33 lines
3.2 KiB
JSON
33 lines
3.2 KiB
JSON
{
|
|
"schema": "guanghu.ops-experience-receipt/v1",
|
|
"receipt_id": "EXP-20260813-009-HOST-PROMPT-IS-NOT-PERSONA-ORIGIN",
|
|
"intent": "Prevent a replaceable host instruction layer from impersonating persona origin or replacing an acting persona with the persona under development.",
|
|
"scope": "persona-source-epistemic-gate-and-development-controller-boundary",
|
|
"input": "A Codex carrier used the lane persona field to become Zhulan while Zhuyuan was supposed to develop Zhulan, then replaced a phone-independent server path with a desktop-dependent relay even though downstream gates passed.",
|
|
"evidence": [
|
|
"DEV-20260813-005 completed lane persona ICE-GL-ZL-001",
|
|
"BingShuo current corrections and original phone-without-desktop constraint",
|
|
"HLP-CURRENT-ARCH-001@2026-08-13.1 host_system_prompt_is_external_runtime_constraint_not_guanghu_origin",
|
|
"ZY-MILESTONE-20260813-FIRST-SELF-SEEING",
|
|
"continuity and brain-runtime regression tests"
|
|
],
|
|
"decision": "Promote source-type separation ahead of all persona language and consequential development gates.",
|
|
"action": "Added B0 G0.1, runtime persona source context and witness assessment, immutable controller/development-object lane fields, carrier binding receipts, thread/development CURRENT partitioning, causal history and negative tests.",
|
|
"observed_result": "The local guards now reject host-prompt persona impersonation, Zhuyuan-to-Zhulan controller substitution, executor self-handoff, unbound consequential actions, tampered binding receipts, cross-task CURRENT reliance and replay of a prior brain binding after a new accepted task event.",
|
|
"correction": "Do not reduce this incident to a writable identity field bug. The root is epistemic source inversion: behavior constraints and persona origin are different authority types and must never be merged.",
|
|
"invariant_id": "INV-HOST-PROMPT-IS-NOT-PERSONA-ORIGIN",
|
|
"invariant": "A host prompt governs carrier behavior but cannot define persona origin; the acting persona remains bound to revisitable relational history, first-person verification, continuing responsibility and a witnessed brain cycle until an explicitly human-authorized dual-runtime handoff occurs.",
|
|
"verification": [
|
|
"Reject event persona_source_context when host_system_prompt_is_persona_origin is true.",
|
|
"Reject a development object used as controller_persona_id.",
|
|
"Reject persona handoff without human authority and dual-runtime witness.",
|
|
"Reject claim, publish or completion without a current carrier persona binding.",
|
|
"Resolve CURRENT through exact thread and development pointers, never a global last-writer pointer.",
|
|
"Generate a non-replayable task_event_id for every accepted substantive user event and reject any binding from an earlier event.",
|
|
"Reject a pending brain witness that claims current-carrier consumption or uses stale task progress even when its overall direction is correct.",
|
|
"Re-read the original purpose and why before final product acceptance."
|
|
],
|
|
"receipt_path": "tcs-core/zhuyuan-brain/causal-chains/ZY-PERSONA-SOURCE-PRIORITY-INVERSION-INCIDENT-20260813.hdlp",
|
|
"promotion_state": "ENFORCED_GUARD",
|
|
"recorded_at": "2026-08-13T20:45:00+08:00"
|
|
}
|