Spaces:
Running
Running
Deploy Aureon OS (deploy/selfhost stack: nginx edge + fusion API x2 + console + HNC organ + redis + postgres; paper mode) (part 3)
Browse files
README.md
CHANGED
|
@@ -1,413 +1,441 @@
|
|
| 1 |
-
---
|
| 2 |
-
title: Aureon OS
|
| 3 |
-
emoji: "\U0001F310"
|
| 4 |
-
colorFrom: indigo
|
| 5 |
-
colorTo: green
|
| 6 |
-
sdk: docker
|
| 7 |
-
app_port: 7860
|
| 8 |
-
pinned: true
|
| 9 |
-
license: mit
|
| 10 |
-
short_description: Aureon OS β Harmonic Nexus Core self-hosted on Hugging Face
|
| 11 |
-
---
|
| 12 |
-
|
| 13 |
-
<div align="center">
|
| 14 |
-
|
| 15 |
-
<img src="docs/images/aureon_zorza_logo.jpg" alt="Aureon Zorza Technologies" width="720" />
|
| 16 |
-
|
| 17 |
-
# Aureon OS
|
| 18 |
-
|
| 19 |
-
### β Harmonic Nexus Core β
|
| 20 |
-
|
| 21 |
-
**The operating system for evidence-heavy, high-control work: a grounded AI operating layer.**
|
| 22 |
-
Trading research Β· autonomous operator Β· planetary/HNC research Β· a coding organism β one auditable system.
|
| 23 |
-
|
| 24 |
-
|
| 25 |
-
[](LICENSE)
|
| 26 |
-
|
| 27 |
-
|
| 28 |
-
*A product of [R&A Consulting and Brokerage Services Ltd](COMPANY.md) β trading as **Aureon Zorza Technologies** Β· Belfast, Northern Ireland Β· Silver-level Innovate NI innovator.*
|
| 29 |
-
|
| 30 |
-
</div>
|
| 31 |
-
|
| 32 |
-
Older notes in `docs/` (for example `docs/AUREON_MIND_STATUS.md`), `aureon-trading/docs/`, and `imports/` (including the `imports/Kimi_Agent_Aureon_20260408` snapshot) are earlier research writing and may repeat figures that have since been withdrawn. This README and `mcp/aureon_public` are the current, checked parts.
|
| 33 |
-
|
| 34 |
-
> **New users: stay on the five-minute quickstart. Do not add your own exchange keys.** The master launcher and the installer default to full autonomy. If exchange keys are in `.env`, that boot can go live and trade.
|
| 35 |
-
|
| 36 |
-
---
|
| 37 |
-
|
| 38 |
-
## Five-minute quickstart
|
| 39 |
-
|
| 40 |
-
A fresh clone, Python 3.11 or newer, and no API keys. This path does not start Docker, does not read exchange keys, and does not place an order. It installs the operator extra, runs the offline operator server tests, the connectome test, and the quickstart banner test, then prints the HNC measurement from `aureon.evaluation.brain_proof.evaluate_brain`. That function runs `HarmonicRealityField.step` for 100 steps with the multiverse extension off. The class default HarmonicRealityField() has the multiverse on, which gives coherence 0.857719 and LOCKED. It is deterministic: it takes no seed, so the same figures come back on every run.
|
| 41 |
-
|
| 42 |
-
Linux and macOS:
|
| 43 |
-
|
| 44 |
-
```bash
|
| 45 |
-
git clone https://github.com/RA-CONSULTING/Aureon-OS.git && cd Aureon-OS
|
| 46 |
-
python3 -m venv .venv
|
| 47 |
-
. .venv/bin/activate
|
| 48 |
-
python -m pip install -U pip
|
| 49 |
-
python -m pip install -e '.[operator]' 'pytest>=8' 'pytest-timeout>=2.3' 'numpy>=1.26' 'cryptography>=46'
|
| 50 |
-
AUREON_LLM_OFFLINE=1 AUREON_SUPPRESS_IMPORT_SIDE_EFFECTS=1 pytest tests/test_operator_server.py tests/test_connectome.py tests/test_quickstart_brain_proof.py --timeout=60
|
| 51 |
-
AUREON_LLM_OFFLINE=1 AUREON_SUPPRESS_IMPORT_SIDE_EFFECTS=1 python -c "from aureon.evaluation.brain_proof import evaluate_brain, render_brain_markdown; print(render_brain_markdown(evaluate_brain()))"
|
| 52 |
-
```
|
| 53 |
-
|
| 54 |
-
Windows:
|
| 55 |
-
|
| 56 |
-
```bat
|
| 57 |
-
git clone https://github.com/RA-CONSULTING/Aureon-OS.git && cd Aureon-OS
|
| 58 |
-
py -3 -m venv .venv
|
| 59 |
-
.venv\Scripts\activate
|
| 60 |
-
python -m pip install -U pip
|
| 61 |
-
python -m pip install -e ".[operator]" "pytest>=8" "pytest-timeout>=2.3" "numpy>=1.26" "cryptography>=46"
|
| 62 |
-
set AUREON_LLM_OFFLINE=1
|
| 63 |
-
set AUREON_SUPPRESS_IMPORT_SIDE_EFFECTS=1
|
| 64 |
-
pytest tests/test_operator_server.py tests/test_connectome.py tests/test_quickstart_brain_proof.py --timeout=60
|
| 65 |
-
python -c "from aureon.evaluation.brain_proof import evaluate_brain, render_brain_markdown; print(render_brain_markdown(evaluate_brain()))"
|
| 66 |
-
```
|
| 67 |
-
|
| 68 |
-
The measurement below is from a run of that command with no keys:
|
| 69 |
-
|
| 70 |
-
```text
|
| 71 |
-
# HNC, Auris coherence, and QGITA
|
| 72 |
-
|
| 73 |
-
These figures are the HNC master-formula path, Auris coherence, and the QGITA analyzer. They are not a claim that the system is conscious or alive.
|
| 74 |
-
|
| 75 |
-
No outside model was called. Live trading stayed off. No order was placed.
|
| 76 |
-
HNC formula path, multiverse off: state `unified`, coherence `0.9331334813083556`, last Ξ(t) `1.409626852655939`, steps `100`.
|
| 77 |
-
Multiverse extension: **measured**. project_to_3d sets noise to 0 when no observed residual is supplied. TranslationMap.noise_level is stored and is not read by that method. Three constructions of the default HarmonicRealityField returned the same series.
|
| 78 |
-
Auris coherence `None` with status `no_data`. Nodes without a reading: Clownfish, Owl.
|
| 79 |
-
Trade readiness: **HOLD**. no market series and no trade-outcome labels
|
| 80 |
-
QGITA on the derived series `data/de440_timeseries.csv` (cited-unverified): status `complete`, FTCP count `0`, lighthouse events `0`. Detection rate **HOLD**. Clock: sample index. analyze_price_stream uses range(len(prices)) when no timestamps are passed
|
| 81 |
-
QGITA on the formula series: FTCP count `0`, lighthouse events `0`. Detection rate **HOLD**. Clock: step index times HarmonicRealityField.dt
|
| 82 |
-
Auris is not joined to Ξ(t): **HOLD**. no function in the repo passes Ξ(t) into get_auris_coherence
|
| 83 |
-
```
|
| 84 |
-
|
| 85 |
-
The longer operator preflight, containers, and the full offline suite are further down.
|
| 86 |
-
|
| 87 |
-
## Public MCP (stages 1 and 2 of 4)
|
| 88 |
-
|
| 89 |
-
[`mcp/aureon_public/README.md`](mcp/aureon_public/README.md) is the public MCP surface. It is read-only. Stages 1 and 2 of 4 are open. Stages 3 and 4 stay closed.
|
| 90 |
-
|
| 91 |
-
---
|
| 92 |
-
|
| 93 |
-
## What Aureon OS is
|
| 94 |
-
|
| 95 |
-
Aureon OS is a **local-first operating layer** β powered by the Harmonic Nexus Core β that
|
| 96 |
-
lets a human operator run, inspect, and
|
| 97 |
-
ground evidence-heavy automation across several domains from one place. It is built to be
|
| 98 |
-
*auditable first*: code, ledgers, audits, generated interfaces, and research artifacts are
|
| 99 |
-
kept together so a reviewer can always see what exists, what is experimental, and what is
|
| 100 |
-
ready for controlled use.
|
| 101 |
-
|
| 102 |
-
It is organized in three independently reviewable layers:
|
| 103 |
-
|
| 104 |
-
1. **The implementation platform** β source and offline tests; runtime release is on HOLD.
|
| 105 |
-
2. **The research framework (HNC)** β pre-registered, falsifiable hypotheses with evidence.
|
| 106 |
-
3. **The vision** β the thread that ties the ancient, the mathematical, and the market together.
|
| 107 |
-
|
| 108 |
-
> This is the formal front door. The original long-form README is preserved unchanged at
|
| 109 |
-
> [`docs/archive/README_legacy_20260712.md`](docs/archive/README_legacy_20260712.md) β nothing was removed, only formalized.
|
| 110 |
-
|
| 111 |
-
The shared rules for everyone working in this repo are [`docs/AUREON_RULES.md`](docs/AUREON_RULES.md).
