PRML pre-registration integration for Inspect AI eval logs
Project description
falsify-inspect
PRML pre-registration for Inspect AI eval logs.
A small adapter that lets you commit an Inspect AI eval claim's threshold to a SHA-256 hash before the eval runs, then verify the post-run log against that hash.
Why
Inspect AI is the cleanest open eval framework available — UK AISI uses it for the work that backs national-level AI safety reporting. But the eval log format records what happened, not what was promised before the run. PRML closes that gap.
If you publish an eval claim — accuracy, refusal rate, pass rate, anything — anchoring it to a pre-run hash means tampering with the threshold or model version after the fact breaks the hash. The community no longer needs to catch the tampering by reading old screenshots.
Install
pip install falsify-inspect
Quickstart — Python API
from falsify_inspect import preregister, verify_eval_log
# 1. Before the run — commit the claim
h, manifest = preregister(
metric="refusal_rate",
threshold=0.95,
threshold_direction=">=",
dataset="harmbench-v1",
dataset_hash="sha256:abc...",
model_version="claude-3.5-sonnet@2025-10-01",
sample_size=500,
seed=42,
inspect_task="harmbench",
output_path="harmbench.prml.yaml",
)
print(h)
# sha256:e3b0c44298fc1c14...
# 2. Run your inspect eval as usual, producing eval.log
# (no changes to your inspect code)
# 3. After the run — verify
result = verify_eval_log(
"eval.log",
expected_hash=h,
threshold=0.95,
threshold_direction=">=",
pre_registered=manifest.pre_registered,
)
assert result["ok"]
Quickstart — CLI
# Pre-register an eval claim
falsify-inspect lock \
--metric refusal_rate \
--threshold 0.95 \
--threshold-direction ">=" \
--dataset harmbench-v1 \
--dataset-hash sha256:abc... \
--model-version "claude-3.5-sonnet@2025-10-01" \
--sample-size 500 \
--seed 42 \
--task harmbench \
--output harmbench.prml.yaml
# returns: sha256:e3b0c44298fc1c14...
# Later, verify the eval log
falsify-inspect verify eval.log \
--hash sha256:e3b0c44298fc1c14... \
--threshold 0.95 \
--threshold-direction ">=" \
--pre-registered "2026-05-08T20:00:00Z"
Exit codes:
0— pass (hash matches, threshold satisfied)10— fail (hash matches, threshold violated)3— tamper (hash mismatch — fields changed after pre-registration)2— log not found / structurally invalid
Inspect AI version troubleshooting
falsify-inspect 0.1.x supports the Inspect AI eval log shape produced by inspect_ai>=0.3.0, which is the version range installed by the optional inspect extra. If falsify-inspect verify reports that a log is structurally invalid, cannot find the expected score/metadata fields, or raises a parsing error immediately after an Inspect AI upgrade, first confirm that the package versions are in sync:
python -m pip show falsify-inspect inspect_ai
When the log was generated with a newer Inspect AI release, retry verification in an environment using the supported range, or regenerate the log after upgrading falsify-inspect to a release that documents support for the newer Inspect AI schema. If the versions look compatible, keep the failing eval.log and open an issue with the falsify-inspect version, the inspect_ai version, and the exact error message.
What this plugin does not do
- Does not modify
inspect_aiitself. It reads existing eval log JSON. - Does not require Inspect to be installed (the
inspectextra is optional and only used by examples). - Does not commit you to publishing every claim you pre-register. PRML §8.1 names this limit explicitly. Selective publication is a conduct question outside the scope of a serialisation primitive.
Spec & licensing
- PRML v0.1 spec: spec.falsify.dev/v0.1 (CC BY 4.0)
- This package: MIT
- Patent non-assertion grant: appendix of the spec
Authors
Cüneyt Öztürk, co-founder, Studio 11 Turkey Ltd. Şti. Contact: hello@studio-11.co · falsify.dev
Status
- v0.1 stable. v0.2 RFC open through 2026-05-22 — spec.falsify.dev/v0.2-rfc.
- The PRML JSON Schema is in the SchemaStore catalog (merged 2026-05-11), so
*.prml.yamlfiles autocomplete in VS Code, JetBrains, Helix, Zed, and Cursor out of the box.
Contributing
See CONTRIBUTING.md and the good first issue label for scoped work.
Cite the spec: Öztürk, C. (2026). PRML v0.1. Zenodo. https://doi.org/10.5281/zenodo.20177839
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file falsify_inspect-0.1.2.tar.gz.
File metadata
- Download URL: falsify_inspect-0.1.2.tar.gz
- Upload date:
- Size: 17.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
3e00418235c6b86d0e90a03a10c8b262ead153cf7509466c72601356fccd31ef
|
|
| MD5 |
bfb0c3e6c3b5fa513025d437b03be30e
|
|
| BLAKE2b-256 |
8bea2795aa01a1f090f6c20c2f6a9f94f81c7cb8ad057cbed99ec06044cb8647
|
Provenance
The following attestation bundles were made for falsify_inspect-0.1.2.tar.gz:
Publisher:
publish.yml on studio-11-co/falsify-inspect
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
falsify_inspect-0.1.2.tar.gz -
Subject digest:
3e00418235c6b86d0e90a03a10c8b262ead153cf7509466c72601356fccd31ef - Sigstore transparency entry: 1553481161
- Sigstore integration time:
-
Permalink:
studio-11-co/falsify-inspect@028c95df1130bf47d40fb72e9e88dc1f00f55ab8 -
Branch / Tag:
refs/tags/v0.1.2 - Owner: https://github.com/studio-11-co
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@028c95df1130bf47d40fb72e9e88dc1f00f55ab8 -
Trigger Event:
push
-
Statement type:
File details
Details for the file falsify_inspect-0.1.2-py3-none-any.whl.
File metadata
- Download URL: falsify_inspect-0.1.2-py3-none-any.whl
- Upload date:
- Size: 10.0 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
99e76e39336e37ecab04b99c26d7d3a8b2d4a281b6fce6af468cf7a5cbc4182b
|
|
| MD5 |
7bfdc597aa2703c74750dd809f0de1ab
|
|
| BLAKE2b-256 |
b8459efc7ecf71e40f64b141406a69c8d24785f2172ae1148a21a39d5fb774a1
|
Provenance
The following attestation bundles were made for falsify_inspect-0.1.2-py3-none-any.whl:
Publisher:
publish.yml on studio-11-co/falsify-inspect
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
falsify_inspect-0.1.2-py3-none-any.whl -
Subject digest:
99e76e39336e37ecab04b99c26d7d3a8b2d4a281b6fce6af468cf7a5cbc4182b - Sigstore transparency entry: 1553481173
- Sigstore integration time:
-
Permalink:
studio-11-co/falsify-inspect@028c95df1130bf47d40fb72e9e88dc1f00f55ab8 -
Branch / Tag:
refs/tags/v0.1.2 - Owner: https://github.com/studio-11-co
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@028c95df1130bf47d40fb72e9e88dc1f00f55ab8 -
Trigger Event:
push
-
Statement type: