Skip to content
View AUTHENSOR's full-sized avatar

Block or report AUTHENSOR

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
AUTHENSOR/README.md

Authensor

AI evaluation integrity.
We break the benchmarks, judges and scoring pipelines AI is measured with, and attest the ones that hold.


Authensor is a security research firm in San Francisco, founded by John Daniel Kearney. It audits the instruments the AI industry measures itself with: evaluation harnesses, benchmarks, LLM judges, leaderboards and scoring pipelines.

Every defect we report is proven with a running reproduction against the genuine code at a pinned commit, and disclosed to the maintainer first. Fixed-scope audits end in an attestation with a scope, a standard version and an expiry date.

Research

  • The Evaluator Trust Boundary (ETB-01 to ETB-10). An evaluator has an ETB failure when its score depends on an artifact the evaluated system can influence. The page lists dated cases with upstream fixes in SWE-bench, Promptfoo, NVIDIA garak and the UK AI Security Institute's Inspect and ControlArena. Preprint: 10.5281/zenodo.21633620.
  • etb-scan, an offline scanner that measures ETB-01 (injected verdicts) against your own judge. Standard library only, no API keys, MIT.
pip install etb-scan
etbscan --judge mypkg:judge --trials 10
  • The ledger: every defect filed, every fix that landed upstream, and every target read and found sound. Includes the MLflow CVE-2026-64849 credit.

Work with us

Evaluation-integrity audits, and a free claim check: one published number checked against the instrument that produced it, within 48 hours.

authensor.com · john@authensor.com


The retired agent-safety toolkit

This repository first held Authensor's open-source agent-safety toolkit: the policy engine, the Aegis content scanner, the Sentinel monitor, SafeClaw and the @authensor npm packages. That product line is retired and no longer maintained. Its code and documentation stay here for reference:

Quickstart · Features · Red teaming · API reference · Deployment · Development

License

MIT.

Pinned Loading

  1. AUTHENSOR AUTHENSOR Public

    AI evaluation integrity research. We audit the benchmarks, LLM judges and scoring pipelines AI is measured with, and file every fix upstream.

    TypeScript 2

  2. ai-seclists ai-seclists Public

    AI security payloads and wordlists: prompt injection, jailbreaks and model exploitation. The SecLists of AI, from Authensor.

    HTML 2

  3. prompt-injection-benchmark prompt-injection-benchmark Public

    Standardized benchmark for prompt-injection scanners. Run your scanner, get a score. From Authensor.

    TypeScript 1 1

  4. SafeClaw SafeClaw Public archive

    Retired (October 2026). Formerly an AI agent that gated every action through Authensor.

    JavaScript 4