Proof Lab
StartEcosystem
Explore (579)Live Systems (52)Pricing
Log InGet API Key✓ Verify It Yourself
HATS Conformance Suite — v1.0 Frozen

Implement HATS
in Any Language.

26 canonical test vectors. Frozen format. Cross-language parity. Independent verification without H33 infrastructure. Reproduce our outputs byte-for-byte, or build your own verifier from scratch.

26
Test Vectors
5
Capability Profiles
4
Languages
v1.0
Frozen Format
Overview

Conformance Suite

The HATS Conformance Suite is the machine-testable proof of interoperability for HATS, the standard that records and monitors operational evidence. It is a frozen corpus of 26 canonical test vectors, each carrying its own input bundle, expected output, transcript hash, and replay-integrity classification, so any implementation in any language is conformant if — and only if — it reproduces the published outputs byte-for-byte. Unlike the Architecture (which describes the components) or the Guarantees (which define what a verdict means), the conformance suite is the executable test corpus that decides pass or fail.

HATS is a publicly available technical conformance standard for continuous AI trustworthiness; certification under HATS provides independently verifiable evidence that a system satisfies the standard's defined controls. The conformance suite makes that verification machine-testable.

Every vector includes: input bundle, expected output, transcript hash, replay integrity classification, and requirement references. No ambiguity. No interpretation.

Capability Profiles

Five Tiers of Conformance

HATS capability profiles define progressive levels of protocol support. Each tier includes all capabilities of the tiers below it. Implementations declare which profile they target.

Tier 1

Core

Basic governance graph construction and receipt verification. The minimum viable HATS implementation.

  • Governance graph construction
  • Receipt verification
  • Transcript hash derivation
  • Structured error codes
Tier 2

Replay

Adds deterministic replay with frame hash matching. Required for audit-grade verification.

  • All Core capabilities
  • Deterministic replay
  • Canonical replay frame construction
  • Frame hash matching
Tier 3

Enforcement

Adds policy enforcement and severity level classification. Required for compliance-critical deployments.

  • All Replay capabilities
  • Policy enforcement
  • Severity level classification
  • Requirement reference binding
Tier 4

Federation

Adds cross-domain quorum verification. Required for multi-organization governance topologies.

  • All Enforcement capabilities
  • Cross-domain verification
  • Quorum threshold evaluation
  • Domain separator isolation
Tier 5

AI-Governance

Adds AI agent lineage tracking and model attestation. Required for AI trustworthiness certification.

  • All Federation capabilities
  • AI agent lineage graphs
  • Model attestation binding
  • Inference chain verification
Test Vectors

All 26 Canonical Vectors

Every vector is a self-contained JSON file with input, expected output, and metadata. Grouped by verification domain.

Vector IDDescriptionProfile
Graph Verification
HATS-TV-001Minimal valid governance graph with single policy nodeCore
HATS-TV-002Multi-node governance graph with sequential policy chainCore
HATS-TV-003Governance graph with branching policy hierarchyCore
HATS-TV-004Receipt verification with valid governance receiptCore
HATS-TV-005Transcript hash derivation from canonical field orderingCore
HATS-TV-006Graph verification with expired policy nodeCore
HATS-TV-007Domain separator isolation across governance boundariesCore
Replay Determinism
HATS-TV-008Deterministic replay of valid governance frameReplay
HATS-TV-009Frame hash matching across independent verifier runsReplay
HATS-TV-010Canonical replay frame construction with ordered fieldsReplay
HATS-TV-011Replay integrity classification: deterministic passReplay
HATS-TV-012Replay integrity classification: deterministic rejectionReplay
HATS-TV-013Multi-frame sequential replay with chained hashesReplay
HATS-TV-014Policy enforcement with severity level: criticalEnforcement
HATS-TV-015Policy enforcement with severity level: warningEnforcement
HATS-TV-016Requirement reference binding in rejection outputEnforcement
HATS-TV-017Cross-domain quorum verification: 3-of-5 thresholdFederation
HATS-TV-018Cross-domain quorum verification: threshold not metFederation
HATS-TV-019AI agent lineage graph with model attestationAI-Gov
Error Handling
HATS-TV-020Malformed governance graph: missing root nodeCore
HATS-TV-021Invalid receipt signature: tampered governance receiptCore
HATS-TV-022Transcript hash mismatch: field ordering violationCore
HATS-TV-023Expired policy enforcement with structured rejectionEnforcement
Edge Cases
HATS-TV-024Maximum-depth governance graph (256 nodes)Core
HATS-TV-025Empty policy set with valid governance structureCore
HATS-TV-026Concurrent replay frames with independent transcript derivationReplay
Verification

How to Verify

Run the reference verifier against any HATS bundle. Three ways to get started.

