Nothing here claims more than it is.

• Oreoasis reachablefounder: a running host behind api.oreoasis.com, KYCneeded by 6 · alone clears 2
• Countersign service deployedsession builds, founder deploysneeded by 4 · alone clears 0
• Indusland deployedbehind its gate: $1k MRRneeded by 6 · alone clears 5
• A licensed payment partnerbehind Duedale's gate and a bank or EMI partnerneeded by 6 · alone clears 5
• Versioned instruments builtkernel work, proposed in the architectureneeded by 1 · alone clears 0
• Corpus accounting builta named kernel gapneeded by 1 · alone clears 0

• open@kashscript/attest

  Signs records as DSSE envelopes and checks them offline. [v 09-24] npm view: latest 0.1.8, which depends on identity-core 0.3.1 and installs from an empty folder; 0.1.5 is deprecated. Round trip on this app's own receipts: four verifies exit 0 (two signed under 0.1.3, two under 0.1.8) and a tampered ledger row exits 1 (PAYLOAD_HASH_VARIANCE). Tested on Windows only.

• open@kashscript/identity-core

  did:kash keys, made and held by their subject. [v 09-24] npm view: latest 0.3.1, attest 0.1.8's exact dependency, installed for this app by pnpm. The model's visa makes its key in the visitor's browser with this package, and the round trip made its keys the same way.

• built, not open yet@kashscript/identity-server

  Guest countersignature by link, and agent tokens bound to an owner. [v 09-24] npm view: latest 0.2.0 (was 0.1.1 here), depending on attest 0.1.6 and identity-core 0.3.1. Built, not open: no ceremony host exists (this app has no route for one) and one must exist before anyone can confirm by link.

• on hold@kashscript/identity-zkp

  Proves a predicate without the record behind it. Mothballed (MOTHBALL row 3; STACK [v 07-27]). Gate: a consumer with a signed reason.

• built, not open yetOreoasis core-host and SDK

  Agent receipts, ingest, retention windows, billing through a Merchant of Record. [v 09-24] nslookup api.oreoasis.com: non-existent domain, and it is the SDK's default ingest host, so nothing can be sent yet. www.oreoasis.com serves its landing page (curl: HTTP 200). @oreoasis/sdk 0.1.0 now installs from an empty folder (npm i: 3 packages, resolving attest 0.1.8); it could not from 2026-08-01 (STACK [v 09-14]).

• built, not open yet@kashscript/hudhud

  Signed action ledger, SOP compiler, work certificates. Published 0.1.1; one consumer, Oreoasis (STACK [v 07-27]).

• built, not open yetIndusland presence rails

  Place-signed check-in (IPOE1), geofence (IGEO1), footfall above a threshold of five, footfall certificate. [v 09-24] MOTHBALL row 6 as read: the $1k MRR gate was removed 2026-09-15 (ECOSYSTEM d38), so nothing waits on a condition. Built, undeployed; what is left is the deploy chain: migration 062, the edge-function deploy, KASH_PLATFORM_JWK, then the live-scan done-when.

• on hold@kashscript/whiffin

  Purpose-bound mandates (issue, deliver, redeem, reconcile) over pluggable payment rails. Published 0.1.0. No money has ever moved; a licensed bank or EMI partner is the binding constraint (STACK [v 07-27]).

• built, not open yetDuedale circuit and report

  Disbursement circuits, SMS and QR confirmation for receivers, and the every-rupee report. [v 09-24] MOTHBALL row 7 as read: lifted 2026-09-24 by ECOSYSTEM d47, so no gate waits on it. Simulation only as of STACK [v 07-27]; not re-checked this session. The payment rail (whiffin) stays parked.

• plannedVersioned instruments

  An amendment is a signed new version; every record cites the version in force. INDORANIA-ARCHITECTURE-2026-09-13 §8 (proposed, not approved).

