ARCHIVED 2026-08-26. Canonical: https://github.com/szl-holdings/szl-forge (per repo description); former docs-site content consolidated into https://github.com/szl-holdings/a11oy-net. Statements below are historical, kept for provenance.

SZL Holdings · Doctrine v11 · Λ = Conjecture 1 (advisory, never "green"/theorem) · canonical a-11-oy.com

---

What this is

The SZL Cookbook is to the SZL platform what the Anthropic Cookbook, OpenAI Cookbook, and Hugging Face Cookbook are to theirs: a library of copy-paste-able recipes that show, concretely, how to use the products. Here the products are the two SZL platforms — a11oy (the governed command platform) and killinchu (drones & vessels). Each recipe owns its evidence state; the catalog does not make a blanket live claim.

Choose your route

Recipe state contract

• LIVE: an observed runtime-backed result with a named source and observation time.
• SAMPLE: example input, configuration, or expected-output shape; safe to inspect, not runtime evidence.
• SIMULATED: mocked or synthetic execution, including deterministic demonstrations.
• UNAVAILABLE: the required endpoint, artifact, or dependency did not produce a usable result.

A runnable command is not proof that it was run. Historical transcripts remain historical until their source and timestamp are refreshed.

The signature first recipe — Verify a receipt end-to-end — cryptographically validates a real ECDSA-P256 DSSE signature from the public szl-lake dataset in under a minute, with zero credentials. That is the whole promise of the platform, made runnable.

---

⚡ Quickstart (60 seconds)

import base64, json, urllib.request
from cryptography.hazmat.primitives.asymmetric import ec
from cryptography.hazmat.primitives.asymmetric.utils import Prehashed
from cryptography.hazmat.primitives import hashes, serialization

LAKE = "https://huggingface.co/datasets/SZLHOLDINGS/szl-lake/resolve/main"
r = json.loads(urllib.request.urlopen(f"{LAKE}/khipu/a11oy_receipts.ndjson").readline())
pub = serialization.load_pem_public_key(
    urllib.request.urlopen("https://raw.githubusercontent.com/szl-holdings/.github/main/cosign.pub").read())

pub.verify(base64.b64decode(r["dsse_sig"]), bytes.fromhex(r["dsse_pae_sha256"]),
           ec.ECDSA(Prehashed(hashes.SHA256())))        # raises if invalid
print("VALID:", r["receipt_id"][:16], "signed by", r["dsse_keyid"])
# => VALID: 4c9c3f2b8d6452d9 signed by szlholdings-cosign

Full recipe: 01 — Verify a receipt end-to-end.

---

📖 Recipes

Each recipe has a hero hook + headline number, quickstart code, a full walkthrough, a BibTeX block, and "see also" links. Recipes marked live run against the deployed Spaces today.

Bonus engineering recipes (TypeScript + Lean, shipped in-repo): knot-calculus-v1 · anatomy-evolved-v1 · plus 9 claude-code skills.

---

🧩 The two products

SZL ships two products on one governed substrate. Each platform is composed of internal capabilities — a reasoning core (memory-attested inference), a policy gate (deny-by-default governance), and an operator console (the nervous system that drives them) — all emitting the same locked-doctrine receipts.

Each product exposes /v1/honest reporting the same locked doctrine.

---

🤝 Used by

The cookbook recipes are the customer first-touch path into the SZL platform. They are referenced from:

• The SZL Holdings org profile (landing page).
• The SZL docs site cookbook section.
• Each product README's "Try the cookbook recipe" callout.
• Each Hugging Face Space card's "Cookbook recipes for this Space" section.

Adopting the cookbook in your own evaluation? Open a PR adding your project here.

---

🔍 Honesty policy

Every recipe shows only what actually works end-to-end against the live products. Where a step needs founder credentials or a private resource, it says so plainly:

• Λ is Conjecture 1, not a theorem (open CAUCHY_ND sorry + missing symmetry axiom). No recipe claims otherwise.
• Doctrine 749/14/163 is LOCKED at kernel c7c0ba17. The cookbook references these artifacts; it never changes them.
• SLSA L1 (honest) — image signing is keyless cosign + public Rekor (recipe 06). Live-Space runtime receipt signatures are still PLACEHOLDER (Sigstore CI pending); the lake receipt used in recipe 01 carries a real signature that verifies.
• Cardano anchoring is demo-seeded, not on-chain mainnet; testnet/mainnet submission needs founder credentials (recipe 10).
• Telemetry (Remote-ID/ADS-B/MAVLink) is unauthenticated — decoded fields are claims, never ground truth (recipe 04).

---

🧪 Run the in-repo demos

# Knot calculus + PAC-Bayes (recipes 08, 09)
cd recipes/knot-calculus-v1/code && npm install && npx tsx tests/demo.ts

# Anatomy-evolved smoke tests
cd recipes/anatomy-evolved-v1/code && npm install && npm run test:smoke

---

📚 Cite the cookbook

@misc{szl_cookbook_2026,
  title        = {SZL Cookbook: Worked recipes for the SZL governed platform},
  author       = {{SZL Holdings}},
  year         = {2026},
  howpublished = {\url{https://github.com/szl-holdings/szl-cookbook}},
  doi          = {10.5281/zenodo.20434308},
  note         = {Doctrine v11 LOCKED 749/14/163, kernel c7c0ba17, Λ = Conjecture 1, SLSA L1 (honest).}
}

See CITATION.cff for the machine-readable citation.

---