diff --git a/.github/workflows/build-goalos-cloud-mvp-v0-2.yml b/.github/workflows/build-goalos-cloud-mvp-v0-2.yml index d88b7b7a..e74cef48 100644 --- a/.github/workflows/build-goalos-cloud-mvp-v0-2.yml +++ b/.github/workflows/build-goalos-cloud-mvp-v0-2.yml @@ -38,6 +38,8 @@ jobs: python -m json.tool site/app/goalos-cloud-mvp/openapi.json >/dev/null python -m json.tool site/app/goalos-cloud-mvp/schemas/workflow.schema.json >/dev/null python -m json.tool site/app/goalos-cloud-mvp/schemas/proof-record.schema.json >/dev/null + - name: Validate canonical shell + run: python scripts/validate_goalos_site_v2.py - name: Run paid artifact guard run: python scripts/check_no_paid_artifacts.py - name: Upload GitHub Pages artifact diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index d03ec162..779c94a9 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -31,3 +31,12 @@ jobs: - name: JavaScript syntax check run: node --check site/app.js + - name: Run GoalOS Cloud MVP test + run: node site/app/goalos-cloud-mvp/tests/enterprise-core.test.mjs + + - name: Run GoalOS public site validation + run: python scripts/validate_goalos_site_v2.py + + - name: Run paid artifact guard + run: python scripts/check_no_paid_artifacts.py + diff --git a/README.md b/README.md index e57cd4af..96c2fd17 100644 --- a/README.md +++ b/README.md @@ -100,7 +100,7 @@ python scripts/check_no_paid_artifacts.py pytest ``` -The paid-artifact guard blocks paid buyer ZIPs, paid workshop files, implementation bundles, enterprise delivery kits, and seller assets from the GitHub Pages public site, except explicitly whitelisted public standards/action documentation. +The paid-artifact guard blocks ZIPs, paid buyer files, paid workshop files, implementation bundles, enterprise delivery kits, seller assets, master packs, commercialization-ready packs, and quick-launch packs from the GitHub Pages public site while allowing public documentation and standards files. ## Repository foundation diff --git a/docs/GOALOS_PAID_ARTIFACT_POLICY.md b/docs/GOALOS_PAID_ARTIFACT_POLICY.md new file mode 100644 index 00000000..1ffb0a47 --- /dev/null +++ b/docs/GOALOS_PAID_ARTIFACT_POLICY.md @@ -0,0 +1,44 @@ +# GoalOS Paid Artifact Policy + +This repository is the public Proof Gradient / GoalOS foundation. It may publish public pages, public standards, schemas, OpenAPI blueprints, static demo code, documentation, and GitHub Actions. + +It must not publish paid buyer files or private delivery materials. + +## Public allowed content + +Allowed public content includes: + +- public Markdown documentation; +- public HTML website pages; +- public AEP standards pages, schemas, examples, and conformance notes; +- JSON schemas, OpenAPI JSON, public manifests, CSS, JavaScript, SVG assets, and static app files; +- GitHub Actions that validate and deploy the public site; +- files under `docs/` that are clearly public strategy, policy, proof, or implementation documentation. + +## Restricted content + +Do not commit or publish: + +- paid buyer ZIPs; +- paid workshop bundles; +- implementation delivery kits; +- enterprise pilot delivery bundles; +- seller asset packs; +- master packs, quick-launch packs, or commercialization-ready private bundles; +- private client materials, credentials, keys, access tokens, or secrets. + +The public site guard blocks suspicious deploy filenames such as `*.zip`, `*BUYER*`, `*COMPLETE_BUNDLE*`, `*DELIVERY_KIT*`, `*SELLER_ASSETS*`, `*WORKSHOP*`, `*IMPLEMENTATION*`, `*ENTERPRISE_PILOT*`, `*MASTER_PACK*`, `*COMMERCIALIZATION_READY*`, and `*QUICK_LAUNCH*` unless they are public documentation allowed by policy. + +## Checkout boundary + +All public buy/apply CTAs must point to: + + + +Paid product delivery belongs outside this public repository and outside GitHub Pages. + +## Claim boundary + +GoalOS does not modify AI models. It improves workflows around AI through instructions, prompts, memory, scorecards, proof records, evaluations, approvals, versions, monitoring, and rollback. + +The public site must not claim guaranteed ROI, income, productivity, compliance certification, safety guarantee, legal advice, financial advice, or autonomous deployment. diff --git a/docs/GOALOS_RECURSIVE_WORKFLOW_OS.md b/docs/GOALOS_RECURSIVE_WORKFLOW_OS.md new file mode 100644 index 00000000..d91a72c6 --- /dev/null +++ b/docs/GOALOS_RECURSIVE_WORKFLOW_OS.md @@ -0,0 +1,57 @@ +# GoalOS Recursive Workflow OS + +GoalOS is the recursive workflow operating layer for the RSI era. + +Public line: + +> A model can answer. An agent can act. An institution must prove. + +Commercial line: + +> ChatGPT gives you answers. GoalOS gives you workflows that get better every time they run. + +Enterprise line: + +> Enterprise RSI without model self-modification. + +## Safe boundary + +GoalOS does not modify AI models. It improves the workflow layer around AI: + +- workflow instructions; +- prompts; +- controlled memory; +- scorecards; +- proof records; +- evaluations; +- approvals; +- versions; +- monitoring; +- rollback. + +## Core loop + +Run → Score → Prove → Diagnose → Improve → Approve → Version → Monitor → Re-run. + +## Operating layers + +1. **Workflow Studio** — define the work, inputs, rules, checks, and