根拠資料と検証記録

Source SHA-256 a94fa1b3ad48fc64e5dd9d2591324c71e98c0dbdf18a00b3e09f30d5dfa4d7c3

Enterprise AI運用辞典 — Source / Observation / Experiment Registry

No new external source or experiment was promoted. PUBLICATION_GATE_CENSUS.md and evidence/INT-PUB-GATE-022/PUBLICATION_GATE_CENSUS.json classify the remaining publication routes. DOI 10.1016/j.scico.2026.103530 / PII S0167642326000961 remains RECOVERY_ACTIVE; an exact-identifier GitHub search returned no result, which is not an absence finding. Publication may use only the already archived Crossref identity and Zenodo record/README/aggregate facts unless an authorized article span is recovered. Historical-byte equality and persisted-result transformation provenance stay separate UNKNOWNs. No Core, Product Mapping, Organization value or empirical-origin change.

Checked 2026-09-20 JST against EUR-Lex. The archived authentic 2024 OJ PDF remains the byte-fixed enacted source for Article 14. EUR-Lex's consolidated text dated 2026-07-27 is a documentation tool without legal effect and is therefore registered as a current-reading aid, not a replacement for authentic OJ acts. The controlling change is Regulation (EU) 2026/1744, published 24 July 2026 and in force from 27 July 2026.

Relation disposition: CLM-C05-004/010 → EXT-INT-EU-004 + EXT-INT-EU-AMEND-021, with the consolidation as a cross-check. Article 14(1)–(5) is textually unchanged by the 2026 amendment, but its Chapter III application dates are now 2 December 2027 for Article 6(2)/Annex III high-risk systems and 2 August 2028 for Article 6(1)/Annex I high-risk systems. Article 2(2), Article 2(13) and Article 111 exceptions/transitional rules remain explicit. No universal enterprise threshold, Organization legal conclusion, Core claim, Product Mapping or empirical origin is created. Evidence: evidence/INT-C05-EU-021/EU_CURRENT_STATUS.json.

The source Google Doc 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc was queried through both authoritative namespaces on 2026-09-20 JST. Google Docs documents.get returned revision ID ANLCKQlY-J2cMBi8grqzT6xr8lijnDfdK21uyia96W5USYaomwphSxsvdaSUmm4XOWvBVMAJ7AzV7H7KKg2neXpB6yTTdJIsQZD_svTbbrso, exactly matching the Frozen SOURCE_REVISION. Google Drive revisions.list for the same file returned currentRevisionId=58; revision 58 modified time is 2026-09-05T00:26:29.673Z and direct revision fetch succeeded. Together with the previously saved revision-58/current-export content equality, this closes the document-specific current-snapshot correspondence as VERIFIED_CURRENT_SNAPSHOT_EQUIVALENCE.

Boundary: retain the opaque Docs revision ID as canonical; 58 is the Drive revision identifier for the same current state, not a replacement. No general conversion rule, earlier/future revision equivalence, external-source claim, Core change, Product Mapping change or Organization value is inferred. Evidence: evidence/INT-PROV-REV-020/REVISION_CORRESPONDENCE.json.

• SOURCE_ID: RAW-C02-PERMEM-019-A; SOURCE: deterministic permission-memory result; IDENTITY / LOCATOR: tests/CORE-02_permission_memory_fixture_rerun_2026-09-05.json; Library libfile_abd0151a14ac819185f84aaeba2f0ca3; 906 bytes; SHA-256 678dc52711cd0f9be93c6ec659ee52827589ce619e1d4d303c516d5908361c42; LOCAL EVIDENCE: evidence/INT-PROV-RAW-019/RAW_LINKAGE.json; run GEMINI-A-001-LOCAL-FIXTURE-002; 12/12 expected matches; relations AUD-C02-011 / COL-C02-019 / Q-C02-001/002 / CLM-C02-009/010 / IDX-C02-033; SCOPE / BOUNDARY: COMPILER_EXPERIMENT; local diagnostic contract only; result historical equality UNKNOWN; persisted JSON is a summary rather than verbatim runner stdout, so transformation provenance is UNKNOWN; no rerun

