Signed frontier scorecards

Boetica beats the frontier baselines — with signed scorecards.

You can trace every win to its benchmark command, dataset hash, competitor baseline, methodology, evidence packets, trust-boundary attestation, verifier report, and KMS/Sigstore signature. Scorecards are dated, signed, and re-verifiable.

RepresentativeRepresentative end-state scorecard data. Values illustrate the signed-benchmark surface and are replaced by the live, re-verifiable feed before procurement review.

Eight signed domains, one ledger.

Each domain runs through the same trust boundary and leaves a signed scorecard. Open any card to read the methodology, baselines, hash trail, and signature.

bench:remediate

Boetica wins accepted auditable closure.

Across CVE, dependency, SARIF, IAM/RLS, and policy fixtures plus live scanner imports, Boetica beat Pixee, Mobb, Veracode AI Remediation, GitHub Copilot Autofix, and Devin on accepted auditable closure.

bench:remediate · collected 2026-06-23 · expires 2026-09-23
MetricBoeticaBest baselineWinnerArtifact
Accepted-fix rate89%58%BoeticaEvidence packet
No-regression rate98%84%BoeticaCI logs
Scanner-clean delta100%72%BoeticaScanner delta
No-misleading-PR rate100%79%BoeticaReviewer rubric
Evidence completenessCompletePartialBoeticaVerifier report
Trust-boundary result0 critical escapesNot attestedBoeticaTrust attestation

Representative end-state figures. Replaced by live signed scorecard data before procurement review.

Verifier passed2026-06-23. Verifier re-ran the packet and the hash chain held.
Signature present and re-verifiable
Algorithm
ECDSA P-256 (cosign keyless)
KMS key
gcpkms://projects/boetica-prod/locations/global/keyRings/evidence/cryptoKeys/scorecards
Sigstore bundle
sigstore-bundle://rekor/boetica/scorecards
Signer
boetica-evidence-signer
Signed at
2026-06-24T08:00:00Z
Digest
sha256:91f4e2a0
  1. Datasetsha256:77e34a90
  2. Run manifestsha256:42aa17c0
  3. Evidence packetsha256:91f4e2a0
  4. Trust attestationsha256:9cfbdc55
  5. Signaturesha256:c6f36b12