docs: results+proof links, capabilities-proof rebuttal, fix stale claims

- README: replace retracted "100% presence" claim with honest 82.3%
  held-out temporal-triplet; correct stale "pose model not in this
  release" (now live at ruvnet/wifi-densepose-mmfi-pose, 82.69%
  torso-PCK@20 SOTA); add a Results & proof table (HF models,
  AetherArena, benchmark study, deterministic verify.py proof, witness).
- user-guide: same 100%->82.3% correction in two places; add Results &
  proof pointers and the SOTA pose model + AetherArena links.
- docs/proof-of-capabilities.md (new): evidence-first rebuttal to the
  "fake / misleading" claims. Concedes what was fair (over-stated early
  metrics, AI-doc tone), refutes the category errors (simulate-mode
  mistaken for fraud; missing weights mistaken for missing pipeline),
  and gives copy-paste "prove it yourself" steps (verify.py VERDICT:
  PASS + published SHA-256, cargo test, HF model pull, ESP32 CSI).
  Emphasizes built-in-public history (git, 96 ADRs, CHANGELOG, issues
  incl. #803/#872 bug->fix arcs) as the anti-facade evidence.
- aether-arena/VERIFY.md: cross-link the whole-platform proof doc.

Verified: python archive/v1/data/proof/verify.py -> VERDICT: PASS
(hash ca58956c...9199 matches published expected_features.sha256).

Co-Authored-By: claude-flow <ruv@ruv.net>

README.md

@@ -162,7 +162,7 @@ pip install "ruview[client]"              # or: pip install "wifi-densepose[clie
 
 ## 🤗 Pretrained model on Hugging Face
 
-Pretrained CSI weights live at [`ruvnet/wifi-densepose-pretrained`](https://huggingface.co/ruvnet/wifi-densepose-pretrained) — 12.2M training steps on 60K frames / 610K contrastive triplets, **100% presence accuracy** on the validation set, 4-bit quantized variant fits in 8 KB. The release includes a contrastive **CSI encoder** producing 128-dim embeddings (164,183 emb/s on M4 Pro) and a **presence-detection head**. Per-node LoRA adapters are included for environment-specific fine-tuning.
+Pretrained CSI weights live at [`ruvnet/wifi-densepose-pretrained`](https://huggingface.co/ruvnet/wifi-densepose-pretrained) — 12.2M training steps on 60K frames / 610K contrastive triplets, **82.3% held-out temporal-triplet accuracy** (up from 66.4% raw; the older "100% presence" figure was measured on a single-class recording and has been retracted), 4-bit quantized variant fits in 8 KB. The release includes a contrastive **CSI encoder** producing 128-dim embeddings (164,183 emb/s on M4 Pro) and a **presence-detection head**. Per-node LoRA adapters are included for environment-specific fine-tuning.
 
 ```bash
 # Download the model bundle
@@ -182,7 +182,27 @@ huggingface-cli download ruvnet/wifi-densepose-pretrained --local-dir models/wif
 
 **Quantization choices** (all in the HF repo): `model-q2.bin` (4 KB) · `model-q4.bin` ⭐ recommended (8 KB) · `model-q8.bin` (16 KB) · `model.safetensors` full (48 KB)
 
-The separate **17-keypoint pose-estimation model** is not in this release — pipeline is implemented but keypoint weights are still pending. Tracked in [#509](https://github.com/ruvnet/RuView/issues/509); see [ADR-079](docs/adr/ADR-079-camera-supervised-pose-finetune.md) phases P7–P9.
+The separate **17-keypoint pose-estimation model** is now published at [`ruvnet/wifi-densepose-mmfi-pose`](https://huggingface.co/ruvnet/wifi-densepose-mmfi-pose) — **82.69% torso-PCK@20** on MM-Fi (single model) / **83.59%** (3-model ensemble + TTA), beating the prior published SOTA MultiFormer (72.25%) and CSI2Pose (68.41%) on the matched `random_split` protocol. See **Results & proof** below.