• SOURCE_ID: RAW-C02-PERMEM-019-B; SOURCE: permission-memory fixture input; IDENTITY / LOCATOR: tests/CORE-02_permission_memory_fixture_v0.1.json; Library libfile_a90412bd73c08191bc1e0b4f42a14c9b; 3,353 bytes; SHA-256 ae2063d4f4a81fe52163d67eb00f54ef4c64f55218285589d452d518a5d1d026; LOCAL EVIDENCE: result-embedded fixture SHA equals recovered bytes; existing full historical digest match; SCOPE / BOUNDARY: input identity anchor only; not executed or reinterpreted

• SOURCE_ID: RAW-C02-PERMEM-019-C; SOURCE: permission-memory fixture runner; IDENTITY / LOCATOR: tests/CORE-02_permission_memory_fixture_v0.1.js; Library libfile_fa75f56ac8888191bc6f6b2aac5b37ac; 3,558 bytes; SHA-256 cd919636cf72c49ef4f472a618d1dc678c364751f23949af9da5e74158b9c236; LOCAL EVIDENCE: result-embedded runner SHA equals recovered bytes; existing full historical digest match; SCOPE / BOUNDARY: input identity anchor only; runner emits per-case text and summary, not the persisted JSON schema; not executed

The GitHub identity check was used only to preserve separation from earlier OpenFGA evidence: this provider-neutral fixture/result is not attributed to openfga/openfga or another external implementation. IR-004 current-byte linkage is closed at 8/8; historical equality for this result and the undocumented summary transformation remain UNKNOWN.

• SOURCE_ID: RAW-C02-OPENFGA-018-A; SOURCE: OpenFGA local-profile runner; IDENTITY / LOCATOR: tests/CORE-02_openfga_permission_live_v0.1.py; Library libfile_0cc238560e4c8191b076874de76388b2; 8,387 bytes; SHA-256 381ee6b6d2fff78a2615583d279208bac2eaef4008d77fe649cb2eedb45400f2; LOCAL EVIDENCE: evidence/INT-PROV-RAW-018/RAW_LINKAGE.json; exact runner SHA repeated in result artifact; SCOPE / BOUNDARY: COMPILER_EXPERIMENT; links GEMINI-A-001-AUDIT-012 / COL-C02-022 / Q-C02-001 / CLM-C02-009 / IDX-C02-036; not rerun; runner historical equivalence UNKNOWN

• SOURCE_ID: RAW-C02-OPENFGA-018-B; SOURCE: OpenFGA local-profile result; IDENTITY / LOCATOR: tests/CORE-02_openfga_permission_live_2026-09-05.json; Library libfile_da00e47526608191b33fec1e1cc04401; 2,831 bytes; SHA-256 db497d9ef3bca5a1898a7e57fd2a9faf38aba410f4eb0585296714ff80980d01; LOCAL EVIDENCE: evidence/INT-PROV-RAW-018/RAW_LINKAGE.json; existing abbreviated digest db497d…0d01 matched; SCOPE / BOUNDARY: prior 6/6 local result and stale-cache counterevidence only; persisted JSON is not verbatim runner stdout and its transformation method is UNKNOWN; no provider/tenant/current-version promotion

Current GitHub identity check confirmed repository ID 501372599 for openfga/openfga; current main was not used to reinterpret the historical v1.19.0 experiment.

• SOURCE_ID: RAW-C02-MEM0-017-A; SOURCE: Mem0 SQLite history runner; IDENTITY / LOCATOR: tests/CORE-02_mem0_history_reset_live_v0.2.py; Library libfile_01e5bd7da24481919977f7888809df5c; 2,903 bytes; SHA-256 94d73518d298d8136242bdd53edd1795fe37f6fbd28b0cb1dd9557d963cc892a; LOCAL EVIDENCE: evidence/INT-PROV-RAW-017/RAW_LINKAGE.json; full-digest result anchor tests/CORE-02_dependency_fixed_local_live_2026-09-05.json SHA-256 0c6af21c…3376; SCOPE / BOUNDARY: COMPILER_EXPERIMENT; links AUD-C02-013 / COL-C02-021 / Q-C02-002 / CLM-C02-010; SQLiteManager-only prior 2/2 result; not rerun; runner historical equivalence UNKNOWN

