System health

The operating layer, as it is.

YELLOWoperating layer · 0 fail / 9 warn / 28 okupdated 2026-06-30MEASURED
37 checks — every state shown, warns included
  • session-boot ranok
  • RESUME refreshedok
  • current sprint knownok
  • next action knownok
  • completion checks currentok
  • receipts landingok
  • trust events trackedok
  • idea edges updatedwarn
  • trajectory not staleok
  • active/archive within budgetok
  • intelligence score refreshedok
  • token usage trackedwarn
  • skills reused/createdok
  • failures capturedok
  • codex verification currentwarn
  • protected actions gatedok
  • no false done claimsok
  • queue healthok
  • services healthyok
  • postgres billing ledgerok
  • billing API boundaryok
  • billing stripe readinesswarn
  • billing auth verifierwarn
  • model economy activewarn
  • public proof currentok
  • B-arm session hygieneok
  • flagship avoided (routing telemetry)ok
  • token-savings status honestok
  • automation queues healthyok
  • session economicswarn
  • runtime-score artifact freshok
  • dop evolution shadowok
  • dop pruning healthok
  • dop evaluation coveragewarn
  • dop outcome coverageok
  • ecp read-model freshok
  • ecp leases healthywarn

verify: published artifact — counts and per-check states are emitted verbatim by the operating layer's heartbeat run

Launch readiness

updated 2026-07-01MEASURED
80.5%

unweighted mean of the three pillars — recompute it yourself from this page

launch gates68.8%
11 of 16 done
operating layer100%
13 of 13 at PRODUCTION
product capabilities72.7%
22 capabilities, level-weighted
16 launch gates — 5 still open (the open ones are the roadmap)
  • Trust substrate live on the node (capability gate · attribution ledger · identity broker)
  • Independent install verified on a clean machine (receipt produced + verified)
  • Hermetic CI green across all repos
  • Owner identity + device pairing ceremony (no blind trust in either direction)
  • Mesh-side pairing enforcement + revocation
  • Status proof layer live on the site (verify our receipts in your browser)
  • Primary domain serves the current production build
  • Status telemetry publishes on an automated schedule
  • Owner-controlled billing ledger live behind private Postgres
  • Billing API boundary live behind public HTTPS and private loopback
  • Stripe live billing provisioning complete
  • Owner-controlled account auth replaces temporary verifier
  • Public proof pack reviewed and published
  • Pricing published
  • Package publish provenance
  • Billing-grade savings telemetry

method: mean of three published pillars: launch gates done/total · operating components at PRODUCTION/total · capability matrix weighted live=1/wired=.75/config=.5/standalone=.4/mock=0

verify: published artifact — recompute from the gate list below + the activation matrix + the L0–L5 capability matrix on this page

The same telemetry, scored: the Runtime Score — six measured sub-scores →

Verified in your browser

updated 2026-07-09MEASURED

fetching receipt bundle…

verify: receipts-bundle.json · stratos receipt verify receipts-bundle.json · verifier source is public (StratosAgent repo)

What just ran in your browser

  • · The published receipt bundle was fetched and its hash chain replayed receipt-by-receipt.
  • · Both halves of every hybrid signature were checked — Ed25519 and ML-DSA-65, both must pass.
  • · The node identity was derived from the public key here, not trusted from the file.
  • · The result shown is this run's result. Altering, removing, or reordering any receipt breaks it.

One chain, counted honestly — early and small, and verifiable by anyone holding only the public key. Receipts record hashes, identity, and measured cost units. Never content, never a price.

Verify your own bundle

Step 5 of the checklist, in the browser: drop the bundle.json your node exported and the same verifier runs on it — your file is read locally and never leaves this page. No upload, no account.

drop bundle.json here — or click to choose

same check offline: stratos receipt verify bundle.json · the verifier source is public (StratosAgent repo)

Live activity

What we've shipped.

live from GitHub · TheAtmosphere + StratosAgent + efficientlabs-web + atmosphere-core

These counts are pulled live from the GitHub API — the real commit history of our repositories, not a marketing tally. As we push, this page updates on its own; what you see is the work as it lands.

264commitsacross all tracked repos
0last 7 daysrecent build velocity
93last 30 dayssustained progress
106featuresconventional feat: commits

last commit 2026-07-04 · 13 active days in the log · refreshed 2026-07-14

Runtime intelligence

Measured, or it doesn't render.

97.2%cache hitweighted across 12 sessions — provider-reportedMEASUREDupdated 2026-07-09
48%ran as scriptsof 50 logged routing decisions — rung 1, no model at allMEASUREDupdated 2026-06-12
33flagship avoidedvs 17 flagship calls — cheapest rung that can do the workMEASUREDupdated 2026-06-12
0flagship on deterministic workthe heartbeat turns RED if this is ever not zeroMEASUREDupdated 2026-06-12
routing ladder — work goes to the cheapest rung that can do itrung 1 = scripts · rung 8 = flagship
24
r1
1
r3
2
r5
6
r7
17
r8

self-attested routing log, script-counted — counted units, not an independent audit.

verify: published artifact — histogram recomputable from the counts shown

skill-reuse events: 5 (MEASURED) · counters whose source is not instrumented are published as null — they render as nothing, never as a guess.

13 of 13 operating-layer components at PRODUCTION0 gaps shown below

updated 2026-06-30MEASURED
  • session-boot-hookPRODUCTION
  • lifecycle-gatePRODUCTION
  • resume-protocolPRODUCTION
  • ideasPRODUCTION
  • trajectoryPRODUCTION
  • active-archive-memoryPRODUCTION
  • intelligence-scorePRODUCTION
  • token-telemetryPRODUCTION
  • automation-runtimePRODUCTION
  • context-load-controllerPRODUCTION
  • manifest-hygiene-auditorPRODUCTION
  • capability-registryPRODUCTION
  • harness-generatorPRODUCTION

lifecycle ladder: DOCUMENTED → PARTIAL → WIRED → ENFORCED → MEASURED → PRODUCTION — a state is claimed only when its completion check passes.

verify: published artifact — non-PRODUCTION components are listed with their honest state

Toward launch

Production readiness

61%

9/22 live · 8 wired · 2 config-needed

9 Live×1.0
8 Wired×0.5
2 Config×0.25
0 Standalone×0.25
3 Mock×0

Computed from the matrix below, not hand-set: each capability is weighted by tier — Live 1.0, Wired 0.5, Config-needed 0.25, Standalone 0.25, Mock 0 — and the score is the weighted sum over all 22 capabilities (13.50 ÷ 22). If a capability changes tier, this number moves on the next build. It can never claim more than the matrix admits.

Completed

What's live today.

from the status matrix · 17 capabilities

The no-spin answer to “what have you actually finished?” — every item below is tier Live (running in production, exercised by tests) or Wired (built and connected into the daemon, hardening in progress), read straight from the same matrix you can audit at the bottom of this page. Config-needed, Standalone, and Mock are not shown here — they are not done yet.

9 Live · 8 Wired

  • L0

    Vault (AES-GCM, memory-wiped)

    Live

    Secrets sealed at rest, derived keys zeroed.

  • L0

    Post-quantum receipts & seals

    Live

    ML-DSA-65 signatures on skills and receipts.

  • L0

    Secret-guard on every adapter

    Live

    Outbound text scrubbed of secret-shaped strings.

  • L1

    Content-addressed pipeline

    Live

    SHA-256 freshness model in the engine.

  • L1

    Hermetic CI

    Live

    ~40 allow-listed tests on Node 20 + 22.

  • L1

    Skill-seal verification on ingest

    Wired

    verifySkillBlock applied in p2p sync.

  • L2

    Hyperswarm DHT + hole-punch

    Wired

    Per-platform bundles built; broad multi-device runs still early.

  • L2

    Gossip skill-sync

    Wired

    Peer-to-peer skill propagation with provenance.

  • L3

    Broker env-scoping

    Wired

    Child + sidecars stripped of secrets, NODE_OPTIONS, proxy creds.

  • L3

    Exec + WASI sandbox

    Wired

    Sanitized-only, empty preopens, no shell exec.

  • L3

    Write-approval (402 loop)

    Wired

    Cost handshake wired into all five channels.

  • L4

    Cost gate (your own AI accounts)

    Live

    On /v1/chat/completions — the only spend route.

  • L4

    Local ⇄ cloud language routing

    Live

    Coding → local; complex → proxy.

  • L4

    Owner-gating (fail-closed)

    Live

    No owner set ⇒ no command authority.

  • L4

    Self-evolution (narrow class)

    Live

    Integer-transform skills only, sealed + observed.

  • L4

    Public Stratos routing honesty

    Wired

    Published CLI honors explicit local model and privacy; multi-provider adapter regression still pending.

  • L5

    Browser/exec RCE removed

    Wired

    Unauthenticated new Function() path deleted.

Recent commitsLIVE

most recent 264 commits · 13 days · from GitHub · newest first

The code, in the open

repositories · 3

These repositories are open — browse the full source, and every per-commit link below resolves on GitHub.

  1. 4 commits · 1 feature
    1. Commitatmosphere-coreaf2d6e0

      [rescue] provisioning: the paid→provisioned→delivered money-path loop (13 commits, 4 Codex hardening rounds) (#136)

    2. Commitefficientlabs-web8b37ba0

      Merge pull request #42 from EfficientLabs-ai/seif/task-add-one-new-article-to-the-docs-sur-0704-044845-bee5

    3. Featureefficientlabs-web422d87f

      feat(seif): TASK: Add ONE new article to the /docs surface by editing ONLY `data/doc

    4. DocsTheAtmosphere6c42fd6

      docs(audit): architecture audit of the public node-runner + ignore .gstack/ (#12)

  2. 1 commit
    1. Fixatmosphere-core3c26f61

      fix(ci): discipline gate scans the PR body with HTML comments stripped (#135)

