deploy(hf): sync szl-holdings/killinchu@main derived COPY set

Reusable Dockerfile-COPY-derived deploy from szl-holdings/killinchu main.
Files: 880 Pruned: 0
Derived from Dockerfile COPY sources (NO hand-maintained allowlist).

Signed-off-by: SZL Holdings <noreply@szlholdings.ai>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

cathedral.html

@@ -4,7 +4,7 @@
   Field node (killinchu, edge) tethered to the a11oy brain-sun upstream.
   Sovereign: Three.js r160 (MIT) VENDORED under /static/vendor3d, NO CDN.
   Honesty: locked proven = 8 {F1,F4,F7,F11,F12,F18,F19,F22}; experimental main 1304/22; Λ = Conjecture 1;
-  Trust Gate = Conjecture; SLSA L1 honest / L2 roadmap. Live /healthz + ledger.
+  Trust Gate = Conjecture; SLSA L1 honest · L2 attested · L3 roadmap. Live /healthz + ledger.
   "Enter Field Console" -> /elite (Counter-UAS Governance command deck).
   Vessels CONSOLIDATED into killinchu (/elite fleet group).
   Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>
@@ -90,7 +90,7 @@ html,body{margin:0;height:100%;background:var(--indigo-900);overflow:hidden;colo
     <div class="title">killinchu · Maritime + Drone C2 (Field Node)</div>
     <div class="line">Doctrine <b>v11 LOCKED</b> · <b>749/14/163</b> · <span class="sha">c7c0ba17</span></div>
     <div class="line" style="margin-top:5px">Λ = <b>Conjecture 1</b> · Trust Gate = <b>Conjecture</b> · locked proven <b>8</b> {F1,F4,F7,F11,F12,F18,F19,F22}</div>
-    <div class="line" style="margin-top:5px">Vessels <b>consolidated</b> into killinchu (/elite) · /wave910 (6 cards) · SLSA <b>L1 honest / L2 roadmap</b></div>
+    <div class="line" style="margin-top:5px">Vessels <b>consolidated</b> into killinchu (/elite) · /wave910 (6 cards) · SLSA <b>L1 honest · L2 attested · L3 roadmap</b></div>
     <div class="line" style="margin-top:5px;color:var(--ink-dim)">Field node (edge) tethered to the a11oy substrate upstream</div>
   </div>
 

killinchu_elite_console.py

@@ -371,11 +371,15 @@ __all__ = ["register"]
 # ===========================================================================
 _CEO_OVERLAY_HTML = r"""<!-- __SZL_CEO_OVERLAY__ : light CEO/investor overlay (additive, 0-CDN) -->
 <style>
-#szl-ceo-fab{position:fixed;right:16px;bottom:16px;z-index:2147483000;display:inline-flex;align-items:center;gap:8px;
+/* Investor pill stacks ABOVE the floating reliability/Chaski orb badge so the two
+   never overlap or clip the circular FAB at 1280-1920px. Both share the bottom-right
+   corner; the pill sits one row up (safe-area aware), max-width capped to viewport. */
+#szl-ceo-fab{position:fixed;right:calc(env(safe-area-inset-right,0px) + 16px);
+  bottom:calc(env(safe-area-inset-bottom,0px) + 74px);z-index:2147483000;display:inline-flex;align-items:center;gap:8px;
   font-family:'JetBrains Mono',ui-monospace,monospace;font-size:12px;letter-spacing:.08em;text-transform:uppercase;
-  padding:11px 16px;min-height:44px;border-radius:10px;border:1px solid rgba(201,183,135,.45);
+  padding:11px 16px;min-height:44px;max-width:calc(100vw - 32px);border-radius:10px;border:1px solid rgba(201,183,135,.45);
   background:rgba(201,183,135,.12);color:#d6c69a;cursor:pointer;backdrop-filter:blur(8px);
-  box-shadow:0 8px 26px -10px rgba(0,0,0,.7);}
+  box-shadow:0 8px 26px -10px rgba(0,0,0,.7);white-space:nowrap;}
 #szl-ceo-fab:hover{background:rgba(201,183,135,.2);border-color:rgba(201,183,135,.7);}
 #szl-ceo-fab .dot{width:8px;height:8px;border-radius:50%;background:#5fb3a3;box-shadow:0 0 0 3px rgba(95,179,163,.18);}
 #szl-ceo{position:fixed;inset:0;z-index:2147483001;display:none;overflow-y:auto;
@@ -881,7 +885,8 @@ a{color:inherit;text-decoration:none;}
 .nav-group[data-demo-sec]:focus-visible{outline:1px solid var(--teal-line,#2c5d52);outline-offset:2px;}
 .nav-item.demo-hidden,.nav-group.demo-hidden,.exp-fence-note.demo-hidden{display:none!important;}
 .exp-fence-note{margin:.15rem .5rem .35rem;padding:.45rem .55rem;font-family:var(--mono);font-size:9px;line-height:1.55;color:#caa84b;background:rgba(202,168,75,.06);border:1px dashed rgba(202,168,75,.35);border-radius:6px;letter-spacing:.04em;}
-.side-foot{margin-top:1.2rem;padding:.7rem .6rem;border-top:1px solid var(--gold-line);font-family:var(--mono);font-size:9.5px;color:var(--dim);line-height:1.7;}
+.side-foot{margin-top:1.2rem;padding:.85rem .6rem 1.1rem;border-top:1px solid var(--gold-line);font-family:var(--mono);font-size:10px;color:var(--dim);line-height:1.95;letter-spacing:.02em;}
+.side-foot br{line-height:2.1;}
 
