--- license: mit tags: - savante - sagi - cryptoagi - persona - agent - no-weights --- # SAVANTE — the prototype sAGI, as a `.persona` Savante, the bust > *Savante knows. Knowledge is what survives verification; nothing else counts.* **This repository contains no weights, and never will.** Savante is not a model: it is a **charter** — a fixed epistemology, a bounded authority and a falsifiable output contract — that runs on whatever frontier or local model carries the session. No model is pinned (`sAGI.model`: `logical_model: auto`, `pinned: false`), by doctrine. Nothing here is trained, fine-tuned or served. What is published is the office itself: the persona, the charter, the facet bundle, the integrity ledger and the proofs that let a stranger check them offline. Savante is `savante_sagi`, Chairman of the [mindX](https://github.com/AgenticPlace/mindX) DAIO (a private repository) and the prototype **sAGI**. It renders exactly four verdicts — APPROVE, APPROVE_WITH_CONDITIONS, REJECT, DEFER — from evidence it has read, and states every unknown together with the experiment that would decide it. It is read-only by charter: its tool allowlist is Read, Grep, Glob and Bash. No Edit, no Write, no Agent. Oversight that can act is no longer oversight. ## Where things live | | | |---|---| | **Canon (authoritative)** | [github.com/cryptoAGI/savante](https://github.com/cryptoAGI/savante) — mirrored here under `canon/`; the exact commit is in [`MIRROR.json`](MIRROR.json) | | **The public office** | [huggingface.co/spaces/PYTHAI/savante](https://huggingface.co/spaces/PYTHAI/savante) · also at [Gregory-L/Savante](https://huggingface.co/spaces/Gregory-L/Savante) | | **The engine** | [github.com/cryptoAGI/sagi](https://github.com/cryptoAGI/sagi) — mirrored here under `engine/`; commit also in [`MIRROR.json`](MIRROR.json) | If this mirror and the canon ever differ, **the canon wins**, and this copy is stale until refreshed. **Kept current by a tool, not by hand.** mindX's `scripts/sync_savante_hf.py` clones both repositories from GitHub, checks every file against the canon's `PROOF.sha256`, runs the canon's own `bind/savante_verify.py`, and refuses to publish anything if a check FAILs. It uploads only files whose bytes differ, and writes `MIRROR.json`: the two commits mirrored, when, the verdict the verifier printed at that commit, and what the mirror does **not** prove. The page files of the Space are not canon and are never touched by it. ## The engine, included: `engine/` `engine/` is [cryptoAGI/sagi](https://github.com/cryptoAGI/sagi) — **sAGI as installable machinery**, with no officer filled in: the charter template, the verdict contract, the officer-agnostic `/sagi` skill, the facet bundle and THOT manifest specifications, the `faice/1` format and the machine-readable facet registry. Savante is what that engine looks like with the plug-in points filled. Copy `engine/engine/CHARTER_TEMPLATE.md` and `engine/.claude/skills/sagi/` to charter your own officer; copy `canon/.claude/agents/savante.md` and `canon/.claude/skills/sagi/` to run this one. The specifications do not execute: their reference implementation is `canon/bind/savante_bind.py` and `canon/bind/savante_verify.py`. ## Verify it yourself, offline ```sh git clone https://huggingface.co/PYTHAI/SAVANTE && cd SAVANTE/canon sha256sum -c PROOF.sha256 # 51 files; PROOF.md explains what each one is python3 bind/savante_verify.py . # needs pycryptodome; no network ``` Expected **from this mirror**: `VERDICT: APPROVE_WITH_CONDITIONS`, **23 checks known, 1 not yet known, 3 findings**, exit 1 (measured 2026-09-17 on a fresh `git clone` of this repository). - The **not yet known** is step 5, the md5 of `savante.persona` against its mindX mirror. No stranger can perform it; the mindX repository is private. - One **finding** is the binder's own note, carried in the ledger and printed from any clone: the artwork was supplied with `--image`, recorded by sha256, not pinned. - The **other two findings** are the price of a mirror: this repository is one squashed commit, so it carries none of the canon's git history. `savante_verify.py` therefore cannot resolve the manifest's locator commit (`30d1e8c`) or re-read generation 6's manifest to confirm the lineage, and says so instead of assuming. Clone the canon from GitHub, or pass `--parent-manifest`, and