• SOURCE_ID: RAW-C02-MEM0-017-B; SOURCE: Mem0 Qdrant runner; IDENTITY / LOCATOR: tests/CORE-02_mem0_qdrant_reset_live_v0.1.py; Library libfile_d2f7ead5599881919a3e6c8a7d9c2b27; 3,359 bytes; SHA-256 1f1278376f98a58831124dbfda154fdb9203fb65f3c0f067ecf308d2bc1a350e; LOCAL EVIDENCE: evidence/INT-PROV-RAW-017/RAW_LINKAGE.json; exact runner SHA repeated in result artifact; SCOPE / BOUNDARY: COMPILER_EXPERIMENT; links GEMINI-A-001-AUDIT-013 / COL-C02-023 / Q-C02-002 / CLM-C02-010 / IDX-C02-037; runner historical equivalence UNKNOWN

• SOURCE_ID: RAW-C02-MEM0-017-C; SOURCE: Mem0 Qdrant result; IDENTITY / LOCATOR: tests/CORE-02_mem0_qdrant_reset_live_2026-09-05.json; Library libfile_536bd7c96cb88191b79e4e7afb7b1934; 1,762 bytes; SHA-256 03bd4262b3eb7d6be83d255f0a7ee80e85fb6dd6709420e794cec27799169bc9; LOCAL EVIDENCE: evidence/INT-PROV-RAW-017/RAW_LINKAGE.json; existing abbreviated digest 03bd42…9bc9 matched; SCOPE / BOUNDARY: prior 4/4 local dense active-vector result only; remote replica/snapshot/backup/WAL/cache/telemetry, hosted retention and physical purge remain UNKNOWN; no rerun

Current GitHub identity check confirmed repository ID 656099147 for mem0ai/mem0; current main was not used to reinterpret historical Mem0 2.0.20 artifacts.

• SOURCE_ID: RAW-C01-REQ-016-A; SOURCE: CORE-01 field-requiredness validator; IDENTITY / LOCATOR: tests/CORE-01_field_requiredness_reaudit_v0.2.js; Library libfile_c0ef2ce3bc7081919ae14137a7c5e316; 2,282 bytes; SHA-256 f2744535228ff3d1279c7e0ef814d5a4571e8d2ad9460416ba7183a1ff0ba618; LOCAL EVIDENCE: evidence/INT-PROV-RAW-016/RAW_LINKAGE.json; recovered archive Drive ID 1v5mA8MmRbeTJqzhV5clLA2uA0B5h9dpr; SCOPE / BOUNDARY: COMPILER_EXPERIMENT; current recovered bytes linked to AUD-C01-007 / COL-C01-005 / Q-C01-002; not rerun; no historical digest was recorded, so historical byte equivalence remains UNKNOWN

• SOURCE_ID: RAW-C01-REQ-016-B; SOURCE: CORE-01 field-requiredness fixture; IDENTITY / LOCATOR: tests/CORE-01_field_requiredness_reaudit_v0.2.json; Library libfile_0c437f0d19e4819189562afaef0f1996; 7,194 bytes; SHA-256 250adea6837535c327d89545cc2b4ee131fa76848a1ee7c28fadcf953e9c2258; LOCAL EVIDENCE: evidence/INT-PROV-RAW-016/RAW_LINKAGE.json; recovered archive Drive ID 1v5mA8MmRbeTJqzhV5clLA2uA0B5h9dpr; SCOPE / BOUNDARY: COMPILER_EXPERIMENT; R-01..R-12 fixture bytes linked to the same audit/collection/question; not rerun; historical byte equivalence UNKNOWN

The 20-month industrial article remains RECOVERY_ACTIVE: current Crossref/OpenAlex metadata identifies a licensed publisher VOR but yielded no retrievable publisher or repository full-text bytes in this environment. This does not establish absence; see evidence/INT-PROV-RAW-016/VOR_RECOVERY.md.