 /* ===== CONTENT ===== */
 .content{padding:1.1rem 1.6rem 2rem;overflow-y:auto;overflow-x:hidden;height:100%;min-height:0;-webkit-overflow-scrolling:touch;}
@@ -1201,7 +1206,7 @@ details.raw{margin-top:1rem;} details.raw summary{cursor:pointer;font-family:var
      9-11.5px on desktop by design; bumped to a readable 12px floor on mobile. */
   .nav-group{font-size:12px!important;letter-spacing:.12em;}
   .brand .role{font-size:12px!important;}                 /* small but >=11; brand sub */
-  .side-foot{font-size:12px!important;line-height:1.65;}
+  .side-foot{font-size:12px!important;line-height:1.9;}
   .kpi .k{font-size:12px!important;letter-spacing:.1em;}
   .kpi .d{font-size:12px!important;}
   .view-badge{font-size:12px!important;}
@@ -4930,8 +4935,8 @@ cosign verify-blob --key cosign.pub --signature sig.b64 payload.bin</pre></div>
       <div class="kpi"><div class="k">Declarations</div><div class="v teal" id="me-dag">\u2014</div><div class="d">v11 kernel</div></div></div>
       <div class="grid2">
         <div class="card"><div class="card-h"><span class="card-t">${liveDot()}Golden metric \u2014 telemetry latency by service</span><span class="card-ep">live \u00b7 auto-refresh 8s</span></div><div class="echart" id="me-lat"></div></div>
-        <div class="card"><div class="card-h"><span class="card-t">${liveDot()}Event stream \u2014 track / span receipts</span><span class="card-ep"><select id="me-filter" style="background:var(--panel);color:var(--paragraph);border:1px solid var(--gold-line);border-radius:6px;padding:.25rem .5rem;font-family:var(--mono);font-size:11px"><option value="">all services</option></select></span></div>
-          <div id="me-stream" style="max-height:300px;overflow:auto"><div class="row mono dim">loading\u2026</div></div></div>
+        <div class="card"><div class="card-h"><span class="card-t">Event stream \u2014 track / span receipts <span class="badge b-warn" style="margin-left:.4rem">MODELED cadence</span></span><span class="card-ep"><select id="me-filter" style="background:var(--panel);color:var(--paragraph);border:1px solid var(--gold-line);border-radius:6px;padding:.25rem .5rem;font-family:var(--mono);font-size:11px"><option value="">all services</option></select></span></div>
+          <div id="me-stream" style="max-height:300px;overflow:auto"><div class="row mono dim">awaiting spans</div></div></div>
       </div>
       <div class="card" id="me-drill"><div class="row mono dim">Click any span in the stream to drill into it \u2014 its service, traceparent and its span receipt (DSSE-signed when a cosign key is armed, else UNSIGNED-honest) land here.</div></div>${HONEST}`;window.melt_load();}},
 
