▲ intrikata-stack

Intrikata Stack guide · package 1.7.1

Docs surface map

Human-readable guide · view canonical Markdown · updated 2026-08-26

docs.intrikata.com — complete site surface documentation

Canonical host: https://docs.intrikata.com Cloudflare Pages alias: https://intrikata-stack.pages.dev Package: see /release.json (skills: megapraxis + metamegapraxis + praxis-local-realize + megametapraxis) Production deploy: npx wrangler pages deploy public --project-name=intrikata-stack --branch=master Statement traces (closed M/G/S/MGS · ASEC · AWITS): 2 · cert 3 AWITS v3.2 live authority: 4 · cert 5 · probes 6 (published 7/30/90 public-proxy envelopes; operational occurrence not-occurred under 65/70; 37/37 workstream probes; definitional occurrence and distance-to-limit UNDECIDABLE) Provenance boundary: previous production source ffb3d8f · historical 1.6.0 evidence in demo/mgs-convergence.json · current package 1.7.0 License: MIT

This document is the provable surface map of the public site: every major URL class, what it is for, which M/G/S/MGS layer it serves, and how it was verified live. It complements (does not replace) the technical white paper.


1. What the site is

intrikata-stack materializes MegaPraxis + MetaMegaPraxis as a public Cloudflare Pages project:

ConcernOn this siteNot on this site (by design)
Install skillszip, bare git, install.md, onboard playbooks
Explain architectureHome / System / whitepaper / llms.txt
Live audit snapshotsD1 via Pages Functions /api/snapshots*Full Intrikata Topology graph workspace
Per-user provisioningCross-link onlyintrikata.com console (sibling)
Graph workspaceCross-link onlytopology.intrikata.com / Intrikata Topology (sibling)
Agent harness runtimesAdapters + playbooksHosting Claude/Grok/Codex processes

Tarski bound: “Complete documentation” means complete relative to published surfaces and live HTTP probes, not omniscience about every future agent’s discovery path.


2. UI tabs (index.html)

TabRoleLayer
HomeOSS community landing — hero, badges, multi-harness install, docs map, principlesGENESIS + META explainer
The SystemShort architecture (modes, traps, Tarski, bridges)META
Live StateFetches scrubbed snapshots from APISHADOW / MGS (read live D1)
Proven CycleReplay of certified self-audit cycle (demo/cycle.json)META receipt

Header actions: Install · White paper · Download zip · Clone · Contribute · MIT.

Live strip on Home checks /api/snapshots/latest in-browser.


3. URL inventory (live-probed 2026-07-18)

3.1 Core pages

URLContent-Type (live)StatusNotes
/text/html200Main SPA-style tabs (static HTML+JS)
/whitepapertext/html200Technical white paper (whitepaper.html)
/favicon.svgimage/svg+xml200Brand mark
/llms.txttext/plain200Agent discovery index
/sitemap.xmlapplication/xml200Crawl map
/robots.txttext/plain200Allows all; points to sitemap
/SITE.mdtext/markdown(this file)Full surface documentation
/sitetext/html200HTML companion for SITE.md
/TRACE.mdtext/markdown200Closed M/G/S/MGS · ASEC · AWITS statement traces
/tracetext/html200HTML companion for TRACE.md
/metamethodology.mdtext/markdown200Reusable pattern + AWITS case study
/metamethodologytext/html200HTML companion

/index.html and /whitepaper.html may 308 to slash/extensionless URLs — use / and /whitepaper.

3.2 Install & onboard

URLPurpose
/install.mdHuman + agent install (per-OS)
/onboard-grok.mdGrok Build short-circuit (filesystem, no MCP required)
/onboard-codex.mdCodex marketplace install-once
/onboard-local.mdCross-agent / cross-OS local realize
/harness.mdPrimitive map outside Claude Code
/backend.mdOptional graph backend contract
/pkg/intrikata-stack-skills.zipSkills package (must be application/zip, magic PK\x03\x04)
/git/intrikata-stack.gitDumb-HTTP bare repo / marketplace source
/scripts/realize.pyLocal realize entry (text/x-python)
/scripts/backend_stub.pyOptional Tier-1 HTTP stub

3.3 Adapters

URLHarness
/adapters/GROK.mdGrok Build
/adapters/CODEX.mdOpenAI Codex
/adapters/AGENTS.mdAGENTS.md family
/adapters/GEMINI.mdGemini CLI
/adapters/cursor/praxis.mdcCursor rules

3.4 Community kit

URLRole
/LICENSEMIT
/CONTRIBUTING.mdContribution guide
/CODE_OF_CONDUCT.mdConduct
/SECURITY.mdSecurity policy