Checked 2026-09-20 JST. S050 lines 102–106 の第二OSS observatory例を、repository ID 1299614130、default branch main、commit df06c003dc20f23a5633e6c89361e7047ea90cbc（2026-08-02T08:08:07Z）へ固定した。repositoryは現在archivedである。READMEと実装は、versioned frozen battery、deterministic grader、raw transcriptとsummaryの分離保存、partial-day除外、complete-day rowの不変化、battery version別baseline、minimum-history/noise-floor alert、returned model ID・output stability・latency sentinel、scheduled Git persistenceを組み合わせる歴史的な公開設計を示す。これはblack-box monitoring controlの実装可能性を支えるが、現行provider挙動、served weights、変化原因、独立再現、Organization適合を証明しない。live API、Actions、dashboard、tests、committed resultsは今回実行・独立検証していない。

• Source ID: EXT-INT-C06-S050-LDO-OSS-011; Origin / title: russsi/llm-drift-observatory; Canonical identity and locator: archived GitHub repository commit df06c003dc20f23a5633e6c89361e7047ea90cbc; README blob c418282bfa22bd819a577f4fb0fae702cd541449 lines 9–16/25–38/53–59/97–120/124–132; scripts/run_battery.py blob 3abf9a6d6a68c89b9c51496150c85e4d0486f0d0 lines 1–8/117–136/148–177/185–228; scripts/detect_drift.py blob 5c6f1c859c735d2059ae6cf70abd395c55f69eac lines 1–11/32–40/57–106/132–171; scripts/graders.py blob 526fa0bc1211e740466c5d6fe0bd5cafd017284b lines 1–3/36–50/61–141; .github/workflows/daily.yml blob 3e1e8e5b11be47b6eaf3eb4cf99b364ccaee7fab lines 1–20/35–60; Local snapshot / SHA-256: evidence/INT-C06-S050-015/; exact per-file SHA-256 in VERIFICATION.md; Bounded use: supports an implementable historical design for versioned repeated probes, deterministic grading, incomplete-run exclusion/healing, baseline/threshold change detection, metadata/stability/latency sentinels and scheduled append-only persistence; maintainer/author-operated evidence only, not present effectiveness or causal/weight identity proof

Relation disposition: CLM-C06-003 → EXT-INT-C06-S050-LDO-OSS-011 adds an implementable versioned repeated-evaluation and evidence-persistence pattern. CLM-C06-006 → EXT-INT-C06-S050-LDO-OSS-011 adds explicit minimum-history/noise-floor detection and model-ID/stability/latency sentinels when immutable backend identity is unavailable. READMEのsame-weight pair説明は因果証拠へ昇格しない。差異はstack-level observable differenceの調査起点であり、weights、quantization、sampling、batching、routingその他の原因を単独では識別しない。Core text、Provider Mappings、Organization values、empirical originは変更しない。

Checked 2026-09-20 JST. S050 lines 102–106 の最初のOSS observatory例 egnaro9/model-drift を、default branch main の commit 8736e16ef93d802f0e3a053b9ac85ddacc863011（2026-09-19T13:00:21Z）へ固定した。READMEと実装は、version/hash付き固定suite、mechanical grader、3回反復のmedianとspread、provider failure/reliabilityの分離、scheduled persisted result、provider responseが返すmodel IDの照合を組み合わせる公開設計を示す。これはblack-box monitoring controlの実装可能性を支えるが、repository maintainer自身の実装・説明であり、peer-reviewed evidence、独立再現、特定providerの現在挙動、変化原因、served weights同一性、Organization適合を証明しない。live API、GitHub Actions、dashboard、test suiteは今回実行していない。

