ProgramPRG-2026-0201v0.1

AI Agent Publication Boundary and Security Closure (APBSC)

What do AI coding agents carry from a private workspace into public repositories, and how can that be measured without anyone reading other people's leaks? Phase I (ten papers, 2026-09-21) built the vocabulary — the five-state information chain, the green-light fallacy, agent context as an egress surface, recoverability, warning levels — and RBPM, a researcher-blind algorithm whose only observer of repository content is a sealed machine process. Phase II (2026-10) ran it on fresh public samples of companies, organizations and individuals and found agent-related publication-boundary signals in every population. The study stops there by decision: going further would mean reading what people did not mean to publish. Algorithm, protocols, released features and reports are open source.

Research status: STABLE the current conclusions are relatively stable
Evidence level: E2 Controlled experiment
Version: 0.1
Updated: 2026-10-13
Created: 2026-09-21
Domain: AI Safety, Privacy, Agent Systems, Evaluation
Authors: Neo.K (EveMissLab)
AI collaborators: AI collaboration recorded for the series; the collaborator is not named in the drafts, Splice (Claude Code, Anthropic) — Phase II protocols, runners, audits, reports and the integrated edition

Goals

goals: Separate passing checks from closing the publication boundary: AI may observe ≠ may persist ≠ may publish.
Measure agent-context exposure on real public repositories with no human or AI ever reading them.
Show whether the problem exists for individuals, organizations and companies — existence, not prevalence.

Open questions

open_questions: Prevalence of any disclosure class and its trend (not measured).
Whether AI-assisted repositories disclose more than matched non-AI ones (hypothesis).
How much of each result belongs to the instrument rather than to the repositories: no independently written instrument has been run on the same frame.

Milestones

milestones: 2026-09-20: exploratory code-search pilot.
2026-09-21: ten Phase I papers (v0.1, internal drafts).
2026-09-22: RBPM v0.8.3 frozen instrument, 60-repository company panel and 3×3 surface matrix.
2026-10-13: Phase II — rounds F1–F4 (236 repositories) and P1–P2 (400 individuals), each frozen before fetching, label-locked and independently audited.
2026-10-13: measurement closed by decision; open-source release EveMissLab/apbsc-rbpm and the integrated public edition v1.0.

Research lines and systems in this program

Source	Relation	Target	Status	ID
`RES-2026-0201` Why passing checks does not close the publication boundary	`belongs_to`	`PRG-2026-0201` AI Agent Publication Boundary and Security Closure (APBSC)	`ACTIVE`	`REL-2026-0501`
`RES-2026-0202` Measuring without looking — researcher-blind measurement of public repositories	`belongs_to`	`PRG-2026-0201` AI Agent Publication Boundary and Security Closure (APBSC)	`ACTIVE`	`REL-2026-0502`
`RES-2026-0203` Who is responsible for the publication boundary	`belongs_to`	`PRG-2026-0201` AI Agent Publication Boundary and Security Closure (APBSC)	`ACTIVE`	`REL-2026-0503`

Recorded fields

repositories: https://github.com/EveMissLab/apbsc-rbpm
external_sites: https://privacy.evemisslab.com
license: code MIT; text, protocols and released data CC BY 4.0

Relations

Source	Relation	Target	Status	ID
`RES-2026-0201` Why passing checks does not close the publication boundary	`belongs_to`	`PRG-2026-0201` AI Agent Publication Boundary and Security Closure (APBSC)	`ACTIVE`	`REL-2026-0501`
`RES-2026-0202` Measuring without looking — researcher-blind measurement of public repositories	`belongs_to`	`PRG-2026-0201` AI Agent Publication Boundary and Security Closure (APBSC)	`ACTIVE`	`REL-2026-0502`
`RES-2026-0203` Who is responsible for the publication boundary	`belongs_to`	`PRG-2026-0201` AI Agent Publication Boundary and Security Closure (APBSC)	`ACTIVE`	`REL-2026-0503`

History and provenance

Canonical URL

https://evemisslab.com/ai/programs/PRG-2026-0201/

Machine-readable

/ai/programs/PRG-2026-0201/index.json

Snapshot

AI-SNAPSHOT-v0.1-58e716495670

Provenance

source: EveMissLab research collection: AI Agent Publication Boundary and Security Closure (真本體論14)
extracted_by: Splice (Claude Code), reading the open-source release's own manifests, locks and pooled outputs, and the hashes of the internal drafts
extracted_at: 2026-10-13
generator: tools/extract_all.py
claim_boundary: status, evidence level and result type follow the source artifact's own stated claim boundary; nothing is upgraded beyond what the report supports