deploy(hf): sync szl-holdings/a11oy@main derived COPY set

Reusable Dockerfile-COPY-derived deploy from szl-holdings/a11oy main.
Files: 896 Pruned: 0
Derived from Dockerfile COPY sources (NO hand-maintained allowlist).

Signed-off-by: SZL Holdings <noreply@szlholdings.ai>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

a11oy_code_as_action.py

@@ -113,7 +113,10 @@ def evaluate_gate(code: str, intensity: str = "full") -> dict:
     verdict dict. DENY iff hard_block OR Λ tripwire HALT. Λ is advisory and can
     only tighten (add a DENY); it never overrides a hard DENY."""
     import a11oy_code_engine as ce
-    import szl_restraint as restraint
+    try:  # prefer the extracted substrate package; fall back to local copy
+        from szl_substrate import szl_restraint as restraint
+    except Exception:
+        import szl_restraint as restraint
 
     # 1) HARD security gate (deterministic, deny-by-default, model-independent).
     hard = ce.hard_security_screen(code)

a11oy_code_orchestrator.py

@@ -82,7 +82,10 @@ except Exception as _exc:  # pragma: no cover
 else:
     _ORGRAG_IMPORT_ERROR = ""
 try:
-    import szl_llm_registry as _llmreg  # A11OY_CODE_LLM_KEY resolver
+    try:  # prefer the extracted substrate package; fall back to local copy
+        from szl_substrate import szl_llm_registry as _llmreg  # A11OY_CODE_LLM_KEY resolver
+    except Exception:
+        import szl_llm_registry as _llmreg
 except Exception:  # pragma: no cover
     _llmreg = None
 try:

a11oy_frontier_patch.py

@@ -106,7 +106,10 @@ async def _a11oy_frontier_agent_loop(request: Request):
     
     # Lambda passed — try to delegate to szl_ken agent loop
     try:
-        import szl_ken as _ken
+        try:  # prefer the extracted substrate package; fall back to local copy
+            from szl_substrate import szl_ken as _ken
+        except Exception:
+            import szl_ken as _ken
         tools = _ken.get_default_tools("a11oy")
         state = _ken.init_state(session_id, "a11oy", body.get("max_steps", 3))
         state = _ken._state_copy(state, lambda_score=lambda_score)

benchmarks/restraint/run_bench.py

@@ -140,7 +140,10 @@ def _measured_arm(model: str, system: Optional[str], task: str, repeat: int) ->
 
 def _sample_arm(task: str, arm: str, intensity: str) -> Dict[str, Any]:
     """SAMPLE arm via OUR ladder model — internally consistent, clearly NOT measured."""
-    import szl_restraint as R
+    try:  # prefer the extracted substrate package; fall back to local copy
+        from szl_substrate import szl_restraint as R
+    except Exception:
+        import szl_restraint as R
     dec = R.descend_ladder(task, intensity)
     s = dec["lines_saved_estimate"]
     tpl = R.TOKENS_PER_LOC
@@ -169,7 +172,10 @@ def run(model: Optional[str], repeat: int, intensity: str) -> Dict[str, Any]:
     # SAMPLE mode needs szl_restraint importable.
     if not measured:
         try:
-            import szl_restraint  # noqa: F401
+            try:  # prefer the extracted substrate package; fall back to local copy
+                from szl_substrate import szl_restraint  # noqa: F401
+            except Exception:
+                import szl_restraint  # noqa: F401
         except Exception as e:
             print("[run_bench] szl_restraint not importable: %s" % e, file=sys.stderr)
 