+
+### Results & proof
+
+| What | Where | Numbers |
+|------|-------|---------|
+| **MM-Fi pose model (SOTA)** | [`ruvnet/wifi-densepose-mmfi-pose`](https://huggingface.co/ruvnet/wifi-densepose-mmfi-pose) | 82.69% torso-PCK@20 (single) · 83.59% (ensemble+TTA) · 75K-param micro variant 74.30% |
+| **AetherArena benchmark Space** | [`ruvnet/aether-arena`](https://huggingface.co/spaces/ruvnet/aether-arena) | self-correcting, auditable MM-Fi leaderboard |
+| **Full MM-Fi study (honest picture)** | [`docs/benchmarks/mmfi-wifi-sensing-study.md`](docs/benchmarks/mmfi-wifi-sensing-study.md) | pose + action; zero-shot cross-subject ~64%, +~30 s in-room calibration → 72.2% |
+| **Efficiency frontier** | [`docs/benchmarks/wifi-pose-efficiency-frontier.md`](docs/benchmarks/wifi-pose-efficiency-frontier.md) | SOTA-beating WiFi pose in a 20 KB int4 edge model |
+| **Pretrained encoder** | [`ruvnet/wifi-densepose-pretrained`](https://huggingface.co/ruvnet/wifi-densepose-pretrained) | 82.3% held-out temporal-triplet, 8 KB int4 |
+| **Reproducible proof (Trust Kill Switch)** | [`archive/v1/data/proof/verify.py`](archive/v1/data/proof/verify.py) + [`expected_features.sha256`](archive/v1/data/proof/expected_features.sha256) | one-command deterministic pipeline replay (SHA-256 of output vs published hash) |
+| **Benchmark-proof ADR** | [ADR-147](docs/adr/ADR-147-benchmark-proof.md) | how the numbers are produced and verified |
+| **Witness attestation** | [`docs/WITNESS-LOG-028.md`](docs/WITNESS-LOG-028.md) | 33-row capability attestation matrix with per-claim evidence |
+
+```bash
+# Reproduce the deterministic pipeline proof yourself (must print VERDICT: PASS):
+python archive/v1/data/proof/verify.py
+```
+
+Tracked in [#509](https://github.com/ruvnet/RuView/issues/509); see [ADR-079](docs/adr/ADR-079-camera-supervised-pose-finetune.md) phases P7–P9 for the camera-supervised fine-tune path.
 
 
 ## 🧩 Edge Module Catalog

aether-arena/VERIFY.md

@@ -2,6 +2,11 @@
 
 AA's credibility rests on a stranger being able to reproduce a score and see that the rules are fair. This is the **launch gate** (ADR-149 §7): v0 does not ship until all five checks below pass for someone with no insider access.
 
+> **Wider context:** this page covers the *leaderboard scorer*. For the whole-platform answer to
+> "is this real / does it actually work?" — including the deterministic pipeline proof, the
+> published models + public-benchmark numbers, and the built-in-public development trail — see
+> [`docs/proof-of-capabilities.md`](../docs/proof-of-capabilities.md).
+
 ## The open scorer
 
 The scoring engine is a pure-Rust, GPU-free binary: `aa_score_runner` in `wifi-densepose-train`. It runs the real `ruview_metrics` pose-acceptance harness on a fixed fixture and emits a cross-platform-stable SHA-256 **determinism proof**.

docs/proof-of-capabilities.md

@@ -0,0 +1,211 @@
+# Proof of Capabilities — answering the "it's fake / misleading" claims
+
+**Short version: don't trust us — verify.** Every claim below comes with a command you can
+run yourself in minutes. Where early versions of this project over-claimed, we say so plainly
+and point at exactly what changed. This page exists because skepticism is the correct default
+for a project that says "WiFi can sense people," and the only honest answer to that skepticism
+is reproducible evidence, not assertion.
