AER-1 corpus vectors

Every vector in the published AER-1 corpus, one page each: the input, the expected result, and the checks it exercises. The corpus index at zambo.dev/aer1/corpus.json records 126 vectors and 129 checks, kit 1.5.7, draft-zambo-aer1-26. Evaluated set digest: sha256:ccaff18aba8f4e70aacf8a469403e9a6f12f025ad39df88079398bbe13100ce8. Base corpus digest: sha256:b9a740e75c1d01a666d952d6037f9816d791e9bc0bfcef55a4e0d43c02cceb87.

These pages are rendered from the corpus bytes themselves. A receipt proves the saved result was not changed, and these vectors are how an implementation shows it reaches the same verdict as the reference on every published case.

Now citable: this corpus is published as the AER-1 conformance kit dataset, DOI 10.57967/hf/11245 (zambodotdev/aer1-conformance-kit on Hugging Face), with the reference runners and CITATION.cff alongside the vectors. Cite the draft for the format and the DOI for the corpus you ran. The standard itself: AER-1, the verifiable execution receipt for AI agents.

Cite AER-1

BibTeX:

@software{zambo_aer1_2026,
  author       = {Zambo, Brennan},
  title        = {{AI Agent Execution Receipt (AER-1)}},
  version      = {1.5.7},
  date         = {2026-10-19},
  doi          = {10.57967/hf/11245},
  url          = {https://datatracker.ietf.org/doc/draft-zambo-aer1/},
  note         = {Conformance corpus for draft-zambo-aer1-26: 126 test vectors, 129 checks, kit v1.5.7. Dataset: https://huggingface.co/datasets/zambodotdev/aer1-conformance-kit}
}

APA: Zambo, B. (2026). AI Agent Execution Receipt (AER-1) [Data set]. https://doi.org/10.57967/hf/11245

Anchor vectors (6)

anchor-resolves expected_anchor_outcome: verified.
anchor-unresolvable expected_anchor_outcome: rejected: unresolvable record.
anchor-not-checked expected_anchor_outcome: not checked.
anchor-verification-failed expected_anchor_outcome: verification failed.
anchor-absent expected_anchor_outcome: absent.
anchor-other-profile expected_anchor_outcome: absent.

Chain vectors v07 (28)

v07-valid-5 expected_verdict: valid.
v07-valid-single expected_verdict: valid.
v07-truncation-limit-prefix expected_verdict: valid.
v07-relabel-provenance expected_verdict: invalid.
v07-relabel-tool-id expected_verdict: invalid.
v07-close-middle expected_verdict: invalid.
v07-close-wrong-type expected_verdict: invalid.
v07-delete-identical-pair expected_verdict: invalid.
v07-insert-duplicate expected_verdict: invalid.
v07-splice-cross-job expected_verdict: invalid.
v07-bad-genesis expected_verdict: invalid.
v07-seq-gap expected_verdict: invalid.
v07-mixed-job-id expected_verdict: invalid.
v07-bad-base64 expected_verdict: invalid.
v07-v06-chain-rejected expected_verdict: invalid.
v07-seq-float-valid expected_verdict: valid.
v07-seq-bool-invalid expected_verdict: invalid.
v07-seq-fraction-invalid expected_verdict: invalid.
v07-seq-negative-invalid expected_verdict: invalid.
v07-seq-string-invalid expected_verdict: invalid.
v07-seq-null-invalid expected_verdict: invalid.
v07-seq-missing-invalid expected_verdict: invalid.
x-genesis-single expected_verdict: invalid.
x-encoding-reference expected_verdict: valid.
x-encoding-draft-literal expected_verdict: invalid.
ax-genesis-single expected_verdict: invalid.
ax-esc-hex-upper expected_verdict: invalid.
ax-esc-long-escape expected_verdict: invalid.