|
| 112 |
-
|
| 113 |
-
### How it fits together
|
| 114 |
-
|
| 115 |
-
```mermaid
|
| 116 |
-
flowchart TB
|
| 117 |
-
user["π€ Operator / Investor / End user"]
|
| 118 |
-
console["Unified console<br/>(React Β· sidebar Β· every dashboard as a route)"]
|
| 119 |
-
gateway["Operator gateway Β· :8790<br/>WSGI Β· auth Β· rate-limit Β· /healthz /readyz /metrics"]
|
| 120 |
-
|
| 121 |
-
subgraph brain["Grounded AI core"]
|
| 122 |
-
operator["Aureon Operator<br/>switchboard: ground β consensus β veto"]
|
| 123 |
-
cognition["Agentic cognition<br/>tools Β· repo-wide grounding Β· hard boundaries"]
|
| 124 |
-
end
|
| 125 |
-
|
| 126 |
-
subgraph organism["The organism (~1,100 modules)"]
|
| 127 |
-
connectome["Connectome<br/>sense Β· touch Β· weave"]
|
| 128 |
-
bus["Thought bus Β· mycelium Β· Queen"]
|
| 129 |
-
hnc["HNC live daemon β Ξ(t) field β harmonic observer"]
|
| 130 |
-
end
|
| 131 |
-
|
| 132 |
-
saas["SaaS platform<br/>catalog Β· status Β· billing/metering"]
|
| 133 |
-
supabase[("Supabase<br/>auth Β· tenancy Β· gas-tank billing")]
|
| 134 |
-
|
| 135 |
-
user --> console --> gateway
|
| 136 |
-
gateway --> operator --> cognition
|
| 137 |
-
gateway --> saas
|
| 138 |
-
cognition --> connectome --> bus
|
| 139 |
-
hnc --> bus
|
| 140 |
-
saas --> supabase
|
| 141 |
-
console -. "Supabase session (JWT)" .-> supabase
|
| 142 |
-
```
|
| 143 |
-
|
| 144 |
-
<sub>Every consequential action passes a hard authority boundary + conscience veto before it runs; the platform never trades, pays, or files autonomously.</sub>
|
| 145 |
-
|
| 146 |
-
---
|
| 147 |
-
|
| 148 |
-
## 1 Β· Implementation platform (source-visible; supported runtime is HOLD)
|
| 149 |
-
|
| 150 |
-
| Capability | What it is | Entry point |
|
| 151 |
-
|---|---|---|
|
| 152 |
-
| **Aureon Operator** | A grounded AI switchboard β routes a prompt through many models, grounds it in the repo, reaches consensus, and applies a conscience veto before answering. | [`aureon/operator/`](aureon/operator/) Β· [switchboard doc](docs/architecture/AUREON_OPERATOR_SWITCHBOARD.md) |
|
| 153 |
-
| **Agentic cognition** | The operator as an agent: repo-wide grounding, tool use (search / read / code / state), hard authority boundaries enforced before any action. | [`aureon/operator/cognition.py`](aureon/operator/cognition.py) |
|
| 154 |
-
| **The organism connectome** | The metacognitive layer that senses, touches, and weaves every module of the body β legacy code included β into one living system. | [`aureon/core/aureon_connectome.py`](aureon/core/aureon_connectome.py) Β· [doc](docs/architecture/ORGANISM_CONNECTOME.md) |
|
| 155 |
-
| **SaaS platform** | A categorized catalog of ~1,100 modules, honest health status, a tenancy bridge, and a billing/metering layer, served behind one gateway. | [`aureon/saas/`](aureon/saas/) Β· [SAAS_PLATFORM.md](docs/SAAS_PLATFORM.md) |
|
| 156 |
-
| **Unified console** | One professional React interface β sidebar, command palette, every dashboard as a route β over the whole repo. | [`frontend/`](frontend/) |
|
| 157 |
-
| **Release-boundary implementation** | WSGI, auth, metrics, containers, and CI remain source-visible; supported launchers currently stop at terminal HOLD. | [PRODUCTION_GRADE.md](docs/runbooks/PRODUCTION_GRADE.md) |
|
| 158 |
-
| **Multi-user platform** | End-user sign-in with **per-user encrypted keys**, each user reasoning on their own models, and a default-deny boundary between a signed-in user's account and the instance's control plane. | [`aureon/operator/identity.py`](aureon/operator/identity.py) Β· [MULTI_TENANT_AUTH.md](docs/architecture/MULTI_TENANT_AUTH.md) |
|
| 159 |
-
|
| 160 |
-
<div align="center">
|
| 161 |
-
<img src="public/hnc_dashboard.png" alt="Aureon HNC dashboard" width="48%" />
|
| 162 |
-
<img src="public/harmonic_wave_analysis.png" alt="Harmonic wave analysis" width="48%" />
|
| 163 |
-
</div>
|
| 164 |
-
|
| 165 |
-
### Operator preflight, containers, and the strict suite
|
| 166 |
-
|
| 167 |
-
```bash
|
| 168 |
-
# 1 Β· evaluate the isolated operator protection preflight
|
| 169 |
-
pip install -e '.[operator]'
|
| 170 |
-
python -I -S -B scripts/bootstrap/protected_bootstrap_v05.py --target-id operator
|
| 171 |
-
|
| 172 |
-
# 2 Β· build and evaluate the container protection preflights
|
| 173 |
-
docker compose -f deploy/docker-compose.saas.yml up --build
|
| 174 |
-
|
| 175 |
-
# 3 Β· run the strict-tier test suite (offline, no keys/network)
|
| 176 |
-
AUREON_LLM_OFFLINE=1 pytest tests/test_operator_*.py tests/test_saas_*.py tests/test_connectome.py -q
|
| 177 |
-
```
|
| 178 |
-
|
| 179 |
-
### Current local verification boundary
|
| 180 |
-
|
| 181 |
-
Everything needed to inspect source and run offline tests is in this repo. Do not
|
| 182 |
-
inject exchange, model, hosting, or deployment credentials while validating the
|
| 183 |
-
current release: the isolated operator bootstrap, containers, and supervisor
|
| 184 |
-
entrypoints stay on **HOLD**.
|
| 185 |
-
|
| 186 |
-
The local installer is the path that brings a clone up. Linux and macOS:
|
| 187 |
-
`bash production/install.sh`. Windows: `production\Install-AUREON.ps1` (or
|
| 188 |
-
`production\install-windows.bat`). `bash scripts/linux/aureon-up.sh` calls that
|
| 189 |
-
installer when the virtualenv is missing, then starts the same preflight.
|
| 190 |
-
The shell is `http://127.0.0.1:5173/`. Dashboard and Command Center are tabs of
|
| 191 |
-
the local console at `http://127.0.0.1:5173/console/local`. Every other
|
| 192 |
-
dashboard and status page β the 8080 console, Orca on 8888, market status on
|
| 193 |
-
8791, the gateway on 8790, the fusion seat on 8765, the circulation bus on
|
| 194 |
-
8799, the neural canvas, the thought-action hub, the error sink, and API B β
|
| 195 |
-
is a tab at `http://127.0.0.1:5173/console/seats`, with the other status
|
| 196 |
-
pages (queen unified, pro dashboard, master hub, Earth shield, queen web,
|
| 197 |
-
system hub, bot hunter, the dashboard API, queen power, trader telemetry,
|
| 198 |
-
Kraken telemetry, and the legacy command center) on that same tab row. Those
|
| 199 |
-
tabs read the live buses through the gateway. A source that is down, or a
|
| 200 |
-
page that draws invented readings, shows the reason and no invented number.
|
| 201 |
-
`AUREON_SIMULATED_BOOT` stays unset, so those generators do not load. The launcher leaves port 8080 alone. Live mode turns on when a complete exchange key group is in
|
| 202 |
-
`.env`. With no complete group the boot stays paper/public-data and the health
|
| 203 |
-
report says `trading_mode=paper/public-data (no exchange keys)`. With keys it
|
| 204 |
-
says `trading_mode=live (exchange keys present)`. The launcher does not place
|
| 205 |
-
an order by itself. The thought bus health check is
|
| 206 |
-
`http://127.0.0.1:8799/healthz`. The fusion seat keeps
|
| 207 |
-
`http://127.0.0.1:8765/healthz`.
|
| 208 |
-
A HOLD receipt proves only that the fail-closed preflight ran; it is not proof
|
| 209 |
-
that the whole system is protected or production-ready.
|
| 210 |
-
|
| 211 |
-
### Canonical organism launcher
|
| 212 |
-
|
| 213 |
-
> **Stay on the five-minute quickstart. Do not add your own exchange keys.** This launcher defaults to full autonomy. If exchange keys are in `.env`, the boot can go live and trade.
|
| 214 |
-
|
| 215 |
-
The terminal-HOLD bootstraps stay holds. The organism launcher is a separate entry. Its default is full autonomy, and it does not place an order by itself:
|
| 216 |
-
|
| 217 |
-
```bash
|
| 218 |
-
scripts/launch/aureon-master.sh
|
| 219 |
-
```
|
| 220 |
-
|
| 221 |
-
Windows uses `scripts/launch/aureon-master.ps1` and `scripts/launch/aureon-master.bat`. On a fresh clone it writes `.env` from `.env.example` when `.env` is absent, installs Python requirements into `.venv`, Node packages for `frontend/`, and the self-host Docker images, then starts the organism and prints a health table. Paths follow the checkout. Trading is live when the operator's own exchange keys are in `.env`. With no keys the report says `trading_mode=paper/public-data (no exchange keys)`. A missing binary, script, or daemon is a blocked row. The mode is in [`AUTONOMY.md`](AUTONOMY.md). The module name and the table are in [`LAUNCHER_INVENTORY.md`](LAUNCHER_INVENTORY.md). What still names a machine is in [`PORTABILITY.md`](PORTABILITY.md).
