State-Separation & Determinism Audit
Most adaptive and decision-making systems can't actually prove that the signals they claim to keep separate — observation, internal state, decision logic, oversight — haven't quietly been merged somewhere in the pipeline. This audit checks that specific property, by direct execution, not by reviewing documentation about it.
What this checks
Four real properties, each independently verifiable:
| Property | What's actually tested |
|---|---|
| State separation | Do the channels your architecture claims are independent actually stay independent under real, accumulated data — or does correlation between them creep up over time? |
| Determinism | Does the same logical input produce the same output regardless of delivery order, timing, or processing sequence? Tested by direct replay, not by reading the code and assuming. |
| Redundancy | Do the components your system treats as independent measurements actually measure independent things, or are several of them computing the same thing under different names? |
| Failure modes | Where does the architecture actually break — found by trying to break it, then documented with the specific case, not a generic risk category. |
Method, demonstrated
This isn't a proposed methodology — it's the same approach used throughout this site, with real, published results. The examples below are all in Python because that's this lab's own architecture — the underlying checks (replay determinism, correlation measurement, formula comparison, fault injection) apply the same way to a system written in any language; nothing about the methodology is Python-specific.
- A real event-sourced kernel, tested for determinism by direct replay under shuffled delivery order — verified independently, 112/112 tests.
- A real redundancy finding — 15 components initially treated as independent, 6 found to be computing near-identical formulas, reduced to genuinely distinct measurements — with the honest follow-up on whether fixing it actually improved anything (it didn't, measurably — reported anyway).
- Real bugs found and documented with the specific mechanism, not just "issues identified" — including one where a component silently returned a fixed value instead of failing loudly, caught by isolating and testing it directly.
- A real initialization-integrity check with working tamper detection — altering committed state after the fact is correctly caught, verified by direct execution, not asserted.
- A real state-transition enforcement layer — an illegal transition (skipping a required intermediate state) is correctly rejected and the system holds its prior state rather than silently accepting it.
Deliverables
Scoped to what's actually verifiable, not a template list of every category a formal audit could theoretically cover:
- State separation report — real correlation measurements between the channels your system claims are independent, run against your actual accumulated data.
- Determinism report — replay testing under shuffled and reordered delivery, with the actual pass/fail result, not a theoretical analysis.
- Redundancy report — which components are measuring genuinely distinct things, and which aren't, with the specific formulas compared.
- Failure case documentation — every real failure found during testing, with the specific input that triggered it and the mechanism, not a generic severity rating.
What this explicitly does not include (yet)
Real infrastructure exists for genesis initialization (with working tamper detection) and lattice-based state-transition enforcement (both independently reverified by direct execution). Fault injection has a real, working implementation with a dozen distinct fault types. What's not yet part of this offering: adversarial scenarios are currently a well-designed test plan, not live measurements against a running system, and orchestration-level governance has real code that's either a seeded testing stub or currently broken as written (a genuine bug, not a design gap) — both are real work in progress, not sold as finished until they demonstrably are.
Pricing
Priced for what it actually is: a focused, execution-based engagement, not a formal-methods audit. To be direct about the actual distinction, not just the price: formal verification — model checking, theorem proving, mathematically proving a system correct rather than testing it — is a specific, separate discipline this offering does not provide. Firms doing full formal-verification audits at $80k–$500k have both that specific capability and an established track record across many prior clients; that pricing reflects both. This offering is building toward broader capability over time, not claiming it now.
| Tier | Scope | Price |
|---|---|---|
| Focused audit | One system, the four properties above, full report | $15,000 – $30,000 |
Pricing moves up as a real track record of delivered audits accumulates — the same way it works across this entire market, not as an exception for this offering.