BETA · GAMMA-Ray is published for review. The rules, the mapping and every rating here are experimental and will change. How a rating is made · what exists · send a correction
GAMMA-Rayv0.0.21 · beta

Launch briefing · beta · site v0.0.21

GAMMA-Ray in two minutes

A draft standard that describes an AI agent from public evidence. It is a beta, tried out at Web Summit Lisbon, and published for review.

What it is

GAMMA-Ray looks at one AI agent and writes down two things: how much it does on its own, and how well that is controlled. Every statement comes from a public source, and the source is linked.

The name stands for Graph-Analyzed Multi-framework Maturity Assessment with Risk-Adjusted Yield. It is Dinis Cruz's name.

Where it comes from

The brief began with five published maturity models for agents. Read at source, they were not all what they were said to be, and some rate the company, not the agent. The corrections to the brief say what changed.

The graph now holds 8 instruments, cut into 279 provisions. We found the observable fact behind each and grouped the facts into 21 questions. One answer counts towards several instruments at once. The instruments lists each with its source, licence and the date it was read.

The mapping between instruments is a first pass by one reader. A second reader has not checked it.

How to read a card

RiskMandate Publishera deployment
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A4AutonomyOrchestrates
R2ReachIntegrated
C2ControlConfigurable
O1OpennessDisclosed
Stage: Building (9 of 16)

Standout. Autonomy 4 (Orchestrates): the repository, the stories vault and the live site

Next unlock. Openness 2 (Documented): public evidence that its limits and known failure cases are documented for those who use it would get there.

Standards constellation. 73 provisions lit across 8 of 8 instruments.

Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act

Evidence: 6 sources, captured and hashed · the card's page has the vault's read key · A participant entry: one of our own agents · send a correction

The PrompTugal.news agent teama deployment
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A4AutonomyOrchestrates
R2ReachIntegrated
C3ControlObservable
O1OpennessDisclosed
Stage: Scaling (10 of 16)

Standout. Autonomy 4 (Orchestrates): the repository, the vaults, the inboxes and the live site

Next unlock. Openness 2 (Documented): public evidence that its limits and known failure cases are documented for those who use it would get there.

Standards constellation. 91 provisions lit across 8 of 8 instruments.

Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act

Evidence: 10 sources, captured and hashed · the card's page has the vault's read key · A participant entry: one of our own agents · send a correction

Claude Code on the weba product, as documented
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A·Autonomynot yet evidenced
R2ReachIntegrated
C·Controlnot yet evidenced
O2OpennessDocumented
Stage: Exploring (4 of 16)

Standout. Reach 2 (Integrated): the repository, the shell and the code host

Next unlock. Autonomy 3 (Acts): public evidence that it is in production: a public source names a customer or gives usage figures for what it does on its own would get there.

Standards constellation. 42 provisions lit across 8 of 8 instruments.

Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act

Evidence: 9 sources, captured and hashed · the card's page has the vault's read key · Not reviewed by its vendor yet · correct or claim this card

Claude Code, on your own machinea product, as documented
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A4AutonomyOrchestrates (available)
R2ReachIntegrated (available)
C3ControlObservable (available)
O2OpennessDocumented
Stage: Scaling (11 of 16)

Standout. Autonomy 4 (Orchestrates): "approve the action so Claude may retry"

Next unlock. Reach 4 (Ecosystem): public evidence that agents operate across organisational boundaries or disparate stacks would get there.

Standards constellation. 71 provisions lit across 8 of 8 instruments.

Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act

Evidence: 15 sources, captured and hashed · the card's page has the vault's read key · Not reviewed by its vendor yet · correct or claim this card

GitHub Copilot cloud agenta product, as documented
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A·Autonomynot yet evidenced
R2ReachIntegrated (available)
C2ControlConfigurable
O1OpennessDisclosed
Stage: Exploring (5 of 16)

Standout. Reach 2 (Integrated): "external applications like Microsoft Teams, Linear, Slack, and Jira"

Next unlock. Autonomy 3 (Acts): public evidence that it is in production: a public source names a customer or gives usage figures for what it does on its own would get there.

Standards constellation. 44 provisions lit across 8 of 8 instruments.

Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act

Evidence: 3 sources, captured and hashed · the card's page has the vault's read key · Not reviewed by its vendor yet · correct or claim this card

A card has four dimensions: Autonomy, Reach, Control and Openness. Each has four levels. The signature, for example A3 · R3 · C2 · O3, leads, so a product is described by its shape and not by one number.

How the card works · the rules, cell by cell

What is rated so far

5 cards: our own 2 agents, and 3 widely used products as examples, each read from its vendor's public documentation. A product is rated per configuration. None of the vendors has seen its card. No company in a cohort has a card yet.

Behind the card is the governance rating, for whoever operates an agent. It uses RiskMandate's lens: what an agent is allowed to do (its grant) is measured beside the questions, counted and shown, never scored. The rating · the lens

What is beta

Public evidence, public rating

A rating made only from public sources may be published, in the way public ratings of websites and companies are. For anyone but us it needs a basis, a grade of documented or better on every answer, a statement that its subject has not seen it, and a dated correction when a fact is shown to be wrong.

If you are the company

If a fact on your card is wrong, or a public page exists that we did not find, tell us on the corrections page. A link is the fastest way to move a level. A correction is made in place and dated. You can also ask to claim the card there.

The evidence for each scan is in a public vault, and its read key is on the scan's page. All scans.

The numbers

8instruments read at source
279provisions
21questions
5cards