product updateMicrosoft

Microsoft releases ASSERT, open-source framework for testing application-specific AI behavior using natural language

TL;DR

Microsoft released ASSERT (Adaptive Spec-driven Scoring for Evaluation and Regression Testing), an open-source framework that converts natural language descriptions of expected AI behavior into structured test cases. The tool addresses a gap in AI evaluation by testing application-specific behaviors that general benchmarks cannot capture.

2 min read
0

Microsoft releases ASSERT, open-source framework for testing application-specific AI behavior using natural language

Microsoft released ASSERT (Adaptive Spec-driven Scoring for Evaluation and Regression Testing), an open-source framework that converts natural language descriptions of expected AI behavior into structured, scored test cases.

The framework takes plain-language descriptions of an AI model's expected behavior and policies, converts them into structured sets of acceptable and unacceptable behaviors, generates test scenarios, runs them against the target system, and scores the results. ASSERT also records the paths AI systems take, including intermediate actions and tool calls, enabling developers to inspect where failures occur.

How ASSERT works

Developers provide high-level behavioral rules in natural language. For example, a developer could specify that a document research AI agent shouldn't send emails outside the company, should limit confidential information to C-level executives, and must provide concise summaries with prior context. ASSERT uses these rules to generate test cases that verify ongoing compliance.

Developers can add system context, tools, and constraints to customize evaluation scope. The framework supports testing during development, after deployment, and for continuous monitoring.

Filling an evaluation gap

"One of the things we've learned is that evaluations are absolutely critical to making good decisions," said Sarah Bird, chief product officer of Responsible AI at Microsoft. "What we found is that if you really want to have a trustworthy system, you should evaluate many more dimensions that are application-specific."

According to Microsoft, ASSERT addresses a gap that broader benchmarks cannot fill. While general evaluations measure model capabilities across standard metrics, they don't capture behaviors shaped by specific application contexts, policies, and tools.

Industry context

The release aligns with a broader shift in AI evaluation practices. As models become more capable, researchers increasingly focus on repeatable testing and regression checks. Stanford's HELM, MLCommons' AILuminate, and evaluation groups like METR have rolled out benchmarks measuring model behavior under different conditions.

The framework is now available as open source.

What this means

ASSERT represents a practical response to a real deployment problem: companies need to verify AI systems behave correctly within their specific contexts, not just on generic benchmarks. By automating the translation of policy requirements into test cases, Microsoft is addressing the gap between model capability testing and application-specific behavior verification. This could accelerate AI deployment by making it easier to establish and maintain compliance with organizational policies, though the framework's effectiveness will depend on how well it generates comprehensive test coverage from natural language specifications.

Related Articles

product update

Google's Data Agent Kit reaches GA with 37 open-source skills and an IAM deny policy for read-only agents

Google has made Data Agent Kit generally available. It is free, open source, and installs into Antigravity, Claude Code, Codex, Cursor, and VS Code-compatible editors. It splits guardrails between advisory skills and enforceable IAM deny policies, according to InfoQ.

research

Microsoft's ThinkingBox-Training lifts Qwen3.8-27B fully reliable task completions from 38 to 107 of 507

Microsoft and Hugging Face released ThinkingBox-Training, which turns executable database-state checks into RL rewards. After 50 GRPO steps, Qwen3.8-27B's pass@1 rose from 51.70% to 60.78%, and tasks passed on all 20 attempts rose from 38 to 107, according to the authors.

benchmark

Microsoft's MAI-DxO scores 83% vs 36% for physicians on complex NEJM cases in Science study

Microsoft's MAI-DxO, a multi-agent diagnostic orchestrator, was correct on 83% of complex New England Journal of Medicine cases in simulation, versus 36% for generalist physicians, according to a study in Science. The data suggests most of the gain comes from stronger base models, with orchestration adding a smaller lift, mainly on complex cases.

product update

Cognition open-sources Devin plugin with 3 MIT-licensed skills to patch PHP, Node.js, GitLab RCE flaws

Cognition released the Devin Vulnerability Fixes plugin, made up of 3 MIT-licensed agent skills. They inventory, patch and test PHP, Node.js and self-managed GitLab deployments affected by this week's critical RCE flaws, then open 1 PR per repo.

Comments

Loading...