a11oy Memory — provenance anchor

a11oy Memory is the provenance & receipt-anchoring vertical of a11oy.

Overview

a11oy Memory handles blockchain anchoring of governance receipts with Shor-encoded provenance: provenance hashes are encoded with the 9-qubit Shor code before Cardano anchoring, giving single-qubit error correction on the immutable receipt chain. It performs convergent multi-source data sync with append-only delta logs and bounded-loop convergence guarantees.

Frontier capability. First Shor-encoded + Cardano-anchored governance-receipt minting pipeline.

Anatomy mapping: a11oy Memory sits across Yawar (the receipt ledger) and the Khipu DAG, providing the durable external anchor.

Mathematical foundation

Property	Guarantee	Source
Convergence	The delta-log compression operator is a contraction mapping on hash-verified ingest sequences under the ℓ∞ norm	Banach, 1922
Error correction	Provenance hashes are Shor 9-qubit encoded for single-qubit correction on the anchor chain	Shor, 1995
Causal order	Receipt events carry Lamport timestamps for total causal order across nodes	Lamport, 1978

Banach contraction (the convergence guarantee): there exists $q \in [0,1)$ such that for the compression operator $T$,

$$d\big(T(x), T(y)\big) \le q \cdot d(x, y),$$

so iterating $T$ converges to a unique fixed point — the canonical synced ledger state.

API / install

git clone https://github.com/szl-holdings/a11oy.git
cd a11oy
pnpm install
pnpm test

Example — mint a receipt

import { mintReceipt } from '@szl/a11oy'

const receipt = mintReceipt({
  payload: { decisionId: 'd-001', value: 1, organ: 'a11oy.policy' },
})

console.log(receipt.sha256)   // SHA-256 over the canonical JSON
console.log(receipt.lamport)  // Lamport timestamp for causal order
console.log(receipt.shorBlock)// Shor-9 encoded provenance block

In development

Cardano mainnet anchoring is in development (target: Series-A milestone). The local append-only delta log, Shor encoding, and Lamport ordering are live today and tested via pnpm test. The DSSE receipt signature field is a PLACEHOLDER until Sigstore CI lands (see Compliance).

Source & evidence

• Repo: a11oy
• Spec: Ouroboros Thesis (10.5281/zenodo.20434276)
• Proofs: lutar-lean
• DOI (versioned): 10.5281/zenodo.20434276 · Concept DOI: 10.5281/zenodo.19944926
• License: Apache-2.0