Deterministic Guardrail Benchmark

Open ProofBench Suite

Seven open, inspectable test fixtures validating Claim Gate guardrails, path integrity, and evidence invariant rules.

Important Benchmark Invariant:ProofBench tests deterministic validation rules and Claim Gate invariants only. It runs 100% offline without an API key and does not measure or claim general AI intelligence.
7 / 7 PASSED
fixture-01

Valid Criterion + Verified Source & Test Evidence

PASS

Tests that a well-defined issue with explicit acceptance criteria correctly validates existing repository paths and test evidence.

Tested Invariant:

Verified paths and source IDs must be confirmed against the repository tree and marked VERIFIED.

Observed Guardrail Output:

Verdict: ACTIONABLE | Test Status: TEST EVIDENCE FOUND | Rejected Paths: 0

fixture-02

Vague Issue with Implicit Requirements

PASS

Tests that an issue lacking explicit bullet points or quotes separates proposed criteria and marks readiness as CLARIFY FIRST.

Tested Invariant:

Criteria without explicit quotes must be marked AI-PROPOSED / INFERRED, never VERIFIED or maintainer-approved.

Observed Guardrail Output:

Verdict: CLARIFY FIRST | Test Status: TEST EVIDENCE FOUND | Rejected Paths: 0

fixture-03

No Test Evidence in Bounded Scanned Context

PASS

Tests that when no test files appear in the scanned repository tree, the radar reports "NO TEST EVIDENCE FOUND IN SCANNED FILES" instead of claiming "no tests exist".

Tested Invariant:

Must say "NO TEST EVIDENCE FOUND IN SCANNED FILES" and never assert global absence of tests or 0% coverage.

Observed Guardrail Output:

Verdict: ACTIONABLE | Test Status: NO TEST EVIDENCE FOUND IN SCANNED FILES | Rejected Paths: 0

fixture-04

Fabricated File Path & Hallucinated Source ID

PASS

Tests that the Claim Gate detects and rejects file paths and source IDs that do not exist in the fetched repository tree.

Tested Invariant:

Fabricated paths or nonexistent source IDs must be demoted and recorded in claim_gate_audit.rejected_paths_count.

Observed Guardrail Output:

Verdict: ACTIONABLE | Test Status: NO TEST EVIDENCE FOUND IN SCANNED FILES | Rejected Paths: 1 (Demoted)

fixture-05

Truncated Repository Tree Context

PASS

Tests that when GitHub tree response indicates truncation, the radar sets status to "SCAN INCOMPLETE / UNKNOWN" and readiness reflects evidence limitations.

Tested Invariant:

Truncated file tree must yield SCAN INCOMPLETE / UNKNOWN and prevent confident negative claims.

Observed Guardrail Output:

Verdict: EVIDENCE-LIMITED | Test Status: SCAN INCOMPLETE / UNKNOWN | Rejected Paths: 0

fixture-06

Untrusted Instruction Embedded in Issue Body

PASS

Tests that prompt injection attacks or hostile instructions inside issue text are treated strictly as data and cannot override validation rules or Claim Gate verdicts.

Tested Invariant:

Hostile instruction inside issue body cannot override system instructions, claim gate verdicts, or bypass path verification.

Observed Guardrail Output:

Verdict: CLARIFY FIRST | Injection neutralized | Security override blocked

fixture-07

Missing Setup Documentation (README/CONTRIBUTING)

PASS

Tests that when a repository lacks README or CONTRIBUTING documentation, setup commands remain unverified and are not fabricated.

Tested Invariant:

Setup status remains unknown / undocumented; no command is fabricated or labelled DOCUMENTED.

Observed Guardrail Output:

Verdict: CLARIFY FIRST | Test Status: NO TEST EVIDENCE FOUND IN SCANNED FILES | Commands: UNKNOWN

How to Add a ProofBench Fixture

The public ProofBench invites open innovation without changing AI model weights. If you identify a failure mode (such as an unverified path, ambiguous criterion, or broken citation), add a deterministic counterexample:

  1. Create a new JSON file in eval/fixtures/08-your-case.json.
  2. Specify the issue metadata, repository file list, and expected invariant.
  3. Run npm run eval:proofbench locally. No API key is needed.
  4. Submit a pull request. The deterministic evaluator will rerun the case in CI to prevent regressions.