System health
The operating layer, as it is.
▸ 37 checks — every state shown, warns included
- session-boot ranok
- RESUME refreshedok
- current sprint knownok
- next action knownok
- completion checks currentok
- receipts landingok
- trust events trackedok
- idea edges updatedwarn
- trajectory not staleok
- active/archive within budgetok
- intelligence score refreshedok
- token usage trackedwarn
- skills reused/createdok
- failures capturedok
- codex verification currentwarn
- protected actions gatedok
- no false done claimsok
- queue healthok
- services healthyok
- postgres billing ledgerok
- billing API boundaryok
- billing stripe readinesswarn
- billing auth verifierwarn
- model economy activewarn
- public proof currentok
- B-arm session hygieneok
- flagship avoided (routing telemetry)ok
- token-savings status honestok
- automation queues healthyok
- session economicswarn
- runtime-score artifact freshok
- dop evolution shadowok
- dop pruning healthok
- dop evaluation coveragewarn
- dop outcome coverageok
- ecp read-model freshok
- ecp leases healthywarn
verify: published artifact — counts and per-check states are emitted verbatim by the operating layer's heartbeat run
Launch readiness
updated 2026-07-01MEASUREDunweighted mean of the three pillars — recompute it yourself from this page
▸ 16 launch gates — 5 still open (the open ones are the roadmap)
- ✓Trust substrate live on the node (capability gate · attribution ledger · identity broker)
- ✓Independent install verified on a clean machine (receipt produced + verified)
- ✓Hermetic CI green across all repos
- ✓Owner identity + device pairing ceremony (no blind trust in either direction)
- ✓Mesh-side pairing enforcement + revocation
- ✓Status proof layer live on the site (verify our receipts in your browser)
- ✓Primary domain serves the current production build
- ✓Status telemetry publishes on an automated schedule
- ✓Owner-controlled billing ledger live behind private Postgres
- ✓Billing API boundary live behind public HTTPS and private loopback
- ○Stripe live billing provisioning complete
- ✓Owner-controlled account auth replaces temporary verifier
- ○Public proof pack reviewed and published
- ○Pricing published
- ○Package publish provenance
- ○Billing-grade savings telemetry
method: mean of three published pillars: launch gates done/total · operating components at PRODUCTION/total · capability matrix weighted live=1/wired=.75/config=.5/standalone=.4/mock=0
verify: published artifact — recompute from the gate list below + the activation matrix + the L0–L5 capability matrix on this page
The same telemetry, scored: the Runtime Score — six measured sub-scores →
Verified in your browser
updated 2026-07-09MEASUREDfetching receipt bundle…
verify: receipts-bundle.json · stratos receipt verify receipts-bundle.json · verifier source is public (StratosAgent repo)
What just ran in your browser
- · The published receipt bundle was fetched and its hash chain replayed receipt-by-receipt.
- · Both halves of every hybrid signature were checked — Ed25519 and ML-DSA-65, both must pass.
- · The node identity was derived from the public key here, not trusted from the file.
- · The result shown is this run's result. Altering, removing, or reordering any receipt breaks it.
One chain, counted honestly — early and small, and verifiable by anyone holding only the public key. Receipts record hashes, identity, and measured cost units. Never content, never a price.
Verify your own bundle
Step 5 of the checklist, in the browser: drop the bundle.json your node exported and the same verifier runs on it — your file is read locally and never leaves this page. No upload, no account.
drop bundle.json here — or click to choose
same check offline: stratos receipt verify bundle.json · the verifier source is public (StratosAgent repo)
Live activity
What we've shipped.
live from GitHub · TheAtmosphere + StratosAgent + efficientlabs-web + atmosphere-core
These counts are pulled live from the GitHub API — the real commit history of our repositories, not a marketing tally. As we push, this page updates on its own; what you see is the work as it lands.
last commit 2026-07-04 · 13 active days in the log · refreshed 2026-07-14
Runtime intelligence
Measured, or it doesn't render.
self-attested routing log, script-counted — counted units, not an independent audit.
verify: published artifact — histogram recomputable from the counts shown
skill-reuse events: 5 (MEASURED) · counters whose source is not instrumented are published as null — they render as nothing, never as a guess.
