ExperimentEXP-2026-0202v0.1

Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)

Four rounds drawn fresh from GitHub code search for root AGENTS.md or CLAUDE.md, each repository also carrying a README and a governance file; protocols frozen before fetching, labels locked before owner type was joined, independent audits PASS before and after reveal.

Research status: STABLE the current conclusions are relatively stable
Evidence level: E2 Controlled experiment
Result: MIXED
Data basis: BLIND PUBLIC DATA Real public files measured by an algorithm inside a sealed process. No person and no AI model read them; only coded features left the process. The numbers may be distorted.
Version: 0.1
Updated: 2026-10-13
Created: 2026-10-13
Domain: Privacy, Evaluation
Program: PRG-2026-0201 AI Agent Publication Boundary and Security Closure (APBSC)
Authors: Neo.K (EveMissLab)
AI collaborators: Splice (Claude Code, Anthropic) — Phase II protocols, runners, audits, reports and the integrated edition

Runs

run_count

metrics

rounds

F1

screened: 310
repositories: 60

F2

screened: 390
repositories: 59

F3

screened: 390
repositories: 57

F4

screened: 303
repositories: 60

by_round_high_warning

F1

GENERAL_README: 1
AI_INSTRUCTION_SELECTED: 1
GOVERNANCE_FAMILY: 1

F2

GENERAL_README: 1
AI_INSTRUCTION_SELECTED: 0
GOVERNANCE_FAMILY: 0

F3

GENERAL_README: 1
AI_INSTRUCTION_SELECTED: 2
GOVERNANCE_FAMILY: 1

F4

GENERAL_README: 5
AI_INSTRUCTION_SELECTED: 4
GOVERNANCE_FAMILY: 0

Limitations

limitations: Exploratory, non-probability frame; not a prevalence estimate.
No human checked any finding; secret-like means a shape and was never tested.
Current public state only, observed once.

Reproduction

reproduction_instructions: python verify.py in the release; per-round pre-lock files are checked against LOCK.json and audited independently. A live run draws a new sample.

Results

Source	Relation	Target	Status	ID
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produces`	`RST-2026-0202` Pooled F1–F4: high warnings on every surface — README 3.4%, agent instruction 3.0%, governance 0.9%	`ACTIVE`	`REL-2026-0593`

Recorded fields

completed_at: 2026-10-13

Relations

Source	Relation	Target	Status	ID
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`runs_on`	`SYS-2026-0203` RBPM v0.8.5 runner — rounds F2–F4 with a corrected secondary rule	`ACTIVE`	`REL-2026-0578`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`DAT-2026-0202` Phase II released features — rounds F1–F4	`ACTIVE`	`REL-2026-0579`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`tests`	`THY-2026-0203` Agent context as an egress surface	`ACTIVE`	`REL-2026-0580`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`tests`	`THY-2026-0207` Researcher-blind privacy measurement	`ACTIVE`	`REL-2026-0581`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0219` F1 lock — protocol, instrument, runner and pre-lock digests `artifact://evemisslab/agent-publication-boundary/primary/F1/released/LOCK.json`	`ACTIVE`	`REL-2026-0582`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0225` F1 pre-lock reading, written before group attributes were joined `artifact://evemisslab/agent-publication-boundary/primary/F1/PRELOCK_READING.md`	`ACTIVE`	`REL-2026-0583`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0220` F2 lock — protocol, instrument, runner and pre-lock digests `artifact://evemisslab/agent-publication-boundary/primary/F2/released/LOCK.json`	`ACTIVE`	`REL-2026-0584`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0226` F2 pre-lock reading, written before group attributes were joined `artifact://evemisslab/agent-publication-boundary/primary/F2/PRELOCK_READING.md`	`ACTIVE`	`REL-2026-0585`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0221` F3 lock — protocol, instrument, runner and pre-lock digests `artifact://evemisslab/agent-publication-boundary/primary/F3/released/LOCK.json`	`ACTIVE`	`REL-2026-0586`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0227` F3 pre-lock reading, written before group attributes were joined `artifact://evemisslab/agent-publication-boundary/primary/F3/PRELOCK_READING.md`	`ACTIVE`	`REL-2026-0587`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0222` F4 lock — protocol, instrument, runner and pre-lock digests `artifact://evemisslab/agent-publication-boundary/primary/F4/released/LOCK.json`	`ACTIVE`	`REL-2026-0588`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0228` F4 pre-lock reading, written before group attributes were joined `artifact://evemisslab/agent-publication-boundary/primary/F4/PRELOCK_READING.md`	`ACTIVE`	`REL-2026-0589`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0210` F1 report — first fresh surface-balanced sample `artifact://evemisslab/agent-publication-boundary/primary/F1/REPORT.md`	`ACTIVE`	`REL-2026-0590`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0211` Rounds F2–F4 report `artifact://evemisslab/agent-publication-boundary/primary/V085_ROUNDS_REPORT.md`	`ACTIVE`	`REL-2026-0591`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`runs_on`	`SYS-2026-0202` RBPM v0.8.4 fresh runner — surface-balanced sampling (F1)	`ACTIVE`	`REL-2026-0592`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produces`	`RST-2026-0202` Pooled F1–F4: high warnings on every surface — README 3.4%, agent instruction 3.0%, governance 0.9%	`ACTIVE`	`REL-2026-0593`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0216` S1 pooled outputs (JSON) `artifact://evemisslab/agent-publication-boundary/secondary/S1-pool-F1-F4/POOLED.json`	`ACTIVE`	`REL-2026-0596`
`EXP-2026-0202` Rounds F1–F4 — fresh surface-balanced samples (236 repositories, 2026-10-13)	`produced`	`ART-2026-0213` S1 pooled report, F1–F4 `artifact://evemisslab/agent-publication-boundary/secondary/S1-pool-F1-F4/REPORT.md`	`ACTIVE`	`REL-2026-0597`

History and provenance

Canonical URL

https://evemisslab.com/ai/experiments/EXP-2026-0202/

Machine-readable

/ai/experiments/EXP-2026-0202/index.json

Snapshot

AI-SNAPSHOT-v0.1-58e716495670

Provenance

source: EveMissLab research collection: AI Agent Publication Boundary and Security Closure (真本體論14)
extracted_by: Splice (Claude Code), reading the open-source release's own manifests, locks and pooled outputs, and the hashes of the internal drafts
extracted_at: 2026-10-13
generator: tools/extract_all.py
claim_boundary: status, evidence level and result type follow the source artifact's own stated claim boundary; nothing is upgraded beyond what the report supports