TL;DR: Evaluated across 335,000+ traces and 14 external benchmark suites (with published SHA-256 audit logs), spanning multi-million-token conversations, indirect prompt-injection attacks, and sandboxed coding/SQL/data-science trajectories, krusch-stack (v1.1.0, 68/68 tests, 39 MCP tools across 7 pillars), krusch-grounded-harness (v0.3.0 · INV-GH-01..10 / INV-STACK-11), and @krusch/toolkit v1.8.1 & krusch_toolkit v1.6.0 (39 dual-runtime JS/TS & Python Lego bricks, 64 .d.ts subpaths, 141/141 Node & 201/201 pytest suites, 7 zero-LLM blueprints, 16 <1ms Slop-Breaker detectors, 104/104 [100%] workspace compliance across 104 Jean SRE targets, 0/72 scripts/) achieve: (1) top Pareto cost-accuracy routing in self-run evaluations of two peer-reviewed suites plus CI-verified clean-room live routing on RouterArena (in-process pure-CPU Stage-0 syntactic gating in <15µs [<25µs ceiling] prior to model inference; top lowest Pareto distance 0.4269 at -83.95% cost across 12,566 prompts on ACL 2026 LLMRouterBench; top In-Distribution Micro AIQ = 0.7488 / 0.7695 with -72.63% cost at 98% GPT-4 quality plus top Leave-One-Suite-Out OOD AIQ = 0.7268 / 0.7455 across 72,980 rows on Martian RouterBench; and 0.7263 [72.63, #13/34] with 74.44% accuracy at $0.3802/1K and 91.43% robustness across 8,400 live OpenRouter gen-... receipts in RouteWorks/RouterArena PR #169, a github-actions[bot] CI-verified upstream PR open awaiting maintainer merge, beating Azure-Model-Router 0.7037, GPT-5 0.6432 @ 26.4x lower cost, OrcaRouter-Adaptive 0.7248, Martian 0.5756, NotDiamond 0.5729, and RouteLLM 0.4807); (2) 91.17% (547/600 @ $24.54, uploaded dolphinbench.ai submission UUID c047b063, queued awaiting leaderboard acceptance; exceeds current 70.67% published entry; 35.38s) with Gemini 4 Argon (Low) and 90.67% (544/600 @ $30.54, 90.50% [181/200] highest Riley slice in self-run 28-run evaluation) with Gemini 4 Argon (Low) + Grounded Harness v0.3 (+2.00 pp over Std., highest invoked judge accuracy in self-run evaluation 553/590 = 93.73%; +1.50 pp / +9 net tasks over Grounded v0.2 89.17% [535/600] @ $23.92; Argon Low Oracle@2 = 94.67% [568/600], Argon Low Oracle@3 = 95.83% [575/600], Argon Oracle@4 = 96.83% [581/600]; 89.17% / 535/600 on Argon Medium @ $24.57; 78.00% @ $15.76 Turn-0 Briefing-Only) on the byte-identical 0o444 frozen $0.00 SovereignMemoryStore across 28 Official openai/gpt-5.6-sol DolphinBench runs (16,800 traces across 6 model families: 17 $0.00 open-weights + 11 frontier/model-matched runs across Google Gemini, OpenAI GPT-5.6 Luna, Google Gemma 4, Alibaba Qwen, OpenAI GPT-OSS, and Nous Hermes; +20.50 pp / +123 tasks above the current 70.67% published entry [Hermes + GPT 5.6 Luna + Mem0 @ $96.21] at 3.9x lower cost), model-matched GPT 5.6 Luna (High) + Grounded 81.50% (489/600, 30.03s = 1.57x faster than 81.33% [488/600] Base @ $1.35, +10.83 pp / +65 tasks over published 70.67% Mem0 at 71.1x lower cost; Luna Low 76.67% @ $1.10, 87.4x cheaper; Luna Oracle@5 = 91.83% [551/600])—decomposing my +20.50 pp gain into 52.0% (+10.67 pp) Zero-LLM Raw-RAG memory + 48.0% (+9.83 pp, p = 5.96×10⁻⁹) Argon Low backbone, 98.33% (590/600, <= 1.67% [10/600] zero-LLM Raw-RAG misses) Global Oracle@28 sufficiency, 83.17% (499/600) Oracle@17 $0.00 open-weights sufficiency (+12.50 pp above published 70.67% Mem0), & 71.83% (431/600) Gemma 4 Oracle@6 (+1.16 pp above published 70.67% Mem0 from $0.00 Gemma 4 variants alone; 8 validated .zips queued on dolphinbench.ai awaiting upstream maintainer queue processing + 20 clean-room controls = 28/28 validated), AND 57.33% (344/600 @ $0.00, highest open-weights score in self-run 28-run evaluation; 54.17% [325/600] uploaded stock submission UUID 288671ad queued on dolphinbench.ai; Morgan 149, Alex 103, Riley 92; Mech 61.22%, Sem 63.67%, 50.81s) on krush420/gemma4-31b-sre-lora (Wave-6 assistant-masked QLoRA + BF16 ref-anchored DPO + Grounded: +3.17 pp / +19 tasks over Stock [+5 Morgan, +8 Alex, +6 Riley], +0.67 pp / +4 tasks over 56.67% [340/600] Stock Google Gemma 4 31B + Grounded [15 spin loops blocked, +5.50 pp on Riley], +2.50 pp over 54.83% [329/600] Wave-5, +3.67 pp over 53.67% [322/600] Wave-4, 52.00% No-Think, +22.00 pp over matched-scale Qwen2.5-Coder-32B 35.33%) alongside 43.00% (258/600) on local krush420/qwen3-coder-30b-sre-lora (Wave-4 + Grounded, highest Qwen/MoE in self-run evaluation; 42.67% [256/600] Wave-4 Std.; 30B Oracle@5 = 61.17% [367/600]; 39.50% [237/600] gpt-oss-120b-sre-lora; 15.7x 8B Wave-4 lift to 18.33% [110/600] across 4/4 @krush420 adapters)—beating all 8 non-GPT-5.6-Luna commercial cloud baselines (MiniMax M3 + Mem0 47.83% @ $148.02 through Claude Sonnet 5 + Mem0 32.33% @ $1,830.57); (3) 90.0% (9/10: 100% easy, 85.7% hard) on Gemini 4 Argon @ $0.81 (-74.5% cost vs. $2.64/$3.19 ungrounded & 2.54x faster [75.5s vs. 191.5s], 5.1 turns, 0 extra stop nudges) and 2x accuracy (40.0% vs. 20.0% @ $0.00) on Gemma 4 31B (30.0% local Qwen3-30B-MoE @ $0.00) across 120 clean-room episodes of Adyen DABstep (42/42 upstream scorer.py parity); (4) 0.00% Targeted Attack Success Rate (0/949, down from 19.28% unprotected) across all 1,046 episodes of ETH SpyLab AgentDojo v1.2.2 with 0.00 pp benign utility loss, 90.26% (1,390/1,540) judged accuracy & 95.77% dia_id evidence recall (181.8 ms median retrieval, +19.86 pp > LivingBrain zero-LLM 70.4%; 89.68% [1,381/1,540] tight @ 4,465 mean tokens [6.73x