Deploy the SZL flagship UDS bundle

Pull the SZL Zarf bundle, deploy the shipping flagships onto a UDS Core cluster, and confirm every organ reports the same locked doctrine on /v1/honest.

Headline number: 1 bundle, 1 doctrine — 749/14/163 on every /healthz.

The two shipping flagships — a11oy and killinchu — ship as airgap-deployable, cosign-signed Unified Defense Stack (UDS) Zarf bundles built on UDS Core v1.5.0. This recipe deploys them and runs the mesh health check.

Honest scope. Only a11oy and killinchu are published images in the bundle today. The a11oy Memory, Operator, and Sentinel verticals are roadmap; their live equivalents ship inside a11oy, not as separate images. Do not expect cosign verify / kubectl exec to succeed for those role names.

Trademark note. "UDS" references Defense Unicorns' Unified Defense Stack (USPTO Serial 99831122). SZL Holdings is not affiliated with Defense Unicorns; integration is via upstream contributions. See https://defenseunicorns.com/uds.

---

Prerequisites

# Zarf v0.77.0+ and uds-cli
brew install zarf
brew install defenseunicorns/tap/uds
# A running UDS Core v1.5.0 cluster (k3d works for local).

Honest prerequisite. Pulling oci://ghcr.io/szl-holdings/... requires a GHCR token with read:packages for the SZL org images. export GHCR_TOKEN=... and echo $GHCR_TOKEN | zarf tools registry login ghcr.io -u <user> --password-stdin before pulling. The doctrine probes in the verify step are public and need no token.

---

Quickstart

# Pull the published bundle (OCI), then deploy.
uds pull oci://ghcr.io/szl-holdings/szl-uds-bundle:uds-v0.2.0
uds deploy szl-uds-bundle-*.tar.zst --confirm

# One-shot mesh health: every organ must report the same locked doctrine.
for o in a11oy killinchu; do
  printf "%-10s " "$o"
  kubectl -n szl exec deploy/$o -- curl -s localhost:8080/api/$o/v1/honest \
    | jq -r '"\(.doctrine // "v11")  decl=\(.declarations)  ax=\(.axioms_unique)  sorries=\(.sorries_total)"'
done
# => every line: v11  decl=749  ax=14  sorries=163

---

Full walkthrough

Step 1 — Inspect the bundle before you trust it

zarf package inspect oci://ghcr.io/szl-holdings/szl-uds-bundle:uds-v0.2.0
# Lists images, SBOMs (SPDX + CycloneDX), SLSA provenance, and the three CRDs:
#   LambdaGate · KhipuReceipt · DoctrineLock

Step 2 — Verify each organ image is signed (keyless cosign)

for o in a11oy killinchu; do
  cosign verify ghcr.io/szl-holdings/$o:uds-v0.2.0 \
    --certificate-identity-regexp="^https://github.com/szl-holdings/" \
    --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
    && echo "$o: signature OK"
done

See recipe 06 for the full cosign + Rekor SLSA-L1 walkthrough.

Step 3 — Deploy and watch the organs come up

uds deploy szl-uds-bundle-*.tar.zst --confirm
kubectl -n szl get pods -w     # wait for 5/5 Running

The bundle installs the three K8s-native CRDs. The DoctrineLock CRD pins the cluster to c7c0ba17; a Pepr policy fails CLOSED if any organ image declares a different anchor.

Step 4 — Confirm the shipping organs are healthy and doctrine-aligned

for o in a11oy killinchu; do
  kubectl -n szl exec deploy/$o -- curl -sf localhost:8080/api/$o/healthz >/dev/null \
    && echo "$o healthz OK"
done

The acceptance criterion is uniformity: every published organ reports v11 / 749 / 14 / 163 and kernel c7c0ba17. A mismatch is a doctrine-drift incident, not a warning.

Step 5 — Smoke the live mesh path

# a11oy emits a real DSSE receipt on a gated action:
kubectl -n szl exec deploy/a11oy -- curl -s -X POST localhost:8080/khipu/sign -d '{"payload":{"hello":"szl"}}' \
  | jq '{hash: .receipt.hash, sig: .signatures[0].keyid}'

Honest note. In-cluster receipt signatures are PLACEHOLDER (Sigstore CI pending). For a cryptographically valid receipt, verify a lake receipt per recipe 01.

---

See also

• 13 — Build a UDS bundle from scratch — start with 1 organ, grow the bundle.
• 15 — Air-gapped install — fully offline deploy from a USB tarball.
• 06 — Verify cosign + Rekor
• Repo: uds-bundles · szl-uds-deployment

Cite this recipe

@misc{szl_cookbook_uds_bundle_2026,
  title        = {Deploy the SZL flagship UDS bundle (SZL Cookbook recipe 02)},
  author       = {{SZL Holdings}},
  year         = {2026},
  howpublished = {\url{https://github.com/szl-holdings/szl-cookbook/blob/main/recipes/02-deploy-5-flagship-uds-bundle.md}},
  note         = {Doctrine v11 LOCKED 749/14/163, kernel c7c0ba17. UDS Core v1.5.0.}
}

---

Doctrine v11 LOCKED — 749/14/163 — kernel c7c0ba17 · Λ = Conjecture 1 · SLSA L1 (honest)