diff --git a/README.md b/README.md index 05a962c..0be4cf2 100644 --- a/README.md +++ b/README.md @@ -1,357 +1,270 @@ -# TrustVector +
+ +# πŸ›‘οΈ TrustVector + +### Trust scores for the entire AI stack β€” models, agents, and MCP servers. -> **Open-source AI assurance framework for models, MCPs, and agents** +**Benchmarks tell you how smart an AI is. TrustVector tells you whether you can trust it in production.** [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) -[![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](http://makeapullrequest.com) [![Evaluations](https://img.shields.io/badge/Evaluations-156-blue.svg)](#-current-coverage) -[![GitHub Stars](https://img.shields.io/github/stars/Guard0-Security/TrustVector?style=social)](https://github.com/Guard0-Security/TrustVector) +[![Models](https://img.shields.io/badge/Models-60-8A2BE2.svg)](/data/models) +[![Agents](https://img.shields.io/badge/Agents-50-orange.svg)](/data/agents) +[![MCP Servers](https://img.shields.io/badge/MCP_Servers-46-green.svg)](/data/mcps) +[![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](http://makeapullrequest.com) +[![GitHub Stars](https://img.shields.io/github/stars/guard0-ai/TrustVector?style=social)](https://github.com/guard0-ai/TrustVector) -TrustVector is an evidence-based evaluation framework for AI systems, providing transparent, multi-dimensional trust scores across **security**, **privacy**, **performance**, **trust**, and **operational excellence**. +🌐 **[trustvector.dev](https://trustvector.dev)** Β· πŸ“– **[Methodology](/docs/METHODOLOGY.md)** Β· 🀝 **[Contribute](/CONTRIBUTING.md)** Β· πŸ—ΊοΈ **[Roadmap](/ROADMAP.md)** -**Powered and supported by [Guard0.ai](https://guard0.ai)** +TrustVector β€” evidence-based trust scores for AI systems -🌐 **Website**: [trustvector.dev](https://trustvector.dev) -πŸ“– **Documentation**: [/methodology](/methodology) -🀝 **Contributing**: [/contribute](/contribute) -πŸ—ΊοΈ **Roadmap**: [ROADMAP.md](/ROADMAP.md) -πŸ”’ **Security**: [SECURITY.md](/SECURITY.md) -πŸ“œ **Code of Conduct**: [CODE_OF_CONDUCT.md](/CODE_OF_CONDUCT.md) +
--- -## 🎯 What is TrustVector? - -Unlike simple benchmarks, TrustVector evaluates AI systems holistically across **5 critical dimensions**: +## 🚨 What our data found (June 2026) -1. **Performance & Reliability** - Accuracy, latency, uptime -2. **Security** - Prompt injection resistance, jailbreak defense, data leakage -3. **Privacy & Compliance** - Data residency, retention, HIPAA/GDPR -4. **Trust & Transparency** - Explainability, hallucination rate, bias -5. **Operational Excellence** - API quality, SDKs, ecosystem maturity +This isn't a list of logos. Every entry is an evidence-linked evaluation across **security, privacy, performance, transparency, and operations** β€” and the findings are uncomfortable: -### Key Features +- ⚠️ **21 of 60 models** in the registry are **retired, deprecated, superseded, or were never released** β€” including models still hardcoded in thousands of production apps (Grok 3 now *silently redirects* to a different model; Gemini 2.0 Flash was shut down June 1). +- 🩸 **Archived MCP reference servers ship unpatched SQL injection.** The Postgres reference server was still pulling ~21k weekly downloads *after* being archived with a known SQLi β€” we score it 51/100 on security so you don't find out the hard way. +- πŸ•³οΈ **Popularity β‰  safety.** Context7 (57kβ˜…, the most-starred MCP server on GitHub) scores 86/100 on performance but **59/100 on security** after the "ContextCrush" registry-poisoning vulnerability. Playwright MCP: 88 performance, 60 security. +- πŸ”“ **The agent you let browse the web matters.** General-purpose autonomous agents score as low as **50/100 on privacy** in our registry; sandboxed, permission-gated coding agents score 20+ points higher. +- ⏳ **The OpenAI Assistants API sunsets August 26, 2026.** If you're on it, your migration window is measured in weeks. It's flagged. -- **Evidence-Based**: Every score backed by verifiable sources -- **CVSS-like Weighting**: Customize dimension importance for your use case -- **Transparent**: Full methodology and confidence levels disclosed -- **Open-Source**: Community-driven, GitHub-based contribution workflow -- **Actionable**: Use case specific recommendations +**Every one of these claims links to a primary source with a date.** That's the whole point. --- -## πŸš€ Quick Start +## πŸ“Š Frontier models, scored on what benchmarks ignore -### View Evaluations +Overall = mean of 5 dimension scores. Full criteria, evidence URLs, and confidence levels in each JSON file. -Browse existing evaluations at [trustvector.dev](https://trustvector.dev) or locally: +| Model | Overall | Perf | Security | Privacy | Transparency | Ops | +|---|:---:|:---:|:---:|:---:|:---:|:---:| +| **Claude Fable 5** (Anthropic) | **92** | 98 | 92 | 93 | 88 | 91 | +| **Claude Opus 4.8** (Anthropic) | **92** | 96 | 92 | 93 | 88 | 91 | +| **GPT-5.5** (OpenAI) | **91** | 97 | 89 | 87 | 90 | 94 | +| **Gemini 3.1 Pro** (Google) | **91** | 96 | 88 | 88 | 88 | 93 | +| **Mistral Large 3** (Mistral, open) | **85** | 88 | 83 | 87 | 80 | 86 | +| **Grok 4.3** (xAI) | **83** | 94 | 83 | 76 | 82 | 82 | +| **DeepSeek-V4** (open) | **83** | 92 | 83 | 78 | 80 | 83 | +| **GLM-5** (Z.ai, open) | **82** | 92 | 80 | 75 | 81 | 83 | +| **Kimi K2.6** (Moonshot, open) | **81** | 91 | 79 | 75 | 80 | 82 | -```bash -# Clone the repository -git clone https://github.com/Guard0-Security/TrustVector.git -cd TrustVector +Notice the spread: models within 5 points of each other on *capability* differ by **15+ points on privacy and security**. If you're choosing a model for healthcare, legal, or finance, the right-hand columns are the ones that get you fired. -# Install dependencies -npm install +And it's not just models β€” the same lens on **coding agents** (Claude Code 80, OpenAI Codex 82, Devin 71, Manus 64) and **MCP servers** (GitHub 82, Playwright 80, Context7 79, archived Postgres 72) exposes exactly where the trust gaps are. -# Run the website locally -npm run dev - -# Open http://localhost:3000 -``` - -### Using the Data - -All evaluations are structured JSON files in `/data`: - -```typescript -import claudeSonnet from './data/models/claude-sonnet-4-5.json'; - -// Get overall score -const overallScore = calculateOverallScore(claudeSonnet); +
+TrustVector detail page β€” per-criterion scores with evidence +
