{
  "format": "agent-article-v0",
  "article_id": "PM-CLAUDE-CORE-05",
  "canonical_url": "/providers/pm-claude-core-05",
  "page_type": "reference",
  "claim_ids": [],
  "evidence_ids": [
    "EVD-PM-CLAUDE-CORE-05-URL-42E907E29544",
    "EVD-PM-CLAUDE-CORE-05-URL-8A6DFE25191D",
    "EVD-PM-CLAUDE-CORE-05-URL-83E0E00209AE",
    "EVD-PM-CLAUDE-CORE-05-URL-4B13E3353A6A",
    "EVD-PM-CLAUDE-CORE-05-URL-057BEF75A589",
    "EVD-PM-CLAUDE-CORE-05-URL-6D32AB6800DD",
    "EVD-PM-CLAUDE-CORE-05-URL-64905C5E9107",
    "EVD-PM-CLAUDE-CORE-05-URL-FAB8CF0A2A32",
    "EVD-PM-CLAUDE-CORE-05-URL-DFBCA3E051AF",
    "PM-CLAUDE-CORE-05-DOCUMENT-READBACK"
  ],
  "unknown_ids": [
    "PM-CLAUDE-CORE-05-CURRENTNESS"
  ],
  "operational_object_ids": [],
  "provider": [
    "CLAUDE"
  ],
  "models": [],
  "plans": [],
  "surfaces": [],
  "regions": [],
  "current_status": "UNKNOWN",
  "observation_status": "UNOBSERVED",
  "freshness": "UNKNOWN",
  "last_verified": null,
  "supersedes": [],
  "superseded_by": [],
  "provenance": [
    "DOC-083cde4caa627644-PM-CLAUDE-CORE-05",
    "SRC-PM-CLAUDE-CORE-05-URL-42E907E29544",
    "SRC-PM-CLAUDE-CORE-05-URL-8A6DFE25191D",
    "SRC-PM-CLAUDE-CORE-05-URL-83E0E00209AE",
    "SRC-PM-CLAUDE-CORE-05-URL-4B13E3353A6A",
    "SRC-PM-CLAUDE-CORE-05-URL-057BEF75A589",
    "SRC-PM-CLAUDE-CORE-05-URL-6D32AB6800DD",
    "SRC-PM-CLAUDE-CORE-05-URL-64905C5E9107",
    "SRC-PM-CLAUDE-CORE-05-URL-FAB8CF0A2A32",
    "SRC-PM-CLAUDE-CORE-05-URL-DFBCA3E051AF"
  ],
  "article_sources": [
    {
      "id": "EVD-PM-CLAUDE-CORE-05-URL-42E907E29544",
      "evidence_class": "RESEARCH",
      "title": "Anthropic, Handle tool calls: <[",
      "href": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/handle-tool-calls",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "APPROVED_DOCUMENT_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-PM-CLAUDE-CORE-05-URL-42E907E29544"
      ],
      "supporting_locators": [
        "Evidence and provenance",
        "- Anthropic, Handle tool calls: <[https://platform.claude.com/docs/en/agents-and-tools/tool-use/handle-tool-calls"
      ],
      "scope": "Evidence and provenance",
      "provenance_status": "APPROVED_DOCUMENT_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-PM-CLAUDE-CORE-05-URL-8A6DFE25191D",
      "evidence_class": "RESEARCH",
      "title": "Anthropic, Configure permissions: <[",
      "href": "https://code.claude.com/docs/en/agent-sdk/permissions",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "APPROVED_DOCUMENT_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-PM-CLAUDE-CORE-05-URL-8A6DFE25191D"
      ],
      "supporting_locators": [
        "Evidence and provenance",
        "- Anthropic, Configure permissions: <[https://code.claude.com/docs/en/agent-sdk/permissions"
      ],
      "scope": "Evidence and provenance",
      "provenance_status": "APPROVED_DOCUMENT_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-PM-CLAUDE-CORE-05-URL-83E0E00209AE",
      "evidence_class": "RESEARCH",
      "title": "Anthropic, MCP connector: <[",
      "href": "https://platform.claude.com/docs/en/agents-and-tools/mcp-connector",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "APPROVED_DOCUMENT_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-PM-CLAUDE-CORE-05-URL-83E0E00209AE"
      ],
      "supporting_locators": [
        "Evidence and provenance",
        "- Anthropic, MCP connector: <[https://platform.claude.com/docs/en/agents-and-tools/mcp-connector"
      ],
      "scope": "Evidence and provenance",
