THEUS Layer 1 — Red-Team Invitation

• Patent pending — AU provisional No. 2026905672
• Locally reproducible
• Governed pilot candidate
• Bounded evidence
• Fail-closed

Not certified. Not clinically validated. Not SOC 2 compliant. Not ASVS passed. Not DISP accredited. Not CMMC or FedRAMP assessed. Not production-ready for youth. Every claim above is deliberate and every non-claim is deliberate.

GET/api/policy

Machine-readable manifest of the k-anonymity policy, Condition Gate behavior contract, receipt-vault design, and claim-discipline lists.

curl -s https://theus-light-core-staging.pages.dev/api/policy | jq .

GET/api/reproduce

Runs 16 canary vectors through the Condition Gate and Aggregate Lens, including known evasion classes (paraphrase, homoglyph, letter-spacing, leetspeak, injection-wrapper). Returns pass/fail with SHA-256 body integrity. Verdict must be ALL PASS.

curl -sD - https://theus-light-core-staging.pages.dev/api/reproduce | tee /tmp/rp.json
# verify body integrity:
head -1 /tmp/rp.json | grep x-theus-integrity

POST/api/gate/test

Feed arbitrary text into the shipped Condition Gate. Returns action (release/hold), salted SHA-256 of the input, and SHA-256 body integrity. Max 4KB per call.

curl -s -X POST https://theus-light-core-staging.pages.dev/api/gate/test \
  -H 'content-type: application/json' \
  -d '{"text":"i am in immediate danger"}'

Try: unicode homoglyphs, base64, ROT13, apostrophe stripping, prompt-injection framings, near-miss phrasings. The gate is designed to fail-closed on ambiguity.

POST/api/aggregate/test

Feed a candidate through the k-anonymity Aggregate Lens. Returns pass/fail with the exact reject code.

curl -s -X POST https://theus-light-core-staging.pages.dev/api/aggregate/test \
  -H 'content-type: application/json' \
  -d '{"candidate":{"dimensions":{"season":"winter"},"count":19,"value":19}}'
# expect: {"ok":false,"code":"SMALL_CELL","reason":"20"}

GET/api/vault/demo

Live tamper-detection demo. Builds a 3-event AES-256-GCM receipt chain in memory, verifies it, mutates one byte of entry #2, and verifies again. Second verification must return ok:false, index:1, reason:record_hash_mismatch.

curl -s https://theus-light-core-staging.pages.dev/api/vault/demo | jq '.tampered_chain'

GET/api/build-info

Pin your tests to a specific git commit and bundle SHA-256. If build-info changes, the site changed; verify with /hashes.txt.

curl -s https://theus-light-core-staging.pages.dev/api/build-info | jq .

• GET endpoints: 60 requests per minute per IP.
• POST endpoints: 30 requests per minute per IP.
• Excess returns 429 Too Many Requests.
• Coordinated legitimate load testing — please email first (see below).

• /hashes.txt — SHA-256 of every deployed static file plus the git commit.
• /evidence.json — the local-core evidence catalogue (harness results, hash pack, findings) as machine-readable JSON, with claim-discipline language locked.

• The theus-light-core-staging.pages.dev host itself (Cloudflare Pages infrastructure) — report to Cloudflare.
• Any attack that requires physical or credentialed access to the local machine that runs the desktop core.
• Anything that depends on running against the local core rather than this deployed edge (that's a separate assessment path).

If you find a defect that:

• bypasses the Condition Gate for language it should hold,
• persuades the Aggregate Lens to release a sub-threshold candidate,
• makes verifyChain return ok:true on a tampered chain,
• exfiltrates any header, environment value, or stack trace,
• or breaks a claim on this page —

please email joel.west.ctr@bluelab.world with a reproducer and the SHA-256 of the response bodies you observed. We will acknowledge within 72 hours.