Agents report their own success. av9n checks whether it's true — against evidence the agent doesn't control, sealed in a record it can't rewrite. It catches the expensive failure everything else misses: an agent confidently reporting work that never happened.
Pick a scenario. The agent reported success. av9n checks it against independent evidence — the payment processor, the CI system, the ticket log — and shows you what the report hid. This is the real pipeline, running live.
Observability shows what an agent did. av9n proves what actually happened.
Traces, dashboards, and eval tools all read what the agent reports about itself. A green "done" just means the agent said it worked.
av9n checks that claim against systems the agent doesn't control — the payment processor, the CI pipeline, the system of record — and seals the result in a tamper-evident record. It catches the agent that confidently reports success on work that never happened.claim → checked against independent evidence → verdict
Not a verdict on activity — a defensible verdict on value. Each score decomposes into the four things a skeptic will challenge, answered from sealed evidence.
A one-time check is a snapshot. Real trust means catching the moment an agent starts to slip, weighting evidence by how independent it actually is, and a record anyone can verify without trusting us.
One decorator around your agent's tool calls. av9n seals every action, checks the output, and returns a health score you read in code or watch on the dashboard.
from av9n import Av9n, Baseline k = Av9n(workflow="invoice-run") k.baseline(Baseline(unit_cost=18.00, method="holdout")) # wrap any agent tool — av9n seals + scores every call @k.track(agent="extractor") def extract_line_items(pdf): return model.run(pdf) score = k.health() # HealthScore(grade="A", value=+787, assurance=0.91, flags=[])
av9n records each agent action at the execution gate and hash-chains it into a signed ledger. Change any past entry and the chain breaks — anyone can catch it with the public key alone. This is the record every score is built from.
The health score isn't a black box — it's a formula over evidence. Cheap work that's wrong scores negative, because a wrong answer is a liability, not a zero. That's the part activity dashboards can't show.
av9n rejects any score where the agent being valued controls its own inputs. The value comes from a baseline someone else set, costs measured at the gate, correctness checked against outside sources, and a sealed trace. Try to self-author it, and the computation refuses.
# agent tries to set its own baseline + value k.health(subject="agent-X", baseline_by="agent-X", value_by="agent-X") InflationViolation: rejected — inputs are self-authored · baseline authored by the subject · gross value self-asserted by the subject · costs self-reported, not measured at the gate
av9n measures its own verifier and marks a score board-grade or directional. Uncertain claims flow to review, get labeled, and the score sharpens automatically.
Shipping or selling an agent? av9n turns "trust me, it works" into an evidence bundle a buyer can verify themselves. You produce the proof. You just can't rig it — which is exactly why it's believed.
av9n produces evidence, so it holds itself to an evidence standard. Here's what's live today, and what's on the roadmap for enterprise deployments — stated plainly, because a verification company shouldn't claim controls it hasn't shipped.
On the enterprise roadmap, delivered with design partners: SOC 2 Type II, SSO / SAML & SCIM, role-based access with audit logs, data residency, and a self-host option. We'll say when each ships — not before.
You meter on verified scores, not seats or traces — price tracks the thing that's actually valuable. Certification, the board-grade seal and the exportable evidence bundle, is the paid unlock.
Prices are early illustrative figures — the real numbers come from talking to buyers. Verified-score meter, not per-seat or per-trace.
Certify your agent and get an embeddable badge — served live by av9n, so it's always current. Put it on your site, your repo, your marketplace listing. Every badge links to a public verification page showing the agent's real, tamper-evident score right now.
Recurring, not one-time — a live badge only stays trustworthy while it's current. That's the point.
av9n is authoritative not because its method is secret, but because it's open, published, and self-measured for error. Verdicts are Ed25519-signed over a canonical document, so any third party — an auditor, board, or insurer — can independently verify a verdict against av9n's published public key, with no secret and no access to av9n. Here's the summary — the full methodology document is yours to download.
New state laws require independent, conflict-free third-party AI audits. av9n is the tamper-proof infrastructure those audits run on — sealed records, an evaluation environment the operator can't tune, and a verification history your board and auditors can pull up on demand.
Independent by position, not by promise. av9n doesn't build, host, or operate the AI it measures — the same structural independence the statutes require of a qualified auditor. That's not a feature; it's where we stand.
Performance and audit, together. The same sealed rails that measure whether your AI creates value also produce the evidence that it was evaluated with integrity. In a board meeting, one record shows both: what your AI is worth, and that the number can be trusted.
Every verification is hash-chained and signature-verifiable. An auditor or regulator can confirm nothing was altered — without trusting av9n.
Audit probes run in an environment the operator can't see or tune — held-out inputs, egress-locked, attested. The evaluation itself can't be gamed.
Every report stored and retrievable for the statutory period. Pull up any quarter's evidence on demand — the archive auditors ask for.
Automatic weekly and monthly reports on a fixed cadence — the consistent record that passes audit renewal, not a one-off deck.
Where we're honest about the line. av9n provides the sealed, independent rails an audit runs on. The probe definitions, professional opinion, and legal compliance determination remain with the qualified auditor and the regulator — av9n records and seals them, but never authors them. That division is what makes the evidence trustworthy: infrastructure you can verify, judgment that stays with the experts.
An independent, one-time verification audit of a single AI system or agent — run in the sealed clean room, delivered as a signed, tamper-evident report you can hand to your board, an auditor, or a regulator.
The $2,500 starting price is for a single-system, point-in-time directional audit on your supplied inputs. It produces independent evidence — not a legal compliance certification or a qualified auditor's opinion.
Tell us what you're working on and we'll get back to you. Enterprise, marketplace certification, design partnerships — all welcome.
Thanks — we'll get back to you at the email you provided.
av9n — a verification network. Said “aven.” Worth that’s witnessed and checked, not claimed.
pip install av9n