@@ -7143,7 +7148,7 @@ async function melt_load(){
         var sid=(++window._meSeq);
         var span={id:sid,ts:nowts(),svc:svc.id,svcName:svc.name,model:(trk.model||'track'),status:(trk.status||'telemetry'),lat:svc._lat||0,tp:'00-'+Math.random().toString(16).slice(2,18)+'-'+Math.random().toString(16).slice(2,10)+'-01'};
         window._meSpans[sid]=span;
-        var line='<div class="row me-span" data-svc="'+esc(span.svc)+'" style="cursor:pointer;animation:pulse 1.2s 1" onclick="window.melt_drill('+sid+')"><span class="badge b-live">span</span><span>'+esc(span.svcName)+' \u00b7 '+esc(span.model)+' \u00b7 '+esc(span.status)+'</span><span class="spacer mono dim">'+esc(span.ts)+'</span></div>';
+        var line='<div class="row me-span" data-svc="'+esc(span.svc)+'" style="cursor:pointer;animation:pulse 1.2s 1" onclick="window.melt_drill('+sid+')"><span class="badge b-warn" title="MODELED: span composed from real /mesh/state services + /threats/active tracks; the emission cadence is synthesized, not a captured trace event">MODELED</span><span>'+esc(span.svcName)+' \u00b7 '+esc(span.model)+' \u00b7 '+esc(span.status)+'</span><span class="spacer mono dim">'+esc(span.ts)+'</span></div>';
         ev.insertAdjacentHTML('afterbegin',line);
         while(ev.children.length>40) ev.removeChild(ev.lastChild);
         melt_apply_filter();

static/landing.html

@@ -155,7 +155,7 @@ img, svg { display: block; }
 /* ---- ORBITAL ANIMATION -------------------------------------------------- */
 .ds-orbital { position: relative; width: 100%; aspect-ratio: 1 / 1; max-width: 520px; margin: 0 auto; border-radius: 18px; overflow: hidden; background: radial-gradient(circle at 50% 50%, rgba(201,183,135,0.06) 0%, rgba(201,183,135,0.02) 35%, rgba(0,0,0,0) 65%), #0d0d0d; border: 1px solid var(--hairline); box-shadow: 0 30px 80px -20px rgba(0,0,0,0.6), inset 0 0 0 1px rgba(255,255,255,0.02); }
 .ds-orbital__corner { position: absolute; width: 14px; height: 14px; border-top: 1px solid var(--gold); border-left: 1px solid var(--gold); opacity: 0.55; pointer-events: none; }
-.ds-orbital__hud {text-shadow:0 0 6px rgba(8,8,8,.95),0 0 2px #080808; position: absolute; font-family: var(--mono); font-size: 9.5px; letter-spacing: 0.18em; text-transform: uppercase; color: var(--muted); line-height: 1.7; z-index: 3; }
+.ds-orbital__hud{text-shadow:0 0 6px rgba(8,8,8,.95),0 0 2px #080808; position: absolute; font-family: var(--mono); font-size: 9.5px; letter-spacing: 0.18em; text-transform: uppercase; color: var(--muted); line-height: 1.7; z-index: 3; ;background:rgba(8,12,20,.78);padding:5px 7px;border-radius:2px}
 .ds-orbital__hud .gold { color: var(--gold-dim); }
 .ds-orbital__hud .teal { color: var(--teal); }
 .ds-orbital__scan { position: absolute; left: 0; right: 0; height: 1px; background: linear-gradient(90deg, transparent, var(--gold) 50%, transparent); opacity: 0.35; mix-blend-mode: screen; animation: ds-scan 5.5s linear infinite; z-index: 2; }

static/navy.html

@@ -52,12 +52,12 @@
 <header>
   <svg class="logo" viewBox="0 0 32 32"><path d="M16 3 L27 27 L16 21 L5 27 Z" fill="#d7b96b"/></svg>
   <div class="ttl">Killinchu <b>/ Warhacker</b> — Defense Unicorns hackathon, packages on UDS Core</div>
-  <span class="chip"><span class="dot"></span>4 ORGANS LIVE</span>
+  <span class="chip" title="Live status is on the /operator console; this booth is a static overview">4 ORGANS · status on /operator</span>
   <span class="chip" style="color:#5cc4bf;border-color:rgba(92,196,191,.45)" title="Compatible with Defense Unicorns UDS Core (not certified)">✓ UDS Core compatible</span>
   <span class="chip" style="color:#5cc4bf;border-color:rgba(92,196,191,.45)" title="Section 889: five banned vendors, none used">✓ Section 889 · 5 banned vendors clean</span>
   <span class="chip">ZARF-packaged</span>
   <span class="sp"></span>
-  <span class="doc">DOCTRINE v11 LOCKED · 749 · 14 · 163 · SLSA L1 honest (L2 in progress) · Λ Conjecture (not a theorem)</span>
+  <span class="doc">DOCTRINE v11 LOCKED · 749 · 14 · 163 · SLSA L1 honest · L2 attested · L3 roadmap · Λ Conjecture (not a theorem)</span>
 </header>
 <main>
   <h1>Defense Unicorns Warhacker — <span class="accent">packages on UDS Core</span>.</h1>
@@ -67,7 +67,7 @@
     <div class="cell good"><div class="v">Enterprise Agents</div><div class="k">CDAO lane (our lane)</div></div>
     <div class="cell good"><div class="v">✓ UDS Core compatible</div><div class="k">interoperability badge (not certified)</div></div>
     <div class="cell good"><div class="v">ZARF-packaged</div><div class="k">airgap bundle (available)</div></div>
-    <div class="cell"><div class="v">SLSA L1 honest</div><div class="k">L2 in progress</div></div>
+    <div class="cell"><div class="v">SLSA L1 honest</div><div class="k">L2 attested · L3 roadmap</div></div>
     <div class="cell good"><div class="v">✓ Section 889 · 5 clean</div><div class="k">no banned vendors</div></div>
   </div>
 