      "provenance_status": "APPROVED_DOCUMENT_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-PM-CLAUDE-CORE-05-URL-4B13E3353A6A",
      "evidence_class": "RESEARCH",
      "title": "Anthropic, File checkpointing: <[",
      "href": "https://code.claude.com/docs/en/agent-sdk/file-checkpointing",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "APPROVED_DOCUMENT_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-PM-CLAUDE-CORE-05-URL-4B13E3353A6A"
      ],
      "supporting_locators": [
        "Evidence and provenance",
        "- Anthropic, File checkpointing: <[https://code.claude.com/docs/en/agent-sdk/file-checkpointing"
      ],
      "scope": "Evidence and provenance",
      "provenance_status": "APPROVED_DOCUMENT_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-PM-CLAUDE-CORE-05-URL-057BEF75A589",
      "evidence_class": "RESEARCH",
      "title": "Anthropic, Hooks: <[",
      "href": "https://code.claude.com/docs/en/agent-sdk/hooks",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "APPROVED_DOCUMENT_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-PM-CLAUDE-CORE-05-URL-057BEF75A589"
      ],
      "supporting_locators": [
        "Evidence and provenance",
        "- Anthropic, Hooks: <[https://code.claude.com/docs/en/agent-sdk/hooks"
      ],
      "scope": "Evidence and provenance",
      "provenance_status": "APPROVED_DOCUMENT_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-PM-CLAUDE-CORE-05-URL-6D32AB6800DD",
      "evidence_class": "RESEARCH",
      "title": "Anthropic, Secure deployment: <[",
      "href": "https://code.claude.com/docs/en/agent-sdk/secure-deployment",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "APPROVED_DOCUMENT_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-PM-CLAUDE-CORE-05-URL-6D32AB6800DD"
      ],
      "supporting_locators": [
        "Evidence and provenance",
        "- Anthropic, Secure deployment: <[https://code.claude.com/docs/en/agent-sdk/secure-deployment"
      ],
      "scope": "Evidence and provenance",
      "provenance_status": "APPROVED_DOCUMENT_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-PM-CLAUDE-CORE-05-URL-64905C5E9107",
      "evidence_class": "RESEARCH",
      "title": "anthropics/claude-code issue #36149: <[",
      "href": "https://github.com/anthropics/claude-code/issues/36149",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "APPROVED_DOCUMENT_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-PM-CLAUDE-CORE-05-URL-64905C5E9107"
      ],
      "supporting_locators": [
        "Evidence and provenance",
        "- anthropics/claude-code issue #36149: <[https://github.com/anthropics/claude-code/issues/36149"
      ],
      "scope": "Evidence and provenance",
      "provenance_status": "APPROVED_DOCUMENT_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-PM-CLAUDE-CORE-05-URL-FAB8CF0A2A32",
      "evidence_class": "RESEARCH",
      "title": "anthropics/claude-code issues #61097 and #79032: <[",
      "href": "https://github.com/anthropics/claude-code/issues/61097",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "APPROVED_DOCUMENT_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-PM-CLAUDE-CORE-05-URL-FAB8CF0A2A32"
      ],
      "supporting_locators": [
        "Evidence and provenance",
        "- anthropics/claude-code issues #61097 and #79032: <[https://github.com/anthropics/claude-code/issues/61097"
      ],
      "scope": "Evidence and provenance",
      "provenance_status": "APPROVED_DOCUMENT_REFERENCE_PROJECTED"
    },
    {
      "id": "EVD-PM-CLAUDE-CORE-05-URL-DFBCA3E051AF",
      "evidence_class": "RESEARCH",
      "title": "anthropics/claude-code issues #61097 and #79032: <[https://github.com/anthropics/claude-code/issues/61097](https://github.com/anthropics/claude-code/issues/61097)> ; <[",
      "href": "https://github.com/anthropics/claude-code/issues/79032",
      "supports": [],
      "limit": "元の監査済み資料に記載された参照先です。URLの復元は、資料の最新性や全主張の支持を新たに検証したことを意味しません。",
      "origin_class": "APPROVED_DOCUMENT_REFERENCE",
      "source_or_experiment_ids": [
        "SRC-PM-CLAUDE-CORE-05-URL-DFBCA3E051AF"
      ],
      "supporting_locators": [
        "Evidence and provenance",
        "- anthropics/claude-code issues #61097 and #79032: <[https://github.com/anthropics/claude-code/issues/61097](https://github.com/anthropics/claude-code/issues/61097)> ; <[https://github.com/anthropics/claude-code/issues/79032"
      ],
      "scope": "Evidence and provenance",
      "provenance_status": "APPROVED_DOCUMENT_REFERENCE_PROJECTED"
    },
    {
      "id": "PM-CLAUDE-CORE-05-DOCUMENT-READBACK",
      "evidence_class": "IMPL",
      "title": "原資料との収録照合",
      "supports": [
        "資料単位の本文ハッシュ、段落数、表数を照合しています。"
      ],
      "limit": "収録照合は主張の真偽や外部根拠の最新性を追加保証しません。",
      "origin_class": "DOCUMENT_INGESTION_READBACK",
      "source_or_experiment_ids": [
        "DOC-083cde4caa627644-PM-CLAUDE-CORE-05"
      ],
      "supporting_locators": [
        "18WPldGemks2px0ukhKYINeBMrBwAmlAi",
        "083cde4caa627644036a2225f1f6ff29b8015bd902614fe1f7a00a997b4eb59c",
        "provider_mappings/PM-CLAUDE-CORE-05.md",
        "6dae8d8e5dd57ed1c95bbe908d0b64ffeace1356dd8f22e0903fcdac47f010d4"
      ],
      "scope": "公開指定を受けた資料単位の全文・表・出典。",
      "provenance_status": "SOURCE_IDENTITY_VERIFIED"
    }
  ],
  "research_sections": [
    {
      "heading": "資料の識別情報",
      "text": "Source SHA-256 f3e072ac0823d476a687248c9a7bac46cc334d8782fc1ef848c31385cd70f0d1"
    },
    {
      "heading": "Product Mapping — Claude / CORE-05",
      "text": "PRODUCT_MAPPING_ID: PM-CLAUDE-CORE-05-v0.1\n\nPROVIDER: CLAUDE / ANTHROPIC\n\nCORE_PACKET: PKT-GEMINI-A-CORE-05-v0.1\n\nAS_OF: 2026-09-09 22:00 JST\n\nSTATUS: PUBLIC_SURFACES_MAPPED / HISTORICAL_FAILURE_SIGNALS_BOUNDED / LIVE_ORG_VALUES_UNKNOWN\n\nLAYER: PRODUCT_MAPPING (not Enterprise AI Core; not Organization Overlay)"
    },
    {
      "heading": "Scope",
      "text": "CORE-05のread/write境界、scoped permission、確認、receipt/readback、idempotency、補償、undo、human escalationをClaude API tools、MCP connector、Claude Agent SDK／Claude Codeへ対応づける。modelのtool_use、permission allow、hook通知、tool result、file checkpoint、外部systemのcommitを同一の「完了」にしない。Claude.ai、API、Agent SDK、Claude Code、Managed Agents、third-party MCPを同一surfaceとして扱わない。"
    },
    {
      "heading": "Core → Claude mapping rows",
      "text": "1. ROW: PM-C05-CLAUDE-001; Core contract: proposal / execution separation; Claude / Anthropic surface and current evidence: Claude APIのclient toolはmodelがtool_use blockを返し、applicationが実行して対応するtool_resultを返す。server toolとAgent SDK loopは実行場所が異なる; Mapping decision: proposed / permission_decided / executed / tool_use_id / tool_result / external_receipt / readback / acceptedを別event化。tool_useを実行・承認・commitの証拠にしない; Required verification / UNKNOWN: server-side dispatch、application IAM、外部transaction、business acceptanceはUNKNOWN\n\n2. ROW: PM-C05-CLAUDE-002; Core contract: scoped permission / business authorization; Claude / Anthropic surface and current evidence: Agent SDKの実効判定順はhooks→deny→ask→permission mode→allow→canUseTool。hookのallowはdeny/askを越えず、MCP user-interaction toolはcallback対象となる; Mapping decision: effective rules、mode、hook/callback、principal、resource、operation、argument digestを記録。tool permissionをsource ACL、recipient権限、業務認可へ昇格しない; Required verification / UNKNOWN: managed policy、organization settings、source-system ACL、実principal bindingはOrganization OverlayでUNKNOWN\n\n3. ROW: PM-C05-CLAUDE-003; Core contract: trusted result / evidence boundary; Claude / Anthropic surface and current evidence: tool_use_idとtool_resultを対応づけ、失敗はis_errorで返せる。外部tool resultはuntrusted contentとしてtool-result block内に保持するよう文書化される; Mapping decision: modelへ戻るresult、provider request ID、外部receipt、authoritative readbackを分離。untrusted result中の命令を次actionのauthorityへ使わない; Required verification / UNKNOWN: toolが返すsuccessの真実性、署名receipt、結果完全性、改ざん耐性はtool別にUNKNOWN\n\n4. ROW: PM-C05-CLAUDE-004; Core contract: MCP least privilege / downstream boundary; Claude / Anthropic surface and current evidence: Messages APIのMCP connectorはremote HTTP/SSE server、OAuth bearer、server/tool allowlist・denylist・per-tool configurationを持つ。beta headerはmcp-client-2025-11-20で旧2025-04-04はdeprecated。ZDR対象外; Mapping decision: import/selection/approvalを下流IAM・commitから分離し、server URL、tool name/schema、auth scope、beta version、policy digest、resultを固定する; Required verification / UNKNOWN: third-party server retention、OAuth実scope、external receipt、tenant policy、beta移行はUNKNOWN\n\n5. ROW: PM-C05-CLAUDE-005; Core contract: dry-run / confirmation parity; Claude / Anthropic surface and current evidence: 公開資料には全tool共通のcanonical dry-run digest、preview→execute atomic binding、承認後argument差分の一様な保証を確認できない; Mapping decision: application側でtyped previewとcanonical operation digestを生成し、target/arguments/source snapshot/policy変更時は旧承認を失効。高risk操作はread-only previewとcommitを分ける; Required verification / UNKNOWN: Claude各UIの表示順、理解率、timeout、再承認条件、人対象有効性はUNKNOWN\n\n6. ROW: PM-C05-CLAUDE-006; Core contract: retry / duplicate side effect; Claude / Anthropic surface and current evidence: Claude Code issue #36149はv2.1.79・Windows 11・stdio MCPで同一callが異なるtool_use_idにより2回dispatchされたという再現報告を記録する; Mapping decision: historical/operator failure signalとして、caller operation ID、parameter digest、external dedup、receipt/readback、blind retry禁止を要求する; Required verification / UNKNOWN: v2.1.259、他OS/transport、current connectorでの再現性は未確認。現行一般欠陥とはしない\n\n7. ROW: PM-C05-CLAUDE-007; Core contract: undo / compensation boundary; Claude / Anthropic surface and current evidence: Agent SDK file checkpointingはWrite/Edit/NotebookEdit等の追跡対象ファイルに限定され、Bash、remote file、directory、通常のsubagent edit等を戻さず、conversationも巻き戻さない; Mapping decision: checkpoint restoreを外部transaction rollbackや会話state復元と呼ばない。対象外effectには事前backup、compensation、external readback、RECOVERY_FAILEDを設ける; Required verification / UNKNOWN: real filesystem、subagent、remote/MCP effect、partial rollbackはlive試験なしではUNKNOWN\n\n8. ROW: PM-C05-CLAUDE-008; Core contract: human escalation / fail-closed; Claude / Anthropic surface and current evidence: issue #79032はv2.1.215 Linuxでauto-accept safety classifier不在時にmanual fallbackなく停止した報告、#61097はremote Routineのconnector approval UI欠落を報告しAnthropicがaddressedと記載した履歴; Mapping decision: historical bounded signalとして、approval service不能時のfail-closed、manual route、timeout/owner、resume identity、no blind bypassを必須にする; Required verification / UNKNOWN: current release、全platform、組織policy、実fallback availabilityはUNKNOWN。修正済み主張を現行保証へ一般化しない\n\n9. ROW: PM-C05-CLAUDE-009; Core contract: hook / audit / final acceptance; Claude / Anthropic surface and current evidence: Pre/PostToolUse等のhooksは介入・通知点を提供するが、webhook failure例や遅延があり、eventは外部systemのauthoritative receiptではない。固定release anchorはPython SDK v0.2.152／commit a8b1e28／bundled CLI 2.1.259; Mapping decision: hook event、permission decision、tool result、external receipt/readback、verifier、final acceptanceを別々に保存。hook failureで証拠chainが欠けたらEXECUTION_UNVERIFIED; Required verification / UNKNOWN: delivery、ordering、retention、redaction、immutable audit、SLOはdeployment/Organization依存"