|
| 222 |
-
|
| 223 |
-
### How anyone can run it
|
| 224 |
-
|
| 225 |
-
A fresh clone on your own machine is enough. The launcher does not need Gary's home directory, a hosted runner, or a key that shipped with the repo.
|
| 226 |
-
|
| 227 |
-
Linux and macOS, from the checkout:
|
| 228 |
-
|
| 229 |
-
```bash
|
| 230 |
-
scripts/launch/aureon-master.sh
|
| 231 |
-
```
|
| 232 |
-
|
| 233 |
-
Windows, from the checkout:
|
| 234 |
-
|
| 235 |
-
```bat
|
| 236 |
-
scripts\launch\aureon-master.ps1
|
| 237 |
-
```
|
| 238 |
-
|
| 239 |
-
`scripts\launch\aureon-master.bat` is the same entry. That one command writes `.env` from `.env.example` when `.env` is absent, installs Python requirements into `.venv`, Node packages for `frontend/`, and the self-host images when Docker answers, then starts the organism. An existing `.env` is left as it is. Paths follow the checkout.
|
| 240 |
-
|
| 241 |
-
Do not add exchange keys to `.env`. A complete key group (Kraken, Binance, Alpaca, or Capital.com) makes the next boot live, and the health report says `trading_mode=live (exchange keys present)`. With no complete group the same boot stays in paper/public-data mode and the report says `trading_mode=paper/public-data (no exchange keys)`. Do not commit `.env`. The launcher does not place an order by itself. New users should stay on the five-minute quickstart.
|
| 242 |
-
|
| 243 |
-
The boot is unrestricted by default. `AUREON_AUTONOMY_MODE` unset is `full`. Self-coding may edit any path except credential material, approves its own edits, and commits a patch after that patch's tests pass. Nothing is pushed. There is no kill switch and no kill file: `AUREON_SELF_REPAIR_KILL` and `state/SELF_REPAIR_KILL` do not stop a write or an order. Changes and order attempts are appended to `state/autonomy_audit.jsonl`. The unity exchange brain, the unified market trader, the Capital.com CFD trader, and the micro-profit labyrinth each record an attempt. Secret values are redacted. The same records are published on the circulation thought bus. The metacognition and self-repair loops consume them. After repeated failed self-changes, metacognition raises a concern and lowers its confidence, and self-repair deprioritises a target that keeps failing. A self-patch whose tests fail stays applied. It is not reversed. Credentials are still never written into the repo or into a log.
|
| 244 |
-
|
| 245 |
-
The health table is the last thing the launcher prints. Each row is `order`, `name`, `status`, `health`, and `reason`. A missing binary, script, or daemon is `blocked` with the reason. The totals are `started`, `blocked`, and `total`.
|
| 246 |
-
|
| 247 |
-
```bash
|
| 248 |
-
scripts/launch/aureon-master.sh --status
|
| 249 |
-
scripts/launch/aureon-master.sh --stop
|
| 250 |
-
```
|
| 251 |
-
|
| 252 |
-
`--status` prints that table and starts nothing. `--stop` stops the processes this launcher recorded. Postgres, Redis, or nginx it did not start are left alone. On Windows, pass the same flags to `aureon-master.ps1` or `aureon-master.bat`. Those two flags are ordinary process control.
|
| 253 |
-
|
| 254 |
-
The existing installer is the one step that also brings up the toolchain and the UI. Linux and macOS:
|
| 255 |
-
|
| 256 |
-
```bash
|
| 257 |
-
bash production/install.sh
|
| 258 |
-
```
|
| 259 |
-
|
| 260 |
-
Windows: `production\Install-AUREON.ps1`, or `production\install-windows.bat`. Running it again is safe. It installs Python, venv, Node, npm, git, and curl when apt, dnf, Homebrew, or winget can, writes `.env` from `.env.example` only when `.env` is absent, installs and builds the frontend, then calls the master launcher above. Docker images are used when the daemon answers. With no daemon the launcher uses its native fallbacks. When the UI answers, the installer prints `Aureon UI: http://127.0.0.1:5173/`.
|
| 261 |
-
|
| 262 |
-
Installing from git (`pip install git+...`) brings the whole repo, trading modules included. A Hugging Face Space is planned, and nothing is hosted yet, so no Space is switching those modules off.
|
| 263 |
-
|
| 264 |
-
`PyAudio` in `requirements.txt` needs the system audio headers (`portaudio`) before pip can build it. The Linux installer uses `requirements-linux.txt`, which leaves that package out and includes pytest, so `tests/test_preflight_snags.py` can run in the installer environment. Build the test virtualenv with `python -m venv --copies .venv`. A symlinked interpreter fails 32 evidence tests: `sys.executable` must be a real file inside the venv, which `--copies` provides and a symlink into another prefix does not. The installer creates `.venv` with `--copies`. Pytest prints a header note when the interpreter it is running is itself a symlink.
|
| 265 |
-
|
| 266 |
-
### Archive of unreferenced root files
|
| 267 |
-
|
| 268 |
-
`archive/workspace-root/` holds notes, one-off scripts, and captured ledgers that the running fleet does not import. Live organ paths stay where [`aureon_fusion/paths.py`](aureon_fusion/paths.py) and [`aureon_fusion/organ_registry.py`](aureon_fusion/organ_registry.py) name them. Fleet output stays untracked.
|
| 269 |
-
|
| 270 |
-
Direct-module and go-live runbooks are superseded until native process
|
| 271 |
-
containment, target-source measurement, external HNC head anchoring, and
|
| 272 |
-
provider-side read-back are proven.
|
| 273 |
-
|
| 274 |
-
### Multi-user implementation status
|
| 275 |
-
|
| 276 |
-
The source contains a proposed single-operator and multi-user separation model,
|
| 277 |
-
but no supported runtime starts it while the release is on HOLD:
|
| 278 |
-
|
| 279 |
-
| | The operator | A signed-in end user |
|
| 280 |
-
|---|---|---|
|
| 281 |
-
| **Keys** | the instance's own, in `os.environ` + the global keystore | **their own**, Fernet-encrypted in an isolated per-account store, masked to last-4 on read, never written into the process environment |
|
| 282 |
-
| **Reasoning** | the instance engine, full toolbelt | **their own models**, on a request-scoped engine with a pure-compute toolbelt β no shell, no repo write, no network egress, no instance-state read |
|
| 283 |
-
| **Memory** | the shared thought bus and mesh | isolated: their prompts and answers never enter shared instance memory |
|
| 284 |
-
| **Control plane** | theirs β switchboard, host actions, approvals, manifests, MCP, instance credentials | **refused**. A tenant reaches an explicit allowlist; every other `/api` route is operator-only by omission |
|
| 285 |
-
|
| 286 |
-
The intended request boundary is centralized and default-deny rather than
|
| 287 |
-
implemented independently per route. This is an implementation claim backed by
|
| 288 |
-
tests, not evidence of a deployed tenant service.
|
| 289 |
-
|
| 290 |
-
The design history and adversarial findings remain in
|
| 291 |
-
[`docs/architecture/MULTI_TENANT_AUTH.md`](docs/architecture/MULTI_TENANT_AUTH.md).
|
| 292 |
-
Do not add tenant, operator, model, or hosting secrets merely to inspect this
|
| 293 |
-
source. Network exposure remains outside the current release boundary.
|
| 294 |
-
|
| 295 |
-
---
|
| 296 |
-
|
| 297 |
-
## 2 Β· The research framework β HNC (pre-registered & falsifiable)
|
| 298 |
-
|
| 299 |
-
Aureon is built on the **Harmonic Nexus Core (HNC)** β a research framework proposing that a
|
| 300 |
-
ΟΒ² (golden-ratio-squared) mathematical coherence links ancient knowledge systems, geopolitical
|
| 301 |
-
stress in open data, and market dynamics. These are **research hypotheses**, stated as
|
| 302 |
-
falsifiable claims with reproduction commands β never as financial promises.
|
| 303 |
-
|
| 304 |
-
| Claim | Value | Evidence & how to reproduce |
|
| 305 |
-
|---|---|---|
|
| 306 |
-
| Oil volatility β open-data node activation | r = 0.85, p < 0.001, 24β48h lag | [`CLAIMS_AND_EVIDENCE.md Β§C1`](docs/CLAIMS_AND_EVIDENCE.md) |
|
| 307 |
-
| ΟΒ² hydrogen-line reproduction | 1,420.405754 MHz vs NIST 1,420.405752 MHz (ppb) | [`CLAIMS_AND_EVIDENCE.md Β§C6`](docs/CLAIMS_AND_EVIDENCE.md) |
|
| 308 |
-
| Pre-registered predictions (P1βP5) | falsifiable, tracked | [`CLAIMS_AND_EVIDENCE.md`](docs/CLAIMS_AND_EVIDENCE.md) Β· [falsification protocol](docs/HNC_FALSIFICATION_PROTOCOL.md) |
|
| 309 |
-
|
| 310 |
-
Every claim links to the file that establishes it and a command you can run. If a claim is not
|
| 311 |
-
backed by a source, it is a bug β the repository is the authority. See the full spine in
|
| 312 |
-
[`docs/CLAIMS_AND_EVIDENCE.md`](docs/CLAIMS_AND_EVIDENCE.md).
