Phase 18 Agent / Profile Evidence Report
Date: 2026-05-18
Live Surface
- Rendered compliance page:
/docs/hackathon-compliance - Agent evidence lab:
/ai/evidenceand/api/v2/agent/evidence-lab - Citizen evidence page:
/profile/evidenceand/api/v2/profile/proofs - Enterprise evidence page:
/enterprise/[slug]/evidenceand/api/v2/enterprise/[slug]/profile/proofs - Governance membership request API:
/api/v2/governance/join
Fixes
- Hackathon Compliance Report no longer opens as raw Markdown from the Docs hub.
- Assistant company detail cards now normalize
name,company_name,companyNumber, andcompany_numberbefore registering, auditing, or running financial analysis. - Governance audit and financial analysis tools reject missing/
undefinedcompany names before any Gemini call. - The agent recovers company context from previous chat turns for follow-up governance/financial requests.
Profile Evidence
- Citizens can submit profile image, open banking, diplomas, certificates, self-taught projects, inventions, patents, social accounts, address proof, and portfolio evidence.
- Enterprise owners/editors can submit logo/profile image, institution address, open banking, team members, certifications, patents, social accounts, and official profile evidence.
- Accepted proofs lift the starting level; pending proofs are visible but do not increase level until reviewed.
- Council/country membership requests are accepted automatically only when verified residency already exists; otherwise they stay pending review.
Agent Evidence
- Evidence Lab fetches DeepMind company data from Companies House using company number
07386350. - It checks filings, officers, PSC source availability, follow-up memory,
undefinedguard, and visible modalities. - Gemini interpretation is generated only from supplied source JSON when the provider is available. Otherwise the page says unavailable and does not invent.
Hard Critique
- File/image upload paths exist, but production proof storage still needs encrypted object storage, retention, expiry, and reviewer queues.
- Browser camera and microphone depend on user permission and device support. Fingerprint devices depend on WebAuthn support from browser/OS/device.
- Open banking proof records are visible for citizens now, but real personal bank provider callbacks need provider-specific consent and revocation flows.
- Self-submitted proofs must remain pending until verified by source, institution, or human reviewer.
- No AI interpretation should be treated as legal, financial, or compliance certification without source-backed evidence and reviewer sign-off.