Assurance statement
What a result guarantees — and what it does not
HiQS AI Resolve is in unsigned beta. Read this before treating any output as an assurance.
What a result proves
- Explicit identity
- A resolved route names a specific harness revision, gateway revision, model revision, the serving binding that joins them, and the exact model identifier to put on the wire. No colloquial name survives into the answer.
- Deterministic replay
- The same snapshot bytes, the same materialized policy, the same request and the same evaluation time always produce the same decision, trace, and digests — in the browser, in Node, and on the command line.
- Traceable reasoning
- Every decision carries an ordered trace of the rules that fired, with references to the claims and policy clauses involved.
- Declared provenance
- Every claim states who recorded it, from which source category, when, and whether a human attested to it. "Source not supplied" and "Nobody has verified this claim" are shown as such.
What a result does not prove
- Not a live capability check
- Nothing is called. The resolver never contacts a provider, gateway, or model. A route means the catalog says this combination is supported — not that it worked just now.
- Not signed
- Beta artifacts are unsigned. No signature, no key, no chain of custody. Do not use them as a production trust root.
- Not truth about vendors
- Synthetic fixtures are labelled Synthetic and imported data is labelled Imported. Neither is a verified statement of fact about any real vendor.
- Not a quality, price, or latency judgement
- No language model, ranking heuristic, popularity signal, or newest-wins rule takes part in resolution.
- Not complete
- Absence from the catalog means nobody has recorded it — not that it does not exist.
Why a refusal is a valid answer
A refusal is the honest result when the evidence does not support exactly one route. Refusals are typed and specific — ambiguous alias, tied gateways, no serving binding, missing compatibility assertion, unverified claim, conflicting claims, explicit denial, insufficient pin, unsupported capability, not found, missing policy, invalid snapshot, unsupported feature — so the caller can act on them. A guess that looks like success is worse than a refusal that tells you what is missing.
The decision lock
Writing a decision to a lock file records the retained inputs, the decision, and its digests, stamped unsigned_beta with a replay guarantee and an explicit “no live provider guarantee”. Replaying it proves that the same inputs and the same resolver revision still produce the same decision. It proves nothing about the provider at replay time, and it is not a signed attestation.