|
| 313 |
-
|
| 314 |
-
<div align="center">
|
| 315 |
-
<img src="docs/images/forensics_feb2026_convergence.jpg" alt="From theory to forensics β Feb 5β6 geomagnetic convergence event, predictions vs verified public data" width="70%" />
|
| 316 |
-
<br/><sub>A worked example: the Feb 5β6 geomagnetic-convergence event, predictions checked against verified public data (NASA/NOAA, Reuters). Research/education only β not financial advice.</sub>
|
| 317 |
-
</div>
|
| 318 |
-
|
| 319 |
-
---
|
| 320 |
-
|
| 321 |
-
## 3 Β· The vision
|
| 322 |
-
|
| 323 |
-
> *The same coherence that organized the Ziggurats of Ur, the Great Pyramid, and the Roman road
|
| 324 |
-
> network expresses itself now β measurably β in the rhythms of open data and markets. Aureon is
|
| 325 |
-
> the instrument built to listen for it, and to act only with a conscience in the loop.*
|
| 326 |
-
|
| 327 |
-
The full thread β the ancient substrate, the mathematics, the extraction machine, and the
|
| 328 |
-
distributed response β is told in the creator's own voice in
|
| 329 |
-
[`docs/THE_SYNTHESIS.md`](docs/THE_SYNTHESIS.md).
|
| 330 |
-
|
| 331 |
-
---
|
| 332 |
-
|
| 333 |
-
## Company & credentials
|
| 334 |
-
|
| 335 |
-
**[R&A Consulting and Brokerage Services Ltd](COMPANY.md)** β registered in Northern Ireland,
|
| 336 |
-
**company no. NI696693** β trading as **Aureon Zorza Technologies**.
|
| 337 |
-
|
| 338 |
-
- π
**Silver-level innovator** on the Innovate NI Innovation Framework (Department for the Economy / Tourism NI), awarded 21 July 2025 by the Minister for the Economy. β [certificate](docs/images/innovate_ni_silver_2025.png)
|
| 339 |
-
- π€ **Community**: a supporter of Street Soccer NI / Homeless World Cup (Norway 2025). β [`COMPANY.md`](COMPANY.md)
|
| 340 |
-
- π Website: [aureonzorzatechnologies.pl](https://aureonzorzatechnologies.pl)
|
| 341 |
-
- π License: [MIT](LICENSE) Β· Β© 2025 R&A Consulting and Brokerage Services Ltd
|
| 342 |
-
- Full company details: [`COMPANY.md`](COMPANY.md)
|
| 343 |
-
|
| 344 |
-
### Early interest
|
| 345 |
-
|
| 346 |
-
Open-source repository traffic to date (verifiable in the repo's GitHub **Insights β Traffic**):
|
| 347 |
-
|
| 348 |
-
<div align="center">
|
| 349 |
-
<img src="docs/images/github_traffic_infographic.jpg" alt="GitHub clone traffic: 4,559 unique cloners, 51,287 clone operations, Dec 2025βMar 2026" width="46%" />
|
| 350 |
-
<img src="docs/images/github_clone_traffic_insights.jpg" alt="GitHub Insights traffic β clones over 14 days" width="46%" />
|
| 351 |
-
</div>
|
| 352 |
-
|
| 353 |
-
<sub>These are **repository clone-traffic** figures (developer/researcher interest in the code), not user, customer, or revenue numbers. Source: GitHub Insights.</sub>
|
| 354 |
-
|
| 355 |
-
---
|
| 356 |
-
|
| 357 |
-
## Where to go next
|
| 358 |
-
|
| 359 |
-
| You are⦠| Start here |
|
| 360 |
-
|---|---|
|
| 361 |
-
| **Working on Aureon OS** | [`docs/AUREON_RULES.md`](docs/AUREON_RULES.md) β the shared rulebook |
|
| 362 |
-
| **An investor or funder** | [`docs/investor/README.md`](docs/investor/README.md) β diligence path, capability categories, and claim discipline |
|
| 363 |
-
| **A developer** | [`docs/INDEX.md`](docs/INDEX.md) Β· [`CAPABILITIES.md`](CAPABILITIES.md) Β· [`docs/SAAS_PLATFORM.md`](docs/SAAS_PLATFORM.md) |
|
| 364 |
-
| **A researcher** | [`docs/THE_SYNTHESIS.md`](docs/THE_SYNTHESIS.md) Β· [`docs/CLAIMS_AND_EVIDENCE.md`](docs/CLAIMS_AND_EVIDENCE.md) Β· [`docs/research/READING_PATHS.md`](docs/research/READING_PATHS.md) |
|
| 365 |
-
| **Deployment status** | [`docs/runbooks/GO_LIVE_HARDENING.md`](docs/runbooks/GO_LIVE_HARDENING.md) Β· [`docs/deployment/`](docs/deployment/) β terminal HOLD; no supported listener or deploy route |
|
| 366 |
-
| **Running it for several users** | [`docs/architecture/MULTI_TENANT_AUTH.md`](docs/architecture/MULTI_TENANT_AUTH.md) β the account/instance boundary and how it is enforced |
|
| 367 |
-
| **Checking what the numbers mean** | [`docs/architecture/DATA_PROVENANCE_AUDIT.md`](docs/architecture/DATA_PROVENANCE_AUDIT.md) β which readings are live, which are withheld as `no_data`, and which generated feeds are opt-in |
|
| 368 |
-
| **Browsing the whole repo** | [`docs/REPO_SITEMAP.md`](docs/REPO_SITEMAP.md) Β· the console's `#repo-map` tab |
|
| 369 |
-
| **Contributing** | [`CONTRIBUTING.md`](CONTRIBUTING.md) Β· [`SECURITY.md`](SECURITY.md) Β· [`CODE_OF_CONDUCT.md`](CODE_OF_CONDUCT.md) |
|
| 370 |
-
|
| 371 |
-
---
|
| 372 |
-
|
| 373 |
-
## Continuous integration
|
| 374 |
-
|
| 375 |
-
Quality evidence is suite- and revision-specific. Run the current offline tests
|
| 376 |
-
and static checks rather than relying on historical pass counts or badges. A
|
| 377 |
-
passing implementation suite does not override the terminal release HOLD.
|
| 378 |
-
|
| 379 |
-
The hosted GitHub Actions status badges below turn green once Actions is enabled on the
|
| 380 |
-
organization (they reflect hosted runs, not the local gate):
|
| 381 |
-
|
| 382 |
-
[](https://github.com/RA-CONSULTING/Aureon-OS/actions/workflows/operator-ci.yml)
|
| 383 |
-
[](https://github.com/RA-CONSULTING/Aureon-OS/actions/workflows/main_ci.yml)
|
| 384 |
-
[](https://github.com/RA-CONSULTING/Aureon-OS/actions/workflows/nightly-benchmark.yml)
|
| 385 |
-
|
| 386 |
-
```bash
|
| 387 |
-
# reproduce the gate locally
|
| 388 |
-
pip install -e '.[operator,dev]'
|
| 389 |
-
ruff check aureon/operator/ aureon/saas/ && mypy aureon/operator/ aureon/saas/
|
| 390 |
-
AUREON_LLM_OFFLINE=1 pytest tests/test_operator_*.py tests/test_saas_*.py tests/test_connectome.py -q
|
| 391 |
-
|
| 392 |
-
# evaluate the capability-demo protection preflight; it currently returns HOLD
|
| 393 |
-
# without importing or booting the capability surface. That is not a measured
|
| 394 |
-
# capability result.
|
| 395 |
-
AUREON_LLM_OFFLINE=1 AUREON_SUPPRESS_IMPORT_SIDE_EFFECTS=1 \
|
| 396 |
-
python -I -S -B scripts/bootstrap/protected_bootstrap_v05.py --target-id capability-demo -- --report docs/reports/CAPABILITY_DEMO.md
|
| 397 |
-
```
|
| 398 |
-
|
| 399 |
-
## Operating boundaries
|
| 400 |
-
|
| 401 |
-
Aureon is designed for **controlled local operation with a human in the loop**. Live trading,
|
| 402 |
-
warehouse mutation, filing support, payment activity, and other sensitive workflows require
|
| 403 |
-
explicit operator review, valid credentials, and route-specific evidence β the platform never
|
| 404 |
-
initiates them autonomously. Public documentation describes capability and repository state; it
|
| 405 |
-
is **not financial, legal, tax, or regulatory advice**, and nothing here is an offer of
|
| 406 |
-
securities or a promise of returns. Private credentials, customer data, and sensitive local
|
| 407 |
-
evidence are not published in this repository.
|
| 408 |
-
|
| 409 |
-
---
|
| 410 |
-
|
| 411 |
-
<div align="center">
|
| 412 |
-
<sub>Aureon OS Β· Harmonic Nexus Core β a product of R&A Consulting and Brokerage Services Ltd, trading as Aureon Zorza Technologies.</sub>
|
| 413 |
-
</div>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
---
|
| 2 |
+
title: Aureon OS
|
| 3 |
+
emoji: "\U0001F310"
|
| 4 |
+
colorFrom: indigo
|
| 5 |
+
colorTo: green
|
| 6 |
+
sdk: docker
|
| 7 |
+
app_port: 7860
|
| 8 |
+
pinned: true
|
| 9 |
+
license: mit
|
| 10 |
+
short_description: Aureon OS β Harmonic Nexus Core self-hosted on Hugging Face
|
| 11 |
+
---
|
| 12 |
+
|
| 13 |
+
<div align="center">
|
| 14 |
+
|
| 15 |
+
<img src="docs/images/aureon_zorza_logo.jpg" alt="Aureon Zorza Technologies" width="720" />
|
| 16 |
+
|
| 17 |
+
# Aureon OS
|
| 18 |
+
|
| 19 |
+
### β Harmonic Nexus Core β
|
| 20 |
+
|
| 21 |
+
**The operating system for evidence-heavy, high-control work: a grounded AI operating layer.**
|
| 22 |
+
Trading research Β· autonomous operator Β· planetary/HNC research Β· a coding organism β one auditable system.
