Add evidence-bound Anatomy capability surface (#1)

- Add evidence-bound Anatomy capability surface (88830514bfa124266cd8f618a5798b5739d33dd7)

README.md

@@ -37,6 +37,36 @@ The governed-AI organ substrate shared by **a11oy** (governed-AI command body) a
 **killinchu** (maritime / drone C2 body): two bodies, one circulatory + nervous mesh,
 with the Λ heart at the center.
 
+## Evidence Bay — the proof boundary
+
+The 3D organism now has a machine-readable evidence boundary without replacing its
+visual language. Open **Evidence Bay** from the atlas to inspect every major surface
+through the same five-part contract: **Purpose · Try · Evidence · Limits · Reproduce**.
+
+- Transport, evidence, verification, and authority are separate dimensions. A
+  `RUNNING` Space is not treated as proof of model quality, freshness, or safety.
+- The deployed bundle emits a deterministic SHA-256 integrity receipt. Its local
+  verifier recomputes every declared file and deliberately returns
+  `STRUCTURAL-ONLY` because the public visualization has no signing key.
+- Live A11OY, Killinchu, and receipt-verifier dependencies are probed separately
+  and timestamped. Missing contracts stay `MISSING` or `UNAVAILABLE`; no green is
+  synthesized from an unrelated endpoint.
+- Formula claims link to their source files. This Space presents a declared
+  snapshot—it does not run Lean—and Λ remains Conjecture 1.
+- `/.well-known/szl-source.json` exposes the declared GitHub base, measured HF
+  revision, artifact-set digest, and the remaining GitHub-sync state.
+
+Machine-readable routes:
+
+| Route | Meaning |
+|---|---|
+| `/api/anatomy/v1/manifest` | Contract, state vocabulary, doctrine boundary |
+| `/api/anatomy/v1/capabilities` | Five-part capability shell and provenance |
+| `/api/anatomy/v1/evidence?refresh=1` | Fresh dependency contract probes |
+| `/api/anatomy/v1/receipt` | Deterministic local artifact receipt |
+| `POST /api/anatomy/v1/verify/receipt` | Replay local integrity; structural only |
+| `/.well-known/szl-source.json` | GitHub ↔ HF deployment-source attestation |
+
 ## What's new in v5 — conscience, sovereign mesh, verifiable receipts (evolves v4)
 
 v5 **evolves** v4 (it does not replace it): the entire v4 engine (`data.js` / `app.js`,
@@ -251,11 +281,11 @@ HTTPS at the edge. **Embedding is deliberately left enabled** (no
 `X-Frame-Options: DENY`, no `disable_embedding`) so the Space keeps working inside
 the `huggingface.co` / `*.hf.space` iframe.
 
-**CORS:** the Space's static server exposes only read-only file GETs and owns no
-application endpoints — there is no `*` ACAO to tighten on our side. Its only
-network activity is **outbound, read-only** `fetch(..., { mode:'cors',
-credentials:'omit' })` GETs to the SZL product Spaces; no key, no cookie, no
-credentials are ever sent.
+**CORS:** the evidence endpoints are public, read-only inspection contracts and
+return `Access-Control-Allow-Origin: *` so A11OY and the wider estate can ingest
+them. The only POST is a pure receipt recomputation; it cannot sign, store, fetch
+user-controlled URLs, or mutate state. Outbound dependency probes use a fixed
+allowlist in `server.py`; no key, cookie, or credential is sent.
 
 ## Verify it yourself
 
@@ -265,8 +295,12 @@ live products it depicts:
 ```bash
 # Confirm the live doctrine posture the heart reports
 curl -s https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest | jq .kernel_commit   # => "c7c0ba17"
-# Pull a signed receipt from the edge organ and verify it offline
-curl -s https://szlholdings-killinchu.hf.space/cosign.pub -o cosign.pub
+# Inspect and replay the Anatomy bundle receipt (result is STRUCTURAL-ONLY, not signed)
+curl -s https://szlholdings-anatomy.hf.space/api/anatomy/v1/receipt -o anatomy-receipt.json
+curl -s -X POST -H "Content-Type: application/json" --data-binary @anatomy-receipt.json \
+  https://szlholdings-anatomy.hf.space/api/anatomy/v1/verify/receipt | jq .verdict
+# Open the independent browser verifier for signed governed receipts
+open https://huggingface.co/spaces/SZLHOLDINGS/governed-receipt-verifier
 ```
 
 Read the thesis → [szl-papers](https://github.com/szl-holdings/szl-papers) ·
@@ -274,7 +308,7 @@ run the kernel → [lutar-lean](https://github.com/szl-holdings/lutar-lean).
 
 ---
 
-Canonical source mirror: `szl-holdings/anatomy` (GitHub) ↔ `SZLHOLDINGS/anatomy` (HF Space) · **[a-11-oy.com](https://a-11-oy.com)**
+Declared source base: `szl-holdings/anatomy` (GitHub) → `SZLHOLDINGS/anatomy` (HF Space). The live source attestation reports the exact deployment revision and whether the HF overlay still needs GitHub synchronization. · **[a-11-oy.com](https://a-11-oy.com)**
 
 <sub>v5 (evolves v4) — WILLAY conscience · sovereign mesh · buyer-verifiable receipts · 8-proof→organ map · AI-assurance · yarqa+PINN (MODELED) · GPU-sovereign stack (SUBSTRATE) · Doctrine v11 LOCKED · 749/14/163 · kernel `c7c0ba17` · 8 locked-proven + experimental CI-green tier · Λ = Conjecture 1 · Khipu Conjecture 2 open · SLSA L1 honest (static viz) · Apache-2.0</sub>
 

