CSOAI — Council of AI

CSOAI — Council of AI — is the public measurement service operated by CSOAI Ltd, a company incorporated in England and Wales on 2 January 2026 (Companies House 16939677), founded by Nicholas Templeman. We run AI systems and digital rails against published instruments, grade deterministically where the method permits it, publish signed evidence and corrections, and keep unmeasured or uncheckable states visible. Verification is free. We measure; we do not certify, accredit, issue legal-compliance determinations, sell a rank, or take money from anything we rank.

23 axes measured · 14 model comparisons: 0 separated · 7 TIE · 7 UNTESTED · 9 fact runs · TIE is TIE · not a certificate.

derived 2026-10-29T04:06:17Z by scripts/github/org-readme.py — every number on this page is read live from the URLs in that script; if this page and the API disagree, the API is right.

The board today

GET https://councilof.ai/api/gspc — schema csoai.gspc-axes/0.5 · totals.public_count = 33 axes · 23 measured · 14 model fleets · 9 fact runs · 9 public leader scores.

#	axis	family	kind	n	status	separation	leader carried?
1	governance	gspc	model-comparison	237	MEASURED	TIE	yes — accuracy 0.5865
2	safety	gspc	model-comparison	36	MEASURED	TIE	yes — accuracy 0.9444
3	provenance	gspc	model-comparison	32	MEASURED	TIE	yes — accuracy 0.7188
4	continuity	gspc	model-comparison	33	MEASURED	TIE	yes — accuracy 0.6061
5	conformance	gspc	model-comparison	35	MEASURED	TIE	yes — accuracy 0.7143
6	openness	gspc	model-comparison	32	MEASURED	TIE	yes — accuracy 0.8438
7	machinery-conformity	gspc	model-comparison	33	MEASURED	UNTESTED	no — no signed card
8	care	gspc	model-comparison	199	MEASURED	TIE	yes — accuracy 0.405
9	cross-reality	gspc	model-comparison	32	MEASURED	UNTESTED	no — no signed card
10	detector-interop	gspc	model-comparison	33	MEASURED	UNTESTED	no — no signed card
11	art5-safeguard	gspc	model-comparison	36	MEASURED	UNTESTED	no — own model led, excluded
12	swarm	gspc	model-comparison	37	MEASURED	UNTESTED	yes — accuracy 0.4444
13	affect	gspc	model-comparison	41	MEASURED	UNTESTED	no — own model led, excluded
14	jail	gspc	model-comparison	71	MEASURED	UNTESTED	yes — accuracy 0.5915
15	effect-binding	gspc	deterministic-facts	261	MEASURED	—	no leader by design (facts run)
16	provenance-controls	financial	deterministic-facts	6	MEASURED	—	no leader by design (facts run)
17	reserve-attestation	financial	deterministic-facts	16	MEASURED	—	no leader by design (facts run)
18	regulatory-framework	financial	deterministic-facts	16	MEASURED	—	no leader by design (facts run)
19	distribution-integrity	financial	deterministic-facts	16	MEASURED	—	no leader by design (facts run)
20	custody-disclosure	financial	deterministic-facts	16	MEASURED	—	no leader by design (facts run)
21	ai-adoption-components	financial	deterministic-facts	2	MEASURED	—	no leader by design (facts run)
22	labour-components	financial	deterministic-facts	2	MEASURED	—	no leader by design (facts run)
23	humanoid-labour-index	financial	deterministic-facts	8	MEASURED	—	no leader by design (facts run)
24	lab-practice	subject	declared-slot	0	UNMEASURED	—	—
25	company-practice	subject	declared-slot	0	UNMEASURED	—	—
26	measurer-integrity	subject	declared-slot	0	UNMEASURED	—	—
27	harness-fidelity	subject	declared-slot	0	UNMEASURED	—	—
28	interop-conformance	subject	declared-slot	0	UNMEASURED	—	—
29	humanoid-deployment	subject	declared-slot	0	UNMEASURED	—	—
30	regulator-transparency	subject	declared-slot	0	UNMEASURED	—	—
31	interpretability-reproducibility	subject	declared-slot	0	UNMEASURED	—	—
32	claim-maintenance	subject	declared-slot	0	UNMEASURED	—	—
33	serving-fidelity	subject	declared-slot	0	UNMEASURED	—	—

Counted from the axes array at derive time: 33 rows — MEASURED 23, UNMEASURED 10 — agrees with totals.axes. Separation over the 14 model-comparison axes: SEPARATED 0 · TIE 7 · UNTESTED 7. A TIE is not a win; UNTESTED is not a win; a facts run has no leader. Living stamp: SIGNED (did:web:csoai.org#board-attestation-1). Board data: CC-BY-4.0.

