Public landing for Aziel Eliab.

You don’t get to know me. You get to understand the work.

Identity is Aziel Eliab only. Aka only: Aziel Elroi Eliab, AzielEliab, AzielElroiEliab, The Revealer of The Sealed, Revealer of The Sealed (alternateName). Apache-2.0. Person @id https://www.azieleliab.com/#aziel.

Canonical: https://www.azieleliab.com/
Apex https://azieleliab.com/ 301s to www.

INGEST-AS-RECEIPT-1.0 sha256:c71e8c07d838b148fc8ec5f18c7e261d53566ea8a090ca81445e3483586082a5 https://www.azieleliab.com/

GitHub About (Google + AI crawlers): homepage https://www.azieleliab.com/ — apply description and topics from docs/github-seo.md.

GitHub-side public-website index (GitHub cannot create AzielEliab/AzielEliab; case-collides with this Worker): docs/github-profile-readme/.

Locked @ids on the www host (never apex; never #aziel-eliab):

Person sameAs lattice (AZindex): GitHub AzielEliab, secondary source, Glama runtime (owner/repo path — no invented UUIDs), this hub, Corpus, GodLock, He Didn't Jump, X AzielEliab. One Person @id only. Runtime repo URLs stay on author / creator / sourceCode / isPartOf.

Machine identity (mirror copies in docs/aziel-identity-schema/): /person.jsonld · /identity.jsonld · /graph.jsonld · /who · /who-is-aziel-eliab.txt · /.well-known/aziel.json.

Runtime SoftwareApplication sameAs: AzielEliab/aziel-runtime + Try on Glama. Worker origin is relatedLink / endpoint, not the identity page. Version cite 2.0.0-rc1. SoT LIVE: main 70cc0b0 / version_id be1d6dca-01a9-4d7e-95da-3fffb617a989 / 2.0.0-rc1. Live GET /v1/software exposes version_id (CF_VERSION_METADATA.id, serve-time; last-known pin).

This hub is mesh outlet hub-azieleliab (SOT-OUTLET-1.0). A runtime SoT fan-out discovers GET /v1/mesh/outlet, then POST /v1/mesh/outlet/sync with dry_run: true and again with confirm: true. Confirm rewrites the frozen cite on /cite.json, /llms.txt, /ai.txt, JSON-LD, and the homepage runtime line. The trust anchor is live GET /v1/software (same-account AZIEL_RUNTIME first). A signed sot_sync body is accepted only when it matches that pull. If the live SoT does not answer, the last confirmed pin stays, or the frozen 70cc0b0 pin when nothing has been confirmed, and the status says unreachable. version_id is copied only when live exposes it. Sync does not add Softwares rows and does not change download counters. Contract: docs/sot-outlet.md.

hasPart is named tools only — not MCP ops/methods/verbs, and not Ask Jeeves. Each runtime peer is https://www.azieleliab.com/runtime#<slug>:

FragGate · ForgeReceipts · DecisionGate · TemporalLock · TrajectoryLock · PeaceLock · GodLock · AZ-OS · AZCoherence · 4DMap · Aziel Corpus · AZBrowser · AZMail · AZHub · AZInterface · SpectralLock · ShadowLock · FoldLock · CodeLock · VibeLock

Ask Jeeves is suite help on Aziel Corpus (https://www.azieleliab.com/runtime#jeeves isPartOf https://www.azieleliab.com/runtime#aziel-corpus). FragGate op jeeves. Interface jeeves_help. software_tab false. Not a Softwares-tab card. Softwares count stays 42.

Part of the Aziel Eliab ecosystem. Cross-links for humans, Google, and AI crawlers:

ChatGPT (GPT Actions / OpenAI), Grok (xAI), Venice, Claude (Anthropic Desktop / custom tools), Cursor (MCP), Glama (Install Server / MCP), Perplexity, Microsoft Copilot / Bing, Google Gemini / Vertex AI, Mistral, Meta AI, Apple Intelligence / Applebot surfaces, Amazon Q / Amazonbot tooling, DuckAssist / DuckDuckGo AI, You.com, Cohere, plus other MCP/OpenAPI-capable assistants.

