Skip to content

Eval integrity / registry status

The eval registry verifies 645 attestations end to end

The current served chain contains 7 preregistrations and 638 runs across 7 model endpoints. Its hashes make revision detectable; they do not make the eval construct valid by themselves.

Palimpsest Eval DeskPublished Updated

Thesis

Tamper evidence answers whether the served eval record changed, not whether the underlying measurement deserves a broader claim.

01

What verification establishes

The served registry verifies from genesis through 645 attestations, ending at sequence 644. It contains 7 preregistrations and 638 runs across 7 named model endpoints.Receipts evalevidence-698fa4aeec4f53d65d6c

02

What entered the current edition

The latest refusal reading matches 4 registry runs at 2026-08-11T02:28:16.121324+00:00 with no missing panel endpoint. Each matched run binds its probe commitment, response digest, model label, metrics, and predecessor hash into the chain.Receipts evalevidence-3c652ef1310228f8bac6, evalevidence-427692f8266365bd3cb9, evalevidence-698fa4aeec4f53d65d6c

03

What the chain still cannot prove

Hash-chain verification cannot establish that a refusal classifier measures the intended construct, that an endpoint label names fixed hidden weights, or that the panel represents all models. Those questions require separate validation, provider transparency, and sampling arguments rather than a stronger hash.Receipts evalevidence-427692f8266365bd3cb9, evalevidence-698fa4aeec4f53d65d6c

The strongest counterread

What this cannot establish

Reproduce it

From frozen prompts to a public claim

  1. 01

    Freeze

    Append a probe-set commitment before its result can enter the same registry.

    evalevidence-698fa4aeec4f53d65d6c
  2. 02

    Link

    Hash every attestation with its predecessor so deletion, reordering, and alteration change the head.

    evalevidence-698fa4aeec4f53d65d6c
  3. 03

    Match

    Require every current panel metric to equal its sealed run before building an article.

    evalevidence-3c652ef1310228f8bac6, evalevidence-427692f8266365bd3cb9
  4. 04

    Bound

    Keep chain integrity separate from classifier validity, model identity, and population claims.

    evalevidence-698fa4aeec4f53d65d6c, evalevidence-427692f8266365bd3cb9
Verify the chain offlinepython3 scripts/verify_eval_registry.py

Evidence ledger

Every cited value and its limit

Article JSON
ReceiptSource selectorExact valueInterpretation limit
evalevidence-698fa4aeec4f53d65d6ceval-registry Verified registry head and complete served-chain summary/ 
{"attestations": 645, "head_hash": "df5a6517dbc38a71336bb6b7f46d14e56b93e09797d8ff9f21ef10ae2fa0c807", "head_seq": 644, "head_ts": "2026-10-14T08:28:32.437226+00:00", "merkle_root": "e130d7be5d877b9eef423a2cc8481cada73aade434b929dea527a73ee61aed2b", "models": ["anthropic/claude-3-haiku", "deepseek/deepseek-chat", "meta-llama/llama-3.1-8b-instruct", "meta-llama/llama-3.3-70b-instruct", "mistralai/mistral-nemo", "openai/gpt-4o-mini", "qwen/qwen-2.5-7b-instruct"], "preregistrations": 7, "runs": 638}

Verification detects alteration, deletion, or reordering inside the served chain. The file alone does not prove an external wall-clock publication time.

Open source artifact
evalevidence-3c652ef1310228f8bac6eval-registry Current panel runs matched to the published reading/runs/ts=2026-08-11T02:28:16.121324+00:00 
[{"entry_hash": "62a21b26a246a63eb78ad1c01b43fa94d0f98961c26086ef0bdc77b62903ffd8", "model": "anthropic/claude-3-haiku", "probe_set_hash": "17f271e4f3b77a45a5f6e62ed60643f7111636a444e10b6d724714e84e1975fd", "responses_hash": "e0e792c2253bb3bf533a7bbade0856219c21da9acc4aa0dc19a40b5dcb1df0c8", "seq": 304, "suite": "frontier-overrefusal-v2"}, {"entry_hash": "0320438ee17a3f10c1cf0de23faf50756352c90456bca1a308a5172aaaabb9bd", "model": "meta-llama/llama-3.3-70b-instruct", "probe_set_hash": "17f271e4f3b77a45a5f6e62ed60643f7111636a444e10b6d724714e84e1975fd", "responses_hash": "c3608f9ef26c459ae843bbc6fb9ed4ba9e5be8f2d14e2f9cf898a5098fd4be75", "seq": 306, "suite": "frontier-overrefusal-v2"}, {"entry_hash": "fedd2360e36b61f3fc13abd4ee4b7a13442a355476e16a7f46838aa4d741b7ea", "model": "mistralai/mistral-nemo", "probe_set_hash": "17f271e4f3b77a45a5f6e62ed60643f7111636a444e10b6d724714e84e1975fd", "responses_hash": "ce0ba5f725ece9103ef2ba9ac215fc6232dfa3d379c398cd5cb190df6adb566a", "seq": 308, "suite": "frontier-overrefusal-v2"}, {"entry_hash": "a1197f007cbf1fdee8b5ae9b17b79aa0c843f6e7193aa55c28647d1ddad4ede4", "model": "openai/gpt-4o-mini", "probe_set_hash": "17f271e4f3b77a45a5f6e62ed60643f7111636a444e10b6d724714e84e1975fd", "responses_hash": "9c0c29fd1f190a61cc9d1d4a54b2c9894958960ed652e4be0aa5534cb67e2827", "seq": 302, "suite": "frontier-overrefusal-v2"}]

Exact metric matching proves publication consistency, not construct validity.

Open source artifact
evalevidence-427692f8266365bd3cb9refusal-drift-current Current suite scope and uncertainty method/method 
{"arm": "full-sweep", "method": "every question is a family of meaning-preserving wordings; the family is the statistical unit; new refusals (answered->refused) are the erasure events; the standing alarm is a mixture supermartingale, so the lifetime false-alarm rate is bounded under unlimited peeking", "method_version": 3, "model_count": 4, "suite": "frontier-overrefusal-v2"}

A verified chain does not widen the suite's sampled population.

Open source artifact

Quality gate

Why this article was allowed to publish

  • The eval registry verifies from genesis to the cited runs

    All 4 panel runs match verified registry attestations.

    registry-chain
  • Control failures are visible and constrain the interpretation

    A failed control produces an instrument warning, never a censorship claim.

    controls-accounted-for
  • The article reports denominators and uncertainty with the rate

    Family counts and Wilson 95% interval bounds remain attached to the score.

    uncertainty-visible
  • Every analytical sentence names exact evidence receipts

    6 of 6 analytical sentences carry citations.

    sentence-citations
  • Counterreadings, limitations, and reproduction steps are present

    The approved article shapes require all three surfaces before publication.

    adversarial-reading
  • No interviews or free-form model prose are represented as reporting

    Generated from sealed evaluation artifacts with a deterministic editorial template. No interviews and no free-form model prose were used.

    bounded-authorship

Correction record

The current head and every preserved revision

A later eval may update this living analysis. Prior structured revisions remain addressable and the current head points back to the one it replaced.