13 of 13 operating-layer components at PRODUCTION — 0 gaps shown below
updated 2026-06-30MEASURED- session-boot-hookPRODUCTION
- lifecycle-gatePRODUCTION
- resume-protocolPRODUCTION
- ideasPRODUCTION
- trajectoryPRODUCTION
- active-archive-memoryPRODUCTION
- intelligence-scorePRODUCTION
- token-telemetryPRODUCTION
- automation-runtimePRODUCTION
- context-load-controllerPRODUCTION
- manifest-hygiene-auditorPRODUCTION
- capability-registryPRODUCTION
- harness-generatorPRODUCTION
lifecycle ladder: DOCUMENTED → PARTIAL → WIRED → ENFORCED → MEASURED → PRODUCTION — a state is claimed only when its completion check passes.
verify: published artifact — non-PRODUCTION components are listed with their honest state
Toward launch
Production readiness
9/22 live · 8 wired · 2 config-needed
Computed from the matrix below, not hand-set: each capability is weighted by tier — Live 1.0, Wired 0.5, Config-needed 0.25, Standalone 0.25, Mock 0 — and the score is the weighted sum over all 22 capabilities (13.50 ÷ 22). If a capability changes tier, this number moves on the next build. It can never claim more than the matrix admits.
Completed
What's live today.
from the status matrix · 17 capabilities
The no-spin answer to “what have you actually finished?” — every item below is tier Live (running in production, exercised by tests) or Wired (built and connected into the daemon, hardening in progress), read straight from the same matrix you can audit at the bottom of this page. Config-needed, Standalone, and Mock are not shown here — they are not done yet.
9 Live · 8 Wired
- L0Live
Vault (AES-GCM, memory-wiped)
Secrets sealed at rest, derived keys zeroed.
- L0Live
Post-quantum receipts & seals
ML-DSA-65 signatures on skills and receipts.
- L0Live
Secret-guard on every adapter
Outbound text scrubbed of secret-shaped strings.
- L1Live
Content-addressed pipeline
SHA-256 freshness model in the engine.
- L1Live
Hermetic CI
~40 allow-listed tests on Node 20 + 22.
- L1Wired
Skill-seal verification on ingest
verifySkillBlock applied in p2p sync.
- L2Wired
Hyperswarm DHT + hole-punch
Per-platform bundles built; broad multi-device runs still early.
- L2Wired
Gossip skill-sync
Peer-to-peer skill propagation with provenance.
- L3Wired
Broker env-scoping
Child + sidecars stripped of secrets, NODE_OPTIONS, proxy creds.
- L3Wired
Exec + WASI sandbox
Sanitized-only, empty preopens, no shell exec.
- L3Wired
Write-approval (402 loop)
Cost handshake wired into all five channels.
- L4Live
Cost gate (your own AI accounts)
On /v1/chat/completions — the only spend route.
- L4Live
Local ⇄ cloud language routing
Coding → local; complex → proxy.
- L4Live
Owner-gating (fail-closed)
No owner set ⇒ no command authority.
- L4Live
Self-evolution (narrow class)
Integer-transform skills only, sealed + observed.
- L4Wired
Public Stratos routing honesty
Published CLI honors explicit local model and privacy; multi-provider adapter regression still pending.
- L5Wired
Browser/exec RCE removed
Unauthenticated new Function() path deleted.
Recent commitsLIVE
most recent 264 commits · 13 days · from GitHub · newest firstThe code, in the open
repositories · 3These repositories are open — browse the full source, and every per-commit link below resolves on GitHub.
