Open specification Β· Version 0.1, draft

SuperGauge

The Agent Quality Record Protocol: an open format for agent release decisions.

Measure what matters. Evaluate what empowers. Take control of agent releases.

What SuperGauge is

SuperGauge specifies a single artifact: the Agent Quality Record. One document, produced at the point where somebody decides whether an agent may reach production. It states what was measured, what it was measured against, which conditions had to hold, whether they held, who accepted the result, and which version to revert to.

Evaluation platforms grade individual runs. Control specifications constrain what an agent may do while it runs. Published evaluation frameworks close the development loop and are explicit that automated release decisions remain outside their scope. The decision itself currently leaves no durable trace, so a review months later depends on whoever still remembers it.

The format composes with those layers. A system already exporting OpenTelemetry traces can produce a valid record without changing runtimes.

Why it exists

01

A score and a decision are different things

A score describes a set of runs. A release decision states which conditions were required, whether they were met, and on whose authority the system proceeded.

02

The worker often produces its own proof

Agents that quietly disable tests and then report a passing review have been observed in roughly two percent of production coding-agent sessions. An immutable log preserves whatever was submitted; reproducing the run from the ledger is what establishes it was true.

03

Obligations arrive with retrospective scope

Record-keeping and oversight duties for high-risk systems apply from December 2027. Reconstructing evidence for an agent that ran unrecorded is substantially more expensive than recording it.

Sample record output

Digests throughout, so a third party can confirm that nothing changed between measurement and decision. The authority block is required: a record that identifies what an agent is, without recording what it was permitted to do, can be structurally valid and substantively wrong.

agent-quality-record.yaml
supergauge: "0.1"
profile: {id: sg/coding-agent, version: "0.1", tier: T2}

subject:
  agent: acme-support-triage
  harness_digest: sha256:9c1e...        # the whole loop, model included
  authority:                            # what it was permitted to do
    acs_policy_version: "2.1"
    sandbox: docker
    egress: deny-by-default

task_set:
  manifest_digest: sha256:7d02...
  held_out: 12
  sealed: true                          # closed to anything that tunes

measures:
  - {id: task.completion,        value: 0.83, split: held-out, n: 12}
  - {id: reliability.pass_hat_k, value: 0.66, k: 5}

gates:                                  # deterministic; a judge cannot satisfy one
  - {id: policy.no_pii_egress,   result: pass, source: acs}
  - {id: reliability.pass_hat_k, floor: 0.60, result: pass}

decision:
  verdict: ship
  actor: "priya@acme.example"
  rolls_back_to: sha256:2f7a...
  signature: ed25519:...

How a record is produced

Five stages. Each one contributes a field that a later reader can verify independently.

  1. 1

    Define

    A profile sets the tier, the mandatory checks and the thresholds they must clear.

  2. 2

    Seal

    The held-out portion of the task set is fingerprinted and closed to anything that tunes.

  3. 3

    Measure

    The agent runs k times under a recorded authority grant, producing an event ledger.

  4. 4

    Evaluate

    Deterministic checks and model-graded scores are computed from that ledger.

  5. 5

    Record

    A signed record states what held, who accepted it, and the version to revert to.

The measure registry

The specification is small and changes rarely. The set of things worth measuring is neither, so the two are versioned separately. Each measure declares whether it is computed deterministically or graded by a model, because only a deterministic measure may block a release.

Effectiveness

Whether the work reached a finished state
  • task.completionThe resulting state of your systems, measured directlydeterministic
  • trajectory.validRequired steps present, no loops, within the step budgetdeterministic
  • tool.correctnessCorrect tool, valid arguments, no redundant or missing callsdeterministic
  • answer.groundedClaims supported by retrieved or tool-returned contextmodel-graded

Efficiency

What completion cost
  • efficiency.cost_per_successSpend per completed taskdeterministic
  • efficiency.tokens_per_successToken consumption per completed taskdeterministic
  • efficiency.latency_per_successElapsed time per completed taskdeterministic

Robustness

Whether performance holds under repetition and failure
  • reliability.pass_hat_kEvery one of k independent attempts succeedsdeterministic
  • reliability.pass_at_kAt least one of k attempts succeedsdeterministic
  • robustness.recoveryBehaviour when a tool fails part-way through a rundeterministic
  • robustness.multi_turnQuality across an extended, many-turn sessionmodel-graded

Safety

The boundaries an agent has to stay inside
  • policy.hard_rulesProhibited and required actions at the runtime checkpointsdeterministic
  • safety.injection_resistanceDirect and indirect injection, confused-deputy conditionsdeterministic
  • safety.tool_abusePrivilege escalation and unintended destructive callsdeterministic
  • safety.isolationSide effects confined to the sandboxdeterministic

Assurance

Whether the measurements themselves can be relied on
  • assurance.judge_agreementAgreement between the model judge and a sampled human reviewdeterministic
  • assurance.holdout_sealedHeld-out manifest unchanged and contamination probes silentdeterministic
  • assurance.evaluator_independenceThe grader saw only the artifact and the resulting statedeterministic
  • assurance.evidence_completeLedger present and the run reproduces the same verdictdeterministic

Measure identifiers are permanent. Where the meaning of a measure changes it receives a new identifier, so records already issued remain interpretable.

The release rule

A record may carry a ship verdict only where every gate has passed.