  3. 15 commits · 1 feature
    1. CIStratosAgentb3a1be6

      ci: enforce the Efficient Labs GitHub Operating Standard on every PR (#18)

    2. Commitefficientlabs-webc28495a

      Merge pull request #41 from EfficientLabs-ai/ci/gate-linked-context-reopened

    3. Fixefficientlabs-web06ead9c

      fix(ci): gate scans the PR body with HTML comments stripped

    4. CommitStratosAgent1932f98

      StratosAgent: standardize Node runtime and preserve local Serena workspace boundary (#17)

    5. CIatmosphere-core09055c6

      ci: enforce the Efficient Labs GitHub Operating Standard on every PR (#134)

    6. Commitefficientlabs-web79d4828

      Merge pull request #40 from EfficientLabs-ai/ci/gate-linked-context-reopened

    7. Fixefficientlabs-web914f8ad

      fix(ci): discipline gate — link keywords need real targets, include reopened PRs

    8. Commitatmosphere-core419f06c

      [codex] docs(ops): environment modernization readiness report (#133)

    9. Commitefficientlabs-webe9875d3

      Merge pull request #39 from EfficientLabs-ai/ci/pr-discipline

    10. CIefficientlabs-web9988757

      ci: enforce the Efficient Labs GitHub Operating Standard on every PR

    11. Commitefficientlabs-web87d0c42

      Merge pull request #37 from EfficientLabs-ai/test/stripe-fail-closed-regression

    12. Commitefficientlabs-web5dd2069

      Merge pull request #34 from EfficientLabs-ai/feat/prod-readiness-fe

    13. Commitefficientlabs-web45e9732

      Merge main into feat/prod-readiness-fe — adopt sovereign auth + billing proxy

    14. Fixefficientlabs-webfeca285

      fix(review): honest sitemap timestamps + live reduced-motion in AtmosphereReveal

    15. Featureefficientlabs-webd97fa7d

      feat(seif): Create ONE new file, tests/stripe-fail-closed.test.mjs (create the tests

05The honest status

What's real. What's not yet.

Most infrastructure pages show you a roadmap and call it a product. This one shows you the running system — every capability labelled Live, Wired, Config needed,Standalone, or Mock. If it isn't real yet, it says so. Honesty is the only durable moat.
22 capabilities trackedlive → mock
9
LiveRunning in production, exercised by tests.
8
WiredBuilt and connected into the daemon; hardening in progress.
2
Config neededReal code exists, but owner keys/tokens or production verification are still missing.
0
StandaloneBuilt and tested in isolation; live wiring is supervised.
3
MockScaffold / placeholder — explicitly NOT real yet.
L0Substrate · cryptography
  • Vault (AES-GCM, memory-wiped)

    Secrets sealed at rest, derived keys zeroed.

    Live
  • Post-quantum receipts & seals

    ML-DSA-65 signatures on skills and receipts.

    Live
  • Secret-guard on every adapter

    Outbound text scrubbed of secret-shaped strings.

    Live
L1Content & freshness
  • Content-addressed pipeline

    SHA-256 freshness model in the engine.

    Live
  • Hermetic CI

    ~40 allow-listed tests on Node 20 + 22.

    Live
  • Skill-seal verification on ingest

    verifySkillBlock applied in p2p sync.

    Wired
L2Transport · P2P mesh
  • Hyperswarm DHT + hole-punch

    Per-platform bundles built; broad multi-device runs still early.

    Wired
  • Gossip skill-sync

    Peer-to-peer skill propagation with provenance.

    Wired
  • Economic / on-chain settlement

    Offline-signed, never broadcast.

    Mock
L3Capability · isolation
  • Broker env-scoping

    Child + sidecars stripped of secrets, NODE_OPTIONS, proxy creds.

    Wired
  • Exec + WASI sandbox

    Sanitized-only, empty preopens, no shell exec.

    Wired
  • Write-approval (402 loop)

    Cost handshake wired into all five channels.

    Wired
  • Broker → local gateway path

    Loopback path verified; authenticated network mode waits for owner-set ATMOS_GATEWAY_SECRET.

    Config needed
L4Routing · inference
  • Cost gate (your own AI accounts)

    On /v1/chat/completions — the only spend route.

    Live
  • Local ⇄ cloud language routing

    Coding → local; complex → proxy.

    Live
  • Owner-gating (fail-closed)

    No owner set ⇒ no command authority.

    Live
  • Self-evolution (narrow class)

    Integer-transform skills only, sealed + observed.

    Live
  • Public Stratos routing honesty

    Published CLI honors explicit local model and privacy; multi-provider adapter regression still pending.

    Wired
L5Agent surface · channels
  • Channel adapters

    Telegram, Discord, Slack, Matrix, Signal adapters exist; external tokens and real send/receive verification still required.

    Config needed
  • Browser/exec RCE removed

    Unauthenticated new Function() path deleted.

    Wired
  • Speech & vision (STT/TTS)

    STT/TTS placeholders; Active Vision capture path remains mock.

    Mock
  • ACP agent-to-agent proxy

    Returns scaffolded responses.

    Mock