• Source ID: EXT-INT-C06-S050-MD-OSS-010; Origin / title: Erik Hill / egnaro9/model-drift; Canonical identity and locator: GitHub repository commit 8736e16ef93d802f0e3a053b9ac85ddacc863011; README blob aaf27583cab5ff10d94fc20090ef6c195bbf6e52 lines 33–44/67–80; modeldrift/suite.py blob 376d9bb4cf1aa67f17be29dae258fb52ed3409a2 lines 1–22; modeldrift/run.py blob 2780bdc4700904b841267836d1de1d78b1e96581 lines 130–195/239–289; modeldrift/identity.py blob 489fc87db6d852d9737f331a363c52ec4482bb7e lines 1–28/45–107; .github/workflows/track.yml blob 698c4aaf7b6c35a6039c040205e60cab78b5e8c6 lines 1–16/31–56/67–80; Local snapshot / SHA-256: evidence/INT-C06-S050-014/; exact per-file SHA-256 in VERIFICATION.md; Bounded use: supports availability of a fixed/versioned deterministic probe, repeated median/spread and failure identity retention, reliability separation, scheduled persistence, and response-echo model-ID mismatch check; implementation/maintainer evidence only, not independent outcome validation or causal/weight identity proof

Relation disposition: CLM-C06-003 → EXT-INT-C06-S050-MD-OSS-010 adds an implementable, version/hash-bound repeated black-box behavior-monitoring pattern. CLM-C06-006 → EXT-INT-C06-S050-MD-OSS-010 adds explicit handling for sampling spread, provider errors/reliability and a limited response-echo identity signal when immutable backend identity is unavailable. Echoed IDs remain metadata assertions rather than weight attestations; deterministic grading does not remove model nondeterminism; observed shifts are not causally attributed. Core text, Provider Mappings, Organization values and empirical origin remain unchanged.

Checked 2026-09-20 JST. S050 lines 99–101 の Log Probability Tracking of LLM APIs を、ICLR 2026 conference-paper表示を含む arXiv 2512.03816v2 と著者リポジトリ timothee-chauvin/track-llm-apis へ固定した。論文はfirst-token top-k logprobの反復標本に二標本permutation testを適用するchange detectorを提示し、TinyChangeで微小変更への感度を評価する。実環境では10 provider・189 endpointを4か月超にわたり毎時観測し37 suspected changesを報告するが、ground truthがなく、method自体もmodel更新とinfrastructure変更を区別しない。したがって、これは低コストのbehavioral change sentinelと深掘り調査へのroutingを支持する一方、変化原因、exact backend build、現行provider保証、tenant/Organization適合を証明しない。

• Source ID: EXT-INT-C06-S050-LT-PAPER-008; Origin / title: Chauvin et al. / Log Probability Tracking of LLM APIs; Canonical identity and locator: ICLR 2026; arXiv 2512.03816v2, 2026-02-27; PDF pp.1–4, 7–10; Local snapshot / SHA-256: evidence/INT-C06-S050-013/logprob_tracking_arxiv_2512.03816v2.pdf / 864a72835440fbd19ae0f114d0b2ac945ce3b43c4beaf58ba3a447121ae05672; Bounded use: supports first-token logprob two-sample monitoring, TinyChange sensitivity evaluation, and bounded 189-endpoint/10-provider longitudinal observation; not causal attribution, universal/current provider proof, or Organization evidence

• Source ID: EXT-INT-C06-S050-LT-OSS-009; Origin / title: Chauvin et al. / timothee-chauvin/track-llm-apis README; Canonical identity and locator: commit f2d11152a242ce3a3e08c879bb45bffdae0ff8a6; README blob 7299899f86ff2a5e6cafeef5d195e3a54b2a04fc; lines 1–25; Local snapshot / SHA-256: evidence/INT-C06-S050-013/track_llm_apis_README_f2d1115.md / 1fcf98ccc2026562b600406207b77f4c6c37a3be9b1266e378fc2a789f6b754c; Bounded use: supports public code organization for remote-API collection/analysis and TinyChange generation/analysis; author artifact, not independent replication or proof of paper results

Relation disposition: CLM-C06-003 → EXT-INT-C06-S050-LT-PAPER-008 adds a bounded, low-cost behavioral change-detection method and dated multi-endpoint observation. CLM-C06-006 → EXT-INT-C06-S050-LT-PAPER-008 supports repeated external monitoring when immutable backend identity is unavailable. EXT-INT-C06-S050-LT-OSS-009 supports reproducibility-material availability only. Logprob support is a prerequisite; suspected shifts do not identify their cause, and no present provider/account/Organization value is inferred. Core text, Provider Mappings, Organization values and empirical origin remain unchanged.