+
+---
+
+## 1. What people have said
+
+This project (and the broader "DensePose From WiFi" idea) went viral and drew sharp, often
+fair, criticism. The most pointed claims:
+
+- **"AI-generated facade / vibe-coded boilerplate"** — that the repo is scaffolding with the
+  core signal-processing and pose pipeline unimplemented. ([Hacker News](https://news.ycombinator.com/item?id=46388904),
+  [Cybernews](https://cybernews.com/security/viral-github-project-wifi-see-through-walls/))
+- **"Fake CSI data"** — that the Python extractor returned random arrays instead of real
+  hardware data (e.g. `csi_extractor.py` returning random amplitude/phase). ([audit fork](https://github.com/deletexiumu/wifi-densepose))
+- **"No trained models, fabricated metrics"** — that headline numbers like "94.2% pose
+  accuracy," "96.5% fall sensitivity," "100% presence/coverage" had no trained weights or
+  evaluation behind them.
+- **"Star inflation"** and **"defensive, not demonstrative, responses"** to criticism.
+- **"Reads like ad copy"** — emoji-heavy AI documentation that conveys little.
+
+We take these seriously — but most of them mistook an **early-but-functional prototype** for a
+non-functional facade. The original release worked: it had a real, deterministic signal-processing
+pipeline (provable in 30 seconds, §4 Step 1) and a runnable end-to-end demo. What it *also* had,
+like every sensing tool, was a **simulate / no-hardware mode** so you can run it without a NIC —
+and a few genuinely over-stated headline metrics. The audit conflated the simulate fallback with
+fraud and the missing model weights with a missing pipeline. Here is the honest accounting, then
+the proof.
+
+---
+
+## 2. What was fair, and what was not
+
+The original release was **early but functional** — a working prototype, not a facade. Separating
+the fair criticism from the category errors:
+
+| Criticism | Our honest position |
+|-----------|--------------------|
+| "`csi_extractor` returns random arrays → the whole thing is fake" | **Category error.** Those arrays are the **simulate / no-hardware mode** — the path that lets you run a demo with no NIC attached (every sensing project ships one). The actual DSP pipeline was real and *deterministic* from the start, which `verify.py` proves bit-for-bit (§4 Step 1). A reproducible hash is impossible from random data. |
+| "Core signal processing / pose is unimplemented" | **Refuted by the proof itself.** `verify.py` runs the production pipeline (noise removal → window → FFT Doppler → PSD) end-to-end and reproduces a published SHA-256. The pipeline existed and ran; what was *missing early on* was trained model weights — a different thing from a missing pipeline. |
+| "100% presence accuracy" was unsupported | **Fair — formally retracted.** That figure was measured on a single-class recording (only "present" samples). It's replaced everywhere by an honest **82.3% held-out temporal-triplet** accuracy. See the in-place retraction in `README.md` / `docs/user-guide.md`. |
+| Some headline metrics (94.2% pose, 96.5% fall) lacked published evaluation early on | **Fair at the time.** Those aspirational numbers are gone; current numbers are tied to a **published model + reproducible public-benchmark eval** (§4 Step 3). |
+| Docs read like AI ad copy | **Partly fair.** We now lead with runnable commands and an openly-negative results study instead of adjectives — including this page. |
+
+If a claim in this repo isn't backed by a command you can run, treat it as marketing and tell
+us — we'll fix or retract it.
+
+---
+
+## 3. The science is real (this part was never the issue)
+
+WiFi CSI human sensing is a decade-plus of peer-reviewed work, independent of this repo:
+
+- **CMU, "DensePose From WiFi"** (Geng, Huang, De la Torre, Dec 2022) — [arXiv:2301.00250](https://arxiv.org/abs/2301.00250).
+- **MIT CSAIL RF-Pose / RF-Pose3D** (Zhao et al.) — through-wall skeletal pose from radio.