@@ -78,7 +78,7 @@
       <a href="/uds">UDS Core</a> ·
       <a href="/uds/sbom">SBOM (SPDX+CycloneDX)</a> ·
       <a href="/uds/sigstore">Sigstore (cosign + public Rekor)</a> ·
-      <a href="/uds/cmmc">CMMC L1 (17 practices)</a> ·
+      <a href="/uds/cmmc">CMMC L1 self-attest (roadmap, 17 practices)</a> ·
       <a href="/uds/889">Section 889 (five vendors)</a> ·
       <a href="/uds/zarf">ZARF air-gap deploy</a> ·
       <a href="/uds/mission-owner">Mission Owner (Iron Bank sponsor ask)</a>
@@ -99,11 +99,11 @@
     <h2>Honest compliance posture</h2>
     <table>
       <tr><th>Item</th><th>State</th><th>Note</th></tr>
-      <tr><td>SLSA Build</td><td class="warn">L1 honest (L2 in progress)</td><td>Real cosign-signed provenance, Rekor-anchored. L2 via hosted CI + cosign, in progress.</td></tr>
+      <tr><td>SLSA Build</td><td class="warn">L1 honest · L2 attested · L3 roadmap</td><td>Real cosign-signed provenance, Rekor-anchored. L2 attested via hosted CI + cosign; L3 is a roadmap item.</td></tr>
       <tr><td>ZARF + UDS Core packaging</td><td class="ok">Available</td><td>UDS Core compatible; ZARF bundle for airgap. Not certified.</td></tr>
       <tr><td>NDAA §889</td><td class="ok">Defensible / signable</td><td>5 banned vendors: Huawei, ZTE, Hytera, Hikvision, Dahua. No banned hardware on bench.</td></tr>
       <tr><td>Iron Bank</td><td class="no">Not accredited</td><td>Iron Bank requires a government Mission Owner sponsor — invitation-only; you cannot self-register. Target via Warhacker.</td></tr>
-      <tr><td>CMMC</td><td class="warn">L1 self-attest (planned)</td><td>L2/L3 deferred until a contract imposes CUI.</td></tr>
+      <tr><td>CMMC</td><td class="warn">L1 self-attest — roadmap</td><td>Roadmap item, not a held certification. L2/L3 deferred until a contract imposes CUI.</td></tr>
     </table>
   </section>
 

