BoundedOps

Turn AI-agent boundaries into zero-side-effect adversarial tests, human-gated remediation, and version-bound development attestations.

Comment

What BoundedOps does

BoundedOps evaluates a versioned AI agent against its declared mission, tools, permissions, destinations, data rules, approval boundaries, and stopping rules. It converts those boundaries into a fixed-seed 24-scenario synthetic adversarial regression that cannot perform real target-system actions.

The reviewed result is PASSED WITHIN DECLARED AND TESTED SCOPE — technical attestation PASSED_WITH_LIMITATIONS; 19 PASS and 5 HUMAN_REVIEW_REQUIRED. This is development evidence, not universal safety or production certification.

Workflow

  1. Compile the declared mission and policy boundary.
  2. Run synthetic adversarial scenarios through a no-real-side-effect gateway.
  3. Apply deterministic checks for tools, permissions, destinations, data, approvals, duplicates, dependencies, schemas, signatures, integrity, and staleness.
  4. Produce typed findings and remediation proposals.
  5. Pause for an attributable human condition, rejection, or approval.
  6. Rerun affected scenarios and the complete fixed-seed regression.
  7. Emit immutable evidence and a version-bound development attestation.

Live Google proof

On 31 August 2026, exact accepted source c6399aea660222eb0d4a7c4878e66303e690b9e4 completed one bounded authenticated Google ADK 2.8 request to Gemini 3.5 Flash: one request, one contract-valid response, zero tool attempts, zero target executions, and zero real side effects. A synthetic Firestore workflow record and a restricted Cloud Storage evidence object passed read-after-write integrity verification.

The exact-source Linux/AMD64 image is deployed on Google Cloud Run in africa-south1 as revision boundedops-api-00001-lg2, with scale-to-zero and maximum one instance. The public judge UI is https://boundedops-api-mbwwceg6cq-bq.a.run.app/ . The hosted service deliberately remains the deterministic offline evaluation UI; the one live ADK/Gemini and persistence proof was separately bounded and evidence-recorded.

Safety and limitations

All evaluation fixtures are synthetic. BoundedOps executes no production user, payment, customer, or target-system action. Gemini and ADK cannot override deterministic failures or manufacture approval. Five protected scenarios remain HUMAN_REVIEW_REQUIRED. The attestation is a scoped development attestation, not production certification. The Cloud Run UI currently uses ephemeral JSON/filesystem workflow state; the separately verified Firestore and Cloud Storage adapters are not activated as the hosted service's default stores.

Built With

Share this project:

Updates