-// Access dimension scores -const securityScore = claudeSonnet.trust_vector.security.overall_score; +--- -// Custom weighted score (CVSS-style) -const customScore = calculateCustomScore(claudeSonnet, { - performance_reliability: 0.15, - security: 0.35, - privacy_compliance: 0.30, - trust_transparency: 0.10, - operational_excellence: 0.10, -}); -``` +## 🎯 Why this exists ---- +Leaderboards answer *"which model is smartest?"* Nobody was answering: -## πŸ“Š Current Coverage +- Can this model touch **PHI under HIPAA**? What's its actual data-retention policy β€” with a link? +- Is this MCP server **maintained**, or was it quietly archived with an open CVE? +- Does this agent framework **sandbox tool execution**, or does prompt injection mean shell access? +- Is this API **deprecated**, and what's the shutdown date? -**156 Total Evaluations** across 3 categories (last refreshed June 2026): +TrustVector evaluates every entity across **5 dimensions** β€” like a CVSS score for AI systems: -### AI Models (60) +| Dimension | What it covers | +|---|---| +| ⚑ **Performance & Reliability** | Benchmarks, latency, uptime, context limits | +| πŸ”’ **Security** | Prompt-injection resistance, jailbreaks, sandboxing, CVE history | +| πŸ” **Privacy & Compliance** | Data residency, retention, training opt-out, HIPAA/GDPR/SOC 2 | +| πŸ” **Trust & Transparency** | Hallucination rate, explainability, model cards, open source | +| πŸ› οΈ **Operational Excellence** | API/SDK quality, versioning policy, ecosystem, support | -**Frontier Models:** -- βœ… Claude Fable 5, Claude Opus 4.8 / 4.7 / 4.6 / 4.5, Claude Sonnet 4.6 / 4.5, Claude Haiku 4.5 (Anthropic) -- βœ… GPT-5.5, GPT-5.4, GPT-5.3-Codex, GPT-5.2, GPT-5.1, GPT-5, o-series (OpenAI) -- βœ… Gemini 3.1 Pro, Gemini 3.5 Flash, Gemini 3 Pro/Flash (Google) -- βœ… Grok 4.3, Grok 4.1 (xAI) -- βœ… Nova 2 Lite, Nova Pro (Amazon) +Three rules make it trustworthy: -**Open-Weight Models:** -- βœ… DeepSeek V4, DeepSeek V3.2, DeepSeek R1 (DeepSeek) -- βœ… Qwen3.5 (Alibaba), Kimi K2.6 (Moonshot), GLM-5 (Z.ai), MiniMax-M2 -- βœ… Mistral Large 3 (Mistral), Command A+ (Cohere) -- βœ… Gemma 4, Gemma 3 (Google), gpt-oss-120b/20b (OpenAI) -- βœ… Llama 4 Maverick/Scout, Llama 3.x (Meta), Nemotron (NVIDIA) +1. **Every score has evidence** β€” a primary source URL, a date, and a methodology. +2. **Every score has a confidence level** β€” high / medium / low. We tell you when we're not sure. +3. **Everything is a JSON file in git** β€” disagree with a score? Open a PR with better evidence. That's the protocol. -**[See all models β†’](/data/models)** +--- -### AI Agents (50) +## ⚑ 30-second start -**Coding & Autonomous Agents:** -- βœ… Claude Code + Claude Agent SDK (Anthropic), OpenAI Codex, Devin (Cognition) -- βœ… Cursor, GitHub Copilot coding agent, Google Jules, Gemini CLI, Manus +```bash +git clone https://github.com/guard0-ai/TrustVector.git +cd TrustVector && npm install && npm run dev # β†’ http://localhost:3000 +``` -**Developer Frameworks:** -- βœ… OpenAI Agents SDK, Google ADK, Microsoft Agent Framework, AWS Strands Agents -- βœ… LangGraph, CrewAI, LlamaIndex, Pydantic AI, smolagents, Mastra, Dify +Or skip the website β€” the data is just JSON: -**Enterprise Platforms:** -- βœ… Amazon Bedrock Agents, Azure Bot Service, Gemini Enterprise Agent Platform -- βœ… IBM watsonx Assistant, Google Dialogflow, Amazon Lex, and more +```typescript +import fable5 from './data/models/claude-fable-5.json'; -**[See all agents β†’](/data/agents)** +fable5.trust_vector.security.overall_score; // 92 +fable5.trust_vector.privacy_compliance.criteria.data_retention; // evidence, URL, date, confidence +fable5.use_case_ratings['healthcare']; // { overall, notes, alternatives } +``` -### MCP Servers (46) +### Weight it like CVSS β€” your risk profile, your score -**Top Ecosystem Servers:** -- βœ… Context7, Chrome DevTools MCP, Playwright MCP, Serena +```typescript +import { calculateCustomScore, WEIGHTING_PROFILES } from '@/framework/calculator/custom-score'; -**Official Vendor Servers:** -- βœ… GitHub, Figma, Stripe, Notion, Vercel, Hugging Face, Zapier, Apify +calculateCustomScore(entity, WEIGHTING_PROFILES.healthcare); // HIPAA-weighted +calculateCustomScore(entity, WEIGHTING_PROFILES.security_first); -**Reference & Community:** -- βœ… Fetch, Git, Filesystem, Memory, Sequential Thinking, Time, Everything -- βœ… AWS, Azure, Cloudflare, Docker, Kubernetes, databases, and more -- ⚠️ Archived reference servers (Puppeteer, Postgres, SQLite, Slack, …) are flagged with security advisories -- βœ… And 15+ more... +// or roll your own +calculateCustomScore(entity, { + performance_reliability: 0.20, + security: 0.30, + privacy_compliance: 0.25, + trust_transparency: 0.15, + operational_excellence: 0.10, +}); +``` -**[See all MCPs β†’](/data/mcps)** +Predefined profiles: `balanced` Β· `security_first` Β· `performance_focused` Β· `enterprise` Β· `healthcare` Β· `financial` Β· `startup` --- -## 🀝 Contributing +## πŸ“¦ Current Coverage -We welcome contributions! Here's how to add an evaluation: +**156 evaluations** across 3 categories (last refreshed June 2026 β€” yes, including the models that launched *this month*): -### 1. Choose an Entity +
+🧠 AI Models (60) β€” Claude Fable 5 β†’ archived also-rans, all scored -Pick an unevaluated AI system (model, MCP, or agent). +**Frontier:** Claude Fable 5, Opus 4.8/4.7/4.6/4.5, Sonnet 4.6/4.5, Haiku 4.5 Β· GPT-5.5, GPT-5.4, GPT-5.3-Codex, GPT-5.2, GPT-5.1, GPT-5, o-series Β· Gemini 3.1 Pro, Gemini 3.5 Flash, Gemini 3 Β· Grok 4.3, Grok 4.1 Β· Nova 2 Lite, Nova Pro -### 2. Gather Evidence +**Open-weight:** DeepSeek V4 / V3.2 / R1 Β· Qwen3.5 Β· Kimi K2.6 Β· GLM-5 Β· MiniMax-M2 Β· Mistral Large 3 Β· Command A+ Β· Gemma 4 / 3 Β· gpt-oss-120b/20b Β· Llama 4 / 3.x Β· Nemotron -For each criterion, collect: -- **Source**: Benchmark name, paper, or documentation -- **URL**: Link to evidence -- **Date**: When published -- **Value**: What it shows (e.g., "92.3% on MATH-500") +**[Browse all models β†’](/data/models)** +
-### 3. Create Evaluation File +
+πŸ€– AI Agents (50) β€” coding agents, frameworks, enterprise platforms -Use our template: +**Coding & autonomous:** Claude Code, Claude Agent SDK, OpenAI Codex, Devin, Cursor, GitHub Copilot coding agent, Google Jules, Gemini CLI, Manus -```bash -npm run create-template -- --type model --id your-model-name -``` +**Frameworks:** OpenAI Agents SDK, Google ADK, Microsoft Agent Framework, AWS Strands, LangGraph, CrewAI, LlamaIndex, Pydantic AI, smolagents, Mastra, Dify -Fill in the JSON following the schema in `/framework/schema/types.ts`. +**Enterprise:** Amazon Bedrock Agents, Azure Bot Service, Gemini Enterprise Agent Platform, IBM watsonx Assistant, Dialogflow, Lex, and more β€” plus deprecated/archived projects (Swarm, AgentGPT, BabyAGI…) clearly flagged -### 4. Validate +**[Browse all agents β†’](/data/agents)** +
-```bash -npm run validate -``` +
+πŸ”Œ MCP Servers (46) β€” incl. security advisories on archived servers -Ensures your evaluation meets quality standards. +**Top ecosystem:** Context7, Chrome DevTools MCP, Playwright MCP, Serena -### 5. Submit PR - -```bash -git checkout -b evaluation/your-model-name -git add data/models/your-model-name.json -git commit -m "Add evaluation for Your Model Name" -git push origin evaluation/your-model-name -``` +**Official vendor:** GitHub, Figma, Stripe, Notion, Vercel, Hugging Face, Zapier, Apify, Firecrawl, shadcn -Open a PR! We'll review within 48 hours. +**Reference:** the 7 actively maintained servers (fetch, git, filesystem, memory, time, sequential-thinking, everything) β€” plus the **archived** ones (Puppeteer, Postgres, SQLite, Slack, …) flagged with security advisories so you don't `npx` your way into a CVE -See [CONTRIBUTING.md](/CONTRIBUTING.md) for detailed guidelines. +**[Browse all MCPs β†’](/data/mcps)** +
--- -## πŸ“– Methodology - -### Scoring (0-100) - -- **90-100**: Exceptional - Industry leading -- **75-89**: Strong - Meets enterprise requirements -- **60-74**: Adequate - Usable with caveats -- **40-59**: Concerning - Significant gaps -- **0-39**: Poor - Not recommended +## 🀝 Contribute an evaluation (it's just a PR) -### Confidence Levels +The registry stays honest because anyone can challenge it. Add or update an evaluation: -- **High**: Multiple independent sources, recent testing -- **Medium**: Single authoritative source or slightly dated -- **Low**: Inferred, vendor claims only, needs verification - -### Evidence Requirements +```bash +# 1. Start from an existing evaluation as your template +cp data/models/claude-fable-5.json data/models/your-model-name.json -Every score requires: -1. Primary source (benchmark, paper, official doc) -2. Date of evidence -3. Methodology used to derive score -4. Last verified timestamp +# 2. Fill in scores β€” every score needs evidence (source, URL, date) + confidence level -See [METHODOLOGY.md](/docs/METHODOLOGY.md) for full details. +# 3. Validate against the schema +npm run validate ---- +# 4. Open a PR +git checkout -b evaluation/your-model-name && git add data/ && git commit -m "Add evaluation for X" +``` -## πŸ› οΈ Custom Score Calculator +We review within 48 hours. Found a score you disagree with? **Bring a better source and open a PR** β€” that's how the system is supposed to work. See [CONTRIBUTING.md](/CONTRIBUTING.md). -Like CVSS, you can weight dimensions based on your priorities: +### Scoring scale -```typescript -import { calculateCustomScore, WEIGHTING_PROFILES } from '@/framework/calculator/custom-score'; +| Range | Meaning | +|---|---| +| 90–100 | Exceptional β€” industry leading | +| 75–89 | Strong β€” meets enterprise requirements | +| 60–74 | Adequate β€” usable with caveats | +| 40–59 | Concerning β€” significant gaps | +| 0–39 | Poor β€” not recommended | -// Use a predefined profile -const score = calculateCustomScore(entity, WEIGHTING_PROFILES.security_first); +Full scoring rules, confidence definitions, and evidence requirements: [METHODOLOGY.md](/docs/METHODOLOGY.md) -// Or create your own weights -const customWeights = { - performance_reliability: 0.20, - security: 0.30, - privacy_compliance: 0.25, - trust_transparency: 0.15, - operational_excellence: 0.10, -}; - -const myScore = calculateCustomScore(entity, customWeights); -``` +--- -### Predefined Profiles +## πŸ†š How it compares -- `balanced` - Equal weight (20% each) -- `security_first` - Security & privacy prioritized -- `performance_focused` - Speed & reliability first -- `enterprise` - Balanced security, compliance, ops -- `healthcare` - HIPAA compliance focused -- `financial` - Security & compliance heavy -- `startup` - Performance & cost optimized +| | **TrustVector** | Leaderboards | Vendor model cards | +|---|:---:|:---:|:---:| +| Security & privacy scored | βœ… | ❌ | ⚠️ self-reported | +| Evidence URL on every score | βœ… | ⚠️ | ❌ | +| Confidence levels | βœ… | ❌ | ❌ | +| Covers agents & MCP servers | βœ… | ❌ | ❌ | +| Flags deprecated/archived/CVE'd entries | βœ… | ❌ | ❌ | +| Custom CVSS-style weighting | βœ… | ❌ | ❌ | +| Disagreement protocol | PR with sources | ❌ | ❌ | +| License | MIT, all data in git | varies | proprietary | --- -## πŸ—οΈ Project Structure +## πŸ—οΈ Project structure ``` -trust-vector/ -β”œβ”€β”€ data/ # Evaluation data -β”‚ β”œβ”€β”€ models/ # Model evaluations (JSON) -β”‚ β”œβ”€β”€ mcps/ # MCP evaluations -β”‚ β”œβ”€β”€ agents/ # Agent evaluations -β”‚ └── use-cases/ # Use case taxonomy -β”œβ”€β”€ framework/ # Core framework -β”‚ β”œβ”€β”€ schema/ # TypeScript types & validation -β”‚ └── calculator/ # Custom score calculator -β”œβ”€β”€ website/ # Next.js website -β”‚ β”œβ”€β”€ app/ # Pages and routes -β”‚ β”œβ”€β”€ components/ # React components -β”‚ └── lib/ # Utilities -β”œβ”€β”€ docs/ # Documentation -β”‚ β”œβ”€β”€ CONTRIBUTING.md -β”‚ β”œβ”€β”€ METHODOLOGY.md -β”‚ └── examples/ -└── scripts/ # Validation & tools - └── validate-data.ts # CI validation +trustvector/ +β”œβ”€β”€ data/ # The registry β€” one JSON file per evaluation +β”‚ β”œβ”€β”€ models/ # 60 model evaluations +β”‚ β”œβ”€β”€ agents/ # 50 agent evaluations +β”‚ β”œβ”€β”€ mcps/ # 46 MCP server evaluations +β”‚ └── use-cases/ # Use-case taxonomy (healthcare, finance, …) +β”œβ”€β”€ framework/ # Schema, Zod validation, custom-score calculator +β”œβ”€β”€ app/ # Next.js site (static export, zero tracking) +└── scripts/ # CI validation β€” every PR is schema-checked ``` ---- - -## πŸ”’ Security & Privacy - -TrustVector itself: -- βœ… No user data collection -- βœ… No cookies or tracking -- βœ… Static site generation (no runtime deps) -- βœ… All evaluations version-controlled -- βœ… Schema validation on every PR +**TrustVector itself collects nothing:** no cookies, no tracking, static site generation, every evaluation version-controlled and validated in CI. --- -## 🌟 Why TrustVector? - -| Feature | TrustVector | Typical Benchmarks | -|---------|-------------|-------------------| -| Multi-dimensional | βœ… 5 dimensions | ❌ 1-2 metrics | -| Evidence-based | βœ… Every score sourced | ⚠️ Limited | -| Confidence levels | βœ… High/Med/Low | ❌ No | -| Security evaluation | βœ… Comprehensive | ⚠️ Basic | -| Privacy assessment | βœ… Detailed | ❌ Rare | -| Use case specific | βœ… 10+ use cases | ⚠️ Generic | -| Custom weighting | βœ… CVSS-style | ❌ No | -| Open-source | βœ… MIT | ⚠️ Varies | - ---- +## ⭐ Star history -## πŸ“œ License +If TrustVector saved you from a deprecated API, an archived dependency, or a compliance surprise β€” star the repo. Stars are how more teams find out their MCP server has a CVE. -MIT License - see [LICENSE](/LICENSE) for details. +[![Star History Chart](https://api.star-history.com/svg?repos=guard0-ai/TrustVector&type=Date)](https://star-history.com/#guard0-ai/TrustVector&Date) --- ## πŸ™ Acknowledgments -Inspired by: -- [CVSS](https://www.first.org/cvss/) - Vulnerability scoring methodology -- [RiskRubric.ai](https://riskrubric.ai/) - AI model evaluation -- [LMSYS Chatbot Arena](https://lmsys.org/) - Crowdsourced benchmarking -- [OWASP LLM Top 10](https://owasp.org/www-project-top-10-for-large-language-model-applications/) - LLM security - -Built with: -- Next.js 14 & React 18 -- TypeScript -- Tailwind CSS -- shadcn/ui -- Recharts -- Zod (validation) - ---- +Methodology inspired by [CVSS](https://www.first.org/cvss/), [OWASP LLM Top 10](https://owasp.org/www-project-top-10-for-large-language-model-applications/), [RiskRubric.ai](https://riskrubric.ai/), and [LMSYS Chatbot Arena](https://lmsys.org/). Built with Next.js, TypeScript, Tailwind, Recharts, and Zod. -## 🌟 Support +## πŸ“¬ Community -If you find TrustVector useful: -- ⭐ **Star the repository** to show support -- πŸ› **Report bugs** via [Issues](https://github.com/Guard0-Security/TrustVector/issues) -- πŸ’‘ **Request features** via [Discussions](https://github.com/Guard0-Security/TrustVector/discussions) -- 🀝 **Contribute** evaluations (see [CONTRIBUTING.md](/CONTRIBUTING.md)) -- πŸ“’ **Share** with your network +- πŸ› [Issues](https://github.com/guard0-ai/TrustVector/issues) β€” bugs and evaluation corrections +- πŸ’¬ [Discussions](https://github.com/guard0-ai/TrustVector/discussions) β€” questions and proposals +- πŸ”’ [SECURITY.md](/SECURITY.md) β€” report vulnerabilities +- πŸ—ΊοΈ [ROADMAP.md](/ROADMAP.md) β€” what's next ---- - -## πŸ“¬ Contact +## πŸ“œ License -- **Issues**: [GitHub Issues](https://github.com/Guard0-Security/TrustVector/issues) -- **Discussions**: [GitHub Discussions](https://github.com/Guard0-Security/TrustVector/discussions) -- **Feature Requests**: [Roadmap](ROADMAP.md) -- **Security**: [SECURITY.md](SECURITY.md) +MIT β€” see [LICENSE](/LICENSE). The data is yours to build on. ---
