Changelog

All notable changes across the SZL flagships are documented here. The format follows Keep a Changelog and the project adheres to Semantic Versioning.

Doctrine v11 LOCKED — 749/14/163 · kernel c7c0ba17 · Λ = Conjecture 1 · SLSA L1 honest. This page aggregates the v1.0.0 release notes published per flagship; each flagship's own release is the source of truth (linked below).

---

1.0.0 — 2026-06-09

Coordinated v1.0.0 launch of the two shipping flagships. Per-flagship GitHub releases: a11oy · killinchu.

Added (shipping flagships)

• a11oy — policy + receipt substrate; /v1/policy/evaluate, /v1/verify, /v1/ledger, /v1/honest, /v1/version live.
• killinchu — counter-UAS rule engine; real Remote-ID / ADS-B / MAVLink decoders (unauthenticated/spoofable, honestly disclosed); 13-axis Λ-gate; effector path is a command demonstration, simulated; DSSE Khipu receipts (PLACEHOLDER signatures).
• Doctrine v11 compliance — kernel c7c0ba17 (749 declarations / 14 axioms / 163 sorries); exactly 8 locked-proven formulas {F1,F4,F7,F11,F12,F18,F19,F22}; Λ unconditional = Conjecture 1 (machine-checked false, never a theorem); Khipu BFT = Conjecture 2 (Wave 23 khipu_quorum_safety_conditional conditional-only).

Roadmap roles (not released)

• Provenance Anchor (internal codename amaru, retired) — governance-receipt sync; Cardano hash-anchoring in development. Not released as a standalone service.
• Operator (internal codename rosie, retired) — Khipu receipt-DAG console; sum invariant verified in lutar-lean. Roadmap.
• Policy (internal codename sentra, retired) — deny-by-default posture-drift detector; live policy gate ships inside a11oy. Roadmap.

Tooling & security (per shipping repo)

• SBOM (CycloneDX + SPDX) attached to each release; cosign keyless OIDC signing path documented.
• OpenSSF Scorecard, SECURITY.md, SUPPORT.md, CODEOWNERS, Dependabot, Trivy/Grype gates per repo.
• W3C traceparent propagated end-to-end (OTel-VSP nerves).
• CITATION.cff per flagship for academic citeability.

Security

• Section 889 — no covered telecommunications equipment from the 5 named vendors (Huawei, ZTE, Hytera, Hikvision, Dahua).
• No Iron Bank, FedRAMP, CMMC, SWFT, or Mission Owner claims (capability honesty per Anthropic RSP pattern).
• Λ = Conjecture 1 (never a theorem) — mathematical honesty enforced in every /v1/honest payload.
• DSSE/Sigstore receipt signatures labelled PLACEHOLDER until CI signing lands — honest SLSA L1.

Notes

• Warhacker (San Diego) launch window: June 2026.

---

Unreleased

• UDS — Unified Demo Surface public launch (see /uds).
• Sigstore CI signing wired (removes PLACEHOLDER receipt labels → SLSA L1 attested).

---

---

Doctrine v11 LOCKED · 749/14/163 · kernel c7c0ba17 · Λ = Conjecture 1 · SLSA L1 honest