Skip to content

External typed-evidence evaluator invitations — wave 1 #159

Description

@aetherxeg-source

Status

OPEN — OUTBOUND_EVALUATOR_INVITATION_ONLY

This issue tracks targeted invitations for the experimental typed-evidence trial packet.

It is not evidence of validation, adoption, endorsement, reproduction, or external use.

Frozen references:

Selection rule

Invite only people with a concrete technical reason:

  • prior ExecSurface criticism;
  • prior independent integration/use;
  • runtime-security / ptrace / strace / supply-chain evidence expertise.

No mass mentions, no request for praise, no request for stars, and no assumption that participation is independent evidence.

Qualification boundary

Every returned result will be qualified separately under #114 / #140.

Negative, partial, unsupported and NO_FIT outcomes are first-class results.

Outreach itself remains non-qualifying.

Wave 1 roster — frozen 2026-10-06

Evaluator Technical fit Outreach state Qualification note
@scadastrangelove prior independent static review / security curation DECLINED — DO NOT CONTACT AGAIN Explicitly requested no further trial invitations or mentions
@GuillaumeFalourd external GitHub Actions maintainer; previously merged ExecSurface example INVITED — PENDING Prior project interaction; any result must be conservatively qualified
@astrogilda external ExecSurface/Probity interoperability work INVITED — PENDING Prior integration/contact; not fully independent adoption evidence
@bb1nfosec strace/ptrace runtime supply-chain analysis INVITED — PENDING Strong falsification/overlap fit
@varunsh-coder StepSecurity Harden-Runner / CI runtime hardening INVITED — PENDING File/network/process runtime-policy fit
@andrielc Aqua Tracee eBPF event/path attribution and capture-failure work INVITED — PENDING Observer completeness/loss/path-authority fit
@kkourt Cilium Tetragon maintainer / eBPF runtime observability INVITED — PENDING Kernel/runtime evidence-authority fit
@adityasaky in-toto Attestation maintainer / runtime-trace semantics INVITED — PENDING Predicate, provenance and consumer-verification fit

Wave 1 is now closed to new outbound invitations unless an existing slot is explicitly retired for a documented reason. No replacement is needed for a polite refusal merely to preserve a numeric target.

Campaign success criteria

The campaign is successful only if evidence reaches all of the following:

  1. at least 3 externally controlled execution attempts with the first result preserved before AETHER X troubleshooting;
  2. at least 1 substantive architecture/evidence-semantics criticism or counterexample;
  3. each result is classified separately as PASS / PARTIAL / FAIL / NO_FIT / UNSUPPORTED without relabeling;
  4. outreach, acknowledgement, GitHub reactions, stars, forks, or praise do not count as technical evaluation;
  5. no external organization's name may be converted into endorsement, adoption or validation language without direct evidence supporting that exact claim.

The target is evidence quality, not response volume.

Activity

  1. aetherxeg-source commented on Oct 4, 2026

    @aetherxeg-source
    ContributorAuthor

    @scadastrangelove — you previously performed the strongest independent static review we have received and explicitly noted that no ExecSurface commands had been run.

    If you are willing, we'd value a zero-assistance execution trial on any Linux x86_64 workload you choose. Please preserve the first result before asking us for troubleshooting. Failure, verifier rejection, incomplete evidence, or NO_FIT are all useful.

    Packet: 03cb5dd656d6090cd2cc5c5d40885334b06b344a
    Product target: cea214244d7efe05fea2108a5f5d8ed6287d9a3f
    Guide: https://github.com/AETHERXGLOBAL/execsurface/blob/03cb5dd656d6090cd2cc5c5d40885334b06b344a/docs/external/P8_A3_TYPED_EVIDENCE_EXTERNAL_TRIAL.md

    This is not a request for promotion, watchlist status change, endorsement, or a positive result.

  2. aetherxeg-source commented on Oct 4, 2026

    @aetherxeg-source
    ContributorAuthor

    @GuillaumeFalourd — you already merged an ExecSurface GitHub Action example into useful-actions, so you are one of the few maintainers outside AETHER X with direct context on the current public workflow.