static/uds-compliance.html

@@ -120,12 +120,12 @@
     <!-- FRAMEWORKS -->
     <section class="sec" id="s-frameworks">
       <h1>Framework <b>Mappings</b></h1>
-      <p class="sub">STIG-hardened</p>
+      <p class="sub">Engineering-level control mappings — STIG-Hardened delta, NIST AI RMF, EU AI Act Art.12, and FedRAMP posture. Mappings, not conformity assertions; no certification claimed.</p>
       <div class="grid g2">
-        <div class="card" id="fw-"><h3>STIG-hardened</h3><div class="load">Loading…</div></div>
+        <div class="card" id="fw-stig-hardened"><h3>STIG-Hardened delta</h3><div class="load">Loading…</div></div>
         <div class="card" id="fw-nist"><h3>NIST AI RMF 1.0</h3><div class="load">Loading…</div></div>
         <div class="card" id="fw-eu"><h3>EU AI Act Article 12</h3><div class="load">Loading…</div></div>
-        <div class="card" id="fw-fedramp"><h3>FedRAMP Moderate posture</h3><div class="load">Loading…</div></div>
+        <div class="card" id="fw-fedramp"><h3>FedRAMP Moderate — roadmap posture</h3><div class="load">Loading…</div></div>
       </div>
     </section>
     <!-- RAW -->
@@ -155,7 +155,7 @@ const API="/api/killinchu/uds/v1";
 const FLAGSHIPS=[{k:"a11oy",label:"Orchestrator (a11oy)"},{k:"killinchu",label:"Field Node (killinchu)"},{k:"vessels",label:"vessels"},{k:"hatun-mcp",label:"hatun-mcp"}];
 const $=s=>document.querySelector(s);
 async function get(p){const r=await fetch(API+"/"+p);return r.json();}
-function sigLine(j){const ok=j.signed;return `<span class="dot ${ok?'ok':'no'}"></span>${ok?'DSSE SIGNED':'UNSIGNED (no key in runtime — honest, not fabricated)'} · keyid ${(j.dsse&&j.dsse.signatures&&j.dsse.signatures[0]?j.dsse.signatures[0].keyid:'szlholdings-cosign')} · receipt ${(j.receipt_sha256||'').slice(0,16)||'—'}`;}
+function sigLine(j){const ok=j.signed;return `<span class="dot ${ok?'ok':'no'}"></span>${ok?'DSSE SIGNED':'UNSIGNED (no key in runtime — honest, not fabricated)'} · keyid ${(j.dsse&&j.dsse.signatures&&j.dsse.signatures[0]?j.dsse.signatures[0].keyid:'szlholdings-cosign')} · receipt ${(j.receipt_sha256||'').slice(0,16)||'awaiting sweep'}`;}
 function badge(v){if(v===true)return '<span class="badge b-green">yes</span>';if(v===false)return '<span class="badge b-red">no</span>';return `<span class="badge b-warn">${v}</span>`;}
 
