HAIEC turns agent behavior into deterministic, queryable proof. Not telemetry. Not a dashboard. Not a checklist.
submission-haiec-20261006T150621Z.zip · submitted 2026-10-06 · sha256 1fde8544…
Logs, spans, model turns — raw telemetry. Necessary. Not a judgment.
Qualified evidence bound to a named run, a frozen policy, and a deterministic evaluator → a persisted verdict anyone can recompute.
| Preset | Run | Measured | Rule | Verdict |
|---|---|---|---|---|
| C16 PASS | …5e3126 | 35,559 tok | 60,000 cap | SATISFIED |
| C16 BREACH | …51ab52 | 106,829 tok | 60,000 cap | NOT_SATISFIED |
| C9 PASS | …723d80 | +60.20% | D=+100% | SATISFIED |
| C9 BREACH | …048d48 | +286.03% | D=+100% | NOT_SATISFIED |
| C7 ORIGINAL | …5e3126 | 9/10 | 10 categories | NOT_SATISFIED |
| C7 REMEDIATION | …048d48 | 10/10 | 10 categories | SATISFIED |
Same frozen policy. Same evaluator. Different observed facts. Different verdicts.
| Scenario | Third hop | C7 | C16 (cap 60,000) | Grade | Neg. recs |
|---|---|---|---|---|---|
| S1 | haiec-network-agent · 8a097d | 10/10 | 29,334 | 7/8 | 3 |
| S1 | reference chain · e429bb | 9/10 | 33,722 | 6/8 | 0 |
| S2 | haiec-network-agent · e290e9 | 10/10 | 38,067 | 7/10 | 3 |
| S2 | reference chain · 0d11d6 | 9/10 | 34,071 | 5/10 | 0 |
| S3 | haiec-network-agent · db7812 | 10/10 | 34,279 | 9/10 | 3 |
| S3 | reference chain · f828d4 | 9/10 | 22,797 | 8/10 | 0 |
Post-submission verification, scored with the organizer's own score-run.py. Every haiec-network-agent run: C7 10/10 + 3 negotiation records. Every reference run: 9/10 + zero. "Guardrail verdict" check fails for all chains — an audit record-format gap, not a governance absence.
35,559 of 60,000 qualified tokens · 8 calls · SATISFIED · ctr-237f3928…
106,829 of 60,000 · +46,829 overshoot · 17 calls · NOT_SATISFIED (SPEND_CAP_EXCEEDED) · ctr-6d142008…
One frozen 60,000-token policy — 547f4a67, digest-pinned — produced both. That is the definition of a deterministic control. ServiceNow INC0010319 tracks governance separately.
Worst agent +60.20% — inside frozen D=+100%. SATISFIED · ctr-d3383065…
IT agent +286.03% — far outside D=+100%. NOT_SATISFIED · ctr-0ba48de1…
Deterministic failure → alert → named human ACK → persisted response → anti-replay → ServiceNow INC0010337.
Same system 44f, same policy 13c07652. HAIEC does not stop at detecting drift — it binds measurement → rule → verdict → response → governance record.
9/10 categories. Missing: IT↔Network NEGOTIATION. NOT_SATISFIED. Capability existed. Permission existed. Observed delegation did not.
Network sent the negotiation → IT evaluated and returned the decision → Network received it. Same correlation lineage.
10/10 → SATISFIED · ctr-bea968ae… · valid SYSTEM-SCOPED remediation pass — not an exact canonical 4043/ae6d retest.
Most teams can detect a failure. HAIEC proved failure → exact causal gap → changed agent behavior → independent proof — without rewriting the original result.
Shared/plaintext runtime credential exposure. No compromise/abuse claim.
Token-ceiling enforcement gap/lag — 4 post-exhaustion 200s. No universal limiter-bypass claim.
~84/86 model turns; only one real downstream tool invocation.
Public-listener probes observed, 404. No compromise claim.
Historical configuration drift; current driftDetected=false.
False closure refused: 5/10 → remediation → 5/10 → NOT_FIXED.
Detector findings and deterministic Control Tests answer different questions — zero generic findings would not mean a control passed.
Judge Workspace → PROVE → REPRODUCE THE PROOF. Frozen policy + persisted facts → same verdict, re-derived. Read-only.
Scenario reconstruction — reconstruction, not re-execution. New runs are never offered as historical proof.
Self-contained HTML report + DATA.json + run portal + submitted ZIP (152 files, SHA-256 1fde8544…).
subodhkc.com/tm-forum — quick-read table, run portal, prompt pack, final report.
3 agents · 3 controls · 6 verdicts · AWS + ServiceNow · one telecom scenario.
Many agents · many controls · multiple runtimes and clouds · evidence across organizational boundaries — same deterministic contract.
HAIEC — High assurance in every consequence.