Air-gap · transfer · 2.32

Hashed operator packs. Not a letter.

Catalog 2.32.0. Import in the workspace under Updates. SHA-256 is a digest. This is not a notified-body seal. The webpage zip is not the app zip.

Workspace surfaces

Full, Lite, or CLI. Asked once. Switch anytime.

First visit to the workspace opens an honesty gate. The header switcher stays on. ?mode=full|lite|cli and ?lite=1 override. ?gate=1 re-opens the question. Analog kernels never start a GPU. Isolation stays probed.

Every analog canvas

Full

Talk Route, twenty desks, 37 tools. VRAM, cluster, vision, and latent are calculators. This host never starts a GPU.

Talk → ticket → desk. Isolation lamp is probed, never unknown.
VRAM is weights = P × bytes / TP and KV = 2·L·n_kv·d_h·S·B·bytes. Device: none.
Vision is Sobel on Canvas 2D. Cluster is Little’s law, labeled simulated.

Same kernels. No GPU-looking nav.

Lite

Hides cluster, VRAM, vision, and latent from default nav. Never lazy-starts those canvases. Deep-link is calculator-only, not a 404.

Always on: PromptDiff, chunk, Jaccard, PSI, redact, inject, eval, align.
Kubernetes / video / trading labs leave the default nav. They are still a URL.
Missing hosted keys never fail analog closed. No second Vite app.

Operator verbs

CLI

Same kernels as the canvases. For people who think in commands. Air-gap: node scripts/engos-analog.mjs

Verbs: selftest, jaccard, chunk, vram, psi, inject, redact, embed, sit, analog, report, halt, escalate, close, queue, codes, lite.
sit / report / close share the HITL mesh with Talk Route. One inbox.
Not a second product. Not @engos/omniplane. That name stays dead.

Lite default-nav hides cluster, vram, vision, latent. Deep-link is calculator-only, not a 404. CLI lives in the app zip as scripts/engos-analog.mjs next to kernels.ts and vram.ts.

Operator transfer packs

Air-gap is an option, not a claimed default deploy. Enterprise rooms that cannot call home take a hashed JSON transfer pack. Pack Adapter drops unknown fields. How packs work.

Not in the manifest yet.

Webpage zip (not the app)

The sales-host source zip restores this website. It is not a buyer SKU and it is not the operator pack.

Not in the manifest yet.

What a buyer downloads. The operator transfer pack. Import via workspace → Updates. Schema engos.upgrade.pack/v1. The analog CLI and shared kernels travel in that zip.
What a buyer does not download as a SKU. The sales-host source zip is how we restore this website. Listed here so the two zips cannot be confused.
Pack is not a letter. Art. 50 is an operational desk. A SHA-256 digest is not a notified-body seal. Not WORM.

HITL escalate codes

Analog mesh (plane A) is a ticket state machine. C0–C2 job park (plane B) is a different object with a 24-hour clock. Same inbox. Do not merge them. Escalate only when analog kernels cannot close.

Code	When
`REPORT_OK`	Analog closed. 12-line report up. No waiver needed.
`ESCALATE_BUDGET`	spend.halt ceiling. Only the operator raises it.
`ESCALATE_EVIDENCE`	Fluent-without-source, caption-without-goldens, or missing attach.
`ESCALATE_ISOLATION`	Certified-green requested. Security vetoes. Unprobed stays unlabeled.
`ESCALATE_AUTHOR_GRADER`	Author sat their own gate. HOLD. Second family must sit.
`ESCALATE_POLICY`	Inject hit, PII, or secret in a trace.
`ESCALATE_CONTRACT`	Handoff missing required evidence.
`ESCALATE_LOOP`	Cycle bound exceeded.

VRAM allocator

Arithmetic only. Device none. This host does not start CUDA.

Weights. P × bytes / TP
KV cache. 2 · L · n_kv · d_h · S · B · bytes
Identity. Llama 3.1 8B FP16 GQA, seq=1, batch=1 → 2 × 32 × 8 × 128 × 2 = 131072 bytes per token.
Just run. Llama 3.1 8B FP16, seq 4096, batch 1 → 16.06 GB weights + 536.9 MB KV + 2.41 GB overhead = 19.01 GB. Device: none.
MLA. DeepSeek-V3 is labeled MLA. The UI will not invent a GQA cache for it.

Talk to a human about air-gap · posted 2026-09-04 · ARR_CLAIMED=false · changelog · workspace gate