docs(card): THOX model card standard + ThoxOS/MeshStack usage (Wren pass 2026-10-23)

README.md

@@ -8,16 +8,16 @@ title: THOX.ai
 
 THOX.ai publishes local-first models on this org and on [ollama.com/Thox-ai](https://ollama.com/Thox-ai). This page lists **public** repositories only. Private drafts (including Pro / cluster / Unleashed / E4B work) are not installable from here.
 
-Checked 2026-10-13: 39 public models. There is no public `thox-pro-8b` … `thox-pro-32b` repo.
+Checked 2026-10-23: 38 public model repos (plus this card). There is no public `thox-pro-8b` … `thox-pro-32b` repo.
 
 ## Campaign devices → public models
 
 | Device | Public weights | Notes |
 |---|---|---|
 | ThoxKey | [ThoxKey-9M-role](https://huggingface.co/Thox-ai/ThoxKey-9M-role), [ThoxKey-TLM](https://huggingface.co/Thox-ai/ThoxKey-TLM), [ThoxUSB-Edge](https://huggingface.co/Thox-ai/ThoxUSB-Edge) | Drive-resident runtime is ThoxBeam on the Key. Larger 7B–12B models run on a host, not as a claim that the stick itself hosts 8B. |
-| ThoxAir | [ThoxAir-16M-role](https://huggingface.co/Thox-ai/ThoxAir-16M-role) | Public role card. `thox-gem-e4b` is private and is not a public Air SKU. |
-| ThoxClip | [ThoxClip-9M-role](https://huggingface.co/Thox-ai/ThoxClip-9M-role) | Public role card. |
-| ThoxMini | [ThoxMini-125M-role](https://huggingface.co/Thox-ai/ThoxMini-125M-role), [ThoxMini-3B](https://huggingface.co/Thox-ai/ThoxMini-3B) | 125M-role is the on-device path. 3B is host-class. |
+| ThoxAir | [ThoxAir-16M-role](https://huggingface.co/Thox-ai/ThoxAir-16M-role) | Device-role persona model. Under the current device lock ThoxAir does **not** host a language model; the role model runs on a paired host. `thox-gem-e4b` is private and is not a public Air SKU. |
+| ThoxClip | [ThoxClip-9M-role](https://huggingface.co/Thox-ai/ThoxClip-9M-role) | ThoxClip is a magnetic wireless-charge device with computing that clips onto a phone. Under the current device lock it does **not** host a language model; the role model runs on the paired phone/host. |
+| ThoxMini | [ThoxMini-125M-role](https://huggingface.co/Thox-ai/ThoxMini-125M-role), [ThoxMini-3B](https://huggingface.co/Thox-ai/ThoxMini-3B) | ThoxMini on-device model support is **held** until a test pass is recorded. 3B is host-class. |
 | Routing | [ThoxRoute-1.5B](https://huggingface.co/Thox-ai/ThoxRoute-1.5B), [ThoxRoute-1.5B-GGUF](https://huggingface.co/Thox-ai/ThoxRoute-1.5B-GGUF), [ThoxRoute-1.5B-Service-GGUF](https://huggingface.co/Thox-ai/ThoxRoute-1.5B-Service-GGUF) | Also `ollama pull thox-ai/thoxroute:1.5b`. The Service GGUF is for low-memory service nodes; its provenance and licence are unresolved — see its card. |
 
 ThoxNova-12B-Core / Agent on this org is a **model family**, not a Kickstarter device.
@@ -51,9 +51,11 @@ ThoxNova-12B-Core / Agent on this org is a **model family**, not a Kickstarter d
 
 ### Other public repos
 
-ThoxMythos-9B, ThoxHeretic-27B, ThoxSpeech-ASR-BitNet, ThoxFlux-350M, ThoxNano-135M / 360M, ThoxNeedle-Micro, ThoxMesh-Head-C6, ThoxUSB-Edge, ThoxKey-TLM, ThoxWebby-Gemma-4-E2B (browser app; does not re-host upstream weights).
+ThoxSpeech-ASR-BitNet, ThoxFlux-350M, ThoxNano-135M / 360M, ThoxNeedle-Micro, ThoxMesh-Head-C6, ThoxUSB-Edge, ThoxKey-TLM, ThoxWebby-Gemma-4-E2B (browser app; does not re-host upstream weights).
 
-Several public repos are **gated** and require access approval: ThoxMythos-9B, ThoxForge-7B, ThoxMini-3B, ThoxWave-8B, ThoxGlobal-7B, ThoxWebby-Gemma-4-E2B.
+**Safety review pending (not part of the ThoxOS / MeshStack catalog):** ThoxMythos-9B and ThoxHeretic-27B are uncensored/abliterated community redistributions. ThoxHeretic-27B is currently **not gated**.
+
+Several public repos are **gated** and require access approval (checked 2026-10-23): ThoxForge-7B, ThoxGlobal-7B, ThoxMini-3B, ThoxWave-8B, ThoxNova-12B-Core, ThoxNova-12B-Agent, ThoxMythos-9B, ThoxWebby-Gemma-4-E2B, fable5-agentic-qwen2.5-14b-lora.
 
 ## Claim HOLD
 
@@ -61,10 +63,12 @@ Several public repos are **gated** and require access approval: ThoxMythos-9B, T
 - Private repos (`thox-gem-e4b`, Unleashed, cloud 32B/70B pointers, cluster drafts) stay off this index.
 - Device certification lives in `ttracx/thox-device-models` (`tools/certify_device_models.py`). A public card is not a shipping certificate.
 - Where a card says provenance or licence is unresolved, that is the current state and not a formality.
+- Every public card follows the THOX model card standard (2026-10-23): files with SHA-256, *Use with ThoxOS*, *Use with MeshStack*, size-based device fit, upstream licence notices.
 
 ## Links
 
-- Site — [thox.ai](https://www.thox.ai)
+- Site — [thox.ai](https://thox.ai)
+- Contact — [tommy@thox.ai](mailto:tommy@thox.ai)
 - Ollama — [ollama.com/Thox-ai](https://ollama.com/Thox-ai)
 - GitHub — [github.com/ttracx](https://github.com/ttracx)