The measuring is the part that usually gets skipped.
deflection-audit Live
Your AI vendor reports 85% deflection. This audits what that number survives. It re-judges every AI-closed conversation from the transcript alone, then recomputes the rate crediting only closures that hold up. On a 40-conversation labeled set, 80% claimed came out to 55% audited.
vendor-agent-uat-kit Live
Test a vendor's AI support agent against your own rules before it talks to your customers. It grades what the agent did against what it said, so a reply promising a person with no handoff behind it is its own failure. A wrong call on a rule that conflicts or has a gap goes to the rules owner, not the vendor. Back-tested on a real vendor's staging agent, it matched hand grading on 35 of 39 tests.
scheduled-agent-detector Live
A scheduled agent that hits a permission prompt can't answer it, so it skips the write and still reports success. A nightly check that ignores what each agent says about itself and rules on whether the file it was supposed to produce actually moved. Misses get a named failure signature, and a folder it can't read is never called a failure.
agent-access-register Live
What is each scheduled agent actually allowed to touch? It reads the permission config the agents run under and each agent's instructions, then diffs both against a twelve-rule acceptable-use policy. Every capability is labeled declared or inferred. The first real run found 51 of 55 agents working from the home folder, with every credential file in reach.
skill-regression-harness
Agent skills are prompt-matched, so a model upgrade can stop one from firing without an error anywhere. Static checks plus live dispatch tests covering every installed skill, run under a tool denylist so skills that reach Salesforce and Gmail can't touch either. The one recorded live run, on the 23 prompts that existed then, got 21 right.
agent-ops-bench
Does a second agent pay for itself? Generalist, parallel specialists, and generalist plus QA reviewer, measured on accuracy, cost per ticket, and latency. Specialists took routing from 83% to 97% and left severity flat; the QA layer lifted severity from 70% to 80% at $0.60 per net correction.
triage-bench
The sequel to agent-ops-bench: a challenger that can only object, rules that only raise urgency, and a route to a person. Six configurations on 60 cases I labeled by hand landed within noise of each other, and Haiku alone matched the full system at 1/40 the cost. The bigger gap was between the written taxonomy and my own labels, and adjudicating it is what moved priority accuracy from 60% to 88%.
claude-eval-kit
The eval machinery from these projects, pulled out into something reusable. Blind classification, confusion matrices, ordinal miss-direction splits, and confusable-pattern trap audits. It's the scoring layer under deflection-audit and the skill harness.
claude-triage-simulator
An LLM triage classifier with a real eval harness. Severity and routing for IoT support tickets, scored against a 60-ticket labeled set with under- versus over-triage analysis. It caught all 12 critical tickets.