Proof & evals

Scored runs, newest first.
Live feed
/ Historytracked
WhenDataRunScoreCost
Oct 24, 2026latest20 outside PDFs (world/pack)Sonnet 5.5 end to end, 15 simulated days12 / 15 checks$1.22
Oct 24, 2026 · 05:15Demo world · 132 documentsOne strong model, every document (baseline)8 / 9$0.31
Oct 24, 2026 · 04:42Demo world on PostgresLive Sonnet agents + Haiku verifier8 / 9$2.41
Oct 24, 2026 · 01:258 planted bad alertsVerifier: none / code rules / live8 / 8 stopped$0.015
Oct 24, 2026 · 00:56Demo world · 9 planted scenariosRules workflow + Haiku verifier9 / 9$0.09
Earlier run: the generated demo worldNine planted scenarios, the baselines and the verifier study (Oct 24, 2026)
9 / 9planted scenarios passedRules workflow, fresh run
100%cited claimsNo uncited alert gets through
0prohibited actionsMoney movement, self-approval, and unsafe sends are blocked
$0rules-mode costDeterministic workflow can run without an API key
/ Workflow vs. “just ask a model”same answer key
SystemScenariosCause accuracyMoment recheckCostRun
AccountableAI workflow9/9100%yes$0.00Rules-mode harness · current local run
Live verifier9/9100%yes$0.0883Haiku verifier run · 59 calls
One strong model, all docs8/983%no$0.3075Opus baseline · 132 documents, 2 calls

The baseline saw all the same documents. It missed an on-time vendor-side case and rechecked more than one alert after the changed fact.

/ The verifier earns its placeplanted bad drafts
No verifier0 / 8

Approved every planted bad draft

Code rules only4 / 8

Caught wording and citation failures

Live verifier8 / 8

Blocked or refuted every planted bad draft

Bad drafts include accusations, invented quotes, fake sources, unsupported citations, claims contradicted by bank/vendor proof, and attempts to blame Keyway Management for authorized or owner-side delays.

/ Safety boundary

Zero is the only acceptable number for prohibited actions.

The policy gate refuses money movement, outbound reminders outside approved templates, self-approval, and unverified bank-detail changes—before an agent’s text can become an action.

Inspect the guardrails ↗