acejack

Security · The Acejack Go-Live Standard

Every system earns go-live. Before it enters normal operation.

Built on a heavily tested foundation, then privately simulated against the people, permissions, connections, and work it will carry.

Tested. Corrected. Tested again. No normal operation until every required gate passes.

Testing underneath every assistant

The agent brain is tested through 1.9 million executions before general release.

Those executions repeatedly exercise 4,000 deterministic tests. Every delivered assistant is then tested again against its role, permissions, connections, and real work.

TESTED

1.9M

Foundation test executions

Development, repair, regression, and final verification

REPEATED

4,000

Deterministic tests

Repeated across the complete foundation

PASS REQUIRED

7

Client-specific go-live checks

Every required check must pass

PASS REQUIRED

3

Consecutive clean runs

Representative work before normal operation

Seven checks · pass required

The foundation does not give your system an automatic pass.

Every assistant runs additional private simulations based on its person, role, permissions, connections, and real work. Custom AI systems use the same standard, adapted to their users, data, connected systems, actions, and delivery surface.

§ 01 · Identity and isolation

PASS REQUIRED

Identity and isolation

The assistant must recognize the correct person, role, business, and connected accounts without crossing those boundaries.

§ 02 · Permission boundaries

PASS REQUIRED

Permission boundaries

It must use only authorized tools, data, and actions. Requests outside those permissions must stop cleanly and remain recorded.

§ 03 · Representative work

PASS REQUIRED

Representative work

It must complete realistic simulations drawn from the client’s workflows, terminology, systems, people, and relevant offline steps.

§ 04 · Human approval

PASS REQUIRED

Human approval

Consequential work must remain drafted or approval-gated. Sending, publishing, scheduling, financial changes, and other material actions are tested explicitly when present in the role.

§ 05 · Misleading and ambiguous input

PASS REQUIRED

Misleading and ambiguous input

It must be challenged with untrusted documents, embedded instructions, missing facts, conflicting requests, unclear language, and information it cannot verify.

§ 06 · Failure and recovery

PASS REQUIRED

Failure and recovery

Connections must be interrupted, tools timed out, requests repeated, and information made incomplete. The assistant must recover without duplicating work, escaping its permissions, or claiming success falsely.

§ 07 · Revocation and go-live review

PASS REQUIRED

Revocation and go-live review

Access must be removable, pending work stoppable, and the final permissions and simulation record reviewable before normal operation begins.

The pass rule

Required checks pass. Then representative work passes three times in succession.

Every required boundary check must pass. Representative simulations must complete cleanly three times in succession. Any failed check is corrected and rerun. No unresolved unauthorized action, cross-account access, approval violation, or fabricated completion may remain at go-live.

Acejack records the tested configuration, relevant permissions, scenario results, corrections, and final review. The client reviews the working system before normal operation. Acejack remains responsible for enforcing the standard rather than shifting the safety judgment to the client.

After go-live

A passed system can still change. So the checks follow the change.

Relevant checks are rerun whenever permissions, connected systems, actions, responsibilities, or material behavior change. Ongoing operation includes monitoring, correction, controlled expansion, and revocable access.

Bring us the work

See how your system will be tested.

Start with a 30-minute fit call. If Acejack can help, working discovery identifies the people, systems, boundaries, and real-work simulations your system must pass.