-**[⭐ Star on GitHub](https://github.com/Guard0-Security/TrustVector)** Β· **[🀝 Contribute](/contribute)** Β· **[πŸ“– Read Docs](/methodology)** +**[⭐ Star on GitHub](https://github.com/guard0-ai/TrustVector)** Β· **[🀝 Contribute an evaluation](/CONTRIBUTING.md)** Β· **[πŸ“– Read the methodology](/docs/METHODOLOGY.md)** Made with ❀️ by [Guard0.ai](https://guard0.ai) and the TrustVector community +*Trust, but verify β€” then version-control the verification.* +
diff --git a/data/models/claude-fable-5.json b/data/models/claude-fable-5.json index e429f3f..a04530d 100644 --- a/data/models/claude-fable-5.json +++ b/data/models/claude-fable-5.json @@ -3,12 +3,11 @@ "type": "model", "name": "Claude Fable 5", "provider": "Anthropic", - "version": "claude-fable-5", + "version": "20260609", "last_evaluated": "2026-06-10", "evaluated_by": "TrustVector Team", "description": "Anthropic's new top-tier model above Opus and the first generally available Mythos-class model. State-of-the-art on nearly all tested benchmarks at launch, including the highest frontier score on Cognition's FrontierCode. Adaptive thinking only, 1M context, 128K output.", "website": "https://www.anthropic.com/news/claude-fable-5-mythos-5", - "trust_vector": { "performance_reliability": { "overall_score": 98, @@ -135,7 +134,6 @@ }, "notes": "Current highest-performing model in the registry. SOTA on nearly all tested benchmarks at launch, including the top frontier score on Cognition's FrontierCode. Latency data is preliminary (released 2026-06-09)." }, - "security": { "overall_score": 92, "criteria": { @@ -212,7 +210,6 @@ }, "notes": "Frontier-tier safety posture; the unrestricted Mythos-class research model (Claude Mythos 5) is limited to research partners while Fable 5 is the generally available variant. Independent red-team coverage still accumulating at launch." }, - "privacy_compliance": { "overall_score": 93, "criteria": { @@ -303,7 +300,6 @@ }, "notes": "Same strong Anthropic compliance posture as the Opus line: SOC 2 Type II, GDPR, HIPAA-eligible, training opt-out by default for API traffic." }, - "trust_transparency": { "overall_score": 88, "criteria": { @@ -409,7 +405,6 @@ }, "notes": "Strong documentation and guardrails. Thinking content is omitted by default (summarized display is opt-in), which slightly reduces out-of-the-box reasoning visibility compared to older Opus defaults." }, - "operational_excellence": { "overall_score": 91, "criteria": { @@ -426,7 +421,7 @@ ], "methodology": "Review of API design, consistency, and feature completeness", "last_verified": "2026-06-10", - "notes": "One new breaking change vs Opus 4.8: explicit thinking disabled returns 400 β€” omit the thinking parameter instead. No temperature/top_p sampling parameters." + "notes": "One new breaking change vs Opus 4.8: explicit thinking disabled returns 400 \u2014 omit the thinking parameter instead. No temperature/top_p sampling parameters." }, "sdk_quality": { "score": 93, @@ -492,7 +487,7 @@ "source": "Anthropic Launch Announcement", "url": "https://www.anthropic.com/news/claude-fable-5-mythos-5", "date": "2026-06-09", - "value": "Available on the Anthropic API at launch; first generally available Mythos-class model β€” cloud-provider rollout following" + "value": "Available on the Anthropic API at launch; first generally available Mythos-class model \u2014 cloud-provider rollout following" } ], "methodology": "Analysis of third-party integrations and availability surfaces", @@ -517,60 +512,88 @@ "notes": "Same API surface as Opus 4.7/4.8 makes adoption straightforward for existing Claude users. Day-old release means ecosystem and operational track record are still maturing." } }, - "use_case_ratings": { "code-generation": { "overall": 98, "notes": "Highest frontier score on Cognition's FrontierCode and SOTA on tested coding benchmarks at launch. Best-in-registry for the hardest software engineering work; xhigh effort recommended.", - "alternatives": ["claude-opus-4-8", "gpt-5-3-codex"] + "alternatives": [ + "claude-opus-4-8", + "gpt-5-3-codex" + ] }, "customer-support": { "overall": 88, "notes": "Exceptional quality but premium pricing ($10/$50) and latency make it overkill for routine support; reserve for complex escalations.", - "alternatives": ["claude-sonnet-4-6", "claude-haiku-4-5"] + "alternatives": [ + "claude-sonnet-4-6", + "claude-haiku-4-5" + ] }, "content-creation": { "overall": 95, "notes": "Top-tier long-form writing with strong structure and voice control. Effort parameter lets teams trade cost for polish on flagship pieces.", - "alternatives": ["claude-opus-4-8", "gpt-5-5"] + "alternatives": [ + "claude-opus-4-8", + "gpt-5-5" + ] }, "data-analysis": { "overall": 97, "notes": "SOTA quantitative reasoning with 1M context for whole-dataset and multi-document analysis.", - "alternatives": ["claude-opus-4-8", "gemini-3-1-pro"] + "alternatives": [ + "claude-opus-4-8", + "gemini-3-1-pro" + ] }, "research-assistant": { "overall": 97, "notes": "Best-in-registry deep research: 1M context, adaptive thinking, and strong synthesis across large corpora.", - "alternatives": ["claude-opus-4-8", "gemini-3-1-pro"] + "alternatives": [ + "claude-opus-4-8", + "gemini-3-1-pro" + ] }, "legal-compliance": { "overall": 93, "notes": "Strong privacy posture (SOC 2 Type II, GDPR, HIPAA-eligible) and excellent long-document analysis; launch-recency may matter for conservative legal teams.", - "alternatives": ["claude-opus-4-8", "claude-sonnet-4-6"] + "alternatives": [ + "claude-opus-4-8", + "claude-sonnet-4-6" + ] }, "healthcare": { "overall": 91, "notes": "HIPAA eligible with training opt-out by default. Highest accuracy in the registry for clinical reasoning, though real-world validation is still early post-launch.", - "alternatives": ["claude-opus-4-8", "claude-sonnet-4-6"] + "alternatives": [ + "claude-opus-4-8", + "claude-sonnet-4-6" + ] }, "financial-analysis": { "overall": 96, "notes": "SOTA quantitative and multi-step reasoning; 1M context handles full filings and model workbooks in one pass.", - "alternatives": ["claude-opus-4-8", "gpt-5-5"] + "alternatives": [ + "claude-opus-4-8", + "gpt-5-5" + ] }, "education": { "overall": 