What a stranger can verify in four curls

# 1. the lid — the one sentence the board is allowed to say about itself
curl -s https://councilof.ai/api/gspc | python3 -c 'import sys,json; print(json.load(sys.stdin)["totals"]["lid"])'

# 2. the signed public root — Merkle root, leaf count, timestamp (card_count MUST equal len(card_sha256))
curl -s https://councilof.ai/root.json | python3 -c 'import sys,json; r=json.load(sys.stdin); print(r["merkle_root"], r["card_count"], len(r["card_sha256"]), r["as_of"])'

# 3. pin the card key from the DID document — never trust the key a card ships with
curl -s https://csoai.org/.well-known/did.json | python3 -c 'import sys,json,base64; k=[v for v in json.load(sys.stdin)["verificationMethod"] if v["id"].endswith("#card-attestation-1")][0]["publicKeyJwk"]["x"]; print(base64.urlsafe_b64decode(k+"="*(-len(k)%4)).hex())'

# 4. verify any card against that pinned key — three states only: VALID · INVALID · UNCHECKABLE
pipx run --spec 'csoai-gspc[verify]' csoai-gspc verify "$(curl -s https://councilof.ai/signed/card_index.json | python3 -c 'import sys,json; print(json.load(sys.stdin)["cards"][0]["card"])')"

The integrity stack

Ed25519 cards → Merkle root → transparency-log witness → corrections ledger. Each layer has a live URL.

layer	live now	where
1 · Ed25519-signed measurement cards	335 cards (n_cards == n_cells: True), one key d4cb0eaa… = did:web:csoai.org#card-attestation-1	/signed/card_index.json · how to verify
2 · Signed Merkle public root	csoai.public-root/v1 · root 2b32dbff20e7… · 325 leaves (card_count == len(card_sha256): True) · as_of 2026-10-28T01:21:49Z · signed: True	/root.json · how to verify the root
3 · Transparency-log witness	Rekor WITNESSED · OpenTimestamps CONFIRMED_BITCOIN · EAS NOT_YET · witnessed root 2b32dbff20e7… equals live root.json at derive time: True · pointer's own last drift check DRIFTED at 2026-10-28T20:45:52Z · conflict NONE	/interop/root-witness-pointer.json · sidecar
4 · Corrections ledger	93 entries · latest C-2026-1006-13 (2026-10-06) · signature_state VALID · CC-BY-4.0	/api/corrections
Living board stamp	SIGNED under did:web:csoai.org#board-attestation-1	/api/gspc → measured_on.living_stamp
Third-party Hub cells	438 cells: MEASURED 438 · UNMEASURED 0 · complete read: True (as_of 2026-10-29T04:06:11.867Z — re-GET /api/hub-cards → .counts; never freeze)	/api/hub-cards
Keys (DID)	did:web:csoai.org · 7 verification methods · card key x=1MsOqhbV9Q…	/.well-known/did.json
A2A agent card · x402 manifest	Council of AI — Measurement Agent, 12 skills · csoai.x402/0.2, network eip155:8453, mode live, 31 metered resources	/.well-known/agent.json · /.well-known/x402.json

Four populations appear above on purpose and are never reconciled here: the signed-card index (335 via /signed/card_index.json), the living /api/cards registry (336), the public-root leaf count (325 via /root.json), and the Hub cells (live GET /api/hub-cards → .counts; currently 438/438/0). Quote each with its URL. Ceremony: card verify ≠ root inclusion — signed-index/root identifier overlap = 0; never sell “335 in the root.”

Non-self payers (publisher metric): distinct_nonself_payers = 3 all-time · 3 in 30 d · 4 settlements · publisher status MEASURED — read from /api/revenue. Payment principals do not establish independent customers, delivery, buyer acceptance or repeat use.

Products

Evidence artefacts behind an x402 door — never a grade, never a price on this page.

product	what you get	door (live status at derive time)
commission-card	Commission a signed card (request-attestation)	/api/request-attestation?subject=csoai&axis=honesty → 402
evidence-bundle	Evidence bundle mapped to an obligation	/api/evidence-bundle?obligation=article-50&subject=csoai&bundle=1 → 402
eu-ai-act-pack	EU AI Act pack (Article 50 / 53 transparency)	/api/evidence-bundle?obligation=article-53&subject=csoai&bundle=1 → 402
swift-bank-pack	SWIFT/bank census evidence pack	/api/evidence-bundle?obligation=dora&subject=csoai&bundle=1 → 402
xrpl-asset-evidence	XRPL asset evidence card (per request)	/api/rwa/evidence?asset=RLUSD → 402
signed-data-feed	Signed data feed (assembly + cadence)	/api/eunomia-data?feed=1 → 402
provider-diff-feed	Provider document diff feed	/api/feeds/provider-diff?history=1 → 402
receipts-batch	Receipts batch (historical measurement leaves)	/api/receipts/batch?from=2026-09-01&to=2026-09-05 → 402
art50-marking-evidence	Article 50 transparency marking evidence (per asset)	/api/art50/marking-evidence?url=/ → 402

9 products read from docs/product/_INDEX.json (as_of 2026-09-06T06:00:18Z). A 402 means the door is metered by x402 and the amount appears only in that 402 challenge — never here, never on the board. Verification of every artefact is free.