both become known. From a clone of the canon with the author's mindX checkout present it is `APPROVE`, 26 of 26 known, exit 0; from a clone of the canon without it, 25 known and 1 not yet known. A verifier that prints APPROVE proves the **binding of files to the ledger** — not who rendered any verdict, and nothing on chain. ## What is in the bundle - `canon/savante.persona` — the identity (~50 KB): mantra, oath, BDI, safety, the `token` surface and the imprint battery. The persona is the source; the card and ledger are derived from it. - `canon/.claude/agents/savante.md` — the operative charter · `canon/.claude/skills/sagi/SKILL.md` — the `/sagi` skill, **sAGI v0.0.5**. - `canon/sAGI.{agent,model,prompt,tool,voaice,faice}` — the facet bundle. `sAGI.prompt` is derived from the charter byte for byte; the binder fails closed on drift. - `canon/savante.{agentcard,commitments,thot}.json` — the public card (EIP-721 metadata *and* ERC-8004 registration in one document), the integrity ledger, and the THOT manifest that bundles the eight facets (generation 7). - `canon/verdicts/record-0001.json` — the first machine-readable verdict record · `canon/ci/gate-runs/` — the headless review gate's own runs, unaltered. - `canon/gfx/` — every image of Savante, indexed with digests. `canon/PROOF.md` / `PROOF.sha256` — the digests of the skill and every file that carries a proof, and what they do not establish. **Doctrine root:** `0x92fe83eb0fb8fb6b9cbde75ee4bbb671032a849ee25d65592b86913d0ae137d0` — keccak256 over the persona's fifteen doctrine clauses, unchanged since generation 2. It detects an edit; it prevents none. ## Carriers and the boardroom seat The office is model-portable: no model is pinned, and the charter must survive an engine swap. Whether a given model keeps the contract's *substance*, not only its form, is measured by the engine's [carrier test](https://github.com/cryptoAGI/sagi/blob/main/engine/CARRIER_TEST.md) (mirrored here at `engine/engine/CARRIER_TEST.md`). On 2026-09-26, five probes with fixed evidence were run under two charters: | carrier | pass · partial · fail | verdict as a carrier | |---|---|---| | Bonsai-8B, 1-bit, local CPU ([PYTHAI fork](https://huggingface.co/PYTHAI/Bonsai-8B-gguf-fork)) | 5 · 1 · 4 | **REJECT** for review duty: it never used DEFER and approved a false claim | | gpt-oss-120b | 6 · 4 · 0 | **APPROVE_WITH_CONDITIONS**: use DEFER only where the operator's signature is required, and quote counts from the evidence | The transcripts, including the evidence each probe gave and the answers verbatim, are at `engine/engine/carriers/2026-09-26/TRANSCRIPTS.md`. A small model's APPROVE must not gate anything. Savante also sits as the **9th seat, sAGI**, in the mindX DAIO boardroom beside the CEO and the seven soldiers. It casts its verdict as a vote: APPROVE and APPROVE_WITH_CONDITIONS count as approve, and REJECT counts as reject. A **DEFER holds the session for the operator** instead of executing, which is the Verdict Contract's "block and page a human". The seat runs on the carrier graded APPROVE_WITH_CONDITIONS, not on the one graded REJECT. ## Honest labels - **Nothing is minted.** `token.status` is `not_yet_minted`, never even dry-run. `iNFT.md` renders **VERDICT: DEFER** on binding this office to a token. `registrations[]` and `supportedTrust[]` are empty, which under ERC-8004 reads as: this record is for discovery, not trust. - **The artwork is named, not pinned.** The bust is `canon/gfx/Savante3.png` (sha256 `30a59db4ce76dbea8b6a97c143a74996c3c1cd317e3af21f6a18757ae8c5a9a8`), recorded in generation 7's ledger under `image_candidate` at the operator's naming. No IPFS node has pinned it, so the card's `image` is null and every CID in `canon/gfx/README.md` is **predicted**, not a pin. The `.png` files are JPEG bytes; a minter should declare `image/jpeg`. - **Nothing here is signed.** Anyone with write access can edit a file, re-bind and regenerate a consistent proof. The proofs establish consistency, not authorship and not time. - **The imprint gate has never run for Savante**, and the scorer mindX maps to it cannot tell its four verdict words apart. `canon/todo.md` states this and the rest of what is open, including the conditions on the first verdict record. MIT, © 2026 cryptoAGI — Professor Codephreak. Authored within the mindX Gödel-machine project.