FIREWALL_ONLY_AUDIT: deterministic gate evaluation without downstream provider calls. It demonstrates recorded gate outcomes, not live-provider execution or model safety.
LIVE_GATING_CHECK: PASS rows may call the selected provider. Call counters show completion, but no provider-supplied request/response identifier is signed; it does not certify model safety or downstream behavior.
SCENARIO_AUDIT: ordered scenario turns are evaluated through the gate. It demonstrates those recorded turn outcomes, not deep conversational state, external action execution, or complete agent security.
This page renders latest-live-audit. This is the latest attributable live certificate with at least one successful provider call, regardless of result. latest-run reflects the most recent overall run and may describe a different run.
Canonical verification path
Verify the signed JSON from a local checkout of this repo:
Check published evidence without cloning this repository: six real archives, four verifiers, one dependency to install. Our own verdict tool establishes two of the six, and the four it does not are defects we have written up.