---

license: apache-2.0 library_name: numpy tags: [governed-ai, khipu, szl-holdings, receipts, lambda-gate]

szl-khipu

Control before action. Evidence after.

Part of the szl-holdings estate · Product: a-11-oy.com · Proof: a11oy.net

Knot the run. Hash the proof. Fail closed.

Governed-AI khipu: an advisory Λ-gate, original YARQA canal attention, a TinyKhipu NAVIGATE/ABSTAIN silhouette, and hash-chained receipts. CPU numpy is LIVE. CUDA is UNAVAILABLE. energy UNAVAILABLE. proven_trust is always false.

Canonical GitHub source: szl-holdings/szl-khipu
Hub card: SZLHOLDINGS/szl-khipu
Kernels: SZLHOLDINGS/szl-khipu-kernels

What it is

• A Python package (szl_khipu) that knots a run, hashes a receipt, and fail-closes on a zero axis or a broken chain.
• Λ: weighted geometric mean over 13 Yuyay axes, advisory, never proven trust.
• YARQA: contiguous canals; attend only inside the compartment; leak is the bound.
• TinyKhipu-Nano: NAVIGATE / ABSTAIN silhouette. A few thousand floats. Hard ID filter.
• ReceiptAgent-Nano: 4-way gate (HARD_DENY / DENY_DEFAULT / LAMBDA_VETO / ALLOW). The kernel is truth. The agent does not override it.
• Receipts: sha256 of weights, seed, steps, loss. Honesty REPORTED. Joules null.
• Organ integrity: five-organ fail-closed kernel of szl-holdings/anatomy. HEART/YUYAY, YAWAR, YACHAY, OTel, Khipu skeleton. Not a Three.js rehost. The 3D atlas is SLSA L1 static viz.

What it is NOT

• Not Qwen. Not a Qwen fine-tune, not a Qwen rehost, not a Qwen eval.
• Not 1.5B. Nothing in this tree trains or publishes SZL-Khipu-1.5B, KHIPU-R2, or ReceiptAgent 1.5B. Those Hub cards stay RESEARCH and are not produced here.
• Not a FlashAttention rehost. Not Dao .cu, not hopper/, not cute/, not Sage csrc, not vLLM paged .cu, not flex_attention.py.
• Λ uniqueness is OPEN. Conjecture 1 is not a theorem. Unconditional uniqueness under kernel A1–A5 is machine-checked FALSE.
• Energy UNAVAILABLE. Never a fabricated joule. MEASURED-NVML or honest null.
• Not trained weights at 1–2B. Not GGUF. Not a CUDA speedup. Not proven trust.

Install

pip install -e .
pip install -e ".[gradio]"   # optional — Gradio 4 space
pip install -e ".[torch]"    # optional — torch path; CUDA still UNAVAILABLE here

Requires Python ≥ 3.11. Runtime dep: numpy>=1.26. Apache-2.0.

Python frontend + backend

Stdlib HTTP. Same process serves the holographic UI and runs the kernels. No Gradio required.

szl-khipu serve --host 0.0.0.0 --port 7860
# GET  /healthz  /version  /api/lambda  /api/greenlight  /api/anatomy
# POST /api/lambda  /api/anatomy  /api/greenlight  /api/yarqa  /api/tiledigest

Gold = OPEN. Proof teal = LIVE. Never green-as-proven. Energy UNAVAILABLE. Conjecture 1 stays OPEN.

Static JS silhouette (not the NumPy kernel): docs/index.html · szl-holdings/khipu-pages · htmlpreview.

Quickstart

Lambda (advisory)

from szl_khipu import evaluate_lambda, YUYAY_FLOORS

ev = evaluate_lambda(list(YUYAY_FLOORS))
print(ev.value, ev.blocked, ev.reason)
# advisory pass — uniqueness remains Conjecture 1 OPEN

zeroed = list(YUYAY_FLOORS)
zeroed[0] = 0.0
print(evaluate_lambda(zeroed).blocked)  # True — fail closed

CLI:

szl-khipu demo-lambda
szl-khipu demo-lambda --zero 0

YARQA (canal leak)

import numpy as np
from szl_khipu import yarqa_attn

q = k = v = np.random.default_rng(7).standard_normal((12, 4))
out = yarqa_attn(q, k, v, n_canals=3)
print(out.leaked)  # bound: leaked ≤ 1e-9

szl-khipu demo-yarqa --n-canals 3

Organ integrity (five organs)

Fail-closed substrate. Any DOWN organ or a WILLAY veto blocks the body. Λ stays Conjecture 1 OPEN. Energy UNAVAILABLE. Locked-proven stays 8. Not a Three.js rehost.

from szl_khipu import evaluate_anatomy

ev = evaluate_anatomy(seed=11)
print(ev.live_count, ev.blocked, ev.energy)  # 5 False UNAVAILABLE

print(evaluate_anatomy(zero_heart=True).blocked)        # True
print(evaluate_anatomy(fabricate_joule=True).energy_j)  # None — never a fabricated joule

szl-khipu demo-anatomy
szl-khipu demo-anatomy --tamper-chain
szl-khipu demo-anatomy --fabricate-joule

Canonical anatomy repo: szl-holdings/anatomy · 3D atlas: SZLHOLDINGS/anatomy

Train TinyKhipu

szl-khipu train --seed 20260721 --steps 280 --out artifacts
# writes artifacts/tiny_khipu.npz + artifacts/training_receipt.json
szl-khipu verify artifacts/training_receipt.json

from szl_khipu import train_tiny_khipu

result = train_tiny_khipu(seed=20260721, steps=280)
print(result.plan_valid, result.abstain, result.hallucinated)

Export all three silhouettes (TinyKhipu, ReceiptAgent, moons) and a combined receipt:

python scripts/train_and_export.py
# artifacts/*.npz + artifacts/TRAINING_RECEIPT.json
# honesty REPORTED · energy_j null · proven_trust false · whatNot listed

Kernels vs field leaders (honest deltas)

This repo silhouettes Λ, YARQA, TinyKhipu, ReceiptAgent, and receipts in numpy. It does not replace those field leaders and does not inherit their benches.

Locked-8

Lean locked-proven formulas = exactly 8. Lab numerics CHECKED ≠ Lean PROVEN. The F-number mapping onto any larger registry is UNKNOWN — never fabricated.

Conjecture 1

Any two aggregators satisfying A1–A4 agree on every input. OPEN (sorry). Unconditional uniqueness under kernel A1–A5 is machine-checked FALSE.

Λ is advisory. Trust ceiling 0.97. proven_trust is false in this artifact and every receipt it emits.

Axioms carried at runtime (checks, not a uniqueness proof):

Honesty

Doctrine v11 LOCKED · 749 declarations · 14 axioms · 163 tracked sorries · locked-proven 8.

Hub siblings

License

Apache-2.0. Copyright 2026 SZL Holdings.

Stephen P. Lutar Jr. / SZL Holdings · ORCID 0009-0001-0110-4173

---

Work with SZL Holdings

szl-khipu participates in the SZL governed-AI estate; the flagship control plane governed agent change management in production: signal → investigation → policy eval → human approval → bounded patch → signed closure receipt.

• Design partners (6-month, paid): governed-action receipts in your environment → stephenlutar2@gmail.com
• Verify our claims offline: github.com/szl-holdings/szl-gov — signed estate receipt + public verifier
• Pricing + SKUs: see docs/pricing (Control / Assurance / Sovereign)