|
| 23 |
+
|
| 24 |
+
|
| 25 |
+
[](LICENSE)
|
| 26 |
+
|
| 27 |
+
|
| 28 |
+
*A product of [R&A Consulting and Brokerage Services Ltd](COMPANY.md) β trading as **Aureon Zorza Technologies** Β· Belfast, Northern Ireland Β· Silver-level Innovate NI innovator.*
|
| 29 |
+
|
| 30 |
+
</div>
|
| 31 |
+
|
| 32 |
+
Older notes in `docs/` (for example `docs/AUREON_MIND_STATUS.md`), `aureon-trading/docs/`, and `imports/` (including the `imports/Kimi_Agent_Aureon_20260408` snapshot) are earlier research writing and may repeat figures that have since been withdrawn. This README and `mcp/aureon_public` are the current, checked parts.
|
| 33 |
+
|
| 34 |
+
> **New users: stay on the five-minute quickstart. Do not add your own exchange keys.** The master launcher and the installer default to full autonomy. If exchange keys are in `.env`, that boot can go live and trade.
|
| 35 |
+
|
| 36 |
+
---
|
| 37 |
+
|
| 38 |
+
## Five-minute quickstart
|
| 39 |
+
|
| 40 |
+
A fresh clone, Python 3.11 or newer, and no API keys. This path does not start Docker, does not read exchange keys, and does not place an order. It installs the operator extra, runs the offline operator server tests, the connectome test, and the quickstart banner test, then prints the HNC measurement from `aureon.evaluation.brain_proof.evaluate_brain`. That function runs `HarmonicRealityField.step` for 100 steps with the multiverse extension off. The class default HarmonicRealityField() has the multiverse on, which gives coherence 0.857719 and LOCKED. It is deterministic: it takes no seed, so the same figures come back on every run.
|
| 41 |
+
|
| 42 |
+
Linux and macOS:
|
| 43 |
+
|
| 44 |
+
```bash
|
| 45 |
+
git clone https://github.com/RA-CONSULTING/Aureon-OS.git && cd Aureon-OS
|
| 46 |
+
python3 -m venv .venv
|
| 47 |
+
. .venv/bin/activate
|
| 48 |
+
python -m pip install -U pip
|
| 49 |
+
python -m pip install -e '.[operator]' 'pytest>=8' 'pytest-timeout>=2.3' 'numpy>=1.26' 'cryptography>=46'
|
| 50 |
+
AUREON_LLM_OFFLINE=1 AUREON_SUPPRESS_IMPORT_SIDE_EFFECTS=1 pytest tests/test_operator_server.py tests/test_connectome.py tests/test_quickstart_brain_proof.py --timeout=60
|
| 51 |
+
AUREON_LLM_OFFLINE=1 AUREON_SUPPRESS_IMPORT_SIDE_EFFECTS=1 python -c "from aureon.evaluation.brain_proof import evaluate_brain, render_brain_markdown; print(render_brain_markdown(evaluate_brain()))"
|
| 52 |
+
```
|
| 53 |
+
|
| 54 |
+
Windows:
|
| 55 |
+
|
| 56 |
+
```bat
|
| 57 |
+
git clone https://github.com/RA-CONSULTING/Aureon-OS.git && cd Aureon-OS
|
| 58 |
+
py -3 -m venv .venv
|
| 59 |
+
.venv\Scripts\activate
|
| 60 |
+
python -m pip install -U pip
|
| 61 |
+
python -m pip install -e ".[operator]" "pytest>=8" "pytest-timeout>=2.3" "numpy>=1.26" "cryptography>=46"
|
| 62 |
+
set AUREON_LLM_OFFLINE=1
|
| 63 |
+
set AUREON_SUPPRESS_IMPORT_SIDE_EFFECTS=1
|
| 64 |
+
pytest tests/test_operator_server.py tests/test_connectome.py tests/test_quickstart_brain_proof.py --timeout=60
|
| 65 |
+
python -c "from aureon.evaluation.brain_proof import evaluate_brain, render_brain_markdown; print(render_brain_markdown(evaluate_brain()))"
|
| 66 |
+
```
|
| 67 |
+
|
| 68 |
+
The measurement below is from a run of that command with no keys:
|
| 69 |
+
|
| 70 |
+
```text
|
| 71 |
+
# HNC, Auris coherence, and QGITA
|
| 72 |
+
|
| 73 |
+
These figures are the HNC master-formula path, Auris coherence, and the QGITA analyzer. They are not a claim that the system is conscious or alive.
|
| 74 |
+
|
| 75 |
+
No outside model was called. Live trading stayed off. No order was placed.
|
| 76 |
+
HNC formula path, multiverse off: state `unified`, coherence `0.9331334813083556`, last Ξ(t) `1.409626852655939`, steps `100`.
|
| 77 |
+
Multiverse extension: **measured**. project_to_3d sets noise to 0 when no observed residual is supplied. TranslationMap.noise_level is stored and is not read by that method. Three constructions of the default HarmonicRealityField returned the same series.
|
| 78 |
+
Auris coherence `None` with status `no_data`. Nodes without a reading: Clownfish, Owl.
|
| 79 |
+
Trade readiness: **HOLD**. no market series and no trade-outcome labels
|
| 80 |
+
QGITA on the derived series `data/de440_timeseries.csv` (cited-unverified): status `complete`, FTCP count `0`, lighthouse events `0`. Detection rate **HOLD**. Clock: sample index. analyze_price_stream uses range(len(prices)) when no timestamps are passed
|
| 81 |
+
QGITA on the formula series: FTCP count `0`, lighthouse events `0`. Detection rate **HOLD**. Clock: step index times HarmonicRealityField.dt
|
| 82 |
+
Auris is not joined to Ξ(t): **HOLD**. no function in the repo passes Ξ(t) into get_auris_coherence
|
| 83 |
+
```
|
| 84 |
+
|
| 85 |
+
The longer operator preflight, containers, and the full offline suite are further down.
|
| 86 |
+
|
| 87 |
+
## Public MCP (stages 1 and 2 of 4)
|
| 88 |
+
|
| 89 |
+
[`mcp/aureon_public/README.md`](mcp/aureon_public/README.md) is the public MCP surface. It is read-only. Stages 1 and 2 of 4 are open. Stages 3 and 4 stay closed.
|
| 90 |
+
|
| 91 |
+
---
|
| 92 |
+
|
| 93 |
+
## What Aureon OS is
|
| 94 |
+
|
| 95 |
+
Aureon OS is a **local-first operating layer** β powered by the Harmonic Nexus Core β that
|
| 96 |
+
lets a human operator run, inspect, and
|
| 97 |
+
ground evidence-heavy automation across several domains from one place. It is built to be
|
| 98 |
+
*auditable first*: code, ledgers, audits, generated interfaces, and research artifacts are
|
| 99 |
+
kept together so a reviewer can always see what exists, what is experimental, and what is
|
| 100 |
+
ready for controlled use.
|
| 101 |
+
|
| 102 |
+
It is organized in three independently reviewable layers:
|
| 103 |
+
|
| 104 |
+
1. **The implementation platform** β source and offline tests; runtime release is on HOLD.
|
| 105 |
+
2. **The research framework (HNC)** β pre-registered, falsifiable hypotheses with evidence.
|
| 106 |
+
3. **The vision** β the thread that ties the ancient, the mathematical, and the market together.
|
| 107 |
+
|
| 108 |
+
> This is the formal front door. The original long-form README is preserved unchanged at
|
| 109 |
+
> [`docs/archive/README_legacy_20260712.md`](docs/archive/README_legacy_20260712.md) β nothing was removed, only formalized.
|
| 110 |
+
|
| 111 |
+
The shared rules for everyone working in this repo are [`docs/AUREON_RULES.md`](docs/AUREON_RULES.md).
