Skip to content

Agentic Evidence Lab

Open, task-specific evidence for deciding which agent systems work, where, and under what conditions.

CI License Status

Browse results · Understand the method · Evaluate a system · Read the documentation

Agentic Evidence Lab (AEL) compares versioned skills, prompts, models, tools, agent topologies, context policies, runtimes, and complete workflows. It records the exact system that ran, what changed, what stayed fixed, what failed, what it cost, and what decision the evidence actually supports.

The goal is not a universal agent score. It is a cumulative public map of which agent configurations work for particular task classes, budgets, and risk boundaries.

Results

The generated Results Index is the public result projection. It contains deterministic result cards derived from the validated evidence graph; it is disposable navigation, not a second evidence authority. Start there for the current bounded decisions, limitations, and links to every public artifact.

Active research: Agent Skills Season 1 has ten bounded protocols, exact upstream source locks, a healthy public calibration pack, 22 formal activation records, and a completed bounded negative Property-based Testing v2 pathfinder. Arbitrary submissions remain outside the maintainer-controlled execution boundary.

What AEL helps answer

An agent result is produced by a whole stack:

model + runtime + prompt + tools + skills + context + permissions + workflow

AEL supports two kinds of practical question:

  • Which complete stack should I use for this task? Compare runnable systems under the same task pack, budget, and evaluation contract.
  • Did this exact change help? Hold the surrounding stack fixed and vary a declared skill, prompt, tool, model, or workflow factor.

It also exposes failures that a final-answer score can hide: a skill that never loaded, a workflow that did not execute as claimed, invalid retries, critical omissions, excessive generated work, or a result that cannot support the headline written about it.

How a test works

idea → frozen comparison → matched runs → measurements → bounded decision
  1. Define the intervention and the claim being tested.
  2. Freeze the baseline, changed factors, tasks, budget, roles, and stop rule.
  3. Run matched conditions and retain poor answers, failures, and invalid runs.
  4. Measure task outcomes, critical failures, process behavior, cost, and limitations separately.
  5. Publish a human report and a machine-readable evidence receipt stating what is supported, unsupported, and invalidating.

The receipt is bound to exact artifacts by SHA-256. Structural validity does not by itself prove task quality, causality, transfer, or real-world impact.

Inspect the evidence

Every completed study can expose four levels of detail:

  1. Decision summary — what to use, avoid, or test next in the generated Results Index.
  2. Narrative report — comparison, measurements, limitations, and reasoning.
  3. Evidence receipt — machine-readable claims, decisions, provenance, and invalidation triggers.
  4. Study records — frozen manifest, individual runs, and measurement set.

Start with the generated cards. They are projections over the full validated graph, not authority; open raw evidence only when you need to audit, reproduce, or reuse the result.

Run the public checks

Requirements: Python 3.11 or later and uv. Docker is optional.

git clone https://github.com/kizz-tech/agentic-evidence-lab.git
cd agentic-evidence-lab
uv sync --locked

uv run ael validate examples
uv run ael render examples/council-generation-1/evidence-receipt.json
uv run ael results check studies/public-results.json --require-git-proof
uv run ael study audit \
  --freeze studies/agent-skills-season-1/screening/property-based-testing-v2.freeze.json \
  --result studies/agent-skills-season-1/results/property-based-testing-v2 \
  --decision-adapter pbt-v2 \
  --require-git-proof
uv run python -m unittest discover -s tests -v

Expected validation summary for this release:

validation passed: 30 document(s); concept=4, evidence_receipt=2,
measurement_set=2, run_record=18, study_manifest=4

The study audit additionally checks the freeze, terminal decision, public runs, measurements, receipt, and repository artifact ordering as one bundle. The explicit PBT v2 decision adapter also recomputes its exact counts and terminal outcome. Git ancestry proves repository artifact ordering only; it does not prove that private model calls occurred before results or reconstruct private events. These commands do not rerun historical model calls or independently reproduce the research result. See Reproducibility for the exact boundaries and commands.

Evaluate your own system

The smallest study starts from an existing example:

  1. Write a Concept describing the idea and proposed mechanism.
  2. Freeze a Study Manifest with baseline, treatment, tasks, budget, and analysis rules.
  3. Produce one Run Record for every condition, task, and repeat.
  4. Record evaluator-owned outcomes in a Measurement Set.
  5. Author an Evidence Receipt, then validate and render it with the CLI.

Use Contract v0 for the five document types and the public examples as executable starting points. The contract is runner-independent: AEL can describe results from Codex, Claude Code, Cursor, bare model APIs, or another execution system when their actual configuration and limitations are recorded honestly.

The included Docker adapter is available for executable fixtures. Read the runner boundary before model or third-party code.

Leaderboards

AEL will publish a leaderboard only when multiple eligible candidates share the same frozen task pack, evaluator, budget rule, and comparison mode. Until that condition exists, the project publishes separate result cards and receipts rather than a misleading global rank.

See the leaderboard contract for eligibility, uncertainty, critical-failure, cost, freshness, and correction rules.

Security and alpha limits

The offline Docker runner is the default for untrusted executable fixtures. It uses a disposable workspace, read-only canonical input, bounded resources, and no network by default.

The hosted Codex adapter is not safe for third-party submissions because the agent process can read its reusable credential. It is restricted to exact, maintainer-reviewed snapshots and maintainer-controlled fixtures; arbitrary submissions remain blocked. Read SECURITY.md and Container runner isolation before execution.

v0.1.0-alpha.5 is pre-stable. It does not claim universal benchmarking, independent verification of Kizz-authored capabilities, model-only superiority from stack comparisons, or downstream production impact.

Documentation

Use the documentation map to find the right level of detail: results, evaluation, reproducibility, execution, methodology, active research, governance, and release history.

Contributing

Replications, methodology criticism, adapters, task packs, and narrowly scoped fixes are welcome. Start with CONTRIBUTING.md. Security reports belong in GitHub Private Vulnerability Reporting, not public issues.

Citation and license

Created by Ryuhmanov M under the Kizz organization. Cite the software using CITATION.cff and cite the exact evidence receipt used in your work.

Licensed under the Apache License 2.0.

About

Open research lab and evidence toolkit for evaluating agent systems

Topics

Resources

Code of conduct

Contributing

Security policy

Stars

1 star

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages