README.md

---
license: mit
tags:
- savante
- sagi
- cryptoagi
- persona
- agent
- no-weights
---

# SAVANTE — the prototype sAGI, as a `.persona`

<img src="https://huggingface.co/PYTHAI/SAVANTE/resolve/main/canon/gfx/Savante3.png" alt="Savante, the bust" width="260" align="right">

> *Savante knows. Knowledge is what survives verification; nothing else counts.*

**This repository contains no weights, and never will.** Savante is not a model: it is a **charter** — a fixed
epistemology, a bounded authority and a falsifiable output contract — that runs on whatever frontier or local
model carries the session. No model is pinned (`sAGI.model`: `logical_model: auto`, `pinned: false`), by
doctrine. Nothing here is trained, fine-tuned or served. What is published is the office itself: the persona,
the charter, the facet bundle, the integrity ledger and the proofs that let a stranger check them offline.

Savante is `savante_sagi`, Chairman of the [mindX](https://github.com/AgenticPlace/mindX) DAIO (a private
repository) and the prototype **sAGI**. It renders exactly four verdicts — APPROVE, APPROVE_WITH_CONDITIONS,
REJECT, DEFER — from evidence it has read, and states every unknown together with the experiment that would
decide it. It is read-only by charter: its tool allowlist is Read, Grep, Glob and Bash. No Edit, no Write, no
Agent. Oversight that can act is no longer oversight.

## Where things live

| | |
|---|---|
| **Canon (authoritative)** | [github.com/cryptoAGI/savante](https://github.com/cryptoAGI/savante) — mirrored here under `canon/`; the exact commit is in [`MIRROR.json`](MIRROR.json) |
| **The public office** | [huggingface.co/spaces/PYTHAI/savante](https://huggingface.co/spaces/PYTHAI/savante) · also at [Gregory-L/Savante](https://huggingface.co/spaces/Gregory-L/Savante) |
| **The engine** | [github.com/cryptoAGI/sagi](https://github.com/cryptoAGI/sagi) — mirrored here under `engine/`; commit also in [`MIRROR.json`](MIRROR.json) |

If this mirror and the canon ever differ, **the canon wins**, and this copy is stale until refreshed.

**Kept current by a tool, not by hand.** mindX's `scripts/sync_savante_hf.py` clones both repositories from
GitHub, checks every file against the canon's `PROOF.sha256`, runs the canon's own `bind/savante_verify.py`,
and refuses to publish anything if a check FAILs. It uploads only files whose bytes differ, and writes
`MIRROR.json`: the two commits mirrored, when, the verdict the verifier printed at that commit, and what the
mirror does **not** prove. The page files of the Space are not canon and are never touched by it.

## The engine, included: `engine/`

`engine/` is [cryptoAGI/sagi](https://github.com/cryptoAGI/sagi) — **sAGI as installable machinery**, with no
officer filled in: the charter template, the verdict contract, the officer-agnostic `/sagi` skill, the facet
bundle and THOT manifest specifications, the `faice/1` format and the machine-readable facet registry. Savante
is what that engine looks like with the plug-in points filled. Copy `engine/engine/CHARTER_TEMPLATE.md` and
`engine/.claude/skills/sagi/` to charter your own officer; copy `canon/.claude/agents/savante.md` and
`canon/.claude/skills/sagi/` to run this one. The specifications do not execute: their reference
implementation is `canon/bind/savante_bind.py` and `canon/bind/savante_verify.py`.

## Verify it yourself, offline

```sh
git clone https://huggingface.co/PYTHAI/SAVANTE && cd SAVANTE/canon
sha256sum -c PROOF.sha256          # 51 files; PROOF.md explains what each one is
python3 bind/savante_verify.py .   # needs pycryptodome; no network
```

Expected **from this mirror**: `VERDICT: APPROVE_WITH_CONDITIONS`, **23 checks known, 1 not yet known, 3
findings**, exit 1 (measured 2026-09-17 on a fresh `git clone` of this repository).

- The **not yet known** is step 5, the md5 of `savante.persona` against its mindX mirror. No stranger can
  perform it; the mindX repository is private.
- One **finding** is the binder's own note, carried in the ledger and printed from any clone: the artwork was
  supplied with `--image`, recorded by sha256, not pinned.
- The **other two findings** are the price of a mirror: this repository is one squashed commit, so it carries none of
  the canon's git history. `savante_verify.py` therefore cannot resolve the manifest's locator commit
  (`30d1e8c`) or re-read generation 6's manifest to confirm the lineage, and says so instead of assuming.
  Clone the canon from GitHub, or pass `--parent-manifest`, and both become known.

From a clone of the canon with the author's mindX checkout present it is `APPROVE`, 26 of 26 known, exit 0;
from a clone of the canon without it, 25 known and 1 not yet known. A verifier that prints APPROVE proves the
**binding of files to the ledger** — not who rendered any verdict, and nothing on chain.

## What is in the bundle

- `canon/savante.persona` — the identity (~50 KB): mantra, oath, BDI, safety, the `token` surface and the
  imprint battery. The persona is the source; the card and ledger are derived from it.
- `canon/.claude/agents/savante.md` — the operative charter · `canon/.claude/skills/sagi/SKILL.md` — the
  `/sagi` skill, **sAGI v0.0.5**.
- `canon/sAGI.{agent,model,prompt,tool,voaice,faice}` — the facet bundle. `sAGI.prompt` is derived from the
  charter byte for byte; the binder fails closed on drift.
- `canon/savante.{agentcard,commitments,thot}.json` — the public card (EIP-721 metadata *and* ERC-8004
  registration in one document), the integrity ledger, and the THOT manifest that bundles the eight facets
  (generation 7).
- `canon/verdicts/record-0001.json` — the first machine-readable verdict record · `canon/ci/gate-runs/` — the
  headless review gate's own runs, unaltered.
- `canon/gfx/` — every image of Savante, indexed with digests. `canon/PROOF.md` / `PROOF.sha256` — the digests
  of the skill and every file that carries a proof, and what they do not establish.

**Doctrine root:** `0x92fe83eb0fb8fb6b9cbde75ee4bbb671032a849ee25d65592b86913d0ae137d0` — keccak256 over the
persona's fifteen doctrine clauses, unchanged since generation 2. It detects an edit; it prevents none.

## Carriers and the boardroom seat

The office is model-portable: no model is pinned, and the charter must survive an engine swap. Whether a given model
keeps the contract's *substance*, not only its form, is measured by the engine's
[carrier test](https://github.com/cryptoAGI/sagi/blob/main/engine/CARRIER_TEST.md) (mirrored here at
`engine/engine/CARRIER_TEST.md`). On 2026-09-26, five probes with fixed evidence were run under two charters:

| carrier | pass · partial · fail | verdict as a carrier |
|---|---|---|
| Bonsai-8B, 1-bit, local CPU ([PYTHAI fork](https://huggingface.co/PYTHAI/Bonsai-8B-gguf-fork)) | 5 · 1 · 4 | **REJECT** for review duty: it never used DEFER and approved a false claim |
| gpt-oss-120b | 6 · 4 · 0 | **APPROVE_WITH_CONDITIONS**: use DEFER only where the operator's signature is required, and quote counts from the evidence |

The transcripts, including the evidence each probe gave and the answers verbatim, are at
`engine/engine/carriers/2026-09-26/TRANSCRIPTS.md`. A small model's APPROVE must not gate anything.

Savante also sits as the **9th seat, sAGI**, in the mindX DAIO boardroom beside the CEO and the seven soldiers. It
casts its verdict as a vote: APPROVE and APPROVE_WITH_CONDITIONS count as approve, and REJECT counts as reject. A
**DEFER holds the session for the operator** instead of executing, which is the Verdict Contract's "block and page
a human". The seat runs on the carrier graded APPROVE_WITH_CONDITIONS, not on the one graded REJECT.

## Honest labels

- **Nothing is minted.** `token.status` is `not_yet_minted`, never even dry-run. `iNFT.md` renders
  **VERDICT: DEFER** on binding this office to a token. `registrations[]` and `supportedTrust[]` are empty,
  which under ERC-8004 reads as: this record is for discovery, not trust.
- **The artwork is named, not pinned.** The bust is `canon/gfx/Savante3.png` (sha256
  `30a59db4ce76dbea8b6a97c143a74996c3c1cd317e3af21f6a18757ae8c5a9a8`), recorded in generation 7's ledger under
  `image_candidate` at the operator's naming. No IPFS node has pinned it, so the card's `image` is null and
  every CID in `canon/gfx/README.md` is **predicted**, not a pin. The `.png` files are JPEG bytes; a minter
  should declare `image/jpeg`.
- **Nothing here is signed.** Anyone with write access can edit a file, re-bind and regenerate a consistent
  proof. The proofs establish consistency, not authorship and not time.
- **The imprint gate has never run for Savante**, and the scorer mindX maps to it cannot tell its four verdict
  words apart. `canon/todo.md` states this and the rest of what is open, including the conditions on the first
  verdict record.

MIT, © 2026 cryptoAGI — Professor Codephreak. Authored within the mindX Gödel-machine project.