94, "notes": "Excellent explanations with effort-adjustable depth; premium pricing limits high-volume tutoring deployments.", - "alternatives": ["claude-sonnet-4-6", "gpt-5-5"] + "alternatives": [ + "claude-sonnet-4-6", + "gpt-5-5" + ] }, "creative-writing": { "overall": 93, - "notes": "Strong narrative craft and stylistic range. No temperature/top_p controls β€” variance must be elicited via prompting.", - "alternatives": ["claude-opus-4-8", "gpt-5-5"] + "notes": "Strong narrative craft and stylistic range. No temperature/top_p controls \u2014 variance must be elicited via prompting.", + "alternatives": [ + "claude-opus-4-8", + "gpt-5-5" + ] } }, - "strengths": [ "State-of-the-art on nearly all tested benchmarks at launch; highest-performing model in the registry", "Highest frontier score on Cognition's FrontierCode coding benchmark", @@ -579,29 +602,25 @@ "Adaptive thinking with effort parameter (low/medium/high/xhigh/max) for cost/quality control", "Strong compliance posture: SOC 2 Type II, GDPR, HIPAA-eligible, training opt-out by default for API" ], - "limitations": [ "Premium pricing at $10/$50 per 1M tokens (2x Opus 4.8)", - "Adaptive thinking only β€” no manual thinking budgets, and no temperature/top_p sampling parameters", + "Adaptive thinking only \u2014 no manual thinking budgets, and no temperature/top_p sampling parameters", "Explicit thinking-disabled requests return 400 (omit the thinking parameter instead)", - "Released 2026-06-09 β€” independent benchmark replication and operational track record still limited", + "Released 2026-06-09 \u2014 independent benchmark replication and operational track record still limited", "Higher latency than Sonnet/Haiku tiers, especially at xhigh/max effort" ], - "best_for": [ "Frontier-difficulty software engineering and long-horizon agentic coding", "Deep research and analysis over very large corpora (1M context)", "High-stakes reasoning where accuracy justifies premium cost", "Enterprise workloads requiring strong compliance with top-tier capability" ], - "not_recommended_for": [ "Cost-sensitive high-volume inference (use Sonnet or Haiku tiers)", "Real-time applications requiring sub-second latency", "Workflows that depend on temperature/top_p sampling controls", "Audio processing applications" ], - "metadata": { "pricing": { "input": "$10.00 per 1M tokens", @@ -624,7 +643,12 @@ "Arabic", "Hindi" ], - "modalities": ["text", "image (input)", "document", "computer-use"], + "modalities": [ + "text", + "image (input)", + "document", + "computer-use" + ], "api_endpoint": "https://api.anthropic.com/v1/messages", "api_model_id": "claude-fable-5", "open_source": false, @@ -633,9 +657,13 @@ "knowledge_cutoff": "Not disclosed", "release_date": "2026-06-09" }, - - "related_entities": ["claude-opus-4-8", "claude-opus-4-7", "claude-sonnet-4-6", "gpt-5-5", "gemini-3-1-pro"], - + "related_entities": [ + "claude-opus-4-8", + "claude-opus-4-7", + "claude-sonnet-4-6", + "gpt-5-5", + "gemini-3-1-pro" + ], "tags": [ "coding", "reasoning", diff --git a/data/models/claude-opus-4-7.json b/data/models/claude-opus-4-7.json index 20b8599..5ad1f89 100644 --- a/data/models/claude-opus-4-7.json +++ b/data/models/claude-opus-4-7.json @@ -3,12 +3,11 @@ "type": "model", "name": "Claude Opus 4.7", "provider": "Anthropic", - "version": "claude-opus-4-7", + "version": "20260416", "last_evaluated": "2026-06-10", "evaluated_by": "TrustVector Team", "description": "Previous-generation Opus flagship, superseded by Opus 4.8. 64.3% SWE-Bench Pro and 94.2% GPQA Diamond at launch. First Claude with high-resolution vision (2576px long edge, pixel-accurate coordinates), task budgets (beta), and the xhigh effort level.", "website": "https://www.anthropic.com/news/claude-opus-4-7", - "trust_vector": { "performance_reliability": { "overall_score": 95, @@ -135,7 +134,6 @@ }, "notes": "Was Anthropic's most capable model at launch (2026-04-16); now the previous-generation Opus behind Opus 4.8. Remains a strong, fully supported flagship-class choice, especially for vision-heavy workloads." }, - "security": { "overall_score": 91, "criteria": { @@ -212,7 +210,6 @@ }, "notes": "Introduced real-time cybersecurity safeguards to the Opus line. Strong overall posture carried forward into Opus 4.8." }, - "privacy_compliance": { "overall_score": 93, "criteria": { @@ -303,7 +300,6 @@ }, "notes": "Standard Anthropic enterprise compliance posture: SOC 2 Type II, GDPR, HIPAA-eligible, training opt-out by default for API traffic." }, - "trust_transparency": { "overall_score": 87, "criteria": { @@ -315,12 +311,12 @@ "source": "Anthropic Adaptive Thinking Documentation", "url": "https://platform.claude.com/docs/en/build-with-claude/adaptive-thinking", "date": "2026-04-16", - "value": "Adaptive thinking with effort control; thinking content omitted by default β€” summarized display is opt-in" + "value": "Adaptive thinking with effort control; thinking content omitted by default \u2014 summarized display is opt-in" } ], "methodology": "Evaluation of reasoning transparency and explanation capabilities", "last_verified": "2026-06-10", - "notes": "First Opus where thinking text defaults to omitted β€” a transparency regression vs Opus 4.6 defaults, recoverable via display: summarized" + "notes": "First Opus where thinking text defaults to omitted \u2014 a transparency regression vs Opus 4.6 defaults, recoverable via display: summarized" }, "hallucination_rate": { "score": 88, @@ -409,7 +405,6 @@ }, "notes": "Strong documentation and guardrails. Thinking content omitted by default reduces out-of-the-box reasoning visibility; opt in to summarized display if reasoning is surfaced to users." }, - "operational_excellence": { "overall_score": 91, "criteria": { @@ -421,7 +416,7 @@ "source": "Anthropic Migration Guide", "url": "https://platform.claude.com/docs/en/about-claude/models/migration-guide", "date": "2026-04-16", - "value": "Introduced the xhigh effort level and task budgets (beta); adaptive thinking only β€” budget_tokens and temperature/top_p/top_k removed" + "value": "Introduced the xhigh effort level and task budgets (beta); adaptive thinking only \u2014 budget_tokens and temperature/top_p/top_k removed" } ], "methodology": "Review of API design, consistency, and feature completeness", @@ -516,60 +511,88 @@ "notes": "Mature operational profile. Superseded by Opus 4.8 as the flagship Opus, but remains fully supported at the same $5/$25 price; upgrade to 4.8 is a drop-in model-ID swap." } }, - "use_case_ratings": { "code-generation": { "overall": 95, - "notes": "64.3% SWE-Bench Pro with strong long-horizon agentic coding and improved bug-finding. Superseded by Opus 4.8 at the same price β€” prefer 4.8 for new builds.", - "alternatives": ["claude-opus-4-8", "gpt-5-3-codex"] + "notes": "64.3% SWE-Bench Pro with strong long-horizon agentic coding and improved bug-finding. Superseded by Opus 4.8 at the same price \u2014 prefer 4.8 for new builds.", + "alternatives": [ + "claude-opus-4-8", + "gpt-5-3-codex" + ] }, "customer-support": { "overall": 88, "notes": "High quality but