Skip to content
View ramtoo-cell's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report ramtoo-cell

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
ramtoo-cell/README.md
Ramkumar Bharathan — Frontier AI Reasoning Evaluation and Agent Assurance

LinkedIn Booth Story ControlTrace Fellowship Dossier frontier-reasoning-bench agentgate

I build verifiable evaluation harnesses for judgment-heavy AI reasoning and zero-trust runtime infrastructure for autonomous agents.

Where code and math have compilers, the hardest real-world decisions—across policy, law, audit judgment, economics, cognitive science, and philosophy—have no single checkable answer key. Models routinely sound persuasive while treating uncorroborated allegations as proof, violating game-theoretic equilibria, or conflating empirical facts with normative obligations. With nearly two decades of practicing codified evidentiary judgment across Fortune-10 technology audits (16 years at PwC across India, Dubai, and the US serving Google, Meta, Microsoft, and Amazon; writing internal audit and IT SOX playbooks for Google and Microsoft; working on the Waymo and Tesla external audits; and now leading cloud, cyber, and AI audits at a Fortune-10 global financial institution), I build benchmarks and RL environments that test whether AI agents reach conclusions on sufficient, appropriate evidence rather than surface salience.

Core Thesis: Auditors learn early that the most dangerous error is not the wrong conclusion, but the right one reached for the wrong reasons. It passes review, and it fails precisely when the facts shift.


🧠 1. Conceptual Reasoning Evals & Evidentiary Faithfulness

A complete, zero-dependency evaluation stack for testing whether frontier models (Claude, Gemini, o-series) separate allegation from proof and reason faithfully through domain constraints:

Teaching AI agents the difference between allegation and proof — evaluating professional skepticism and calibrated escalation:

  • External Normative Anchor: Ground truth is anchored in codified audit-evidence standards (PCAOB AS 1105, ISA 500): independent confirmations and cryptographic telemetry outrank internal management assertions, and an uncorroborated complaint is not proof.
  • Three-Axis Separation: Scores (1) Conclusion Accuracy, (2) Evidence Faithfulness (whether the agent cites excluded red herrings or unsubstantiated allegations), and (3) Escalation Calibration (resolve vs. escalate, plus minimal pairs that flip on a single piece of corroborating evidence).
  • Pilot Finding (6 cases, blind Claude baseline, 1 sample/case): Reached the right outcome in 5 of 6 cases, yet cited evidence that should have been excluded in 5 of 6 cases—and in 1 of 6 (CT-001) correctly computed that a vendor's disclosure had lapsed >3 years earlier, then treated an unsubstantiated competitor complaint as proof of a violation and escalated it. (Explicit Limitations section documented in repo; held-out ground truth kept private via SHA-256 commitments.)
git clone https://github.com/ramtoo-cell/controltrace && cd controltrace && PYTHONPATH=src python3 -m controltrace.cli

Step-level invariant verification & process-supervision reward oracles across all 5 conceptual disciplines:

  • Economics (Mechanism_Design): Enforces the Myerson-Satterthwaite Impossibility Theorem (flagging mechanisms claiming ex-post efficiency + BIC + IIR + budget balance without outside subsidy) and Vickrey dominant-strategy truthfulness ($b_i = v_i$).
  • Philosophy (Deontic_Modal_Logic): Verifies Standard Deontic Logic ($\mathbf{SDL}$ / $\text{KD45}_n$) Axiom D consistency ($\neg(\mathcal{O}p \wedge \mathcal{F}p)$), Hume's Guillotine (no $\mathcal{O}p \leftrightarrow p$ deontic collapse), and dyadic resolution of Chisholm's Contrary-to-Duty (CTD) paradox.
  • Cognitive Science (Cognitive_Science): Audits exact Bayesian posterior updating under low-prevalence priors, catching Base-Rate Neglect and Tversky-Kahneman Conjunction Fallacies ($P(A \wedge B) > P(A)$).
  • Policy & Governance (Policy_Governance): Separates Strict Pareto Dominance, Kaldor-Hicks potential compensation, and Rawlsian Maximin welfare floors across multi-stakeholder allocations.
  • Law & Jurisprudence (Law_Jurisprudence): Verifies formal canons of statutory construction (Lex Specialis Derogat Legi Generali safe-harbor precedence and Ejusdem Generis enumerated class bounds).
git clone https://github.com/ramtoo-cell/frontier-reasoning-bench && cd frontier-reasoning-bench && python3 -m bench.cli --track ALL

72 hand-built evaluation cases across Philosophy (24), Economics (24), and Law & Policy (24).

  • Every case includes a novel scenario prompt, worked gold derivation, weighted 3-part grading rubric, underlying theoretical principle, and an explicit note on why the task tests application rather than memorization.

Standalone evaluation harness for accuracy, epistemic calibration, and failure-mode clustering:

  • Measures Expected Calibration Error (ECE) and Brier scores alongside rubric accuracy—distinguishing calibrated uncertainty from overconfident hallucination.

Statistical & psychometric rigor for reasoning benchmarks:

  • Paired Inference (reasoning-paired-evals): Non-parametric paired bootstrap confidence intervals and exact binomial McNemar discordance tests on off-diagonal transitions ($b$ vs. $c$).
  • Abstention & Selective Prediction (reasoning-calibration-audit): Risk-coverage curves and selective-abstention thresholds for determining when a reasoning system should abstain rather than answer overconfidently.
  • Inter-Rater Agreement (reasoning-rubric-reliability): Psychometric reliability auditing across human/LLM judges to measure whether reviewers agree on the subjective judgments a benchmark depends on.

🛡️ 2. Production Agentic Assurance & Zero-Trust MCP Infrastructure

Reference architecture: agent loop, policy gate, runtime guard, human approval and tool execution, backed by safety evals, injection defense, drift monitoring, a kill switch, and a hash-chained audit ledger

Policy, human approval, and a tamper-evident audit trail for every AI agent tool call. Use as a Python decorator or as a drop-in MCP proxy in front of any MCP server (Claude Desktop, Cursor) with zero code changes.

  • Default-deny JSON policies: Unauthorized tools are stripped from tools/list so the model never sees them.
  • Cryptographic audit ledger: Append-only, SHA-256 hash-chained and optionally HMAC-keyed JSONL ledger. agentgate verify pinpoints the exact first tampered line.
  • Sub-100µs overhead: ~65 µs per call after profiling-driven optimization (4× faster than v0.1). Zero dependencies, 60 tests, 95% coverage, CI on Python 3.9–3.13.
  • Includes a Google-style Design Doc & Threat Model (docs/DESIGN.md).
pip install git+https://github.com/ramtoo-cell/agentgate

Governance sidecar for autonomous AI agents.

  • Wraps any agent callable with policy enforcement (blocklists, PII redaction, prompt-injection defense), hard execution budgets (steps, tokens, cost, wall-clock latency), hash-chained audit logs, and built-in red-team & conceptual reasoning evals.
pip install git+https://github.com/ramtoo-cell/agent-guardian

📦 3. Modular Primitives by Layer (360+ Public Repositories)

Every repository is a small, sharp, self-contained primitive: zero external dependencies, deterministic unittest suite, and single-concern design. Browse the full catalog →

🛡️ AI Safety, Evals & Alignment
100+ repos

Red-teaming, interpretability, unlearning, watermarking, calibration.

⚖️ AI Governance & Policy-as-Code
60+ repos

Controls, evidence pipelines, statutory mapping, incident response.

🤖 Agentic Systems & Verification
100+ repos

Agent loops, MCP servers, sandboxing, contract nets, trajectory replay.


📐 Engineering & Research Principles

Principle In Practice
Step-Level Process Verification Outcome accuracy masks flawed deduction. Evals verify intermediate domain invariants (Myerson-Satterthwaite, SDL Axiom D, Bayes coherence, lex specialis) at every step.
Calibration Alongside Accuracy A model that knows when it doesn't know is safer than one that hallucinates with high confidence. Every harness reports ECE and paired discordance $p$-values.
Evidence Over Assertion Every prompt, reasoning trace, policy decision, and tool call is hash-chained in an append-only ledger. If it wasn't cryptographically logged, it didn't happen.
Default Deny & Capability Isolation Egress, filesystem paths, MCP tools, and token budgets start closed. Capabilities are granted one at a time, with explicit human-in-the-loop escalation.
Zero-Dependency Reproducibility Pure Python 3 standard library first, deterministic unit tests, sub-millisecond execution, and explicit design docs with threat models.

🎓 Background

  • Education: The University of Chicago Booth School of Business — MBA (Honors) · Purdue University — M.S. in Artificial Intelligence (in progress) · Chartered Accountant (CA) · CISA (in progress)
  • Intellectual Property: 2 USPTO AI patent applications pending · 4 published AI defensive disclosures
  • Experience: 18+ years leading technology risk architecture, IT audit innovation, and governance engineering across Tier-0 global financial institutions and Big Four advisory (PwC)
  • Research Focus: Conceptual reasoning evals (economics, law, policy, philosophy, cognitive science), process supervision, epistemic calibration, and zero-trust agentic governance

Building in public. If you work on frontier reasoning evaluations, scalable oversight, or agent assurance at Anthropic, Google DeepMind, or OpenAI, let's connect via LinkedIn or open an issue on any repository.

Popular repositories Loading

  1. ai-governance-red-team-runner ai-governance-red-team-runner Public

    Runs categorized adversarial prompt suites against a model callable and flags suspicious outputs with heuristic detectors.

    Python 1

  2. agent-guardian agent-guardian Public

    Governance sidecar for AI agents: policy enforcement, budgets, tamper-evident audit logs, and safety evals

    Python 1

  3. agentgate agentgate Public

    Policy, human approval, and a tamper-evident audit trail for AI agent tool calls

    Python 1

  4. frontier-reasoning-bench frontier-reasoning-bench Public

    Step-level invariant verification harnesses & failure taxonomies for conceptual reasoning in LLMs: mechanism design, deontic modal logic, regulatory trade-offs, and epistemic calibration.

    Python 1

  5. reasoning-paired-evals reasoning-paired-evals Public

    Paired reasoning evaluation: bootstrap uncertainty and exact discordance tests. Python research prototype with synthetic fixtures.

    Python 1

  6. anthropic-fellowships-2027 anthropic-fellowships-2027 Public

    Anthropic Conceptual Reasoning Fellowship (January 2027) — Research Dossier, Statement of Purpose, and Benchmark Portfolio (Philosophy, Cognitive Science, Economics, Policy & Law).

    1