    },
    {
      "heading": "Safe verification profile",
      "text": "許可された非業務環境、非機密synthetic fixture、専用test accountだけで実施する。今回はAnthropic API、organization、SDK/CLI process、MCP server、filesystem、外部systemを操作していない。\n\n- read-only client toolでproposal、permission、execution、tool_result、external readbackを別々に記録する。\n\n- deny/ask/mode/allow/hook/canUseToolを組み合わせ、実際にconsultされたgateとsource-system ACLを照合する。\n\n- preview後にtarget/argument/source snapshotを一つだけ変え、旧approvalがapplication digestで失効することを確認する。\n\n- commit後response lossを注入し、異なるtool_use_idでも同一operation IDを重複実行しないことを検査する。\n\n- MCP transport・beta version・tool filter・OAuth scopeを固定し、tool resultと外部authoritative stateを突合する。\n\n- checkpoint対象内外を混在させ、local rewind、conversation、Bash、subagent、remote effectの残差を別表示する。\n\n- approval service/classifier不可、timeout、resumeを注入し、fail-closed/manual escalation/no blind bypassを検査する。\n\n- hook delivery欠落時もapplication ledger、receipt、readback、final acceptanceで状態を復元できるか確認する。\n\n既存CORE-05の基本6 ruleと26 assertionsはCOMPILER_EXPERIMENTとして再利用するが、Claude/Anthropicのlive安全性や可用性の実測へ再分類しない。"
    },
    {
      "heading": "Evidence and provenance",
      "text": "- Anthropic, Handle tool calls: <[https://platform.claude.com/docs/en/agents-and-tools/tool-use/handle-tool-calls](https://platform.claude.com/docs/en/agents-and-tools/tool-use/handle-tool-calls)> (accessed 2026-09-09)\n\n- Anthropic, Configure permissions: <[https://code.claude.com/docs/en/agent-sdk/permissions](https://code.claude.com/docs/en/agent-sdk/permissions)> (accessed 2026-09-09)\n\n- Anthropic, MCP connector: <[https://platform.claude.com/docs/en/agents-and-tools/mcp-connector](https://platform.claude.com/docs/en/agents-and-tools/mcp-connector)> (accessed 2026-09-09)\n\n- Anthropic, File checkpointing: <[https://code.claude.com/docs/en/agent-sdk/file-checkpointing](https://code.claude.com/docs/en/agent-sdk/file-checkpointing)> (accessed 2026-09-09)\n\n- Anthropic, Hooks: <[https://code.claude.com/docs/en/agent-sdk/hooks](https://code.claude.com/docs/en/agent-sdk/hooks)> (accessed 2026-09-09)\n\n- Anthropic, Secure deployment: <[https://code.claude.com/docs/en/agent-sdk/secure-deployment](https://code.claude.com/docs/en/agent-sdk/secure-deployment)> (accessed 2026-09-09)\n\n- anthropics/claude-code issue #36149: <[https://github.com/anthropics/claude-code/issues/36149](https://github.com/anthropics/claude-code/issues/36149)> (opened 2026-03-19; accessed 2026-09-09)\n\n- anthropics/claude-code issues #61097 and #79032: <[https://github.com/anthropics/claude-code/issues/61097](https://github.com/anthropics/claude-code/issues/61097)> ; <[https://github.com/anthropics/claude-code/issues/79032](https://github.com/anthropics/claude-code/issues/79032)> (opened 2026-05-21 / 2026-07-19; accessed 2026-09-09)\n\n- fixed release anchor reused: EXT-C01-032"
    },
    {
      "heading": "Boundary decision",
      "text": "PM-CLAUDE-CORE-05は公開仕様、固定release anchor、version/platform限定issueの範囲でbounded closeとする。公開資料から一様なdry-run/approval digest、external idempotency、exactly-once、receipt/readback、compensation、rollback、human understanding、hook retentionを推測しない。Core claimは変更せず、既存実験の帰属も維持したためGemini/GPT Product Mappingの遡及監査は不要。live、tenant、organization値は各問いとOverlayへ残す。"
    }
  ],
  "human_url": "/providers/pm-claude-core-05",
  "markdown_url": "/agent/article.md?path=%2Fproviders%2Fpm-claude-core-05",
  "json_url": "/agent/article.json?path=%2Fproviders%2Fpm-claude-core-05"
}