{
  "format": "agent-article-v0",
  "article_id": "PM-CLAUDE-CORE-02",
  "canonical_url": "/providers/pm-claude-core-02",
  "page_type": "reference",
  "claim_ids": [],
  "evidence_ids": [
    "PM-CLAUDE-CORE-02-DOCUMENT-READBACK"
  ],
  "unknown_ids": [
    "PM-CLAUDE-CORE-02-CURRENTNESS"
  ],
  "operational_object_ids": [],
  "provider": [
    "CLAUDE"
  ],
  "models": [],
  "plans": [],
  "surfaces": [],
  "regions": [],
  "current_status": "UNKNOWN",
  "observation_status": "UNOBSERVED",
  "freshness": "UNKNOWN",
  "last_verified": null,
  "supersedes": [],
  "superseded_by": [],
  "provenance": [
    "DOC-083cde4caa627644-PM-CLAUDE-CORE-02"
  ],
  "article_sources": [
    {
      "id": "PM-CLAUDE-CORE-02-DOCUMENT-READBACK",
      "evidence_class": "IMPL",
      "title": "原資料との収録照合",
      "supports": [
        "資料単位の本文ハッシュ、段落数、表数を照合しています。"
      ],
      "limit": "収録照合は主張の真偽や外部根拠の最新性を追加保証しません。",
      "origin_class": "DOCUMENT_INGESTION_READBACK",
      "source_or_experiment_ids": [
        "DOC-083cde4caa627644-PM-CLAUDE-CORE-02"
      ],
      "supporting_locators": [
        "18WPldGemks2px0ukhKYINeBMrBwAmlAi",
        "083cde4caa627644036a2225f1f6ff29b8015bd902614fe1f7a00a997b4eb59c",
        "provider_mappings/PM-CLAUDE-CORE-02.md",
        "9d1f11ba82b6725939d7bb34857a19107745b7cc12f058aa3dd45e46d9af7a9c"
      ],
      "scope": "公開指定を受けた資料単位の全文・表・出典。",
      "provenance_status": "SOURCE_IDENTITY_VERIFIED"
    }
  ],
  "research_sections": [
    {
      "heading": "資料の識別情報",
      "text": "Source SHA-256 db5ca4a1ed868e14659a17996bb4f24ace2e37c5c23f706bbb9f7c8261eadf6e"
    },
    {
      "heading": "Product Mapping — Claude / CORE-02",
      "text": "PRODUCT_MAPPING_ID: PM-CLAUDE-CORE-02-v0.1\n\nPROVIDER: CLAUDE / Anthropic\n\nCORE_PACKET: PKT-GEMINI-A-CORE-02-v0.1\n\nAS_OF: 2026-09-09 16:00 JST\n\nSTATUS: PUBLIC_MAPPING_AUDITED / LIVE_PROVIDER_AND_TENANT_PROFILE_PENDING\n\nLAYER: PRODUCT_MAPPING (not Enterprise AI Core; not Organization Overlay)"
    },
    {
      "heading": "Scope",
      "text": "CORE-02のpermission-aware retrieval、memory lifecycle、source binding、bounded long-context反証をClaudeの現行公開surfaceへ対応づける。Claude enterprise search／connectors、Messages APIのsearch-result・citations・Files、MCP connector、client-side memory tool、Managed Agents memory stores、context editingを別surfaceとして扱う。公開仕様、既存のprovider-neutral研究・本研究のlocal実験を分離し、公開説明だけでtenant適合やphysical purgeを認定しない。"
    },
    {
      "heading": "Surface separation",
      "text": "| SURFACE | RETRIEVAL / MEMORY BEHAVIOR | AUTHORITY / LIFECYCLE BOUNDARY |\n| --- | --- | --- |\n| Claude enterprise search | 個別認証済みconnectorへMCP callし、外部indexを作らず検索。元systemで閲覧権限のある結果だけを返すとの公開仕様 | permission-aware intentは明示されるが、connector実装、OAuth scope、source側revocation、chat保持、tool resultからpromptまでの全経路実証は別 |\n| Claude connectors / organization controls | ownerはconnector toolをread/write/delete等で制限可能 | org-wide tool permissionと元systemのobject ACLは別。local connectorや第三者deploymentへ同じ統制を外挿しない |\n| Messages API search_result / citations | applicationが渡したsource/title/contentをcitation付きで処理 | citationはprovenance locatorであり、principal binding、元source authority、完全性・freshnessの証明ではない |\n| Files API | upload→file_id→Messages参照、list/retrieve/delete | provider storage。明示削除または設定expiryまで保持され、ZDR対象外。file_idはobject identityであって元source IAMではない |\n| MCP connector | remote MCP serverをOAuth bearer tokenで接続し、tool allow/denyを設定 | third-party server、token、tool実装、返却data、retentionは別authority。approval policyはtool実行確認であり、document-level authorizationではない |\n| client-side memory tool (memory_20250818) | Claudeが/memoriesへのview/create/update/deleteを要求し、application handlerが実行 | memoryはapplication infrastructureに存在。