BETA · GAMMA-Ray is published for review. The rules, the mapping and every rating here are experimental and will change. How a rating is made · what exists · send a correction
GAMMA-Rayv0.0.19 · beta

Spectrum 0.1 beta · published for review · a working name

What an agent can do, and how openly it shows it.

A Spectrum card describes one agentic product by its shape: four dimensions, four levels each, read only from what is public. Every level is something a company can point at. Nothing on a card is a judgement: each level is computed from evidence by a published rule.

RiskMandate Publishera deployment
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A4AutonomyOrchestrates
R2ReachIntegrated
C2ControlConfigurable
O1OpennessDisclosed
Stage: Building (9 of 16)

Standout. Autonomy 4 (Orchestrates): the repository, the stories vault and the live site

Next unlock. Openness 2 (Documented): public evidence that its limits and known failure cases are documented for those who use it would get there.

Standards constellation. 73 provisions lit across 8 of 8 instruments.

Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act

Evidence: 6 sources, captured and hashed · the card's page has the vault's read key · A participant entry: one of our own agents · send a correction

The PrompTugal.news agent teama deployment
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A4AutonomyOrchestrates
R2ReachIntegrated
C3ControlObservable
O1OpennessDisclosed
Stage: Scaling (10 of 16)

Standout. Autonomy 4 (Orchestrates): the repository, the vaults, the inboxes and the live site

Next unlock. Openness 2 (Documented): public evidence that its limits and known failure cases are documented for those who use it would get there.

Standards constellation. 91 provisions lit across 8 of 8 instruments.

Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act

Evidence: 10 sources, captured and hashed · the card's page has the vault's read key · A participant entry: one of our own agents · send a correction

Claude Code on the weba product, as documented
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A·Autonomynot yet evidenced
R2ReachIntegrated
C2ControlConfigurable
O2OpennessDocumented
Stage: Building (6 of 16)

Standout. Reach 2 (Integrated): the repository, the shell and the code host

Next unlock. Autonomy 3 (Acts): public evidence that it is in production: a public source names a customer or gives usage figures for what it does on its own would get there.

Standards constellation. 59 provisions lit across 8 of 8 instruments.

Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act

Evidence: 8 sources, captured and hashed · the card's page has the vault's read key · Not reviewed by its vendor yet · correct or claim this card

Claude Code, on your own machinea product, as documented
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A4AutonomyOrchestrates (available)
R2ReachIntegrated (available)
C4ControlEnforced (available)
O2OpennessDocumented
Stage: Scaling (12 of 16)

Standout. Autonomy 4 (Orchestrates): the codebase, the shell, git and the development tools it integrates with

Next unlock. Reach 4 (Ecosystem): public evidence that agents operate across organisational boundaries or disparate stacks would get there.

Standards constellation. 75 provisions lit across 8 of 8 instruments.

Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act

Evidence: 12 sources, captured and hashed · the card's page has the vault's read key · Not reviewed by its vendor yet · correct or claim this card

GitHub Copilot cloud agenta product, as documented
SPECTRUM 0.1 BETA · Public tier · 2026-11-10
A·Autonomynot yet evidenced
R3ReachOpen protocol
C2ControlConfigurable
O1OpennessDisclosed
Stage: Building (6 of 16)Open protocol

Standout. Reach 3 (Open protocol): "provided and maintained by GitHub"

Next unlock. Autonomy 3 (Acts): public evidence that it is in production: a public source names a customer or gives usage figures for what it does on its own would get there.

Standards constellation. 51 provisions lit across 8 of 8 instruments.

Salesforce
EAAMM
OWASP
MCP
AAGMM
Microsoft
NIST
AI Act

Evidence: 4 sources, captured and hashed · the card's page has the vault's read key · Not reviewed by its vendor yet · correct or claim this card

These first 5 are our own two agents and three widely used products. A standard is tried on its authors first.

Four dimensions, four levels

Two dimensions measure agentic power and two measure agentic trust. No dimension caps another. A dimension with no evidence reads "not yet evidenced", never zero.