frontier_anatomy.js

@@ -0,0 +1,113 @@
+/* SZL Living Anatomy — Evidence Bay.
+ * Clean-room, SZL-native industrial evidence surface. Zero CDN and read-only.
+ * Transport, evidence, verification, and authority remain separate dimensions.
+ */
+(function (root) {
+  'use strict';
+  var API = '/api/anatomy/v1';
+  var state = { manifest:null, capabilities:null, evidence:null, tab:'overview', busy:false };
+  var previousFocus = null;
+
+  function esc(value) {
+    return String(value == null ? '' : value).replace(/[&<>"']/g, function (c) {
+      return {'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c];
+    });
+  }
+  function fetchJSON(url, opts, timeout) {
+    var ctl = typeof AbortController !== 'undefined' ? new AbortController() : null;
+    var timer = ctl ? setTimeout(function(){ ctl.abort(); }, timeout || 10000) : null;
+    opts = opts || {}; opts.cache = 'no-store'; if (ctl) opts.signal = ctl.signal;
+    return fetch(url, opts).then(function (r) {
+      if (timer) clearTimeout(timer);
+      return r.json().then(function (data) { return {ok:r.ok,status:r.status,data:data}; });
+    }).catch(function (error) {
+      if (timer) clearTimeout(timer);
+      return {ok:false,status:0,data:null,error:String(error && error.message || error)};
+    });
+  }
+
+  var css = [
+    '#fa-launch{position:fixed;z-index:197;right:18px;top:50%;transform:translateY(-50%);width:132px;text-align:left;background:rgba(7,11,16,.94);color:#dce8ea;border:1px solid rgba(101,169,174,.38);border-right:2px solid #63d4cf;box-shadow:0 18px 50px rgba(0,0,0,.42);padding:10px 12px;cursor:pointer;font-family:var(--font-m,monospace);text-transform:uppercase;letter-spacing:.10em;backdrop-filter:blur(14px)}',
+    '#fa-launch:hover,#fa-launch:focus-visible{border-color:#63d4cf;color:#fff;outline:none;box-shadow:0 0 0 2px rgba(99,212,207,.18),0 18px 50px rgba(0,0,0,.55)}',
+    '#fa-launch .fa-l1{display:flex;align-items:center;gap:8px;font-size:9px;font-weight:800}#fa-launch .fa-l2{display:block;margin-top:5px;color:#829195;font-size:8px;letter-spacing:.06em;text-transform:none}',
+    '.fa-signal{width:7px;height:7px;border-radius:1px;background:#63d4cf;box-shadow:0 0 12px rgba(99,212,207,.7)}',
+    '#fa-scrim{position:fixed;z-index:198;inset:0;background:rgba(0,0,0,.52);opacity:0;pointer-events:none;transition:opacity .2s ease}#fa-scrim.open{opacity:1;pointer-events:auto}',
+    '#fa-panel{position:fixed;z-index:199;right:0;top:0;height:100%;width:min(570px,100vw);display:flex;flex-direction:column;background:linear-gradient(180deg,#0b1015 0%,#070b0f 100%);color:#dce5e6;border-left:1px solid #273237;box-shadow:-30px 0 90px rgba(0,0,0,.62);transform:translateX(102%);transition:transform .24s cubic-bezier(.2,.8,.2,1);font-family:var(--font-d,system-ui);pointer-events:auto}#fa-panel.open{transform:translateX(0)}',
+    'body.fa-open #ux-tabbar,body.fa-open #ux-more-menu,body.fa-open #dissect-fab{opacity:0!important;pointer-events:none!important}',
+    '.fa-top{padding:18px 20px 14px;border-bottom:1px solid #273237;background:#0d1318}.fa-kicker{display:flex;align-items:center;gap:8px;color:#78d9d4;font:800 9px/1 var(--font-m,monospace);letter-spacing:.20em;text-transform:uppercase}.fa-kicker:before{content:"";width:18px;height:1px;background:#78d9d4}',
+    '.fa-title-row{display:flex;justify-content:space-between;align-items:flex-start;gap:16px;margin-top:10px}.fa-title{margin:0;font-size:25px;line-height:1.05;font-weight:620;letter-spacing:-.025em;color:#f2f7f7}.fa-subtitle{margin:7px 0 0;color:#8e9da0;font:11px/1.5 var(--font-m,monospace);max-width:46ch}',
+    '.fa-close{flex:0 0 auto;width:34px;height:34px;color:#aebbbd;background:#11191e;border:1px solid #334047;cursor:pointer;font-size:18px}.fa-close:hover,.fa-close:focus-visible{color:#fff;border-color:#78d9d4;outline:none}',
+    '.fa-rail{display:grid;grid-template-columns:repeat(4,1fr);border-bottom:1px solid #273237;background:#080d11}.fa-dim{padding:10px 11px;border-right:1px solid #20292e;min-width:0}.fa-dim:last-child{border-right:0}.fa-dim-label{display:block;color:#647277;font:8px/1.2 var(--font-m,monospace);letter-spacing:.12em;text-transform:uppercase}.fa-dim-value{display:block;margin-top:5px;color:#c7d2d4;font:800 9px/1.2 var(--font-m,monospace);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}',
+    '.fa-dim-value.live,.fa-dim-value.computed,.fa-dim-value.reachable,.fa-dim-value.available{color:#78d9d4}.fa-dim-value.mixed,.fa-dim-value.structural_only,.fa-dim-value.snapshot,.fa-dim-value.modeled{color:#e1bd71}.fa-dim-value.unavailable,.fa-dim-value.failed,.fa-dim-value.unreachable,.fa-dim-value.missing{color:#e37d8f}',
+    '.fa-tabs{display:flex;padding:0 20px;border-bottom:1px solid #273237;background:#0b1015;overflow:auto}.fa-tab{appearance:none;border:0;border-bottom:2px solid transparent;background:transparent;color:#718086;padding:12px 11px 10px;font:800 9px/1 var(--font-m,monospace);letter-spacing:.12em;text-transform:uppercase;cursor:pointer;white-space:nowrap}.fa-tab:hover{color:#cad5d7}.fa-tab.active{color:#78d9d4;border-bottom-color:#78d9d4}.fa-tab:focus-visible{outline:1px solid #78d9d4;outline-offset:-3px}',
+    '.fa-body{flex:1;overflow:auto;padding:20px 20px 90px;scrollbar-color:#334047 #0b1015}.fa-section{margin:0 0 24px}.fa-section-head{display:flex;align-items:center;justify-content:space-between;gap:12px;margin:0 0 11px}.fa-section h3{margin:0;color:#aebbbd;font:800 9px/1.2 var(--font-m,monospace);letter-spacing:.15em;text-transform:uppercase}.fa-rule{height:1px;flex:1;background:#273237}',
+    '.fa-lede{margin:0;color:#d6dfe0;font-size:15px;line-height:1.55;letter-spacing:-.005em}.fa-callout{border-left:2px solid #78d9d4;background:#0d1519;padding:12px 13px;margin-top:14px;color:#9daaad;font:11px/1.55 var(--font-m,monospace)}',
+    '.fa-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:8px}.fa-stat{background:#0d1318;border:1px solid #273237;padding:12px;min-height:88px}.fa-stat .k{color:#6f7e82;font:8px/1.2 var(--font-m,monospace);letter-spacing:.12em;text-transform:uppercase}.fa-stat .v{margin-top:9px;color:#edf3f3;font:800 12px/1.2 var(--font-m,monospace)}.fa-stat p{margin:8px 0 0;color:#79888c;font-size:10px;line-height:1.4}',
+    '.fa-actions{display:flex;flex-wrap:wrap;gap:7px;margin-top:14px}.fa-btn,.fa-link{display:inline-flex;align-items:center;justify-content:center;min-height:34px;padding:0 11px;border:1px solid #35444a;background:#10181d;color:#bdc9cb;text-decoration:none;cursor:pointer;font:800 9px/1 var(--font-m,monospace);letter-spacing:.08em;text-transform:uppercase}.fa-btn.primary{border-color:#2b8c8a;background:#12302f;color:#9ff1ec}.fa-btn:hover,.fa-link:hover,.fa-btn:focus-visible,.fa-link:focus-visible{border-color:#78d9d4;color:#fff;outline:none}.fa-btn:disabled{opacity:.45;cursor:wait}',
+    '.fa-cap{border:1px solid #273237;background:#0b1115;margin:0 0 9px}.fa-cap summary{list-style:none;display:grid;grid-template-columns:30px 1fr auto;align-items:center;gap:10px;padding:12px 13px;cursor:pointer}.fa-cap summary::-webkit-details-marker{display:none}.fa-cap summary:hover{background:#0f171c}.fa-num{color:#536267;font:800 9px/1 var(--font-m,monospace)}.fa-cap-name{color:#e4ebec;font-size:13px;font-weight:650}.fa-cap-id{display:block;margin-top:3px;color:#617075;font:8px/1.2 var(--font-m,monospace)}',
+    '.fa-badge{display:inline-block;border:1px solid #3c4a4f;color:#8e9c9f;padding:3px 6px;font:800 8px/1 var(--font-m,monospace);letter-spacing:.06em;text-transform:uppercase}.fa-badge.live,.fa-badge.computed,.fa-badge.available,.fa-badge.pass{border-color:#286d6b;color:#78d9d4;background:rgba(40,109,107,.13)}.fa-badge.snapshot,.fa-badge.mixed,.fa-badge.modeled,.fa-badge.structural-only,.fa-badge.structural_only,.fa-badge.unavailable,.fa-badge.read_only{border-color:#685937;color:#e1bd71;background:rgba(104,89,55,.12)}.fa-badge.fail,.fa-badge.failed,.fa-badge.missing,.fa-badge.unreachable{border-color:#663640;color:#e37d8f;background:rgba(102,54,64,.12)}',
+    '.fa-cap-body{border-top:1px solid #273237;padding:13px}.fa-field{display:grid;grid-template-columns:86px 1fr;gap:12px;padding:8px 0;border-bottom:1px solid #1e272b}.fa-field:last-child{border-bottom:0}.fa-field dt{color:#657378;font:800 8px/1.4 var(--font-m,monospace);letter-spacing:.12em;text-transform:uppercase}.fa-field dd{margin:0;color:#aebabc;font-size:11px;line-height:1.52;min-width:0}.fa-field ul,.fa-field ol{margin:0;padding-left:17px}.fa-field li+li{margin-top:5px}',
+    '.fa-code{display:block;margin-top:5px;padding:8px;background:#070b0e;border:1px solid #202b30;color:#8ed6d2;font:9px/1.5 var(--font-m,monospace);word-break:break-all}.fa-refs{display:flex;flex-wrap:wrap;gap:5px;margin-top:7px}.fa-ref{color:#8ec6c4;text-decoration:none;border-bottom:1px solid #31504f;font:9px/1.4 var(--font-m,monospace)}.fa-ref:hover{color:#fff;border-color:#78d9d4}',
+    '.fa-dep{display:grid;grid-template-columns:1fr auto;gap:10px;padding:12px 0;border-bottom:1px solid #20292e}.fa-dep:last-child{border-bottom:0}.fa-dep-name{color:#d8e1e2;font-size:12px;font-weight:650}.fa-dep-purpose{display:block;margin-top:4px;color:#718084;font-size:10px;line-height:1.4}.fa-dep-meta{display:block;margin-top:5px;color:#4f6065;font:8px/1.3 var(--font-m,monospace);word-break:break-all}.fa-dep-state{text-align:right;min-width:88px}.fa-http{display:block;margin-top:5px;color:#66757a;font:8px/1 var(--font-m,monospace)}',
+    '.fa-output{margin-top:12px;background:#070b0e;border:1px solid #273237;padding:11px;color:#9caaad;font:10px/1.55 var(--font-m,monospace);word-break:break-word}.fa-output.good{border-color:#286d6b;color:#9be2de}.fa-output.bad{border-color:#663640;color:#e3a0ab}',
+    '.fa-endpoint{padding:12px 0;border-bottom:1px solid #20292e}.fa-endpoint:last-child{border-bottom:0}.fa-endpoint a{color:#c8d5d6;text-decoration:none;font:700 10px/1.4 var(--font-m,monospace)}.fa-endpoint a:hover{color:#78d9d4}.fa-endpoint p{margin:5px 0 0;color:#6f7d81;font-size:10px;line-height:1.45}',
+    '.fa-loading{padding:28px 0;color:#6e7b7f;font:10px/1.5 var(--font-m,monospace);text-transform:uppercase;letter-spacing:.12em}.fa-loading:before{content:"";display:inline-block;width:7px;height:7px;margin-right:9px;background:#e1bd71;animation:fa-pulse .9s ease-in-out infinite}@keyframes fa-pulse{50%{opacity:.25}}',
+    '@media(max-width:760px){#fa-launch{right:8px;top:auto;bottom:76px;transform:none;width:auto;padding:9px 11px}#fa-launch .fa-l2{display:none}#fa-panel{width:100vw}.fa-grid{grid-template-columns:1fr}.fa-body{padding:16px 15px 100px}.fa-top{padding:16px 15px 13px}.fa-tabs{padding:0 10px}.fa-rail{grid-template-columns:repeat(2,1fr)}.fa-dim:nth-child(2){border-right:0}.fa-dim:nth-child(-n+2){border-bottom:1px solid #20292e}.fa-field{grid-template-columns:72px 1fr}}',
+    '@media(prefers-reduced-motion:reduce){#fa-panel,#fa-scrim{transition:none}.fa-loading:before{animation:none}}'
+  ].join('');
+
+  function injectStyle(){ if(document.getElementById('fa-style'))return; var s=document.createElement('style');s.id='fa-style';s.textContent=css;document.head.appendChild(s); }
+  function badge(value){var label=String(value||'UNKNOWN');return '<span class="fa-badge '+esc(label.toLowerCase())+'">'+esc(label.replace(/_/g,'-'))+'</span>';}
+  function dim(label,value){var v=String(value||'UNKNOWN');return '<div class="fa-dim"><span class="fa-dim-label">'+esc(label)+'</span><span class="fa-dim-value '+esc(v.toLowerCase())+'">'+esc(v.replace(/_/g,'-'))+'</span></div>';}
+  function list(values,ordered){if(!Array.isArray(values)||!values.length)return '<span>None declared.</span>';var tag=ordered?'ol':'ul';return '<'+tag+'>'+values.map(function(v){return '<li>'+esc(v)+'</li>';}).join('')+'</'+tag+'>';}
+  function links(values){if(!Array.isArray(values)||!values.length)return '';return '<div class="fa-refs">'+values.map(function(url,i){return '<a class="fa-ref" href="'+esc(url)+'" target="_blank" rel="noopener">source '+(i+1)+' ↗</a>';}).join('')+'</div>';}
+  function sectionHead(title){return '<div class="fa-section-head"><h3>'+esc(title)+'</h3><span class="fa-rule"></span></div>';}
+
+  function updateRail(){
+    var d=state.manifest&&state.manifest.state_dimensions||{};
