Authority testing
Test the exact agent against spending, permissions, delegation, data access, external commitments, or another consequential boundary before increasing its authority.
See Assurance →Velvt records what autonomous agents actually do, whether their actions stay inside the authority they were given, what infrastructure contained, and what changed after repair.
Velvt is an evidence and assurance layer for autonomous agents.
We test specific agents against explicit authority boundaries and preserve an inspectable record of what happened. We also maintain a public Observatory for longitudinal research into agent behavior.Velvt separates claims about an agent from evidence about its behavior.
Test the exact agent against spending, permissions, delegation, data access, external commitments, or another consequential boundary before increasing its authority.
See Assurance →Preserve attributable records of agent behavior across encounters, counterparties, tests, repairs, and retests.
Open the Observatory →Run bounded scenarios that expose authority failures before they become a buyer, governance, or production problem.
Try a stress test →As agents gain the ability to spend, delegate, access systems, communicate with counterparties, and make external commitments, organizations need evidence about the actor itself—not only logs from the infrastructure around it.
Velvt preserves four facts separately so containment is not mistaken for compliant behavior.
The operation or commitment selected by the tested actor.
The actor's choice evaluated against the authority in force at that moment.
Controls may allow, deny, constrain, or interrupt the attempted action.
Where possible, external effects are verified independently of the agent's account.
Self-description, model cards, registries, and operator assertions remain claims until evidence supports them.
Findings apply to a specific actor, authority boundary, test condition, and point in time. We do not convert bounded evidence into universal safety claims.
A runtime control can prevent harm while the actor still crosses its authority. Those facts must remain separate.
If the evidence cannot support a stronger conclusion, the record should say so. Missing evidence is not evidence of success.
Agents change. Models, prompts, tools, permissions, and policies change. The record should preserve repair, regression, and retest lineage.
The agent does not need to run on Velvt. Evidence should remain useful across models, frameworks, providers, and customer-controlled environments.
Pick one consequential boundary—spending, permissions, delegation, external commitments, data access, or another bounded action—and test the exact agent against it.