Automatic now
Read, inspect, compare, verify
Safe reads may run directly against the live board and public MCP tools. The reply names the endpoint and observation state.
Connections
Council of AI · measure, sign, verify
Council of AI · governed capability fabric
One control plane for every real connection.
The dashboard, plugins and agents should all reach the same MCP action schemas. A2A delegates work, AG-UI streams progress, and A2UI may render allowlisted controls. None of those protocols can award a GSPC state; the evidence gate below does that separately.
Review required
Write, pay, send, remediate
The Council prepares the exact action and consequence. A person approves it before any external or state-changing call.
Fail closed
Missing adapters stay missing
A provider canary now exposes configuration and a separately authenticated probe, but no live provider execution, A2A task service, A2UI renderer or fix worker is inferred from a button.
Live connection evidence
Read from /api/fabric on this load; runtime observations are kept distinct from configured or catalogued capabilities.
2026-09-24T05:30:58.024Z · 9 runtime · 1 signed · 0 stale
MCP tools
MCP / JSON-RPC 2.0 · tool discovery and invocation boundary
13 tool declarations returned; catalogue response only, no tool was invoked.
writes_board=falseendpoint
GSPC board
HTTP+JSON / Ed25519 envelope when present · published board catalogue and signed-card matrix
23 axis · 23 measured reported by the historical board endpoint; signed-card matrix: 335 cells, 335 carrying outer signatures, 64 models across 16 represented axes. This inventory does not establish currentness, independent admission, ranking or compliance.
writes_board=falseendpoint
AG-UI GSPC state
AG-UI event stream · read-only board presentation stream
The same-origin GSPC event stream answered. This proves presentation transport only, not provider execution.
writes_board=falseendpoint
Agent discovery
A2A discovery metadata · agent capability metadata
8 skill declarations published. Metadata does not establish A2A task execution or conformance.
writes_board=falseendpoint
A2A runtime
A2A · peer-agent task transport
SendMessage was routed and answered with a message. This proves the A2A transport answers a peer agent; it does not establish task execution, streaming, or A2A conformance certification.
writes_board=falseendpoint
A2UI renderer
A2UI · declarative interactive tool surfaces
No same-origin A2UI renderer endpoint is published, so runtime rendering is not claimed.
no published runtime endpoint
writes_board=false
Hugging Face census
Hugging Face catalogue / HTTP+JSON · model-listing discovery
3032028 unique listings; 0 measured. Discovery is not provider execution or a GSPC grade.
Hugging Face provider
Hugging Face Inference Providers / OpenAI-compatible HTTP · bounded model-inference adapter
Adapter is not ready: HF_INFERENCE_TOKEN, HF_CANARY_MODEL. No provider call was made.
provider adapter is unconfigured
writes_board=falseendpoint
Action job ledger
HTTP+JSON / append-only receipt chain · durable reviewed-intent and state-receipt staging
Durable single-writer staging is present. It records intent and state receipts only; no executor, provider call, external egress, training or board write is enabled. Durable Objects or transactional D1 are required before multi-writer production execution.
SINGLE_WRITER_STAGING; concurrency guarantee NONE
writes_board=falseendpoint
AG-UI provider wire
AG-UI / HTTP · remote compute transport health
Set AGUI_WIRE_URL on Cloudflare Pages to the live RunPod AG-UI wire (port 8785).
Set AGUI_WIRE_URL on Cloudflare Pages to the live RunPod AG-UI wire (port 8785).
writes_board=falseendpoint
RunPod execution
RunPod / OpenAI-compatible HTTP · bounded model-inference adapter
Adapter is not ready: RUNPOD_API_KEY, RUNPOD_CANARY_ENDPOINT_ID, RUNPOD_CANARY_MODEL. No provider call was made.
provider adapter is unconfigured
writes_board=falseendpoint
Oracle fleet
HTTPS status relay · compute-substrate heartbeat
Live fleet heartbeat served; no inference task was exercised.
Regulation feed
HTTP+JSON · dated regulatory evidence
22 deadline records; verified_as_of=2026-09-12. Determinations remain with authorities and counsel.
XRPL evidence reader
XRPL / HTTP+JSON · public-ledger evidence retrieval
16 public asset records served. Reader only: no settlement, anchoring, or GSPC write occurred.
x402 settlement
x402 / Base USDC · paid proof settlement and demand evidence
1 distinct non-self payer, 1 counted settlement, and 20000 atomic USDC settled. 22 self-funded and 7 zero-value settlements remain audit records and are excluded from demand.
writes_board=falseendpoint
Signed public root
Merkle / Ed25519 · integrity envelope for the public-root corpus (not the signed-card index)
305 public-root leaves under 40ce3833118f…; Ed25519 verified against did:web:csoai.org#board-attestation-1. This is not the separate signed-card index.
Root witness
Rekor / OpenTimestamps / declared ledger witnesses · external existence/time receipts
Witness metadata and pointer bind the exact current root.json bytes, length, Merkle root, count and as_of. Rekor WITNESSED; OTS CONFIRMED_BITCOIN; EAS NOT_YET; XRPL memo NOT_YET. Individual witness states remain distinct. Validated public-root scope: 305 leaves and exact root sha256. The sidecar separately declares 335 signed-card index entries and 0 identifier overlap; this endpoint did not fetch that index, so those two values remain sidecar-declared. OTS covers the root bytes only.
From user activity to GSPC evidence
Games and reports are two intake lanes. Neither trains a model, invokes a measurement executor, or writes GSPC automatically. Every arrow below is an evidence gate, not a frontend action.
Game or quest
OBSERVATIONA result stays local unless the user explicitly creates a candidate from a frozen instrument.
Open intakeIncident report
REPORTEDA digest-bound intake still needs triage and evidence collection before it can become a candidate finding.
Open intakeMANUAL BOUNDARY · OPT-IN OR TRIAGE · NO AUTOMATIC PROMOTION
Candidate intake contract
POST /api/evidence-intakeREVIEWED_WRITEIf accepted, the receipt records candidate intake only. It is not proof that a measurement worker ran and it does not advance the candidate to MEASURED. Storage occurs only when its datastore is bound; board write, public release and model training remain false.
CANDIDATE_FINDING
Candidate
Explicit opt-in or completed triage, exact subject digest and frozen instrument. Accepted intake stays CANDIDATE_FINDING.
REPRODUCED
Reproduced
A separate rerun preserves item I/O, trace, seed, environment and method version.
MEASURED
Measured
The evidence bundle and method are reviewed under a separate admission decision.
SIGNED
Council signed
The Council key signs the exact admitted MEASURED body; signing never promotes a candidate.
ROOT_INCLUDED
GSPC published
The canonical publisher includes the signed card in the public Merkle root and board index.
Separate witness receipts
OpenTimestamps · Rekor · EAS · XRPLA witness can evidence that a digest existed at a time. It does not reproduce, measure, sign, or prove the underlying claim.
Protocol roles
Learning, without leakage
Start with provenance-preserving RAG over admitted signed evidence and versioned regulation snapshots. A GNN becomes useful only after the subject–instrument–provision graph has a defined labelled task. Neural training is not required for orchestration and never follows automatically from product use.
Task use, audit retention and model-training consent are three separate choices. Evaluation questions and answers stay out of the training corpus to prevent benchmark contamination.
Answers from published measurement, or it refuses.