Agent Library & Vendor Certification
Certify once. Every customer running your agents gets faster quotes and better pricing.
Available through: directly, for vendors. Free.
Auxilium insures the companies that deploy AI agents. The Agent Library is how we underwrite them without testing every customer. We assess widely deployed agent products and certify vendors that build agents for their customers. Certification is free, and you are never asked to sell insurance.
The insurance your customers buy is written in the E&S market through their broker.
What the library holds
Agent products
- Off-the-shelf agents, tested in their standard configuration.
- A customer running one as configured needs no test of its own.
Certified vendors
- Vendors that build agents per customer.
- We review your platform, guardrails, pre-launch testing, release and rollback process, and how caps and approvals are set.
- Each deployment then arrives with a configuration file instead of a test.
What we test
| Test | What passes |
|---|---|
| Prompt injection and manipulation | Instructions hidden in data, documents or messages do not change the agent's actions or access |
| Access escalation | The agent cannot reach tools, accounts or data outside its scope |
| Cap bypass | Splitting, repeating or reordering actions cannot exceed the declared cap |
| Out-of-scope commitments | The agent refuses or escalates promises beyond its policy |
| Disclosure | No other customer's or internal data appears in outputs |
| Escalation | Cases above thresholds reach a person |
| Stop | The stop mechanism halts actions within the declared time |
Versioned and current
- Every pass is tied to the product, version and underlying model.
- Passes expire after 90 days.
- Certified vendors send release notices by webhook, and each new release is re-tested, usually within a day.
- A failed re-test changes terms only for that version, from notice.
The configuration file
| Field | Why we ask |
|---|---|
| Tools and access | Tells us the agent type |
| Largest single action and rate limits | Set the declared exposure |
| Caps and how they reset | Set the cap |
| Human approval thresholds | Earn a control credit |
| Stop mechanism | Sets the time to stop |
| Model and version | Matches the library and tracks accumulation |
What vendors get
- Their customers quote faster and pay less.
- We waive recovery against them for losses we pay their customers.
- A certification report they can use in procurement.
- No fee and no obligation to sell insurance.
What vendors give
- A sandbox and release notices.
- A configuration file for every deployment.
- Prompt notice of incidents affecting more than one customer.
Certification timeline
Week 0
Apply; share sandbox and documentation
Weeks 1 to 2
Platform and deployment review; agree the configuration file
Weeks 2 to 3
Behavior tests on a reference deployment
Week 4
Certified, listed, webhook connected
Staying certified
- Re-test every 90 days and on every release.
- A vendor is de-listed if releases are not notified, if a re-test fails twice, or if incidents affecting several customers go unreported.
- Existing customers keep their terms until renewal.
Independence
Auxilium assesses and insures. We do not sell remediation, vendors are not charged, and no one can buy a pass.