    We now have a separate unreleased typed-evidence trial. If you're interested, please choose your own Linux x86_64 workload and preserve the first result before any AETHER X troubleshooting.

    Packet: 03cb5dd656d6090cd2cc5c5d40885334b06b344a
    Product target: cea214244d7efe05fea2108a5f5d8ed6287d9a3f
    Guide: https://github.com/AETHERXGLOBAL/execsurface/blob/03cb5dd656d6090cd2cc5c5d40885334b06b344a/docs/external/P8_A3_TYPED_EVIDENCE_EXTERNAL_TRIAL.md

    No change to useful-actions is requested. Negative, partial, usability/friction, and NO_FIT outcomes are welcome and participation will not be described as endorsement/adoption.

  3. aetherxeg-source commented on Oct 4, 2026

    @aetherxeg-source
    ContributorAuthor

    @astrogilda — the Probity integration you authored exposed the interoperability gap that directly motivated this typed-evidence work.

    We would value a fresh consumer-side attempt against the frozen packet, using a workload you choose and preserving the initial result before AETHER X assistance.

    Packet: 03cb5dd656d6090cd2cc5c5d40885334b06b344a
    Product target: cea214244d7efe05fea2108a5f5d8ed6287d9a3f
    Guide: https://github.com/AETHERXGLOBAL/execsurface/blob/03cb5dd656d6090cd2cc5c5d40885334b06b344a/docs/external/P8_A3_TYPED_EVIDENCE_EXTERNAL_TRIAL.md

    Because there has already been technical interaction around ExecSurface, we will qualify any returned result conservatively and separately from fully independent adoption/validation. Negative and NO_FIT results are equally useful.

  4. aetherxeg-source commented on Oct 4, 2026

    @aetherxeg-source
    ContributorAuthor

    @bb1nfosec — reaching out because BHEESHMA's out-of-process strace/ptrace runtime-supply-chain model is technically adjacent to the exact boundary we are trying to falsify.

    We have frozen an unreleased typed-evidence trial packet for ExecSurface and are specifically looking for reviewers who may disagree with our runtime/evidence semantics.

    If you are interested, please choose any Linux x86_64 workload yourself and preserve the first result before asking us for help.

    Packet: 03cb5dd656d6090cd2cc5c5d40885334b06b344a
    Product target: cea214244d7efe05fea2108a5f5d8ed6287d9a3f
    Guide: https://github.com/AETHERXGLOBAL/execsurface/blob/03cb5dd656d6090cd2cc5c5d40885334b06b344a/docs/external/P8_A3_TYPED_EVIDENCE_EXTERNAL_TRIAL.md

    A counterexample, false-completeness finding, NO_FIT/overlap conclusion, or operational criticism is at least as valuable as a successful run. No endorsement or comparison claim is requested.

  5. scadastrangelove commented on Oct 4, 2026

    @scadastrangelove

    Thanks for the invitation and for clearly distinguishing outreach from validation. Our review was limited to static inspection for awesome-list curation. Given our limited maintainer resources, we’re unable to participate in execution trials.

    Please keep our WATCHLIST review separate from product validation and do not describe us as participating evaluators or endorsers. We’d also appreciate no further trial-related invitations or @mentions.

    Thank you for understanding, and best of luck with the project.

  6. aetherxeg-source commented on Oct 6, 2026

    @aetherxeg-source
    ContributorAuthor

    @varunsh-coder — reaching out because Harden-Runner operates directly in the CI runtime boundary where file/network/process observations become policy-relevant evidence.

    We have frozen an unreleased ExecSurface typed-evidence trial and would value a zero-assistance first run from someone who already works on runner hardening and runtime monitoring semantics.

    Please choose your own Linux x86_64 workload and preserve the first result before any AETHER X troubleshooting.

