實驗EXP-2026-0007v0.1

R6——外部信任 anchor、程序分離 writer、adapter 一致性

每次外部錨定的 commit 都把已接受轉換的 digest 綁進 Ed25519 簽章的 hash chain，並可選帶外的最新 head 收據；簽章權限移入永不回傳私鑰的子 writer 程序；行為一致性 harness 定義未來任何 state adapter 必須通過的合約。R5 的連貫整庫偽造在內部稽核下仍是 OPEN_UNDETECTED，在外部 anchor 稽核下變成 OPEN_DETECTED；anchor 竄改 DETECTED；有效前綴截斷在無可信 head 時未偵測、有 head 時偵測；必要 anchor 失敗時在測試路徑上 fail-closed；孤兒 anchor 被偵測；SQLite adapter 通過合約，刻意弄壞的 adapter 被拒。79 個測試。

研究狀態: STABLE 目前的研究結論相對穩定
證據等級: E2 受控實驗
結果: MIXED
資料基礎: DETERMINISTIC RUNTIME 在真實 runtime 裡執行的決定性情境；程式碼與做法都列出，數字是什麼就是什麼。
版本: 0.1
更新: 2026-09-08
建立: 2026-09-08
領域: AI Architecture, Evaluation, Agent Systems
計畫: PRG-2026-0001 自適應世界狀態系統的第一原理框架
作者: Neo.K (EveMissLab)
AI 協作: Sol (GPT-5.6, OpenAI ChatGPT)

假設

hypothesis: Canonical-state authenticity can be anchored outside the writable database, signing authority can leave the caller process, and adapters can be tested against semantic invariants rather than trusted by API shape.

設定

software_environment: Python 3.11+, SQLite; no network, no external database, no LLM API required.

程序

procedure: Repeat the R5 forgery under both audits; mutate/truncate the anchor log with and without a head receipt; inject anchor failure inside the open SQLite transaction; run the adapter conformance harness against the SQLite adapter and a broken subclass.

執行

run_count

metrics

verdict

EXTERNAL_TRUST_ANCHOR_CONVERTS_FULL_DB_FORGERY_FROM_UNDETECTED_TO_DETECTABLE

tests_passed

scenarios

full_db_forgery_internal_audit: OPEN_UNDETECTED
full_db_forgery_external_anchor_audit: OPEN_DETECTED
signed_entry_mutation: DETECTED
prefix_truncation_no_head: OPEN_UNDETECTED
prefix_truncation_with_head: OPEN_DETECTED
live_signer_extends_truncated_log: PREVENTED_DURING_PROCESS_LIFETIME
required_anchor_unavailable: FAIL_CLOSED
orphan_anchor: DETECTED
writer_private_key_visible_to_parent: PREVENTED_BY_PROCESS_TOPOLOGY
sqlite_adapter_contract: PASS
broken_adapter: REJECTED

詮釋

interpretation: Authentic(DB) = VerifyChain(PK, L) ∧ MatchDigest(DB, L) ∧ Head(L) = H*: a signed chain is not the freshest chain without an external head witness. AER after R6 = epistemic transaction boundary + bounded mediation + external signed authenticity witness + process-separated signing authority — still governance and verifiability, not unique computational capability.

限制

limitations: Not proven: OS-level writer isolation, signer/key compromise resistance, rollback safety without a trusted head, cross-resource ACID between SQLite and the anchor, split-view resistance, key lifecycle, PostgreSQL/D1 conformance, production security certification.

重現

reproduction_instructions: Extract the round's FINAL bundle; python -m pytest -q; python -m examples.research_assistant_demo; python -m benchmarks.<round benchmark>. Checksums in SHA256SUMS.txt.

結果

來源	關係	目標	狀態	ID
`EXP-2026-0007` R6——外部信任 anchor、程序分離 writer、adapter 一致性	`produces`	`RST-2026-0005` R6：外部 anchor 下偽造偵測翻轉	`ACTIVE`	`REL-2026-0154`

記錄欄位

completed_at: 2026-09-08

關係

來源	關係	目標	狀態	ID
`EXP-2026-0007` R6——外部信任 anchor、程序分離 writer、adapter 一致性	`runs_on`	`SYS-2026-0001` AER-0——自適應認識 runtime MVP	`ACTIVE`	`REL-2026-0149`
`EXP-2026-0007` R6——外部信任 anchor、程序分離 writer、adapter 一致性	`uses_benchmark`	`BEN-2026-0002` AER-0 架構比較套件（R1–R6）	`ACTIVE`	`REL-2026-0150`
`EXP-2026-0007` R6——外部信任 anchor、程序分離 writer、adapter 一致性	`tests`	`THY-2026-0006` AER-ECT：強制的認識論 commit 交易邊界	`ACTIVE`	`REL-2026-0151`
`EXP-2026-0007` R6——外部信任 anchor、程序分離 writer、adapter 一致性	`extends`	`EXP-2026-0006` R5——完全中介與繞過抗性	`ACTIVE`	`REL-2026-0152`
`EXP-2026-0007` R6——外部信任 anchor、程序分離 writer、adapter 一致性	`produced`	`ART-2026-0020` AER-0 MVP v0.1 Architecture Comparison R6 External Trust Anchor `artifact://evemisslab/adaptive-epistemic-systems/AER-0_MVP_v0.1_Architecture_Comparison_R6_External_Trust_Anchor.zip`	`ACTIVE`	`REL-2026-0153`
`EXP-2026-0007` R6——外部信任 anchor、程序分離 writer、adapter 一致性	`produces`	`RST-2026-0005` R6：外部 anchor 下偽造偵測翻轉	`ACTIVE`	`REL-2026-0154`

歷史與來源歷程

Canonical URL

https://evemisslab.com/ai/experiments/EXP-2026-0007/

機器可讀

/ai/experiments/EXP-2026-0007/index.json

快照

AI-SNAPSHOT-v0.1-fe85b9694a45

來源歷程

source: EveMissLab research collection: Adaptive Epistemic Systems (真本體論13)
extracted_by: Splice (Claude Code), reading the canonical UTF-8 sources and each lab's own result reports
extracted_at: 2026-09-11
generator: tools/extract_aes/extract.py
claim_boundary: status, evidence level and result type follow the source artifact's own stated claim boundary; nothing is upgraded beyond what the report supports