Date: 2025-11-08 Repository: https://github.com/testifysec/witness-evals
- 100% passed
witness verify - Every policy, attestation, command verified
- 26 MB dataset
- Progress: 14,709/100,000 (14.7%)
- ETA: ~18 hours overnight
- Diversity: 31 attestor combos, 10 steps, 7 questions
- All formally verified
- 1,192 schema Q/A (130 fields, 18 attestors, 144 Rego verified)
- 490 attestor Q/A (from Go source parsing)
- 168 CLI schema Q/A (from witness attestors schema)
- 124 complex Rego (security patterns from witness.dev)
- 8 general concepts
- Witness verify: Tests complete attestation + policy flow
- OPA: Tests Rego syntax and evaluation
- Real attestation testing: Rego tested against actual witness data
- 100% verification rate
- Llama 3.2 3B trained on 10K
- Loss: 0.498
- Finding: Needs MORE diversity (hence 100K)
| Component | Examples | Verified | Type |
|---|---|---|---|
| Diverse verified configs | 100,000 | Yes | Working examples |
| Schema Q/A | 1,982 | Yes | Knowledge |
| Complex Rego | 124 | Yes | Security |
| Concepts | 876 | N/A | Knowledge |
| TOTAL | ~103K | ~102K | Mixed |
Every training example verified through:
- Witness verify: Attestation + policy actually work
- OPA check: Rego syntax is valid
- OPA eval: Rego evaluates against real attestation data
This ensures the model learns ONLY valid patterns.
Tonight (Overnight):
- 100K generation completes (~18 hours)
- Final dataset: ~103K examples
Tomorrow:
- Create train/valid splits
- Train on 100K+ diverse examples
- Expected loss: 0.25-0.30 (vs 0.50 current)
- Model that ACTUALLY generates witness commands!
| Dimension | 10K (v1) | 100K (v2) | Improvement |
|---|---|---|---|
| Attestor combos | 15 | 31 | 2.1x |
| Step names | 1 | 10 | 10x |
| Questions | 1 | 7 | 7x |
| Commands | 1 | 5 | 5x |
| Rego policies | 0 | ~50K | ∞ |
| Total diversity | 15 | ~10,850 | 723x |
This dataset enables:
- Fine-tuning models to be witness experts
- Generating valid witness configurations
- Understanding all attestor schemas
- Writing correct Rego policies
- Preventing supply chain attacks
First formally verified witness training dataset for LLMs.
Status: 100K generation running overnight (PID 9022) Progress: tail -f /tmp/generation-100k.log Committed: https://github.com/testifysec/witness-evals