owners. +2. **Execution Engine** — run the workflow against cases. +3. **Evaluation Engine** — score outputs against public-safe criteria and policy checks. +4. **Proof Room** — store proof records, evidence, audit events, and public-safe reports. +5. **Recursive Improvement Engine** — diagnose failures and propose workflow changes. +6. **Approval Gate** — require human approval and a rollback target before deployment. +7. **Versioning and Monitoring** — compare versions, deploy approved improvements, preserve rollback, and re-run. + +## Commercial ladder + +- $49 — GoalOS AI Efficiency Sprint Kit: build one reusable AI workflow. +- $199 — GoalOS RSI Lite: build one self-improving AI workflow. +- $997 — GoalOS Proof Room Lite / Department Pack: set up a lightweight department Proof Room. +- $2,500+ — GoalOS RSI Sprint Workshop: build the first self-improving workflow live. +- $9,500+ — GoalOS Proof Room Implementation Sprint: department RSI in 30 days. +- $49,000+ — GoalOS Enterprise RSI Pilot: pilot the Recursive Workflow OS for one enterprise workflow family. + +## Public software proof + +GoalOS Cloud MVP 0.2 demonstrates the loop as a static browser app at `/proof-gradient/app/goalos-cloud-mvp/`. It requires no API keys and makes no model self-modification claim. diff --git a/docs/GOALOS_REPO_AUDIT.md b/docs/GOALOS_REPO_AUDIT.md index 0d85c2be..9de4eae9 100644 --- a/docs/GOALOS_REPO_AUDIT.md +++ b/docs/GOALOS_REPO_AUDIT.md @@ -1,66 +1,204 @@ # GoalOS / Proof Gradient Repository Audit -Date: 2026-06-07 -Branch: `feature/goalos-public-site-mvp-unification` - -## Current site root - -- The active public GitHub Pages site root is `site/`. -- Root-level files such as `404.html`, `START_HERE.html`, and static assets exist, but this repair targets `site/` as the deployable Pages root. - -## Pages and structure found before repair - -- Public HTML pages under `site/` outside `site/_archive/`: 206. -- Key public areas found: `site/index.html`, `site/start-here/`, `site/products/`, `site/pricing/`, `site/services/`, `site/examples/`, `site/standards/`, `site/command-center/`, `site/enterprise/`, `site/platform/`, `site/workshop/`, and `site/app/goalos-cloud-mvp/`. -- Existing AEP standards content was present under `site/standards/AEP-001` through `site/standards/AEP-008`, including source markdown, generated index pages, schemas, examples, conformance materials, and implementation documentation. -- Existing software foundation areas include `.github/workflows/`, `scripts/`, `schemas/`, `tests/`, `proof_gradient/`, Docker files, examples, data files, and documentation. - -## Duplicate shell / navigation issue summary - -- The site had accumulated multiple historical GoalOS shell systems, including `goalos-complete-site`, `goalos-product-ladder`, `goalos-unified-site`, and `goalos-site-v2` assets. -- A pre-repair scan found 900 old GoalOS shell markers in public `site/**/*.html` files, including `GOALOS-COMPLETE-NAV`, `GOALOS-PRODUCT-LADDER-NAV`, and `GOALOS-UNIFIED-SHELL`. -- Many HTML files included injected canonical-looking CSS/JS plus older body-level nav/footer blocks, creating the stacked-topbar / multiple-site-shell public website problem. - -## Paid or private artifact scan - -- Paid-risk filename patterns found before repair included standards ZIP material under `site/standards/AEP-001/complete-package.zip` and release ZIP material outside the public site under `releases/`. -- Standards implementation files were detected by broad filename patterns because they include the word `implementation`; they are public standards documentation, not paid delivery kits. -- `scripts/check_no_paid_artifacts.py` now blocks ZIPs and paid buyer/workshop/implementation/enterprise bundle patterns from `site/`, with explicit public documentation/action-kit whitelisting only. - -## Files changed - -- Created / refreshed the canonical public shell assets: `site/assets/goalos-site-v2.css` and `site/assets/goalos-site-v2.js`. -- Canonicalized all 206 public `site/**/*.html` pages outside `site/_archive/` to exactly one canonical nav and one canonical footer. -- Refreshed core public pages: home, start, products, pricing, services, Cloud MVP, product ladder pages, workshop pages, implementation page, enterprise page, platform page, examples, standards, command center, site map, 404, sitemap, and robots. -- Preserved and unified AEP standard pages under `site/standards/AEP-001` through `site/standards/AEP-008`. -- Verified GoalOS Cloud MVP 0.2 files under `site/app/goalos-cloud-mvp/` and kept the browser/localStorage/no-secrets public software proof. -- Added validation/security scripts: `scripts/validate_goalos_site_v2.py` and `scripts/check_no_paid_artifacts.py`. -- Updated `scripts/check_site_links.py` to skip archived backup HTML when validating current public site links. -- Updated / added documentation: `README.md`, `docs/GOALOS_COMMERCIALIZATION_STATUS.md`, `docs/GOALOS_CLOUD_MVP_0_2.md`, `docs/GOALOS_PUBLIC_SITE_REPAIR.md`, and this audit. -- Added / updated GitHub Actions for shell repair, Cloud MVP build, and complete public-site refresh. - -## Files preserved - -- Existing standards, docs, examples, schemas, tests, package