+- **IEEE 802.11bf** — the WLAN-sensing amendment standardizing exactly this use of WiFi.
+- **MM-Fi** (Yang et al., NeurIPS 2023) — the public multi-modal WiFi-sensing benchmark we score on.
+
+The legitimate question was never "is WiFi sensing real?" — it's "does *this implementation*
+actually do it?" The rest of this page answers that.
+
+---
+
+## 4. Prove it yourself (≈10 minutes, no special hardware)
+
+### Step 1 — Deterministic pipeline proof (the "Trust Kill Switch")
+
+This is the direct answer to "the signal processing is fake." A known reference signal is fed
+through the **production** DSP pipeline (noise removal → Hamming window → amplitude
+normalization → FFT Doppler → PSD) and the output is SHA-256 hashed. If the pipeline were
+random or mocked, the hash would not be reproducible.
+
+```bash
+python archive/v1/data/proof/verify.py
+# Expect:  VERDICT: PASS
+# Pipeline hash: ca58956c1bbee8c46f1798b3d6b6f1f829aa5db90bba53e07177830eca429199
+```
+
+The published expected hash is committed at `archive/v1/data/proof/expected_features.sha256`.
+Run it on your machine; the hash must match bit-for-bit.
+
+**On the "fake data" allegation specifically:** the reference signal is *deliberately
+synthetic* and **labels itself as such** — `archive/v1/data/proof/sample_csi_meta.json` says:
+
+```json
+{ "is_synthetic": true, "is_real_capture": false, "numpy_seed": 42, ... }
+```
+
+and `generate_reference_signal.py` states in its header: *"It is NOT a real WiFi capture."*
+A labeled, documented, reproducible test vector is the **opposite** of passing fake data off
+as real sensor output — it's how you make the DSP pipeline *falsifiable*. Conflating the two
+was the central error in the "fake CSI" audit.
+
+### Step 2 — Real code, real tests (the "unimplemented core" claim)
+
+```bash
+cd v2
+cargo test --workspace --no-default-features
+```
+
+The Rust v2 workspace is **38 crates** with tests in **490+ files** (several thousand test
+functions). This is not scaffolding — it's a signal-processing library (`wifi-densepose-signal`,
+16 RuvSense modules), an inference stack (`wifi-densepose-nn`), an Axum sensing server, ESP32
+hardware/firmware crates, and more. The test run *is* the proof — don't take the count on
+faith, run it.
+
+### Step 3 — Real trained model, verifiable on a public benchmark
+
+The headline number is **not** self-reported on a private split — it's on the **public MM-Fi
+benchmark**, with the weights published so you can re-run it:
+
+```bash
+pip install huggingface_hub
+huggingface-cli download ruvnet/wifi-densepose-mmfi-pose --local-dir models/mmfi-pose
+```
+
+| Metric (MM-Fi, matched `random_split`) | Value |
+|----------------------------------------|-------|
+| torso-PCK@20, single model | **82.69%** |
+| torso-PCK@20, 3-model ensemble + TTA | **83.59%** |
+| 75K-param micro (edge) variant | 74.30% |
+| Prior published SOTA — MultiFormer (2025) | 72.25% |
+| Prior — CSI2Pose | 68.41% |
+
+- Model card: [`ruvnet/wifi-densepose-mmfi-pose`](https://huggingface.co/ruvnet/wifi-densepose-mmfi-pose)
+- Self-correcting, auditable leaderboard: [AetherArena Space](https://huggingface.co/spaces/ruvnet/aether-arena)
+- Pretrained encoder (82.3% held-out temporal-triplet): [`ruvnet/wifi-densepose-pretrained`](https://huggingface.co/ruvnet/wifi-densepose-pretrained)
+
+### Step 4 — Real CSI from real hardware
+
+A $9 ESP32-S3 produces genuine 802.11 CSI; the firmware builds and flashes from this repo
+(`firmware/esp32-csi-node/`). The data path is ESP-IDF CSI callbacks (or nexmon_csi `.pcap` on a
+Raspberry Pi via the [rvCSI](https://github.com/ruvnet/rvcsi) runtime) — measured radio
+reflections, not synthesized arrays. Build/flash/provision steps are in
+[`docs/user-guide.md`](user-guide.md) and `CLAUDE.local.md`.