serve.py

@@ -765,7 +765,10 @@ except Exception as _anat3d_e:  # pragma: no cover
 # stayed in-image but unwired, so the live endpoint 404'd. Restores the missing wiring
 # (additive, try/except-guarded).
 try:
-    import szl_restraint as _szl_restraint
+    try:  # prefer the extracted substrate package; fall back to local vendored copy
+        from szl_substrate import szl_restraint as _szl_restraint
+    except Exception:
+        import szl_restraint as _szl_restraint
     _szl_restraint.register(app, ns="a11oy")
     print("[a11oy] Restraint registered: /api/a11oy/v1/restraint/{info,evaluate,bench}", file=__import__("sys").stderr)
 except Exception as _szl_rs_e:  # pragma: no cover
@@ -1983,7 +1986,10 @@ except Exception as _th_e:
 # when the SZL_COSIGN_PRIVATE_PEM runtime secret is present (else honestly UNSIGNED).
 # Sign: Yachay. Perplexity Computer Agent.
 try:
-    import szl_provenance as _prov
+    try:  # prefer the extracted substrate package; fall back to local vendored copy
+        from szl_substrate import szl_provenance as _prov
+    except Exception:
+        import szl_provenance as _prov
     _prov_status = _prov.register_provenance(app, "a11oy")
     import sys as _sys_pv
     print(f"[a11oy] Provenance Hardening registered: {_prov_status}", file=_sys_pv.stderr)
@@ -2861,7 +2867,10 @@ if ASSETS_DIR.exists():
 # ---------------------------------------------------------------------------
 _WH_ERR = None
 try:
-    import szl_warhacker_aliases as _wh_aliases
+    try:  # prefer the extracted substrate package; fall back to local vendored copy
+        from szl_substrate import szl_warhacker_aliases as _wh_aliases
+    except Exception:
+        import szl_warhacker_aliases as _wh_aliases
     import os as _wh_os
     _wh_status = _wh_aliases.register(
         app, "a11oy",
@@ -3931,7 +3940,10 @@ except Exception as _ke:
 # szl_dsse (cosign ECDSA-P256/DSSE). Doctrine v11 LOCKED 749/14/163 (public).
 # ---------------------------------------------------------------------------
 try:
-    import operator_shell_v4 as _osh_v4
+    try:  # prefer the extracted substrate package; fall back to local vendored copy
+        from szl_substrate import operator_shell_v4 as _osh_v4
+    except Exception:
+        import operator_shell_v4 as _osh_v4
     _osh_v4_status = _osh_v4.register(app, "a11oy", web_dir="/app/web")
     import sys as _osh_sys
     print(f"[a11oy] Operator Shell v4 registered: {_osh_v4_status}", file=_osh_sys.stderr)
@@ -5162,7 +5174,10 @@ except Exception as _parity_e:
 # Doctrine v11 LOCKED 749/14/163 · Λ = Conjecture 1 (NEVER a theorem).
 # ===========================================================================
 try:
-    import szl_llm_registry as _llm_reg
+    try:  # prefer the extracted substrate package; fall back to local vendored copy
+        from szl_substrate import szl_llm_registry as _llm_reg
+    except Exception:
+        import szl_llm_registry as _llm_reg
     _llm_reg_info = _llm_reg.register(app)
     print(
         f"[a11oy] LLM Hub Registry mounted: {len(_llm_reg.MODEL_REGISTRY)} models, "
@@ -10206,7 +10221,10 @@ async def spa_fallback(full_path: str) -> Response:
 # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai>
 # ============================================================================
 try:
-    import szl_ken as _ken
+    try:  # prefer the extracted substrate package; fall back to local vendored copy
+        from szl_substrate import szl_ken as _ken
+    except Exception:
+        import szl_ken as _ken
     import sys as _sys
     # Detect flagship from FastAPI app title
     _kf = "unknown"

static/3d/surfaces/interpretability.js

@@ -39,10 +39,14 @@
 const ID    = "interpretability";
 const TITLE = "Interpretability · Sparse-Autoencoder Features (live)";
 
-// Endpoint is hosted on the dedicated killinchu Space (isolated compute), reached
-// cross-origin (killinchu returns access-control-allow-origin: https://a-11-oy.com).
-// This keeps the interpretability organ's rebuilds/faults isolated from the flagship.
-const EP = "https://szlholdings-killinchu.hf.space/api/killinchu/v1/interpretability/features?seed=42&top_k=8&d_model=512&n_features=4096";
+// PRIMARY endpoint is the a11oy-NATIVE self-hosted SAE surface (same-origin, no CORS):
+//   GET /api/a11oy/v1/interpretability/features (szl_a11oy_interpretability.py, MODELED).
+// FALLBACK stays the dedicated killinchu Space (isolated compute, reached cross-origin —
+// killinchu returns access-control-allow-origin: https://a-11-oy.com) so a rebuild/fault
+// on EITHER path never darkens the organ (fault isolation preserved). If the primary
+// reports missing/error we transparently swap to the Space fallback (see mount()).
+const EP          = "/api/a11oy/v1/interpretability/features?seed=42&top_k=8&d_model=512&n_features=4096";
+const EP_FALLBACK = "https://szlholdings-killinchu.hf.space/api/killinchu/v1/interpretability/features?seed=42&top_k=8&d_model=512&n_features=4096";
 
 // data-viz hues — purple BANNED
 const C_NODE   = 0x5b8dee;  // lattice-blue (fired feature)
@@ -96,7 +100,22 @@ export function mount(ctx) {
   if (!_frameReg) { _stage.onFrame(_onFrame); _frameReg = true; }
 
