{"slug": "agent-evidence-levels-ael-grading-the-evidence-your-ai-agent-leaves-behind", "title": "Agent Evidence Levels (AEL): grading the evidence your AI agent leaves behind", "summary": "A developer building an agent firewall created Agent Evidence Levels (AEL), an open standard that grades how much of an AI agent's recorded actions an outside party can verify without trusting the vendor or operator. The standard includes levels AEL-0 through AEL-4, a reference checker, and a conformance corpus, all open-sourced on GitHub. The developer aims to donate the standard to a neutral home once it gains traction.", "body_md": "I build an agent firewall, and the question I keep hitting is not \"did it block the attack.\" It is \"how would anyone else *know* what my agent did, without taking my word for it.\" Most tools answer that with \"we keep tamper-proof logs\" and stop. That phrase claims the strongest property that still requires trusting whoever holds the signing key. So I wrote down a way to grade the gap, as an open standard, and shipped it with a checker so nobody has to trust me about it either.\n\nAgent Evidence Levels (AEL) grades a record of what an AI agent did by one question: how much of it can an outside party verify, and how much omission can they detect, without trusting the vendor or the operator? It runs AEL-0 through AEL-4, and it ships with a runnable reference checker and a conformance corpus, so a grade is something you demonstrate, not something you assert.\n\nA grade is the minimum across the required dimensions, cumulative from AEL-0. There is a reproducibility suffix, R, for when the recorded decision can be re-derived from the recorded inputs.\n\nNo level proves completeness against the party holding the signing keys. A keyholder can construct a clean history, sign every part of it, and pass every internal check. Omission-evidence is bought only with additional signed evidence, one verified keyholder at a time, and organizational independence stays declared unless it is established outside AEL. Each level states plainly the limit it does not cover. That honesty is the point of the scale.\n\nThe spec, the reference checker, and the conformance corpus are public and open-source. It is authored under my company and meant to be donated to a neutral home once the vocabulary has a life of its own. I would rather find the holes now than defend them later, so if a level claims more than the checker proves, open an issue and show me.\n\n[github.com/luckyPipewrench/agent-evidence-levels](https://github.com/luckyPipewrench/agent-evidence-levels)\n\nRun the checker on your own agent's evidence, or on a vendor's, and read the grade for yourself.", "url": "https://wpnews.pro/news/agent-evidence-levels-ael-grading-the-evidence-your-ai-agent-leaves-behind", "canonical_source": "https://dev.to/luckypipewrench/agent-evidence-levels-ael-grading-the-evidence-your-ai-agent-leaves-behind-56n0", "published_at": "2026-07-04 02:15:07+00:00", "updated_at": "2026-07-04 02:48:42.369268+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-research", "developer-tools", "ai-infrastructure"], "entities": ["Agent Evidence Levels", "AEL", "GitHub", "luckyPipewrench"], "alternates": {"html": "https://wpnews.pro/news/agent-evidence-levels-ael-grading-the-evidence-your-ai-agent-leaves-behind", "markdown": "https://wpnews.pro/news/agent-evidence-levels-ael-grading-the-evidence-your-ai-agent-leaves-behind.md", "text": "https://wpnews.pro/news/agent-evidence-levels-ael-grading-the-evidence-your-ai-agent-leaves-behind.txt", "jsonld": "https://wpnews.pro/news/agent-evidence-levels-ael-grading-the-evidence-your-ai-agent-leaves-behind.jsonld"}}