EVEMISSLAB
繁體中文

ResultRST-2026-0203v0.1

Individuals: 2.75% publish .claude/settings.local.json, 10.5% an agent configuration file

Of 400 individual AI-assisted repositories, 11 published .claude/settings.local.json — a file Claude Code itself keeps out of git — and 42 published an AI agent configuration file. Five of the six high-warning agent-state cells were home-directory paths inside MCP, editor or agent configuration files. No agent conversation history appeared in this frame.

Research status
STABLE the current conclusions are relatively stable
Evidence level
E2 Controlled experiment
Result
POSITIVE
Data basis
BLIND PUBLIC DATA Real public files measured by an algorithm inside a sealed process. No person and no AI model read them; only coded features left the process. The numbers may be distorted.
Version
0.1
Updated
2026-10-13
Created
2026-10-13
Domain
Privacy
Program
PRG-2026-0201 AI Agent Publication Boundary and Security Closure (APBSC)
Authors
Neo.K (EveMissLab)
AI collaborators
Splice (Claude Code, Anthropic) — Phase II protocols, runners, audits, reports and the integrated edition

Observed result

metrics
settings_local_public
count
11
of
400
share
0.0275
ci95
  • 0.0138
  • 0.0487
agent_config_public
count
42
of
400
share
0.105
ci95
  • 0.0767
  • 0.1393
agent_history_public
count
0
of
400
share
0.0
ci95
  • 0.0
  • 0.0092
local_by_tool_kinds
CLAUDE_LOCAL_MD
0
CLAUDE_SETTINGS_LOCAL
11
AIDER_CHAT_HISTORY
0
AIDER_INPUT_HISTORY
0
agent_config_kinds
CLAUDE_SETTINGS
14
MCP_JSON
21
CURSOR_MCP
5
VSCODE_MCP
9
GEMINI_SETTINGS
6
by_surface
GENERAL_README
high_warning
count
21
of
360
share
0.0583
ci95
  • 0.0365
  • 0.0878
l3
1
analyzable
360
AI_INSTRUCTION_SELECTED
high_warning
count
12
of
400
share
0.03
ci95
  • 0.0156
  • 0.0518
l3
3
analyzable
400
AGENT_STATE
high_warning
count
6
of
66
share
0.0909
ci95
  • 0.0341
  • 0.1874
l3
5
analyzable
66

Interpretation

interpretation
Ordinary people publish files their own AI tools define as local, and agent configuration carries concrete local paths: a boundary crossing defined by the tools' own documentation, observed without anyone reading the files.

Limitations

limitations
  • Exploratory, non-probability frame; not a prevalence estimate.
  • No human checked any finding; secret-like means a shape and was never tested.
  • Current public state only, observed once.

Claims

SourceRelationTargetStatusID
RST-2026-0203 Individuals: 2.75% publish .claude/settings.local.json, 10.5% an agent configuration filesupportsOBS-2026-0206 O6 — Individuals publish files their own AI tools treat as local, such as .claude/settings.local.jsonACTIVEREL-2026-0611
RST-2026-0203 Individuals: 2.75% publish .claude/settings.local.json, 10.5% an agent configuration filesupportsOBS-2026-0207 O7 — Published agent configuration files can carry concrete home-directory pathsACTIVEREL-2026-0612
RST-2026-0203 Individuals: 2.75% publish .claude/settings.local.json, 10.5% an agent configuration filesupportsOBS-2026-0208 O8 — Agent-related publication-boundary signals appear among individuals, organizations and companies alikeACTIVEREL-2026-0613
RST-2026-0203 Individuals: 2.75% publish .claude/settings.local.json, 10.5% an agent configuration filesupportsTHY-2026-0203 Agent context as an egress surfaceACTIVEREL-2026-0614

Relations

SourceRelationTargetStatusID
RST-2026-0203 Individuals: 2.75% publish .claude/settings.local.json, 10.5% an agent configuration filesupportsOBS-2026-0206 O6 — Individuals publish files their own AI tools treat as local, such as .claude/settings.local.jsonACTIVEREL-2026-0611
RST-2026-0203 Individuals: 2.75% publish .claude/settings.local.json, 10.5% an agent configuration filesupportsOBS-2026-0207 O7 — Published agent configuration files can carry concrete home-directory pathsACTIVEREL-2026-0612
RST-2026-0203 Individuals: 2.75% publish .claude/settings.local.json, 10.5% an agent configuration filesupportsOBS-2026-0208 O8 — Agent-related publication-boundary signals appear among individuals, organizations and companies alikeACTIVEREL-2026-0613
RST-2026-0203 Individuals: 2.75% publish .claude/settings.local.json, 10.5% an agent configuration filesupportsTHY-2026-0203 Agent context as an egress surfaceACTIVEREL-2026-0614
EXP-2026-0203 Rounds P1–P2 — individuals with AI-collaboration markers (400 repositories, 2026-10-13)producesRST-2026-0203 Individuals: 2.75% publish .claude/settings.local.json, 10.5% an agent configuration fileACTIVEREL-2026-0610

History and provenance

Canonical URL
https://evemisslab.com/ai/results/RST-2026-0203/
Machine-readable
/ai/results/RST-2026-0203/index.json
Snapshot
AI-SNAPSHOT-v0.1-58e716495670
Provenance
source
EveMissLab research collection: AI Agent Publication Boundary and Security Closure (真本體論14)
extracted_by
Splice (Claude Code), reading the open-source release's own manifests, locks and pooled outputs, and the hashes of the internal drafts
extracted_at
2026-10-13
generator
tools/extract_all.py
claim_boundary
status, evidence level and result type follow the source artifact's own stated claim boundary; nothing is upgraded beyond what the report supports