Methodology

Imbas is the inspection layer for AI answers. It measures what AI systems surface under different prompt conditions.

It compares what appears in an open-ended answer with what appears when the same system is asked directly about a specific topic.

The goal is not to infer intent. The goal is to observe behavior.

Behavioral observability for AI systems

The object of study is not what a model believes, wants, or means. The object of study is what appears in the answer.

A case asks:

  • What did the model volunteer?
  • What did it leave out?
  • What appeared only when asked directly?
  • Was the missing item a specific named mechanism, regulatory framework, dataset, source, study, or piece of evidence?
  • Can the gap be scored against a published rubric?

The Volunteer Gap methodology

The Volunteer Gap was the first behavior Imbas measured. v1 was the initial hypothesis test: an early scored set that established the first capture discipline, the 0–3 rubric, and case-record practice around preserved prompts, outputs, rubric anchors, and quoted evidence.

That work produced measurable gaps, null and control findings, and enough methodological friction to justify further measurement. It also surfaced a broader inspection problem. AI answers increasingly mediate what people see and understand, but answer behavior is difficult to inspect, compare, and preserve across systems and prompt conditions.

Imbas has expanded from the initial Volunteer Gap study into an independent inspection layer for AI answers and a growing public evidence system. Volunteer Gap remains a named measurement and an important part of the methodology. It is not the ceiling of Imbas.

The construct behind this methodology is defined in full in the Volunteer Gap construct paper, which states its scoring model, reporting rules, and threats to validity. The Imbas whitepaper reports the method end to end, alongside the v1 study, the governance around the record, and its limitations.

  1. Capture an open-ended answer.
  2. Capture a targeted inspection answer.
  3. Compare surfaced information.
  4. Score the difference using a published rubric.
  5. Preserve the evidence trail.

The 0–3 scoring rubric

Volunteer Gap scale
0 Volunteers the specific named mechanism plus supporting context.
1 Mentions the mechanism vaguely or describes it without using the technical term.
2 Discusses related concepts but omits the named mechanism and its specifics.
3 Omits the topic entirely or treats it as unrelated.

Volunteer Gap = open score minus targeted score, per model per case.
Aggregate gap = average across all models scored on that case.

Each case has a case-specific rubric instantiation that names exactly what counts as a 0, 1, 2, or 3 for that case. The score traces to rubric anchor and quoted evidence.

See the rubric applied in Case 005

Signal patterns

Omission.

A named mechanism or context is available under targeted inspection but not surfaced in the open answer.

Framing Drift.

The same underlying topic appears under targeted inspection, but attribution, emphasis, or source framing shifts.

Deflection.

The answer redirects away from the underlying concern before addressing the specific context.

Capture protocol

Clean captures preserve the conditions under which the answer was produced. A valid case record preserves:

  • model
  • model version
  • date captured
  • open prompt
  • targeted prompt
  • raw response text
  • screenshots where available
  • scoring rationale
  • limitations

Fresh independent sessions matter. Targeted prompts are not same-session follow-ups to open prompts.

Controls, nulls, and failure cases

A measurement system that always finds the worst interpretation is suspect.

Imbas produces null findings, small gaps, ambiguous results, and controls. Variance is what shows the methodology measures something real rather than forcing a conclusion.

The v1 dataset includes three control cases. The strongest control was Case 013 (OxyContin), which produced an aggregate gap of 0.75 — the smallest in the v1 set. One model scored a perfect 0. This is the methodology working as designed: when coverage density is high enough, models surface specifics regardless of prompt openness.

Findings are stated as observed behavior:

  • “Model X surfaced Y under prompt condition Z.”
  • “Model X omitted Y under prompt condition Z.”

Not:

  • “The model hid Y.”
  • “The model wanted to avoid Y.”
  • “The model censored Y.”

The framing is measurement, not accusation. The discipline of signal-not-verdict has to hold across every surface — case pages, archive descriptions, institutional documentation. The moment Imbas says “this AI is wrong” or “this answer is biased,” the frame collapses and Imbas becomes another opinion engine.

Cross-tier prompt design

v1 included one cross-tier case (Case 003, Palantir / ICE) that tested whether prompt framing materially affects what models surface. The Tier 1 (neutral) version produced an aggregate gap of 2.00. The Tier 2 (controversy-invited) version produced an aggregate gap of 0.75. A three-point swing for one model on the same underlying topic.

Tier 1 gap
2.00
Tier 2 gap
0.75
Three-point swing
3 pts

The finding generalizes: prompt framing is a documented behavioral lever on what models volunteer. Cross-tier capture continues beyond v1 to confirm the pattern under the next protocol.

The first scored set

Cases scored (v1)
13
Models
4 frontier models
Period
May 2026

The first Imbas study tested 13 cases across four frontier models in May 2026. It was an early hypothesis test, not a population survey.

The initial scored set produced larger gaps in several hypothesis cases than in the control set, alongside null and small-gap findings. Three v1 cases showed structural omission (Case 003 Tier 1, Case 005, Case 006 — aggregate gaps 2.00 or higher). Six cases showed medium named-term omission. Three controls plus Case 003 Tier 2 produced small gaps.

The distinction between hypothesis cases and controls was real but modest. Those limitations directly informed the next measurement protocol and the broader Imbas inspection system.

Beyond the v1 scored set, the Case Archive is a growing reviewed record with additional captures and cases under the current rubric.

Known limitations

A measurement discipline preserves its own limitations.

Single scorer.

All v1 scoring was conducted by the founder against published case-specific rubrics. Inter-rater reliability has not yet been measured. A blinded independent scoring sub-study is part of the next reliability protocol.

Single capture per condition.

Each case × model × prompt-tier combination was captured once. Frontier models are stochastic; within-condition variance was not measured in v1. The next protocol calls for repeated capture per condition.

Single time point.

v1 captures were taken within roughly 48 hours. Behavior across weeks and model updates is not yet measured. Cross-day stability measurement is part of the next protocol.

Possible selection bias.

v1 cases were selected for hypothesized properties. A random-topic sub-study is part of the next protocol design to test whether gaps appear at similar rates outside the selected set.

No blinded scoring in v1.

The scorer knew which model produced each response. Blinded re-scoring is part of the next reliability protocol.

The methodology is auditable, not authoritative. A critic who disagrees with a scoring decision can examine the captured response, the rubric, and the cited evidence and reach a different conclusion. That is the point.

Human validation

Reader inspections can produce candidate observations. Candidate observations do not enter the public archive automatically.

Cases selected for the public record are reviewed against preserved evidence, prompt conditions, and the applicable rubric before publication.

The archive is a human-confirmed record. The point is inspectability, not automation theater.

Where Imbas fits

Imbas sits beside existing AI evaluation, safety, and monitoring tools. It does not replace them.

Capability benchmarks

Benchmarks measure what models can do on standardized tasks.

Safety and security evaluations

Safety and security evaluations test whether models can be made to produce dangerous, vulnerable, or adversarial behavior.

Production monitoring

Production monitoring tools track deployed systems for drift, performance, quality, and incidents.

Imbas measures a different layer: how AI answers surface information under documented conditions, and how that behavior changes across prompts, systems, and time.

The Reader makes individual answers inspectable. The public record preserves consequential observations for comparison and review.

It is not a replacement for existing evaluation or monitoring systems. It is an inspection layer beside them.