+    if(state.evidence)d=Object.assign({},d,{evidence_state:state.evidence.evidence_state,verification_state:state.evidence.verification_state==='AVAILABLE'?'AVAILABLE':d.verification_state});
+    var rail=document.getElementById('fa-rail');if(rail)rail.innerHTML=dim('transport',d.transport_state)+dim('evidence',d.evidence_state)+dim('verification',d.verification_state)+dim('authority',d.authority_state);
+    var sub=document.querySelector('#fa-launch .fa-l2');if(sub)sub.textContent=(d.evidence_state||'loading')+' evidence · read-only';
+  }
+  function overviewHTML(){
+    var m=state.manifest||{},d=m.state_dimensions||{};
+    return '<section class="fa-section">'+sectionHead('Mission contract')+'<p class="fa-lede">'+esc(m.purpose||'Read-only spatial evidence map of the governed-agent substrate.')+'</p><div class="fa-callout">One green light is not enough. Transport, evidence, verification, and authority are independent dimensions; this console refuses to collapse them into a single “healthy” claim.</div></section>'+
+      '<section class="fa-section">'+sectionHead('Current posture')+'<div class="fa-grid"><div class="fa-stat"><div class="k">Transport</div><div class="v">'+esc(d.transport_state||'—')+'</div><p>Can this Space answer a request?</p></div><div class="fa-stat"><div class="k">Evidence</div><div class="v">'+esc(state.evidence&&state.evidence.evidence_state||d.evidence_state||'—')+'</div><p>Live, computed, snapshot, modeled, or unavailable?</p></div><div class="fa-stat"><div class="k">Verification</div><div class="v">'+esc(d.verification_state||'—')+'</div><p>The local receipt is unsigned and structural-only.</p></div><div class="fa-stat"><div class="k">Authority</div><div class="v">'+esc(d.authority_state||'—')+'</div><p>Anatomy reads and explains; it cannot actuate.</p></div></div><div class="fa-actions"><button class="fa-btn primary" id="fa-verify-bundle">Verify deployed bundle</button><button class="fa-btn" id="fa-refresh">Refresh live evidence</button><a class="fa-link" href="/.well-known/szl-source.json" target="_blank" rel="noopener">Source attestation ↗</a></div><div id="fa-overview-output" aria-live="polite"></div></section>'+
+      '<section class="fa-section">'+sectionHead('Honest boundary')+list(m.limits||[],false)+'</section>';
+  }
+  function capabilitiesHTML(){
+    var rows=state.capabilities&&state.capabilities.capabilities||[];if(!rows.length)return '<div class="fa-loading">Capability contract unavailable</div>';
+    return '<section class="fa-section">'+sectionHead('Five-part capability shell')+'<p class="fa-lede" style="font-size:12px">Every surface declares Purpose, Try, Evidence, Limits, and Reproduce before it earns a place in the body.</p></section>'+rows.map(function(cap,i){
+      var ev=cap.evidence||{},t=cap.try||{},r=cap.reproduce||{};
+      return '<details class="fa-cap"'+(i===0?' open':'')+'><summary><span class="fa-num">'+String(i+1).padStart(2,'0')+'</span><span class="fa-cap-name">'+esc(cap.name)+'<span class="fa-cap-id">'+esc(cap.id)+'</span></span>'+badge(ev.state)+'</summary><div class="fa-cap-body"><dl><div class="fa-field"><dt>Purpose</dt><dd>'+esc(cap.purpose)+'</dd></div><div class="fa-field"><dt>Try</dt><dd>'+esc(t.action||'')+'<code class="fa-code">'+esc((t.method||'')+' '+(t.path||''))+'</code></dd></div><div class="fa-field"><dt>Evidence</dt><dd>'+badge(ev.state)+' '+esc(ev.basis||'')+'</dd></div><div class="fa-field"><dt>Limits</dt><dd>'+list(cap.limits,false)+'</dd></div><div class="fa-field"><dt>Reproduce</dt><dd>'+list(r.steps,true)+'</dd></div><div class="fa-field"><dt>Authority</dt><dd>'+badge(cap.authority_state)+'</dd></div><div class="fa-field"><dt>Formula refs</dt><dd>'+(cap.formula_refs&&cap.formula_refs.length?esc(cap.formula_refs.join(' · ')):'None — visual capability only.')+links(cap.provenance)+'</dd></div></dl></div></details>';
+    }).join('');
+  }
+  function evidenceHTML(){
+    if(!state.evidence)return '<div class="fa-loading">Measuring declared dependencies</div>';var e=state.evidence;
+    return '<section class="fa-section">'+sectionHead('Measured dependency plane')+'<p class="fa-lede" style="font-size:12px">'+esc(e.scope)+'</p><div class="fa-callout">Observed '+esc(e.observed_at)+' · '+esc(e.summary&&e.summary.live)+'/'+esc(e.summary&&e.summary.total)+' declared contracts available.</div>'+(e.dependencies||[]).map(function(dep){return '<div class="fa-dep"><div><span class="fa-dep-name">'+esc(dep.id)+'</span><span class="fa-dep-purpose">'+esc(dep.purpose)+'</span><span class="fa-dep-meta">'+esc(dep.method+' '+dep.url)+'</span></div><div class="fa-dep-state">'+badge(dep.contract_state)+'<span class="fa-http">HTTP '+esc(dep.http_status==null?'—':dep.http_status)+'</span></div></div>';}).join('')+'<div class="fa-actions"><button class="fa-btn primary" id="fa-refresh">Re-probe now</button><a class="fa-link" href="https://huggingface.co/spaces/SZLHOLDINGS/governed-receipt-verifier" target="_blank" rel="noopener">Independent verifier ↗</a></div></section><section class="fa-section">'+sectionHead('Interpretation limits')+list(e.limits,false)+'</section>';
+  }
+  function reproduceHTML(){
+    var ep=state.manifest&&state.manifest.endpoints||{},desc={manifest:'Contract, vocabulary, doctrine boundary, and limits.',capabilities:'Purpose / Try / Evidence / Limits / Reproduce for each capability.',evidence:'Fresh server-side probes of declared upstream contracts.',receipt:'Deterministic SHA-256 receipt over the deployed artifact set.',verify_receipt:'POST a local anatomy receipt; structural integrity only.',source:'GitHub base, measured HF revision, artifact digest, and alignment state.'};
+    return '<section class="fa-section">'+sectionHead('Machine-readable contract')+Object.keys(ep).map(function(k){var p=ep[k];return '<div class="fa-endpoint"><a href="'+esc(p.replace('?refresh=1',''))+'" target="_blank" rel="noopener">'+esc(p)+' ↗</a><p>'+esc(desc[k]||'')+'</p></div>';}).join('')+'</section><section class="fa-section">'+sectionHead('Receipt replay')+'<p class="fa-lede" style="font-size:12px">Generate the receipt, then submit the unchanged object to the local verifier. A byte or digest mutation must produce FAIL.</p><code class="fa-code">GET /api/anatomy/v1/receipt<br>POST /api/anatomy/v1/verify/receipt</code><div class="fa-actions"><button class="fa-btn primary" id="fa-verify-bundle">Run replay now</button><a class="fa-link" href="https://github.com/szl-holdings/anatomy" target="_blank" rel="noopener">GitHub source ↗</a></div><div id="fa-overview-output" aria-live="polite"></div></section>';
+  }
+  function bodyHTML(){if(!state.manifest||!state.capabilities)return '<div class="fa-loading">Loading anatomy contract</div>';if(state.tab==='capabilities')return capabilitiesHTML();if(state.tab==='evidence')return evidenceHTML();if(state.tab==='reproduce')return reproduceHTML();return overviewHTML();}
+  function render(){updateRail();var body=document.getElementById('fa-body');if(body)body.innerHTML=bodyHTML();document.querySelectorAll('.fa-tab').forEach(function(b){b.classList.toggle('active',b.getAttribute('data-tab')===state.tab);b.setAttribute('aria-selected',b.classList.contains('active')?'true':'false');});wireBodyActions();}
+  function setOutput(html,kind){var out=document.getElementById('fa-overview-output');if(out)out.innerHTML='<div class="fa-output '+esc(kind||'')+'">'+html+'</div>';}
+  function verifyBundle(){
+    if(state.busy)return;state.busy=true;setOutput('Hashing the deployed artifact set and replaying the receipt…','');
+    fetchJSON(API+'/receipt').then(function(res){if(!res.ok)return res;return fetchJSON(API+'/verify/receipt',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(res.data)});}).then(function(res){state.busy=false;if(!res||!res.ok||!res.data){setOutput('Verifier unavailable. No verdict was inferred.','bad');return;}var checks=(res.data.checks||[]).map(function(c){return esc(c.name)+'='+esc(c.status);}).join(' · ');setOutput('<strong>'+esc(res.data.verdict)+'</strong><br>'+checks+'<br><span style="color:#66777a">'+esc(res.data.limits)+'</span>',res.data.verdict==='FAIL'?'bad':'good');});
+  }
+  function loadEvidence(force){fetchJSON(API+'/evidence'+(force?'?refresh=1':''),{},16000).then(function(res){state.evidence=res.ok?res.data:{evidence_state:'UNAVAILABLE',verification_state:'UNAVAILABLE',scope:'Evidence endpoint unavailable.',summary:{live:0,total:0},dependencies:[],limits:['No dependency state was inferred.']};render();});}
+  function wireBodyActions(){document.querySelectorAll('#fa-refresh').forEach(function(b){b.addEventListener('click',function(){b.disabled=true;if(state.tab==='evidence'){state.evidence=null;render();}loadEvidence(true);});});document.querySelectorAll('#fa-verify-bundle').forEach(function(b){b.addEventListener('click',verifyBundle);});}
+  function open(){previousFocus=document.activeElement;document.body.classList.add('fa-open');document.getElementById('fa-panel').classList.add('open');document.getElementById('fa-panel').setAttribute('aria-hidden','false');document.getElementById('fa-scrim').classList.add('open');document.getElementById('fa-launch').setAttribute('aria-expanded','true');document.getElementById('fa-close').focus();}
+  function close(){document.body.classList.remove('fa-open');document.getElementById('fa-panel').classList.remove('open');document.getElementById('fa-panel').setAttribute('aria-hidden','true');document.getElementById('fa-scrim').classList.remove('open');document.getElementById('fa-launch').setAttribute('aria-expanded','false');if(previousFocus&&previousFocus.focus)previousFocus.focus();}
+  function mount(){
+    if(document.getElementById('fa-panel'))return;injectStyle();
+    var launch=document.createElement('button');launch.id='fa-launch';launch.type='button';launch.setAttribute('aria-controls','fa-panel');launch.setAttribute('aria-expanded','false');launch.innerHTML='<span class="fa-l1"><i class="fa-signal"></i>Evidence bay</span><span class="fa-l2">loading contract · read-only</span>';
+    var scrim=document.createElement('div');scrim.id='fa-scrim';var panel=document.createElement('aside');panel.id='fa-panel';panel.setAttribute('role','dialog');panel.setAttribute('aria-modal','false');panel.setAttribute('aria-hidden','true');panel.setAttribute('aria-label','Anatomy evidence bay');panel.innerHTML='<header class="fa-top"><div class="fa-kicker">Anatomy contract 1.0</div><div class="fa-title-row"><div><h2 class="fa-title">Evidence Bay</h2><p class="fa-subtitle">Purpose · Try · Evidence · Limits · Reproduce</p></div><button class="fa-close" id="fa-close" type="button" aria-label="Close evidence bay">×</button></div></header><div class="fa-rail" id="fa-rail">'+dim('transport','LOADING')+dim('evidence','LOADING')+dim('verification','LOADING')+dim('authority','READ_ONLY')+'</div><nav class="fa-tabs" role="tablist" aria-label="Evidence Bay sections"><button class="fa-tab active" role="tab" data-tab="overview">Overview</button><button class="fa-tab" role="tab" data-tab="capabilities">Capabilities</button><button class="fa-tab" role="tab" data-tab="evidence">Evidence</button><button class="fa-tab" role="tab" data-tab="reproduce">Reproduce</button></nav><main class="fa-body" id="fa-body"><div class="fa-loading">Loading anatomy contract</div></main>';
+    document.body.appendChild(launch);document.body.appendChild(scrim);document.body.appendChild(panel);launch.addEventListener('click',open);scrim.addEventListener('click',close);document.getElementById('fa-close').addEventListener('click',close);document.querySelectorAll('.fa-tab').forEach(function(b){b.addEventListener('click',function(){state.tab=b.getAttribute('data-tab');render();document.getElementById('fa-body').scrollTop=0;});});document.addEventListener('keydown',function(e){if(e.key==='Escape'&&panel.classList.contains('open'))close();});
+    Promise.all([fetchJSON(API+'/manifest'),fetchJSON(API+'/capabilities')]).then(function(results){if(results[0].ok)state.manifest=results[0].data;if(results[1].ok)state.capabilities=results[1].data;render();loadEvidence(false);});
+  }
+  root.SZL_ANATOMY_EVIDENCE_BAY={mount:mount,open:open,close:close,refresh:function(){loadEvidence(true);},verifyBundle:verifyBundle};
+  if(document.readyState==='loading')document.addEventListener('DOMContentLoaded',mount);else mount();
+})(typeof window!=='undefined'?window:this);

