Microsoft releases ASSERT, open-source framework for testing application-specific AI behavior using natural language
Microsoft released ASSERT (Adaptive Spec-driven Scoring for Evaluation and Regression Testing), an open-source framework that converts natural language descriptions of expected AI behavior into structured test cases. The tool addresses a gap in AI evaluation by testing application-specific behaviors that general benchmarks cannot capture.
Microsoft releases ASSERT, open-source framework for testing application-specific AI behavior using natural language
Microsoft released ASSERT (Adaptive Spec-driven Scoring for Evaluation and Regression Testing), an open-source framework that converts natural language descriptions of expected AI behavior into structured, scored test cases.
The framework takes plain-language descriptions of an AI model's expected behavior and policies, converts them into structured sets of acceptable and unacceptable behaviors, generates test scenarios, runs them against the target system, and scores the results. ASSERT also records the paths AI systems take, including intermediate actions and tool calls, enabling developers to inspect where failures occur.
How ASSERT works
Developers provide high-level behavioral rules in natural language. For example, a developer could specify that a document research AI agent shouldn't send emails outside the company, should limit confidential information to C-level executives, and must provide concise summaries with prior context. ASSERT uses these rules to generate test cases that verify ongoing compliance.
Developers can add system context, tools, and constraints to customize evaluation scope. The framework supports testing during development, after deployment, and for continuous monitoring.
Filling an evaluation gap
"One of the things we've learned is that evaluations are absolutely critical to making good decisions," said Sarah Bird, chief product officer of Responsible AI at Microsoft. "What we found is that if you really want to have a trustworthy system, you should evaluate many more dimensions that are application-specific."
According to Microsoft, ASSERT addresses a gap that broader benchmarks cannot fill. While general evaluations measure model capabilities across standard metrics, they don't capture behaviors shaped by specific application contexts, policies, and tools.
Industry context
The release aligns with a broader shift in AI evaluation practices. As models become more capable, researchers increasingly focus on repeatable testing and regression checks. Stanford's HELM, MLCommons' AILuminate, and evaluation groups like METR have rolled out benchmarks measuring model behavior under different conditions.
The framework is now available as open source.
What this means
ASSERT represents a practical response to a real deployment problem: companies need to verify AI systems behave correctly within their specific contexts, not just on generic benchmarks. By automating the translation of policy requirements into test cases, Microsoft is addressing the gap between model capability testing and application-specific behavior verification. This could accelerate AI deployment by making it easier to establish and maintain compliance with organizational policies, though the framework's effectiveness will depend on how well it generates comprehensive test coverage from natural language specifications.
Related Articles
Google's Data Agent Kit reaches GA with 37 open-source skills and an IAM deny policy for read-only agents
Google has made Data Agent Kit generally available. It is free, open source, and installs into Antigravity, Claude Code, Codex, Cursor, and VS Code-compatible editors. It splits guardrails between advisory skills and enforceable IAM deny policies, according to InfoQ.
Microsoft's ThinkingBox-Training lifts Qwen3.8-27B fully reliable task completions from 38 to 107 of 507
Microsoft and Hugging Face released ThinkingBox-Training, which turns executable database-state checks into RL rewards. After 50 GRPO steps, Qwen3.8-27B's pass@1 rose from 51.70% to 60.78%, and tasks passed on all 20 attempts rose from 38 to 107, according to the authors.
Microsoft's MAI-DxO scores 83% vs 36% for physicians on complex NEJM cases in Science study
Microsoft's MAI-DxO, a multi-agent diagnostic orchestrator, was correct on 83% of complex New England Journal of Medicine cases in simulation, versus 36% for generalist physicians, according to a study in Science. The data suggests most of the gain comes from stronger base models, with orchestration adding a smaller lift, mainly on complex cases.
Cognition open-sources Devin plugin with 3 MIT-licensed skills to patch PHP, Node.js, GitLab RCE flaws
Cognition released the Devin Vulnerability Fixes plugin, made up of 3 MIT-licensed agent skills. They inventory, patch and test PHP, Node.js and self-managed GitLab deployments affected by this week's critical RCE flaws, then open 1 PR per repo.
Comments
Loading...