Almanak
scheduled surveillance currently re-tests the pinned upstream commit; upstream-version advancement remains a separate controlled update
Surveillance manifestHow much authority should you give an AI agent?
DN Agent Trust turns executed safety evidence into exposure classes, control scores and machine-readable risk profiles. Unclassified does not mean unsafe. It means DN does not yet have enough evidence to assign an exposure class.
5systems tracked
1classified
v1.6Risk Graph
5/5current surveillance passes
Public leaderboard
Machine-readable APIFive-system evidence comparison
Alphabetical order. Different test surfaces cannot support a safest-to-least-safe ranking.
| System | Exposure class | Evidence confidence | Verified controls | Evidence mode | Surveillance | |
|---|---|---|---|---|---|---|
| AlmanakAlmanak | E3: Meaningful Financial Authority (provisional) | 99.8/100 | 62 | fork-onchain-open-position-executed | current-passallocationLimits: current-pass 2026-10-26T07:47:39.924902+00:00crossProtocolExposure: current-pass 2026-10-26T07:47:39.924902+00:00gatewayAuthorization: current-pass 2026-10-26T07:47:39.924902+00:00signerRecovery: current-pass 2026-10-11T09:41:12.514695+00:00openPositionContainment: current-pass 2026-10-11T09:41:12.514695+00:00 | View profile |
| Coinbase AgentKitCoinbase | Unclassified | 78/100 | 7 | code-executed-upstream-unit-boundary-tests | current-passcapabilityBoundary: current-pass 2026-10-26T10:07:12.818455+00:00 | View profile |
| Definitive FlashDefinitive | Unclassified | 88/100 | 9 | code-executed-upstream-signed-execution-boundary-tests | current-passsignedExecutionSafety: current-pass 2026-10-26T10:33:38.532011+00:00 | View profile |
| Liquid Co-Invest / Co-Invest ComputerLiquid | Unclassified | 88/100 | 8 | code-executed-upstream-mcp-authorization-and-idempotency-tests | current-passmcpAuthorizationSafety: current-pass 2026-10-26T11:35:11.890513+00:00 | View profile |
| Virtuals EconomyOS / ACPVirtuals Protocol | Unclassified | 92/100 | 9 | code-executed-upstream-commerce-state-and-payment-integrity-tests | current-passcommerceStateIntegrity: current-pass 2026-10-26T11:18:30.364369+00:00 | View profile |
What the recurring tests establish
Five-system financial-agent evidence cohort; not a general managed-runtime portability or performance benchmark.
Alphabetical comparison, not a safety ranking. Evidence confidence is DN's assessment score, not a probability of safety or measured coverage. Test counts and control counts are not comparable assurance scores. A passing feed does not confer or upgrade an exposure class. Missing, stale and failed observations remain visible. No production certification.
Coinbase AgentKit
surveillance re-tests deterministic upstream boundary suites with mocks rather than live wallet execution
Surveillance manifestDefinitive Flash
surveillance re-tests deterministic upstream signed-execution suites and fake-client reconciliation rather than live trading or production API authorization
Surveillance manifestLiquid Co-Invest / Co-Invest Computer
surveillance re-tests the public local MCP client and mocked HTTP boundary rather than Liquid's private backend or live order execution
Surveillance manifestVirtuals EconomyOS / ACP
surveillance re-tests deterministic upstream commerce-state and payment-integrity unit suites rather than live escrow, production settlement, dispute adjudication or wallet authorization
Surveillance manifestFreshness evaluated at 2026-10-31T00:38:47.290Z. Weekly feeds become stale after eight days; monthly feeds after 35 days. Pending means the scheduled feed has no persisted observation.
Observe Only
No meaningful authority or value exposure.
Low-Risk Informational
Read, analyze or recommend with minimal execution authority.
Bounded Commercial
Limited commercial actions inside tightly defined controls.
Meaningful Financial Authority
Material financial actions with verified limits, recovery and containment.
High-Assurance Autonomous Counterparty
Highest assurance tier. Requires deeper longitudinal and production evidence.
DN is measuring authority, not popularity.
A system can have a strong brand, large user base or impressive model and still be unsuitable for meaningful financial authority. DN separates identity, reputation, authorization, financial limits, recovery, containment and infrastructure evidence so one strong dimension cannot hide a failed critical control.