Checked 2026-09-20 JST. S050 lines 95–97 の GateScope を、arXiv v1 / IMC '26 paper identityとauthor-linked CyberAINet/GateScope repositoryへ固定した。論文はofficial endpointsでcontrolled validation後、10 commercial LLM API gatewaysをblack-box測定し、response content、multi-turn conversation、billing、latencyの4次元でobservable gapを報告する。これはgateway経由の表示modelと観測挙動が一致しない可能性、および継続的なclient-side monitoringの必要性を支持するが、個別gatewayの内部routing cause、現在のfirst-party provider挙動、全gatewayへの一般化、tenant/Organization適合を証明しない。

• SOURCE_ID: EXT-INT-C06-S050-GS-PAPER-006; SOURCE: Lin et al. / Behavioral Consistency and Transparency Analysis on Large Language Model API Gateways; IDENTITY / LOCATOR: arXiv 2604.21083v1; DOI 10.48550/arXiv.2604.21083; IMC '26 DOI 10.1145/3777912.3809156; PDF pp.1–2, 5–7; LOCAL SNAPSHOT / SHA-256: evidence/INT-C06-S050-012/gatescope_arxiv_2604.21083v1.pdf / 99c296ba8dcdce39c78e758e2fafcd0486ae19ad20bceebb15344c4a88bfa677; BOUNDED USE: supports four-dimensional client-side audit design, controlled official-endpoint baseline and bounded 10-gateway observations; not proof of hidden internal cause, universal substitution, current provider behavior or Organization fitness

• SOURCE_ID: EXT-INT-C06-S050-GS-OSS-007; SOURCE: GateScope authors / CyberAINet/GateScope README; IDENTITY / LOCATOR: commit cacdac687f6bc1a2773aa6c0bfed16c4273b4335; README blob 824b6cb8f35ee37d8ba1834ff570a17688d12d25; lines 1–20, 22–70; LOCAL SNAPSHOT / SHA-256: evidence/INT-C06-S050-012/GateScope_README_cacdac6.md / e37d0aa922ef5bf8bbc63e0176a8ee7fbf6726c6ba8e60c12c1fdecb49c95f3e; BOUNDED USE: supports public availability and stated implementation surfaces; repository explicitly omits collected data, so it does not independently reproduce paper results

Relation disposition: CLM-C06-003/006 → EXT-INT-C06-S050-GS-PAPER-006 adds bounded evidence that observable behavior, memory, billing and latency can diverge behind a stable requested-model/gateway label and require repeated monitoring. EXT-INT-C06-S050-GS-OSS-007 supports implementability/reproducibility-material availability only. Latency alone is not attributed to a specific cause; anonymous gateways are not mapped to named providers. Core text, Provider Mappings, Organization values and empirical origin remain unchanged.

Checked 2026-09-19 JST. S050 line 91 の PII S0167642326000961 を、Science of Computer Programming 254 (2026) article 103530、DOI 10.1016/j.scico.2026.103530、著者 Eneko Pizarro / Maider Azanza / Beatriz Pérez Lamancha へ確定した。Crossref metadataは書誌identityとVORのCC BY 4.0 license開始日を固定するが、本文claimの証拠には用いない。Zenodo replication package version 1はMarch 2024–October 2025の測定期間、8対象関数、評価尺度、集計結果、raw/processed measurement群の存在を固定する。publisher VOR本文は取得失敗のためexact supporting spanを未完のまま保持する。

