Public control surface for recognized execution systems, public source, packages, PyPI, routes, search, inspection, verification, and exports.
REGISTRY OPENED: 2026-01-25 · LAST RECONCILED: 2026-06-20T11:21:17Z
{
"surface": "speedkit-control-engine",
"title": "SPEEDKIT Control Engine",
"mode": "PUBLIC_ONLY",
"systems": 4,
"workspace_entries": 135,
"private_remaining": 0,
"antimatterium_count": 4,
"antimatterium_route": "/workspace/antimatterium/"
}
ANTIMATTERIUM PUBLIC STACK is visible. Public families, namespaces, repositories, npm packages, and PyPI packages are workspace surfaces, not automatic system admission.
Commerce is live. Stripe Checkout is active, webhook storage is KV-bound, fake checkout is false, and entitlement proof is routed through the marketplace runtime.
Founder access to SPEEDKIT public marketplace control.
Commercial operator access for teams and builders.
Institutional control access for serious integrations.
PUBLIC_ONLY=true · COMMERCE_READY · FAKE_CHECKOUT=false · KV_ENTITLEMENT_STORAGE=true
The marketplace is now a command tower. Pricing, checkout, entitlement, receipt proof, plan matrix, route map, and buyer path are bound into one live product control surface.
Payment is only the money rail. These bundles define what each plan unlocks inside the Product Control OS.
Capability enforcement is live. Plans now have allowed and denied capability sets, and the access-check API returns deterministic ALLOW/DENY decisions.
Plan usage is now measurable. Allowed capability use writes metered events to KV; denied capability use does not write.
Usage is now evidence. Allowed metered usage writes hash-chained ledger entries to KV. Denied usage remains blocked by policy and is not recorded as consumption.
Usage writes are now quota-gated. Access must pass first; then monthly plan capacity must exist; only then can usage or ledger evidence be written.
Ledger evidence is now replayable. The verify API recomputes every visible entry hash, checks previous-hash continuity, and confirms the latest hash.
Buyer usage now requires session authority. Public buyer flow resolves plan from Checkout session metadata; unpaid sessions cannot write usage or ledger evidence.
Buyer state is now inspectable from one session surface. The capsule exposes session authority, plan resolution, quota, ledger state, and cold replay status.
The marketplace OS is now consolidated. One closure capsule exposes runtime, product OS, buyer control, quota, usage, ledger, cold replay, and checkout readiness.
The marketplace OS now has one canonical public digest. The digest hashes Product OS, route map, closure, buyer control, entitlement usage, quota, ledger, verification, runtime, and marketplace control state.
The Marketplace OS digest now has a public receipt. The receipt binds the digest to systems=4, workspace=135, private_remaining=0, route count, and the consolidated control state.
The public receipt now has external replay. The verifier recomputes the receipt hash from receipt_material, confirms digest match, and validates private_remaining=0, systems=4, and workspace=135.
The public Marketplace OS now has one chain index. It binds the digest, receipt, verifier, closure, Product OS, and route map into one SHA-256 public chain hash.
The public control chain now has external replay. The verifier recomputes the chain hash from chain_material and confirms digest, receipt, verifier, route count, systems=4, workspace=135, and private_remaining=0.
The verified public control chain now has a certificate. It binds the chain hash, chain verification hash, digest, receipt, route count, systems=4, workspace=135, and private_remaining=0.
The public chain certificate now has external replay. The verifier recomputes the certificate hash from certificate_material and confirms chain, digest, receipt, systems=4, workspace=135, and private_remaining=0.
The verified public chain certificate now has a final public seal. It binds certificate verification, certificate hash, chain hash, digest, route count, systems=4, workspace=135, and private_remaining=0.