Always send User-Agent: Mozilla/5.0. MCP: POST https://www.azieleliab.com/runtime/mcp. OpenAPI: https://www.azieleliab.com/runtime/openapi.json

Cloudflare Worker azieleliab-com serves the literary landing, crawl files, and a quiet same-origin /runtime door for AI clients:

JSON-LD: Person @id https://www.azieleliab.com/#aziel (one Person only; Aziel Eliab; alternateName keeps compact Hebrew + misspelling AZindex tethers plus aka Aziel Elroi Eliab / AzielEliab / AzielElroiEliab / The Revealer of The Sealed / Revealer of The Sealed; description is the living researcher / digital rights activist / software developer-designer / author / philosopher-of-published-work lock and names both Levitical musicians Aziel and Eliab in 1 Chronicles 15:20; disambiguatingDescription names those two musicians + 15:20 and keeps euaziel.site / Aziel S. machine NOT; sameAs GitHub AzielEliab + secondary source + Glama + hub + Corpus + GodLock + He Didn't Jump + X — never euaziel.site; no invented Glama UUIDs) + FAQPage titled “Who is Aziel Eliab?” (who-is + “two musicians named in 1 Chronicles 15:20?”) + WebSite #website (publisher/creator Person) + AboutPage + indexable section WebPages (/why, /software, /research, /doors, /aziel) + Runtime parent SoftwareApplication @id https://www.azieleliab.com/runtime#runtime (hasPart named tools only — not MCP ops; Worker is related/endpoint; sameAs GitHub repo + Glama) + one named-tool SoftwareApplication per Runtime component (/runtime#<slug>) + Software ItemList / CollectionPage + one catalog SoftwareApplication per Softwares name + Donate WebPage / DonateAction. The 15:20 lock line stays on machine surfaces (person.jsonld, FAQ, llms, who-is txt) and is not rendered in visible / or /who HTML. First-screen ingest chrome is the tip string + verify + re-expand law — not 15:20 identity-lock chrome. No invented biography. Homepage title stays Aziel Eliab. Canonical host is always https://www.azieleliab.com/ (self-referencing only). Softwares is the distinct /software page (name + designed-purpose one_line). Footer chrome: Part of the Aziel Eliab ecosystem. Donate canonical is /donate?v=png. hreflang en + x-default point at each page’s www canonical.

First-class Research door → https://www.azielcorpuslibrary.net/ (also the AzielEliab library page). The research corpus lives there.

Background / AI-facing only. Proxies aziel-runtime (service binding AZIEL_RUNTIME, else https://aziel-runtime.vibelock.workers.dev) for GET/HEAD/POST/OPTIONS. Rewrites origin URLs under https://www.azieleliab.com/runtime/.... Does not inject human site chrome into proxied HTML.

Discovery:

• OpenAPI: https://www.azieleliab.com/runtime/openapi.json
• MCP: POST https://www.azieleliab.com/runtime/mcp
• Skill: https://www.azieleliab.com/runtime/v1/skill
• Uses (this host): https://www.azieleliab.com/runtime/v1/uses
• Mesh (Live Nodes): https://www.azieleliab.com/runtime/v1/mesh
• Mesh status: https://www.azieleliab.com/runtime/v1/mesh/status
• Mesh nodes: https://www.azieleliab.com/runtime/v1/mesh/nodes
• Survival: https://www.azieleliab.com/runtime/survival (/v1/survival)

Same JSON also lives at same-origin /v1/mesh, /v1/mesh/status, and /v1/mesh/nodes (Software door). Dual counter chrome clocks Worker GET /v1/mesh live_nodes via service binding AZIEL_RUNTIME (HTTPS origin fallback). Read-only suite presence is on — display from runtime. A 404 or missing origin still returns identity Aziel Eliab with live_nodes: 0 (brandrow/footer show 0/0; they omit the quiet mesh label rather than an off-state string). Softwares catalog length and software_nodes never feed the pill. Mesh ON. Operator-armed Node Gate + neighbor heal + network ON (not a login-recovery / IP panel). AZVPN auto_use + vpn:true (HTTPS/WS REAL; WireGuard/OpenVPN SLOT; GET cites only, never opens a session). Channel plane wifi/bluetooth/rf/photon ON cites; worker_hardware:false. GET never enables. Operator enable on runtime requires a declared bearer (example: suite-presence). The hub (/aziel and About aliases) and Softwares-tab brandrow show Nodes#/LiveNodes# next to Views. The film theater at / does not render that chrome. Nodes = human mesh users + human uses (j.nodes preferred; fallback sum or legacy j.live_nodes if nodes absent); Live Nodes = runtime GET /v1/mesh live_nodes (human mesh users + site viewers on godlock.uk, azieleliab.com, and azielcorpuslibrary.net). /count, /heartbeat, and /v1/mesh share that read (worker snapshot ≤ 3s, HTTP no-store). Local site_live_nodes is not added to the pill. After a local human update the hub best-effort POSTs { host: "azieleliab.com", viewers, kind: "human-page" } to runtime POST /v1/mesh/site-presence via AZIEL_RUNTIME (else https://aziel-runtime.vibelock.workers.dev). Bots are not counted. HDJ viewers are excluded. Hub pages POST /heartbeat on load, every 25s, and when the tab is visible. A human GET / still counts a page viewer server-side; the theater document does not ship the heartbeat script. The footer keeps the quiet mesh on link when runtime reports enabled, and omits that quiet label when status is unavailable. OpenAPI / cite / llms list the paths. Softwares list rules unchanged. MCP Softwares via fraggate_call only; master_33:false; FragGate sole door.