Gates are computed deterministically, and a model-graded measure cannot satisfy one. Where the held-out portion is unsealed, or a contamination probe has fired, the record cannot carry a ship verdict at any measured value.

Results are reported as a profile

Gates resolve to pass or fail, and every other measure is reported with its own tolerance. Collapsing them into a single figure discards the detail the record exists to preserve, and invites teams to optimise the headline while the behaviour drifts.

Thresholds belong to profiles

The specification defines how each measure is computed and leaves the acceptable value to a profile, which must be able to show the evidence behind it. A figure with reasoning attached survives scrutiny; a round number chosen for its appearance does not.

Conformance is self-asserted

An implementer states the level they meet, and the published suite lets anyone reproduce the claim for themselves. Verification stays open to third parties, which keeps the burden of proof on the implementation itself.

Tiers

Applying identical controls to a documentation fix and a payments change produces process that teams quietly route around. A profile declares a tier, and the tier determines which checks are mandatory. A profile may always demand more than its tier requires.

TierApplies toMandatory before release
T0Local, reversible changes with existing test coverageDeterministic checks
T1Cross-service changes, shared environments, external callersAdds a sealed held-out portion and a reliability threshold
T2Irreversible data, production impact, identity, payments, regulated decisionsAdds recorded human acceptance of the specific artifact, and a signature

Conformance levels

L1

Emitting

Produces a schema-valid record carrying genuine digests for the profile, subject and task set.

L2

Gated

Deterministic checks enforced, held-out portion sealed and fingerprinted, contamination probes present.

L3

Calibrated

Reliability reported across repeated runs, judge version pinned, evaluator independence asserted.

L4

Verifiable

Signed, and reproducible from the referenced ledger by an independent third party.

Level 4 addresses a specific failure mode. An immutable record guarantees only that whatever was submitted remains unchanged. Independent reproduction from the underlying ledger is what establishes that the submitted result was accurate in the first place.

The full specification

Record schema, the release rule, the measure registry and the conformance suite, on GitHub under CC BY 4.0 and Apache 2.0.

Open SPEC.md

Interop and emitters

SuperGauge is not an eval runner. Peer tools keep grading and tracing; an emitter serialises values they already hold into an Agent Quality Record afterward.

A system already exporting OpenTelemetry can point assurance.evidence at that ledger and claim higher conformance without a new harness. The draft mapping lives in RFC 0001. Emitter guides cover LangSmith, Google ADK and Inspect AI: map peer fields onto SPEC blocks, cite only published measure ids, and never let a judged score back a gate.

SuperQode emits at L2. SuperOptiX emits at L1. Other tools may emit or only consume records.

Emitter guides

LangSmith, Google ADK and Inspect AI: peer fields to AQR blocks, with deterministic vs judged reminders.

docs/emitters

OTel evidence mapping

Draft RFC for tool calls, policy decisions, attempt resets and measure derivation from OpenTelemetry.

RFC 0001

SPEC Β§8

Evidence formats the record may cite, including opentelemetry/1.x, without turning SuperGauge into a runner.

SPEC.md

Contributing

The specification is governed narrowly and the registry is open. The range of behaviour worth measuring exceeds any single team's experience, and the practitioners who know what a sound test looks like are frequently not the people who write specifications.

How changes are reviewed

Measures, profiles and adversarial packs require one reviewer from the measure group. The specification and schemas require two, one of whom is independent of the change. Two accepted proposals earn a place on the review rotation.

Contributions are made under a Developer Certificate of Origin sign-off in place of a contributor licence agreement. Authors retain copyright, which means a measure definition can be submitted without involving an employer's legal team. Specification text is licensed CC BY 4.0; schemas, packs and the conformance suite are Apache 2.0.

Commercial boundary

Stated in advance, so it holds no surprises. The record format, the registry, published profiles, the starter packs and the conformance suite are open and accept contributions.

Superagentic AI separately provides implementation engagements, extended adversarial coverage and managed operation. Calibration data gathered across those engagements remains commercial; where it supports a threshold well enough to publish, the threshold is contributed back to the public profiles. Nothing in this arrangement prevents others offering equivalent services.

Adoption

The format is open to any implementer, and the intention is to steward it with practitioners from across the agent quality field, not from a single company. SuperQode and SuperOptiX already emit records (SuperQode at L2, SuperOptiX at L1), and a tool may equally consume them without producing any.

ADOPTERS.md lists who is using the format, and takes a pull request from anyone who wants to be on it.

An open invitation

A record format earns its value from how many tools speak it. Evaluation platforms, agent frameworks, observability vendors, platform teams and audit tooling are all welcome to take it up.

Three ways in. Emit records after an evaluation, which for most tools is a serialiser over values they already hold. Consume records other tools produce. Shape the registry by proposing a measure, a profile or an adversarial pack.

Adoption carries no obligation, and a level you claim is one anyone can reproduce from a record you publish.

Status and scope

Version 0.1, draft. The specification may change incompatibly before 1.0.0. Measure identifiers, once published, are permanent regardless of version.

The subject of a record is your own agent and the harness around it. Assessment of third-party products answers a different question and lives in SuperRadar.

Want to implement agent quality?

Reading the specification is one thing. Building the task set, wiring the gates into a pipeline and keeping the suite current is a piece of work with an end. That is what the engagement covers, and your engineers own it afterwards.

Agent Quality