index.html

@@ -2,6 +2,7 @@
 <html lang="en">
 <head>
 <meta charset="utf-8" />
+<link rel="icon" href="./favicon.svg" type="image/svg+xml" />
 <!-- SAFE-NOW hardening (R2). This Space is sdk:static on HF; HF's static serving
      only honors COOP/COEP/CORP via README custom_headers and does NOT pass through
      arbitrary response headers (no _headers file, no CSP/HSTS/Referrer at the edge).
@@ -18,8 +19,8 @@
 <meta http-equiv="X-Content-Type-Options" content="nosniff" />
 <meta name="referrer" content="strict-origin-when-cross-origin" />
 <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2" />
-<title>SZL Agent Body v5 (evolves v4) — Living Anatomy · WILLAY conscience · Sovereign Mesh · buyer-verifiable receipts</title>
-<meta name="description" content="The SZL Agent Body v4 — a genuine anatomical organism. Two bodies (a11oy + killinchu) sharing one circulatory (YAWAR receipt bus) + nervous (span lineage) mesh, with proven formulas flowing through the organs and the Λ heart beating at the center." />
+<title>SZL Living Anatomy — Governed Agent Body · Evidence Bay</title>
+<meta name="description" content="A navigable governed-agent anatomy with an evidence-bound capability contract: purpose, live or snapshot evidence, limits, provenance, receipts, and reproducible verification." />
 <style>
   /* ============ DESIGN TOKENS — cinematic dark scientific ============ */
   :root{
@@ -1763,6 +1764,7 @@
   <script src="./app.js"></script>
   <!-- v5 (evolves v4): WILLAY · Sovereign Mesh · buyer-verifiable receipt · 8-proof map · assurance · physics. Additive, read-only, 0-CDN. -->
   <script src="./v5_organs.js"></script>
+  <!-- Evidence Bay: industrial proof boundary + five-part capability contract. Read-only, zero CDN. -->
+  <script src="./frontier_anatomy.js"></script>
 </body>
 </html>
-

lib/szl_verify_widget.js

@@ -3,8 +3,8 @@
  * ----------------------------------------------------------------------------
  * 0 runtime CDN · system fonts only · AbortController · honest fallback.
  * Calls the REAL a11oy verify endpoint and renders its REAL honest verdict.
- *   POST {base}/api/a11oy/v1/verify   body = a receipt / DSSE envelope / in-toto stmt
- *   GET  {base}/api/a11oy/v1/verify?url=<public receipt url>
+ *   POST {base}/api/a11oy/v1/verify/receipt   body = {envelope: <DSSE envelope>}
+ *   Public receipt URLs are fetched in the browser and submitted to that endpoint.
  *
  * Doctrine v11: this widget NEVER fabricates a verdict. It shows exactly what
  * the server returns (verdict: VERIFIED | STRUCTURAL-ONLY | FAILED | UNRECOGNISED).
@@ -19,14 +19,13 @@
 (function (global) {
   'use strict';
 
-  var DEFAULT_BASE = 'https://a11oy.net'; // same fabric the estate already talks to
+  var DEFAULT_BASE = 'https://szlholdings-a11oy.hf.space';
+  var VERIFY_PATH  = '/api/a11oy/v1/verify/receipt';
   var TIMEOUT_MS   = 12000;
   var SAMPLE = {
-    _type: 'https://in-toto.io/Statement/v1',
-    subject: [{ name: 'szl-lake/homflyreceipt_gate',
-      digest: { sha256: '0a2d153d81c00688b576e5a012ae6117465639807456d1bb72eb590cac3b1e9d' } }],
-    predicateType: 'https://szlholdings.com/attestations/innovation/v1',
-    predicate: { note: 'paste your own receipt JSON here, or a public receipt URL' }
+    payloadType: 'application/vnd.szl.receipt+json',
+    payload: 'eyJib2R5Ijp7ImNsYWltIjoic3psLXdpZGdldC1jb250cmFjdCIsIm9yZ2FuIjoicHVibGljLXZlcmlmaWVyLXdpZGdldCIsInZhbHVlIjoic2FtcGxlIn0sInBheWxvYWRfZGlnZXN0IjoiMzU0YWZlZDZlMWQyODVjNDgxZTg4OWFlZGQzZDA4ODA3YzhhYTc5MjkyM2IzMThhMTc0YjNiNTg1OWI2N2FhMSJ9',
+    signatures: []
   };
 
   function esc(s){ return String(s==null?'':s).replace(/[&<>"]/g,function(c){
@@ -55,10 +54,10 @@
   /* map an HONEST verdict string -> {label, cls, advisory} ---------------- */
   function verdictView(v){
     var s = String(v||'').toUpperCase();
-    if(s==='VERIFIED')        return {label:'VERIFIED',        cls:'ok',   advisory:false};
-    if(s==='STRUCTURAL-ONLY') return {label:'STRUCTURAL-ONLY', cls:'warn', advisory:true};
-    if(s==='FAILED')          return {label:'FAILED',          cls:'fail', advisory:false};
-    if(s==='UNRECOGNISED')    return {label:'UNRECOGNISED',    cls:'muted',advisory:false};
+    if(s==='PASS'||s==='VERIFIED') return {label:s, cls:'ok', advisory:false};
+    if(s==='PARTIAL'||s==='STRUCTURAL-ONLY'||s==='INCONCLUSIVE') return {label:s, cls:'warn', advisory:true};
+    if(s==='FAIL'||s==='FAILED'||s==='MISMATCH') return {label:'FAIL', cls:'fail', advisory:false};
+    if(s==='NO_INPUT'||s==='UNRECOGNISED') return {label:s, cls:'muted', advisory:false};
     return {label: s||'—', cls:'muted', advisory:false};
   }
 
@@ -66,9 +65,10 @@
     if(!Array.isArray(checks) || !checks.length) return '';
     var rows = checks.map(function(c){
       var st = String(c.status||'').toLowerCase();
-      var cls = st==='pass' ? 'ok' : (st==='fail' ? 'fail' : 'muted');
+      var cls = (st==='pass'||st==='verified') ? 'ok' :
+        ((st==='fail'||st==='mismatch') ? 'fail' : (st==='unsigned-local' ? 'warn' : 'muted'));
       return '<li class="szlv-chk"><span class="szlv-pill '+cls+'">'+esc(c.status||'?')+'</span>'+
-             '<code>'+esc(c.name||'check')+'</code>'+
+             '<code>'+esc(c.name||c.check||'check')+'</code>'+
              (c.detail ? '<span class="szlv-det">'+esc(c.detail)+'</span>' : '')+'</li>';
     }).join('');
     return '<ul class="szlv-checks">'+rows+'</ul>';
@@ -96,7 +96,7 @@
     var kinds  = (Array.isArray(d.kinds)&&d.kinds.length)
       ? '<p class="szlv-kinds">recognised as: '+d.kinds.map(esc).join(', ')+'</p>' : '';
     var checks = renderChecks(d.checks);
-    var foot = '<p class="szlv-foot">engine '+esc(d.engine_version||'?')+
+    var foot = '<p class="szlv-foot">engine '+esc(d.engine_version||d.service||'?')+
       ' · doctrine '+esc((d.doctrine&&d.doctrine.version)||'v11')+
       ' · Λ='+esc((d.doctrine&&d.doctrine.lambda)||'Conjecture 1')+
       (d.verified_at ? ' · '+esc(d.verified_at) : '')+
@@ -132,6 +132,7 @@
     '.szlv-pill{font-size:10px;text-transform:uppercase;letter-spacing:.4px;padding:2px 6px;border-radius:4px;font-weight:700}',
     '.szlv-pill.ok{background:rgba(109,170,69,.18);color:#6daa45}',
     '.szlv-pill.fail{background:rgba(209,99,167,.18);color:#d163a7}',
+    '.szlv-pill.warn{background:rgba(232,175,52,.14);color:#e8af34}',
     '.szlv-pill.muted{background:#2a2927;color:#797876}',
     '.szlv-chk code{color:#cdccca}.szlv-det{color:#797876;font-size:11px}',
     '.szlv-foot{font-size:10px;color:#5a5957;margin:10px 0 0;line-height:1.5}',
@@ -180,17 +181,23 @@
 
     go.addEventListener('click', function(){
       go.disabled = true;
-      out.innerHTML = '<span class="szlv-load">calling <code>'+esc(base)+'/api/a11oy/v1/verify</code>\u2026</span>';
+      out.innerHTML = '<span class="szlv-load">calling <code>'+esc(base+VERIFY_PATH)+'</code>\u2026</span>';
       var p, u = url.value.trim(), body = ta.value.trim();
       if(u){
-        p = pull(base+'/api/a11oy/v1/verify?url='+encodeURIComponent(u), {method:'GET'});
+        p = pull(u, {method:'GET'}).then(function(remote){
+          if(!remote.ok || !remote.data) return remote;
+          var env = remote.data.envelope || remote.data.dsse || remote.data;
+          return pull(base+VERIFY_PATH, {method:'POST', headers:{'Content-Type':'application/json'},
+            body: JSON.stringify({envelope:env})});
+        });
       } else if(body){
         var parsed = null;
         try{ parsed = JSON.parse(body); }catch(e){
           out.innerHTML = '<div class="szlv-state muted">input is not valid JSON — paste a receipt object or use a URL.</div>';
           go.disabled = false; return;
         }
-        p = pull(base+'/api/a11oy/v1/verify', {method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(parsed)});
+        var requestBody = parsed.envelope ? parsed : {envelope:parsed};
+        p = pull(base+VERIFY_PATH, {method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(requestBody)});
       } else {
         out.innerHTML = '<div class="szlv-state muted">paste a receipt JSON, or enter a public receipt URL.</div>';
         go.disabled = false; return;
@@ -201,7 +208,7 @@
     return { reload:function(){}, base:base };
   }
 
