組織での適用：モデル・ツール・情報源・状態の選択

Source SHA-256 7dbd9ab48d5e33c5c4b64e9f6f81c1a5864ac42d9c3a29e0c38d366615f0db32

ORG_OVERLAY_ID: ORG-CORE-04-v0.1

TARGET_PACKET: PKT-GEMINI-A-CORE-04-v0.1

TARGET_MAPPING: PM-GEMINI-CORE-04-v0.1

AS_OF: 2026-09-06 15:04 JST

STATUS: ACCESS_BOUNDARY_KNOWN / UI_MODEL_OBSERVATION_RECORDED / ROUTING_VALUES_UNKNOWN

LAYER: ORGANIZATION_OVERLAY (tenant and operating-environment facts only)

組織固有のroute owner、approved model/surface、risk/loss budget、fallback、state handoff、監視値をCore/Product Mappingから分離する。既知の境界は、業務Geminiへのfile sync・API・直接統合は禁止、synthetic promptによるchat試験とGem構築試験は可能候補、というものである。公開product defaultやcommunity reportから組織値を補完しない。

• ROW: ORG-C04-001; Core / PM route: routing input / PM-C04-GEM-001/002; Required organization fact: approved surfaces/models; route owner; task/risk class; prohibited actions; verifier; escalation owner; Current value: CHAT_SYNTHETIC_PROMPT_ALLOWED; GEM_TEST_POSSIBLE; DIRECT_FILE_SYNC_API_INTEGRATION_PROHIBITED; other values UNKNOWN; Evidence / boundary: user clarification 2026-09-05; ORG-CORE-02/03; Closure condition: surface/modelごとにapproved task、owner、reviewer、stopを組織決定。禁止routeをcompletion dependencyにしない

• ROW: ORG-C04-002; Core / PM route: model selection; Required organization fact: requested model/mode; visible selection; timestamp; new/existing chat; response digest; selection persistence; Current value: 2026-09-05に3.1 Pro、3.6 Flash、3.6 Thinkingを各新規chatで観測。Gemなし。継続turnでの選択維持やbackend pinは未試験; Evidence / boundary: COL-C02-029; filename/model labels and transcript digests; Closure condition: UI試験時はrequested/visible modelを毎run記録。表示名からbackend revisionやsilent fallbackを推定しない

• ROW: ORG-C04-003; Core / PM route: tool/source route / PM-C04-GEM-003/004; Required organization fact: allowed tool/connectors; data class; source authority; permission; citation; execution/readback owner; Current value: UNKNOWN / DIRECT_CONNECTOR_FILE_TEST_PROHIBITED; Evidence / boundary: direct sync/API/file integration禁止。inline synthetic promptだけ観測済み; Closure condition: policy ownerが許可tool/sourceとdata classを明示。未採用・禁止はNOT_ADOPTED/PROHIBITEDで閉鎖

• ROW: ORG-C04-004; Core / PM route: state route / PM-C04-GEM-005; Required organization fact: approved state store; schema/version; cross-model/surface handoff; artifact/receipt; retention/deletion; Current value: UNKNOWN; same-chat synthetic semanticsのみ。cross-chat、Gem、API、ADK、Vertexは未試験; Evidence / boundary: CORE-02 UI observationはdurable/cross-surface state evidenceではない; Closure condition: 許可surfaceだけでstate descriptor/readbackを提示するか、cross-surface handoffを禁止して閉鎖

• ROW: ORG-C04-005; Core / PM route: fallback / PM-C04-GEM-006; Required organization fact: allowed fallback graph; capability-loss budget; batch/manual/read-only route; retry/attempt/wall-clock budget; stop owner; Current value: UNKNOWN; provisional=NO_SILENT_CAPABILITY_LOSS; prohibited direct pathsはfallback候補外; Evidence / boundary: CORE-04 contract and 16/16 local falsification show required fields, not organization values; Closure condition: task/risk classごとにloss budgetとstopを承認。値がない場合はfixed routeまたはmanual escalation

• ROW: ORG-C04-006; Core / PM route: route monitoring / PM-C04-GEM-007; Required organization fact: request/attempt IDs; selected/actual route evidence; error/fallback; latency/cost; verifier/final acceptance; retention/redaction; incident owner; Current value: UI transcript/model label/digestは取得可能。backend route、internal log、cost/quota、silent fallback、alert/retentionはUNKNOWN; Evidence / boundary: UIは表面観測のみ。community reportはorganization incidentではない; Closure condition: privacy ownerとservice ownerが最小event、retention、access、alert、incident responseを決定

• ROW: ORG-C04-007; Core / PM route: safe UI profile; Required organization fact: synthetic-only; no files/API/secret; new chat/Gem flag; requested/visible model; prompt/response digest; explicit limitations; Current value: AVAILABLE; CORE-02で3 model × 2 profileを実施済み。CORE-04専用追加試験は不要; Evidence / boundary: existing observation establishes bounded UI availability, not routing internals; Closure condition: product change/incident時のみ同一sentinelを再実行。direct integrationを要求しない

• 業務Gemini chatのmodel表示はroute observationであり、backend pinや自動fallback不存在の証明ではない。

• required tool/source/stateがUIだけで確認できないtaskはdraft-onlyまたはmanual routeに縮退する。

• file/API/direct integrationを必要とする経路はPROHIBITED_BY_ORG_POLICYとして候補集合から除外する。

• fallbackは能力差を明記し、authority/citation/freshness/state/executionのlossが未承認なら停止する。

• price、quota、latency、risk threshold、production SLO、log retentionはUNKNOWNのまま保持し、公開defaultで埋めない。

PM-GEMINI-CORE-04はGemini Apps、Gemini API、ADK、Vertexの公開routing面を分離した。本Overlayは、許可されたUI観測と禁止された直接統合を固定し、組織固有route値をUNKNOWNとして保持する。禁止経路の実測を待たずにGemini CORE-04 cycleを閉じ、後続providerでも同じCore termとloss taxonomyを再利用する。