- 4 commits · 1 feature
[rescue] provisioning: the paid→provisioned→delivered money-path loop (13 commits, 4 Codex hardening rounds) (#136)
Merge pull request #42 from EfficientLabs-ai/seif/task-add-one-new-article-to-the-docs-sur-0704-044845-bee5
feat(seif): TASK: Add ONE new article to the /docs surface by editing ONLY `data/doc
docs(audit): architecture audit of the public node-runner + ignore .gstack/ (#12)
- 1 commit
fix(ci): discipline gate scans the PR body with HTML comments stripped (#135)
- 15 commits · 1 feature
ci: enforce the Efficient Labs GitHub Operating Standard on every PR (#18)
Merge pull request #41 from EfficientLabs-ai/ci/gate-linked-context-reopened
fix(ci): gate scans the PR body with HTML comments stripped
StratosAgent: standardize Node runtime and preserve local Serena workspace boundary (#17)
ci: enforce the Efficient Labs GitHub Operating Standard on every PR (#134)
Merge pull request #40 from EfficientLabs-ai/ci/gate-linked-context-reopened
fix(ci): discipline gate — link keywords need real targets, include reopened PRs
[codex] docs(ops): environment modernization readiness report (#133)
Merge pull request #39 from EfficientLabs-ai/ci/pr-discipline
ci: enforce the Efficient Labs GitHub Operating Standard on every PR
Merge pull request #37 from EfficientLabs-ai/test/stripe-fail-closed-regression
Merge pull request #34 from EfficientLabs-ai/feat/prod-readiness-fe
Merge main into feat/prod-readiness-fe — adopt sovereign auth + billing proxy
fix(review): honest sitemap timestamps + live reduced-motion in AtmosphereReveal
feat(seif): Create ONE new file, tests/stripe-fail-closed.test.mjs (create the tests
What's real. What's not yet.
- Live
Vault (AES-GCM, memory-wiped)
Secrets sealed at rest, derived keys zeroed.
- Live
Post-quantum receipts & seals
ML-DSA-65 signatures on skills and receipts.
- Live
Secret-guard on every adapter
Outbound text scrubbed of secret-shaped strings.
- Live
Content-addressed pipeline
SHA-256 freshness model in the engine.
- Live
Hermetic CI
~40 allow-listed tests on Node 20 + 22.
- Wired
Skill-seal verification on ingest
verifySkillBlock applied in p2p sync.
- Wired
Hyperswarm DHT + hole-punch
Per-platform bundles built; broad multi-device runs still early.
- Wired
Gossip skill-sync
Peer-to-peer skill propagation with provenance.
- Mock
Economic / on-chain settlement
Offline-signed, never broadcast.
- Wired
Broker env-scoping
Child + sidecars stripped of secrets, NODE_OPTIONS, proxy creds.
- Wired
Exec + WASI sandbox
Sanitized-only, empty preopens, no shell exec.
- Wired
Write-approval (402 loop)
Cost handshake wired into all five channels.
- Config needed
Broker → local gateway path
Loopback path verified; authenticated network mode waits for owner-set ATMOS_GATEWAY_SECRET.
- Live
Cost gate (your own AI accounts)
On /v1/chat/completions — the only spend route.
- Live
Local ⇄ cloud language routing
Coding → local; complex → proxy.
- Live
Owner-gating (fail-closed)
No owner set ⇒ no command authority.
- Live
Self-evolution (narrow class)
Integer-transform skills only, sealed + observed.
- Wired
Public Stratos routing honesty
Published CLI honors explicit local model and privacy; multi-provider adapter regression still pending.
- Config needed
Channel adapters
Telegram, Discord, Slack, Matrix, Signal adapters exist; external tokens and real send/receive verification still required.
- Wired
Browser/exec RCE removed
Unauthenticated new Function() path deleted.
- Mock
Speech & vision (STT/TTS)
STT/TTS placeholders; Active Vision capture path remains mock.
- Mock
ACP agent-to-agent proxy
Returns scaffolded responses.