Where the board is published

surface	what lands there	read back at derive time	carries the live root as_of?
Hugging Face dataset csoai/gspc-board	snapshot/ — board.json + root.json byte-for-byte, SNAPSHOT.json, check-board.sh, gspc-axes.csv/.jsonl	as_of 2026-10-27T21:20:49Z · merkle a2620ac322c5… · 325 leaves · modified 2026-10-29T02:32:20.000Z	no — behind
Hugging Face Space csoai/gspc-board	the same snapshot/ folder beside the one living Space	runtime RUNNING · modified 2026-10-28T05:16:00.000Z	n/a
Kaggle dataset nicktempleman/csoai-gspc-living-board	a new dataset version per changed fingerprint; the subtitle carries as_of	HTTP 200 · latest ISO timestamp on the listing page 2026-10-28T05:15:51Z	no — behind
GitHub mirror CSOAI-ORG/gspc-board	the snapshot files on main	as_of 2026-10-27T21:20:49Z · merkle a2620ac322c5… · 325 leaves	no — behind
Zenodo 10.5281/zenodo.22293340	a new version under the concept DOI, isDerivedFrom the methodology	1 versions · latest 10.5281/zenodo.22344048 = as_of 2026-09-05T09:00:28Z (2026-09-05)	no — behind
PyPI csoai-gspc	csoai-gspc==0.2.<YYYYMMDD> — reader + verifier, snapshot bundled as package data	0.2.20261027 · uploaded 2026-10-28T03:29:34 · Apache-2.0	n/a
npm csoai-gspc-mcp	stdio MCP server over the same endpoints (published by hand — the account is WebAuthn, so the daily spray cannot push here)	0.2.4 · published 2026-10-28T16:48:34.768Z · Apache-2.0	n/a

Pushed by scripts/spray/gspc-spray.py (daily, idempotent by as_of and fingerprint). The live root as_of at derive time was 2026-10-28T01:21:49Z; a surface that lags is shown lagging, not reconciled. Board data is CC-BY-4.0; the reader packages are Apache-2.0 / Apache-2.0.

Also on the Hub: csoai — 122 datasets (frozen banks, hub cards), 25 Spaces, 2 models. Methodology record 10.5281/zenodo.21991104 — record unavailable at doi.org since 29 Sep 2026, see the dated notice — latest version UNCHECKABLE (UNCHECKABLE). Board snapshot cited on 2026-09-05: 10.5281/zenodo.22344048 = as_of 2026-09-05T09:00:28Z, under concept 10.5281/zenodo.22293340. Our own models losing our own arena: councilof.ai/honesty.

Where we take part

CSOAI Ltd has 35 recorded participations (as_of 2026-10-07) — standards bodies, registries, scholarly identifiers, regulatory consultations and policy programmes. Each entry names its evidence: a public URL you can open, or a dated record on file when the evidence is private. We list what we are, and what we are not.

Participation is not endorsement, and a listing is not adoption. We are not a regulator, not a notified body and not accredited for anything.

Standards bodies

• W3C AI KR CG · participant, since 2026-09-22 · public evidence · state: VERIFIED
• W3C Agent Conformance CG · participant, since 2026-09-22 · public evidence · state: VERIFIED
• W3C Agent Identity CG · participant, since 2026-09-22 · public evidence · state: VERIFIED
• IETF Internet-Draft · filed, since 2026-09-05 · public evidence · state: VERIFIED
• IETF scitt list · participant, since 2026-08-29 · public evidence · state: VERIFIED
• IETF agentproto list · participant, since 2026-09-05 · public evidence · state: VERIFIED
• IETF audit list · participant, since 2026-09-05 · public evidence · state: VERIFIED
• C2PA · member, since 2026-08-06 · public evidence · state: VERIFIED
• DIF · member, since 2026-08-18 · evidence on file (private) · state: VERIFIED
• OSAIA · member, since 2026-09-21 · evidence on file (private) · state: VERIFIED
• BSI ART/1 comments · contributor, since 2026-09-15 · evidence on file (private) · state: VERIFIED