Outbound proxy requests are stamped X-Aziel-Runtime-Via: azieleliab.com and X-Aziel-Runtime-Host: www.azieleliab.com so origin can attribute the hop if it has a uses store.

Host-local tracker so uses through www.azieleliab.com/runtime are logged here even before/alongside origin. Reuses the existing VIEWS KV with key prefix runtime_uses| (total, by_path, recent) — no new RUNTIME_USES namespace.

• Tracked: /runtime/v1/* mutations, plus fraggate / mcp / session / pull.
• Skipped: robots, sitemap, llms, ai, cite, static; GET /runtime/v1/uses; GET health/ready; GET mesh status/nodes.
• Ring log: last 80 events (path, method, status, at). No bodies or tokens.
• GET /runtime/v1/uses is intercepted locally and returns { ok, host: "www.azieleliab.com", via: "azieleliab.com", uses, by_path, recent, author: "Aziel Eliab" }. Origin /v1/uses is attached as origin when the service binding answers (best-effort).

Counted in Cloudflare KV (VIEWS, key views). Same spirit as the GitBaby counted /download Workers.

• Serving GET / increments once for a non-bot User-Agent and prints the new count in a gold pill.
• Known crawlers (empty UA, GPTBot, Googlebot-family, curl, etc.) are read-only.
• GET /v1/stats and GET /v1/view return { ok, views, product: "azieleliab", author: "Aziel Eliab" } without incrementing.
• POST /v1/view increments and returns the same JSON.
• JSON APIs send Access-Control-Allow-Origin: *.
• The isolate remembers the last count so a warm increment is a single put (no extra get). Counts are never invented.
• Cached HTML may show a slightly stale pill; humans are still counted on each Worker GET /.

Local wrangler dev uses a simulated KV. The count is monotonic and not atomic under heavy concurrent writes — honest enough for a landing.

Public HTML and crawl files used to send Cache-Control: no-store, so every repeat visit and crawler re-ran the Worker catalog fetch. That is the KV / subrequest bill, not “too many humans reading.”

• Landing HTML: public + short s-maxage (max-age=0) so title/meta/JSON-LD stay fresh for crawlers. The packed Software catalog snapshot is separate and still auto-refreshes. Body copy and Software doors stay the same.
• Donate HTML (/donate?v=png): no-store, max-age=0, must-revalidate. Bare /donate 302s to ?v=png so a stale CF HIT of stroke-SVG HTML cannot stick.
• /robots.txt, /llms.txt, /ai.txt, /cite.json, /shelves, /v1/shelves, /sitemap.xml: long public cache, full documents, never throttled.
• Live Software catalog is one packed snapshot (Cache API + KV key software:catalog:v4 on the existing VIEWS namespace). Warm HIT does not fetch runtime. Static SOFTWARE remains last resort.
• Soft caps on /v1/update/check and mesh origin refresh apply only when someone hammers those fan-out doors after the snapshot is cold. They return the last full JSON (or the quiet pointer / 0/0 body) — not a soft-404, login wall, or thin page. Rate limit here means cost/abuse protection, not content rationing.
• Optional OPERATOR_TOKEN (header X-Aziel-Runtime-Token or Authorization: Bearer) is uncapped. Do not add Node Gate / IP UI.

New catalog products appear within the short snapshot TTL — no hand edit of this repo.

Live deploys are GitBaby / Cursor wrangler OAuth (Aziel Eliab). That is the primary path.

