One person, self-funded, with no investors and no board. You never have to take my word for an audit anyway. Every report is signed, and you can check it yourself.
When an audit firm's revenue depends on keeping a few big clients happy, a failing result becomes the firm's problem too, and there's quiet pressure to round it up. Forge has no client big enough to create that pressure, so a model that fails the protocol gets a report that says it failed.
You don't have to take that on faith. Every Forge report is signed with an Ed25519 key, carries its own public key, and is written into a public hash-chained log. You verify it offline with any standard libsodium library. There's no Forge SDK and nothing that phones home. If one number changed after a report was signed, the signature stops matching and you see it. You can check any report we've published yourself.
Nobody holds equity in Forge, so nobody takes a loss when a score comes back bad. The number is whatever the model did under the protocol.
No single buyer keeps Forge running, so no single buyer can pressure a result. A well-known model gets the same protocol and the same FAIL as anything else.
Verification runs offline against open cryptography, so a report stays checkable even if Forge NC shuts down one day. It doesn't depend on my server being up.
Our sample audit is a real run with every failure left in. Read it before you trust us with yours.