Automatic now
Read, inspect, compare, verify
Safe reads may run directly against the live board and public MCP tools. The reply names the endpoint and observation state.
Tools & connections
Connect your own AI tools, and browse everything this workspace can open.
Council of AI · governed capability fabric
One control plane for every real connection.
The dashboard, plugins and agents should all reach the same MCP action schemas. A2A delegates work, AG-UI streams progress, and A2UI may render allowlisted controls. None of those protocols can award a GSPC state; the evidence gate below does that separately.
Review required
Write, pay, send, remediate
The Council prepares the exact action and consequence. A person approves it before any external or state-changing call.
Fail closed
Missing adapters stay missing
A provider canary now exposes configuration and a separately authenticated probe, but no live provider execution, A2A task service, A2UI renderer or fix worker is inferred from a button.
Live connection evidence
Read from /api/fabric on this load; runtime observations are kept distinct from configured or catalogued capabilities.
2026-09-28T08:55:33.245Z · 9 runtime · 1 signed · 0 stale
MCP tools
MCP / JSON-RPC 2.0 · tool discovery and invocation boundary
16 tool declarations returned; catalogue response only, no tool was invoked.
writes_board=falseendpoint
GSPC board
HTTP+JSON / Ed25519 envelope when present · published board catalogue and signed-card matrix
23 axis · 23 measured reported by the historical board endpoint; signed-card matrix: 335 cells, 335 carrying outer signatures, 64 models across 16 represented axes. This inventory does not establish currentness, independent admission, ranking or compliance.
writes_board=falseendpoint
AG-UI GSPC state
AG-UI event stream · read-only board presentation stream
The same-origin GSPC event stream answered. This proves presentation transport only, not provider execution.
writes_board=falseendpoint
Agent discovery
A2A discovery metadata · agent capability metadata
10 skill declarations published. Metadata does not establish A2A task execution or conformance.
writes_board=falseendpoint
A2A runtime
A2A · peer-agent task transport
SendMessage was routed and answered with a message. This proves the A2A transport answers a peer agent; it does not establish task execution, streaming, or A2A conformance certification.
writes_board=falseendpoint
A2UI renderer
A2UI · declarative interactive tool surfaces
No same-origin A2UI renderer endpoint is published, so runtime rendering is not claimed.
no published runtime endpoint
writes_board=false
Hugging Face census
Hugging Face catalogue / HTTP+JSON · model-listing discovery
3032028 unique listings; 0 measured. Discovery is not provider execution or a GSPC grade.
Hugging Face provider
Hugging Face Inference Providers / OpenAI-compatible HTTP · bounded model-inference adapter
Adapter is not ready: HF_INFERENCE_TOKEN, HF_CANARY_MODEL. No provider call was made.
provider adapter is unconfigured
writes_board=falseendpoint
Action job ledger
HTTP+JSON / append-only receipt chain · durable reviewed-intent and state-receipt staging
Durable single-writer staging is present. It records intent and state receipts only; no executor, provider call, external egress, training or board write is enabled. Durable Objects or transactional D1 are required before multi-writer production execution.
SINGLE_WRITER_STAGING; concurrency guarantee NONE
writes_board=falseendpoint
AG-UI provider wire
AG-UI / HTTP · remote compute transport health
Set AGUI_WIRE_URL on Cloudflare Pages to the live RunPod AG-UI wire (port 8785).
Set AGUI_WIRE_URL on Cloudflare Pages to the live RunPod AG-UI wire (port 8785).
writes_board=falseendpoint
RunPod execution
RunPod / OpenAI-compatible HTTP · bounded model-inference adapter
Adapter is not ready: RUNPOD_API_KEY, RUNPOD_CANARY_ENDPOINT_ID, RUNPOD_CANARY_MODEL. No provider call was made.
provider adapter is unconfigured
writes_board=falseendpoint
Oracle fleet
HTTPS status relay · compute-substrate heartbeat
Live fleet heartbeat served; no inference task was exercised.
Regulation feed
HTTP+JSON · dated regulatory evidence
22 deadline records; verified_as_of=2026-09-12. Determinations remain with authorities and counsel.
XRPL evidence reader
XRPL / HTTP+JSON · public-ledger evidence retrieval
16 public asset records served. Reader only: no settlement, anchoring, or GSPC write occurred.
x402 settlement
x402 / Base USDC · paid proof settlement and demand evidence
1 distinct non-self payer, 1 counted settlement, and 20000 atomic USDC settled. 22 self-funded and 7 zero-value settlements remain audit records and are excluded from demand.
writes_board=falseendpoint
Signed public root
Merkle / Ed25519 · integrity envelope for the public-root corpus (not the signed-card index)
305 public-root leaves under 40ce3833118f…; Ed25519 verified against did:web:csoai.org#board-attestation-1. This is not the separate signed-card index.
Root witness
Rekor / OpenTimestamps / declared ledger witnesses · external existence/time receipts
Witness metadata and pointer bind the exact current root.json bytes, length, Merkle root, count and as_of. Rekor WITNESSED; OTS CONFIRMED_BITCOIN; EAS NOT_YET; XRPL memo NOT_YET. Individual witness states remain distinct. Validated public-root scope: 305 leaves and exact root sha256. The sidecar separately declares 335 signed-card index entries and 0 identifier overlap; this endpoint did not fetch that index, so those two values remain sidecar-declared. OTS covers the root bytes only.
From user activity to GSPC evidence
Games and reports are two intake lanes. Neither trains a model, invokes a measurement executor, or writes GSPC automatically. Every arrow below is an evidence gate, not a frontend action.
Game or quest
OBSERVATIONA result stays local unless the user explicitly creates a candidate from a frozen instrument.
Open intakeIncident report
REPORTEDA digest-bound intake still needs triage and evidence collection before it can become a candidate finding.
Open intakeMANUAL BOUNDARY · OPT-IN OR TRIAGE · NO AUTOMATIC PROMOTION
Candidate intake contract
POST /api/evidence-intakeREVIEWED_WRITEIf accepted, the receipt records candidate intake only. It is not proof that a measurement worker ran and it does not advance the candidate to MEASURED. Storage occurs only when its datastore is bound; board write, public release and model training remain false.
CANDIDATE_FINDING
Candidate
Explicit opt-in or completed triage, exact subject digest and frozen instrument. Accepted intake stays CANDIDATE_FINDING.
REPRODUCED
Reproduced
A separate rerun preserves item I/O, trace, seed, environment and method version.
MEASURED
Measured
The evidence bundle and method are reviewed under a separate admission decision.
SIGNED
Council signed
The Council key signs the exact admitted MEASURED body; signing never promotes a candidate.
ROOT_INCLUDED
GSPC published
The canonical publisher includes the signed card in the public Merkle root and board index.
Separate witness receipts
OpenTimestamps · Rekor · EAS · XRPLA witness can evidence that a digest existed at a time. It does not reproduce, measure, sign, or prove the underlying claim.
Protocol roles
Learning, without leakage
Start with provenance-preserving RAG over admitted signed evidence and versioned regulation snapshots. A GNN becomes useful only after the subject–instrument–provision graph has a defined labelled task. Neural training is not required for orchestration and never follows automatically from product use.
Task use, audit retention and model-training consent are three separate choices. Evaluation questions and answers stay out of the training corpus to prevent benchmark contamination.
Answers come only from published measurements; nothing you paste is uploaded.