3.5 Demo / certificates (JSON)

URLSchema / role
/demo/community.jsonOSS community main cert
/demo/whitepaper.jsonWhite paper ship cert
/demo/surface-audit.jsonSurface roll-call cert
/demo/site-surface.jsonThis cycle full site map cert
/demo/local-realize.jsonLocal realize cert
/demo/grok-onboard.jsonGrok onboard cert
/demo/codex-onboard.jsonCodex onboard cert
/demo/cycle.jsonProven cycle replay data
/demo/mgs-convergence.jsonHistorical package 1.6.0 MGS convergence + fixed-point cert (not current-release proof)
/demo/asec-awits-trace.jsonThis cycle closed-quartet statement traces (ASEC + AWITS)
/TRACE.mdHuman + agent statement table (skill invoke · META/GENESIS/SHADOW/MGS · ASEC · AWITS)
/demo/skills/*.SKILL.mdPackage-identical skill mirrors for demo UI (includes megametapraxis)
/demo/megametapraxis.jsonObservational-loop cert (envelope drift / Tarski honesty)

3.6 Live state API (Pages Functions + D1)

MethodURLAuthBody
GET/api/snapshotsnone{ snapshots: [...] } list
GET/api/snapshots/latestnonelatest row + payload
GET/api/snapshots/:idnoneone snapshot
POST/api/snapshotsBearer $INTRIKATA_INGEST_TOKENingest scrubbed, structurally validated audit

Write controls: canonical browser origin (or no Origin for server exporters), 128 KiB maximum body, bounded nested types/counts, 30 requests/minute per observed edge IP, parameterized D1 insert, and generic error responses. API responses are no-store and carry explicit MIME, frame, referrer, and cross-origin resource protections.

Live check: GET latest with Accept: application/jsonapplication/json. Historical structured snapshots (#7 2026-07-19, later #8) predate the live 53-trap package. Their converged fields are not current-release proof (state-validity-horizon). See 3.

Ingest rejects shallow-serialized payloads unless trap roll-call entries, coverage layer maps, and bridge-list entries remain nested JSON objects. This prevents presentation strings such as PowerShell @{...} output from becoming the latest machine-readable snapshot.

The Cache API throttle is a free-tier abuse brake, not a globally atomic rate-limit guarantee; bearer authentication, origin policy, body bounds, and structural validation remain fail-closed.

Note: HEAD without Accept may report misleading Content-Type; always verify body starts with {.

3.7 Binding / infra

ResourceValue
Pages projectintrikata-stack
D1 databaseintrikata_stack (binding DB)
Production branchmaster (not main — preview vs production trap)
Ingestexport_state.py + secret INTRIKATA_INGEST_TOKEN

4. M / G / S / MGS coverage of the site

META

GENESIS

SHADOW (always-on disclosures)

MGS (operational lifecycle)

OpCommand / path
Rebuild packagebuild_package.py (venv/py)
Rebuild demo mirrorsbuild_demo.py
Publish snapshotexport_state.py (local Intrikata Topology + token)
Deploy productionwrangler pages deploy public --project-name=intrikata-stack --branch=master
Validatevalidate.py

5. Current package contents (what the zip is)

Built from live skills with portability scrub:

Current delta since historical 1.6.0: traps through 53 (including #52 listing-is-not-dispatch and #53 continuation-dispatch) · megametapraxis observational loop · TRACE.md closed M/G/S/MGS·ASEC·AWITS statement table · historical 1.6.0 / snapshot #7–#8 evidence preserved without relabeling.


6. Multi-harness install matrix

HarnessPrimary pathCert
Claude Codeunzip → ~/.claude/skills or marketplaceinstall.md
Grok Buildonboard-grok.md~/.grok/skillsdemo/grok-onboard.json
Codexmarketplace add bare git + plugin adddemo/codex-onboard.json
Any OS cross-agentonboard-local.md + realize.pydemo/local-realize.json

Grok: no MCP required for valid megapraxis briefing (filesystem-fallback).


7. Security posture (probed)

ControlStatus
CSPpresent (default-src 'self'; hash-pinned inline bootstrap; script attributes denied; scoped Google Fonts + optional Cloudflare Insights)
X-Frame-OptionsDENY
X-Content-Type-Optionsnosniff
Referrer-Policystrict-origin-when-cross-origin
Permissions-Policycamera/mic/geo/payment/usb disabled
HSTSStrict-Transport-Security: max-age=31536000 via _headers (no includeSubDomains on multi-tenant pages.dev)
security.txt (RFC 9116 well-known)/.well-known/security.txt (Contact/Policy → SECURITY.md; Expires < 1y)
SECURITY.mdpublished