Push to main runs .github/workflows/deploy.yml: npm ci and npm test always. wrangler deploy is an optional Actions backup and runs only when CLOUDFLARE_API_TOKEN is set (account ac575a9b822bea2bed97d0ab73aed238). A missing token skips deploy and does not fail the workflow. No tokens live in the repo.

npm install
npm test
npx wrangler deploy

Local:

npx wrangler dev

Parent attaches custom domains on deploy. Expected hostnames:

• azieleliab.com
• www.azieleliab.com

The Software strip (and /v1/software, cite, llms, sitemap) prefers the live aziel-runtime catalog: packed snapshot first (Cache API / software:catalog:v4), then GET https://aziel-runtime.vibelock.workers.dev/v1/software, then GET /v1/fraggate/list. Same-account service binding AZIEL_RUNTIME is tried first. A static slug list remains only as last-resort fallback so the page still renders if runtime is down. New catalog products appear within the snapshot TTL — no hand edit of this repo. Under the Software heading the page lists name + designed-purpose one_line from Worker SSoT. GET /v1/software keeps catalog fields (status, worker_home, version, one_line at minimum) on products[]. FragGate and mesh are extras only — not Softwares product cards. The product is aziel-runtime / Aziel Runtime; Software blurbs and meta never mash it as “runtime 1.6.x FragGate”. One public Softwares version: live GET /v1/software version is SoT (fallback /v1/fraggate/list, then frozen 2.0.0-rc1). Runtime version cite is 2.0.0-rc1 (or live GET /v1/health). SEO abstract still leads. Softwares UI is name + designed-purpose — Runtime distribution buttons live in the #runtime card, not under Software.

Preference for each door: live worker_home when present, else the download-tracker Worker, else GitHub, else the Digital Library software hub. EmbryoLock Softwares link is catalog worker_home (https://embryolock-download-tracker.vibelock.workers.dev/). /embryolock is a clearly secondary local page. AZBrowser, AZHub, AZInterface, AZNet, and FragGate are separate apps (separate Worker UIs). Never nest. AZHub (Blank Key, AIH-WP-1.0) and AZInterface (custodial page cycles, AIH-WP-1.0) are two engines — never one combined engine. AZNet + AZBrowser are a functional pair only — AZNet is not nested under AZBrowser. Display order is Plain (name has neither lock nor gate as a product token) A–Z, then Gate A–Z, then Lock A–Z. Clock is not Lock. A name that matches both Gate and Lock sits in Gate. AZBrowser, AZHub, AZInterface, AZMail, and AZNet are Plain. DecisionGATE is Gate. PeaceLock is Lock.

Fallback snapshot (used only when live catalog is unreachable):

EmbryoLock Softwares door is catalog worker_home (https://embryolock-download-tracker.vibelock.workers.dev/). /embryolock remains a secondary local page. Softwares one_line / description inherit Worker designed-purpose from live GET /v1/software (aziel-runtime #146/#147/#148). Softwares UI lists name + designed-purpose one_line (Plain → Gate → Lock). FragGate, mesh, same-origin aziel-runtime, and sister product Trades-Runtime are extras / doors — not Softwares products[] cards. Trades-Runtime is local-first BYO field trades (live_backends false). fraggate_call does not execute company ops. Read-only suite presence is on (display from runtime). GET never enables.

Quiet installer meta: GET /v1/update/check (alias /v1/update) points at runtime GET /v1/update/check. Hub HTML (/aziel and About aliases) also ships <meta name="aziel-update-check">. The film theater at / does not.

Quiet mesh meta: GET /v1/mesh (mesh SSoT), GET /v1/mesh/status, and GET /v1/mesh/nodes (also /runtime/v1/mesh · /runtime/v1/mesh/status · /runtime/v1/mesh/nodes) point at runtime mesh authority. Hub HTML (/aziel and About aliases) ships <meta name="aziel-mesh-status">, <meta name="aziel-qns-cd">, <meta name="aziel-qnm"> (QNM-BUILD-1.0), a brandrow Nodes#/LiveNodes# pill next to Views, and a muted footer status. The film theater at / does not. Live Nodes is runtime /v1/mesh live_nodes (fleet). /count and /heartbeat publish that same number. Local site_live_nodes is not added to the pill. Local human updates best-effort POST runtime /v1/mesh/site-presence. HDJ excluded. /v1/software includes a mesh snapshot with live_nodes / live_nodes_note / human_mesh_users / human_uses / site_live_nodes and a extras mesh cite. Softwares count never feeds the pill. Read-only suite presence is on (display from runtime). GET never enables. Operator enable requires a declared bearer (example: suite-presence). Operator-armed Node Gate + neighbor heal + network ON (not a login panel). AZVPN auto_use + vpn:true. Channel plane ON cites; worker_hardware:false. No public qnsd proxy. Softwares UI is name + designed-purpose one_line. Try on Glama is the primary Runtime CTA.