Cargo (Rust)
$ cargo install hats-verifier
$ hats verify bundle.json
Docker
$ docker run h33/hats-verifier verify bundle.json
GitHub Action
# .github/workflows/hats-verify.yml
name: HATS Conformance
on: [push, pull_request]
jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Install hats-verifier
        run: cargo install hats-verifier
      - name: Run conformance suite
        run: hats verify --suite vectors/ --profile core
Expected Output
HATS Conformance Suite v1.0
Profile: core
Vectors: 26/26

PASS HATS-TV-001 Minimal valid governance graph
PASS HATS-TV-002 Multi-node governance graph
PASS HATS-TV-003 Branching policy hierarchy
...
PASS HATS-TV-026 Concurrent replay frames

Result: 26/26 PASS
Transcript: a3f8c1d2e4b5...
Status: CONFORMANT
Ecosystem

Implement Your Own

The conformance suite is designed for independent reimplementation. No H33 SDK required. No proprietary runtime. Just JSON vectors and deterministic expected outputs.

Implement HATS in any language.
Reproduce our test vectors.

The reference implementation is Rust. But HATS conformance is defined by outputs, not by implementation. If your verifier produces byte-identical results for all 26 vectors, it is conformant.

Cross-Language Compatibility

LanguageImplementationVectorsStatus
Rust H33 Reference 26/26 Reference
TypeScript hats-verify-ts 26/26 Conformant
Python hats-verify-py 26/26 Conformant
Go hats-verify-go 19/26 In Progress
Your language Register

Contact standard@h33.ai to register your implementation for the compatibility matrix.

Immutability

Frozen Vector Policy

Published test vectors are permanent. This is a binding commitment to implementations that depend on deterministic expected outputs.

Change Typev1.x Policy
Add new test vectorAllowed
Modify existing vector inputForbidden
Modify existing vector outputForbidden
Rename vector IDForbidden
Remove vector from suiteForbidden
Change transcript derivationBreaking (v2 required)
Change hash algorithmBreaking (v2 required)
Add optional metadata fieldsAllowed

Language-neutral conformance. Implementation freedom.

HATS conformance is defined by outputs, not by code. The reference implementation is Rust, but any language that produces byte-identical results for all 26 canonical vectors is equally conformant. No SDK dependency. No runtime requirement. No vendor lock-in.

The test vector format is portable JSON. Every vector contains its own expected output, transcript hash, and replay integrity classification. Clone the repository, run the vectors against your implementation, and compare. That is the entire conformance process.

Why It Exists

Why This Exists — And When Not To Reach For It

The conformance suite exists so that "HATS-compliant" is a testable fact, not a marketing claim. Because the vectors are frozen and content-hashed, two independent implementations can prove they agree without trusting each other or H33 — which is the whole point of an interoperability standard. H33 publishes it separately from the reference implementation so conformance is defined by outputs, not by anyone's code.

Use it when you are building or certifying a HATS implementation or an independent verifier and need an objective pass/fail signal.

Do not reach for it when you want to understand what the components are (that is the Architecture), what a passing verdict does and does not mean (that is Verification Guarantees), or the exact wire format (the Specification). Passing the vectors proves your implementation matches the reference outputs; it does not by itself assert anything about a specific deployed system's security posture.

What is the HATS Conformance Suite?

A frozen corpus of 26 canonical JSON test vectors — each with input bundle, expected output, transcript hash, and replay-integrity classification — that any implementation must reproduce byte-for-byte to be considered HATS-conformant, in any language, without H33 infrastructure.

How do I verify conformance?

Clone the vectors, run them against your implementation, and compare your outputs to the published expected outputs. Byte-identical results across all 26 vectors means conformant. The reference implementation is Rust, but any language producing identical outputs is equally conformant.

When should I use the conformance suite?

When building or certifying a HATS implementation or an independent verifier and you need an objective pass/fail signal. It is the executable test corpus that decides conformance.

What does passing the suite NOT prove?

It proves your implementation reproduces the reference outputs; it does not by itself assert anything about a specific deployed system's live security posture, and it does not define what a passing verdict means in operational terms — that is Verification Guarantees.

How is the conformance suite different from the architecture and specification?

The Architecture describes the components; the Specification defines the exact wire format; the Conformance Suite is the frozen test corpus that decides whether an implementation of those actually agrees, output-for-output.

Build a Conformant Verifier

Clone the vectors. Run the reference implementation. Or build your own from scratch. The standard is the proof.

View on GitHub Download Test Vectors Read the Specification