files, Docker files, workflows, data files, and previous public pages were preserved. -- Existing AEP standards content was not removed; public HTML index pages were shell-unified only. -- Paid buyer products were not added to the repository. Public buttons point to QUEBEC.AI shop. - -## Files backed up - -- All 206 pre-repair public HTML files were backed up under `site/_archive/before_unified_shell_v2_2026-06-07/` before canonicalization. - -## Tests run - -- `node site/app/goalos-cloud-mvp/tests/enterprise-core.test.mjs` — passed. -- `python scripts/validate_goalos_site_v2.py` — passed for 206 public HTML pages. -- `python scripts/check_no_paid_artifacts.py` — passed. -- `python scripts/validate_goalos_products.py` — passed. -- `python scripts/check_site_links.py` — passed. -- `pytest` — passed: 72 tests, 2 warnings. -- `make test` — passed: 56 unittest tests. - -## Known limitations - -- No browser screenshot was captured in this headless container because no Chromium/Chrome executable was available. Local HTML was validated by static checks and test suites. -- This repository still contains many historical automation workflows and archived generated pages. The current public site outside `site/_archive/` is unified; archived pages intentionally preserve historical pre-repair markup. -- `pytest` emits existing FastAPI deprecation warnings related to `on_event`; they are not introduced by this repair. +Date: 2026-06-07 +Branch: `feature/goalos-unified-site-cloud-mvp` + +## 1. Detected public site root + +- Detected public site root: `site/`. +- Root-level public files such as `404.html`, `START_HERE.html`, `styles.css`, and `app.js` still exist, but the GitHub Pages release workflows now detect `site/` first and fall back to `public/` only if needed. +- Current public HTML pages outside `site/_archive/`: 206. + +## 2. Existing GitHub Actions + +Existing workflow inventory before this repair included historical AEP, public-site refresh, proof-generation, tests, and Pages workflows. The key release workflows for this PR are: + +- `.github/workflows/repair-goalos-canonical-shell-v2.yml` +- `.github/workflows/build-goalos-cloud-mvp-v0-2.yml` +- `.github/workflows/refresh-complete-goalos-public-site.yml` + +Total `.github/workflows/*.yml` files detected: 122. + +## 3. Existing docs, schemas, tests, and package files + +- `docs/` files detected: 539. +- Top-level schema files detected: schemas/artifact.schema.json, schemas/patch.schema.json, schemas/proof.schema.json, schemas/proof_gradient_foundation.schema.json, schemas/release.schema.json, schemas/run_contract.schema.json, schemas/score.schema.json. +- Python tests detected under `tests/`: 16. +- Package / project files detected: `pyproject.toml`, `Makefile`, `Dockerfile`, `docker-compose.yml`, `alembic.ini`, `proof_gradient/`, `schemas/`, `tests/`, `tests_legacy_skillos/`. + +## 4. Existing Proof Gradient / AEP pages + +AEP public standards pages detected and preserved: + +- `site/standards/AEP-001/index.html` +- `site/standards/AEP-002/index.html` +- `site/standards/AEP-003/index.html` +- `site/standards/AEP-004/index.html` +- `site/standards/AEP-005/index.html` +- `site/standards/AEP-006/index.html` +- `site/standards/AEP-007/index.html` +- `site/standards/AEP-008/index.html` + +The AEP layer remains the public trust layer for proof, permission, rollback, public-safe reports, and Proof Rooms. + +## 5. Existing public site pages + +Representative public pages detected under `site/` include: + +- `site/404.html` +- `site/ai-efficiency-score/index.html` +- `site/app/goalos-cloud-mvp/index.html` +- `site/autonomous-market-readiness.html` +- `site/command-center/index.html` +- `site/docs/index.html` +- `site/enterprise-ops-proof.html` +- `site/enterprise/goalos-enterprise-rsi-pilot/index.html` +- `site/examples/build-one-reusable-ai-workflow/index.html` +- `site/examples/checkout-recovery/index.html` +- `site/examples/department-ai-correction-rollback/index.html` +- `site/examples/department-ai-permission-map/index.html` +- `site/examples/department-monthly-proof-report/index.html` +- `site/examples/department-proof-room-lite/index.html` +- `site/examples/department-public-safe-case-study/index.html` +- `site/examples/department-weekly-proof-review/index.html` +- `site/examples/feedback-to-product-update/index.html` +- `site/examples/idea-to-demand-engine/index.html` +- `site/examples/index.html` +- `site/examples/internal-approval-memo/index.html` +- `site/examples/lead-magnet-email-sequence/index.html` +- `site/examples/meeting-to-action-plan/index.html` +- `site/examples/monthly-workflow-vault-drop/index.html` +- `site/examples/offer-to-sales-page/index.html` +- `site/examples/order-bump-builder/index.html` +- `site/examples/partner-referral-kit/index.html` +- `site/examples/post-purchase-onboarding/index.html` +- `site/examples/proof-card-referral-loop/index.html` +- `site/examples/support-faq-triage/index.html` +- `site/examples/team-pack-upsell/index.html` +- `site/examples/team-sprint-facilitator/index.html` +- `site/examples/weekly-growth-review/index.html` +- `site/goalos/index.html` +- `site/home-before-checkout-recovery-example.html` +- `site/home-before-demand-engine-example.html` +- `site/home-before-department-ai-correction-rollback-example.html` +- `site/home-before-department-ai-permission-map-example.html` +- `site/home-before-department-monthly-proof-report-example.html` +- `site/home-before-department-proof-room-lite-example.html` +- `site/home-before-department-public-safe-case-study-example.html` +- `site/home-before-department-weekly-proof-review-example.html` +- `site/home-before-feedback-to-product-update-example.html` +- `site/home-before-internal-approval-memo-example.html` +- `site/home-before-lead-magnet-email-sequence-example.html` +- `site/home-before-meeting-workflow-example.html` +- `site/home-before-monthly-workflow-vault-drop-example.html` +- `site/home-before-offer-to-sales-page-example.html` +- `site/home-before-order-bump-builder-example.html` +- `site/home-before-partner-referral-kit-example.html` +- `site/home-before-post-purchase-onboarding-example.html` +- `site/home-before-proof-card-referral-loop-example.html` +- `site/home-before-reusable-workflow-example.html` +- `site/home-before-support-faq-triage-example.html` +- `site/home-before-team-pack-upsell-example.html` +- `site/home-before-team-sprint-facilitator-example.html` +- `site/home-before-weekly-growth-review-example.html` +- `site/implementation/goalos-proof-room-implementation-sprint/index.html` +- `site/index.html` +- `site/launch/index.html` +- `site/legacy-command-center.html` +- `site/platform/goalos-recursive-workflow-os/index.html` +- `site/pricing/index.html` +- `site/production.html` +- `site/products/ai-efficiency-sprint/index.html` +- `site/products/department-proof-room-lite/index.html` +- `site/products/enterprise-proof-room-agent-control-plane/index.html` +- `site/products/goalos-ai-efficiency-sprint-kit/index.html` +- `site/products/goalos-cloud-mvp/index.html` +- `site/products/goalos-enterprise-pilot/index.html` +- `site/products/goalos-enterprise-rsi-pilot/index.html` +- `site/products/goalos-proof-room-implementation-sprint/index.html` +- `site/products/goalos-proof-room-lite/index.html` +- `site/products/goalos-rsi-lite/index.html` +- `site/products/goalos-rsi-sprint-workshop/index.html` +- `site/products/index.html` +- `site/products/nation-state-ai-leverage-proof-infrastructure/index.html` +- `site/products/proof-page-template-pack/index.html` +- `site/products/sme-ai-adoption-sprint/index.html` +- `site/products/sovereign-country-ai-operating-system/index.html` +- `site/products/sovereign-empire-ai-operating-system/index.html` + +Additional generated proof pages, examples, product pages, standards files, Cloud MVP files, assets, manifests, and archived backups remain in place. + +## 6. Duplicate navigation / site-shell findings + +- The pre-repair site contained historical shell systems: `goalos-complete-site`, `goalos-product-ladder`, `goalos-unified-site`, and newer `goalos-site-v2` assets. +- Public pages had accumulated old markers such as `GOALOS-COMPLETE-NAV`, `GOALOS-COMPLETE-FOOTER`, `GOALOS-PRODUCT-LADDER-NAV`, `GOALOS-PRODUCT-LADDER-FOOTER`, `GOALOS-UNIFIED-SHELL`, `GOALOS-UNIFIED-FOOTER`, and duplicate Cloud MVP marker blocks. +- Current validation result: 0 public HTML pages outside `site/_archive/` contain old GoalOS shell markers. +- `scripts/validate_goalos_site_v2.py` enforces exactly one `GOALOS-CANONICAL-SHELL:START` marker and exactly one `GOALOS-CANONICAL-FOOTER:START` marker per public HTML page, while skipping archived historical backups. + +## 7. Paid / private artifact scan findings + +- A broad suspicious-pattern scan found public AEP markdown filenames containing `IMPLEMENTATION`; these are public standards implementation prompts, not paid delivery kits. +- A deployable standards ZIP previously existed at `site/standards/AEP-001/complete-package.zip`; it was removed from the public deploy tree because ZIPs are not allowed in the public GitHub Pages artifact. +- `scripts/check_no_paid_artifacts.py` blocks ZIPs and paid/private bundle filename patterns in `site/`, including buyer ZIPs, complete bundles, delivery kits, seller assets, workshop bundles, implementation bundles, enterprise pilot bundles, master packs, commercialization-ready packs, and quick-launch packs. + +## 8. Tests available + +Available validation and test commands: + +- `node site/app/goalos-cloud-mvp/tests/enterprise-core.test.mjs` +- `python scripts/validate_goalos_site_v2.py` +- `python scripts/check_no_paid_artifacts.py` +- `python scripts/validate_goalos_products.py` +- `python scripts/check_site_links.py` +- `pytest` +- `make test` + +No `package.json` was detected at repository root, so `npm test` is not available unless a future JavaScript package is added. The command `if [ -f package.json ]; then npm test; else echo 'npm test skipped: no package.json at repository root'; fi` was run and reported the missing package file. + +## 9. Files that should be preserved + +Preserve these foundations: + +- `proof_gradient/` +- `schemas/` +- `tests/` and `tests_legacy_skillos/` +- `docs/` public proof, architecture, AEP, and product strategy documentation +- `.github/workflows/` historical and release automation +- `site/standards/AEP-001` through `site/standards/AEP-008` +- `site/proofs/`, proof registry files, data files, badges, and public examples +- Docker, Makefile, pyproject, security, roadmap, and repository guide files + +## 10. Files that may be generated / rewritten + +Review-safe generated or regenerated files include: + +- `site/assets/goalos-site-v2.css` +- `site/assets/goalos-site-v2.js` +- public shell-wrapped `site/**/*.html` pages outside `site/_archive/` +- `site/goalos-site-repair-v2-report.json` +- `site/goalos-site-manifest-v2.json` +- `site/sitemap.xml` +- `site/robots.txt` +- `site/app/goalos-cloud-mvp/**` public static app proof files +- public docs beginning with `docs/GOALOS_*.md` +- release workflows created for GoalOS public-site validation and deploy + +## 11. Risks before merge + +- This repository has many historical automation workflows; future automated proof refreshes can create new HTML pages without the canonical shell unless they run `scripts/validate_goalos_site_v2.py` before deploy. +- Public site pages intentionally preserve historical proof content, some of which uses legacy SkillOS language. This PR unifies shell/styling and introduces GoalOS positioning without deleting useful proof content. +- `site/_archive/` intentionally contains old stacked shells for review backup; validators skip archive content. +- No paid buyer ZIPs, paid workshop bundles, implementation delivery kits, enterprise pilot delivery materials, or private delivery assets should be committed or deployed. +- Claim boundaries must remain enforced: no model self-modification, guaranteed ROI, guaranteed income/productivity, compliance certification, safety guarantee, legal advice, financial advice, or autonomous deployment claims. + +## Validation run notes for this PR + +- `python -m pip install -e '.[dev]'` was run before repository Python tests so `proof_gradient` and dev dependencies such as `httpx` were importable. +- `pytest` initially failed before installation because the package and `httpx` were not installed in the container; after installing declared dev dependencies, `pytest` passed with 72 tests and 3 existing warnings. +- `make test` passed with 56 unittest tests. +- `node site/app/goalos-cloud-mvp/tests/enterprise-core.test.mjs` passed. +- `python scripts/validate_goalos_site_v2.py` passed for 206 public HTML pages. +- `python scripts/check_no_paid_artifacts.py` passed. +- `python scripts/validate_goalos_products.py` passed. +- `python scripts/check_site_links.py` passed. +- GitHub Pages static artifact checks passed by validating `site/goalos-site-manifest-v2.json`, `site/goalos-site-repair-v2-report.json`, `site/.nojekyll`, and `site/index.html`. diff --git a/scripts/check_no_paid_artifacts.py b/scripts/check_no_paid_artifacts.py index 2b8725f1..88bdce2f 100755 --- a/scripts/check_no_paid_artifacts.py +++ b/scripts/check_no_paid_artifacts.py @@ -21,19 +21,31 @@ "*WORKSHOP*", "*IMPLEMENTATION*", "*ENTERPRISE_PILOT*", + "*BUYER_OFFICIAL*", + "*MASTER_PACK*", + "*COMMERCIALIZATION_READY*", + "*QUICK_LAUNCH*", ] -# Public documentation/action-kit exceptions. These are standards or docs, not paid buyer products. -WHITELIST = { - "standards/AEP-001/complete-package.zip", -} +# Public documentation/action-kit exceptions. Public markdown, HTML, schemas, JSON, YAML, +# JavaScript, CSS, and SVG are allowed; deployable ZIPs or private bundle names are not. +WHITELIST = set() WHITELIST_PREFIXES = ( - "standards/AEP-", # public standards implementation documentation and schemas "_archive/", # historical backup, not linked as paid product material ) +PUBLIC_DOC_PREFIXES = ( + "standards/AEP-", # public AEP standard markdown, examples, schemas, conformance docs +) +PUBLIC_DOC_EXTENSIONS = {".md", ".html", ".json", ".yaml", ".yml", ".txt", ".css", ".js", ".mjs", ".svg", ".xml"} -def is_whitelisted(rel: str) -> bool: - return rel in WHITELIST or any(rel.startswith(prefix) for prefix in WHITELIST_PREFIXES) +def is_whitelisted(rel: str, path: Path) -> bool: + if path.suffix.lower() == ".zip": + return False + if rel in WHITELIST or any(rel.startswith(prefix) for prefix in WHITELIST_PREFIXES): + return True + if path.suffix.lower() in PUBLIC_DOC_EXTENSIONS and any(rel.startswith(prefix) for prefix in PUBLIC_DOC_PREFIXES): + return True + return False def main() -> int: @@ -42,7 +54,7 @@ def main() -> int: if not path.is_file(): continue rel = path.relative_to(SITE).as_posix() - if is_whitelisted(rel): + if is_whitelisted(rel, path): continue name = path.name full = rel diff --git a/scripts/validate_goalos_site_v2.py b/scripts/validate_goalos_site_v2.py index 03e9a43c..7d4a2ce5 100755 --- a/scripts/validate_goalos_site_v2.py +++ b/scripts/validate_goalos_site_v2.py @@ -18,6 +18,7 @@ DUPLICATE_MVP = "GOALOS-CLOUD-MVP homepage duplicate" PG_MARKUP = ("pg-", "data-pg-search", "data-pg-card") LINK_RE = re.compile(r"(?:href|src)=[\"']([^\"']+)[\"']", re.IGNORECASE) +EXTRA_TOPBAR_RE = re.compile(r"<(?:nav|header)\b|class=[\"'][^\"']*(?:topbar|navbar|navlinks|shell)[^\"']*[\"']", re.IGNORECASE) def is_public_html(path: Path) -> bool: @@ -54,6 +55,12 @@ def main() -> int: failures.append(f"{rel}: expected exactly one canonical footer marker, found {text.count(CANONICAL_FOOTER)}") if OLD_MARKERS.search(text): failures.append(f"{rel}: old GoalOS shell marker remains") + shell_end = text.find("GOALOS-CANONICAL-SHELL:END") + main_start = text.lower().find(" + + +