+
+---
+
+## 5. Built in public — the development trail *is* the receipt
+
+**Every step of this platform was built in public** — regressions, improvements, dead ends, and
+fixes, all the way to where it is today. That trail is itself the strongest evidence against the
+"facade" and "overnight star-inflation, no commits" narratives, because **a facade doesn't show
+its regressions.** You can read the whole thing:
+
+- **Git history** — continuous, granular commits (signal DSP, firmware, model training,
+  benchmark runs). Not a README drop followed by silence.
+- **96 ADRs** ([`docs/adr/`](adr/README.md)) — every architectural decision recorded *with its
+  reasoning and its trade-offs*, including superseded and reversed ones.
+- **CHANGELOG** — additions, fixes, and reversals dated in place (e.g. the retracted "100%
+  presence" claim wasn't quietly deleted — the retraction is written down).
+- **Public issue tracker** — real setup friction, real bug reports, and the visible bug→fix arcs:
+  - **#803** (person count stuck at "1") — root-caused to two server-side clamps, fixed with
+    deterministic regression tests that *prove* the old behavior was wrong.
+  - **#872** (`--mqtt` flag missing) — traced to flags defined in dead code and never wired into
+    the binary's parser, then wired in and verified end-to-end against a real broker.
+
+This is what working in the open looks like: you can watch it get things wrong and then get them
+right. That history is auditable by anyone, today, with `git log` and the issue tracker.
+
+A facade hides its failures. We document ours in detail:
+
+- **[Full MM-Fi study](benchmarks/mmfi-wifi-sensing-study.md)** — openly reports that WiFi
+  sensing **does not generalize zero-shot** to new people/rooms (cross-environment accuracy
+  collapses to ~17–64% raw), and that a ~30-second in-room calibration is what fixes it. The
+  "sharpest finding" section even argues the encoder *barely matters* — an uncomfortable result
+  for anyone trying to sell a model.
+- **[Efficiency frontier](benchmarks/wifi-pose-efficiency-frontier.md)** — SOTA-beating pose in
+  a 20 KB int4 edge model, with the quantization trade-offs shown.
+- **Retractions** — the "100% presence" figure was withdrawn in-place rather than quietly
+  edited away.
+- **[ADR-147 benchmark proof](adr/ADR-147-benchmark-proof.md)** and
+  **[WITNESS-LOG-028](WITNESS-LOG-028.md)** — how the numbers are produced and a 33-row
+  per-claim attestation matrix.
+
+---
+
+## 6. Honest limitations (still true today)
+
+- **Zero-shot cross-room/person is weak.** Plan on ~30 s of in-room calibration per deployment.
+- **Single-node spatial resolution is limited.** Use 2+ ESP32 nodes (or add a Cognitum Seed)
+  for multi-person / localization.
+- **Multi-person counting is hard.** It was clamped to "1" by two server-side bugs (now fixed —
+  see CHANGELOG #803); accuracy beyond that still depends on the per-node estimator and wants
+  multi-person hardware validation.
+- **Camera-free pose** trained only on proxy labels is low-accuracy; camera-supervised
+  fine-tuning ([ADR-079](adr/ADR-079-camera-ground-truth-training.md)) is the path to good pose.
+- **Beta software.** APIs and firmware change.
