{"resourceId":"vermont-anthropic-evaluation-agreement-claude-security-20261007","versions":[{"version":"external-ca08556179cfef88aeed4fda9db423f9fe499cf1f35fd2484ebb062d983fac87","resource":{"id":"vermont-anthropic-evaluation-agreement-claude-security-20261007","title":"Vermont posts the signed Anthropic Evaluation Agreement: $100,000 credit for Claude Security and Claude Code, defensive cyber use only, six-month term","organization":"State of Vermont and Anthropic, PBC (agreement posted by ADS to JITOC)","sector":"State AI cybersecurity evaluation contracting","geography":"Vermont statewide (customer: State of Vermont)","publishedAt":"2026-10-07","publicationDate":"2026-10-07","eventDate":null,"sourceName":"Vermont General Assembly / Agency of Digital Services","sourceLabel":"Signed Evaluation Agreement – Claude Security (Government) between State of Vermont and Anthropic, PBC (posted to JITOC Oct 7, 2026)","sourceUrl":"https://legislature.vermont.gov/Documents/2026/Workgroups/JITOC/Agency%20of%20Digital%20Services/W~Denise%20Reilly-Hughes~Signed%20contract%20with%20VT%20and%20Anthropic~10-7-2026.pdf","evidenceClass":"government-evaluation","outcomeClass":"emerging","topics":["data-security","governance-procurement","developers-agents"],"finding":"Alongside its Oct 7 answers, ADS posted the signed Anthropic Evaluation Agreement titled “Claude Security (Government).” Customer is the State of Vermont. Evaluation Services are “Claude for Enterprise including Claude Security and Claude Code with cyber defense runbooks,” with a Credit Amount of $100,000.00 USD for a six-month Evaluation Period from the Effective Date. Approved use is solely for defensive cybersecurity purposes in customer-owned or authorized systems (scanning, triaging, validating, remediating vulnerabilities); general software development is barred unless Anthropic permits in writing. Services are provided “as is”; Claude Security is labeled a Beta Service; liability is capped at $1,000 or fees paid. Government terms allow public-disclosure-law sharing of the agreement with notice to Anthropic. This contract text sits beside ADS’s same-day statement that Vermont is not using Claude Security.","sledRelevance":"Shows the actual instrument behind a free state SLTT AI security trial: credit amount, scoped defensive uses, beta disclaimer, and liability cap. Useful for peer states comparing vendor evaluation templates. Jurisdictional limit: Vermont’s Bulletin 3.5 treatment is separate from the vendor form.","evidence":"Opened the PDF posted on the JITOC Oct 7 documents page via curl and pdftotext. Compared service description to ADS’s written statement that Claude Security is not used.","architectureImplications":"Contract contemplates Claude Security and Claude Code with cyber defense runbooks in Anthropic-native or marketplace environments (Azure AI Foundry, Bedrock, Vertex). ADS separately says it uses Claude Code via VS Code and Azure-hosted LLM and does not use Claude Security.","governanceImplications":"The form is an evaluation credit agreement, not a standard Vermont Bulletin 3.5 zero-dollar contract package (no AA-14/Attachment C in the posted file). Public-records carve-outs are built in. Beta and as-is terms shift risk to the state customer.","securityPrivacyImplications":"Approved use is limited to defensive cyber on systems the customer owns or is authorized to test. The posted agreement does not itself state data-retention settings for individual models; those appear in ADS’s Q&A.","caveats":"Effective Date and wet-ink signature dates are not clearly extractable from the text layer (form fields). Title and Evaluation Services include Claude Security even though ADS says it is not using that product—scope on paper may exceed stated practice. Liability and as-is terms are vendor-favorable; no measured security outcomes appear in the contract.","streamIds":["state-government"],"roles":{"sales":"The posted Vermont–Anthropic evaluation form is the artifact legislators asked for: $100k credit, Claude Security and Claude Code named, defensive-only use, as-is/beta terms, $1,000 liability cap. When selling or advising on similar trials, bring the draft agreement early and reconcile named products with what the agency will actually authorize—Vermont’s answers say Claude Security is unused despite the form title. Lead with scoped cyber evaluation, not production warranties the as-is language withholds.","engineering":"Treat the agreement’s product list as a ceiling, not a deployment