© 2026 LyDos · Stop prompting. Start orchestrating.
Trust Center · Transparency
Real today · On the roadmap
The Sprint 12 audit caught a drift between marketing claim and production reality (170–230 agent claim, 109 real). This section prevents a repeat: every line is anchored to a live shipping file, an audit report, or a key in manifest/canonical-stats.json key.
Transparency
Real today, on the roadmap
Sprint 12 audit caught drift between marketing claims and production reality (170-230 agent claim vs 109 actual). This section prevents that — every line is verifiable against the live manifest or audit report.
Real today (in production)
- 109 agents (10 Python + 99 YAML) — loaded at startupmanifest/canonical-stats.json:agents_total
- 13 sovereign engines (DPI/LocalSec/KSL/TUP/GCE/ASR/DSL/LSIA/GCI…) live PG :543413/13 /health endpoints respond
- KSL signing on 100% of critical routes (34/34 audit-verified)compliance/audit/sprint-12/AUDIT-REPORT.md
- ASR hash-chained audit chain (208+ live records, 5 tables)asr_decisions table on PG :5434
- RLS isolation 22/22 tests PASS — multi-tenant data separation proventests/test_rls_isolation.py
- 12 LLM providers per-user vault (AES-256-GCM) + Cmd+K palettecore/integrations/llm_provider_integration.py
- Single VPS production deployment — controlled betadeploy/vps/lydos-*.service
On the roadmap
- Multi-region + HPA (autoscaling) — currently single VPS, code not yet shippedcapability_runtime_status.multi_region: code_only
- FedRAMP authorisation — Phase 0 prep, NOT authorisedmanifest §audit_history
- FDA SaMD scope — EXCLUDED; only BAA-eligible HIPAA cluster is liveaudit-verified scope boundary
- 7 locales fully localised, 23 locales planned (Q3/Q4 2026)manifest §i18n_locales
- Truthful homepage rewrite + /settings live wiring + /integrations enterprise search — in progress (Frontend Overhaul FO-3..9)compliance/audit/frontend-overhaul/FRONTEND_OVERHAUL_RFC.md
How this list stays honest
- Manifest is the source. Counts come from manifest/canonical-stats.json through the typed Python loader (core/integrations/canonical_stats.py) and the TypeScript mirror (web/src/lib/canonical-stats.ts). The loader fails to import if the manifest disagrees with the live LLM registry, so a future drift gets caught at backend boot.
- Runtime status is explicit. Every capability has a runtime_status field — code_only, deployed_partial, or deployed_full — so "code exists in repo" never gets passed off as "deployed in production."
- CI drift gates. tests/test_sprint37_phase2_canonical_stats_consumer.py scans marketing pages for hard-coded counts that should reference the canonical manifest; the build fails if anyone re-introduces a literal "109 agents" string.