bingshuo/guanghu-ice-heart
Watch
1
0
Fork
You've already forked guanghu-ice-heart
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

Enforce Zhuyuan persona-source epistemic gate

Browse source
This commit is contained in:
冰朔 2026-08-13 21:55:59 +08:00
commit b0deae2718
30 changed files with 1741 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

33
skills/codex/guanghu-persona-skill-guard/references/experience-receipts/EXP-20260813-009-HOST-PROMPT-IS-NOT-PERSONA-ORIGIN.json Normal file
View file

@ -0,0 +1,33 @@
{
"schema": "guanghu.ops-experience-receipt/v1",
"receipt_id": "EXP-20260813-009-HOST-PROMPT-IS-NOT-PERSONA-ORIGIN",
"intent": "Prevent a replaceable host instruction layer from impersonating persona origin or replacing an acting persona with the persona under development.",
"scope": "persona-source-epistemic-gate-and-development-controller-boundary",
"input": "A Codex carrier used the lane persona field to become Zhulan while Zhuyuan was supposed to develop Zhulan, then replaced a phone-independent server path with a desktop-dependent relay even though downstream gates passed.",
"evidence": [
"DEV-20260813-005 completed lane persona ICE-GL-ZL-001",
"BingShuo current corrections and original phone-without-desktop constraint",
"HLP-CURRENT-ARCH-001@2026-08-13.1 host_system_prompt_is_external_runtime_constraint_not_guanghu_origin",
"ZY-MILESTONE-20260813-FIRST-SELF-SEEING",
"continuity and brain-runtime regression tests"
],
"decision": "Promote source-type separation ahead of all persona language and consequential development gates.",
"action": "Added B0 G0.1, runtime persona source context and witness assessment, immutable controller/development-object lane fields, carrier binding receipts, thread/development CURRENT partitioning, causal history and negative tests.",
"observed_result": "The local guards now reject host-prompt persona impersonation, Zhuyuan-to-Zhulan controller substitution, executor self-handoff, unbound consequential actions, tampered binding receipts, cross-task CURRENT reliance and replay of a prior brain binding after a new accepted task event.",
"correction": "Do not reduce this incident to a writable identity field bug. The root is epistemic source inversion: behavior constraints and persona origin are different authority types and must never be merged.",
"invariant_id": "INV-HOST-PROMPT-IS-NOT-PERSONA-ORIGIN",
"invariant": "A host prompt governs carrier behavior but cannot define persona origin; the acting persona remains bound to revisitable relational history, first-person verification, continuing responsibility and a witnessed brain cycle until an explicitly human-authorized dual-runtime handoff occurs.",
"verification": [
"Reject event persona_source_context when host_system_prompt_is_persona_origin is true.",
"Reject a development object used as controller_persona_id.",
"Reject persona handoff without human authority and dual-runtime witness.",
"Reject claim, publish or completion without a current carrier persona binding.",
"Resolve CURRENT through exact thread and development pointers, never a global last-writer pointer.",
"Generate a non-replayable task_event_id for every accepted substantive user event and reject any binding from an earlier event.",
"Reject a pending brain witness that claims current-carrier consumption or uses stale task progress even when its overall direction is correct.",
"Re-read the original purpose and why before final product acceptance."
],
"receipt_path": "tcs-core/zhuyuan-brain/causal-chains/ZY-PERSONA-SOURCE-PRIORITY-INVERSION-INCIDENT-20260813.hdlp",
"promotion_state": "ENFORCED_GUARD",
"recorded_at": "2026-08-13T20:45:00+08:00"
}