Reproducible evidence · v0.11.1

Proof before promises.

This page separates implemented software paths, live verification, hardware-dependent observations, and capabilities that have not yet been established. It is designed for users, contributors, researchers, and funders evaluating Heliox.

156 declared actions21 specialists156/156 provider coverage11 independent post-condition verifiers
Generated from runtime authorities

Capability coverage

Heliox declares 156 action types and registers concrete providers for all 156 through 21 executable specialists. Availability still depends on operating system, permissions, credentials, hardware, and third-party services.

Important limitation

Verification depth

Provider coverage is not the same as independent outcome verification. Eleven actions currently have a separate observed post-condition verifier; 145 rely on the executor result. Heliox must not describe all 156 actions as independently verified.

Test certificate validated

Windows signing

The SignPath test-policy workflow has signed and verified the Windows EXE, MSI, and embedded application. The production certificate remains pending, so current public installers must not yet be described as production-signed.

Measured guarded path · 100 iterations

Latency distributions, not one headline number

The ready-daemon CPU-usage path measured 28.640 ms median, 30.490 ms p95, and 31.411 ms p99 on Windows/Python 3.12.6 with zero model calls. The path includes local planning, routing, risk assessment, real execution, post-condition verification, and response shaping.

59/59 regression cases

Intent routing controls

The deterministic dispatch corpus covers URLs, browser clicks, screen analysis, status queries, app launches, file reads, forensics, a browser workflow, and ambiguous phrases that must reach model planning. Median routing latency was 0.026 ms. This fixed corpus is not population-level language accuracy.

Shared-loop protection

Concurrent responsiveness

A real one-second CPU monitor allowed 65 concurrent scheduler heartbeats; the maximum gap was 16.296 ms on Windows. This protects voice, camera, approval, and WebSocket work from a one-second event-loop freeze. It is not UI or hardware-input latency.

Calibrated learned-risk evidence

World model: useful, bounded, inspectable

The shipped coarse risk predictor records 36,000 training and 5,400 temporal-validation samples across 12 action types. Held-out MAE improved 54.0154% for disk delta and 99.4124% for process delta versus a zero predictor; 5/5 direction invariants passed. Deterministic policy remains authoritative, and this is not a general physical-world or user-intent model.

Software path tested

Voice, gesture and gaze

Routing, cancellation, calibration, geometry, temporal filtering, and fusion have automated coverage. Accuracy across microphones, cameras, lighting, backgrounds, languages, accents, and users still requires human hardware testing.

Research boundary

Neural intent

Synthetic BrainFlow and recorded EEG playback paths are implemented. Heliox has not established live headset control accuracy, medical validity, or clinical use. It must be described as recorded/synthetic EEG research until live evidence exists.

Known limits remain visible

What this evidence does not prove

  1. Universal compatibility with websites, applications, operating systems, peripherals, or third-party APIs.
  2. Physical camera, microphone, speaker, accessibility-permission, EEG, or human-factors accuracy.
  3. That snapshots can reverse messages, purchases, remote operations, pushed commits, or every external effect.
  4. That learned-risk or world-model output can override deterministic safety policy.
  5. That the currently published Windows installers carry a production-trusted certificate.

Inspect the complete evidence record

The Markdown version includes the platform matrix, closed regression history, and reproduction commands.

Read full evidence