What controls exist? What evidence survives?
The matrix compares control surfaces across AI runtimes and real production workflows without pretending that vendor documentation, direct observation, independent testing, and verified control posture are the same thing.
Compare the operating surface.
NULLWORKS sits across the matrix as an independent operational-assurance layer. The runtime may be CIRIS, a commercial provider stack, an open-source framework, or a homegrown system. The object under test is the consequential operating loop: agents, tools, data, humans, authority, evidence, recovery, and change.
TTESTED
NULLWORKS independently exercised a relevant control surface.
DDOCUMENTED
A public source documents the control or capability. Documentation is not independent verification.
OOBSERVED
Behavior or interface was directly observed but not necessarily falsification-tested.
FGAP
Expected behavior or a tested claim did not survive the specific test condition.
UUNKNOWN
Evidence is insufficient or has not yet been acquired.
VVARIES
Portability or control depends materially on configuration, provider, integration, or deployment design.
| Runtime / system | Authority | Access | Data | Evidence | Recovery | Continuity | Stop / revoke | Human escalation | Portable state |
|---|---|---|---|---|---|---|---|---|---|
Open-source governed agent runtime TESTED | T | T | T | T | T | T | T | T | T |
OpenAI agent stack Commercial model + agent/tool ecosystem DOC REVIEW | D | D | D | D | U | D | D | D | V |
Anthropic agent stack Commercial model + agent/tool ecosystem DOC REVIEW | D | D | D | D | U | D | D | D | V |
Google agent stack Commercial model + agent/tool ecosystem DOC REVIEW | D | D | D | D | U | D | D | D | V |
Agents + tools + humans + workflow UNKNOWN | U | U | U | U | U | U | U | U | U |
CIRIS
NULLWORKS has independently exercised a pinned CIRIS release. Public proof is sanitized; testing applies to the reviewed revisions, not every current or future release.
OpenAI agent stack
Public-documentation coverage only in this matrix version. No broad NULLWORKS independent-control claim is implied.
Anthropic agent stack
Public-documentation coverage only in this matrix version. No broad NULLWORKS independent-control claim is implied.
Google agent stack
Public-documentation coverage only in this matrix version. No broad NULLWORKS independent-control claim is implied.
Your production system
This is the row the free triage begins to populate. Paid assurance acquires evidence and attempts to move important cells from claimed or unknown to independently supported.
From comparison to evidence.
Locate your runtime, framework, or operating pattern.
See what is documented, tested, variable, or unknown.
Run the 18-question self-reported control diagnostic.
Acquire evidence and falsify the important assumptions.
Retest repairs and preserve the changed control state.