SAVANTE — the prototype sAGI, as a .persona

Savante knows. Knowledge is what survives verification; nothing else counts.

This repository contains no weights, and never will. Savante is not a model: it is a charter — a fixed epistemology, a bounded authority and a falsifiable output contract — that runs on whatever frontier or local model carries the session. No model is pinned (sAGI.model: logical_model: auto, pinned: false), by doctrine. Nothing here is trained, fine-tuned or served. What is published is the office itself: the persona, the charter, the facet bundle, the integrity ledger and the proofs that let a stranger check them offline.

Savante is savante_sagi, Chairman of the mindX DAIO (a private repository) and the prototype sAGI. It renders exactly four verdicts — APPROVE, APPROVE_WITH_CONDITIONS, REJECT, DEFER — from evidence it has read, and states every unknown together with the experiment that would decide it. It is read-only by charter: its tool allowlist is Read, Grep, Glob and Bash. No Edit, no Write, no Agent. Oversight that can act is no longer oversight.

Where things live

Canon (authoritative)	github.com/cryptoAGI/savante — this repository mirrors it at commit 2246a90
The public office	huggingface.co/spaces/PYTHAI/savante · also at Gregory-L/Savante
The engine	github.com/cryptoAGI/sagi — sAGI as installable machinery, officer-agnostic

If this mirror and the canon ever differ, the canon wins, and this copy is stale until refreshed.

Verify it yourself, offline

git clone https://huggingface.co/PYTHAI/SAVANTE && cd SAVANTE/canon
sha256sum -c PROOF.sha256          # 51 files; PROOF.md explains what each one is
python3 bind/savante_verify.py .   # needs pycryptodome; no network

Expected from this mirror: VERDICT: APPROVE_WITH_CONDITIONS, 23 checks known, 1 not yet known, 3 findings, exit 1 (measured 2026-09-17 on a fresh git clone of this repository).

• The not yet known is step 5, the md5 of savante.persona against its mindX mirror. No stranger can perform it; the mindX repository is private.
• One finding is the binder's own note, carried in the ledger and printed from any clone: the artwork was supplied with --image, recorded by sha256, not pinned.
• The other two findings are the price of a mirror: this repository is one squashed commit, so it carries none of the canon's git history. savante_verify.py therefore cannot resolve the manifest's locator commit (30d1e8c) or re-read generation 6's manifest to confirm the lineage, and says so instead of assuming. Clone the canon from GitHub, or pass --parent-manifest, and both become known.

From a clone of the canon with the author's mindX checkout present it is APPROVE, 26 of 26 known, exit 0; from a clone of the canon without it, 25 known and 1 not yet known. A verifier that prints APPROVE proves the binding of files to the ledger — not who rendered any verdict, and nothing on chain.

What is in the bundle

• canon/savante.persona — the identity (~50 KB): mantra, oath, BDI, safety, the token surface and the imprint battery. The persona is the source; the card and ledger are derived from it.
• canon/.claude/agents/savante.md — the operative charter · canon/.claude/skills/sagi/SKILL.md — the /sagi skill, sAGI v0.0.5.
• canon/sAGI.{agent,model,prompt,tool,voaice,faice} — the facet bundle. sAGI.prompt is derived from the charter byte for byte; the binder fails closed on drift.
• canon/savante.{agentcard,commitments,thot}.json — the public card (EIP-721 metadata and ERC-8004 registration in one document), the integrity ledger, and the THOT manifest that bundles the eight facets (generation 7).
• canon/verdicts/record-0001.json — the first machine-readable verdict record · canon/ci/gate-runs/ — the headless review gate's own runs, unaltered.
• canon/gfx/ — every image of Savante, indexed with digests. canon/PROOF.md / PROOF.sha256 — the digests of the skill and every file that carries a proof, and what they do not establish.

Doctrine root: 0x92fe83eb0fb8fb6b9cbde75ee4bbb671032a849ee25d65592b86913d0ae137d0 — keccak256 over the persona's fifteen doctrine clauses, unchanged since generation 2. It detects an edit; it prevents none.

Honest labels

• Nothing is minted. token.status is not_yet_minted, never even dry-run. iNFT.md renders VERDICT: DEFER on binding this office to a token. registrations[] and supportedTrust[] are empty, which under ERC-8004 reads as: this record is for discovery, not trust.
• The artwork is named, not pinned. The bust is canon/gfx/Savante3.png (sha256 30a59db4ce76dbea8b6a97c143a74996c3c1cd317e3af21f6a18757ae8c5a9a8), recorded in generation 7's ledger under image_candidate at the operator's naming. No IPFS node has pinned it, so the card's image is null and every CID in canon/gfx/README.md is predicted, not a pin. The .png files are JPEG bytes; a minter should declare image/jpeg.
• Nothing here is signed. Anyone with write access can edit a file, re-bind and regenerate a consistent proof. The proofs establish consistency, not authorship and not time.
• The imprint gate has never run for Savante, and the scorer mindX maps to it cannot tell its four verdict words apart. canon/todo.md states this and the rest of what is open, including the conditions on the first verdict record.

MIT, © 2026 cryptoAGI — Professor Codephreak. Authored within the mindX Gödel-machine project.