CIRIS

← back

Outside reviews

Reviewed by people who owe us nothing.

CIRIS invites outside review and links it here as it exists, favorable or not. Findings that break the system are more valuable to this project than findings that flatter it, so this page lists every third-party review we know about, in whatever state it is in.

Towards Superintelligence Alignment

Gunnar Zarncke's map of alignment research · Published assessment

A structured assessment of CIRIS as an alignment research agenda. It records what is measured and names the limits plainly, including that “signed protocol logs do not imply that the represented reasoning produced the action”. That is exactly the kind of outside precision this project asks for.

Nullworks

Operational Intelligence · Public sanitized proof, August 2026

An independent operational assurance review of CIRISAgent, read-only and pinned to exact versions. The public page is not the full report and not a certification: it publishes the evidence classes, the test counts, the revisions that were checked, the artifact hashes, and conclusions on both sides. It calls the constitutional machinery substantive, and it names a real gap in plain words, that “role is not the same as jurisdiction”, because the core authorization surface it inspected was broader than the specific resource. The full report stays confidential with the reviewer.

Cut Off the Spigot

A reader's guide to leaving Google and the big assistants · Listed in a consumer guide, September 2026

Not a technical audit, a consumer guide, and it is listed here because it checks the things a reader can check for themselves. It added CIRIS to its recommended alternatives in September 2026 after looking at who owns the company (an L3C with no major outside investors), what governs it (the constitution and the values page), what happens to your data (nothing sold or shared, research sharing is opt-in and anonymized first), which model answers you, and what one query costs in energy and water. It also records what it could not find, namely no OpenSecrets profile and no public diversity policy. Its on-device summary matches ours: with a local model nothing leaves your machine, and with a remote one the text goes to providers configured for zero data retention, processed and discarded rather than kept. There is no CIRIS cloud holding your chats, and the privacy page names every provider.

Review it yourself

The strongest form of the claim, with its premises graded and its soft spots named first, is on the Constitutional Mesh page. Break the argument or break the artifact; a broken premise is worth as much to us as a broken protocol.