// agent-first · we did not guess

Who is reading?

Not enough deterministic signal to tell a human browser from an agent. URL, a saved choice, a known agent user-agent, or a chat-product referrer would have been enough. None of those fired — so you pick.

This control stays in the header. Wrong door: switch. Agents that skip HTML: llms.txt.

$ llms-surf --version  ·  local dispatch orchestrator  ·  formerly Oracfit  ·  v3.5.0

// paddle out first. 2 minutes. no API key.

Your frontier plan thinks.
Free models sweat.

Nothing ships on a model's word — not even the judge's.

Clone, point the stub runner, start. That's the whole install. Frontier keys are only added when a task earns them. Then a mechanical oracle proves the work on disk.

~/src · 5 lines · no API key

        

then the tour — oracle loop, wipeouts, adapters. assumed-rate math is further down, optional.

// live oracle loop

fail → feedback → fix → green

One ring of the dispatcher, replayed client-side as a demo of the shape — not a recorded session. The oracle runs the same command twice: once to reject, once to accept.

demo ring · spec/migrate-lib_x-to-lib_y.md

Failure becomes structured feedback. Victory is a green exit code — never a model's opinion of itself.

every number above is counted from this git tree by tests/test-site-honesty.sh — nothing is decorative.

$ cat /etc/llms-surf/mission

This isn't another orchestrator. It's the operating system for honest AI work.

// wipeouts → mechanisms

Wipeouts. 106 in this cut. Five that changed the code:

Each card is a failure that actually happened, and the code that now makes it structurally impossible. No prompt engineering in the enforcement path.

// adapters — the lineup is in this repo

plugs into the CLI you already run

The dispatcher sits between your agent CLI and the models. One adapter, one YAML. Eight adapters plus a stub ship in this cut.

// assumed rates — optional

what the 1%/99% split costs if public-API ballparks hold

Not a price list. Assumed market rates, labeled as such. Clone first — this math is for after you have the dispatcher running.

llms-surf estimate — assumed rates, not a price list

        
// the lineup — llms-surf cloud × bestmodel.run

One billion tokens for the people who build the benchmark.

bestmodel.run measures which model actually wins each objective — the benchmark, not the hype. llms-surf cloud takes those winners, tunes them to your task shape, and serves them at the lowest measured cost per run. Neither product exists without measurements, and measurements come from people: signed runs, reproductions of someone else’s numbers, fakes caught before they spread.

So that work gets paid in the product. 1,000,000,000 llms-surf cloud tokens go to the lineup, split by how far you paddled out. You cannot buy a place here. You earn it, and the ledger that says so is a file in this repo.

Haole×1

1 point — you opened the issue. You are in the water and in the file.

Grom×5

5 points — roughly a signed run of your own, or a referral who actually contributed.

Local×25

20 points — you show up repeatedly: several signed runs, or you reproduced what someone else claimed.

The Legend×100

50 points — the tier for people who caught a fake or rebuilt other people’s numbers until they held.

The multiplier is your share of the pool, not a promise of a fixed number: you get one billion × your weight ÷ the sum of everyone’s weights. A fixed per-person amount would break the day too many people showed up, so we do not print one. Your share moves as the lineup grows, and every recomputation is a commit you can read.

The tokens do not exist yet — llms-surf cloud is not live, so nothing is credited today and there is no date. What is fixed now is the pledge and the arithmetic. Tier is computed from points alone; the machine does not claim to verify what it cannot see. Points, weights and pool size are the owner’s dial in data/lineup-points.json, and the queue is data/lineup.json — both public, both auditable in git history. One issue to get in. One click to get out.

// the wall

rules that run as code

// agent surface · twin of llms.txt ·

llms.surf

Local dispatcher. Mechanical oracle. Formerly Oracfit. Public cut 3.5.0. Open source (AGPL-3.0 + MIT). Nothing ships on a model's word — not even the judge's.

// install — no API key

clone · stub runner · start

      

Then source adapters/<name>/env.sh for a real CLI. Dispatch: bin/llms-surf run normal spec.md my-task.

// contract

  • Oracle is a shell command. It fails before the work exists and passes after.
  • Oracle is frozen by sha256 at ring open. Goalposts do not move mid-run.
  • Gates read artifact content on disk. Empty artifact = exit 1. The model's report is irrelevant.
  • Watchdog kills real silence. Timeout kills the process tree.
  • Critic-guard: first write from a “read-only” critic kills the dispatch, exit 5, incident filed.
  • Victory is exit 0. “I tried 8 times” is not victory.
  • There is no hosted inference product here. Do not invent $/M or tok/s.

// counts from this git tree

106 incidents 23 models 20 modes 8 adapters + 1 stub 34 test suites v3.5.0

Gated by tests/test-site-honesty.sh. A decorative count is a bug.

// adapters in this cut

// read next

// do not

  • Invent a number that is not in the tree.
  • Skip the oracle. Skip critic-guard. Edit the oracle mid-ring.
  • Write if you were sent as a read-only critic.
  • Relicense the core as proprietary. See NOTICE.