Idea Lab · Oct 20 2026 · AI idea demo

Witness

Witness reads an agent's status report and turns each operational claim into a small read-only probe: an HTTPS check, a service status, a port, a file. It then hands back the same report with every claim marked confirmed, contradicted or uncheckable, so "deployed and verified" is something a machine checked rather than something an agent said. In this demo the report is example text and the probes run against a simulated environment you control with the switches below; nothing touches a real server.

Agent report

Example data · fictional fleet

Simulated environment

Health URL responds 200 model-small unit is running model-large unit is running Port 8443 open on node-2 /etc/fleet/router.yaml present Certificate valid

Annotated report

Probes are simulated. A real Witness would run them from one trusted host with read-only credentials.

What to try

Press Run Witness: the model-large claim comes back contradicted, because the simulated unit is off.
Turn on "model-large unit is running" and run again to watch it flip to confirmed.
Edit the report: add a line like "Port 5432 is open on node-3" or "Service queue-worker is active" and see a new probe appear.
Notice the backups line: there is no probe for it, so Witness marks it uncheckable instead of guessing.