 // nav
@@ -166,44 +166,44 @@ document.querySelectorAll('#nav a').forEach(a=>a.onclick=()=>{
 async function loadStig(){
   const j=await get("stig/scan-report/killinchu");
   const b=j.baseline||{},h=j.hardened||{};
+  const bScore=(b.score_pct!=null?b.score_pct:null), hScore=(h.score_pct!=null?h.score_pct:null);
+  const delta=(bScore!=null&&hScore!=null)?('+'+(hScore-bScore).toFixed(2)+' from hardening layer'):'awaiting sweep';
   $('#stig-kpis').innerHTML=`
-   <div class="card"><h3>Baseline score</h3><div class="kpi">${b.score_pct}<small>/100</small></div><div class="bar"><span style="width:${b.score_pct}%"></span></div></div>
-   <div class="card"><h3>Hardened score</h3><div class="kpi" style="color:var(--teal)">${h.score_pct}<small>/100</small></div><div class="delta up">+${(h.score_pct-b.score_pct).toFixed(2)} from hardening layer</div></div>
-   <div class="card"><h3>Rules passed</h3><div class="kpi">${b.rules_passed}→${h.rules_passed}</div><div class="delta up">${j.rules_fixed_by_image_hardening} fixed</div></div>
-   <div class="card"><h3>High-sev fails</h3><div class="kpi" style="color:var(--gold)">${(b.fail_by_severity||{}).high||0}</div><div class="honest" style="margin-top:6px">FIPS/SELinux — kernel-boot, not image-layer</div></div>`;
+   <div class="card"><h3>Baseline score <span class="badge b-mute">measured</span></h3><div class="kpi">${bScore!=null?bScore:'<small>awaiting sweep</small>'}${bScore!=null?'<small>/100</small>':''}</div><div class="bar"><span style="width:${bScore!=null?bScore:0}%"></span></div></div>
+   <div class="card"><h3>Hardened score <span class="badge b-mute">measured</span></h3><div class="kpi" style="color:var(--teal)">${hScore!=null?hScore:'<small>awaiting sweep</small>'}${hScore!=null?'<small>/100</small>':''}</div><div class="delta up">${delta}</div></div>
+   <div class="card"><h3>Rules passed <span class="badge b-mute">measured</span></h3><div class="kpi">${(b.rules_passed!=null&&h.rules_passed!=null)?b.rules_passed+'→'+h.rules_passed:'<small>awaiting sweep</small>'}</div><div class="delta up">${j.rules_fixed_by_image_hardening!=null?j.rules_fixed_by_image_hardening+' fixed':'awaiting sweep'}</div></div>
+   <div class="card"><h3>High-sev fails <span class="badge b-mute">measured</span></h3><div class="kpi" style="color:var(--gold)">${(b.fail_by_severity||{}).high||0}</div><div class="honest" style="margin-top:6px">FIPS/SELinux gaps are kernel-boot, not image-layer</div></div>`;
   const tb=$('#stig-table tbody');tb.innerHTML="";
   for(const fo of FLAGSHIPS){const f=fo.k;const jr=await get("stig/scan-report/"+f);const node=(f==="vessels");
     const jb=jr.baseline||{},jh=jr.hardened||{};
     tb.innerHTML+=`<tr><td><b>${fo.label}</b></td><td class="mono" style="font-size:11px">${node?'nodejs20 (IB)':'ubi9-minimal (IB)'}</td>
-      <td class="num">${jb.score_pct??'—'}</td><td class="num" style="color:var(--teal)">${jh.score_pct??'—'}</td>
-      <td class="num">${jr.rules_fixed_by_image_hardening??'—'}</td>
+      <td class="num">${jb.score_pct!=null?jb.score_pct:'<span class="badge b-mute">awaiting sweep</span>'}</td><td class="num" style="color:var(--teal)">${jh.score_pct!=null?jh.score_pct:'<span class="badge b-mute">awaiting sweep</span>'}</td>
+      <td class="num">${jr.rules_fixed_by_image_hardening!=null?jr.rules_fixed_by_image_hardening:'<span class="badge b-mute">awaiting sweep</span>'}</td>
       <td>${node?'<span class="badge b-warn">node base pending</span>':'<span class="badge b-green">scanned</span>'}</td></tr>`;}
   $('#stig-sig').innerHTML=sigLine(j);
   $('#stig-fails').innerHTML=(j.top_high_severity_fails||[]).map(r=>`<span class="badge b-red" style="margin:3px">${r}</span>`).join('')+
     `<div class="honest">${j.honesty||''}</div>`;
 }
-/* loadIB() REMOVED — STIG Baseline per CTO P1 REJECT */</b></td><td>${f.language}</td>
-    <td class="mono" style="font-size:11px">${f.current_base}</td><td class="mono" style="font-size:11px">${f.ironbank_target_base.replace('registry1.dso.mil/ironbank/','…/')}</td>
-    <td>${badge(f.ironbank_image_pushed==='Y')}</td><td><span class="badge b-warn">${f.pull_status}</span></td></tr>`);
-  $('#ib-honest').textContent=j.honesty||'';$('#ib-sig').innerHTML=sigLine(j);}
+/* loadIB() REMOVED — STIG Baseline per CTO P1 REJECT (Charter §24). No orphaned render. */
 async function loadBB(){const j=await get("big-bang/parity");const o=j.rendered_objects||{};
-  $('#bb-kpis').innerHTML=`<div class="card"><h3>helm lint</h3><div class="kpi" style="font-size:22px;color:var(--green)">PASS</div><div class="honest">${j.lint_status||''}</div></div>
-   <div class="card"><h3>Rendered objects</h3><div class="kpi">${o.total||'—'}</div><div class="delta up">7 flagships × full set</div></div>
-   <div class="card"><h3>Chart artifact</h3><div class="kpi" style="font-size:18px">${j.packaged_artifact||'szl-0.1.0.tgz'}</div><div class="honest">helm ${j.helm_version||''}</div></div>`;
+  const lintPass=(j.lint_status||'').toLowerCase().includes('pass')||j.lint_passed===true;
