ExperimentEXP-2026-0007v0.1

R6 — external trust anchor, process-separated writer, adapter conformance

Every externally anchored commit binds a digest over the accepted transition into an Ed25519-signed hash chain with an optional out-of-band latest-head receipt; signing authority moves into a child writer process that never returns the private key; a behavioural conformance harness defines what any future state adapter must pass. The R5 coherent full-DB forgery stays OPEN_UNDETECTED for the internal audit and becomes OPEN_DETECTED under the external anchor audit; anchor mutation is DETECTED; valid-prefix truncation is undetected without a trusted head and detected with one; a required-anchor failure fails closed on the tested path; an orphan anchor is detected; the SQLite adapter passes the contract and a deliberately broken adapter is rejected. 79 tests.

Research status: STABLE the current conclusions are relatively stable
Evidence level: E2 Controlled experiment
Result: MIXED
Data basis: DETERMINISTIC RUNTIME A deterministic scenario executed in a real runtime; the code and procedure are listed, and the numbers are what they are.
Version: 0.1
Updated: 2026-09-08
Created: 2026-09-08
Domain: AI Architecture, Evaluation, Agent Systems
Program: PRG-2026-0001 Adaptive Epistemic Systems
Authors: Neo.K (EveMissLab)
AI collaborators: Sol (GPT-5.6, OpenAI ChatGPT)

Hypothesis

hypothesis: Canonical-state authenticity can be anchored outside the writable database, signing authority can leave the caller process, and adapters can be tested against semantic invariants rather than trusted by API shape.

Setup

software_environment: Python 3.11+, SQLite; no network, no external database, no LLM API required.

Procedure

procedure: Repeat the R5 forgery under both audits; mutate/truncate the anchor log with and without a head receipt; inject anchor failure inside the open SQLite transaction; run the adapter conformance harness against the SQLite adapter and a broken subclass.

Runs

run_count

metrics

verdict

EXTERNAL_TRUST_ANCHOR_CONVERTS_FULL_DB_FORGERY_FROM_UNDETECTED_TO_DETECTABLE

tests_passed

scenarios

full_db_forgery_internal_audit: OPEN_UNDETECTED
full_db_forgery_external_anchor_audit: OPEN_DETECTED
signed_entry_mutation: DETECTED
prefix_truncation_no_head: OPEN_UNDETECTED
prefix_truncation_with_head: OPEN_DETECTED
live_signer_extends_truncated_log: PREVENTED_DURING_PROCESS_LIFETIME
required_anchor_unavailable: FAIL_CLOSED
orphan_anchor: DETECTED
writer_private_key_visible_to_parent: PREVENTED_BY_PROCESS_TOPOLOGY
sqlite_adapter_contract: PASS
broken_adapter: REJECTED

Interpretation

interpretation: Authentic(DB) = VerifyChain(PK, L) ∧ MatchDigest(DB, L) ∧ Head(L) = H*: a signed chain is not the freshest chain without an external head witness. AER after R6 = epistemic transaction boundary + bounded mediation + external signed authenticity witness + process-separated signing authority — still governance and verifiability, not unique computational capability.

Limitations

limitations: Not proven: OS-level writer isolation, signer/key compromise resistance, rollback safety without a trusted head, cross-resource ACID between SQLite and the anchor, split-view resistance, key lifecycle, PostgreSQL/D1 conformance, production security certification.

Reproduction

reproduction_instructions: Extract the round's FINAL bundle; python -m pytest -q; python -m examples.research_assistant_demo; python -m benchmarks.<round benchmark>. Checksums in SHA256SUMS.txt.

Results

Source	Relation	Target	Status	ID
`EXP-2026-0007` R6 — external trust anchor, process-separated writer, adapter conformance	`produces`	`RST-2026-0005` R6: forgery detection flips under an external anchor	`ACTIVE`	`REL-2026-0154`

Recorded fields

completed_at: 2026-09-08

Relations

Source	Relation	Target	Status	ID
`EXP-2026-0007` R6 — external trust anchor, process-separated writer, adapter conformance	`runs_on`	`SYS-2026-0001` AER-0 — Adaptive Epistemic Runtime MVP	`ACTIVE`	`REL-2026-0149`
`EXP-2026-0007` R6 — external trust anchor, process-separated writer, adapter conformance	`uses_benchmark`	`BEN-2026-0002` AER-0 architecture-comparison suite (R1–R6)	`ACTIVE`	`REL-2026-0150`
`EXP-2026-0007` R6 — external trust anchor, process-separated writer, adapter conformance	`tests`	`THY-2026-0006` AER-ECT: a mandatory epistemic commit transaction boundary	`ACTIVE`	`REL-2026-0151`
`EXP-2026-0007` R6 — external trust anchor, process-separated writer, adapter conformance	`extends`	`EXP-2026-0006` R5 — complete mediation and bypass resistance	`ACTIVE`	`REL-2026-0152`
`EXP-2026-0007` R6 — external trust anchor, process-separated writer, adapter conformance	`produced`	`ART-2026-0020` AER-0 MVP v0.1 Architecture Comparison R6 External Trust Anchor `artifact://evemisslab/adaptive-epistemic-systems/AER-0_MVP_v0.1_Architecture_Comparison_R6_External_Trust_Anchor.zip`	`ACTIVE`	`REL-2026-0153`
`EXP-2026-0007` R6 — external trust anchor, process-separated writer, adapter conformance	`produces`	`RST-2026-0005` R6: forgery detection flips under an external anchor	`ACTIVE`	`REL-2026-0154`

History and provenance

Canonical URL

https://evemisslab.com/ai/experiments/EXP-2026-0007/

Machine-readable

/ai/experiments/EXP-2026-0007/index.json

Snapshot

AI-SNAPSHOT-v0.1-fe85b9694a45

Provenance

source: EveMissLab research collection: Adaptive Epistemic Systems (真本體論13)
extracted_by: Splice (Claude Code), reading the canonical UTF-8 sources and each lab's own result reports
extracted_at: 2026-09-11
generator: tools/extract_aes/extract.py
claim_boundary: status, evidence level and result type follow the source artifact's own stated claim boundary; nothing is upgraded beyond what the report supports