Status surface
—
Sovereign-first inference routing
Route to your own metal first. Fall back honestly.
The SZL router prefers SZL-owned GPUs, then free hosted tiers, then paid fallback — and stamps every response with honest provenance so you always know where it ran.
sovereign = own-metal only
no free-energy claims
Λ = Conjecture 1
SLSA L1 honest
Public evidence contract
Reachability without overclaiming
Reading the public snapshot contracts…
Configured aliases
—
Sovereign configured
—
Default model
—
Logical models exposed
loading…
The routing order
Sovereign-first, by design
The router walks tiers in strict preference order. It only leaves your own metal when it has to — and it tells you when it did.
①
Own metal — sovereign
SZL-owned GPUs (self-hosted, e.g. the RTX node + box). First choice. sovereign = true only here.
energy: self-hosted
②
Free hosted tiers
Third-party hosted inference. Used when own metal is unavailable. Public evidence exposes only the provider class and an opaque ID. sovereign = false.
energy: grid
③
Paid fallback
Paid hosted models (e.g. Kimi K2) as a strong last resort. Only reached when both tiers above fail. sovereign = false.
energy: grid
Honest provenance
The x_szl_provenance stamp
Every routed response carries a provenance object so you can audit where it actually ran. No marketing gloss — the fields say exactly what happened.
served_by
A stable opaque provider ID such as provider-sovereign-01. Public receipts identify the route class without exposing private names or network topology.
sovereign
true only when served on SZL-owned metal. Hosted tiers are always false — never overstated.
energy_source
self-hosted for own metal, grid for hosted providers. A plain descriptor — no joule or free-energy claims.
tier
Which preference rung answered: sovereign, free-grid, or paid-grid. Shows exactly how far down the ladder the request fell.
Provider fabric
Where requests can land
Configuration inventory, ordered by tier. Sovereign providers are SZL-owned; everything else is an explicitly marked hosted fallback. Reachability is shown only when measured.
What the router guarantees
Promises you can check, not take on faith
The router internals stay private, but its guarantees are public and
auditable. Each promise below is enforceable by the honest x_szl_provenance stamp
on every routed response — and any signed routing receipt can be re-checked live in the box at
the foot of this section.
G1 · sovereign-first
Own metal is tried first, every time. The router only leaves your hardware
when it must — and the tier field records exactly how far down the ladder a
request fell.
G2 · sovereign is never overstated
sovereign: true appears only for SZL-owned metal. Every hosted
free/paid provider is stamped sovereign: false. We never claim hosted compute
as ours.
G3 · no free-energy
energy_source is a plain descriptor (self-hosted / grid)
— never a joule count or zero-cost-energy assertion. Λ remains Conjecture 1.
G4 · honest degrade
When a status endpoint is unreachable this page shows a clearly-labeled SNAPSHOT,
never fabricated data and never a false “all green.” The /router/* endpoints have
no CORS, so a browser sees the honest snapshot here by design.
G5 · honest cost, on the receipt
Since 2026-07-09 every receipt carries a per-call cost block: paid tiers show a
labelled estimate (estimated: true, with its price-table basis and
token counts — the same figure the append-only spend ledger records); free and sovereign tiers
show $0.00 vendor charge with an explicit basis. Never a fabricated energy number.
G6 · the observer frame is stated
Each receipt records the frame it was issued under — endpoint, auth mode, requested model. The verdict is honest relative to who asked and how they were authenticated, never a claim about any other vantage point.
G7 · every skip is on the record
A recently-failed upstream cools down briefly, but it is skipped only while a warm
fallback remains — and the skip lands in the attempts trail as an honest
cooldown-skip entry. As the last resort it is always tried: trying loudly beats
refusing silently.
Ask the fabric — verify a routing receipt
Re-check a signed receipt yourself
Paste a routing / DSSE / in-toto receipt (or load the sample) and submit it to the live a11oy verify endpoint. The verdict is the fabric's real, honest output: unsigned receipts return STRUCTURAL-ONLY (advisory amber, never a false green). The endpoint verifies receipts / DSSE / in-toto statements, not arbitrary text — and never exposes any router internals or keys.
This is a public view only
The szl-router codebase and its routing logic stay private. Nothing here exposes provider keys, weights, scoring heuristics, or internal source — only the public status endpoints and the sovereign-first concept.
Doctrine v11 — the honest line
Sovereign = own-metal only. sovereign: true appears only for SZL-owned hardware. Hosted free and paid providers are always sovereign: false.
No free-energy claims. energy_source is a plain descriptor (self-hosted / grid), never a joule or zero-cost-energy assertion. Λ = Conjecture 1. Builds are SLSA Level 1, honestly stated.
Honest evidence. A reachable public contract proves only that this status surface is reachable. Provider and model reachability remain NOT_MEASURED until a bounded probe emits a public receipt.