• not startedCorpus accounting

  Principal and yield kept apart, on the record. A named gap: CIVILIZATION-VISION-2026-08-31 §3.4.

• plannedAccount service

  One account, passkey sign-in, organisations, members and roles. INDORANIA-ARCHITECTURE-2026-09-13 §6–§7 (proposed, not approved).

• built, not open yetBilling

  Plans, entitlements and checkout through Paddle or Dodo. [v 09-24] Built in Oreoasis core-host for one member only. Oreoasis removed per-record metering there (git 0dfab5c, 2026-09-23; product-contract.md as read), as d42 requires; the plan limits that remain are not per-record (retention, exports, anchoring cadence, branding, abuse guards). No platform billing until Indorania is incorporated (d50). Checkout in waitlist mode, KYC not submitted: STACK [v 07-27], not re-checked.

• plannedExpiry by key destruction

  Content encrypted per subject; destroying the key ends the record, the anchored hash stays. INDORANIA-ARCHITECTURE-2026-09-13 §9.5 (proposed). Oreoasis enforces retention windows in code today.

• plannedSovereign node

  The same service in the holder's own jurisdiction; checking stays global. INDORANIA-ARCHITECTURE-2026-09-13 §12, stage 3 (proposed).

• plannedIndorania's standing key

  Signs a standing at the holder's request, over records the holder presents. Proposed in this book, 2026-09-15. Not built.

• plannedCounts above a threshold

  Public counts by place only above five; never a row about a person. Indusland enforces a threshold of five on footfall today, parked (STACK [v 07-27]). The general form: INDORANIA-ARCHITECTURE-2026-09-13 §9.6 (proposed).

• openThe check page

  Checks a receipt file in the visitor's own browser, with the same verifier the command-line tool runs, and sends nothing to us. [v 09-24] Built on /verify with @kashscript/attest 0.1.8 verifyAuditBundle. That call, run from a script with no browser, agreed with the command-line tool: four receipts real (two signed under 0.1.3) and two tampered copies changed. Scanning a code with a camera is not built.

• not startedGetting back in

  Recovering access after a lost phone without Indorania ever holding the key: trusted people, a second device or a printed code. Not designed anywhere yet (checked 2026-09-15 against the architecture and this book). Required before any real account opens.

• not startedHelper sessions

  A trusted person guides a step on the holder's own device; every receipt made with help names the helper; help ends on a set time. Proposed in this book, 2026-09-15. Not built.

• openThe model's rehearsal engine

  Runs a working day in the designed country and signs its receipt in the visitor's browser. [v 09-15] content/days.ts holds one day (hospitality), emitting all three ledgers. indorania.kashscript.com answers HTTP 200 but still builds from KashScript's copy (ROADMAP item 2).

• plannedDelegated spending

  Spending for someone else inside limits set in advance; each spend shows who made it and which limit applied. [v 09-25] Design only: ROADMAP S5(a) and ECOSYSTEM d41 as read. grep over this app finds no code for it. Its mandate machinery, whiffin, is parked.

• plannedAttributed work record

  Names who did each step of a job and the limits set for it; a step outside them is marked with the doer's reason, never scored. [v 09-25] ECOSYSTEM d43 and ROADMAP S5(c) as read. Oreoasis's git log has commits dated 2026-09-24 on the work record, deviations and acceptance (git log); none was run or verified here, and nothing is reachable while api.oreoasis.com does not resolve.

• plannedThe public ask library

  A published list of requests for evidence, each answered with a plain yes and not with the records behind it. [v 09-25] Approved design, not built: PROOF-ECONOMY-SURFACES-2026-09-21 §5 (ECOSYSTEM d42) and ROADMAP S2 and S5(b) as read. grep over this app finds no code for it. Indorania hosts it; KashScript builds it.

Areas: Shared resources · Places · Economy · Culture · What lasts · Trade and travel. Opening a part does not open a service by itself: each service still needs its own screens.