KHIPU

Sovereign Ledger — the whole organism's health & spend, one screen · honest by construction
live
a11oy module ledger — local / advisory (in-container)
AUTHORITATIVE Live Sovereign Router — real paid spend on the box ledger
read live from the box router at request time · chain state as reported by the source · never summed with the local advisory ledger above
GOVERNED Frontier Console — one capped call, receipt verified locally
operator-gated · model pinned · max 256 tokens · 8s cooldown · 50/day · the box router meters & kill-switches every call. a11oy verifies the DSSE / ECDSA-P256 receipt against a pinned key — the router is never trusted, the math is checked here.
live / intact spend down / tripped unknown / —