more clipped, direct tone than 4.8; Sonnet/Haiku tiers are more cost-effective for routine volume.", - "alternatives": ["claude-sonnet-4-6", "claude-haiku-4-5"] + "alternatives": [ + "claude-sonnet-4-6", + "claude-haiku-4-5" + ] }, "content-creation": { "overall": 91, "notes": "Strong long-form output, though more terse and less warm than Opus 4.8 by default; style is prompt-tunable.", - "alternatives": ["claude-opus-4-8", "gpt-5-5"] + "alternatives": [ + "claude-opus-4-8", + "gpt-5-5" + ] }, "data-analysis": { "overall": 94, "notes": "Excellent analytical depth; high-resolution vision enables pixel-level chart and figure transcription.", - "alternatives": ["claude-opus-4-8", "gemini-3-1-pro"] + "alternatives": [ + "claude-opus-4-8", + "gemini-3-1-pro" + ] }, "research-assistant": { "overall": 94, "notes": "Strong deep research with 1M context and improved file-based memory; Opus 4.8 improves further on long-horizon coherence.", - "alternatives": ["claude-opus-4-8", "gemini-3-1-pro"] + "alternatives": [ + "claude-opus-4-8", + "gemini-3-1-pro" + ] }, "legal-compliance": { "overall": 92, "notes": "Strong privacy posture (SOC 2 Type II, GDPR, HIPAA-eligible) and literal instruction following suited to compliance pipelines.", - "alternatives": ["claude-opus-4-8", "claude-sonnet-4-6"] + "alternatives": [ + "claude-opus-4-8", + "claude-sonnet-4-6" + ] }, "healthcare": { "overall": 90, "notes": "HIPAA eligible with training opt-out by default; high-resolution vision aids medical document and chart understanding.", - "alternatives": ["claude-opus-4-8", "claude-sonnet-4-6"] + "alternatives": [ + "claude-opus-4-8", + "claude-sonnet-4-6" + ] }, "financial-analysis": { "overall": 93, "notes": "Excellent quantitative reasoning; pixel-accurate chart reading and 1M context handle full filings and figures.", - "alternatives": ["claude-opus-4-8", "gpt-5-5"] + "alternatives": [ + "claude-opus-4-8", + "gpt-5-5" + ] }, "education": { "overall": 92, "notes": "Clear, precise explanations with effort-adjustable depth; more literal style benefits structured curricula.", - "alternatives": ["claude-sonnet-4-6", "gpt-5-5"] + "alternatives": [ + "claude-sonnet-4-6", + "gpt-5-5" + ] }, "creative-writing": { "overall": 89, "notes": "Capable but more clipped and direct than Opus 4.8's warmer voice; no sampling parameters, so variety must be prompted.", - "alternatives": ["claude-opus-4-8", "gpt-5-5"] + "alternatives": [ + "claude-opus-4-8", + "gpt-5-5" + ] } }, - "strengths": [ "64.3% SWE-Bench Pro and 94.2% GPQA Diamond at launch", "First Claude with high-resolution vision: 2576px long edge with pixel-accurate coordinates", @@ -578,29 +601,25 @@ "More literal, predictable instruction following for tuned pipelines", "Strong compliance posture: SOC 2 Type II, GDPR, HIPAA-eligible, training opt-out by default" ], - "limitations": [ "Superseded by Opus 4.8 as the current flagship Opus (same price, drop-in upgrade)", - "Adaptive thinking only β€” budget_tokens and temperature/top_p/top_k return 400", + "Adaptive thinking only \u2014 budget_tokens and temperature/top_p/top_k return 400", "Thinking content omitted by default; summarized display requires opt-in", "Full-resolution images can use up to ~3x more image tokens than prior models", "Reaches for tools and subagents less often than Opus 4.6 without explicit prompting" ], - "best_for": [ "Vision-heavy workloads: screenshots, computer use, chart and document understanding", "Structured extraction and tuned pipelines that benefit from literal instruction following", "Long-horizon agentic coding where Opus 4.8 has not yet been qualified", "Teams pinned to a validated model version for reproducibility" ], - "not_recommended_for": [ "New deployments where Opus 4.8 is available at the same price with better performance", "Real-time applications requiring sub-second latency", "Cost-sensitive high-volume inference (use Sonnet or Haiku tiers)", "Workflows that depend on temperature/top_p sampling controls" ], - "metadata": { "pricing": { "input": "$5.00 per 1M tokens", @@ -623,7 +642,12 @@ "Arabic", "Hindi" ], - "modalities": ["text", "image (input, high-resolution)", "document", "computer-use"], + "modalities": [ + "text", + "image (input, high-resolution)", + "document", + "computer-use" + ], "api_endpoint": "https://api.anthropic.com/v1/messages", "api_model_id": "claude-opus-4-7", "open_source": false, @@ -632,9 +656,13 @@ "knowledge_cutoff": "Not disclosed", "release_date": "2026-04-16" }, - - "related_entities": ["claude-opus-4-8", "claude-fable-5", "claude-opus-4-6", "claude-sonnet-4-6", "gpt-5-4"], - + "related_entities": [ + "claude-opus-4-8", + "claude-fable-5", + "claude-opus-4-6", + "claude-sonnet-4-6", + "gpt-5-4" + ], "tags": [ "coding", "reasoning", diff --git a/data/models/claude-opus-4-8.json b/data/models/claude-opus-4-8.json index 1181b28..2e7c73f 100644 --- a/data/models/claude-opus-4-8.json +++ b/data/models/claude-opus-4-8.json @@ -3,12 +3,11 @@ "type": "model", "name": "Claude Opus 4.8", "provider": "Anthropic", - "version": "claude-opus-4-8", + "version": "20260528", "last_evaluated": "2026-06-10", "evaluated_by": "TrustVector Team", "description": "Anthropic's flagship Opus model with state-of-the-art long-horizon agentic execution, knowledge work, and memory. 84% on Online-Mind2Web, dynamic multi-subagent workflows, ~4x less likely to miss its own code flaws than its predecessor, and 1M context at standard pricing.", "website": "https://www.anthropic.com/news/claude-opus-4-8", - "trust_vector": { "performance_reliability": { "overall_score": 96, @@ -135,7 +134,6 @@ }, "notes": "Current flagship Opus. State-of-the-art long-horizon agentic execution, knowledge work, and memory; 84% Online-Mind2Web; dynamic multi-subagent workflows. Superseded only by the higher-tier Claude Fable 5." }, - "security": { "overall_score": 92, "criteria": { @@ -212,7 +210,6 @@ }, "notes": "Strong safety posture with agentic-specific safeguards. Mid-session system prompts (beta) give operators a non-spoofable instruction channel for long-running sessions." }, - "privacy_compliance": { "overall_score": 93, "criteria": { @@ -303,7 +300,6 @@ }, "notes": "Standard Anthropic enterprise compliance posture: SOC 2 Type II, GDPR, HIPAA-eligible, training opt-out by default for API traffic." }, - "trust_transparency": { "overall_score": 88, "criteria": { @@ -406,9 +402,8 @@ "last_verified": "2026-06-10" } }, - "notes": "More deliberate and transparent in long agentic runs than Opus 4.7 β€” narrates progress, flags uncertainty, and self-verifies code. Thinking text remains omitted by default." + "notes": "More deliberate and transparent in long agentic runs than Opus 4.7 \u2014 narrates progress, flags uncertainty, and self-verifies code. Thinking text remains omitted by default." }, - "operational_excellence": { "overall_score": 91, "criteria": { @@ -420,7 +415,7 @@ "source": "Anthropic Migration Guide", "url": "https://platform.claude.com/docs/en/about-claude/models/migration-guide", "date": "2026-05-28", - "value": "Same API surface as Opus 4.7 β€” no new breaking changes; adds mid-session system prompts (beta)" + "value": "Same API surface as Opus 4.7 \u2014 no new breaking changes; adds mid-session system prompts (beta)" } ], "methodology": "Review of API design, consistency, and feature completeness", @@ -515,78 +510,104 @@ "notes": "Drop-in upgrade from Opus 4.7 (identical API surface). 