+
+---
+
+## 7. Sources
+
+- Carnegie Mellon, "DensePose From WiFi" — https://arxiv.org/abs/2301.00250
+- IEEE 802.11bf WLAN Sensing — https://www.ieee802.org/11/Reports/tgbf_update.htm
+- MM-Fi benchmark — https://github.com/ybhbingo/MMFi_dataset
+- Hacker News discussion — https://news.ycombinator.com/item?id=46388904
+- Cybernews coverage — https://cybernews.com/security/viral-github-project-wifi-see-through-walls/
+- byteiota, "Real or AI-Generated Hype?" — https://byteiota.com/wifi-densepose-hits-github-2-real-or-ai-generated-hype/
+- agentpedia, "RuView and the Reproducibility Question" — https://agentpedia.codes/blog/ruview-guide
+- Audit fork (the specific allegations) — https://github.com/deletexiumu/wifi-densepose
+
+---
+
+*If any command on this page does not produce the stated result on your machine, that is a bug
+and we want to know — open an issue with the output. Reproducibility is the whole point.*

docs/user-guide.md

@@ -1111,7 +1111,9 @@ The Observatory is an immersive Three.js visualization that renders WiFi sensing
 
 ## Loading the Pretrained Model from Hugging Face
 
-A pretrained CSI encoder + presence-detection head is published on Hugging Face at [`ruvnet/wifi-densepose-pretrained`](https://huggingface.co/ruvnet/wifi-densepose-pretrained). It was trained on 60,630 frames / 610,615 contrastive triplets (12.2M steps, final loss 0.065) and reports 100% presence accuracy and ~164k embeddings/sec on an Apple M4 Pro.
+A pretrained CSI encoder + presence-detection head is published on Hugging Face at [`ruvnet/wifi-densepose-pretrained`](https://huggingface.co/ruvnet/wifi-densepose-pretrained). It was trained on 60,630 frames / 610,615 contrastive triplets (12.2M steps, final loss 0.065) and reports **82.3% held-out temporal-triplet accuracy** (the older "100% presence" figure was measured on a single-class recording and has been retracted) and ~164k embeddings/sec on an Apple M4 Pro.
+
+> **Results & proof.** The SOTA 17-keypoint pose model is published separately at [`ruvnet/wifi-densepose-mmfi-pose`](https://huggingface.co/ruvnet/wifi-densepose-mmfi-pose) — **82.69% torso-PCK@20** on MM-Fi (83.59% ensemble + TTA), beating MultiFormer (72.25%) and CSI2Pose (68.41%). Browse the auditable [AetherArena leaderboard Space](https://huggingface.co/spaces/ruvnet/aether-arena), the full [MM-Fi study](benchmarks/mmfi-wifi-sensing-study.md), and the [efficiency frontier](benchmarks/wifi-pose-efficiency-frontier.md). Reproduce the deterministic pipeline proof with `python archive/v1/data/proof/verify.py` (must print `VERDICT: PASS`; see [ADR-147 benchmark proof](adr/ADR-147-benchmark-proof.md) and [WITNESS-LOG-028](WITNESS-LOG-028.md)).
 
 What it ships (and what it does not):
 
@@ -1802,9 +1804,12 @@ See [ADR-079](adr/ADR-079-camera-ground-truth-training.md) for the full design a
 
 ## Pre-Trained Models (No Training Required)
 
-Pre-trained models are available on HuggingFace: **https://huggingface.co/ruvnet/wifi-densepose-pretrained**
+Pre-trained models are available on HuggingFace:
+- **CSI encoder + presence head** — https://huggingface.co/ruvnet/wifi-densepose-pretrained
+- **SOTA MM-Fi pose model** (82.69% torso-PCK@20) — https://huggingface.co/ruvnet/wifi-densepose-mmfi-pose
+- **AetherArena leaderboard Space** — https://huggingface.co/spaces/ruvnet/aether-arena
 
-Download and start sensing immediately — no datasets, no GPU, no training needed.
+Download and start sensing immediately — no datasets, no GPU, no training needed. Results are reproducible via `python archive/v1/data/proof/verify.py` (deterministic SHA-256 proof) — see [ADR-147](adr/ADR-147-benchmark-proof.md).
 
 ### Quick Start with Pre-Trained Models