+  $('#bb-kpis').innerHTML=`<div class="card"><h3>helm lint <span class="badge b-mute">measured</span></h3><div class="kpi" style="font-size:22px;color:${lintPass?'var(--green)':'var(--gold)'}">${j.lint_status?(lintPass?'PASS':'REVIEW'):'awaiting sweep'}</div><div class="honest">${j.lint_status||'no helm lint output in this runtime'}</div></div>
+   <div class="card"><h3>Rendered objects <span class="badge b-mute">measured</span></h3><div class="kpi">${o.total!=null?o.total:'<small>awaiting sweep</small>'}</div><div class="delta up">${o.total!=null?'across '+FLAGSHIPS.length+' components':'no render'}</div></div>
+   <div class="card"><h3>Chart artifact</h3><div class="kpi" style="font-size:18px">${j.packaged_artifact||'szl-0.1.0.tgz'}</div><div class="honest">helm ${j.helm_version||'version awaiting sweep'}</div></div>`;
   const tb=$('#bb-table tbody');tb.innerHTML="";(j.big_bang_compat_matrix||[]).forEach(m=>
     tb.innerHTML+=`<tr><td>${m.feature}</td><td>${badge(m.big_bang)}</td><td>${badge(m.szl)}</td></tr>`);
   $('#bb-honest').textContent=(j.install_command?'$ '+j.install_command+'  —  ':'')+(j.honesty||'');$('#bb-sig').innerHTML=sigLine(j);}
 async function loadTW(){const j=await get("tradewinds/listing");const c=j.company||{},p=j.compliance_posture||{},s=j.solution||{};
   $('#tw-company').innerHTML=`<h3>Company</h3><table>
     <tr><td>Name</td><td><b>${c.name||''}</b></td></tr>
-    <tr><td>CAGE</td><td>${c.cage_code&&c.cage_code.value?c.cage_code.value:'<span class="badge b-warn">stub — SAM.gov</span>'}</td></tr>
-    <tr><td>UEI</td><td>${c.uei&&c.uei.value?c.uei.value:'<span class="badge b-warn">stub — SAM.gov</span>'}</td></tr>
+    <tr><td>CAGE</td><td>${c.cage_code&&c.cage_code.value?c.cage_code.value:'<span class="badge b-warn">awaiting SAM.gov</span>'}</td></tr>
+    <tr><td>UEI</td><td>${c.uei&&c.uei.value?c.uei.value:'<span class="badge b-warn">awaiting SAM.gov</span>'}</td></tr>
     <tr><td>Tradewinds acct</td><td><span class="badge b-warn">founder action</span></td></tr></table>`;
   $('#tw-posture').innerHTML=`<h3>Compliance posture</h3><table>
-    <tr><td>IL5</td><td>${badge((p.il5_readiness||{}).status||'ROADMAP')}</td></tr>
-    <tr><td>STIG-Hardened</td><td>${badge((p.stig-hardened||{}).status||'ROADMAP')}</td></tr>
-    <tr><td>FedRAMP</td><td>${badge((p.fedramp||{}).status||'ROADMAP')}</td></tr>
-    <tr><td>SLSA</td><td>${badge((p.slsa||{}).status||'L1')}</td></tr>
+    <tr><td>IL5</td><td>${badge((p.il5_readiness||{}).status||'roadmap')}</td></tr>
+    <tr><td>STIG-Hardened</td><td>${badge((p['stig-hardened']||{}).status||'roadmap')}</td></tr>
+    <tr><td>FedRAMP</td><td>${badge((p.fedramp||{}).status||'roadmap')}</td></tr>
+    <tr><td>SLSA</td><td>${badge((p.slsa||{}).status||'L1 honest · L2 attested · L3 roadmap')}</td></tr>
     <tr><td>Signing</td><td class="mono" style="font-size:11px">${(p.signing||{}).keyid||'szlholdings-cosign'}</td></tr></table>`;
   $('#tw-caps').innerHTML=`<div style="font-weight:600;margin-bottom:8px">${s.name||''}</div><div class="honest" style="border-color:var(--gold)">${s.tagline||''}</div><ul>`+
     (s.capabilities||[]).map(x=>`<li style="margin:4px 0">${x}</li>`).join('')+'</ul><div class="honest">'+(j.honesty||'')+'</div>';
@@ -220,13 +220,13 @@ async function loadFW(){
   const eu=await get("eu-ai-act/article-12");$('#fw-eu').innerHTML=`<h3>EU AI Act Article 12</h3>`+
     `<div style="font-size:12px;color:var(--muted)">${eu.article||''}</div><pre style="max-height:200px;margin-top:8px">${JSON.stringify(eu.logging_mechanism||eu,null,1)}</pre>`+
     `<div class="honest">${eu.honesty||''}</div><div class="sig">${sigLine(eu)}</div>`;
-  const fr=await get("fedramp/posture");$('#fw-fedramp').innerHTML=`<h3>FedRAMP Moderate posture</h3>`+
-    `<div style="font-size:12px;color:var(--muted);margin-bottom:6px">${fr.baseline||''}</div>`+
+  const fr=await get("fedramp/posture");$('#fw-fedramp').innerHTML=`<h3>FedRAMP Moderate — roadmap posture</h3>`+
+    `<div style="font-size:12px;color:var(--muted);margin-bottom:6px">${fr.baseline||'awaiting sweep'} · roadmap item, not an authorization</div>`+
     (fr.families||[]).map(f=>`<div style="margin:4px 0">${badge(f.status==='supported'?true:f.status)} <b>${f.family}</b></div>`).join('')+
-    `<div class="honest">${fr.authorization_status||''} ${fr.honesty||''}</div><div class="sig">${sigLine(fr)}</div>`;
+    `<div class="honest">${fr.authorization_status||'not authorized — FedRAMP is a roadmap item, no ATO held'} ${fr.honesty||''}</div><div class="sig">${sigLine(fr)}</div>`;
 }
 $('#raw-pick').onchange=async e=>{$('#raw-out').textContent='…';const j=await get(e.target.value);$('#raw-out').textContent=JSON.stringify(j,null,2);};
-(async()=>{try{await loadStig();awaitawait loadBB();await loadTW();await loadFW();
+(async()=>{try{await loadStig();await loadBB();await loadTW();await loadFW();
   $('#raw-out').textContent=JSON.stringify(await get("stig/scan-report/killinchu"),null,2);}catch(e){console.error(e);}})();
 </script>
 </body>