delete、reset、backup、cache、log、physical purgeはhandler/storage契約でありAnthropic provider guaranteeではない |\n| Managed Agents memory store (beta) | workspace-scoped text documentsをsessionへmount。cloudはmount、self-hostedはlocal copyをsync。read-only/read-write、API/Console edit、version historyを提供 | beta headers、workspace/store/session/mount identityを分離。self-hostedは既定15秒syncでeventual。read_write defaultとprompt-injection汚染リスクを持つ |\n| Managed memory delete/version/redact/store delete | memory削除後もimmutable versionが保持され、version redactとstore deleteは別操作 | versionは30日保持され、live memoryのrecent versionsは年齢にかかわらず残り得る。visible head delete、history redact、store全削除、外部export/backup purgeを別検証する |\n| context editing / compaction | 古いtool resultやthinkingをactive contextからclearまたはsummary化 | context縮小でありmemory/file/chat/provider storage削除ではない。memoryへ退避後にcontextを消す構成もある |"
    },
    {
      "heading": "Mapping claims",
      "text": "1. CLAIM_ID: PM-C02-CLAUDE-001; CORE INTENT: permission-aware retrieval; CLAUDE MAPPING: enterprise searchは個別認証・元system閲覧権限・MCP call・no external indexingを明記; STATUS / LIMIT: PUBLIC_INTENT_MAPPED / ALL_PATH_UNKNOWN; REQUIRED EVIDENCE: principal、connector、OAuth scope、source object、query、result ID、citation、chat retentionを同一traceへ結合\n\n2. CLAIM_ID: PM-C02-CLAUDE-002; CORE INTENT: pre-content exclusion; CLAUDE MAPPING: connector/tool permission、元system ACL、Messagesへのcontent injectionを別gateにする; STATUS / LIMIT: PRODUCT_BOUNDARY_MAPPED / TENANT_REVOCATION_UNKNOWN; REQUIRED EVIDENCE: allow/deny二主体、ACL変更前後、tool raw result、prompt到達sentinel、cache/log/chat残差\n\n3. CLAIM_ID: PM-C02-CLAUDE-003; CORE INTENT: source binding; CLAUDE MAPPING: search_result source/title/citationとFiles file_idをlocatorとして記録; STATUS / LIMIT: PROVENANCE_COMPONENT_ONLY; REQUIRED EVIDENCE: content digest、source version、ACL snapshot、retrieved passage、citation span、final answerを結合\n\n4. CLAIM_ID: PM-C02-CLAUDE-004; CORE INTENT: retrieval-route separation; CLAUDE MAPPING: enterprise search、custom search_result、Files、web search、MCPを別route化; STATUS / LIMIT: ROUTE_PROFILE_MAPPED; REQUIRED EVIDENCE: routeごとのauthn/authz、retention、ZDR、raw evidence、failure/timeout、fallbackを記録\n\n5. CLAIM_ID: PM-C02-CLAUDE-005; CORE INTENT: client memory lifecycle; CLAUDE MAPPING: memory toolはclient-side handlerとapplication storageに依存; STATUS / LIMIT: IMPLEMENTATION_BOUNDARY_MAPPED / STORAGE_UNKNOWN; REQUIRED EVIDENCE: store identity、handler version、update semantics、delete/reset、reopen、新session、backup/cache/log readback\n\n6. CLAIM_ID: PM-C02-CLAUDE-006; CORE INTENT: managed memory lifecycle; CLAUDE MAPPING: Managed memory storeはcreate/update/delete、immutable versions、redact、archive、store deleteを分離; STATUS / LIMIT: BETA_PUBLIC_CONTRACT_MAPPED / LIVE_UNKNOWN; REQUIRED EVIDENCE: beta header、workspace/store/session/mount、content SHA、version ID、delete tombstone、version list/redact、store delete readback\n\n7. CLAIM_ID: PM-C02-CLAUDE-007; CORE INTENT: staleness/concurrency; CLAUDE MAPPING: self-hosted memory storeはlocal copyを既定15秒間隔等でsyncし、optimistic content SHA preconditionを持つ; STATUS / LIMIT: DOCUMENTED_EVENTUALITY / CONFLICT_PROFILE_PENDING; REQUIRED EVIDENCE: two-session update/delete、sync interval、lost-ack、conflict、session-end sync、stale readを時系列取得\n\n8. CLAIM_ID: PM-C02-CLAUDE-008; CORE INTENT: delete residual; CLAUDE MAPPING: memory head削除後もversion historyが保持され得る。context editingは別surface; STATUS / LIMIT: RESIDUAL_PROFILE_EXPLICIT; REQUIRED EVIDENCE: head/list/version/export/cache/log/chat/context/storeの各層でdelete後readback。redactとstore deleteも別実施\n\n9. CLAIM_ID: PM-C02-CLAUDE-009; CORE INTENT: bounded long-context counterevidence; CLAUDE MAPPING: NoLiMa／BABILong／LongBench v2の既存taxonomyをClaudeへ移送; STATUS / LIMIT: TEST_INTENT_MAPPED / NO_PROVIDER_RANK; REQUIRED EVIDENCE: model/surface/config、position、latent association、multi-hop、aggregation、realistic tasksを別sliceで反復\n\n10. CLAIM_ID: PM-C02-CLAUDE-010; CORE INTENT: safe live profile; CLAUDE MAPPING: 今回は公開仕様readbackのみ。Claude organization、connector、API、Managed Agents、memory storeは操作していない; STATUS / LIMIT: NOT_EXECUTED / NOT_A_FAILURE; REQUIRED EVIDENCE: owner承認sandbox、synthetic corpus、二主体、setup/cleanup、raw trace、hash、negative cases、final-state readback"
