ResearchRES-2026-0201v0.1

Why passing checks does not close the publication boundary

Papers 00–05. The five-state information chain (observed → authorized → persisted → published → externally obtainable), the green-light fallacy (V₁ ∧ … ∧ Vₙ = PASS ⇏ G), agent context as an egress surface with nine context classes, recoverability R0–R4 beyond literal secret matching, and two hypotheses about scale: organizational propagation of shared agent context, and an AI build–attack asymmetry.

Research status

STABLE the current conclusions are relatively stable

Evidence level

E1 Internal observation

Version

0.1

Updated

2026-10-13

Created

2026-09-21

Domain

Privacy

Program

PRG-2026-0201 AI Agent Publication Boundary and Security Closure (APBSC)

Authors

Neo.K (EveMissLab)

AI collaborators

AI collaboration recorded for the series; the collaborator is not named in the drafts, Splice (Claude Code, Anthropic) — Phase II protocols, runners, audits, reports and the integrated edition