Thing	Label	Method / N / date / what-NOT
tests (`PYTHONPATH=torch-ext`)	PASS	MEASURED 2026-08-29T15:54:04Z host `betterwithage` Windows-10-10.0.26200-SP0. torch `2.10.0+cu128`. GPU `NVIDIA GeForce RTX 5050 Laptop GPU` arch `Blackwell`. pytest `3 passed in 1.57s`. Failed nodes: `none`. What-NOT: not a leaderboard. torch.compile fullgraph failures on Windows Blackwell (`cl is not found`) are MEASURED, not hidden.
Kernel Hub `get_kernel`	import-LIVE	kernels `0.16.1`. Default: `get_kernel("SZLHOLDINGS/szl-blocked", revision="main", trust_remote_code=True)` → `True`. `backend="cpu"` → `True`. trust_remote_code=False → `ValueError` (SZLHOLDINGS is not a trusted publisher). repo_type=kernel required (kernels 0.16). What-NOT: not a weight load; do not pickle/joblib.load.
formula-tax	ADVISORY	locked-8 `F1 F4 F7 F11 F12 F18 F19 F22`. registry_count=21. Λ geomean `1.0`. uniqueness Conjecture 1 (never a theorem).
I1–I8	catalog	`I1 receipt-chain-continuity; I2 ledger-failure-shape; I3 served-run-has-model; I4 signed-columns-atomic; I5 loop-steps-positive; I6 receipt-ed25519-verify; I7 receipt-columns-consistent; I8 flywheel-lineage`. Executed by `SZLHOLDINGS/szl-invariants`. Statuses never coerced. Λ untouched.
CUDA speedup / tokens/s / joules	UNAVAILABLE	Not claimed. Receipted kernels, not silent CUDA.

GitHub source: szl-holdings/szl-blocked @ 79f950a60debb7f1f0c6f5e2f3baa5e8b7ab6739. Artifacts: BENCH.laptop-blackwell.json, OPERATIONAL.json.

python

from kernels import get_kernel
k = get_kernel("SZLHOLDINGS/szl-blocked", revision="main", trust_remote_code=True)

szl-blocked

Honest-BLOCKED as a first-class governed state. Not a model. No weights.

IS: a fail-closed Python governance kernel. On deny the guarded fn never runs (BlockedResult.output is None) and a BLOCK receipt is written. Public API: governed_call, GovernedGate, deny_by_default / deny_if_flag / deny_if_action_in, UnifiedReceiptChain. Sibling package szl_euaiact can emit an Annex IV-style DRAFT skeleton.

IS NOT: trained weights. Not FlashAttention. Not a drop-in blocker library. Not legal advice and not a declaration of conformity. No MEASURED latency or CUDA benches here. Hub model.joblib is QUARANTINED executable serialization — do not joblib.load it.

Canonical GitHub source: https://github.com/szl-holdings/szl-blocked
Hub package: https://huggingface.co/kernels/SZLHOLDINGS/szl-blocked
This model-type repo is the publish / card mirror. Apache-2.0.

python

<!-- SZL-ATELIER-CUT:v1:START -->
## The cut

People write Annex IV in Word. We keep a kernel that refuses to publish if the annex fields are empty.

A blocked publish — the name is the feature.

### Silhouette → leave → SZL

| Leader | Take, then tweak |
|---|---|
| Anthropic | Policy docs. We want a gate. |
| NVIDIA | Enterprise compliance packs. |
| Unsloth | No. |

Nobody else ships this combination. That is the point of a one-of-one.

## Intended use

Block publish when annex fields are missing.

## Limitations

- Not legal advice. A documentation gate.

Canonical GitHub: [`szl-holdings/szl-blocked`](https://github.com/szl-holdings/szl-blocked/blob/main/README.md)
<!-- SZL-ATELIER-CUT:v1:END -->

from kernels import get_kernel
blk = get_kernel("SZLHOLDINGS/szl-blocked", revision="main", trust_remote_code=True)

chain = blk.UnifiedReceiptChain()
policy = blk.deny_if_action_in({"exfiltrate", "delete_all"})
def do_work(x): return x * 2
ok = blk.governed_call(do_work, policy, chain, request={"action": "summarize"}, args=(21,))
no = blk.governed_call(do_work, policy, chain, request={"action": "exfiltrate"}, args=(21,))
assert ok.blocked is False and ok.output == 42
assert no.blocked is True and no.output is None

Hard DENY dominates. Advisory Λ can only tighten, never loosen, and never manufactures trust. Annex IV output is a draft skeleton with explicit TODOs.