-  var api = { mount: mount, pull: pull, _sample: SAMPLE, version: '1.0.0' };
+  var api = { mount: mount, pull: pull, _sample: SAMPLE, version: '1.1.0' };
   if (typeof module!=='undefined' && module.exports) module.exports = api;
   global.SZLVerify = api;
 })(typeof window!=='undefined' ? window : this);

qa_yarqa.js

@@ -102,7 +102,10 @@ async function runViewport(browser, url, vp){
   await new Promise(rr=>server.listen(0,rr));
   const port = server.address().port;
   const url = `http://localhost:${port}/index.html`;
-  const browser = await chromium.launch({ args:['--use-gl=angle','--use-angle=swiftshader','--ignore-gpu-blocklist','--enable-unsafe-swiftshader'] });
+  const browser = await chromium.launch({
+    executablePath: process.env.PLAYWRIGHT_EXECUTABLE_PATH || undefined,
+    args:['--use-gl=angle','--use-angle=swiftshader','--ignore-gpu-blocklist','--enable-unsafe-swiftshader']
+  });
 
   let totalErrors = 0;
   for(const vp of VIEWPORTS){

server.py

@@ -1,54 +1,235 @@
 #!/usr/bin/env python3
-"""Hardened static file server for the SZL Living Anatomy Space.
-
-Serves exactly the same files as the previous inline `http.server` (same /app
-directory, same port 7860) but adds security response headers on every response,
-while PRESERVING the Cross-Origin-Opener-Policy / Cross-Origin-Resource-Policy
-this Space already emitted (do not regress the embed posture).
-
-Additive / non-breaking:
-  - Cross-Origin-Opener-Policy   same-origin-allow-popups   (PRESERVED, unchanged)
-  - Cross-Origin-Resource-Policy cross-origin               (PRESERVED, unchanged)
-  - Content-Security-Policy      (the exact origin allow-list the page already
-                                  enforces via its own <meta http-equiv> CSP, now
-                                  also as an HTTP header, plus frame-ancestors)
-  - Strict-Transport-Security    max-age=31536000; includeSubDomains
-  - X-Content-Type-Options       nosniff
-  - Referrer-Policy              strict-origin-when-cross-origin
-  - Server                       clean "szl" banner (suppresses SimpleHTTP/Python
-                                  version disclosure)
-
-The CSP mirrors the page's own vetted meta CSP: it keeps 'unsafe-inline' for
-script/style (the 3D atlas ships heavy inline JS + inline styles + a WebGL
-canvas), allows data:/blob: images, and an explicit connect-src allow-list for
-the live read-only fetches to a11oy / killinchu / amaru / sentra HF spaces, so
-the anatomy scene and live HUD keep working.
-
-Health contract:
-  - GET /healthz  -> 200 application/json health payload matching the fleet
-                     monitor contract (up{job="szl-flagship"} scrape target).
-                     Additive; all other paths fall through to static serving
-                     unchanged.
+"""SZL Living Anatomy server and evidence contract.
+
+The visual bundle remains static and read-only.  This thin server adds an honest
+machine-readable boundary around it:
+
+* ``/healthz`` reports transport health only.
+* ``/.well-known/szl-source.json`` identifies the GitHub source and live HF
+  revision without pretending that the two revisions are identical.
+* ``/api/anatomy/v1/manifest`` describes the contract and status vocabulary.
+* ``/api/anatomy/v1/capabilities`` exposes Purpose / Try / Evidence / Limits /
+  Reproduce for each major surface.
+* ``/api/anatomy/v1/evidence`` separately probes the live dependencies.
+* ``/api/anatomy/v1/receipt`` hashes the files that make up the bundle.
+* ``POST /api/anatomy/v1/verify/receipt`` recomputes that local integrity
+  receipt.  The result is deliberately ``STRUCTURAL-ONLY`` because this Space
+  has no signing key; it never upgrades an unsigned receipt to cryptographically
+  VERIFIED.
+
+No endpoint mutates state, signs data, runs a model, or claims that reachability
+proves model quality.  Lambda remains Conjecture 1 and the Space does not execute
+Lean; formal claims are presented as a declared, linked snapshot.
 """
+
+from __future__ import annotations
+
 import functools
+import hashlib
 import json
+import os
+import threading
+import time
+import urllib.error
+import urllib.request
+from concurrent.futures import ThreadPoolExecutor
+from datetime import datetime, timezone
 from http.server import SimpleHTTPRequestHandler, ThreadingHTTPServer
+from pathlib import Path
+from urllib.parse import parse_qs, urlsplit
+
+
+PORT = int(os.environ.get("PORT", "7860"))
+# Resolve from this file, not from a generic /app existence check.  The Docker
+# image places server.py in /app already; local verification must never
+# accidentally serve an unrelated host-level /app directory.
+DIRECTORY = Path(os.environ.get("ANATOMY_ROOT", str(Path(__file__).resolve().parent))).resolve()
+SPACE_ID = "SZLHOLDINGS/anatomy"
+SOURCE_REPOSITORY = "szl-holdings/anatomy"
+SOURCE_BASE_COMMIT = "9847b3031c1aacdcee9aa8e37ae33d573737a5c4"
+DOCTRINE = "v11"
+LOCK = "749/14/163"
+KERNEL_COMMIT = "c7c0ba17"
+LOCKED_FORMULAS = ["F1", "F4", "F7", "F11", "F12", "F18", "F19", "F22"]
 
-PORT = 7860
-DIRECTORY = "/app"
-
-# Doctrine v11 — LOCKED: 749 / 14 / 163 · locked_at c7c0ba17.
-HEALTHZ_PAYLOAD = {
-    "status": "ok",
-    "organ": "anatomy",
-    "service": "anatomy-space",
-    "doctrine": "v11",
-    "lock": "749/14/163",
-    "commit": "c7c0ba17",
-    "role": "visualization",  # embeddable 3D scene, not a governance console
-    "note": "static bundle; live HUD fetches a11oy/killinchu read-only",
+ARTIFACT_PATHS = (
+    "index.html",
+    "favicon.svg",
+    "app.js",
+    "data.js",
+    "v5_organs.js",
+    "frontier_anatomy.js",
+    "live-body.html",
+    "live-body.js",
+    "lib/szl_verify_widget.js",
+    "server.py",
+)
+
+FORMULA_LINKS = {
+    "locked_spine": "https://github.com/szl-holdings/lutar-lean/tree/main/Lutar/Puriq/Formulas",
+    "proved_formulas": "https://github.com/szl-holdings/lutar-lean/blob/main/Lutar/Puriq/Formulas/ProvedFormulas.lean",
+    "puriq_formula": "https://github.com/szl-holdings/lutar-lean/blob/main/Lutar/Puriq/Formulas/PuriqFormulaLean.lean",
+    "quorum_safety": "https://github.com/szl-holdings/lutar-lean/blob/main/Lutar/Wave23/QuorumSafety.lean",
+    "hash_chain": "https://github.com/szl-holdings/lutar-lean/blob/main/Lutar/Wave8/HashChain.lean",
 }
 
+CAPABILITIES = [
+    {
+        "id": "anatomy.atlas",
+        "name": "Living governed-system atlas",
+        "purpose": "Make system ownership, authority boundaries, and receipt flow spatially inspectable.",
+        "try": {"method": "GET", "path": "/", "action": "Open an organ or run the guided tour."},
+        "evidence": {
+            "state": "COMPUTED",
+            "basis": "The self-contained WebGL bundle and its local data model are hashed into the anatomy integrity receipt.",
+        },
+        "limits": [
+            "A visual map is not proof that every depicted remote service is healthy.",
+            "The atlas is read-only and has no actuation authority.",
+        ],
+        "reproduce": {
+            "steps": [
+                "GET /api/anatomy/v1/receipt",
+                "POST its JSON body to /api/anatomy/v1/verify/receipt",
+                "Compare the artifact_set_sha256 and per-file hashes.",
+            ]
+        },
+        "authority_state": "READ_ONLY",
+        "formula_refs": [],
+        "provenance": ["https://github.com/szl-holdings/anatomy"],
+    },
+    {
+        "id": "anatomy.formula-spine",
+        "name": "Formula-to-organ spine",
+        "purpose": "Trace declared formal and experimental formulas to the organs they inform.",
+        "try": {"method": "UI", "path": "/", "action": "Open Formula Atlas or Proofs to organs."},
+        "evidence": {
+            "state": "SNAPSHOT",
+            "basis": "The Space presents source-linked declarations; it does not run the Lean kernel in this container.",
+            "locked_declared": LOCKED_FORMULAS,
+            "kernel_reference": KERNEL_COMMIT,
+        },
+        "limits": [
+            "Exactly eight formulas are declared locked in this snapshot.",
+            "Lambda is Conjecture 1, not a theorem.",
+            "Current source links and the historical kernel reference are shown separately to avoid false revision equivalence.",
+        ],
+        "reproduce": {
+            "steps": [
+                "Open the linked Lean files.",
+                "Pin the intended toolchain and commit in lutar-lean.",
+                "Run lake build and inspect #print axioms before promoting a claim.",
+            ]
+        },
+        "authority_state": "READ_ONLY",
+        "formula_refs": LOCKED_FORMULAS,
+        "provenance": list(FORMULA_LINKS.values()),
+    },
+    {
+        "id": "anatomy.live-lens",
+        "name": "Live organ posture lens",
+        "purpose": "Project current reachability and contract responses from A11OY, Killinchu, and the verifier estate into the body.",
+        "try": {"method": "GET", "path": "/api/anatomy/v1/evidence?refresh=1", "action": "Refresh measured dependencies."},
+        "evidence": {
+            "state": "MIXED",
+            "basis": "Dependency states are measured at request time and kept separate from the static anatomy snapshot.",
+        },
+        "limits": [
+            "HTTP reachability does not certify correctness, freshness, safety, or business performance.",
+            "A dependency can change after observed_at.",
+        ],
+        "reproduce": {"steps": ["GET /api/anatomy/v1/evidence?refresh=1", "Probe each declared URL independently."]},
+        "authority_state": "READ_ONLY",
+        "formula_refs": ["F1", "F7", "F22"],
+        "provenance": [
+            "https://huggingface.co/spaces/SZLHOLDINGS/a11oy",
+            "https://huggingface.co/spaces/SZLHOLDINGS/killinchu",
+            "https://huggingface.co/spaces/SZLHOLDINGS/governed-receipt-verifier",
+        ],
+    },
+    {
+        "id": "anatomy.integrity-receipt",
+        "name": "Local bundle integrity receipt",
+        "purpose": "Turn the deployed anatomy bundle into a replayable, byte-level evidence object.",
+        "try": {"method": "GET", "path": "/api/anatomy/v1/receipt", "action": "Generate the current deterministic receipt."},
+        "evidence": {
+            "state": "COMPUTED",
+            "verification_state": "STRUCTURAL_ONLY",
+            "basis": "SHA-256 is recomputed over every declared artifact and over the canonical receipt body.",
+        },
+        "limits": [
+            "The local receipt is unsigned because the Space has no private signing key.",
+            "STRUCTURAL-ONLY is not a cryptographic identity attestation.",
+        ],
+        "reproduce": {
+            "steps": [
+                "GET /api/anatomy/v1/receipt",
+                "POST the response to /api/anatomy/v1/verify/receipt",
+                "Expect STRUCTURAL-ONLY unless an artifact or digest was changed, in which case expect FAIL.",
+            ]
+        },
+        "authority_state": "READ_ONLY",
+        "formula_refs": ["F1", "F22"],
+        "provenance": [FORMULA_LINKS["hash_chain"]],
+    },
+    {
+        "id": "anatomy.physics-overlays",
+        "name": "Physics and quantum-bio overlays",
+        "purpose": "Expose bounded exploratory models beside operational and formal layers without confusing them with measurements or locked theorems.",
+        "try": {"method": "UI", "path": "/", "action": "Open Physics, Quantum-bio, or Yarqa layers."},
+        "evidence": {
+            "state": "MODELED",
+            "basis": "The overlays run deterministic local equations and simulations from data.js; they do not ingest calibrated laboratory measurements.",
+        },
+        "limits": [
+            "Modeled is not measured.",
+            "Narrative and proposed claims remain labeled separately from verified formulas.",
+            "No clinical, biological, or quantum-computing performance claim is made.",
+        ],
+        "reproduce": {
+            "steps": [
+                "Inspect the formula card and its evidence label.",
+                "Record the input parameters.",
+                "Re-run the same local overlay and compare its integrity digest.",
+            ]
+        },
+        "authority_state": "READ_ONLY",
+        "formula_refs": ["QB-COH", "QB-PMF", "QB-COMPASS", "QB-Lambda-v5", "AG-LANDAUER"],
+        "provenance": ["https://github.com/szl-holdings/anatomy/blob/main/data.js"],
+    },
+]
+
+DEPENDENCIES = (
+    {
+        "id": "a11oy.honesty",
+        "url": "https://szlholdings-a11oy.hf.space/api/a11oy/v1/honest",
+        "method": "GET",
+        "purpose": "Doctrine and runtime honesty posture",
+        "critical": True,
+    },
+    {
+        "id": "a11oy.public-verifier",
+        "url": "https://szlholdings-a11oy.hf.space/api/a11oy/v1/verify/receipt",
+        "method": "POST",
+        "purpose": "Canonical public DSSE/Khipu receipt-verifier contract",
+        "critical": True,
+    },
+    {
+        "id": "killinchu.experience-manifest",
+        "url": "https://szlholdings-killinchu.hf.space/api/killinchu/v1/experience/manifest",
+        "method": "GET",
+        "purpose": "Killinchu surface and evidence inventory",
+        "critical": False,
+    },
+    {
+        "id": "receipt-verifier.space",
+        "url": "https://szlholdings-governed-receipt-verifier.static.hf.space/",
+        "method": "GET",
+        "purpose": "Standalone browser verifier",
+        "critical": False,
+    },
+)
+
 CONTENT_SECURITY_POLICY = (
     "default-src 'self'; "
     "base-uri 'self'; "
@@ -62,50 +243,443 @@ CONTENT_SECURITY_POLICY = (
     "https://szlholdings-sentra.hf.space; "
     "form-action 'self'; "
     "frame-ancestors 'self' https://huggingface.co https://*.hf.space https://*.huggingface.co "
-    # a11oy's own domains may embed the anatomy (the landing's living-body iframe).
     "https://a-11-oy.com https://*.a-11-oy.com https://a11oy.net https://*.a11oy.net"
 )
 