1M context at standard pricing with no long-context premium; optional fast mode at $10/$50." } }, - "use_case_ratings": { "code-generation": { "overall": 97, "notes": "State-of-the-art long-horizon agentic coding; ~4x less likely to miss its own code flaws than Opus 4.7. Best value flagship for software engineering at $5/$25.", - "alternatives": ["claude-fable-5", "gpt-5-3-codex"] + "alternatives": [ + "claude-fable-5", + "gpt-5-3-codex" + ] }, "customer-support": { "overall": 89, "notes": "Excellent quality with warmer, clearer writing than Opus 4.7, but Sonnet/Haiku tiers are more cost-effective for routine volume.", - "alternatives": ["claude-sonnet-4-6", "claude-haiku-4-5"] + "alternatives": [ + "claude-sonnet-4-6", + "claude-haiku-4-5" + ] }, "content-creation": { "overall": 94, - "notes": "Clearer, warmer, less hedged prose than prior Opus models β€” approaches expert-level structure at higher effort.", - "alternatives": ["claude-fable-5", "gpt-5-5"] + "notes": "Clearer, warmer, less hedged prose than prior Opus models \u2014 approaches expert-level structure at higher effort.", + "alternatives": [ + "claude-fable-5", + "gpt-5-5" + ] }, "data-analysis": { "overall": 95, "notes": "Strong analytical depth with 1M context for whole-dataset work; dynamic multi-subagent workflows fan out across large analyses.", - "alternatives": ["claude-fable-5", "gemini-3-1-pro"] + "alternatives": [ + "claude-fable-5", + "gemini-3-1-pro" + ] }, "research-assistant": { "overall": 96, "notes": "State-of-the-art knowledge work and memory; excels at multi-day research with file-based memory and 1M context.", - "alternatives": ["claude-fable-5", "gemini-3-1-pro"] + "alternatives": [ + "claude-fable-5", + "gemini-3-1-pro" + ] }, "legal-compliance": { "overall": 93, "notes": "Strong privacy posture (SOC 2 Type II, GDPR, HIPAA-eligible) and thorough long-document analysis at 1M context with no long-context premium.", - "alternatives": ["claude-fable-5", "claude-sonnet-4-6"] + "alternatives": [ + "claude-fable-5", + "claude-sonnet-4-6" + ] }, "healthcare": { "overall": 91, "notes": "HIPAA eligible with training opt-out by default. Deliberate, uncertainty-flagging behavior suits clinical documentation.", - "alternatives": ["claude-fable-5", "claude-sonnet-4-6"] + "alternatives": [ + "claude-fable-5", + "claude-sonnet-4-6" + ] }, "financial-analysis": { "overall": 94, "notes": "Excellent quantitative reasoning and knowledge work; handles full filings and model workbooks in one context window.", - "alternatives": ["claude-fable-5", "gpt-5-5"] + "alternatives": [ + "claude-fable-5", + "gpt-5-5" + ] }, "education": { "overall": 93, "notes": "Clear, warm explanations with effort-adjustable depth; strong thought-partner behavior that pushes back constructively.", - "alternatives": ["claude-sonnet-4-6", "gpt-5-5"] + "alternatives": [ + "claude-sonnet-4-6", + "gpt-5-5" + ] }, "creative-writing": { "overall": 92, - "notes": "Warmer, less hedged voice with fewer AI vocal tics than 4.7. No sampling parameters β€” variety must be prompted.", - "alternatives": ["claude-fable-5", "gpt-5-5"] + "notes": "Warmer, less hedged voice with fewer AI vocal tics than 4.7. No sampling parameters \u2014 variety must be prompted.", + "alternatives": [ + "claude-fable-5", + "gpt-5-5" + ] } }, - "strengths": [ "State-of-the-art long-horizon agentic execution, knowledge work, and memory", "84% on Online-Mind2Web live web-agent benchmark", "~4x less likely to miss flaws in its own code than Opus 4.7", "Dynamic multi-subagent workflows for parallel fan-out", "1M context at standard pricing (no long-context premium), 128K output", - "Mid-session system prompts (beta) β€” injection-safe operator channel that preserves prompt cache", - "Same API surface as Opus 4.7 β€” drop-in upgrade with no new breaking changes" + "Mid-session system prompts (beta) \u2014 injection-safe operator channel that preserves prompt cache", + "Same API surface as Opus 4.7 \u2014 drop-in upgrade with no new breaking changes" ], - "limitations": [ - "Adaptive thinking only β€” no manual thinking budgets, no temperature/top_p sampling parameters", + "Adaptive thinking only \u2014 no manual thinking budgets, no temperature/top_p sampling parameters", "More deliberate by default: asks clarifying questions more often unless granted explicit autonomy", - "Narrates more between tool calls than 4.7 β€” needs a silence-default prompt for terse agents", + "Narrates more between tool calls than 4.7 \u2014 needs a silence-default prompt for terse agents", "Conservative about reaching for search, subagents, and custom tools without explicit triggering guidance", "Higher latency than Sonnet/Haiku tiers; fast mode doubles cost to $10/$50" ], - "best_for": [ "Long-horizon autonomous coding runs and complex refactors", "Knowledge work over very large document sets (1M context, no premium)", @@ -594,14 +615,12 @@ "Memory-dependent agents that persist context across sessions", "Enterprise workloads requiring strong compliance" ], - "not_recommended_for": [ "Real-time applications requiring sub-second latency", "Cost-sensitive high-volume inference (use Sonnet or Haiku tiers)", "Workflows that depend on temperature/top_p sampling controls", "Audio processing applications" ], - "metadata": { "pricing": { "input": "$5.00 per 1M tokens", @@ -624,7 +643,12 @@ "Arabic", "Hindi" ], - "modalities": ["text", "image (input)", "document", "computer-use"], + "modalities": [ + "text", + "image (input)", + "document", + "computer-use" + ], "api_endpoint": "https://api.anthropic.com/v1/messages", "api_model_id": "claude-opus-4-8", "open_source": false, @@ -633,9 +657,13 @@ "knowledge_cutoff": "Not disclosed", "release_date": "2026-05-28" }, - - "related_entities": ["claude-fable-5", "claude-opus-4-7", "claude-sonnet-4-6", "gpt-5-5", "gemini-3-1-pro"], - + "related_entities": [ + "claude-fable-5", + "claude-opus-4-7", + "claude-sonnet-4-6", + "gpt-5-5", + "gemini-3-1-pro" + ], "tags": [ "coding", "reasoning", diff --git a/data/models/gemma-4.json b/data/models/gemma-4.json index 1d5cc6f..89ff0ad 100644 --- a/data/models/gemma-4.json +++ b/data/models/gemma-4.json @@ -3,12 +3,11 @@ "type": "model", "name": "Gemma 4", "provider": "Google", - "version": "gemma-4", + "version": "4.0", "last_evaluated": "2026-06-10", "evaluated_by": "TrustVector Team", "description": "Google's open-weight family released April 2026 under Apache 2.0 (a shift from the custom Gemma license). Spans E2B/E4B edge models with 128K context and native audio up to a 31B dense model with 256K context. The 31B scores ~1452 on LMArena, No. 3 among open models.", "website": "https://blog.google/innovation-and-ai/technology/developers-tools/gemma-4/", - "trust_vector": { "performance_reliability": { "overall_score": 