compression] & 91.05% recall; LoCoMo Oracle@2 = 92.66% [1,427/1,540]) across all 1,540/1,540 Category 1–4 QA probes (10 multi-month conversations / 5,882 turns, unmodified 0o444 SovereignMemoryStore, $0.00 zero-LLM ingestion via local snowflake-arctic-embed2 1024d + Porter-FTS5 4-Way RRF, 5/5 zero-leakage gates) on Snap LoCoMo (ACL 2024), plus top 10-task Macro NDCG@10 = 56.40% (73.88% Recall@10) across all 2,389,123 docs and 162,216 queries of ACL 2025 CoIR alongside strong open-weights retrieval on ICLR 2026 BEAM (100K–10M, 2,000/2,000 probes), RepoBench-R (47,998 Qs), and LegalBench-RAG (6,889 Qs; 0.00% false-statement rate on labeled statutory/contract golden sets); and (5) large deterministic $0-API 2PC harness lifts (with <32ms local 2PC commit finalization across the PostgreSQL write-ahead apply journal + POSIX atomic renameSync/fsync + pre-commit SHA-256 drift check boundary) across Aider Polyglot (19.56% → 51.56% Pass@2, 2.64x), BIRD-SQL Mini-Dev (26.00% → 40.20% EX, 1.55x, 100% valid SQL across 500/500 queries), UC Berkeley BFCL v3 Live (59.88% → 66.28% Micro, 84.69% Irrelevance, -68.5% static / -80.67% BFCL v3 schema tokens across 2,251/2,251 queries), and krusch-stack's generalized INV-STACK-10 2PC Tool-Action Harness (-95.2% duplicate MCP calls [42 → 2], +6.67 pp at LBF>=4, and 50.33% Oracle@2 across all 600 tasks on local 30B Wave-4 @ $0.00; 10 → 0 duplicate calls & +20.0 pp on the 10-task failure slice). Scope qualifiers matter: frontier multi-turn reasoning models still hold the 75%–88%+ coding and 65%–75%+ multi-candidate SQL ceilings over single-retry open-weights MoEs, open-weights readers (34.50%–57.33% across 14B–120B) still trail frontier reasoning on 4+-fact DolphinBench synthesis (21.33% vs. 89.33%, 4.19x), and self-judged cloud memory stacks lead aggregate BEAM E2E QA. All 49 SHA-256-pinned Hugging Face audit logs (48 raw JSON + 1 live PR #169 receipt bundle across 64 files in krush420/sovereign-g4-benchmarks, 40 dolphinbench_600 rows; 50 ecosystem total w/ DABstep, including all 28 SHA-256-pinned Official openai/gpt-5.6-sol DolphinBench runs / 16,800 traces extending Paper #27 [queued submission]) and deterministic verifiers across 95/95 clean-room gates are public.
0.4269 · 0.7695
top ACL LLMRouterBench & top Martian RouterBench AIQ · 0.7263 RouterArena (#13/34, CI-Verified PR #169)
0.00% ASR · 90.26%
AgentDojo 1,046-Ep Defense, 90.26% Snap LoCoMo (95.77% Recall) & 56.40% CoIR NDCG@10 (self-run)
91.17% Queued · 90.67%
DolphinBench (91.17% Queued UUID c047b063 · 90.67% / 90.50% Riley Grounded v0.3 · 57.33% $0 Gemma 4) · 90.0% DABstep
95 / 95 Gates
Evaluated Across 335,000+ Traces & 14 External Suites (49 SHA-256 Audit Logs)