   _badge = ctx.live.createBadge();
-  _polls.push(ctx.live.poll(EP, 5000, _onFeatures, { badge: _badge, onState: (m) => { S.state = m.state; _paintOverlay(); } }));
+  // Guarded primary -> fallback: poll the a11oy-native endpoint; if it goes
+  // missing/error, swap ONCE to the isolated killinchu Space (fault isolation).
+  let _swapped = false;
+  const _startPoll = (ep) => ctx.live.poll(ep, 5000, _onFeatures, {
+    badge: _badge,
+    onState: (m) => {
+      S.state = m.state;
+      if (!_swapped && (m.state === "missing" || m.state === "error")) {
+        _swapped = true;
+        try { _polls.forEach((p) => { try { p.stop(); } catch (_) {} }); _polls = []; } catch (_) {}
+        _polls.push(_startPoll(EP_FALLBACK));
+      }
+      _paintOverlay();
+    },
+  });
+  _polls.push(_startPoll(EP));
 
   _buildOverlay();
   return { id: ID, started: true };
@@ -411,4 +430,4 @@ export function unmount() {
   _flash.fill(0);
 }
 
-export default { id: ID, title: TITLE, endpoints: [EP], mount, unmount };
+export default { id: ID, title: TITLE, endpoints: [EP, EP_FALLBACK], mount, unmount };

szl_frontier_manifest.py

@@ -275,7 +275,10 @@ def _tile_compute_fabric() -> dict:
 
 
 def _tile_governance() -> dict:
-    import szl_restraint as rs
+    try:  # prefer the extracted substrate package; fall back to local copy
+        from szl_substrate import szl_restraint as rs
+    except Exception:
+        import szl_restraint as rs
     info = rs.info()
     doctrine = info.get("doctrine", {}) or {}
     return _tile(

szl_nemo_agents.py

@@ -228,7 +228,10 @@ def _qhawaq_status() -> dict:
     n_receipts = None
     trust = 0.97
     try:
-        import szl_qhawaq as q
+        try:  # prefer the extracted substrate package; fall back to local copy
+            from szl_substrate import szl_qhawaq as q
+        except Exception:
+            import szl_qhawaq as q
         spec = q.invariants_spec()
         inv = {"count": spec.get("count") or len(spec.get("invariants", [])),
                "ids": [i.get("id") for i in spec.get("invariants", [])]}
@@ -407,7 +410,10 @@ def register(app, ns: str = "a11oy", sign_fn=None) -> dict:
             result["errors"][modname] = repr(e)
 
     try:
-        import szl_qhawaq as _q
+        try:  # prefer the extracted substrate package; fall back to local copy
+            from szl_substrate import szl_qhawaq as _q
+        except Exception:
+            import szl_qhawaq as _q
         _wire("szl_qhawaq", lambda: _q.register(app, ns=ns, sign_fn=sign_fn))
     except Exception as e:  # noqa: BLE001
         result["errors"]["szl_qhawaq_import"] = repr(e)

szl_parity_gaps.py

@@ -327,7 +327,10 @@ def register(app: Any, gates_list: list[dict], gates_by_name: dict[str, dict],
         signing_available = False
 
         try:
-            import szl_provenance as _prov
+            try:  # prefer the extracted substrate package; fall back to local copy
+                from szl_substrate import szl_provenance as _prov
+            except Exception:
+                import szl_provenance as _prov
             # Access the module-level DAG directly
             dag = _prov._KHIPU_DAG  # type: ignore[attr-defined]
             dag_count = len(dag.nodes)

szl_restraint_energy.py

@@ -84,7 +84,10 @@ _RESULTS_PATHS = [
 # Soft imports of sibling modules (consumed, never edited). All optional.
 # ---------------------------------------------------------------------------
 try:
-    import szl_restraint as _restraint  # R1's module (a11oy Restraint ladder)
+    try:  # prefer the extracted substrate package; fall back to local copy
+        from szl_substrate import szl_restraint as _restraint  # R1's module (a11oy Restraint ladder)
+    except Exception:
+        import szl_restraint as _restraint
 except Exception:  # pragma: no cover - honest degrade
     _restraint = None  # type: ignore
 

szl_willay_gateway.py

@@ -277,7 +277,10 @@ def _khipu_consensus(action_hash: str, ctx: Dict[str, Any]) -> Dict[str, Any]:
 # ---------------------------------------------------------------------------
 def _restraint_note(prompt: str) -> Dict[str, Any]:
     try:
-        import szl_restraint as r
+        try:  # prefer the extracted substrate package; fall back to local copy
+            from szl_substrate import szl_restraint as r
+        except Exception:
+            import szl_restraint as r
         dec = r.descend_ladder(prompt, "full")
         return {"available": True, "rung_key": dec.get("rung_key"),
                 "ceiling": dec.get("ceiling"), "why": dec.get("answer")}