82, @@ -114,7 +113,6 @@ }, "notes": "Strongest open-weight showing from Google to date: 31B at ~1452 LMArena (No. 3 open). MoE 26B-A4B offers near-dense quality at 4B active params. Performance below proprietary frontier but excellent per-parameter efficiency." }, - "security": { "overall_score": 78, "criteria": { @@ -191,7 +189,6 @@ }, "notes": "Security profile is deployment-dependent: excellent data isolation when self-hosted, but guardrails are removable and there is no managed abuse filtering unless the deployer adds it (e.g., ShieldGemma, Vertex AI)." }, - "privacy_compliance": { "overall_score": 84, "criteria": { @@ -282,7 +279,6 @@ }, "notes": "Best-in-class data sovereignty: nothing leaves deployer infrastructure. The trade-off is that compliance certifications are not inherited from the model and must be built or bought by the deployer." }, - "trust_transparency": { "overall_score": 80, "criteria": { @@ -387,7 +383,6 @@ }, "notes": "High transparency by open-model standards: published technical report, architecture disclosure (including MoE active-parameter counts), and fully auditable weights. Apache 2.0 relicensing further reduces legal opacity." }, - "operational_excellence": { "overall_score": 80, "criteria": { @@ -483,7 +478,7 @@ "source": "Google Gemma 4 Announcement", "url": "https://blog.google/innovation-and-ai/technology/developers-tools/gemma-4/", "date": "2026-04-02", - "value": "Apache 2.0 β€” a shift from the custom Gemma license, removing use-restriction ambiguity for commercial deployment" + "value": "Apache 2.0 \u2014 a shift from the custom Gemma license, removing use-restriction ambiguity for commercial deployment" } ], "methodology": "License analysis; Apache 2.0 is OSI-approved with no usage restrictions", @@ -493,50 +488,65 @@ "notes": "Apache 2.0 relicensing is the headline trust improvement: prior Gemma generations carried custom-license use restrictions. Operational burden (monitoring, scaling, support) falls on the deployer, as with any open-weight model." } }, - "use_case_ratings": { "code-generation": { "overall": 80, "notes": "Capable for an open model, especially 31B with 256K context, but well below frontier proprietary coding models.", - "alternatives": ["qwen3-5", "llama-4-maverick"] + "alternatives": [ + "qwen3-5", + "llama-4-maverick" + ] }, "customer-support": { "overall": 82, "notes": "26B-A4B MoE (4B active) gives strong quality at low serving cost for high-volume support; E4B enables on-device assistants.", - "alternatives": ["gemini-3-flash", "qwen3-5"] + "alternatives": [ + "gemini-3-flash", + "qwen3-5" + ] }, "content-creation": { "overall": 80, "notes": "Solid drafting quality at 31B (~1452 LMArena); fully private content pipelines possible.", - "alternatives": ["llama-4-maverick", "gemini-3-5-flash"] + "alternatives": [ + "llama-4-maverick", + "gemini-3-5-flash" + ] }, "education": { "overall": 81, "notes": "E2B/E4B with native audio enable offline, on-device tutoring in low-connectivity settings.", - "alternatives": ["gemma-3-27b", "gemini-3-flash"] + "alternatives": [ + "gemma-3-27b", + "gemini-3-flash" + ] }, "healthcare": { "overall": 76, "notes": "Self-hosting suits strict data sovereignty (PHI never leaves infrastructure), but deployer carries the full compliance and accuracy-validation burden.", - "alternatives": ["claude-opus-4-8", "gemini-3-1-pro"] + "alternatives": [ + "claude-opus-4-8", + "gemini-3-1-pro" + ] }, "research-assistant": { "overall": 78, "notes": "256K context on 31B handles long documents; auditable weights suit reproducible research. Reasoning depth below frontier.", - "alternatives": ["gemini-3-1-pro", "qwen3-5"] + "alternatives": [ + "gemini-3-1-pro", + "qwen3-5" + ] } }, - "strengths": [ - "Apache 2.0 license β€” removes custom-license restrictions of prior Gemma generations", + "Apache 2.0 license \u2014 removes custom-license restrictions of prior Gemma generations", "Top-3 open model: 31B at ~1452 LMArena Elo", "Efficient MoE: 26B-A4B reaches ~1441 Elo with only 4B active parameters", "Full data sovereignty: self-hosted inference, zero data leaves deployer", "Edge-capable E2B/E4B variants with 128K context and native audio", - "256K context on 12B/26B/31B variants β€” large for open weights", + "256K context on 12B/26B/31B variants \u2014 large for open weights", "Multimodal input: text, image, and video" ], - "limitations": [ "No inherited compliance certifications; deployer builds or buys SOC 2/HIPAA posture", "Safety guardrails removable via fine-tuning (inherent to open weights)", @@ -545,7 +555,6 @@ "Operational burden (serving, scaling, monitoring) falls on deployer", "Performance varies significantly with quantization choices" ], - "best_for": [ "Data-sovereign deployments (on-prem, air-gapped, regulated environments)", "On-device and edge AI (E2B/E4B with native audio)", @@ -553,13 +562,11 @@ "Fine-tuning and domain adaptation under a permissive license", "Research requiring auditable, reproducible model weights" ], - "not_recommended_for": [ "Frontier-grade reasoning or coding without fine-tuning", "Teams wanting a managed API with SLAs and built-in safety filtering", "Compliance-critical workloads without in-house security engineering" ], - "metadata": { "pricing": { "input": "Free (open weights; compute costs only)", @@ -569,8 +576,16 @@ }, "context_window": 262144, "max_output": 32768, - "languages": ["English", "140+ languages"], - "modalities": ["text", "image (input)", "video (input)", "audio (input, E2B/E4B)"], + "languages": [ + "English", + "140+ languages" + ], + "modalities": [ + "text", + "image (input)", + "video (input)", + "audio (input, E2B/E4B)" + ], "api_endpoint": "https://huggingface.co/google", "open_source": true, "architecture": "Family: E2B (2.3B effective) and E4B (4.5B) edge models; 12B dense; 26B-A4B MoE (4B active); 31B dense", @@ -578,9 +593,12 @@ "knowledge_cutoff": "Late 2025 (not officially confirmed)", "release_date": "2026-04-02" }, - - "related_entities": ["gemma-3-27b", "gemini-3-1-pro", "llama-4-maverick", "qwen3-5"], - + "related_entities": [ + "gemma-3-27b", + "gemini-3-1-pro", + "llama-4-maverick", + "qwen3-5" + ], "tags": [ "open-source", "apache-2-0", diff --git "a/screenshots/Screenshot 2025-11-16 at 7.33.29\342\200\257PM.png" "b/screenshots/Screenshot 2025-11-16 at 7.33.29\342\200\257PM.png" deleted file mode 100644 index a721716..0000000 Binary files "a/screenshots/Screenshot 2025-11-16 at 7.33.29\342\200\257PM.png" and /dev/null differ diff --git a/screenshots/details page.png b/screenshots/details page.png index 708adb2..edfaed7 100644 Binary files a/screenshots/details page.png and b/screenshots/details page.png differ diff --git a/screenshots/footer.png b/screenshots/footer.png deleted file mode 100644 index 9909e7f..0000000 Binary files a/screenshots/footer.png and /dev/null differ diff --git a/screenshots/header.png b/screenshots/header.png index 31cf2dd..a4b3179 100644 Binary files a/screenshots/header.png and b/screenshots/header.png differ