æ:// AEQR
PRIVATE CLIENT AI
ADDRESS ≠ PERMISSION
◈
æQR
RESOURCE ADDRESSING · VERIFICATION · AUDIT
ONE DISCOVERY LAYER ACROSS MANY RESOURCES — WITHOUT MAKING EVERY RESOURCE PUBLIC
MIT · OPEN SOURCEWARE
269 RESOURCES · 8 CATEGORIES
30 TESTS PASS
2 REAL DECODERS
DEFAULT DENY
A QR is an address into the constellation — not permission to access or execute.
Integrity is proven by decoding the artifact back. Authority stays with the human.
SCAN→
RESOLVE→
VERIFY→
REQUEST AUTHORITY→
ACT
◈ WHAT IT IS · WHAT IT IS NOTEVIDENCE ≠ AUTHORITY
It is
A registry of stable resource IDs → canonical routes + scope. A produce-and-verify gate with two real decoders. A deterministic audit → snapshot → compare → repair queue. An explicit, default-deny authority model.
It is not
A permission system. A renderer that trusts its own bytes. A claim that a fix landed. An implicit grant from scanning. A category placeholder pretending to be resolution.
◈ THE PIECESae/
| Module | Role |
|---|
| envelope.py | typed transport ae:1:<type>:<b64url(json)> — 8 types |
| supervision.py | SPEC → RENDER → SUPERVISE → (receipt | refuse); 9 measurable checks; cv2 AND pyzbar must agree |
| registry.py | stable IDs → canonical routes + scope (public / local / private / hybrid) |
| orchard.py | audit → snapshot → compare → repair queue; planning ≠ verification |
| authority.py | scanning never grants execution; gated actions require a capability |
| cli.py | one command surface |
◈ THE TWO LOAD-BEARING RULESCANON
1
A QR that has not been decoded back is not a QR — it is a picture of one. The gate decodes through two independent decoders. The rune magic æ: encodes fine and fails on scan; a single-decoder check passes exactly the artifact that fails in the field. Transport magic is ASCII (ae:); the æ identity lives in the payload.
2
Scanning never grants execution. resolve, read, and verify are open. publish, execute, and merge require an explicit, scoped capability. Planning a repair ("ready") is not proving it ("verified").
◈ USECLI
# the registry — 269 resources, 8 categories
aeqr registry --category threejs_scenes
aeqr resolve html-surfaces-teologia-index
# produce a QR only if it decodes back through two real decoders
python -m ae.supervision produce secret '{"name":"K"}' --out k.png
python -m ae.supervision selftest # proves it REFUSES the rune class
# audit a tree of HTML for inline-script syntax failures
aeqr orchard audit C:/æ/github-pages
aeqr orchard queue C:/æ/github-pages # findings → ordered repair tasks
# authority is default-deny for effectful actions
aeqr authority publish --id teologia-index # denied
aeqr authority read --id teologia-index # allowed
◈ REGISTRY · SCOPE MODEL269 / 8
| Category | Scope | Route resolves to |
|---|
| html_surfaces (183) | public | https://myaelmendez.github.io/… |
| threejs_scenes (8) | public | https://myaelmendez.github.io/teologia/… |
| videos (24) | public | https://myaelmendez.github.io/… |
| python_agents (31) | local | ae://local/… |
| configs (6) · logs (3) | local | ae://local/… |
| widget (9) | hybrid | https://myaelmendez.github.io/widget/… |
| kanban (5) | local | ae://local/… |
A registry entry is an address and a scope, never a grant. Public scope ⇒ HTTPS route. Local scope ⇒ ae://local/ scheme. Verified is false until a real check proves the route resolves.
◈ SOURCE OF TRUTHREPO
This surface
Published artifacts and evidence. github.io is the surface — not the runtime or the custody layer. Private execution and secrets stay local.