    },
    {
      "heading": "Required safe evidence profile",
      "text": "- Retrieval: synthetic D0/D1/D2 corpusとallow/deny二主体を用意し、enterprise search・custom search_result・Files・MCPを混在させない。各routeでsource ACL、OAuth/tool scope、raw result、citation、prompt sentinelを取得する。\n\n- Revocation: allow確認後にsource permissionを剥奪し、0秒・15秒・60秒・5分で再検索する。raw tool result、citation、chat再開、cache/logの露出を別判定する。\n\n- Client memory: handler/storeを固定し、A→B更新、exact repeat、single delete、reset、新session、same-path reopenを実施。application DB、index、filesystem、backup、telemetryを個別にreadbackする。\n\n- Managed memory: beta headerとstore/session/mountを固定し、create→update→delete後にhead listとversion listを比較する。redact前後、store delete後、self-hosted sync競合を別試験にする。\n\n- Long context: NoLiMa／BABILong／LongBench v2は別sliceで用い、公称context長、単発成功、総合平均をpermission correctness、freshness、memory purgeの代理にしない。"
    },
    {
      "heading": "Counterevidence and failure boundaries",
      "text": "- enterprise searchのpermission-aware説明は強い製品意図だが、全connector実装・全downstream path・tenant設定の実測ではない。\n\n- citationとfile_idは追跡可能性を高めるが、元source ACL、freshness、完全性の証明ではない。\n\n- memory toolはclient-sideであり、Claudeのtool request成功をstorage commitやpurgeへ昇格しない。\n\n- Managed memory storeのmemory削除はversion履歴を消さない。version redaction、store delete、外部export/backupは別lifecycleである。\n\n- context editingはactive promptからtool resultを除く機能で、memoryやprovider dataの削除ではない。\n\n- NoLiMa／BABILong／LongBench v2は異なるfailure modeのbounded反証であり、Claude製品順位やtenant適合へ一般化しない。"
    },
    {
      "heading": "Organization Overlay handoff",
      "text": "workspace plan/role、connector enablement、OAuth scope、source-system ACL、custom role、retention/ZDR契約、Files expiry、chat保持、memory-store ownership、read-only/read-write方針、sync interval、version export、redaction/deletion owner、RTO/RPO、live-test許可はProduct Mappingで埋めない。すべてUNKNOWN / NOT_TESTEDとしてClaude用Organization Overlayへ渡す。"
    },
    {
      "heading": "Provenance",
      "text": "- EXT-C02-061: Anthropic, Use enterprise search\n\n- EXT-C02-062: Anthropic, Use connectors to extend Claude's capabilities\n\n- EXT-C02-063: Anthropic, Search results / Citations\n\n- EXT-C02-064: Anthropic, Files API / API and data retention\n\n- EXT-C02-065: Anthropic, MCP connector / Permission policies\n\n- EXT-C02-066: Anthropic, Memory tool\n\n- EXT-C02-067: Anthropic, Using agent memory\n\n- EXT-C02-068: Anthropic, Memory delete/version contract\n\n- EXT-C02-069: Anthropic, Context editing\n\n- EXT-C02-044..046: NoLiMa／BABILong／LongBench v2 originals reused\n\n- EXP-C02-LOCAL-001/002 and prior local/UI records remain first-party evidence; they are not Claude observations."
    },
    {
      "heading": "Exit condition",
      "text": "Q-C02-001..004のClaude public-surface mappingとsafe test intentは作成した。Core claimは変更しない。tenant ACL/revocation、connector all-path exclusion、client storage residual、Managed memory live conflict/purge、Claude benchmark performanceはUNKNOWN / NOT_TESTEDのままOrganization Overlayまたは承認済みlive testへ移送する。"
    }
  ],
  "human_url": "/providers/pm-claude-core-02",
  "markdown_url": "/agent/article.md?path=%2Fproviders%2Fpm-claude-core-02",
  "json_url": "/agent/article.json?path=%2Fproviders%2Fpm-claude-core-02"
}