Explain the shortest evidence-backed path from exposure to business blast radius.
One bounded workflow, one source identity, one session scope, and one review receipt.
cyber-resilience · GOVERNED INTELLIGENCE
Killinchu Defend Plane
Explain the shortest evidence-backed path from exposure to business blast radius.
4bounded model tasks
3approved model assets
5kernel contracts
0.82advisory inference floor
PRODUCT WEDGE
The job others leave fragmented.
Join code, identity, cloud, runtime, control, owner, and business impact in one reviewable attack path.
Attack path → immune gate → human review
coverage · connectivity · causality · governed response. This view combines product clarity with evidence-native operating controls.
MODEL ROUTING
Use the right model, not every model.
Models remain unavailable until an operator binds a fixed HTTPS endpoint, allowlisted host, credential, protocol, and exact declared revision. The public interface cannot supply an endpoint.
TRAINED_ADAPTERUNAVAILABLE
receipt-agent
citation, evidence, receipt, and structured-output review
SZLHOLDINGS/szl-receiptagent-qwen35-0.8b-v2 · UNAVAILABLE
TRAINED_MODELUNAVAILABLE
khipu-1.5b
grounded domain synthesis and structured decision briefs
SZLHOLDINGS/SZL-Khipu-1.5B · UNAVAILABLE
QUANTIZED_DERIVATIVEUNAVAILABLE
a11oy-mini
low-latency bounded edge brief and offline-compatible fallback
SZLHOLDINGS/A11OY-MINI · UNAVAILABLE
KERNEL FABRIC
Evidence before language.
The model never owns authority. Invariants, context limits, advisory Lambda, blocking rules, receipt attention, and deterministic hashes constrain the request and preserve reviewability.
SOFTWARE KERNELLOCAL_REFERENCE_IMPLEMENTATION
blocked
deny-by-default high-risk and compliance boundary
SZLHOLDINGS/szl-blocked
SOFTWARE KERNELLOCAL_REFERENCE_IMPLEMENTATION
invariants
source, evidence, schema, and authority invariants
SZLHOLDINGS/szl-invariants
SOFTWARE KERNELLOCAL_REFERENCE_IMPLEMENTATION
lambda-gate
weighted geometric advisory gate; uniqueness remains Conjecture 1
SZLHOLDINGS/szl-lambda-gate
SOFTWARE KERNELLOCAL_REFERENCE_IMPLEMENTATION
receipt-attn
evidence coverage and receipt-linked output attention
SZLHOLDINGS/szl-receipt-attn
SOFTWARE KERNELLOCAL_REFERENCE_IMPLEMENTATION
block-kv
bounded context budget and session-isolated memory contract
SZLHOLDINGS/szl-block-kv
TASK PLANE
Four jobs. Explicit routes.
Each task maps to a reviewed default model. A preferred model is accepted only when it belongs to the vertical's approved set.
attack path review
Default model route: receipt-agent. A plan must pass source, evidence, context, model-binding, and advisory-gate checks before inference.
control gap analysis
Default model route: khipu-1.5b. A plan must pass source, evidence, context, model-binding, and advisory-gate checks before inference.
incident summary
Default model route: a11oy-mini. A plan must pass source, evidence, context, model-binding, and advisory-gate checks before inference.
remediation review
Default model route: receipt-agent. A plan must pass source, evidence, context, model-binding, and advisory-gate checks before inference.
FRONTIER DELTA
Build what is still missing.
These are contract-ready product directions, not unsupported claims of production capability.
AI action exposure graph from model or tool call to cloud blast radius
CONTRACT_READYowner-resolved remediation packet with source and rollback receipts
CONTRACT_READYcounterfactual containment replay before an operator-approved change
CONTRACT_READYPATTERN SYNTHESIS
Learn broadly. Copy nothing proprietary.
Public product patterns inform interaction design and workflow shape. Proprietary source, private data, logos, and trade dress are excluded.
Wiz security graph
No proprietary code or data copied.Cortex XSIAM unified SecOps
No proprietary code or data copied.New Relic operational context
No proprietary code or data copied.PYTHON CONTRACT
Plan before inference.
The planning endpoint can run without provider mutation. It returns ABSTAIN until source, evidence, model binding, context, and advisory-score gates are satisfied.
curl -sS -X POST https://szlholdings-vertical-services.hf.space/api/verticals/sentra/intelligence/plan \
-H "Content-Type: application/json" \
-H "X-SZL-Session: replace-with-32-plus-character-random-token" \
--data '{
"task": "attack-path-review",
"objective": "Review the evidence and produce a bounded decision brief.",
"context": "Operator-supplied, rights-cleared context.",
"axes": {
"evidence": 0.9,
"freshness": 0.9,
"reversibility": 0.95
},
"evidence_sha256": [
"0000000000000000000000000000000000000000000000000000000000000000",
"1111111111111111111111111111111111111111111111111111111111111111"
]
}'Operational boundary. Public or properly licensed data only. Raw context is not returned or persisted by the intelligence fabric. Finance cannot trade or hold custody. Counsel does not provide or file legal advice. Sentra cannot execute remediation. Killinchu public effects remain simulated. Terra excludes person-level prospecting. Every model output requires human review.