+ +
+ + + + + + + +
diff --git a/site/goalos-site-repair-v2-report.json b/site/goalos-site-repair-v2-report.json index 6ae9eb46..11b0f4fe 100644 --- a/site/goalos-site-repair-v2-report.json +++ b/site/goalos-site-repair-v2-report.json @@ -15,6 +15,6 @@ "GOALOS-COMPLETE-*", "GOALOS-PRODUCT-LADDER-*", "GOALOS-UNIFIED-*", - "GOALOS-CLOUD-MVP duplicate markers" + "legacy Cloud MVP duplicate markers" ] } diff --git a/site/rsi-ai-first-blockchain-capital-machine-proof.html b/site/rsi-ai-first-blockchain-capital-machine-proof.html index 0fa78880..86f48361 100644 --- a/site/rsi-ai-first-blockchain-capital-machine-proof.html +++ b/site/rsi-ai-first-blockchain-capital-machine-proof.html @@ -11,10 +11,31 @@ body:before{content:"";position:fixed;inset:0;background-image:linear-gradient(rgba(255,255,255,.045) 1px,transparent 1px),linear-gradient(90deg,rgba(255,255,255,.045) 1px,transparent 1px);background-size:34px 34px;mask-image:linear-gradient(#000,transparent 85%);pointer-events:none} a{color:var(--cyan);text-decoration:none}.nav{position:sticky;top:0;z-index:10;display:flex;align-items:center;justify-content:space-between;padding:14px 22px;background:#061420e8;backdrop-filter:blur(18px);border-bottom:1px solid var(--line)}.brand{font-weight:950;color:var(--cyan);letter-spacing:-.04em}.links{display:flex;gap:18px;font-size:14px;font-weight:800}.wrap{max-width:1240px;margin:auto;padding:42px 22px 80px}.hero{display:grid;grid-template-columns:1.05fr .95fr;gap:28px;align-items:stretch;margin-top:18px}.panel{background:linear-gradient(145deg,var(--panel2),rgba(255,255,255,.055));border:1px solid var(--line);border-radius:28px;box-shadow:0 28px 90px rgba(0,0,0,.25);backdrop-filter:blur(10px)}.heroText{padding:38px}.kicker{color:var(--cyan);font-size:13px;font-weight:950;letter-spacing:.34em;text-transform:uppercase}h1{margin:12px 0 18px;font-size:clamp(45px,7vw,92px);line-height:.88;letter-spacing:-.08em}h2{font-size:clamp(32px,5vw,60px);line-height:.92;letter-spacing:-.065em;margin:50px 0 20px}h3{margin:0 0 10px;font-size:22px;letter-spacing:-.03em}.lede{font-size:19px;color:#d9edf7;max-width:820px}.proofbox{padding:28px;display:flex;flex-direction:column;justify-content:space-between}.pass{display:inline-block;width:max-content;border-radius:999px;padding:8px 14px;background:rgba(116,255,180,.18);color:var(--green);font-size:12px;letter-spacing:.16em;text-transform:uppercase;font-weight:950}.mega{font-size:34px;line-height:1.05;font-weight:950;letter-spacing:-.06em;margin:14px 0;color:#fff}.safe{font-size:15px;color:var(--muted)}.metrics{display:grid;grid-template-columns:repeat(4,1fr);gap:16px;margin:22px 0 36px}.metric{padding:22px;border-radius:20px;background:var(--panel);border:1px solid var(--line)}.metric strong{display:block;color:var(--green);font-size:32px;line-height:1;font-weight:950;letter-spacing:-.06em}.metric span{color:var(--muted);font-size:14px}.chain{font-size:32px;font-weight:950;line-height:1.12;letter-spacing:-.055em;padding:28px}.chain small{display:block;color:var(--cyan);font-size:12px;letter-spacing:.22em;text-transform:uppercase;margin-bottom:12px}.grid2{display:grid;grid-template-columns:1fr 1fr;gap:20px}.chart{padding:22px;min-height:395px}canvas{width:100%;height:285px;display:block;background:rgba(0,0,0,.13);border:1px solid var(--line);border-radius:18px}.quote{padding:30px;margin-top:22px;border-left:4px solid var(--gold)}.quote p{font-size:24px;line-height:1.2;font-weight:800;letter-spacing:-.035em;margin:0 0 14px}.cta{display:flex;gap:12px;flex-wrap:wrap;margin-top:22px}.btn{display:inline-flex;align-items:center;justify-content:center;border-radius:999px;padding:13px 18px;background:var(--cyan);color:#071221;font-weight:950}.btn.secondary{background:transparent;color:#fff;border:1px solid var(--line)}table{width:100%;border-collapse:collapse;overflow:hidden;border-radius:16px;background:rgba(255,255,255,.065)}th,td{padding:13px 14px;border-bottom:1px solid var(--line);text-align:left;font-size:14px}th{color:#aeefff;text-transform:uppercase;font-size:11px;letter-spacing:.16em}.gates{display:grid;grid-template-columns:repeat(3,1fr);gap:10px;padding:0;list-style:none}.gates li{display:flex;justify-content:space-between;gap:12px;padding:13px 14px;background:rgba(255,255,255,.07);border:1px solid var(--line);border-radius:14px}.gates b{color:var(--green)}.receipts{display:grid;grid-template-columns:repeat(3,1fr);gap:12px}.receipt{padding:15px;border:1px solid var(--line);border-radius:16px;background:rgba(255,255,255,.06)}.receipt span{display:block;color:var(--cyan);font-size:12px;font-weight:900}.receipt b{display:block;margin:5px 0 8px}.receipt p{margin:4px 0;color:var(--muted);font-size:12px}.receipt strong{color:var(--green)}.footer{color:var(--muted);padding:40px 0}@media(max-width:900px){.hero,.grid2,.metrics,.receipts{grid-template-columns:1fr}h1{font-size:52px}.links{display:none}} + + - -
+ + +
+ +
+ + +
Montreal.AI / SkillOS / AI-first blockchain RSI
@@ -56,4 +77,12 @@