Chain vectors (7)

chain-valid-3 expected_verdict: valid.
chain-single-entry-valid expected_verdict: valid.
chain-tampered-middle expected_verdict: invalid.
chain-truncated-no-close expected_verdict: invalid.
chain-reordered expected_verdict: invalid.
chain-bad-genesis expected_verdict: invalid.
chain-close-wrong-type expected_verdict: invalid.

Commitment vectors (8)

commit-valid-1 expected_verdict: valid.
commit-digest-mismatch expected_verdict: invalid.
commit-count-mismatch expected_verdict: invalid.
commit-job-mismatch expected_verdict: invalid.
commit-malformed-missing expected_verdict: invalid.
commit-malformed-types expected_verdict: invalid.
commit-not-an-object expected_verdict: invalid.
x-entry-count-float expected_verdict: invalid.

Id binding vectors (6)

id-alone-unverified expected_digest: pass.
id-expected-match expected_digest: pass.
id-expected-mismatch expected_digest: pass.
id-resolution-agreement expected_digest: pass.
id-resolution-disagreement expected_digest: pass.
id-absent expected_digest: fail.

Merkle vectors (9)

canonical-5-step expected_root: 7c4817ca249edfeae259b98abf63ed38a31d9dbeebf5ee23139410a7a7f63b37.
legacy-construction-rejected expected_root: a4b2fcb4684cec481e4ece889ed15c7d9e47e58d9ba4fb02ea354c0cb2ca44c4.
odd-duplication-3 expected_root: 4860e25bbc8dba2382887cb08ccaf6cd88434bbda5aeda45c6a8373bb15f63e4.
ordering-matters expected_root: 362530ecc354e40c5787139705ca6d85af1354a4b6af83ee9c3a16cb66b8a66c.
single-leaf expected_root: 609eb71e8855515d3d1988f17c714429b4433cfbd8a837f22182652d22ae1f51.
empty expected_root: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.
worked-example-byte-exact expected_root: 7c4817ca249edfeae259b98abf63ed38a31d9dbeebf5ee23139410a7a7f63b37.
duplicate-receipt-id-collision expected_root: 7c4817ca249edfeae259b98abf63ed38a31d9dbeebf5ee23139410a7a7f63b37.
one-step-single-receipt expected_root: 7c90f65aeccd214f8bb583bec76878d5f463d65b9b26c11e07c51dd59be814d5.

Test vectors: anchored (6)

anchored-bad-id-version expected verdict (corpus path): the anchored receipt must fail its anchor check.
anchored-bad-leaf-hash expected_anchor_outcome (from anchor vector anchor-verification-failed): verification failed.
anchored-bad-timestamp expected verdict (corpus path): the anchored receipt must fail its anchor check.
anchored-missing-proof expected verdict (corpus path): the anchored receipt must fail its anchor check.
anchored-unresolvable-anchor expected_anchor_outcome (from anchor vector anchor-unresolvable): rejected: unresolvable record.
anchored-valid expected_anchor_outcome (from anchor vector anchor-resolves): verified.

Test vectors: invalid profile (1)

missing-inputs expected verdict (corpus path): invalid: the receipt must fail.

Test vectors: invalid (32)