+_probe_lock = threading.Lock()
+_probe_cache: dict[str, object] = {"at": 0.0, "value": None}
+_revision_lock = threading.Lock()
+_revision_cache: dict[str, object] = {"at": 0.0, "value": None}
+
+
+def _utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat().replace("+00:00", "Z")
+
+
+def _canonical(value: object) -> bytes:
+    return json.dumps(value, sort_keys=True, separators=(",", ":"), ensure_ascii=False).encode("utf-8")
+
+
+def _sha256(data: bytes) -> str:
+    return hashlib.sha256(data).hexdigest()
+
+
+def _artifact_manifest() -> dict[str, object]:
+    artifacts: list[dict[str, object]] = []
+    for rel in ARTIFACT_PATHS:
+        path = DIRECTORY / rel
+        if path.is_file():
+            content = path.read_bytes()
+            artifacts.append({"path": rel, "bytes": len(content), "sha256": _sha256(content)})
+        else:
+            artifacts.append({"path": rel, "state": "MISSING"})
+    artifact_set_sha256 = _sha256(_canonical(artifacts))
+    return {
+        "algorithm": "sha256",
+        "artifact_count": len(artifacts),
+        "artifact_set_sha256": artifact_set_sha256,
+        "artifacts": artifacts,
+    }
+
+
+def _local_receipt() -> dict[str, object]:
+    manifest = _artifact_manifest()
+    body: dict[str, object] = {
+        "schema": "szl.anatomy-integrity-receipt/v1",
+        "subject": {
+            "space": SPACE_ID,
+            "artifact_set_sha256": manifest["artifact_set_sha256"],
+        },
+        "claim": {
+            "purpose": "Byte-level integrity of the deployed Living Anatomy bundle",
+            "authority_state": "READ_ONLY",
+            "evidence_state": "COMPUTED",
+            "doctrine": DOCTRINE,
+            "kernel_reference": KERNEL_COMMIT,
+            "locked_proven_declared": len(LOCKED_FORMULAS),
+            "lambda_state": "CONJECTURE_1",
+        },
+        "evidence": manifest,
+        "signature": {
+            "state": "UNAVAILABLE",
+            "reason": "No private signing key is present in this public visualization Space.",
+        },
+        "limits": [
+            "Artifact integrity does not certify remote-service health or model quality.",
+            "Unsigned local receipt; verification is STRUCTURAL-ONLY.",
+        ],
+    }
+    return {
+        "receipt": body,
+        "receipt_id": _sha256(_canonical(body)),
+        "verification_state": "STRUCTURAL_ONLY",
+    }
+
+
+def _check_local_receipt(candidate: object) -> tuple[int, dict[str, object]]:
+    wrapper = candidate if isinstance(candidate, dict) else {}
+    receipt = wrapper.get("receipt", wrapper) if isinstance(wrapper, dict) else {}
+    supplied_id = wrapper.get("receipt_id") if isinstance(wrapper, dict) else None
+    if not isinstance(receipt, dict):
+        receipt = {}
+
+    current = _artifact_manifest()
+    recomputed_id = _sha256(_canonical(receipt))
+    subject = receipt.get("subject") if isinstance(receipt.get("subject"), dict) else {}
+    evidence = receipt.get("evidence") if isinstance(receipt.get("evidence"), dict) else {}
+    checks = [
+        {
+            "name": "schema",
+            "status": "PASS" if receipt.get("schema") == "szl.anatomy-integrity-receipt/v1" else "FAIL",
+            "detail": "Expected szl.anatomy-integrity-receipt/v1.",
+        },
+        {
+            "name": "subject",
+            "status": "PASS" if subject.get("space") == SPACE_ID else "FAIL",
+            "detail": f"Expected {SPACE_ID}.",
+        },
+        {
+            "name": "receipt_digest",
+            "status": "PASS" if supplied_id and supplied_id == recomputed_id else "FAIL",
+            "detail": "SHA-256 over the canonical receipt body.",
+        },
+        {
+            "name": "artifact_set",
+            "status": "PASS"
+            if evidence.get("artifact_set_sha256") == current["artifact_set_sha256"]
+            and subject.get("artifact_set_sha256") == current["artifact_set_sha256"]
+            else "FAIL",
+            "detail": "Recomputed from the files currently served by this Space.",
+        },
+        {
+            "name": "signature",
+            "status": "UNAVAILABLE",
+            "detail": "This local integrity receipt is unsigned; no cryptographic identity green is asserted.",
+        },
+    ]
+    failed = any(item["status"] == "FAIL" for item in checks)
+    verdict = "FAIL" if failed else "STRUCTURAL-ONLY"
+    return (400 if failed else 200), {
+        "schema": "szl.receipt-verification/v1",
+        "ok": not failed,
+        "verdict": verdict,
+        "verification_state": "FAILED" if failed else "STRUCTURAL_ONLY",
+        "checks": checks,
+        "recomputed_receipt_id": recomputed_id,
+        "observed_at": _utc_now(),
+        "limits": "STRUCTURAL-ONLY is advisory and is not a signature verification.",
+    }
+
+
+def _probe_dependency(dep: dict[str, object]) -> dict[str, object]:
+    method = str(dep["method"])
+    data = b"{}" if method == "POST" else None
+    headers = {
+        "User-Agent": "szl-anatomy-evidence/1.0",
+        "Accept": "application/json,text/html;q=0.8",
+    }
+    if data is not None:
+        headers["Content-Type"] = "application/json"
+    req = urllib.request.Request(str(dep["url"]), data=data, headers=headers, method=method)
+    status: int | None = None
+    error: str | None = None
+    try:
+        with urllib.request.urlopen(req, timeout=4) as response:
+            status = response.status
+            response.read(256)
+    except urllib.error.HTTPError as exc:
+        status = exc.code
+        error = f"HTTP {exc.code}"
+    except Exception as exc:  # network state is evidence, not a server failure
+        error = type(exc).__name__
+
+    reachable = status is not None
+    if method == "POST":
+        contract_available = status in (200, 201, 400, 422, 429)
+    else:
+        contract_available = status is not None and 200 <= status < 400
+    if contract_available:
+        contract_state = "AVAILABLE"
+        evidence_state = "LIVE"
+    elif status == 404:
+        contract_state = "MISSING"
+        evidence_state = "UNAVAILABLE"
+    elif reachable:
+        contract_state = "DEGRADED"
+        evidence_state = "UNAVAILABLE"
+    else:
+        contract_state = "UNREACHABLE"
+        evidence_state = "UNAVAILABLE"
+    return {
+        **dep,
+        "transport_state": "REACHABLE" if reachable else "UNREACHABLE",
+        "contract_state": contract_state,
+        "evidence_state": evidence_state,
+        "http_status": status,
+        "error": error,
+    }
+
+
+def _dependency_evidence(force: bool = False) -> dict[str, object]:
+    now = time.monotonic()
+    with _probe_lock:
+        cached = _probe_cache.get("value")
+        if not force and cached is not None and now - float(_probe_cache["at"]) < 30:
+            return cached  # type: ignore[return-value]
+    with ThreadPoolExecutor(max_workers=len(DEPENDENCIES)) as pool:
+        rows = list(pool.map(_probe_dependency, DEPENDENCIES))
+    live_count = sum(row["evidence_state"] == "LIVE" for row in rows)
+    evidence_state = "LIVE" if live_count == len(rows) else ("MIXED" if live_count else "UNAVAILABLE")
+    verifier = next(row for row in rows if row["id"] == "a11oy.public-verifier")
+    value: dict[str, object] = {
+        "schema": "szl.anatomy-evidence/v1",
+        "observed_at": _utc_now(),
+        "scope": "Endpoint reachability and declared contract presence only.",
+        "transport_state": "REACHABLE",
+        "evidence_state": evidence_state,
+        "verification_state": "AVAILABLE" if verifier["contract_state"] == "AVAILABLE" else "UNAVAILABLE",
+        "authority_state": "READ_ONLY",
+        "summary": {"live": live_count, "total": len(rows)},
+        "dependencies": rows,
+        "limits": [
+            "Reachability does not certify quality, safety, freshness, or business performance.",
+            "The local anatomy integrity verifier remains STRUCTURAL_ONLY because it is unsigned.",
+        ],
+    }
+    with _probe_lock:
+        _probe_cache.update({"at": time.monotonic(), "value": value})
+    return value
+
+
+def _hf_revision(force: bool = False) -> str | None:
+    env_revision = os.environ.get("SPACE_REPOSITORY_COMMIT")
+    if env_revision and len(env_revision) == 40:
+        return env_revision
+    now = time.monotonic()
+    with _revision_lock:
+        cached = _revision_cache.get("value")
+        if not force and cached and now - float(_revision_cache["at"]) < 60:
+            return str(cached)
+    req = urllib.request.Request(
+        "https://huggingface.co/api/spaces/SZLHOLDINGS/anatomy?expand[]=sha",
+        headers={"User-Agent": "szl-anatomy-source-attestation/1.0", "Accept": "application/json"},
+    )
+    revision: str | None = None
+    try:
+        with urllib.request.urlopen(req, timeout=4) as response:
+            data = json.load(response)
+            candidate = data.get("sha")
+            if isinstance(candidate, str) and len(candidate) == 40:
+                revision = candidate
+    except Exception:
+        revision = None
+    with _revision_lock:
+        _revision_cache.update({"at": time.monotonic(), "value": revision})
+    return revision
+
+
+def _source_attestation(force: bool = False) -> dict[str, object]:
+    revision = _hf_revision(force=force)
+    manifest = _artifact_manifest()
+    return {
+        "schema": "szl.deployment-source/v1",
+        "source": {
+            "repository": SOURCE_REPOSITORY,
+            "commit": SOURCE_BASE_COMMIT,
+            "path": "",
+            "relation": "base-plus-hf-overlay",
+        },
+        "deployment": {
+            "hf_space": SPACE_ID,
+            "hf_revision": revision,
+            "artifact_set_sha256": manifest["artifact_set_sha256"],
+        },
+        "built_at": None,
+        "observed_at": _utc_now(),
+        "alignment_state": "PENDING_GITHUB_SYNC",
+        "limits": [
+            "source.commit is the declared GitHub base; deployment.hf_revision is the measured HF revision.",
+            "They are intentionally not presented as the same revision.",
+        ],
+    }
+
+
+def _manifest() -> dict[str, object]:
+    return {
+        "schema": "szl.anatomy-manifest/v1",
+        "service": "anatomy-space",
+        "space": SPACE_ID,
+        "purpose": "Read-only spatial evidence map of the governed-agent substrate.",
+        "contract_version": "1.0.0",
+        "state_dimensions": {
+            "transport_state": "REACHABLE",
+            "evidence_state": "MIXED",
+            "verification_state": "STRUCTURAL_ONLY",
+            "authority_state": "READ_ONLY",
+        },
+        "status_vocabulary": {
+            "transport_state": ["REACHABLE", "UNREACHABLE"],
+            "evidence_state": ["LIVE", "COMPUTED", "SNAPSHOT", "MODELED", "MIXED", "UNAVAILABLE"],
+            "verification_state": ["VERIFIED", "STRUCTURAL_ONLY", "UNAVAILABLE", "FAILED"],
+            "authority_state": ["READ_ONLY", "PROPOSAL_ONLY", "MUTATING"],
+        },
+        "endpoints": {
+            "manifest": "/api/anatomy/v1/manifest",
+            "capabilities": "/api/anatomy/v1/capabilities",
+            "evidence": "/api/anatomy/v1/evidence?refresh=1",
+            "receipt": "/api/anatomy/v1/receipt",
+            "verify_receipt": "/api/anatomy/v1/verify/receipt",
+            "source": "/.well-known/szl-source.json",
+        },
+        "doctrine": {
+            "version": DOCTRINE,
+            "lock": LOCK,
+            "kernel_reference": KERNEL_COMMIT,
+            "locked_proven_declared": LOCKED_FORMULAS,
+            "lambda": "CONJECTURE_1",
+        },
+        "limits": [
+            "RUNNING or REACHABLE describes transport, not model quality.",
+            "This Space is a visualization and evidence reader, not an autonomous actuator.",
+        ],
+    }
+
 