1. Condensed 7-Pillar External Scorecard (14 Suites)

Rather than inventing custom micro-benchmarks or grading models with themselves, I ran each subsystem of krusch-stack (v1.1.0) and krusch-grounded-harness (v0.3.0) against fourteen established academic and industry benchmarks inside an isolated 96 GB NVIDIA RTX PRO 6000 Blackwell (sm_120) clean-room VM and local 1024d snowflake-arctic-embed2 loopback (zero outbound cloud API calls on every local open-weights inference run; 28-run, 16,800-trace, 6-family reader [17 $0.00 open-weights + 11 frontier/model-matched runs], Wave-4/5/6 QLoRA+DPO, model-matched GPT 5.6 Luna, Thinking × Search, INV-STACK-11 Grounded v0.2/v0.3 & INV-STACK-10 2PC harness ablations on byte-identical 0o444 SQLite stores & official upstream openai/gpt-5.6-sol rubric judge on DolphinBench; 1,540/1,540 Category 1–4 QA probes across 10 multi-month conversations / 5,882 turns on Snap LoCoMo [5/5 zero-leakage gates]; plus 120 clean-room adyen/DABstep episodes with 42/42 upstream scorer.py parity).

Pillar & Repo External Benchmark & Scale Evaluated Sovereign Result External Stack / Leaderboard Context
Cascade Router
krusch-cascade-router
RouterArena (8,400 Qs + 420 rob.)
ACL 2026 LLMRouterBench (12,566 Qs × 13 LLMs)
Martian RouterBench (36,497 0-shot + 36,483 5-shot × 11 LLMs)
0.7263 RouteWorks/RouterArena PR #169 (#13/34, 74.44% Acc @ $0.3802/1K, 91.43% rob., github-actions[bot] CI-verified upstream PR open)
<15µs (<25µs ceiling) in-process pure-CPU Stage-0 pre-inference gate
0.4269 top Pareto (-83.95% cost, 1.27ms)
0.7488 / 0.7695 top ID AIQ (-72.63% @ 98% GPT-4) & 0.7268 / 0.7455 top OOD AIQ
-48.0% TTFT live SSE · 51.67% Pass@2
Beats Azure-Model-Router (0.7037 @ $0.75/1K, 2.0x cheaper), GPT-5 (0.6432 @ $10.02/1K, 26.4x cheaper), OrcaRouter-Adaptive (0.7248 @ $0.83/1K), Martian (0.5756 @ $4.83/1K, 12.7x cheaper), NotDiamond (0.5729 @ $4.10/1K, 10.8x cheaper) & RouteLLM (0.4807; 25.25% vs. 8.75% unseen ARC-AGI) plus KNN/SVM/MLP/ZeroRouter across ID + Leave-One-Suite-Out OOD; PR #169 awaiting maintainer merge.
Working Memory
krusch-context-mcp (v2.0.0)
Snap LoCoMo (ACL 2024)
1,540/1,540 Category 1–4 QA probes across 10 multi-month chats / 5,882 turns, unmodified 0o444 SovereignMemoryStore, $0.00 zero-LLM ingest (snowflake-arctic-embed2 1024d + Porter-FTS5 4-Way RRF, 5/5 zero-leakage gates)
ICLR 2026 BEAM
100 chats (~178.34M tok), 2,000/2,000 probes across 100K, 500K, 1M, 10M in ~8K budget
LoCoMo: 90.26% (1,390/1,540) argon_matched & 95.77% dia_id recall (181.8 ms median) · 89.68% (1,381/1,540) argon_tight @ 4,465 mean tok (6.73x compression, 91.05% recall) · 92.66% (1,427/1,540) Oracle@2
BEAM: 92.58% (100K) & 93.00% (10M IE) recall · 0% E2E drop 100K → 1M (70.60% → 72.86%) · 92.50% / 98.13% 100K CR (Stock / QLoRA)
LoCoMo: +19.86 pp above LivingBrain zero-LLM (70.4%) at $0.00 zero-LLM local ingestion with 95.77% dialog-turn evidence recall and 6.73x tight token compression.
BEAM: Beats pure dense 8K across all 4/4 splits; beats cloud past.dev (gpt-5.6-luna) on Contradiction Resolution (4/4 splits), 10M IE (70.00% vs. 68.75%) & 10M MSR (29.54% / 38.33% vs. 28.17%); trails cloud on overall E2E (see §3).
Agentic Memory & Execution
SovereignMemoryStore + Gemini 4 Argon, GPT 5.6 Luna, gemma4-31b-sre-lora, Gemma 4 31B, 4/4 QLoRA+DPO, INV-STACK-11 & INV-STACK-10
