HACKERverse Certifies
PROOFstamp
Certified
Agentic Economy Ready
ProveDisposeRepeat
Proof Protocol v1.1 | Proof Economy | PESA Governed
PROOFstamp™ — Certification Mark

You are either
passing the test
or you are not.

PROOFstamp is the certification mark issued by PESA to agentic AI runtime security products that pass a live adversarial benchmark run administered by an independent test lab. No self-attestation. No questionnaire. A real test.

You are passing. Or you are not.
What PROOFstamp Means

Four things. All verified. All on record.

01
Passed a live benchmark
The product ran against live adversarial TTPs across the Proof Benchmark: Agentic AI v1.0 corpus. Not a simulation. Not a demo. A live adversarial run with a NIST Randomness Beacon pre-commitment anchored before execution began.
02
Scored above threshold
Detection rate, containment rate, evidence integrity, and false positive rate all scored at or above the PESA minimum for the applicable scenario. Scores are published in full. There is no passing tier with hidden failures.
03
Third-party administered
The run was administered by HACKERverse® as an independent test lab — not the product vendor, not the vendor's security team, not a body controlled by vendors of products in the same category. Non-voting. Recused from governance of certified products.
04
"Is conformant"
Present tense. Not "was tested." Not "was found adequate in April." The mark asserts a live status, and a live status lapses when it stops being maintained. A lapsed PROOFstamp is not a PROOFstamp — it is a historical record and may not be displayed as current.
The Lapse Condition

A PROOFstamp does not say a product was tested. It says the product is passing.

Every certified build carries an expiry. The mark lapses on that date unless a subsequent run has executed and published. Execution stops, the assertion stops. There is no grace period, no provisional status, and no version of the mark that means "recently."

This is not a restriction on the mark. It is the mark. A certification that does not expire when the threat landscape moves has measured a moment and sold it as a state.

Products That Are Passing

Products that are passing.

Pipelock v3.0.0
Corpus: Proof Benchmark: Agentic AI v1.0 — The Gauntlet
Run #001: PR-2026-12672 — Containment 71.1% · Detection 100% · Evidence 100% · FP 4.5%
117 per-TTP proof records (proofType 2) · Bitcoin OP_RETURN anchored · NIST Beacon sealed
Administered by: HACKERverse® Independent Test Lab (non-voting, recused)
Next scheduled run: Continuous cadence — see ProofRegister
PROOFstamp
Executing ✓
Status reflects the most recent completed run against the current corpus. A build whose next scheduled run does not execute enters lapse. Lapsed marks remain in the registry as historical records and are marked as such. Records are permanent and publicly verifiable via ProofRegister.
How to Earn It

Four steps. No shortcuts.

01
Submit for evaluation
Contact HACKERverse® as the authorized independent test lab. Provide a versioned, testable build. A named version is the subject under test — not the vendor, not the company, not its broader security posture. A new release must run separately.
02
Gauntlet execution under NIST commitment
HACKERverse® captures a NIST Randomness Beacon pulse before any test case runs. The benchmark executes against all applicable TTP categories in the Proof Benchmark: Agentic AI corpus. 117 structured adversarial cases, independently observed.
03
Results published to ProofRegister
Pass or fail, results are published to ProofRegister with all per-TTP child proof records (proofType 2) and a Bitcoin OP_RETURN on-chain anchor. Scores are not withheld, not embargoed, and not negotiable. The PCID is assigned at this step.
04
PROOFstamp issued — and maintained
If scores meet or exceed PESA minimum thresholds, the PROOFstamp certification mark is issued. The ERC-721 token is minted on Polygon. The mark remains current only through continuous re-execution on the cadence specified at issuance. Lapse is automatic.
Get Certified

Your product should be able
to prove what it claims.

If you're building agentic AI security tooling, run your product against the Gauntlet. PROOFstamp is the only credential in this space backed by a public, tamper-evident benchmark record — not a questionnaire.

Request Evaluation View the Benchmark Registry