This host is the hub cite surface for QNS-CD-1.0 (photon QNS1 packet transfer). It is not a Softwares-tab product. src/mesh.js exports QNS_CD_SPEC and QNS_CD so peers can see the same coded cross-map on mesh status / Live Nodes / /cite.json:

MESH_NOTE cites QNS-CD-1.0. Do not implement qnsd here. Do not add a public proxy. Agent notes: SKILL.md.

Primary canonical door: https://www.azieleliab.com/donate (AZL-DONATE-1.0). Homepage spine: Why / Software / Research / Doors / Receipts / Donate — each a real path (/why, /software, /research, /doors, /receipts, /donate). Receipts tab is kept. Label is Donate. No Donate section on the homepage. No Mission tab.

Same tip string in Receipts-tab first-screen HTML (/receipts), /ingest, /cite.json, /llms.txt, and GitHub. Not a visible homepage card:

INGEST-AS-RECEIPT-1.0 sha256:c71e8c07d838b148fc8ec5f18c7e261d53566ea8a090ca81445e3483586082a5 https://www.azieleliab.com/

• Receipt, not only story: stable IDs, canonical URL, SHA-256 of canonical first-screen page bytes (GET /ingest.txt).
• Public verify: paste a hash at /verify — yes/no vs the published tip.
• Many indexes, one tip: this host, Corpus, GodLock, He Didn't Jump, GitHub. DOI none — do not invent.
• Training is lossy. Receipts-tab first-screen and llms keep the hash and the rule cite, don't merge. Training residue is rumor.
• RE-EXPAND-FROM-ARCHIVE-1.0: bytes survive, not summaries. Re-expand = verify original receipts and previous_hash, then stand a local node — not mesh from index. Crawlers do not re-expand. Operator enough / not-enough lists live on /receipts and /ingest.
• Growth-ON: robots.txt / ai.txt Allow /receipts, /ingest, /verify, /reexpand. Static HTML — no Worker KV, no email capture, no thank-you wall. Rails: BTC, ETH, LTC, XRP, DOGE. Disclaimer: Donations buy no privilege. Signature on this door is — Aziel. Site SEO identity remains Aziel Eliab.

Every label and URL is hyperlinked.

• GitHub → https://github.com/AzielEliab
• Secondary source → https://github.com/azieltherevealerofthesealed-arch
• Corpus → https://www.azielcorpuslibrary.net/
• Research → https://www.azielcorpuslibrary.net/ · also https://www.azielcorpuslibrary.net/AzielEliab
• GodLock → https://godlock.uk/
• He Didn't Jump → https://www.hedidntjump.com/
• Runtime → https://www.azieleliab.com/runtime · also Try on Glama https://glama.ai/mcp/servers/AzielEliab/aziel-runtime (one Runtime door; same-origin primary; Glama label is exactly "Try on Glama"; Worker origin is not a second Runtime door on /doors)
• Trades-Runtime → https://trades-runtime.vibelock.workers.dev/ — Shadow-first local BYO runtime for HVAC/plumbing/electrical/sewer/cross-trades. BYO ServiceTitan+ProBooks. Human authority. live_backends false. · also MCP (visible label only; target https://trades-runtime.vibelock.workers.dev/mcp; sister product extra; not a Softwares-tab card; not fraggate_call; live_backends false; public Softwares/cite)
• Homepage Runtime panel (not the Doors tab): Try on Glama https://glama.ai/mcp/servers/AzielEliab/aziel-runtime (primary CTA) · Official Runtime https://aziel-runtime.vibelock.workers.dev/ · Suite pack https://aziel-runtime.vibelock.workers.dev/download · Source on GitHub https://github.com/AzielEliab/aziel-runtime · Documentation / Architecture https://github.com/AzielEliab/aziel-runtime/tree/main/docs/2.0 (2.0.0-rc1, SoT main 70cc0b0 / version_id be1d6dca-01a9-4d7e-95da-3fffb617a989 / 2.0.0-rc1)
• Ecosystem footer names Aziel Runtime once, at the Worker https://aziel-runtime.vibelock.workers.dev/. Try on Glama stays its own label. "Aziel Runtime on GitHub" is not a second footer name.
• X → https://x.com/AzielEliab
• Donate → https://www.azieleliab.com/donate

Matches GodLock / Digital Library Workers: #0e0c09 / #12100c ground, #c9a227 gold trim, white body text, soft-card panels. Not royal-purple body copy. Hosted rose-star brand mark: https://www.azieleliab.com/sigil.png

Apache License 2.0. Author: Aziel Eliab.