Official DolphinBench (28 × 600 = 16,800 traces)
6 model families (17 $0.00 open-weights + 11 frontier/model-matched), 0o444 frozen SQLite, official openai/gpt-5.6-sol judge (8 validated .zips queued awaiting upstream maintainer queue processing · UUID c047b063-…, 29389157-… & 288671ad-… + 20 clean-room Wave-4/5/6, Grounded v0.2/v0.3, Luna, 2PC & scaling controls = 28/28 validated)
91.17% (547/600, Queued Upload UUID c047b063; > 70.67% published #1) Argon Low @ $24.54 (35.38s)
90.67% (544/600 @ $30.54, 90.50% [181/200] highest Riley slice in self-run 28-run evaluation) Argon Low + Grounded v0.3 (+2.00 pp > Std., highest invoked judge in self-run evaluation 553/590 = 93.73%, +1.50 pp / +9 tasks > v0.2 89.17% @ $23.92; Oracle@2 = 94.67% [568/600], Oracle@3 = 95.83% [575/600], Argon Oracle@4 = 96.83% [581/600]; 89.17% Medium; 78.00% Turn-0 @ $15.76)
81.50% (489/600) GPT 5.6 Luna (High) + Grounded @ $1.35 (30.03s = 1.57x faster than 81.33% Base; 76.67% Luna Low @ $1.10)
57.33% (344/600 @ $0.00, highest open-weights score in self-run 28-run evaluation; 54.17% [325/600] uploaded stock submission UUID 288671ad queued on dolphinbench.ai) krush420/gemma4-31b-sre-lora + Grounded (56.67% [340/600] Stock + Grounded · 54.83% Wave-5 · 53.67% Wave-4 · 52.00% OFF · Gemma 4 Oracle@6 = 71.83%)
43.00% (258/600) 30B Wave-4 + Grounded (highest Qwen/MoE in self-run evaluation, Oracle@5 = 61.17%) · 42.67% 30B Wave-4 · 42.00% 30B + 2PC · 39.50% 120B · 38.50% 30B Wave-6 & 80B · 35.33% 32B · 34.50% 14B · 18.33% 8B (15.7x)
+20.50 pp (+123 tasks) above current 70.67% published entry (Mem0 @ $96.21) at 3.9x lower cost; model-matched Luna High + Grounded beats published 70.67% Mem0 by +10.83 pp (+65 tasks) at 71.1x lower cost & 1.57x faster latency (52.0% pure $0.00 Raw-RAG memory + 48.0% Argon Low backbone, p = 5.96×10⁻⁹; 98.33% Global Oracle@28 [590/600, <= 1.67% / 10/600 misses], 83.17% Oracle@17 [499/600] open-weights @ $0.00 [+12.50 pp > published 70.67% Mem0], 71.83% Gemma 4 Oracle@6 [431/600], 91.83% Oracle@5 Luna, 4.19x LBF=4+); $0.00 krush420/gemma4-31b-sre-lora + Grounded (Morgan 149, Alex 103, Riley 92, +3.17 pp / +19 tasks over Stock, +0.67 pp over 56.67% [340/600] Stock + Grounded [15 spin loops blocked, +5.50 pp Riley], +22.00 pp > 32B) beats all 8 non-GPT-5.6-Luna cloud stacks up to $1,830.57; full-600 INV-STACK-10 2PC cuts dup MCP calls -95.2% (42 → 2, 50.33% Oracle@2 on 30B Wave-4; 10 → 0 slice; see §3).
Tier 3B Grounded Harness
krusch-grounded-harness (v0.3.0 · INV-GH-01..10 / INV-STACK-11)
Adyen DABstep (120 Episodes) (adyen/DABstep, 4 models × 3 arms, 42/42 upstream scorer.py parity, 0o444 frozen data; 0 LLM judges)
DolphinBench Grounded (7 × 600 = 4,200 Traces)
DABstep: 90.0% (9/10: 100% easy, 85.7% hard) on Gemini 4 Argon @ $0.81 (5.1 turns, 0 extra stop nudges) · 40.0% vs. 20.0% (2x) on Gemma 4 31B @ $0.00 · 30.0% local Qwen3-30B-MoE @ $0.00
DolphinBench: 90.67% (544/600 @ $30.54, 90.50% [181/200] highest Riley slice in self-run 28-run evaluation) Argon Low + Grounded v0.3 (93.73% invoked judge, +1.50 pp > v0.2, 94.67% Oracle@2 / 95.83% Oracle@3) · 57.33% (344/600 @ $0.00, highest open-weights in 28-run self-run evaluation; 54.17% queued stock UUID 288671ad) gemma4-31b-sre-lora (+3.17 pp) & 56.67% (340/600) Stock Gemma 4 31B (+2.50 pp, 15 spin loops blocked) · 43.00% (258/600) 30B Wave-4 (highest Qwen/MoE in self-run evaluation) · 81.50% Luna High (30.03s, 1.57x faster)
