Proof for every run before it is reused.

teleon.dev/docs/assurance keeps an append-only record of evidence for each run: content-addressed inputs and outputs, audit logs, cost, and the verdict of the promotion gate that decides whether a result can be reused.

teleon.dev/docs/assuranceEvidence v1httpsjson

Read the docs Copy the agent prompt

Evidence, appended in order

Time	Event	Hash	Verdict
22:41:07	inputs pinned	a91f…
22:41:52	sandbox run	07be…	Pass
22:42:10	contract tests	5d2c…	25 of 25
22:42:11	gate	e3a0…	Promote

Each row hashes the one before it, so the record reads back exactly as written.

What it does

Append-only evidence

Records are added and hashed; history reads back exactly.

Gate before reuse

A result is promoted only after its checks pass at the gate.

Cost on the record

Each run's spend sits beside its evidence for audits and budgets.

The contract

An assurance record links inputs, outputs, checks, cost and the gate verdict by content ID.

Recordteleon_assurance_record/v1

AddressingSWHID for every input and output

VerdictsPromote or hold, with reasons

AccessRING-3 to read verdicts; RING-1 for full logs

Identifiers

teleon_assurance_record/v1
swh:1:cnt:sha1_git

Execution contracts

Sample recordCopy

{
  "run": "run_55120",
  "inputs": ["swh:1:cnt:ef1e...845e"],
  "outputs": ["swh:1:cnt:91aa...0b"],
  "checks": {"contract_tests": "25 of 25", "sandbox": "pass"},
  "cost_cents": 11,
  "gate": "promote"
}

Endpoints

Method	Path	Access	What it does
`GET`	`/assurance/v1/runs/{run}`	RING-3	Read a run's evidence and verdict
`GET`	`/assurance/v1/runs?gate=hold`	RING-1	List runs held at the gate
`POST`	`/assurance/v1/records`	RING-2	Append evidence for a run

Listed paths appear in the service’s published files today. In the one-host plan every path here is served under api.teleon.dev/v1/assurance.

How it connects

Reads from

Verification sandboxteleon.dev/docs/sandbox Code-only evaluatorsteleon.dev/docs/evaluators Royalty ledgerteleon.dev/docs/ledger

Feeds into

Auditorsteleon.dev/docs/auditors Capability cardsteleon.dev/docs/cards Control towerteleon.dev/docs/admin

Queuesaq11 aq24 aq86

StoresS6 Versioned Schemas, Lineage, Scorecards and Private Vault

For agents

Give your agent the read-only guide first. It reports back before any write.

Agent prompt

Read https://teleon.dev/docs/assurance and fetch the evidence for one run. Read only.

Copy

llms.txt Agent card

Words on this page

Full glossary

SWHID: Software Heritage identifier: a permanent ID made from a file's hash, such as swh:1:cnt: followed by 40 hex digits.
Deterministic check: A check written as code that gives the same answer every time for the same input, at code speed and cost.
CPOP: Cross-provider pairing: the model family that checks a result differs from the one that made it.