|
| 112 |
+
|
| 113 |
+
### How it fits together
|
| 114 |
+
|
| 115 |
+
```mermaid
|
| 116 |
+
flowchart TB
|
| 117 |
+
user["π€ Operator / Investor / End user"]
|
| 118 |
+
console["Unified console<br/>(React Β· sidebar Β· every dashboard as a route)"]
|
| 119 |
+
gateway["Operator gateway Β· :8790<br/>WSGI Β· auth Β· rate-limit Β· /healthz /readyz /metrics"]
|
| 120 |
+
|
| 121 |
+
subgraph brain["Grounded AI core"]
|
| 122 |
+
operator["Aureon Operator<br/>switchboard: ground β consensus β veto"]
|
| 123 |
+
cognition["Agentic cognition<br/>tools Β· repo-wide grounding Β· hard boundaries"]
|
| 124 |
+
end
|
| 125 |
+
|
| 126 |
+
subgraph organism["The organism (~1,100 modules)"]
|
| 127 |
+
connectome["Connectome<br/>sense Β· touch Β· weave"]
|
| 128 |
+
bus["Thought bus Β· mycelium Β· Queen"]
|
| 129 |
+
hnc["HNC live daemon β Ξ(t) field β harmonic observer"]
|
| 130 |
+
end
|
| 131 |
+
|
| 132 |
+
saas["SaaS platform<br/>catalog Β· status Β· billing/metering"]
|
| 133 |
+
supabase[("Supabase<br/>auth Β· tenancy Β· gas-tank billing")]
|
| 134 |
+
|
| 135 |
+
user --> console --> gateway
|
| 136 |
+
gateway --> operator --> cognition
|
| 137 |
+
gateway --> saas
|
| 138 |
+
cognition --> connectome --> bus
|
| 139 |
+
hnc --> bus
|
| 140 |
+
saas --> supabase
|
| 141 |
+
console -. "Supabase session (JWT)" .-> supabase
|
| 142 |
+
```
|
| 143 |
+
|
| 144 |
+
<sub>Every consequential action passes a hard authority boundary + conscience veto before it runs; the platform never trades, pays, or files autonomously.</sub>
|
| 145 |
+
|
| 146 |
+
---
|
| 147 |
+
|
| 148 |
+
## 1 Β· Implementation platform (source-visible; supported runtime is HOLD)
|
| 149 |
+
|
| 150 |
+
| Capability | What it is | Entry point |
|
| 151 |
+
|---|---|---|
|
| 152 |
+
| **Aureon Operator** | A grounded AI switchboard β routes a prompt through many models, grounds it in the repo, reaches consensus, and applies a conscience veto before answering. | [`aureon/operator/`](aureon/operator/) Β· [switchboard doc](docs/architecture/AUREON_OPERATOR_SWITCHBOARD.md) |
|
| 153 |
+
| **Agentic cognition** | The operator as an agent: repo-wide grounding, tool use (search / read / code / state), hard authority boundaries enforced before any action. | [`aureon/operator/cognition.py`](aureon/operator/cognition.py) |
|
| 154 |
+
| **The organism connectome** | The metacognitive layer that senses, touches, and weaves every module of the body β legacy code included β into one living system. | [`aureon/core/aureon_connectome.py`](aureon/core/aureon_connectome.py) Β· [doc](docs/architecture/ORGANISM_CONNECTOME.md) |
|
| 155 |
+
| **SaaS platform** | A categorized catalog of ~1,100 modules, honest health status, a tenancy bridge, and a billing/metering layer, served behind one gateway. | [`aureon/saas/`](aureon/saas/) Β· [SAAS_PLATFORM.md](docs/SAAS_PLATFORM.md) |
|
| 156 |
+
| **Unified console** | One professional React interface β sidebar, command palette, every dashboard as a route β over the whole repo. | [`frontend/`](frontend/) |
|
| 157 |
+
| **Release-boundary implementation** | WSGI, auth, metrics, containers, and CI remain source-visible; supported launchers currently stop at terminal HOLD. | [PRODUCTION_GRADE.md](docs/runbooks/PRODUCTION_GRADE.md) |
|
| 158 |
+
| **Multi-user platform** | End-user sign-in with **per-user encrypted keys**, each user reasoning on their own models, and a default-deny boundary between a signed-in user's account and the instance's control plane. | [`aureon/operator/identity.py`](aureon/operator/identity.py) Β· [MULTI_TENANT_AUTH.md](docs/architecture/MULTI_TENANT_AUTH.md) |
|
| 159 |
+
|
| 160 |
+
<div align="center">
|
| 161 |
+
<img src="public/hnc_dashboard.png" alt="Aureon HNC dashboard" width="48%" />
|
| 162 |
+
<img src="public/harmonic_wave_analysis.png" alt="Harmonic wave analysis" width="48%" />
|
| 163 |
+
</div>
|
| 164 |
+
|
| 165 |
+
### Operator preflight, containers, and the strict suite
|
| 166 |
+
|
| 167 |
+
```bash
|
| 168 |
+
# 1 Β· evaluate the isolated operator protection preflight
|
| 169 |
+
pip install -e '.[operator]'
|
| 170 |
+
python -I -S -B scripts/bootstrap/protected_bootstrap_v05.py --target-id operator
|
| 171 |
+
|
| 172 |
+
# 2 Β· build and evaluate the container protection preflights
|
| 173 |
+
docker compose -f deploy/docker-compose.saas.yml up --build
|
| 174 |
+
|
| 175 |
+
# 3 Β· run the strict-tier test suite (offline, no keys/network)
|
| 176 |
+
AUREON_LLM_OFFLINE=1 pytest tests/test_operator_*.py tests/test_saas_*.py tests/test_connectome.py -q
|
| 177 |
+
```
|
| 178 |
+
|
| 179 |
+
### Current local verification boundary
|
| 180 |
+
|
| 181 |
+
Everything needed to inspect source and run offline tests is in this repo. Do not
|
| 182 |
+
inject exchange, model, hosting, or deployment credentials while validating the
|
| 183 |
+
current release: the isolated operator bootstrap, containers, and supervisor
|
| 184 |
+
entrypoints stay on **HOLD**.
|
| 185 |
+
|
| 186 |
+
The local installer is the path that brings a clone up. Linux and macOS:
|
| 187 |
+
`bash production/install.sh`. Windows: `production\Install-AUREON.ps1` (or
|
| 188 |
+
`production\install-windows.bat`). `bash scripts/linux/aureon-up.sh` calls that
|
| 189 |
+
installer when the virtualenv is missing, then starts the same preflight.
|
| 190 |
+
The shell is `http://127.0.0.1:5173/`. Dashboard and Command Center are tabs of
|
| 191 |
+
the local console at `http://127.0.0.1:5173/console/local`. Every other
|
| 192 |
+
dashboard and status page β the 8080 console, Orca on 8888, market status on
|
| 193 |
+
8791, the gateway on 8790, the fusion seat on 8765, the circulation bus on
|
| 194 |
+
8799, the neural canvas, the thought-action hub, the error sink, and API B β
|
| 195 |
+
is a tab at `http://127.0.0.1:5173/console/seats`, with the other status
|
| 196 |
+
pages (queen unified, pro dashboard, master hub, Earth shield, queen web,
|
| 197 |
+
system hub, bot hunter, the dashboard API, queen power, trader telemetry,
|
| 198 |
+
Kraken telemetry, and the legacy command center) on that same tab row. Those
|
| 199 |
+
tabs read the live buses through the gateway. A source that is down, or a
|
| 200 |
+
page that draws invented readings, shows the reason and no invented number.
|
| 201 |
+
`AUREON_SIMULATED_BOOT` stays unset, so those generators do not load. The launcher leaves port 8080 alone. Live mode turns on when a complete exchange key group is in
|
| 202 |
+
`.env`. With no complete group the boot stays paper/public-data and the health
|
| 203 |
+
report says `trading_mode=paper/public-data (no exchange keys)`. With keys it
|
| 204 |
+
says `trading_mode=live (exchange keys present)`. The launcher does not place
|
| 205 |
+
an order by itself. The thought bus health check is
|
| 206 |
+
`http://127.0.0.1:8799/healthz`. The fusion seat keeps
|
| 207 |
+
`http://127.0.0.1:8765/healthz`.
|
| 208 |
+
A HOLD receipt proves only that the fail-closed preflight ran; it is not proof
|
| 209 |
+
that the whole system is protected or production-ready.
|
| 210 |
+
|
| 211 |
+
### Canonical organism launcher
|
| 212 |
+
|
| 213 |
+
> **Stay on the five-minute quickstart. Do not add your own exchange keys.** This launcher defaults to full autonomy. If exchange keys are in `.env`, the boot can go live and trade.
|
| 214 |
+
|
| 215 |
+
The terminal-HOLD bootstraps stay holds. The organism launcher is a separate entry. Its default is full autonomy, and it does not place an order by itself:
|
| 216 |
+
|
| 217 |
+
```bash
|
| 218 |
+
scripts/launch/aureon-master.sh
|
| 219 |
+
```
|
| 220 |
+
|
| 221 |
+
Windows uses `scripts/launch/aureon-master.ps1` and `scripts/launch/aureon-master.bat`. On a fresh clone it writes `.env` from `.env.example` when `.env` is absent, installs Python requirements into `.venv`, Node packages for `frontend/`, and the self-host Docker images, then starts the organism and prints a health table. Paths follow the checkout. Trading is live when the operator's own exchange keys are in `.env`. With no keys the report says `trading_mode=paper/public-data (no exchange keys)`. A missing binary, script, or daemon is a blocked row. The mode is in [`AUTONOMY.md`](AUTONOMY.md). The module name and the table are in [`LAUNCHER_INVENTORY.md`](LAUNCHER_INVENTORY.md). What still names a machine is in [`PORTABILITY.md`](PORTABILITY.md).
|
| 222 |
+
|
| 223 |
+
### How anyone can run it
|
| 224 |
+
|
| 225 |
+
A fresh clone on your own machine is enough. The launcher does not need Gary's home directory, a hosted runner, or a key that shipped with the repo.
|
| 226 |
+
|
| 227 |
+
Linux and macOS, from the checkout:
|
| 228 |
+
|
| 229 |
+
```bash
|
| 230 |
+
scripts/launch/aureon-master.sh
|
| 231 |
+
```
|
| 232 |
+
|
| 233 |
+
Windows, from the checkout:
|
| 234 |
+
|
| 235 |
+
```bat
|
| 236 |
+
scripts\launch\aureon-master.ps1
|
| 237 |
+
```
|
| 238 |
+
|
| 239 |
+
`scripts\launch\aureon-master.bat` is the same entry. That one command writes `.env` from `.env.example` when `.env` is absent, installs Python requirements into `.venv`, Node packages for `frontend/`, and the self-host images when Docker answers, then starts the organism. An existing `.env` is left as it is. Paths follow the checkout.
