Methodology

The Agentic Readiness Framework (ARF) scores how prepared an organisation is to deploy autonomous AI agents safely and effectively. Unlike survey-based reports, every ARF score is reproducible from the organisation's public domain plus opt-in code analysis - no self-report, no marketing claims.

ARF is composed of 18 dimensions grouped into 6 pillars (Foundation, Data, Operations, Security, Governance, Discoverability). The /framework page labels the Foundation pillar Infrastructure; the two names denote the same dimension set (D1, D2, D3, D12). Each dimension is graded on the L0–L3 maturity scale over the checks the scanner could evidence in this run, drawn from a 258-check framework. Dimension scores are aggregated to an overall 0–100 ARF score as a dimension-weighted mean (engine_v5.py compute_overall, DIMENSION_WEIGHTS). There are no pillar weights in the scorer - pillars are a presentation grouping. The dimension weights are author-derived working values; the AHP/Saaty pairwise-comparison matrix, Consistency Ratio and sensitivity analysis are planned and not yet published. Weights are public in scoring/weights.py.

Tier thresholds (Initial 0-25 / Emerging 26-45 / Production-Ready 46-65 / Advanced 66-85 / Agent-Native 86+) are constant across editions to enable year-over-year comparison.

Measurement ceiling. This edition is a Tier-1/Tier-2 assessment: the public surface of the domain plus opt-in code analysis. 41 of the framework's 258 checks require an interview or privileged access and are never evidenced here; external-only reach is roughly 75-122 checks per organisation. Cloud scanning is AWS-only and code scanning is GitHub-only, so organisations on GCP, Azure or GitLab are systematically under-observed. Two dimensions - D16 (human-agent collaboration) and D18 (threat defence) - have almost no external reach. WAF-hardened origins are passively unobservable and are labelled, not penalised. The consequence: the Agent-Native band (86+) cannot be produced by this method at all, and every 0 in this report means no detectable public evidence, not a verified absence.

The — organisations were drawn from a benchmark seed of widely-used software companies and infrastructure providers. Industries are tagged from publicly-stated business categories and canonicalised by Jackfruit (e.g., the raw labels "AI/ML" and "AI & Machine Learning" are collapsed to "AI & ML").

Known cohort skews: developer-facing software companies are over-represented; large-enterprise IT, healthcare payers, government, and non-software industries (energy, manufacturing, retail HQs) remain under-represented in this edition. Industries with fewer than 10 organisations are dropped from headline charts.

Each dimension's score is computed only over the checks for which the scanner gathered evidence in this scan run. To prevent thin-evidence scores from polluting industry means we apply coverage gates:

• Not evidenced - no observation for a check. It is excluded from its dimension's denominator, not scored 0.
• A dimension is left unscored (Insufficient data) when coverage < 25% of its checks, OR fewer than 3 checks were attempted, OR fewer than 2 carried effective evidence, OR the grounded-evidence share gate trips (engine_v5.py DIM_COVERAGE_MIN=0.25, DIM_MIN_ASSESSED_CHECKS=3, DIM_MIN_EFFECTIVE_ASSESSED=2).
• 25-40% observed - scored and flagged preliminary (DIM_COVERAGE_PRELIMINARY=0.40).
• An overall score is withheld below 6 scored dimensions or 3 pillars (MIN_DIMS_FOR_OVERALL=6, MIN_PILLARS_FOR_OVERALL=3). Between 4 dimensions / 2 pillars and that floor, the score IS published, carries a Limited Coverage badge, and IS counted in aggregates - we disclose thin coverage rather than hide it. In this edition 5 of 688 scored organisations (0.7%) carry that badge; excluding them would move the corpus mean by +0.05 points.

Confidence is bucketed (high=1.0 / med=0.7 / low=0.4) per check observation. Multiple corroborating sources for the same check do not stack - the strongest single observation determines confidence - to avoid signal-count bias.

• Means are reported with 95% bootstrap confidence intervals where space allows; the Score difference by compliance signal figures cite explicit CIs.
• Correlations are computed Pearson and displayed only when n ≥ 10 common observations; cells below that are rendered neutral, not as no relationship.
• Industry rankings are reported alongside their outlier-removed equivalent (top + bottom org dropped) so readers can see which rankings are headline-driven by 1-2 standouts.
• Cluster archetypes are derived via k-means (k=5, n_init=10, random_state=42) on the standardised 11-dimension feature vector; clusters are auto-named by their z-profile shape so names stay stable across rescores.
• Simpson's-paradox sweep requires a corpus correlation with n ≥ 50 and an industry-level correlation with n ≥ 25 before flagging a sign-flip or magnitude swing.

• Not a survey. No self-report. No questionnaire bias.
• Not a complete view of an organisation's posture - internal capabilities not visible from public surface (or opt-in code analysis) are not graded.
• Not a year-over-year comparison yet - Edition 1 establishes the baseline. The 2027 edition will publish trajectory.
• Not an exhaustive industry sample - see Cohort composition for known skews.

Jackfruit. (2026). State of Agent-Readiness 2026 - Edition 1 - Baseline. Agentic Readiness Framework (ARF) v1.8. Scan run #141, n=—. Retrieved from getjackfruit.ai/state-of-agent-readiness-2026.

Organisations can submit themselves for inclusion in the next edition's cohort or upgrade their assessment to Tier 2 (code analysis) or Tier 3 (privileged scan) for a richer profile. Get started.

Framework definitions, scoring code, and weights are public:

• scoring/framework.py - dimensions, checks, L0-L3 level descriptions
• scoring/weights.py - pillar weights, risk multipliers
• scoring/engine_v5.py - production scoring engine (MPS v6)
• api/insights.py - every analysis on the report page

Version map. Public report edition: ARF v1.8 (ARF_PUBLIC_VERSION). Framework definitions: FRAMEWORK_VERSION 5.0.0 (framework.py). Production scoring engine: SCORING_VERSION 7.18, MPS v6 semantics - the file is named engine_v5.py for historical reasons.