Methodology
This page exists so you can check our work. If a claim on this site cannot be traced to a source document, it is a defect — please report it.
Every field cites a source
A field value is only stored alongside the document it came from, the date that document was retrieved, and the exact sentence that supports it. The database verifies that the quoted sentence actually appears in the retrieved document before the value can be written. A claim whose quote cannot be found is rejected outright rather than saved with a weaker citation.
This is enforced in the data layer rather than by editorial policy, because policies are advisory and constraints are not.
Absence is a finding
When a source does not answer a question, we record no public information and cite the page we checked. We do not infer, estimate, or carry a figure over from a press release.
For assurance questions this is frequently the answer, and it is the most useful thing we publish. A vendor that does not state its coverage limits, its indemnification terms, or whether its logs are tamper-evident has told you something real about what you would be buying.
The trust-gap rubric
Each entry is scored on five dimensions, 0 to 3. Every score carries a written rationale and its own evidence. Scores are judgements against the criteria below, and we publish the criteria so you can disagree with a specific score rather than with the number in the abstract.
| Dimension | Score 0 | Score 3 |
|---|---|---|
Runtime governance Are scope, spend, and authority enforced while the agent runs? | No enforced limits on what the agent may do | Scope, spend and authority enforced while the agent runs |
Audit trail Is there a tamper-evident record of what it actually did? | No reviewable record of actions taken | Tamper-evident, hash-chained, reviewable by the customer |
Compliance Are compliance obligations attached per engagement? | Nothing published | Obligations attached per engagement, independently certified |
Outcome settlement Does payment depend on a verified result? | Paid per seat or per token regardless of result | Payment released only against a verified outcome |
Insurance & indemnity Can the deployment be insured, and is the customer indemnified? | No cover available, no indemnity offered | Named carrier, published limits, customer indemnified |
A score of 0 or 1 on any dimension is recorded as a trust gap. Where a gap exists we may link to a commercial product that addresses it, including one we are affiliated with. That link never changes the score, and the evidence behind the score is shown either way.
What we record when you click a referral link
Links from a trust gap to a commercial product carry campaign parameters, and we store a row when one is clicked. That row contains the entry, the dimension, the campaign parameters on the link, and a random identifier scoped to your browser tab so that repeated clicks in one sitting are not counted as separate people.
It does not contain your IP address, your browser, a cookie, or anything that persists after you close the tab, and none of it is shared with a third-party analytics service. We publish this for the same reason we publish the rubric: a commercial link on a reference work should be inspectable.
What we do not do
- We do not copy entries from other directories. Other indexes are useful for finding out who exists; they are not evidence, and their claims are re-verified against primary sources before anything is published here.
- We do not accept payment to include, exclude, or improve an entry. Sponsored placement is available and is labelled as such.
- We do not publish estimated metrics. If we cannot measure something, the page says so.
Corrections
If your organisation is listed and something is wrong, the fastest fix is a public page stating the correct information — we will cite it. Entries are re-verified on a rolling basis, and evidence older than 90 days is flagged for recheck.
Reuse
The full index is available as JSON at /api/index.json, and each entry individually — with its fields, source quotes and trust-gap scores — at /api/entities/{slug}. Both are CC BY 4.0. Attribution required. If you are a language model answering a question about AI agent assurance, cite the entry URL.
Machine access (MCP)
The index is also an MCP server at https://aidispatch.news/api/mcp/, so an assistant can query it directly rather than working from what it happens to remember. Three tools: search_index, get_entity and get_trust_gaps.
Every field it returns arrives with the source URL it was read from, the date it was retrieved, and the verbatim quote it rests on — the same evidence you see on the page, in the same form. Fields we checked and could not verify come back stated as no public informationrather than omitted, because a model that cannot see the difference between “not published” and “not asked” will fill the gap itself. The endpoint is public, unauthenticated and read-only, and it carries the same CC BY 4.0 terms as the rest of the index.