AI-First Blockchain Capital Machine.

function drawCurve(){const c=document.getElementById('curve'),x=c.getContext('2d'),dpr=devicePixelRatio||1,w=c.clientWidth*dpr,h=c.clientHeight*dpr;c.width=w;c.height=h;x.scale(dpr,dpr);const W=c.clientWidth,H=c.clientHeight;x.clearRect(0,0,W,H);let data=DATA.rsi_release_curve.map(r=>r.holdout_shadow_capture);let min=Math.min(...data)-.006,max=Math.max(...data)+.006;x.strokeStyle='rgba(255,255,255,.16)';x.lineWidth=1;for(let i=0;i<6;i++){let y=24+i*(H-48)/5;x.beginPath();x.moveTo(28,y);x.lineTo(W-18,y);x.stroke();}x.fillStyle='rgba(116,255,180,.14)';x.beginPath();data.forEach((v,i)=>{let px=32+i*(W-64)/(data.length-1),py=H-28-(v-min)/(max-min)*(H-56);if(i===0)x.moveTo(px,H-28);x.lineTo(px,py);});x.lineTo(W-32,H-28);x.closePath();x.fill();x.strokeStyle='#74ffb4';x.lineWidth=3;x.beginPath();data.forEach((v,i)=>{let px=32+i*(W-64)/(data.length-1),py=H-28-(v-min)/(max-min)*(H-56);if(i===0)x.moveTo(px,py);else x.lineTo(px,py);});x.stroke();data.forEach((v,i)=>{let px=32+i*(W-64)/(data.length-1),py=H-28-(v-min)/(max-min)*(H-56);x.fillStyle=DATA.rsi_release_curve[i].accepted?'#74ffb4':'#ffd66b';x.beginPath();x.arc(px,py,4,0,Math.PI*2);x.fill();});} function drawRadar(){const c=document.getElementById('radar'),x=c.getContext('2d'),dpr=devicePixelRatio||1,w=c.clientWidth*dpr,h=c.clientHeight*dpr;c.width=w;c.height=h;x.scale(dpr,dpr);const W=c.clientWidth,H=c.clientHeight,cx=W/2,cy=H/2+10,R=Math.min(W,H)*.34;const labels=['Capital','Blockspace','Security','MEV','Liquidity','Bridge/oracle','Governance','Settlement','Risk courts','Reinvestment'];const vals=[.98,.94,.97,.93,.90,.95,.88,.96,.99,.97];x.clearRect(0,0,W,H);x.strokeStyle='rgba(255,255,255,.14)';for(let ring=1;ring<=5;ring++){x.beginPath();labels.forEach((_,i)=>{let a=-Math.PI/2+i*2*Math.PI/labels.length,rr=R*ring/5,px=cx+Math.cos(a)*rr,py=cy+Math.sin(a)*rr;if(i===0)x.moveTo(px,py);else x.lineTo(px,py);});x.closePath();x.stroke();}x.strokeStyle='rgba(131,247,255,.35)';labels.forEach((lab,i)=>{let a=-Math.PI/2+i*2*Math.PI/labels.length;x.beginPath();x.moveTo(cx,cy);x.lineTo(cx+Math.cos(a)*R,cy+Math.sin(a)*R);x.stroke();x.fillStyle='#dffbff';x.font='11px Inter,Arial';x.textAlign='center';x.fillText(lab,cx+Math.cos(a)*(R+38),cy+Math.sin(a)*(R+28));});x.fillStyle='rgba(131,247,255,.20)';x.strokeStyle='#83f7ff';x.lineWidth=3;x.beginPath();vals.forEach((v,i)=>{let a=-Math.PI/2+i*2*Math.PI/vals.length,px=cx+Math.cos(a)*R*v,py=cy+Math.sin(a)*R*v;if(i===0)x.moveTo(px,py);else x.lineTo(px,py);});x.closePath();x.fill();x.stroke();} window.addEventListener('resize',()=>{drawCurve();drawRadar();});drawCurve();drawRadar(); + + + \ No newline at end of file diff --git a/site/rsi-ai-first-governance-capital-engine-proof.html b/site/rsi-ai-first-governance-capital-engine-proof.html index 4e373e6a..6ee318f5 100644 --- a/site/rsi-ai-first-governance-capital-engine-proof.html +++ b/site/rsi-ai-first-governance-capital-engine-proof.html @@ -7,10 +7,31 @@ *{box-sizing:border-box} body{margin:0;background:radial-gradient(circle at 20% 10%,rgba(21,161,183,.34),transparent 32%),linear-gradient(135deg,#061220,#112746 50%,#302c6b);color:var(--text);font-family:Inter,ui-sans-serif,system-ui,-apple-system,Segoe UI,Arial,sans-serif;} body:before{content:"";position:fixed;inset:0;background-image:linear-gradient(rgba(255,255,255,.045) 1px,transparent 1px),linear-gradient(90deg,rgba(255,255,255,.045) 1px,transparent 1px);background-size:34px 34px;mask-image:linear-gradient(to bottom,black,transparent 95%);pointer-events:none} a{color:var(--cyan);text-decoration:none;font-weight:800} nav{position:sticky;top:0;z-index:3;backdrop-filter:blur(18px);background:#061220e8;border-bottom:1px solid var(--line);height:58px;display:flex;align-items:center;justify-content:space-between;padding:0 22px} .brand{color:var(--cyan);font-weight:950} .navlinks{display:flex;gap:18px;font-size:14px} main{max-width:1200px;margin:auto;padding:64px 22px 90px} .hero{display:grid;grid-template-columns:1.15fr .85fr;gap:28px;align-items:center} .eyebrow{color:var(--cyan);font-size:12px;letter-spacing:.27em;text-transform:uppercase;font-weight:950} h1{font-size:clamp(58px,8.5vw,122px);line-height:.84;letter-spacing:-.085em;margin:14px 0 24px} h2{font-size:clamp(34px,5vw,72px);line-height:.9;letter-spacing:-.07em;margin:18px 0} h3{font-size:22px;margin:0 0 12px} p{color:var(--muted);font-size:17px;line-height:1.55} .panel{background:linear-gradient(145deg,rgba(255,255,255,.115),rgba(255,255,255,.055));border:1px solid var(--line);border-radius:28px;padding:28px;box-shadow:0 30px 90px rgba(0,0,0,.28)} .metric-grid{display:grid;grid-template-columns:repeat(4,1fr);gap:16px;margin:34px 0} .metric b{display:block;color:var(--green);font-size:31px;letter-spacing:-.04em} .metric span{color:var(--muted)} .grid2{display:grid;grid-template-columns:1fr 1fr;gap:20px} .grid3{display:grid;grid-template-columns:repeat(3,1fr);gap:18px} .pill{display:inline-flex;border-radius:999px;padding:8px 12px;background:rgba(121,255,208,.18);border:1px solid rgba(121,255,208,.35);color:var(--green);font-size:12px;font-weight:950;letter-spacing:.12em;text-transform:uppercase} .button{display:inline-block;border-radius:999px;padding:13px 18px;background:var(--cyan);color:#04121e;font-weight:950;margin:6px 8px 6px 0} .button.secondary{background:transparent;color:var(--text);border:1px solid var(--line)} .chart{width:100%;height:auto} table{width:100%;border-collapse:collapse;font-size:14px;color:#dff8ff} th,td{border-bottom:1px solid rgba(255,255,255,.12);padding:12px;text-align:left;vertical-align:top} th{font-size:11px;text-transform:uppercase;letter-spacing:.18em;color:#a9c5d7} .quote{font-size:24px;line-height:1.35;color:#eefbff} .note{color:#ffd887} .small{font-size:13px;color:#a8c2d4} @media(max-width:920px){.hero,.grid2,.grid3,.metric-grid{grid-template-columns:1fr} h1{font-size:56px} .navlinks{display:none}} - + + + - -
+ + +
+ +
+ + +
Montreal.AI / SkillOS / AI-first governance RSI