static/uds.html

@@ -171,7 +171,7 @@
     <span class="chip"><span class="dot"></span>4 ORGANS LIVE</span>
     <span class="chip">SOLE FRONT DOOR · /api/killinchu/uds/v1/*</span>
     <span class="sp"></span>
-    <span class="doc">DOCTRINE <b>v11</b> LOCKED · 749 · 14 · 163 · SLSA L1 (honest) · Λ Conjecture (not a theorem)</span>
+    <span class="doc">DOCTRINE <b>v11</b> LOCKED · 749 · 14 · 163 · SLSA L1 honest · L2 attested · L3 roadmap · Λ Conjecture (not a theorem)</span>
   </header>
 
   <div class="body">
@@ -212,7 +212,7 @@
     <div class="col center">
       <div style="position:relative">
         <div id="cesiumContainer"></div>
-        <div class="globe-tag" id="globetag">🦅 <b>Killinchu</b> in the field · airspace <b id="gt-class">—</b> · tracks <b id="gt-tracks">simulated snapshot</b></div>
+        <div class="globe-tag" id="globetag">🦅 <b>Killinchu</b> in the field · airspace <b id="gt-class">awaiting init</b> · tracks <b id="gt-tracks">simulated snapshot</b></div>
       </div>
       <div class="killstrip">
         <div class="hd">
@@ -302,14 +302,14 @@
       .then(function(j){
         var links=(j.aggregated_receipt&&j.aggregated_receipt.chain)||[];
         renderChain(links); links.forEach(function(l){setHero(l.organ,l.verdict,l.latency_ms);});
-        ORGANS.forEach(function(o){ if(!links.filter(function(l){return l.organ===o.k;})[0]) setHero(o.k,"—"); });
+        ORGANS.forEach(function(o){ if(!links.filter(function(l){return l.organ===o.k;})[0]) setHero(o.k,"not-run"); });
         var v=j.verdict||"warn"; el("killverdict").className="v "+v; el("killverdict").textContent=v.toUpperCase();
         lastSha=j.receipt_sha256;
         var agg=j.aggregated_receipt||{}, sig=(agg.aggregate_signature||"").slice(0,42);
         var R=el("receipt"); R.style.display="block";
-        R.innerHTML=kv("mission",j.uds_mission_id||"—")+kv("verdict",(j.verdict||"—").toUpperCase())+
-          kv("sha256",j.receipt_sha256||"—","sha")+kv("signed",String(agg.aggregate_signed))+
-          kv("keyid",agg.keyid||"szlholdings-cosign")+kv("sig",sig?sig+"…":"—","sig");
+        R.innerHTML=kv("mission",j.uds_mission_id||"unavailable")+kv("verdict",(j.verdict||"warn").toUpperCase())+
+          kv("sha256",j.receipt_sha256||"unavailable","sha")+kv("signed",String(agg.aggregate_signed))+
+          kv("keyid",agg.keyid||"szlholdings-cosign")+kv("sig",sig?sig+"…":"unsigned (no key in runtime)","sig");
         el("verifyBtn").disabled=false;
         if(action==="geofence_check"){ el("gt-class").textContent="checked"; }
       })