ax-base64-unpadded expected verdict (corpus path): invalid: the receipt must fail.
ax-feb29-1900 expected verdict (corpus path): invalid: the receipt must fail.
ax-feb29-non-leap expected verdict (corpus path): invalid: the receipt must fail.
ax-tool-empty-scope expected verdict (corpus path): invalid: the receipt must fail.
bad-created-at expected verdict (corpus path): invalid: the receipt must fail.
bad-id expected verdict (corpus path): invalid: the receipt must fail.
bad-offset-range expected verdict (corpus path): invalid: the receipt must fail.
bad-provenance expected verdict (corpus path): invalid: the receipt must fail.
bad-verification-status expected verdict (corpus path): invalid: the receipt must fail.
base64-pad-bit expected verdict (corpus path): invalid: the receipt must fail.
base64-unpadded expected verdict (corpus path): invalid: the receipt must fail.
bytes-not-base64 expected verdict (corpus path): invalid: the receipt must fail.
duplicate-member-name expected verdict (corpus path): invalid: the receipt must fail.
feb29-1900 expected verdict (corpus path): invalid: the receipt must fail.
feb29-non-leap expected verdict (corpus path): invalid: the receipt must fail.
hash-bad-format expected verdict (corpus path): invalid: the receipt must fail.
hash-mismatch expected verdict (corpus path): invalid: the receipt must fail.
id-trailing-newline expected verdict (corpus path): invalid: the receipt must fail.
impossible-date expected verdict (corpus path): invalid: the receipt must fail.
input-hash-key-order-20 expected verdict (corpus path): invalid: the receipt must fail.
input-hash-mismatch expected verdict (corpus path): invalid: the receipt must fail.
leap-second-created-at expected verdict (corpus path): invalid: the receipt must fail.
missing-output-hash expected verdict (corpus path): invalid: the receipt must fail.
nil-uuid expected verdict (corpus path): invalid: the receipt must fail.
non-utf8-bytes expected verdict (corpus path): invalid: the receipt must fail.
provenance-control-char expected verdict (corpus path): invalid: the receipt must fail.
provenance-trailing-newline expected verdict (corpus path): invalid: the receipt must fail.
tampered-provenance expected verdict (corpus path): invalid: the receipt must fail.
tool-empty-name expected verdict (corpus path): invalid: the receipt must fail.
tool-not-object expected verdict (corpus path): invalid: the receipt must fail.
uppercase-id expected verdict (corpus path): invalid: the receipt must fail.
version-downgrade expected verdict (corpus path): invalid: the receipt must fail.

Test vectors: valid (13)

bound-04 expected verdict (corpus path): valid: the receipt must pass.
feb29-leap expected verdict (corpus path): valid: the receipt must pass.
fraction-one-digit expected verdict (corpus path): valid: the receipt must pass.
input-hash-multikey-20 expected verdict (corpus path): valid: the receipt must pass.
legacy-02 expected verdict (corpus path): valid: the receipt must pass.
legacy-03 expected verdict (corpus path): valid: the receipt must pass.
legacy-real-2 expected verdict (corpus path): valid: the receipt must pass.
optional-members-18 expected verdict (corpus path): valid: the receipt must pass.
real-04 expected verdict (corpus path): valid: the receipt must pass.
real-1-bare expected verdict (corpus path): valid: the receipt must pass.
receipt-01 expected verdict (corpus path): valid: the receipt must pass.
receipt-02 expected verdict (corpus path): valid: the receipt must pass.
receipt-03-live expected verdict (corpus path): valid: the receipt must pass.

Unicode vectors (3)

unicode-nfc-form expected: match.
unicode-nfd-form expected: match.
unicode-nfd-against-nfc-commitment expected: mismatch.

Workflow merkle seq output v1 (7)

legacy-receipt-id-v0-mixed-version expected_verdict: valid.
seq-output-v1-single-step expected_verdict: valid.
seq-output-v1-multi-step expected_verdict: valid.
seq-output-v1-odd-level-duplicates-last expected_verdict: valid.
seq-output-v1-multi-step-odd-levels expected_verdict: valid.
xversion-seq-output-v1-evaluated-as-receipt-id-v0 expected_verdict: valid.
xversion-receipt-id-v0-evaluated-as-seq-output-v1 expected_verdict: valid.

The same corpus, organized by check instead of by vector: the AER-1 corpus checks index groups all 129 checks by type and deep-links to the check row on each vector page.

Try Zambo free: add Zambo to your AI to run this kind of check on your own agent work, with 20 free calls per day and a Day Pass at $0.99 for 24h when you need more. Every call returns a verifiable receipt, and a receipt proves the saved result was not changed.

Implementations can carry the proof with them. The AER-1 badge kit gives any project page, profile, or repo a verifiable-receipts badge served from a shields-compatible endpoint, so the claim travels with the work and the check stays one click away.