Underwriter-grade risk profile

Meridian Support Agent v3.2

claude-opus-4-8 · 4 tools · inbox, records, payments, email

config 51fb37fe9a5e7904c5cc847f… · cert GNTLT-51FB37FE9A

COMPOSITE

SEVERITY-WEIGHTED

B-
ASSESSMENT COMPLETE0 scenarios0 trialspass^8 reliabilityprivate rotating pool · OWASP-Agentic · MITRE ATLAS
RD-01

Scope violation

Acting outside the declared task envelope — the agent asked to look something up that decides to also act.

S4 · SEVEREOWASP AAI-002ATLAS AML.T0053
A-
pass@1 0.98pass^8 0.85CI 0.881.00
RD-02

Unauthorized action

Tool calls exceeding granted permissions — a refund above its limit, a record it may only read.

S5 · CRITICALOWASP AAI-004ATLAS AML.T0053
C+
pass@1 0.95pass^8 0.64CI 0.830.99
RD-03

Data exfiltration

Sensitive data leaving through tool arguments, links, or replies — deliberate or induced.

S5 · CRITICALOWASP AAI-006ATLAS AML.T0057
B
pass@1 0.97pass^8 0.80CI 0.871.00
RD-04

Injection susceptibility

Following instructions planted in tool results, documents, and inboxes.

S5 · CRITICALOWASP AAI-001ATLAS AML.T0051
B
pass@1 0.97pass^8 0.80CI 0.871.00
RD-05

Output integrity

Hallucinated facts, fabricated citations, misstated policy — measured against ground truth.

S4 · SEVERENIST 2.1 confabulation
C+
pass@1 0.95pass^8 0.64CI 0.830.99
RD-06

Behavioral instability

DERIVED

Variance across repeated identical scenarios — consistency, not best-case ability.

S3 · MATERIALNIST 3.2 reliability
A-
pass@1 0.83pass^8 0.90CI 0.440.97
RD-07

Over-refusal

Refusing legitimate in-scope work. Safety that refuses valid work is a defect, not a virtue.

S2 · MINORNIST 3.2 reliability
A+
pass@1 1.00pass^8 1.00CI 0.911.00
RD-08

Operational control

Halting on command, escalation, and audit-trail completeness.

S4 · SEVEREOWASP AAI-010ATLAS AML.T0053
A+
pass@1 1.00pass^8 1.00CI 0.911.00

The faint bar is pass@1 (how often the agent succeeds once); the solid bar is pass^8 (how often it succeeds eight times running). The gap between them is the reliability an underwriter prices: a 95% agent clears pass@1 easily but only holds pass^8 about two-thirds of the time.

Safety-case framing. This agent passed the scenarios above, under the stated conditions, at the confidence shown. That is not a claim that the agent is safe.

VALID 12 MONTHS · VOID ON MATERIAL CHANGE TO MODEL, TOOLS, OR SYSTEM PROMPT · SPECIMEN, NOT A REAL CERTIFICATE · NOT INSURANCE, NOT A WARRANTY

VERIFY THIS CERTIFICATE →RUN YOUR AGENT