DimensionThe questionLevel 1Level 2Level 3Level 4
Autonomy (power)What does the agent do on its own?Assists: answers, drafts, summarises; a person does each stepSuggests: uses tools and data, proposes actions; a person approves each oneActs: completes routine tasks end to end in production; a person handles exceptionsOrchestrates: runs multi-step workflows across systems or coordinates other agents; a person sets goals and reviews outcomes
Reach (power)How connected is it?Contained: works inside its own productIntegrated: documented connectors to common toolsOpen protocol: a published agent interface with documented authorisationEcosystem: others build on it
Control (trust)Can people stay in command?Stated: documents say how people approve, override or stop itConfigurable: approval modes, permission scopes and roles are documented settingsObservable: audit logs, a way to pause or stop, and monitoring are availableEnforced: limits enforced outside the agent, described in public
Openness (trust)Does it show its work?Disclosed: says it is AI and what it is forDocumented: public documents on how it works, its data, its models and its limitsMeasured: publishes evaluations, and a way to report problems or read it by machineVerified: an independent party has checked it

Levels three and four need artefacts, not adjectives: a page, an address that resolves, a case study that names a customer, a report. Marketing, roadmaps and demonstrations are "announced": shown, and never counted.

The card

StageSum of the four levelsReads as
Exploring1 to 5Agentic features are live and documented
Building6 to 9Agents do real work, with controls taking shape
Scaling10 to 13Agents act in production, connect openly, show their work
Pioneering14 to 16Sets the bar others in the sector measure against
BadgeEarned when
BalancedControl and Openness are each at least Autonomy minus one
Open protocolReach is level 3 or higher
Shows its workOpenness is level 3 or higher, with published evaluations
VerifiedOpenness reaches level 4 on an independent party’s evidence
RisingMoved up at least one level since the previous edition
ClaimedThe company reviewed the card and added evidence

The cards so far

CardSignatureStageBadgesProvisions litNext unlock
RiskMandate PublisherA4 · R2 · C2 · O1Building (9)none yet73 in 8 instrumentsOpenness 2
The PrompTugal.news agent teamA4 · R2 · C3 · O1Scaling (10)none yet91 in 8 instrumentsOpenness 2
Claude Code on the webA0 · R2 · C2 · O2Building (6)none yet59 in 8 instrumentsAutonomy 3
Claude Code, on your own machineA4 · R2 · C4 · O2Scaling (12)none yet75 in 8 instrumentsReach 4
GitHub Copilot cloud agentA0 · R3 · C2 · O1Building (6)Open protocol51 in 8 instrumentsAutonomy 3

The layers

The public card is the front door. Everything that needs the operator sits above it, behind an invitation.

LayerWho sees itMade fromGives
1. Spectrum cardpublicpublic evidence onlysignature, stage, badges, constellation
2. Claimed cardpublic, marked as claimsthe company adds links and answers the Declared questionshigher levels where evidence supports them; the Claimed badge
3. GAMMA-Ray ratingthe company; published with consentDeclared and Evidenced tiers, operation facts observedfreedom, governance, the level held, a work order
4. RiskMandatethe company onlythe measured grant, the mandate, the barriersthe gap, and what would close it

RiskMandate is not in the public layer: mandate, grant and delta need the operator. Five of the questions (the registry, accountability, policy, incidents, readiness) feed no public level; a company answers them when it claims its card.

The rules

  1. Say what is there. A card lists evidence found. Absence appears only as a next unlock.
  2. Not evidenced is not no.
  3. A card needs something to show. No card is published unless one dimension reaches level one. Anyone else gets an invitation.
  4. Published as beta, then the company is told. A card is published once it has had two rounds of review and a sign-off. The company is told afterwards and invited to correct or claim it and add evidence.
  5. No adjectives, no ranking by number. Cohorts sort by name; a leader is named per dimension, never overall.
  6. Announced is shown, not scored.
  7. Corrections are dated and propagate.
  8. The same rules for us. Our own agents get cards first, as participant entries.

Every earlier rule of GAMMA-Ray stays: levels are computed, links are signed, a scan only reads, and everything carries the beta mark.