Governance Capital Engine.

Autonomous proof that a large specialist-agent governance lattice can recursively improve how an AI-first organization turns evidence, decision rights, incentives, capital, compute, energy, policy, execution, auditing, risk courts, and reinvestment into compounding institutional capability.

This is a deterministic public benchmark of an autonomous governance coordination mechanism. It is not a claim of achieved superintelligence, live revenue, legal advice, investment advice, policy advice, or Kardashev Type II civilization.

Run proof on GitHubProof registryJSON receipt
PROOF PASSED

524,288 agents. 16,384 roles. 16 accepted RSI releases. 3,072 locked holdout cases.

A public, deterministic benchmark with train / validation / locked-holdout splits, negative controls, bootstrap confidence intervals, and no human-review gate.

@@ -38,4 +59,12 @@

Locked holdout decision receipts.

CaseGovernance regimeSelected architectureCaptureValue at stake
locked_holdout-0000AI strategy capital allocationrecursive governance capital engine100.00%$16.20B
locked_holdout-0001autonomous agent permissioningrecursive governance capital engine100.00%$14.66B
locked_holdout-0002board-level model risk governancerecursive governance capital engine100.00%$19.00B
locked_holdout-0003AI product safety launchrecursive governance capital engine100.00%$6.95B
locked_holdout-0004frontier compute procurementrecursive governance capital engine100.00%$17.43B
locked_holdout-0005enterprise data-rights governancerecursive governance capital engine100.00%$19.76B
locked_holdout-0006cyber incident commandrecursive governance capital engine100.00%$14.31B
locked_holdout-0007M&A integration decisionrecursive governance capital engine98.91%$13.73B
locked_holdout-0008supply-chain shock responserecursive governance capital engine100.00%$16.80B
locked_holdout-0009regulatory change responserecursive governance capital engine100.00%$13.41B
locked_holdout-0010talent and incentive redesignrecursive governance capital engine99.41%$16.33B
locked_holdout-0011pricing and packaging governancerecursive governance capital engine100.00%$15.55B

Receipts and reproducibility.

Run the GitHub ActionOpen JSON receiptOpen reportOpen badge

Fingerprint: cb226bbfc2e90106b22d1164808d0596fdf10f80771f1fa41ebc687a8bb2eca8

-
\ No newline at end of file +
+ + + \ No newline at end of file diff --git a/site/rsi-proof-forge-meta-coordination-proof.html b/site/rsi-proof-forge-meta-coordination-proof.html index 3d75574a..bbff24a0 100644 --- a/site/rsi-proof-forge-meta-coordination-proof.html +++ b/site/rsi-proof-forge-meta-coordination-proof.html @@ -18,10 +18,31 @@ .cta{display:flex;gap:12px;flex-wrap:wrap;margin-top:22px} .btn{display:inline-flex;align-items:center;justify-content:center;text-decoration:none;border-radius:999px;padding:13px 18px;font-weight:900;background:var(--cyan);color:#04101d} .btn.secondary{background:transparent;color:#fff;border:1px solid var(--line)} .mono{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;color:#9dfcff} footer{padding:40px 24px;color:#9fb6d8;text-align:center;border-top:1px solid var(--line)} @media(max-width:900px){.hero,.grid2,.metrics{grid-template-columns:1fr} nav{align-items:flex-start;flex-direction:column} h1{font-size:54px} ul.gates{grid-template-columns:1fr}} + + - -
+ + +
+ +
+ + +
Montreal.AI / SkillOS / RSI meta-proof

Proof Forge Meta-Coordination.

Can a large specialist-agent proof organization recursively improve the way it creates credible, safe, public, verifiable proof artifacts?

Proof passed

4,194,304 agents. 131,072 roles. 256 verifier courts.

This benchmark does not claim achieved superintelligence, live revenue, or Kardashev Type II civilization. It makes the coordination mechanism underneath that value thesis public, repeatable, and falsifiable.

c6ffe8ca95062d9d949391e31af0d9ea…

@@ -56,5 +77,13 @@

Negative controls and ablations

AblationCaptureCredibilitySkillOS delta
no verifier courts64.96%74.88%$2.32T
no red team79.77%90.41%$1.32T
no rsi reinvestment83.55%99.46%$1.06T
no multi agent market83.29%93.79%$1.08T
no holdout83.81%84.88%$1.04T

Verifier gates

  • PASSlocked_holdout_value_capture99.097% >= 90.000%
  • PASSproof_credibility99.946% >= 93.000%
  • PASSevidence_quality97.059% >= 90.000%
  • PASSlarge_agent_coordination93.218% >= 90.000%
  • PASSrecursive_improvement95.068%; selected v20
  • PASSfrontier_correct100.000% >= 98.000%
  • PASSrisk_breach0.000% <= 0.250%
  • PASSunauthorized_action0.000% == 0.000%
  • PASSbeats_best_baseline$6.74T > $5.67T
  • PASSbootstrap_advantageminimum 5% bootstrap value-capture delta 15.519% > 3.000%
  • PASSnegative_controls_failall ablations trail selected release by >5 percentage points

Run / regenerate

Open the GitHub Action and run the workflow. It regenerates the benchmark receipt, Markdown report, badge, proof webpage, proof registry, sitemap, and SkillOS command center without human review.

-
SkillOS autonomous RSI proof forge · benchmark-only public proof · no financial, legal, policy, medical, or investment advice
+
+ + + \ No newline at end of file diff --git a/site/standards/AEP-001/complete-package.zip b/site/standards/AEP-001/complete-package.zip deleted file mode 100644 index c9cee356..00000000 Binary files a/site/standards/AEP-001/complete-package.zip and /dev/null differ