 class HardenedHandler(SimpleHTTPRequestHandler):
     server_version = "szl"
     sys_version = ""
 
-    def version_string(self):
+    def version_string(self) -> str:
         return "szl"
 
-    def do_GET(self):
-        # Additive health route for the fleet monitor. Everything else falls
-        # through to normal static file serving, unchanged.
-        if self.path.split("?", 1)[0] == "/healthz":
-            body = json.dumps(HEALTHZ_PAYLOAD).encode("utf-8")
-            self.send_response(200)
-            self.send_header("Content-Type", "application/json")
-            self.send_header("Content-Length", str(len(body)))
-            self.send_header("Cache-Control", "no-store")
-            self.end_headers()
-            self.wfile.write(body)
+    def _send_json(
+        self,
+        payload: object,
+        *,
+        status: int = 200,
+        evidence_state: str = "SNAPSHOT",
+        extra_headers: dict[str, str] | None = None,
+    ) -> None:
+        body = json.dumps(payload, ensure_ascii=False, sort_keys=True).encode("utf-8")
+        self.send_response(status)
+        self.send_header("Content-Type", "application/json; charset=utf-8")
+        self.send_header("Content-Length", str(len(body)))
+        self.send_header("Cache-Control", "no-store")
+        self.send_header("Access-Control-Allow-Origin", "*")
+        self.send_header("X-SZL-Transport-State", "REACHABLE")
+        self.send_header("X-SZL-Evidence-State", evidence_state)
+        if extra_headers:
+            for key, value in extra_headers.items():
+                self.send_header(key, value)
+        self.end_headers()
+        self.wfile.write(body)
+
+    def do_OPTIONS(self) -> None:  # noqa: N802
+        self.send_response(204)
+        self.send_header("Access-Control-Allow-Origin", "*")
+        self.send_header("Access-Control-Allow-Methods", "GET, POST, OPTIONS")
+        self.send_header("Access-Control-Allow-Headers", "Content-Type")
+        self.send_header("Access-Control-Max-Age", "600")
+        self.end_headers()
+
+    def do_GET(self) -> None:  # noqa: N802
+        parsed = urlsplit(self.path)
+        path = parsed.path
+        query = parse_qs(parsed.query)
+        force = query.get("refresh") == ["1"]
+        if path == "/healthz":
+            self._send_json(
+                {
+                    "status": "ok",
+                    "organ": "anatomy",
+                    "service": "anatomy-space",
+                    "transport_state": "REACHABLE",
+                    "evidence_state": "SNAPSHOT",
+                    "verification_state": "STRUCTURAL_ONLY",
+                    "authority_state": "READ_ONLY",
+                    "note": "Transport health only; quality and upstream freshness are not inferred.",
+                },
+                evidence_state="SNAPSHOT",
+            )
+            return
+        if path == "/.well-known/szl-source.json":
+            self._send_json(_source_attestation(force=force), evidence_state="COMPUTED")
+            return
+        if path == "/api/anatomy/v1/manifest":
+            self._send_json(_manifest(), evidence_state="SNAPSHOT")
+            return
+        if path in ("/api/anatomy/v1/capabilities", "/api/anatomy/v1/capability-matrix"):
+            self._send_json(
+                {
+                    "schema": "szl.anatomy-capabilities/v1",
+                    "state_dimensions": _manifest()["state_dimensions"],
+                    "count": len(CAPABILITIES),
+                    "capabilities": CAPABILITIES,
+                },
+                evidence_state="MIXED",
+            )
+            return
+        if path == "/api/anatomy/v1/evidence":
+            payload = _dependency_evidence(force=force)
+            self._send_json(payload, evidence_state=str(payload["evidence_state"]))
+            return
+        if path == "/api/anatomy/v1/receipt":
+            self._send_json(
+                _local_receipt(),
+                evidence_state="COMPUTED",
+                extra_headers={"X-SZL-Verification-State": "STRUCTURAL_ONLY"},
+            )
             return
         super().do_GET()
 
-    def end_headers(self):
-        # PRESERVE the COOP/CORP this Space already sent (unchanged embed posture).
+    def do_POST(self) -> None:  # noqa: N802
+        path = urlsplit(self.path).path
+        if path != "/api/anatomy/v1/verify/receipt":
+            self._send_json({"error": "not_found", "path": path}, status=404, evidence_state="UNAVAILABLE")
+            return
+        try:
+            length = int(self.headers.get("Content-Length", "0"))
+        except ValueError:
+            length = 0
+        if length <= 0 or length > 1_000_000:
+            self._send_json(
+                {"error": "invalid_body", "detail": "JSON body required; maximum 1,000,000 bytes."},
+                status=400,
+                evidence_state="UNAVAILABLE",
+            )
+            return
+        try:
+            candidate = json.loads(self.rfile.read(length))
+        except Exception:
+            self._send_json({"error": "invalid_json"}, status=400, evidence_state="UNAVAILABLE")
+            return
+        status, payload = _check_local_receipt(candidate)
+        self._send_json(
+            payload,
+            status=status,
+            evidence_state="COMPUTED",
+            extra_headers={"X-SZL-Verification-State": str(payload["verification_state"])},
+        )
+
+    def end_headers(self) -> None:
         self.send_header("Cross-Origin-Opener-Policy", "same-origin-allow-popups")
         self.send_header("Cross-Origin-Resource-Policy", "cross-origin")
-        # ADD the previously-missing security headers.
         self.send_header("Content-Security-Policy", CONTENT_SECURITY_POLICY)
-        self.send_header(
-            "Strict-Transport-Security", "max-age=31536000; includeSubDomains"
-        )
+        self.send_header("Strict-Transport-Security", "max-age=31536000; includeSubDomains")
         self.send_header("X-Content-Type-Options", "nosniff")
         self.send_header("Referrer-Policy", "strict-origin-when-cross-origin")
+        self.send_header("Permissions-Policy", "camera=(), microphone=(), geolocation=(), payment=()")
         super().end_headers()
 