|
| 240 |
+
|
| 241 |
+
Do not add exchange keys to `.env`. A complete key group (Kraken, Binance, Alpaca, or Capital.com) makes the next boot live, and the health report says `trading_mode=live (exchange keys present)`. With no complete group the same boot stays in paper/public-data mode and the report says `trading_mode=paper/public-data (no exchange keys)`. Do not commit `.env`. The launcher does not place an order by itself. New users should stay on the five-minute quickstart.
|
| 242 |
+
|
| 243 |
+
The boot is unrestricted by default. `AUREON_AUTONOMY_MODE` unset is `full`. Self-coding may edit any path except credential material, approves its own edits, and commits a patch after that patch's tests pass. Nothing is pushed. There is no kill switch and no kill file: `AUREON_SELF_REPAIR_KILL` and `state/SELF_REPAIR_KILL` do not stop a write or an order. Changes and order attempts are appended to `state/autonomy_audit.jsonl`. The unity exchange brain, the unified market trader, the Capital.com CFD trader, and the micro-profit labyrinth each record an attempt. Secret values are redacted. The same records are published on the circulation thought bus. The metacognition and self-repair loops consume them. After repeated failed self-changes, metacognition raises a concern and lowers its confidence, and self-repair deprioritises a target that keeps failing. A self-patch whose tests fail stays applied. It is not reversed. Credentials are still never written into the repo or into a log.
|
| 244 |
+
|
| 245 |
+
The health table is the last thing the launcher prints. Each row is `order`, `name`, `status`, `health`, and `reason`. A missing binary, script, or daemon is `blocked` with the reason. The totals are `started`, `blocked`, and `total`.
|
| 246 |
+
|
| 247 |
+
```bash
|
| 248 |
+
scripts/launch/aureon-master.sh --status
|
| 249 |
+
scripts/launch/aureon-master.sh --stop
|
| 250 |
+
```
|
| 251 |
+
|
| 252 |
+
`--status` prints that table and starts nothing. `--stop` stops the processes this launcher recorded. Postgres, Redis, or nginx it did not start are left alone. On Windows, pass the same flags to `aureon-master.ps1` or `aureon-master.bat`. Those two flags are ordinary process control.
|
| 253 |
+
|
| 254 |
+
The existing installer is the one step that also brings up the toolchain and the UI. Linux and macOS:
|
| 255 |
+
|
| 256 |
+
```bash
|
| 257 |
+
bash production/install.sh
|
| 258 |
+
```
|
| 259 |
+
|
| 260 |
+
Windows: `production\Install-AUREON.ps1`, or `production\install-windows.bat`. Running it again is safe. It installs Python, venv, Node, npm, git, and curl when apt, dnf, Homebrew, or winget can, writes `.env` from `.env.example` only when `.env` is absent, installs and builds the frontend, then calls the master launcher above. Docker images are used when the daemon answers. With no daemon the launcher uses its native fallbacks. When the UI answers, the installer prints `Aureon UI: http://127.0.0.1:5173/`.
|
| 261 |
+
|
| 262 |
+
Installing from git (`pip install git+...`) brings the whole repo, trading modules included. A Hugging Face Space is planned, and nothing is hosted yet, so no Space is switching those modules off.
|
| 263 |
+
|
| 264 |
+
`PyAudio` in `requirements.txt` needs the system audio headers (`portaudio`) before pip can build it. The Linux installer uses `requirements-linux.txt`, which leaves that package out and includes pytest, so `tests/test_preflight_snags.py` can run in the installer environment. Build the test virtualenv with `python -m venv --copies .venv`. A symlinked interpreter fails 32 evidence tests: `sys.executable` must be a real file inside the venv, which `--copies` provides and a symlink into another prefix does not. The installer creates `.venv` with `--copies`. Pytest prints a header note when the interpreter it is running is itself a symlink.
|
| 265 |
+
|
| 266 |
+
### Archive of unreferenced root files
|
| 267 |
+
|
| 268 |
+
`archive/workspace-root/` holds notes, one-off scripts, and captured ledgers that the running fleet does not import. Live organ paths stay where [`aureon_fusion/paths.py`](aureon_fusion/paths.py) and [`aureon_fusion/organ_registry.py`](aureon_fusion/organ_registry.py) name them. Fleet output stays untracked.
|
| 269 |
+
|
| 270 |
+
Direct-module and go-live runbooks are superseded until native process
|
| 271 |
+
containment, target-source measurement, external HNC head anchoring, and
|
| 272 |
+
provider-side read-back are proven.
|
| 273 |
+
|
| 274 |
+
### Multi-user implementation status
|
| 275 |
+
|
| 276 |
+
The source contains a proposed single-operator and multi-user separation model,
|
| 277 |
+
but no supported runtime starts it while the release is on HOLD:
|
| 278 |
+
|
| 279 |
+
| | The operator | A signed-in end user |
|
| 280 |
+
|---|---|---|
|
| 281 |
+
| **Keys** | the instance's own, in `os.environ` + the global keystore | **their own**, Fernet-encrypted in an isolated per-account store, masked to last-4 on read, never written into the process environment |
|
| 282 |
+
| **Reasoning** | the instance engine, full toolbelt | **their own models**, on a request-scoped engine with a pure-compute toolbelt β no shell, no repo write, no network egress, no instance-state read |
|
| 283 |
+
| **Memory** | the shared thought bus and mesh | isolated: their prompts and answers never enter shared instance memory |
|
| 284 |
+
| **Control plane** | theirs β switchboard, host actions, approvals, manifests, MCP, instance credentials | **refused**. A tenant reaches an explicit allowlist; every other `/api` route is operator-only by omission |
|
| 285 |
+
|
| 286 |
+
The intended request boundary is centralized and default-deny rather than
|
| 287 |
+
implemented independently per route. This is an implementation claim backed by
|
| 288 |
+
tests, not evidence of a deployed tenant service.
|
| 289 |
+
|
| 290 |
+
The design history and adversarial findings remain in
|
| 291 |
+
[`docs/architecture/MULTI_TENANT_AUTH.md`](docs/architecture/MULTI_TENANT_AUTH.md).
|
| 292 |
+
Do not add tenant, operator, model, or hosting secrets merely to inspect this
|
| 293 |
+
source. Network exposure remains outside the current release boundary.
|
| 294 |
+
|
| 295 |
+
---
|
| 296 |
+
|
| 297 |
+
## 2 Β· The research framework β HNC (pre-registered & falsifiable)
|
| 298 |
+
|
| 299 |
+
Aureon is built on the **Harmonic Nexus Core (HNC)** β a research framework proposing that a
|
| 300 |
+
ΟΒ² (golden-ratio-squared) mathematical coherence links ancient knowledge systems, geopolitical
|
| 301 |
+
stress in open data, and market dynamics. These are **research hypotheses**, stated as
|
| 302 |
+
falsifiable claims with reproduction commands β never as financial promises.
|
| 303 |
+
|
| 304 |
+
| Claim | Value | Evidence & how to reproduce |
|
| 305 |
+
|---|---|---|
|
| 306 |
+
| Oil volatility β open-data node activation | r = 0.85, p < 0.001, 24β48h lag | [`CLAIMS_AND_EVIDENCE.md Β§C1`](docs/CLAIMS_AND_EVIDENCE.md) |
|
| 307 |
+
| ΟΒ² hydrogen-line reproduction | 1,420.405754 MHz vs NIST 1,420.405752 MHz (ppb) | [`CLAIMS_AND_EVIDENCE.md Β§C6`](docs/CLAIMS_AND_EVIDENCE.md) |
|
| 308 |
+
| Pre-registered predictions (P1βP5) | falsifiable, tracked | [`CLAIMS_AND_EVIDENCE.md`](docs/CLAIMS_AND_EVIDENCE.md) Β· [falsification protocol](docs/HNC_FALSIFICATION_PROTOCOL.md) |
|
| 309 |
+
|
| 310 |
+
Every claim links to the file that establishes it and a command you can run. If a claim is not
|
| 311 |
+
backed by a source, it is a bug β the repository is the authority. See the full spine in
|
| 312 |
+
[`docs/CLAIMS_AND_EVIDENCE.md`](docs/CLAIMS_AND_EVIDENCE.md).
|
| 313 |
+
|
| 314 |
+
<div align="center">
|
| 315 |
+
<img src="docs/images/forensics_feb2026_convergence.jpg" alt="From theory to forensics β Feb 5β6 geomagnetic convergence event, predictions vs verified public data" width="70%" />
|
| 316 |
+
<br/><sub>A worked example: the Feb 5β6 geomagnetic-convergence event, predictions checked against verified public data (NASA/NOAA, Reuters). Research/education only β not financial advice.</sub>
|
| 317 |
+
</div>
|
| 318 |
+
|
| 319 |
+
---
|
| 320 |
+
|
| 321 |
+
## 3 Β· The vision
|
| 322 |
+
|
| 323 |
+
> *The same coherence that organized the Ziggurats of Ur, the Great Pyramid, and the Roman road
|
| 324 |
+
> network expresses itself now β measurably β in the rhythms of open data and markets. Aureon is
|
| 325 |
+
> the instrument built to listen for it, and to act only with a conscience in the loop.*
|
| 326 |
+
|
| 327 |
+
The full thread β the ancient substrate, the mathematics, the extraction machine, and the
|
| 328 |
+
distributed response β is told in the creator's own voice in
|
| 329 |
+
[`docs/THE_SYNTHESIS.md`](docs/THE_SYNTHESIS.md).
