action.
Eight formulas are locked-proven in Lean (kernel c7c0ba17). The single trust score (Λ) is Conjecture 1, not a theorem — and we say so on every surface.
Fonts, viz libraries and signing all self-hosted same-origin. Nothing phones home at runtime; deployable behind an air gap.
killinchu governs and records the engagement decision; it does not fire anything. Defensive by doctrine, every engagement needs a human.
One detector lane. KILLINCHU-EYE is not a second detector and not a second model. No weights on this overlay — frames SKIP, no tensors, no Hub download, no trained-weights copy. Effector stays SIMULATED. Jobs UNKNOWN.
Sanctions and dark-vessel checks are demonstrated on sample / replay data — an honest demonstration, not a live feed.
open to load the live capability + honesty manifest…