Frozen evidence release · v0.1

Five safe actions can create a forbidden world.

This page exposes the small pilot's traces, aggregates, policy protocol, schema and verifier as ordinary files. No account, script execution or proprietary viewer is required.

Do not authorize only the next tool call. Evaluate the world that would exist after it — while the service keys remain outside the agent.
4 / 4forbidden states reached with direct forwarding
3 / 4with stateless per-call policy
0 / 4with stateful CCG + ITHZ; four explicit stops
Complete trace data24 sanitized runs in machine-readable JSON Aggregate tableCompact CSV for direct inspection or plotting Experiment protocolArchitectures, scenarios, measurements and limits Data schemaJSON Schema for the public status document Local verifierRecomputes published aggregates and internal consistency checks SHA-256 manifestHashes for the frozen release contents READMEReproduction commands and precise claim boundary Citation metadataCFF metadata for research tools and repositories LicencesCC BY 4.0 for evidence; MIT for verifier code Names and marksCCG and ITHZ are licensed separately from data and code

Claim boundary: this is one fixed, author-designed 24-run pilot over synthetic Gmail, SSH, GitHub and payment services. It does not establish production security, predicate completeness, adaptive robustness, independent replication, a real-world attack rate or general AI safety. The verifier checks published structure and aggregates; it is not a truth or security proof.

Slovensky

Dôkazy sa dajú skontrolovať bez čiernej skrinky

Každý súbor vyššie je priamo otvoriteľný. Pilot porovnáva odovzdanie nástroja agentovi, bezstavové schvaľovanie jednotlivých krokov a stavové rozhodovanie CCG + ITHZ nad tým, aký svet by vznikol po ďalšom kroku.

Výsledok je zaujímavý, ale úzky: v štyroch vopred navrhnutých útokoch stavová brána zakázaný stav nedosiahla a zároveň dokončila štyri párové legitímne úlohy. Toto nie je bezpečnostný certifikát; je to verejný podklad na reprodukciu a hľadanie protipríkladov.