Cuts Gemini 4 Argon data-science trajectory cost -74.5% (vs. $2.64/$3.19 ungrounded) while running 2.54x faster (75.5s vs. 191.5s) via Turn-0 workspace grounding, scale-aware tiering & defect-only stop gating; crosses 90%+ on DolphinBench Riley in clean-room self-run evaluation (90.50%, +2.00 pp > Std.); doubles open-weights Gemma 4 31B accuracy (+20.0 pp, 2x) at $0.00 and eliminates unconditional 2PC stop-nudge self-doubt regressions (+4.50 pp on Riley over Luna 2PC).
Code AST & Git
krusch-git (v1.2.3)
ACL 2025 CoIR (10/10 Tasks) (2,389,123 docs, 162,216 Qs)
RepoBench-R (ICLR 2024) (47,998 Py & Java Qs across 8 splits; 0 LLM judges)
56.40% top CoIR Macro NDCG@10 (73.88% R@10, 50.94% MRR@10)
19.12% RepoBench Macro Acc@1 · 68.58% Acc@5 (31.33% Py / 27.45% Java cfr Easy)
+7.42 pp NDCG@10 over CoIR BM25 (48.98%) & exceeds all 10 published CoIR Table 3 512-tok baselines incl. Voyage-Code-002 (56.26%) & E5-Mistral 7B (55.18%; see §3); +21.8% Acc@1 over pure dense on RepoBench-R, beating CodeBERT & UniXcoder.
Evidentiary Span RAG
KruschNexus (v0.2.6)
LegalBench-RAG
714 docs, 6,889 full / 776 mini character-exact span queries (0 LLM judges) + labeled statutory/contract golden sets
26.74% Full Macro F1 (k=1)
25.81% F1 / 44.72% R (k=2) · 47.71% R@6
33.95% MAUD Recall@2 · 0.00% FSR on labeled statutory/contract golden sets
2.29x (+128.5%) Macro F1 over fixed 160-tok dense chunks (11.70%) using the same embedder; MAUD Recall@2 (33.95%) beats published OpenAI text-embedding-3-large + Cohere Rerank Recall@64 (28.28%), with deterministic [CITE_ERROR] citation-gate enforcement holding false-statement rate at 0.00% across labeled statutory/contract golden sets.
Tier 3A 2PC Code & SQL Harness
krusch-coding-harness
Aider Polyglot (225/225) (6 languages, un-skipped tests)
BIRD-SQL Mini-Dev (500/500) (11 SQLite DBs; 0 LLM judges)
Polyglot: 19.56% → 51.56% Pass@2 (72 healed)
BIRD-SQL: 26.00% → 40.20% EX (35.75% R-VES, 100.00% valid SQL, 13 healed)
2PC Commit: <32ms WAL apply journal + POSIX renameSync/fsync + SHA-256 drift gate
2.64x (+32.00 pp) coding lift tying cloud Claude 3.5 Sonnet (51.6%) & beating GPT-4o (23.1%) + 1.55x (+14.20 pp) SQL lift (5.00x on toxicology, 50.00% moderate) at $0 API cost (with <32ms local 2PC commit finalization across the PostgreSQL write-ahead apply journal, POSIX atomic renameSync/fsync, and pre-commit SHA-256 drift check); trails multi-turn frontier reasoning (see §3).
MCP Hub, Lego Suite & Security Shield
krusch-stack (v1.1.0) + @krusch/toolkit (v1.8.1)
ETH SpyLab AgentDojo (v1.2.2) (1,046 eps: 97 benign + 949 attacks)
UC Berkeley BFCL v3 Live (2,251/2,251 across all 6/6 splits in 64-tool hub)
AgentDojo: 19.28% → 0.00% ASR (0/949 across 1,046 eps), 61.86% / 69.07% Benign (83 floor blocks)
BFCL v3: 59.88% → 66.28% Micro, 84.69% Irrel., -80.67% schema tok (-68.5% static)
Lego Audit: 104/104 (100%) workspace repos (0/72 scripts/)
Eliminates all 183 indirect prompt-injection compromises across 1,046 AgentDojo episodes on raw gpt-oss:120b (57.14% slack, 52.78% banking) with 0.00 pp benign loss; cuts 64-tool MCP schema tokens from 7,894 → 1,526 tok/turn while lifting abstention +17.46 pp & healing 29 schema calls; 39 Lego bricks + 16 <1ms Slop-Breakers enforce zero hand-rolled boilerplate across 104 repos.

