Rates whether a declared authenticator set and session policy reach a declared target level of a caller-supplied, versioned authentication assurance framework. This is the authentication counterpart to the identity-proofing evaluator (ART-523). Never a hardcoded framework: every threshold, required factor category and restriction comes from the framework you declare below; swap it for any structurally expressible scheme without touching this page's logic. A criterion the definition cannot express (a malformed criterion value) is flagged as an insufficient definition, kept separate from declared data that fails a well-formed criterion.
| Level | Criterion | Required | Found | Result |
|---|
Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.
Run the AINumbers MCP tool `compute_authn_assurance_level`. Task: Given a versioned framework (levels[] ordered lowest-to-highest, each carrying generic authentication criteria), a declared authenticators[] set from the node kind enum, a declared session policy, and a target_level, return achieved_level, meets_target, per-criterion unmet_criteria as {criterion, required, found}, compliance flags, and the framework_ref.
Call it with arguments: {"policy_parameters":{"framework":{"id":"eidas-example","version":"2015-09","levels":[{"level_id":"low","min_factors":1},{"level_id":"substantial","min_factors":2,"dynamic_authentication_required":true},{"level_id":"high","min_factors":2,"dynamic_authentication_required":true,"hardware_bound_required":true}]},"target_level":"low","authenticators":[{"kind":"password","factor_kinds":["knowledge"],"phishing_resistant":false,"hardware_bound":false}]}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Over MCP, the run happens on the AINumbers worker. No AINumbers server stores your inputs.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-826-authenticator-assurance-level.html#p=v1.H4sIAAAAAAAA_wGtAVL-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