Architecture — the 7-organ anatomy
SZL Holdings is built as a composable anatomy: a small set of organs, each with one function, one formula, and one Lean proof obligation in lutar-lean. This page shows the load-bearing 7-organ core that every flagship specialises. The full 12-organ map lives in Anatomy + Organs.
Doctrine v11 LOCKED — 749 declarations / 14 unique axioms / 163 tracked sorries · kernel
c7c0ba17. Λ = Conjecture 1 (not a theorem). SLSA L1 honest. Section 889 = exactly 5 vendors.
The 7-organ core
| # | Organ | Role | Flagship that embodies it |
|---|---|---|---|
| 1 | Λ — Spine | Aggregator; bounds every decision | a11oy (gate); Policy role (Λ-threshold, roadmap) |
| 2 | Yuyay — Heart | 13-axis conjunctive admission gate (no compensation) | a11oy + killinchu (the yuyay_v3 score) |
| 3 | Yuyaq — Cortex | Memory cortex; COSE-receipted reads/writes | Provenance Anchor role (roadmap) |
| 4 | Hukulla — Immune | Deny-by-default kill-switch / tripwires | Policy role (roadmap); gate lives in a11oy |
| 5 | Khipu — DAG | Merkle receipt accumulator; sum invariant | Operator role (roadmap); DAG lives in a11oy |
| 6 | Yawar — Blood | Circulatory receipt ledger | a11oy /v1/ledger |
| 7 | Killinchu — Bridge | Extends digital governance to physical space | killinchu (counter-UAS) |
The master operator
Every organ is a specialisation of one action-selection operator. Each extra factor lies in ([0,1]), so it can only shrink the gated region — never bypass a gate:
[ P(x,t) = \operatorname*{arg,max}{a \in \mathcal{A}} \Big[; \Lambda(x)\cdot \mathrm{Yuyay}(a)\cdot e^{-\beta,\mathrm{HUKLLA}(a)}\cdot \textstyle\prod_i \mathrm{Khipu}_i(a);\Big]. ]
The operator and each organ's proof obligation are defined in Doctrine v11 + v12 and proven (or honestly sorry-tagged) in the Lean kernel. See the 3D showcases for interactive renderings of the spine, heart, and Khipu DAG.
How a request flows
- A request enters through the Operator console surface (roadmap; internal codename rosie, retired) or directly at a shipping flagship API (a11oy / killinchu).
- The Λ-spine scores it; the Yuyay heart applies the 13-axis conjunctive gate.
- The Hukulla immune layer can hard-stop (deny by default).
- Every accepted decision emits a Khipu receipt into the Yawar ledger.
- OTel-VSP propagates a W3C
traceparentacross the mesh for observability.
Doctrine v11 LOCKED · 749/14/163 · kernel c7c0ba17 · Λ = Conjecture 1 · SLSA L1 honest