8. Verification checklist (re-runnable)

1. GET / and /release.json → 200; homepage badge equals `package_version`
2. GET /pkg/intrikata-stack-skills.zip → first bytes PK\x03\x04
3. GET /api/snapshots/latest Accept: application/json → JSON id≥1
4. GET /install · /onboard-codex · /onboard-grok · /onboard-local · /harness → 200 HTML
5. GET /demo/site-surface.json → schema intrikata-stack.site-surface
5b. GET /TRACE.md and /demo/asec-awits-trace.json → 200; cert schema `intrikata-stack.asec-awits-trace/v1`
5c. GET /metamethodology.md → 200 (AWITS case study)
5d. GET /awits-withheld.md and /demo/awits-v32-live.json → 200; v3.2 claim present; forecast.status=published; horizons length 3; occurrence.operational.occurred=false; hysteresis 65/70; distanceToTarskiLimit UNDECIDABLE; singularityDeclared=false
5e. GET /demo/awits-rdgap-capability-impl.json → 200; probesPassed=37; allFrontierClaimsWithheld=true; allWorkstreamReadinessUnmeasured=true
6. GET /.well-known/security.txt → text/plain, Contact + Expires present (not HTML)
7. HEAD / → Strict-Transport-Security present
8. Deploy only with --branch=master for production hostname
9. GET /demo/mgs-convergence.json → target hash + 281-skill coverage + no secret material

9. SwarmInvocation / CTL (this documentation cycle)

SwarmInvocation::inv-mmgp-20260822-docs-trace
  ::source=mgs-asec-resolve+metamegapraxis+megametapraxis
  ::class=docs-statement-trace
  ::verdict=converged-modulo-harness
  ::package=1.7.0
  ::trap_inventory=53
  ::production_branch=master
  ::trace=/TRACE.md

Prior cycle inv-mmgp-20260718-site-surface-doc (package 1.6.0) remains historical.

Verdict meaning: each published statement has a closed M/G/S/MGS quartet plus ASEC (and AWITS when the claim is a necessity ranking). Residuals in §4 SHADOW, TRACE Tarski block, and class-E sweep timeout are named, not absorbed.

Related session artifacts (operator machine, not necessarily on site): _ctl_20260718_session_convergence_certificate.md · _msa_20260718_filesystem_SwarmReport.md


10. Sibling surfaces


11. Document control

FieldValue
DocSITE.md
Version1.4
Packagerelease.json (1.7.0)
Generated2026-08-23
MethodLive HEAD/GET probes + local public/ inventory + session D1–D10 apply evidence
SupersedesInformal README surface list for agent-facing completeness

_via: filesystem + live HTTPS probes · Tarski-honest site map_


Candidate-necessary R&D (rdgap) surface

Claim class

Conditional causal map of R&D judged required or likely-required across four stated takeoff pathways. Not an occurrence forecast, not a sufficient recipe, not proof of universal necessity (T-COUNTERFACTUAL-NECESSITY).

The 37 manifest items are candidate research workstream representations, not completed or measured frontier capabilities. Each uses the topology-stable rd-capability:<gap-id>:<two-digit-ordinal> identity scheme; direct readiness remains null / unmeasured and attention remains zero-weight.

Necessity formula (zero market weight)

0.60 * pathwayCoverage + 0.25 * dependencyCentrality + 0.15 * evidenceConfidence

Markets, paper counts, theme heat, channel pressure, and open-model velocity remain a separate public-attention tape with zero necessity weight.

The sibling live product now publishes the Forward Stress Forecast under v3.2 (forecast.status=published, three 7/30/90 horizons). Those envelopes are public-proxy stress ranges, not a singularity probability. Operational occurrence is claimed as not-occurred. 37/37 rdgap workstream probes are implemented as public-proxy probes, not frontier capabilities. Receipt: /awits-withheld.

Top-3 initiation candidates (frozen scores)

#GapNecessityReadiness
1Test-time compute & reasoning generalization93.6unmeasured (public-partial)
2Reliable long-horizon agency & tool use92.1unmeasured (public-now)
3Compute, energy & training infrastructure83.9unmeasured (public-now)

Deliberate-control and observability gates (alignment, interpretability, eval science) are ranked separately — they are not physical onset requirements.

Direct readiness is null for all nine gaps. Public reasoning-cost and task-horizon series can establish that a measurement is instrumentable, but they do not satisfy the declared held-out direct tests and cannot be promoted into a readiness value.

Validate and expand the topology graph

$env:OP_CONTEXT = '{"action":"validate"}'
& '.\.venv\Scripts\python.exe' 'ops\RdGapCatalog_v1\main.py'

$env:OP_CONTEXT = '{"action":"expand"}'
& '.\.venv\Scripts\python.exe' 'ops\RdGapCatalog_v1\main.py'

Idempotent. Tarski residual nodes stay outdegree-0 sinks.

Intrikata Stack · MIT · current catalog: 53 operational traps · Security