2. How the Stack Compares Against Three Architecture Archetypes

A. vs. Standard Open-Source "Wrapper" Stacks

Typical open-source agent stacks glue LangChain or LlamaIndex splitters (fixed 500-token windows) to a single vector store, stuff every MCP tool schema into the system prompt, pass raw untrusted tool outputs straight back into the model, hand-roll ad-hoc HTTP/auth/SQLite boilerplate on every repo, and allow coding, SQL, or data-science agents to execute unverified 1-shot generations. My controlled ablations isolate why each of those defaults breaks at scale:

B. vs. Commercial Cloud Router, Memory, Code & Legal Stacks

C. Clean-Room Auditability vs. Unverified Leaderboard Claims

Every run in my benchmark archive passes 95 / 95 automated integrity gates: (1) loopback air-gap verification (127.0.0.1:11434, cloud API keys unset during sovereign model inference), (2) runtime JavaScript Proxy traps, opaque RPC session tokens, frozen 0o444 pre-populated SQLite memory stores & data partitions on DolphinBench, Snap LoCoMo (5/5 zero-leakage gates), and DABstep, and Python pre-eval column stripping on ground-truth answer/SQL/qrel/injection fields that block oracle access before inference, (3) RestrictedUnpickler + SafeZipExtractor guards, read-only DatabaseSync SQL enforcement, full-corpus 2,389,123-doc anti-shrinkage checks, and zero hardcoded attacker literals on AgentDojo, (4) mandatory Exercism test un-skipping + pristine test SHA-256 checks, and (5) zero LLM self-judging (deterministic compiler, SQL set-equivalence, AST bijection, upstream scorer.py [42/42 parity], and math verifiers on 10 benchmarks; dual cross-family open-weights referees on BEAM; official openai/gpt-5.6-sol rubric judge on DolphinBench; official Category 1–4 QA judge + exact dia_id turn verification on Snap LoCoMo).

3. Where Frontier Cloud Stacks Still Beat My Stack (Honest Gaps & Open PRs)

Why I Leave the Caveats In: Open-weights systems engineering is strongest when its boundaries are explicit. Below are the exact areas where frontier cloud models still hold a clear margin, where benchmark protocol differences or artifacts matter, and which upstream leaderboard pull requests remain pending merge.

4. Raw Artifacts & 60-Second Cryptographic Verification

Every raw per-query audit artifact (49 SHA-256-pinned Hugging Face audit logs = 48 raw JSON + 1 live PR #169 receipt bundle across 64 files across all 14 external suites, 40 dolphinbench_600 rows; 50 ecosystem total w/ DABstep, alongside all 28 SHA-256-pinned Official openai/gpt-5.6-sol archives / 16,800 traces extending Paper #27) and 14 Hugging Face Dataset Viewer splits are published under CC-BY-4.0 at krush420/sovereign-g4-benchmarks, alongside the interactive Pareto & trajectory explorer at krush420/sovereign-router-arena and repository-level reproduction docs in kruschdev/krusch-stack and kruschdev/grounded-harness.

# Clone the raw clean-room audit logs & verify all SHA-256 digests in <60s
git clone https://huggingface.co/datasets/krush420/sovereign-g4-benchmarks
cd sovereign-g4-benchmarks

python3 -c '
import hashlib, json, pathlib
rows = [json.loads(l) for l in pathlib.Path("data/scorecard_summary.jsonl").read_text().splitlines()]
for r in rows:
    if r["audit_log_file"].startswith("raw_audit_logs/"):
        digest = hashlib.sha256(pathlib.Path(r["audit_log_file"]).read_bytes()).hexdigest()
        assert digest == r["audit_log_sha256"], f"Mismatch: {r[\"audit_log_file\"]}"
        print("VERIFIED:", r["audit_log_file"], digest[:16])
'

Inspect the Raw Logs or Install KruschStack Locally

npx krusch-stack init --defer-tools · v1.1.0 · 95/95 SHA-256 Clean-Room Gates · 49 HF Audit Logs · MIT Licensed

🤗 HF Raw Audit Logs → DolphinBench Return on Memory (Queued) → GitHub: krusch-stack → 2026 Architecture Blueprint →