Seal the baseline
Pin the starting state, verification plan and tool identities.
Independent verification with your project’s own checks and a sealed baseline. The verdict comes from evidence.
Green on both sides. These checks do not distinguish the change from its baseline.
Project checks observed
No discriminating check
Evidence available below
baseline.failed0candidate.failed0Task: Change behavior without a check that measures it
No code is executed or uploaded. Sample counts explain the product’s verification model.
Demo verdict: NOT PROVENRun the project’s checks outside the agent’s conversation. Compare the change with its sealed starting point.
Pin the starting state, verification plan and tool identities.
Measure baseline and candidate with the declared checks.
Inspect differences. Reproduce divergences.
Retain the result and the evidence behind it.
Would these checks pass without the change? If yes, a green result alone does not establish evidence for the new behavior.
Checks that cannot distinguish a behavior change leave a proof gap.
Axios 0.27.2 → 1.0.0. Same downstream suite: axios-mock-adapter, pinned at b8804442.
Headers matching and baseURL resolution broke.
Dependency-tree drift was confined to the Axios subtree.
Documented results, not a live run on this website. Host-exact proof assertions require the committed proof host; other runtimes report incomplete coverage explicitly.
Your tools execute the checks. A deterministic classifier issues the verdict. Explanation sits outside that decision.
Pin the baseline, declared verification plan and tool identities.
BASELINE + PLANExecute checks against both states. Compare observations and reproduce divergences.
CHECKS + OBSERVATIONSDerive the verdict and retain a machine-readable Evidence Bundle.
VERDICT + EVIDENCEA result can be uncertain.
A skip is never a pass.
The measured evidence supports the change.
A baseline behavior fails in the candidate and is reproduced.
The failure is already present in the baseline.
Repeated outcomes do not agree.
The execution environment failed.
The evidence cannot support a stronger result.
Automatic completion checks for everyday work. A separate candidate when isolation matters. The same clear account of what was actually measured.
Discover the project’s declared checks, seal the plan, and wire completion hooks. The agent registers each new request through MCP; Amabie checks the result when the turn ends.
amabie setup --yesIMPLEMENTEDWork in a separate candidate when changes need isolation. Objective requirements need sealed check bindings. A subjective duty stays with a human reviewer.
amabie work → amabie finishEXPERT WORKFLOWRead the current state without running checks. Use doctor for a fresh check, or the proof pipeline for an attested baseline/candidate comparison.
amabie result --jsonIMPLEMENTEDThe hook, the trust step and the actual limits all matter.
Completion and pre-tool hooks. A new request must be registered; unbound criteria remain not proven.
Completion hook installed by setup. Review and trust it once in Codex before it can gate completion.
Machine-readable status and checks. Reporting does not mean Amabie can block the agent.
Verification is only useful when you can inspect what stands behind it.
Read the trust modelWatch the change.
Keep the evidence.
Ed25519-signed records are kept outside project trees. The same user identity can still replace the store, keys or history, or reseal a different plan.
A bound check measures a declared obligation inside Amabie’s model. It does not guarantee that the check fully expresses the requirement.
Provider and broker code exists. A separately measured authority boundary is required before a hardened level can be claimed. It is not activated here.
IMPLEMENTED PROVIDER · UNAVAILABLE CAPABILITYUnobserved runners have a weaker evidence ceiling. Amabie does not promise universal fail-open prevention, semantic correctness, or token savings.
The Amabie 2.0 package is still in release validation. Public releases may retain the Canary name until the rename is released.