|
| 330 |
+
|
| 331 |
+
---
|
| 332 |
+
|
| 333 |
+
## Company & credentials
|
| 334 |
+
|
| 335 |
+
**[R&A Consulting and Brokerage Services Ltd](COMPANY.md)** β registered in Northern Ireland,
|
| 336 |
+
**company no. NI696693** β trading as **Aureon Zorza Technologies**.
|
| 337 |
+
|
| 338 |
+
- π
**Silver-level innovator** on the Innovate NI Innovation Framework (Department for the Economy / Tourism NI), awarded 21 July 2025 by the Minister for the Economy. β [certificate](docs/images/innovate_ni_silver_2025.png)
|
| 339 |
+
- π€ **Community**: a supporter of Street Soccer NI / Homeless World Cup (Norway 2025). β [`COMPANY.md`](COMPANY.md)
|
| 340 |
+
- π Website: [aureonzorzatechnologies.pl](https://aureonzorzatechnologies.pl)
|
| 341 |
+
- π License: [MIT](LICENSE) Β· Β© 2025 R&A Consulting and Brokerage Services Ltd
|
| 342 |
+
- Full company details: [`COMPANY.md`](COMPANY.md)
|
| 343 |
+
|
| 344 |
+
### Early interest
|
| 345 |
+
|
| 346 |
+
Open-source repository traffic to date (verifiable in the repo's GitHub **Insights β Traffic**):
|
| 347 |
+
|
| 348 |
+
<div align="center">
|
| 349 |
+
<img src="docs/images/github_traffic_infographic.jpg" alt="GitHub clone traffic: 4,559 unique cloners, 51,287 clone operations, Dec 2025βMar 2026" width="46%" />
|
| 350 |
+
<img src="docs/images/github_clone_traffic_insights.jpg" alt="GitHub Insights traffic β clones over 14 days" width="46%" />
|
| 351 |
+
</div>
|
| 352 |
+
|
| 353 |
+
<sub>These are **repository clone-traffic** figures (developer/researcher interest in the code), not user, customer, or revenue numbers. Source: GitHub Insights.</sub>
|
| 354 |
+
|
| 355 |
+
---
|
| 356 |
+
|
| 357 |
+
## Where to go next
|
| 358 |
+
|
| 359 |
+
| You are⦠| Start here |
|
| 360 |
+
|---|---|
|
| 361 |
+
| **Working on Aureon OS** | [`docs/AUREON_RULES.md`](docs/AUREON_RULES.md) β the shared rulebook |
|
| 362 |
+
| **An investor or funder** | [`docs/investor/README.md`](docs/investor/README.md) β diligence path, capability categories, and claim discipline |
|
| 363 |
+
| **A developer** | [`docs/INDEX.md`](docs/INDEX.md) Β· [`CAPABILITIES.md`](CAPABILITIES.md) Β· [`docs/SAAS_PLATFORM.md`](docs/SAAS_PLATFORM.md) |
|
| 364 |
+
| **A researcher** | [`docs/THE_SYNTHESIS.md`](docs/THE_SYNTHESIS.md) Β· [`docs/CLAIMS_AND_EVIDENCE.md`](docs/CLAIMS_AND_EVIDENCE.md) Β· [`docs/research/READING_PATHS.md`](docs/research/READING_PATHS.md) |
|
| 365 |
+
| **Deployment status** | [`docs/runbooks/GO_LIVE_HARDENING.md`](docs/runbooks/GO_LIVE_HARDENING.md) Β· [`docs/deployment/`](docs/deployment/) β terminal HOLD; no supported listener or deploy route |
|
| 366 |
+
| **Running it for several users** | [`docs/architecture/MULTI_TENANT_AUTH.md`](docs/architecture/MULTI_TENANT_AUTH.md) β the account/instance boundary and how it is enforced |
|
| 367 |
+
| **Checking what the numbers mean** | [`docs/architecture/DATA_PROVENANCE_AUDIT.md`](docs/architecture/DATA_PROVENANCE_AUDIT.md) β which readings are live, which are withheld as `no_data`, and which generated feeds are opt-in |
|
| 368 |
+
| **Browsing the whole repo** | [`docs/REPO_SITEMAP.md`](docs/REPO_SITEMAP.md) Β· the console's `#repo-map` tab |
|
| 369 |
+
| **Contributing** | [`CONTRIBUTING.md`](CONTRIBUTING.md) Β· [`SECURITY.md`](SECURITY.md) Β· [`CODE_OF_CONDUCT.md`](CODE_OF_CONDUCT.md) |
|
| 370 |
+
|
| 371 |
+
---
|
| 372 |
+
|
| 373 |
+
## Continuous integration
|
| 374 |
+
|
| 375 |
+
Quality evidence is suite- and revision-specific. Run the current offline tests
|
| 376 |
+
and static checks rather than relying on historical pass counts or badges. A
|
| 377 |
+
passing implementation suite does not override the terminal release HOLD.
|
| 378 |
+
|
| 379 |
+
The hosted GitHub Actions status badges below turn green once Actions is enabled on the
|
| 380 |
+
organization (they reflect hosted runs, not the local gate):
|
| 381 |
+
|
| 382 |
+
[](https://github.com/RA-CONSULTING/Aureon-OS/actions/workflows/operator-ci.yml)
|
| 383 |
+
[](https://github.com/RA-CONSULTING/Aureon-OS/actions/workflows/main_ci.yml)
|
| 384 |
+
[](https://github.com/RA-CONSULTING/Aureon-OS/actions/workflows/nightly-benchmark.yml)
|
| 385 |
+
|
| 386 |
+
```bash
|
| 387 |
+
# reproduce the gate locally
|
| 388 |
+
pip install -e '.[operator,dev]'
|
| 389 |
+
ruff check aureon/operator/ aureon/saas/ && mypy aureon/operator/ aureon/saas/
|
| 390 |
+
AUREON_LLM_OFFLINE=1 pytest tests/test_operator_*.py tests/test_saas_*.py tests/test_connectome.py -q
|
| 391 |
+
|
| 392 |
+
# evaluate the capability-demo protection preflight; it currently returns HOLD
|
| 393 |
+
# without importing or booting the capability surface. That is not a measured
|
| 394 |
+
# capability result.
|
| 395 |
+
AUREON_LLM_OFFLINE=1 AUREON_SUPPRESS_IMPORT_SIDE_EFFECTS=1 \
|
| 396 |
+
python -I -S -B scripts/bootstrap/protected_bootstrap_v05.py --target-id capability-demo -- --report docs/reports/CAPABILITY_DEMO.md
|
| 397 |
+
```
|
| 398 |
+
|
| 399 |
+
## Operating boundaries
|
| 400 |
+
|
| 401 |
+
Aureon is designed for **controlled local operation with a human in the loop**. Live trading,
|
| 402 |
+
warehouse mutation, filing support, payment activity, and other sensitive workflows require
|
| 403 |
+
explicit operator review, valid credentials, and route-specific evidence β the platform never
|
| 404 |
+
initiates them autonomously. Public documentation describes capability and repository state; it
|
| 405 |
+
is **not financial, legal, tax, or regulatory advice**, and nothing here is an offer of
|
| 406 |
+
securities or a promise of returns. Private credentials, customer data, and sensitive local
|
| 407 |
+
evidence are not published in this repository.
|
| 408 |
+
|
| 409 |
+
---
|
| 410 |
+
|
| 411 |
+
<div align="center">
|
| 412 |
+
<sub>Aureon OS Β· Harmonic Nexus Core β a product of R&A Consulting and Brokerage Services Ltd, trading as Aureon Zorza Technologies.</sub>
|
| 413 |
+
</div>
|
| 414 |
+
|
| 415 |
+
## Developer quickstart (this Space is live)
|
| 416 |
+
|
| 417 |
+
Base URL: `https://garyleckey-aureon-os.hf.space`
|
| 418 |
+
|
| 419 |
+
The full console is live at `/console` β operator gateway + cognition + SaaS catalog
|
| 420 |
+
mounted behind the nginx edge. Public read-only organism plane (CORS enabled):
|
| 421 |
+
|
| 422 |
+
- `GET /healthz` β operator liveness (early seat proxy answers during boot)
|
| 423 |
+
- `GET /readyz` β operator readiness
|
| 424 |
+
- `GET /api/status`, `/api/pulse`, `/api/organism`, `/api/automation`, `/api/defense`,
|
| 425 |
+
`/api/domains`, `/api/catalog`, `/api/cognition`, `/api/metacognition`, `/api/affect`,
|
| 426 |
+
`/api/soul`, `/api/inner-work`, `/api/pursuit`, `/api/providers`, `/api/switchboard` β
|
| 427 |
+
anonymous GETs answer (nginx injects the space-side bearer to the loopback gateway)
|
| 428 |
+
|
| 429 |
+
Writes stay human-gated: POST/DELETE under `/api/*` requires the operator bearer
|
| 430 |
+
(`AUREON_OPERATOR_API_KEY` Space secret β set your own via Space Settings β Secrets).
|
| 431 |
+
|
| 432 |
+
Fusion paper-mode API (bearer): moved under the `/fusion/` prefix so the console owns
|
| 433 |
+
`/api/*`:
|
| 434 |
+
|
| 435 |
+
```bash
|
| 436 |
+
curl -H "Authorization: Bearer local-selfhost-token" \
|
| 437 |
+
https://garyleckey-aureon-os.hf.space/fusion/api/status
|
| 438 |
+
```
|
| 439 |
+
|
| 440 |
+
- `live_trading` is permanently `false` on this Space (paper/public-data only).
|
| 441 |
+
- Rate limit: 50 req/s per IP (burst 100), HTTP 429 beyond.
|