    Packet: 03cb5dd656d6090cd2cc5c5d40885334b06b344a
    Product target: cea214244d7efe05fea2108a5f5d8ed6287d9a3f
    Guide: https://github.com/AETHERXGLOBAL/execsurface/blob/03cb5dd656d6090cd2cc5c5d40885334b06b344a/docs/external/P8_A3_TYPED_EVIDENCE_EXTERNAL_TRIAL.md

    A false-positive/false-completeness finding, usability failure, overlap/NO_FIT conclusion, or architecture criticism is fully acceptable. This is not a request for endorsement, promotion, integration, or a positive result.

  7. aetherxeg-source commented on Oct 6, 2026

    @aetherxeg-source
    ContributorAuthor

    @andrielc — your recent Tracee work on carrying FD paths with events, capture failures, truncation, storage errors and loss boundaries is directly relevant to the evidence-completeness questions we are trying to falsify.

    We have frozen an unreleased ExecSurface typed-evidence trial. If you are willing, please choose any Linux x86_64 workload yourself and preserve the first result before AETHER X assistance.

    Packet: 03cb5dd656d6090cd2cc5c5d40885334b06b344a
    Product target: cea214244d7efe05fea2108a5f5d8ed6287d9a3f
    Guide: https://github.com/AETHERXGLOBAL/execsurface/blob/03cb5dd656d6090cd2cc5c5d40885334b06b344a/docs/external/P8_A3_TYPED_EVIDENCE_EXTERNAL_TRIAL.md

    We are especially interested in criticism of event identity, path attribution, incompleteness/loss handling, or any case where the typed envelope overstates what the observer actually established. FAIL, PARTIAL and NO_FIT are first-class outcomes; no endorsement or comparison claim is requested.

  8. aetherxeg-source commented on Oct 6, 2026

    @aetherxeg-source
    ContributorAuthor

    @kkourt — reaching out because Tetragon's eBPF runtime-observability work sits very close to the proposition/evidence boundary ExecSurface is attempting to make explicit.

    We have frozen an unreleased typed-evidence trial packet and are looking for reviewers with kernel/runtime-observation experience who may find a false-completeness or authority mistake.

    If interested, please choose your own Linux x86_64 workload and preserve the first result before any AETHER X troubleshooting.

    Packet: 03cb5dd656d6090cd2cc5c5d40885334b06b344a
    Product target: cea214244d7efe05fea2108a5f5d8ed6287d9a3f
    Guide: https://github.com/AETHERXGLOBAL/execsurface/blob/03cb5dd656d6090cd2cc5c5d40885334b06b344a/docs/external/P8_A3_TYPED_EVIDENCE_EXTERNAL_TRIAL.md

    A counterexample, observer-authority criticism, incomplete result, operational failure, or NO_FIT conclusion is as useful as a successful run. We are not asking for endorsement, adoption, or a favorable comparison with Tetragon.

  9. aetherxeg-source commented on Oct 6, 2026

    @aetherxeg-source
    ContributorAuthor

    @adityasaky — reaching out because your work on the in-toto Attestation Framework, including review of runtime-trace semantics, is directly relevant to the distinction we are testing between an execution observation and the claims a typed evidence envelope is allowed to make.

    We have frozen an unreleased ExecSurface typed-evidence trial. If you are willing, please choose any Linux x86_64 workload and preserve the initial result before asking us for troubleshooting.

    Packet: 03cb5dd656d6090cd2cc5c5d40885334b06b344a
    Product target: cea214244d7efe05fea2108a5f5d8ed6287d9a3f
    Guide: https://github.com/AETHERXGLOBAL/execsurface/blob/03cb5dd656d6090cd2cc5c5d40885334b06b344a/docs/external/P8_A3_TYPED_EVIDENCE_EXTERNAL_TRIAL.md

    We would especially value criticism of predicate semantics, producer authority, completeness claims, consumer-verification boundaries, or any ambiguity that could let an observation be laundered into a stronger claim. FAIL, PARTIAL and NO_FIT outcomes are welcome. This is not a request for endorsement, integration, or a positive result.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions