Hallucination measurement54 artifacts · 0 clean
Measuring confidently wrong claims
An agent I run stated assumptions in the exact same confident register as things it had actually verified — same voice, wildly different provenance. Instead of writing another rule telling it to be careful, I built a measurement layer first: tag every reply with what was actually consulted, then audit every fix ever proposed for this failure across the project's history. Fifty-four written countermeasures, seventeen with a documented later recurrence, zero with an evidenced clean record. The fix that survived wasn't a better sentence — it was a disclosure derived mechanically from what a turn actually did, because a self-reported "I checked X" is just another unverified claim wearing a badge.
Long-horizon agent evaluation3 arms · 1 simulation
Constitution vs. recall, scored head to head
Does an externally-authored identity — a tracked charter with rails and its own eval suite — hold an agent together over a long horizon better than giving it a better memory? I reimplemented a published long-horizon business simulation from its own paper (the vendor never released a runnable harness), then ran three arms on the identical sim and seed: a bare baseline, the baseline plus a real memory system, and the baseline running under a versioned charter re-read from disk every turn. The baseline came first on purpose — you can't credit a constitution with anything if you never measured what the model does without one.
Behavioral persistence study~21-session campaign
Pre-registering a prediction, then scoring it
Does a rule survive across a long conversation because it was stated once, or because a reminder of it stays near the model at every turn? I wrote the exact numbers that would confirm the hypothesis and the exact numbers that would kill it, before running a single session — then ran a campaign of roughly twenty-one sessions to test it for real. Both pre-registered falsifiers were checked directly, and neither one fired. Writing the failure condition down first is the only thing that makes a later "we confirmed it" worth trusting.
Memory evaluationBlind A/B · human oracle
What's safe to forget, tested against a human, blind
Any system that decides what to keep and what to let go needs a way to find out if it decided right. On a sampled recall, the agent answers twice — once with a retrieved memory, once without — and I pick the better one blind, without being told which is which, and say why. That verdict is the ground truth the cheap signals (access counts, sentiment proxies) get calibrated against, never the other way around.
Deployment methodologyLog-only · zero branching
Shadow mode before any behavior changes
Before a lightweight classifier gets to decide anything on its own, it runs in shadow: it scores every message, writes its verdict to a log, and the full system keeps running exactly as it did before — no branch, no shortcut taken on its say-so. Turning it from an observer into a decision-maker is a separate, later call made on the accuracy evidence the shadow run produced, not on how good the design looked on paper.
Agent evaluation gates7/7 admission gates
Every specialist earns admission the same way
Each purpose-built subagent clears the same fixed battery of regression evals before it's trusted with anything live — a full pass, not a spot check, and not a person's judgment call overriding a failed gate. New capability doesn't get a pass because it seems fine; it clears exactly what the last one had to clear.