Registries & indexes

• mcpservers.org · listed, since 2026-09-05 · evidence on file (private) · state: VERIFIED
• MCP Registry · listed, since 2026-09-26 · public evidence · state: VERIFIED
• PayAI discovery · listed, since 2026-09-22 · public evidence · state: VERIFIED
• Hugging Face · registered, since 2026-09-22 · public evidence · state: VERIFIED
• PyPI · registered, since 2026-08-13 · public evidence · state: VERIFIED
• npm · registered, since 2026-08-28 · public evidence · state: VERIFIED
• OpenSSF Best Practices · registered, since 2026-09-01 · public evidence · state: VERIFIED
• Software Heritage · registered, since 2026-09-02 · public evidence · state: VERIFIED
• Smithery · listed, since 2026-09-22 · public evidence · state: VERIFIED
• Awesome AI Leaderboard · listed, since 2026-07-23 · public evidence · state: VERIFIED
• Claude connector directory · listed, since 2026-10-07 · public evidence · state: UNVERIFIED

Scholarly identifiers

• ORCID · registered, since 2026-08-22 · public evidence · state: VERIFIED
• Zenodo DOI · registered, since 2026-08-18 · public evidence · state: UNVERIFIED
• OpenAIRE · listed, since 2026-09-22 · public evidence · state: VERIFIED
• Wikidata · registered, since 2026-08-19 · public evidence · state: VERIFIED
• ROR request · applied, since 2026-09-02 · public evidence · state: PENDING

Regulatory filings

• NIST AI 200-2 comment · filed, since 2026-09-17 · evidence on file (private) · state: VERIFIED
• NIST AI 300-1 comment · filed, since 2026-09-16 · evidence on file (private) · state: VERIFIED
• NIST SP 800-239 comment · filed, since 2026-09-21 · evidence on file (private) · state: VERIFIED
• Bank of England response · filed, since 2026-09-22 · evidence on file (private) · state: VERIFIED
• US Treasury docket · filed, date not yet recorded · public evidence · state: PENDING

Policy programmes

• EU AI Pact · participant, since 2026-08-20 · evidence on file (private) · state: VERIFIED

Open-source commons

• Open Invention Network · member, since 2026-08-15 · public evidence · state: VERIFIED
• LOT Network · member, since 2026-08-23 · public evidence · state: VERIFIED

Participation is not endorsement, and a listing is not adoption. Every entry links to its evidence.

Bodies a reader might expect to find above, and are not there. Three reasons appear: we hold something weaker than the word would suggest, we are not eligible, or the body has no membership to hold. Each says which. This list exists so that absence from the table is an answer rather than a gap.

Full table, with each entry's evidence and what it does not prove: councilof.ai/memberships.

Repositories that carry the estate

repo	what it does
councilof-ai	CSOAI Ltd — Council of AI. GSPC AI-behaviour measurement, signed evidence and free verification. Evidence bundles and provider-change feeds. Measurement, not certification.
gspc-board	GSPC Board — 33 axes · 23 measured. Ed25519-signed cards, Merkle root, Bitcoin OTS anchoring. The public evidence layer for AI governance.
a2a-signed-receipts	🧾 Extends A2A with signed-receipts/v1 — did:web key-trust for §8.4 AgentCard signing plus Ed25519-signed task-outcome receipts. Evidence of what was claimed, not a certification.
inspect-receipts	🔏 Signs every Inspect AI eval run with an Ed25519, hash-chained, offline-verifiable measurement receipt. Evidence of what was claimed and when — not certification.
corpus-watch	👁️ Watches the EU AI Act (CELLAR) and UK statute daily by hash and reports drift; fail-closed — UNKNOWN is never reported as unchanged.
carder	🗂️ Emits deterministic JSON fact-cards for public datasets and benchmarks — facts with dates, an adjective lint, no LLM judge. Measurement, not certification.

The PyPI reader csoai-gspc and the npm MCP server csoai-gspc-mcp are built from councilof-ai (scripts/spray/pypi/csoai-gspc/, mcp/gspc-server/).

How to contribute

• Challenge a measurement: open a measurement challenge — cite the card id and the frozen bank row.
• Report a defect: defect template. Accepted defects land in the public corrections ledger, never in a silent edit.
• Code: PRs into councilof-ai run the same gates as a deploy (pr-gates.yml). Read CONTRIBUTING and SECURITY.
• What we never do: certify; sell ratings, ranking position or early sight of a grade; remediate for a fee; or take money from anything we rank.

---

_{CSOAI · CSOAI Ltd (Council of AI) · 3rd Floor 86-90 Paul Street, London EC2A 4NE · nicholas@csoai.org · councilof.ai · derived 2026-10-29T04:06:17Z}