[Lutar, Stephen P. (stephenlutar2-hash)]

Summary

A category-defining, build-step-free developer + trust surface under site/, KANCHAY-branded (Space Grotesk / Inter / JetBrains Mono, dark-mode-first), wired to the live a11oy substrate — nothing is mocked.

• reference.html — Stripe 3-column API reference + inline live runner. Sidebar nav · content · runner panel. A dev signs a decision into a DSSE envelope (POST /khipu/sign) and verifies it (POST /khipu/verify) in-browser, cross-origin, in under a minute — no SDK, no key. Resend-style {data,error} fetch: a non-2xx never throws, it surfaces the status + gate reasons. Surpasses Stripe: the runner hits the real production endpoint, not a sandbox echo.
• index.html — Vercel-Geist "status everywhere" dashboard shell. Live a11oy health is reflected in the top-bar pill, the tab title, and a generated favicon dot. Doctrine lock + key fingerprint are read live, not hard-coded. Empty-states render the exact command to run.
• status.html — Vercel/StatusDrop-grade status page. Four components probed live (/healthz, a real sign probe, /khipu/pubkey, MCP catalog) with concrete impact statements ("signing responding but slow ~2.8s"), never "service issues". Honest: the uptime log starts at deploy — no fabricated history.
• changelog.html — Linear-style visual changelog with user-benefit headlines.
• assets/ — shared kanchay.css theme + app.js client ({data,error} fetch, health poll, favicon/title status, JSON highlighter). No build step; works from file://.

Honesty (overclaim-guard clean)

• Λ-uniqueness labelled Conjecture 1 (open) everywhere — never "proven".
• 8 PURIQ formulas locked-proven in Lean 4 at c7c0ba17; Theorem U stated as a proven conditional.
• SLSA Build L1 honest / L2 roadmap / L3 not claimed.
• Live numbers (doctrine lock 749/14/163, key fingerprint, MCP count, latency) are measurements read at load time.

Verification (live, this PR)

Local serve — all pages HTTP 200:

200 index.html   200 reference.html   200 status.html   200 changelog.html
200 assets/kanchay.css   200 assets/app.js

Live endpoint roundtrip the runner performs:

POST /khipu/sign    HTTP 200  0.045s  payloadType=application/vnd.szl.khipu+json  1 sig  keyid=szlholdings-cosign
POST /khipu/verify  HTTP 200  0.042s  {"verified":true,"keyid_match":true,"pae_digest":"5a939bfc…"}
GET  /khipu/pubkey  HTTP 200  curve=secp256r1 (P-256)  fp=d3028f8aecd0841f…
GET  /api/a11oy/v1/mcp/tools  HTTP 200  count=11
GET  /healthz       HTTP 200  lock=749/14/163  commit=c7c0ba17

Honest notes / stubs

• QUICKSTART.md cites a stale pubkey fingerprint (a4d73120…) and "4 governed tools"; the live values are d3028f8a… and 11. The site reads both live, so it stays correct — the docs can be reconciled separately.
• Persisted uptime history + 90-day bars are roadmap (collector not yet built); the page says so and reports point-in-time health honestly on each load.

🤖 Generated with Claude Code