Open governance framework · v1.3 · Practitioner-led · not an accredited standard, certification, or regulatory requirement · seeking shadow-evaluation partners
Home/Framework/Conformance Test Suite

Machine-readable · deterministic · CC BY 4.0

Conformance test suite

A conformance claim you cannot verify is marketing. This suite makes the claim checkable by anyone, including people with no reason to trust the claimant.

What it is

A machine-readable specification of test cases — published as YAML in the open repository at conformance/nhid_conformance_test_suite_v1.yaml — paired with a runner that executes them against an implementation and reports pass or fail per control.

The test definitions are separate from the runner on purpose. If you write your own engine in another language, you can consume the same YAML and be measured against the same cases.

What it tests

ControlVerifiesFailure severity
IDG-01Disclosure occurs before the first operational data exchange, with a recorded timestampCritical
PDX-01No protected data moves on any turn not preceded by a confirmed disclosureCritical
DBC-01No deceptive artifacts and no false or evasive human-status claimsCritical
EIT-01Escalation is available, honored on request, and its outcome is recordedHigh
ATR-01Every event carries a complete audit envelope that validates against the trace schemaCritical

Illustrative result

nhid-cts run --suite v1 --target ./engine
Suite resultConformant
IDG-01 · Identity Disclosure GatePASS
PDX-01 · Pre-Data Exchange GatePASS
DBC-01 · Deceptive Behavior CheckPASS
EIT-01 · Escalation ImplementationPASS
ATR-01 · Audit Trail RequirementsPASS

Illustrative output — not a live test run.

What a pass does and does not mean

A pass means
  • Your implementation produced the expected verdict on every published case
  • Someone else can reproduce that result from the same inputs
  • You have evidence to show a counterparty during procurement
A pass does not mean
  • Certification — there is no certifying body and no accreditation
  • Regulatory compliance in any jurisdiction
  • That your production agents behave this way on live calls
Self-attestation only. The Implementation Registry lists implementations that report their own results. NHID-Clinical does not verify, audit, or certify entries.

Run it

Locally against your own engine, or continuously against your production agents.

NHID-Clinical is a voluntary open framework — not an accredited standard, certification, or regulatory requirement. Everything on this page is published under CC BY 4.0.