Learn
Start with the concepts, learn to read an evaluation report, then try an audit worksheet.
Looking for tools and standards by task? Start with curated reading paths for evaluation, security, and governance in the catalog.
-
Step 1 · Core Concepts
What makes AI auditable?
Estimated Time: Reading: ~2 minLearning OutcomeDistinguish evaluation, monitoring, and auditing, and recognize why internal model text cannot prove an external action occurred.
Practical Related Resources- NIST AI Risk Management Framework (AI RMF 1.0): Voluntary framework for organizing risk taxonomy and audit questions.
- Inspect Framework: AISI open-source framework for reproducible model and agent evaluations.
-
Step 2 · Report Evaluation
How to read an agent evaluation report
Estimated Time: Reading: ~4 min | Worked critique: ~10 min (Total ~14 min)Learning OutcomeAsk five questions about tasks, compute, sample size, failure modes, and evidence bounds to judge whether an evaluation supports its claims.

Inspect log viewer, as shown in the project documentation. An example interface, not a result produced by Audit Commons. Inspect contributors · MIT Practical Related Resources- Inspect: Evaluation framework with reusable tasks, tools, scorers, and inspection logs.
- Catalog: Benchmarks: Explore curated evaluation benchmarks in the resource catalog.
-
Step 3 · Practical Auditing
Audit an agent action: evidence worksheet for external tool calls
Estimated Time: Reading: ~4 min | Worksheet practice: ~15 min (Total ~19 min)Learning OutcomeVerify external tool calls across five observable evidence elements and document bounded findings in a plaintext worksheet.

Example report from auditable, a maintainer project. Its fields illustrate one implementation, not a universal reporting standard. yzhao062/auditable · Apache-2.0 Practical Related Resources- AgentDojo: Benchmark environment for testing prompt injection and tool execution security boundaries.
- Catalog: Security Tools: Practical security auditing tools and scanners for agent workflows.