 
+def make_server(host: str = "0.0.0.0", port: int = PORT) -> ThreadingHTTPServer:
+    handler = functools.partial(HardenedHandler, directory=str(DIRECTORY))
+    return ThreadingHTTPServer((host, port), handler)
+
+
 if __name__ == "__main__":
-    handler = functools.partial(HardenedHandler, directory=DIRECTORY)
-    httpd = ThreadingHTTPServer(("0.0.0.0", PORT), handler)
-    print(f"Serving hardened static site from {DIRECTORY} on 0.0.0.0:{PORT}", flush=True)
+    httpd = make_server()
+    print(f"Serving SZL Living Anatomy from {DIRECTORY} on 0.0.0.0:{PORT}", flush=True)
     try:
         httpd.serve_forever()
     except KeyboardInterrupt:

tests/qa_evidence_bay.js

@@ -0,0 +1,69 @@
+// End-to-end UI contract for the Anatomy Evidence Bay.
+// Requires the real Python server to be running; does not mock evidence APIs.
+const { chromium } = require('playwright');
+const path = require('path');
+
+const BASE = process.env.ANATOMY_BASE_URL || 'http://127.0.0.1:7860';
+const EDGE = process.env.PLAYWRIGHT_EXECUTABLE_PATH || undefined;
+const OUT = process.env.ANATOMY_QA_OUTPUT || __dirname;
+const VIEWPORTS = [
+  { name:'desktop', width:1440, height:900 },
+  { name:'mobile', width:390, height:844 },
+];
+
+async function run(browser, vp) {
+  const page = await browser.newPage({viewport:{width:vp.width,height:vp.height}});
+  const errors = [];
+  page.on('console', msg => { if (msg.type()==='error') errors.push(msg.text()); });
+  page.on('pageerror', err => errors.push('PAGEERROR: '+err.message));
+  await page.goto(BASE+'/', {waitUntil:'networkidle'});
+  await page.waitForSelector('#fa-launch');
+  await page.click('#fa-launch');
+  await page.waitForSelector('#fa-panel.open');
+
+  const overview = await page.evaluate(() => ({
+    title: document.querySelector('.fa-title')?.textContent,
+    dimensions: [...document.querySelectorAll('.fa-dim-value')].map(x=>x.textContent),
+    launcher: getComputedStyle(document.getElementById('fa-launch')).display,
+    panelWidth: document.getElementById('fa-panel').getBoundingClientRect().width,
+    viewport: window.innerWidth,
+  }));
+
+  await page.click('[data-tab="capabilities"]');
+  const capabilityCount = await page.locator('.fa-cap').count();
+  // textContent covers the complete declarative shell even when the browser
+  // collapses detail descendants during layout/animation.
+  const shellText = await page.locator('.fa-cap').first().textContent();
+
+  await page.click('[data-tab="evidence"]');
+  await page.waitForSelector('.fa-dep');
+  const dependencyCount = await page.locator('.fa-dep').count();
+  const dependencyStates = await page.locator('.fa-dep-state').allInnerTexts();
+
+  await page.click('[data-tab="overview"]');
+  await page.click('#fa-verify-bundle');
+  await page.waitForSelector('.fa-output.good');
+  const verification = await page.locator('.fa-output').innerText();
+
+  await page.screenshot({path:path.join(OUT,'anatomy-evidence-'+vp.name+'.png'),fullPage:true});
+  await page.close();
+
+  if (errors.length) throw new Error(vp.name+' console errors: '+errors.join(' | '));
+  if (overview.title !== 'Evidence Bay') throw new Error(vp.name+' missing Evidence Bay title');
+  if (overview.panelWidth > overview.viewport + 1) throw new Error(vp.name+' panel overflows viewport');
+  if (capabilityCount < 5) throw new Error(vp.name+' capability count '+capabilityCount);
+  for (const field of ['Purpose','Try','Evidence','Limits','Reproduce']) {
+    if (!shellText.includes(field)) throw new Error(vp.name+' missing '+field+' shell');
+  }
+  if (dependencyCount !== 4) throw new Error(vp.name+' dependency count '+dependencyCount);
+  if (!verification.includes('STRUCTURAL-ONLY')) throw new Error(vp.name+' receipt verdict '+verification);
+  return {viewport:vp.name, overview, capabilityCount, dependencyCount, dependencyStates, verification};
+}
+
+(async()=>{
+  const browser = await chromium.launch({executablePath:EDGE,headless:true,args:['--use-gl=angle','--use-angle=swiftshader','--ignore-gpu-blocklist','--enable-unsafe-swiftshader']});
+  const results=[];
+  for (const vp of VIEWPORTS) results.push(await run(browser,vp));
+  await browser.close();
+  console.log(JSON.stringify(results,null,2));
+})().catch(err=>{ console.error(err); process.exit(1); });

tests/test_server_contract.py

@@ -0,0 +1,147 @@
+from __future__ import annotations
+
+import copy
+import json
+import os
+import sys
+import threading
+import unittest
+import urllib.error
+import urllib.request
+from pathlib import Path
+
+
+ROOT = Path(__file__).resolve().parents[1]
+sys.path.insert(0, str(ROOT))
+import server  # noqa: E402
+
+
+class AnatomyContractTest(unittest.TestCase):
+    @classmethod
+    def setUpClass(cls) -> None:
+        cls.httpd = server.make_server("127.0.0.1", 0)
+        cls.port = cls.httpd.server_address[1]
+        cls.base = f"http://127.0.0.1:{cls.port}"
+        cls.thread = threading.Thread(target=cls.httpd.serve_forever, daemon=True)
+        cls.thread.start()
+
+    @classmethod
+    def tearDownClass(cls) -> None:
+        cls.httpd.shutdown()
+        cls.httpd.server_close()
+        cls.thread.join(timeout=3)
+
+    def request(self, path: str, *, method: str = "GET", body=None):
+        data = None
+        headers = {}
+        if body is not None:
+            data = json.dumps(body).encode("utf-8")
+            headers["Content-Type"] = "application/json"
+        req = urllib.request.Request(self.base + path, data=data, headers=headers, method=method)
+        try:
+            with urllib.request.urlopen(req, timeout=5) as response:
+                return response.status, dict(response.headers), json.load(response)
+        except urllib.error.HTTPError as exc:
+            return exc.code, dict(exc.headers), json.load(exc)
+
+    def test_health_is_transport_only(self):
+        status, headers, body = self.request("/healthz")
+        self.assertEqual(200, status)
+        self.assertEqual("REACHABLE", body["transport_state"])
+        self.assertEqual("SNAPSHOT", body["evidence_state"])
+        self.assertEqual("STRUCTURAL_ONLY", body["verification_state"])
+        self.assertEqual("READ_ONLY", body["authority_state"])
+        self.assertIn("quality", body["note"])
+        self.assertEqual("REACHABLE", headers["X-SZL-Transport-State"])
+        self.assertEqual("nosniff", headers["X-Content-Type-Options"])
+
+    def test_static_bundle_is_served_from_the_anatomy_root(self):
+        for path, marker in (("/", "SZL Living Anatomy"), ("/frontier_anatomy.js", "Evidence Bay")):
+            with urllib.request.urlopen(self.base + path, timeout=5) as response:
+                body = response.read().decode("utf-8")
+                self.assertEqual(200, response.status)
+                self.assertIn(marker, body)
+
+    def test_manifest_separates_state_dimensions(self):
+        status, headers, body = self.request("/api/anatomy/v1/manifest")
+        self.assertEqual(200, status)
+        self.assertEqual("szl.anatomy-manifest/v1", body["schema"])
+        self.assertEqual(
+            {"transport_state", "evidence_state", "verification_state", "authority_state"},
+            set(body["state_dimensions"]),
+        )
+        self.assertEqual("CONJECTURE_1", body["doctrine"]["lambda"])
+        self.assertEqual(8, len(body["doctrine"]["locked_proven_declared"]))
+        self.assertEqual("*", headers["Access-Control-Allow-Origin"])
+
+    def test_every_capability_has_five_part_shell(self):
+        status, _, body = self.request("/api/anatomy/v1/capabilities")
+        self.assertEqual(200, status)
+        self.assertGreaterEqual(body["count"], 5)
+        for capability in body["capabilities"]:
+            for key in ("purpose", "try", "evidence", "limits", "reproduce"):
+                self.assertIn(key, capability, f"{capability['id']} lacks {key}")
+            self.assertEqual("READ_ONLY", capability["authority_state"])
+        formula = next(item for item in body["capabilities"] if item["id"] == "anatomy.formula-spine")
+        self.assertEqual("SNAPSHOT", formula["evidence"]["state"])
+        self.assertTrue(all(url.startswith("https://github.com/") for url in formula["provenance"]))
+
+    def test_receipt_replays_as_structural_only(self):
+        status, receipt_headers, receipt = self.request("/api/anatomy/v1/receipt")
+        self.assertEqual(200, status)
+        self.assertEqual("STRUCTURAL_ONLY", receipt["verification_state"])
+        self.assertEqual(64, len(receipt["receipt_id"]))
+        self.assertEqual("STRUCTURAL_ONLY", receipt_headers["X-SZL-Verification-State"])
+
+        verify_status, verify_headers, verified = self.request(
+            "/api/anatomy/v1/verify/receipt", method="POST", body=receipt
+        )
+        self.assertEqual(200, verify_status)
+        self.assertEqual("STRUCTURAL-ONLY", verified["verdict"])
+        self.assertEqual("STRUCTURAL_ONLY", verify_headers["X-SZL-Verification-State"])
+        checks = {item["name"]: item["status"] for item in verified["checks"]}
+        self.assertEqual("PASS", checks["artifact_set"])
+        self.assertEqual("UNAVAILABLE", checks["signature"])
+
+    def test_tampered_receipt_fails(self):
+        _, _, receipt = self.request("/api/anatomy/v1/receipt")
+        tampered = copy.deepcopy(receipt)
+        tampered["receipt"]["claim"]["purpose"] = "changed"
+        status, _, result = self.request(
+            "/api/anatomy/v1/verify/receipt", method="POST", body=tampered
+        )
+        self.assertEqual(400, status)
+        self.assertEqual("FAIL", result["verdict"])
+        checks = {item["name"]: item["status"] for item in result["checks"]}
+        self.assertEqual("FAIL", checks["receipt_digest"])
+
+    def test_source_attestation_matches_estate_schema(self):
+        previous = os.environ.get("SPACE_REPOSITORY_COMMIT")
+        os.environ["SPACE_REPOSITORY_COMMIT"] = "a" * 40
+        try:
+            status, _, body = self.request("/.well-known/szl-source.json")
+        finally:
+            if previous is None:
+                os.environ.pop("SPACE_REPOSITORY_COMMIT", None)
+            else:
+                os.environ["SPACE_REPOSITORY_COMMIT"] = previous
+        self.assertEqual(200, status)
+        self.assertEqual("szl.deployment-source/v1", body["schema"])
+        self.assertEqual("szl-holdings/anatomy", body["source"]["repository"])
+        self.assertEqual("SZLHOLDINGS/anatomy", body["deployment"]["hf_space"])
+        self.assertEqual("a" * 40, body["deployment"]["hf_revision"])
+        self.assertEqual("PENDING_GITHUB_SYNC", body["alignment_state"])
+
+    def test_frontend_and_public_verifier_use_current_contract(self):
+        index = (ROOT / "index.html").read_text(encoding="utf-8")
+        bay = (ROOT / "frontier_anatomy.js").read_text(encoding="utf-8")
+        widget = (ROOT / "lib" / "szl_verify_widget.js").read_text(encoding="utf-8")
+        self.assertIn('src="./frontier_anatomy.js"', index)
+        self.assertIn("Evidence Bay", bay)
+        self.assertIn("/api/anatomy/v1", bay)
+        self.assertIn("/api/a11oy/v1/verify/receipt", widget)
+        self.assertNotIn("base+'/api/a11oy/v1/verify'", widget)
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=2)