plan. If Claude Security requires whole-repo access the stack can’t support, document the subset in use (here, Claude Code) and keep marketplace hosting (Azure/Bedrock/Vertex) choices explicit. Wire credit metering and approved-use checks so general software development cannot silently consume defensive evaluation tokens.","delivery":"File the signed evaluation agreement with the oversight packet, track credit burn versus the six-month term, and maintain a written delta between contracted services and authorized tools. Don’t wait for credit exhaustion to plan exit or paid conversion under full procurement rules. Schedule a mid-term scope review so unused products stay disabled and public-records responses stay consistent."},"roleDetails":{"sales":{"customerProblem":"Oversight bodies want the signed AI evaluation agreement, not only hearing testimony.","stakeholders":["CIO/CISO","Procurement / Secretary of Administration","Legislative IT oversight","Vendor account team"],"discoveryQuestions":["Which products named in the evaluation form are actually authorized for use?","What is the credit balance and evaluation end date?","Are as-is/beta and liability terms acceptable to counsel?","How will public-records disclosure of the agreement be handled?"],"valueHypothesis":"Transparent evaluation agreements with scoped defensive uses help agencies trial AI cyber tools without overstating production readiness.","potentialEngagement":"Contract-and-practice reconciliation memo for one SLTT-style evaluation.","unsupportedClaims":["That Vermont production systems are covered by Anthropic warranties","That Claude Security is in active Vermont use","Guaranteed security outcomes from the credit"]},"engineering":{"fit":"Relevant when an evaluation form lists multiple AI cyber products and the agency will enable only a subset.","architectureIntegration":"Map form services (Claude Security, Claude Code, runbooks) to actual IDE/plugin and hosting path; disable or block unused products.","prerequisites":["Authorized-use matrix","Hosting choice (native vs Azure/Bedrock/Vertex)","Credit metering"],"constraints":["Defensive-use-only credit","Beta status for Claude Security","Six-month term"],"security":"Enforce approved-use boundaries; do not point credits at general development.","proofOfValue":["Export of enabled products vs agreement list","Credit-utilization report","Sample defensive finding handled under approved use"]},"delivery":{"work":"Publish agreement to oversight, operate within defensive scope, monitor credits, close or convert before term end.","dependencies":["Counsel acceptance of as-is/beta terms","Inventory/procurement close-out","Security ops capacity"],"ownership":"ADS contracting and security leads.","skillsAdoption":"Developers and security staff need clarity on allowed vs disallowed uses under the credit.","governanceCheckpoints":["Signed agreement posted to oversight","Authorized-product list approved","Mid-term credit and scope review"],"acceptanceCriteria":["Proposed: authorized-product list signed by CISO/CDAO","Proposed: monthly credit burn reported","Proposed: unused contracted products explicitly disabled"],"risks":["Paper scope exceeds practice, creating oversight confusion","Credit runs out mid-remediation","Beta/as-is terms leave residual risk with the state"]}},"retrievedAt":"2026-10-08T22:30:23-05:00","enrichedAt":"2026-10-08T22:30:23-05:00","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Limited direct relevance; the agreement restricts credits to cyber-readiness work rather than general development, which shapes which staff may use the tools under the credit.","procurementImplications":"Zero-cash $100k credit evaluations still create binding terms (use limits, beta status, liability caps). Agencies should reconcile contract product lists with actual authorized tools before legislative disclosure.","operatingModelImplications":"Credit depletion ends access; either party may terminate for convenience. Operational planning should track token burn (ADS reports ~10% used) against the six-month window.","sourceVerification":{"responseId":"curl-vt-anthropic-contract-20261008","openedUrl":"https://legislature.vermont.gov/Documents/2026/Workgroups/JITOC/Agency%20of%20Digital%20Services/W~Denise%20Reilly-Hughes~Signed%20contract%20with%20VT%20and%20Anthropic~10-7-2026.pdf","referenceExcerpt":"Claude for Enterprise including Claude Security and Claude Code with cyber defense","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}