Why "Verified" Status is Just a Claim Until Gates Say No | Mycroft Audit

An engineering log from a Humanitarians AI fellow on the Mycroft project. After writing a 125-line attestation, he did not promote the recipe to verified, because no live run existed and a recorded gate denial outranks his own judgment.

3:15 video4 min readWatch on YouTube

This engineering log from Uday Sonawane, a fellow at Humanitarians AI, covers his week on the Mycroft project. He wrote the paperwork that says what he tested, and then he did not promote the thing it documents. The video argues that this refusal was the week's real work, and that a status such as "verified" is only a claim until the evidence behind it exists.

The attestation and three questions

Last episode, he gave two gates real failure paths. This week he wrote an attestation, 125 lines recording what he actually ran, and the recipe's own life cycle then told him he could not mark it verified. One of the gates he had just fixed was the reason. Three questions decide whether a status is a fact or a claim:

  • What did you run, in named rows rather than a feeling?
  • What did you not run, and is that written down where a reviewer will see it?
  • Did a gate say no?

The third matters because a recorded refusal has to outrank your own judgment, or it was never a gate.

What was run

The ask was ordinary: write the attestation in the house format, then set the status the evidence earns. For the first question, the suite had 17 rows, seven of them deliberate attempts to break the thing. It found 18 catalog defects, all at the exact location the manifest declares: eight in step three and ten in step four. A negative check confirmed that none of step four's ten leaked into step three's output, so neither step masks the other.

What was not run

The second question is, in the video's view, the half that makes the format worth anything. The log has ten entries under "did not test". Live execution never happened, not once. Nobody has checked whether the sentiment score means anything, since the weights came across with no derivation and no author. Wrong-entity rows are also unchecked: a row that is fresh, unique and complete but belongs to a different company, which no check catches. That class has already cost 782 purged rows.

Gate five and the life cycle

Gate five was break tested four ways. No live call and no record passes. No live call with a recorded denial passes. A live call with an approval passes. A live call against a recorded denial must fail, and that is the only case that proves the gate reads the decision rather than just counting that one exists. The life cycle runs draft, specified, runnable sample, runnable live, verified. The recipe sits at runnable sample, and reaching verified means passing through runnable live, whose test is a live run with a human clearing every gate. No live run exists, and gate five is recorded as deny. Writing verified would assert a run that never happened in a clearance that was refused.

Fixing the gates

The video is candid about the failures. Nine things broke during testing and had to be fixed, two of them the gates from last episode. Gate five was fixed twice: first it passed if you did nothing, then it passed on the mere existence of a decision record, so a denial cleared it exactly as an approval would. That means last week's episode shipped a gate already called fixed. The attestation is evidence the testing was real, not evidence the thing works. What verified would take is written out in order: implement live mode, build a second fixture set for the HTTP failures, reopen gate five, do a live run with every gate cleared, and write a fresh attestation against the version that actually ran. The first two steps are code, and the third is a judgment that has already been made once and was no.

Key takeaways

  • A status is a fact only if named test rows back it, and otherwise it is a claim.
  • Write down what you did not test where a reviewer will see it.
  • A recorded refusal must outrank your own judgment, or it was never a gate.
  • Break test a gate in cases that prove it reads the decision, not merely that a record exists.
  • A gate that cannot deny a build is not a real gate.
  • An attestation shows the testing was real, not that the thing works.
  • Reaching a status like verified should require the steps for it to be written out in order.

Try it yourself

Find something in your project that carries a status such as verified, passing or production ready. Ask what evidence would have to exist for that word to be true, and whether anything ever said no. If the answer is that nobody checked, the video's conclusion is that the word is a claim.

Chapters

  1. 0:00Introduction & Writing the Attestation Record
  2. 0:353 Questions to Decide if Status is Fact or Claim
  3. 1:15Test Suite Analysis: 17 Rows & 18 Catalog Defects
  4. 2:05The "Did Not Test" Log: Live Calls & Row Purges
  5. 2:55Gate 5 Denial & Refusing to Mark "Verified"
Full transcript(auto-generated, with timestamps)

Introduction & Writing the Attestation Record

[0:00]I'm Uday Sanawane, and this is my week on Mycroft. I wrote the paperwork that says what I tested, then I did not promote the thing it documents, and that refusal is the week's actual work. Last episode, I gave two gates real failure paths. This week, I wrote the attestation, 125 lines recording what I actually ran, and then the recipe's own life cycle told me I could not mark it verified. One of the gates I had just fixed was the reason. Three questions decide whether a status is a fact or just a claim. One, what did you run named rows, not a feeling? Two, what did you not run, and is that written down where a reviewer will see it? Three, did

3 Questions to Decide if Status is Fact or Claim

[0:36]A gate say no? Because a recorded refusal has to outrank your own judgment, or it was never a gate. The ask was ordinary, write the attestation in the house format, and then set the status the evidence earns. Question one, 17 rows, and seven of them are deliberate attempts to break the thing. 18 catalog defects, all 18 found at the exact location the manifest declares, eight in step three, 10 in step four. And a negative check, none of step four's 10 leaked into step three's output, so neither step is masking the other. Question two, and this is the half that makes the format worth anything. 10 entries under did not test, live execution never happened, not once. Whether the sentiment score means anything, nobody has checked, the

Test Suite Analysis: 17 Rows & 18 Catalog Defects

[1:16]Weights came across with no derivation and no author. And wrong entity rows, a row that is fresh, unique, and complete, and belongs to a different company. No check here catches it. That class already cost 782 purged rows. Question three, gate five was break tested four ways. No live call and no record passes. No live call with a recorded denial passes. A live call with an approval passes. And a live call against a recorded denial must fail. That is the only case that proves the gate reads the decision instead of just counting that one exists. So, here's what question three costs. The life cycle runs draft, specified, runnable sample, runnable live, verified. The recipe sits at runnable sample. Reaching verified means passing through runnable live, whose test is a live run with a human clearing every gate. No live run exists. Gate five is recorded, deny. Writing verified today would assert a run that never

The "Did Not Test" Log: Live Calls & Row Purges

[2:06]Happened in a clearance that was refused. The falsifiable part, nine things broke while I was testing and had to be fixed and two of them were the gates from last episode. Gate five got fixed twice. First it passed if you did nothing, then it passed on the mere existence of a decision record, so the denial cleared it exactly as an approval would, which means last week's episode shipped a gate I had already called fixed. The attestation is evidence the testing was real. It is not evidence the thing works. Scored, what did I run? 17 rows, seven of them adversarial. What did I not run? 10 entries written down. Did a gate say no? Yes, and the status did not move. What verified would take is already written out in order. Implement live mode, build a second fixture set for the HTTP failures, reopen gate five, do a live run with every gate cleared, and write a fresh attestation against whatever version actually ran. Steps one and two are code. Step three is a

Gate 5 Denial & Refusing to Mark "Verified"

[2:56]Judgement and it has already been made once and it was no. Your turn, find something in your project that carries a status verified, passing, production ready. Then ask what evidence would have to exist for that word to be true and whether anything ever said no. If the answer is that nobody checked, the word is a claim. The status is a claim.

More from Mycroft Financial AI

Humanitarians AI Lyrical Literacy Project