Research / Claims
Claims & evidence
We publish what we have implemented, what is still being developed, and what is not yet supported. Each claim links to its evidence source.
How to read the table
Each claim carries a status and the kind of evidence behind it.
Status legend
- VerifiedDirectly supported by implementation/tests.
- PreliminaryPartial; claim is broader than evidence.
- Design GoalTarget, not a current capability.
- UnsupportedNo evidence found; removed or rewritten.
Evidence types
- Implementation
- Supported by source code.
- Test
- Supported by automated tests.
- Benchmark
- Supported by measured performance.
- Deployment
- Observed in a running deployment.
- External
- Independently reproduced.
Claims table
| Project | Claim | Status | Evidence | Reproduce | Limitation |
|---|---|---|---|---|---|
| OVARA | Single-binary Go gateway with allow/deny/escalate decisions | Verified | Implementation - runtime/gateway/ | go build ./cmd/server | Actions bypassing the gateway are not controlled. |
| OVARA | 2 interceptor implementations wired (shell, Git); 14 action types recognized | Verified | Implementation - interceptors/ | Repository inspection. | GitHub and CI surfaces planned, not implemented. |
| OVARA | ed25519 machine identity | Preliminary | Implementation - keys generated; runtime validates strings, not signatures in V1 | Repository inspection. | Signature verification not enforced in V1 runtime check. |
| OVARA | ~4,010 dps HTTP throughput, ~19.76% errors | Preliminary | Benchmark - load_test.go | go test -run TestLoad ./tests/load/ | Not a production throughput guarantee. Error rate indicates tuning needed. |
| MAP | Released on npm as @sidianlabs/map v0.1.0 | Verified | Deployment - npmjs.com/package/@sidianlabs/map | npm view @sidianlabs/map | Released ≠ mature ≠ standardized. |
| MAP | Policy evaluation before adapter execution | Verified | Implementation - src/core/execute.ts:40 | npm test(54 tests pass) | Only governs registered actions. |
| MAP | Signed receipts (HS256/RS256 JWS, typ MAPSIG) | Verified | Test - signing.test.ts | npm test | Operator must configure persistent key; default is ephemeral. |
| MAP | ~2.47M policy evaluations/sec (5 rules, synthetic) | Preliminary | Benchmark - benchmark.test.ts | npm test(benchmark subtests) | Synthetic no-I/O microbenchmark. Excludes network, signing, persistence, adapter execution. |
| MAP | Python and Go SDKs stable | Preliminary | Implementation - source packages exist | Not independently reproduced. | Preview; not contract-aligned with TypeScript SDK. |
| MAP | EU AI Act compliance certification | Unsupported | No evidence. | N/A | MAP records audit artifacts; it is not a compliance certification. |
| DASH | Claim + Evidence + Edge data model with provenance | Verified | Implementation - pkg/schema/src/lib.rs | cargo test --workspace(416 tests pass) | Provenance ≠ truth. |
| DASH | Working Rust implementation with WAL and audit log | Verified | Test - pkg/store/src/wal.rs | cargo test --workspace | Single-node. Distributed operation under development. |
| DASH | Distributed / production-scale deployment | Design Goal | No quorum, leader election, or failover. 40% distributed readiness. | N/A | Under development. |
| DASH | HNSW ANN at 1B-claim scale | Design Goal | Current build is O(N²). | N/A | usearch-backed HNSW is future work. |
| POLICY.md | 12 condition operators, allow/deny/require_approval | Verified | Implementation - authorizationEngine.ts | npm test(21 tests pass) | Engine exists; enforcement requires host runtime. |
| POLICY.md | Working specification v0.2.0 | Verified | Implementation - SPECIFICATION.md | npm test | Draft spec; not a finalized industry standard. |
| POLICY.md | Installable via npm | Preliminary | Implementation - package.json exists at v0.2.0 | Not yet on npm. | Package not published. |
| Sidian | Live beta product at sidian.dev | Verified | Deployment - sidian.dev returns HTTP 200 | curl -sI https://sidian.dev | No public repo; cannot independently inspect internals. |
| Sidian | Multi-provider AI support | Preliminary | Deployment - product is live; provider list not independently audited | Not independently reproduced. | No public source for verification. |