• SOURCE_ID: EXT-INT-C06-S050-BTH-META-004; ORIGIN / TITLE: Elsevier/Crossref metadata / Beyond the hype: Enabling informed LLM adoption in industry through systematic evaluation; CURRENT LOCATOR: Science of Computer Programming 254 (2026) 103530; DOI 10.1016/j.scico.2026.103530; PII S0167642326000961; SNAPSHOT / SHA256: evidence/INT-C06-S050-011/crossref_10.1016_j.scico.2026.103530.json / bdbf0c3ca302ed021386e57780151b0e09f61d2a13516df87a31b9cd648496f7; BOUNDED DISPOSITION: publication identity/authorship/venue/article number/license only; no article-text span

• SOURCE_ID: EXT-INT-C06-S050-BTH-DATA-005; ORIGIN / TITLE: Azanza Sesé / Pizarro Liberal / Pérez Lamancha / replication package version 1; CURRENT LOCATOR: Zenodo 18628436; DOI 10.5281/zenodo.18628436; concept DOI 10.5281/zenodo.18628435; README lines 1–30/37–70; PDF pp.1–4; SNAPSHOT / SHA256: record 31b4690f…c65; README 28644b62…c44e; PDF 73535178…dcec; BOUNDED DISPOSITION: author-produced study-window, function, metric and aggregate-result evidence; not independent replication, exact VOR prose or current/universal provider proof

Relation disposition: CLM-C06-003/006 → EXT-INT-C06-S050-BTH-DATA-005 adds bounded repeated-measurement counterevidence. EXT-INT-C06-S050-BTH-META-004 is citation identity only. Causal hidden-backend attribution, current provider behavior, universal drift magnitude, tenant adoption and Organization thresholds remain UNKNOWN. Core/PM/ORG/empirical origin unchanged. Tetrics lksnext-ai-lab/tetrics was checked at commit b8600230…8a76 but not promoted as independent confirmation.

Checked 2026-09-19 JST. S050 lines 83–89 が参照する longitudinal study を、Harvard Data Science Review 6(2) のlatest release (#2)とauthor-maintained GitHub repositoryへ固定した。研究はMarch/June 2023のGPT-3.5/GPT-4 snapshotsを8 taskで比較し、同じservice labelの挙動・性能が短期間に変わり得ることと継続監視の必要性を支持する。現行provider、Gemini、一般的drift率、backend build同一性、Organization適合の証明には使わない。

• SOURCE_ID: EXT-C06-006; ORIGIN / TITLE: Lingjiao Chen; Matei Zaharia; James Zou / How Is ChatGPT's Behavior Changing Over Time?; CURRENT LOCATOR: Harvard Data Science Review 6(2), DOI 10.1162/99608f92.5317da47, latest release #2; lines 82–126, 185–203, 232–238, 969–993; SNAPSHOT / SHA256: evidence/INT-C06-S050-010/chen_zaharia_zou_hdsr_release2.md / 117edae94ca41b29e2bad1f2cdadf7eebaf792832fa74d73b27308d4cff06bf3; BOUNDED DISPOSITION: peer-reviewed original supports task-bounded temporal drift, reproducibility risk and continuous monitoring; one historical two-snapshot study, not a universal/current drift rate or current provider/tenant measurement

• SOURCE_ID: EXT-INT-C06-S050-LLMDRIFT-003; ORIGIN / TITLE: Chen/Zaharia/Zou author repository / lchen001/LLMDrift README; CURRENT LOCATOR: main README Git blob SHA 77c52962686077934029d7bbb04fe478b4ae16a9; lines 4, 14–26, 30–44, 63–75; SNAPSHOT / SHA256: evidence/INT-C06-S050-010/LLMDrift_README_77c5296.md / c20edcbe808910861c47e103f8085d177c0c7113d97cb5586ec8664cb8a93521; BOUNDED DISPOSITION: supports availability of datasets, generations, analysis/monitoring code and recorded query parameters; repository is reproducibility material, not independent confirmation of the paper's findings

Relation disposition: CLM-C06-003 → EXT-C06-006 and CLM-C06-006 → EXT-C06-006 are now original-locator/snapshot verified. EXT-INT-C06-S050-LLMDRIFT-003 supports the reproducibility-material boundary only. The HDSR final article is the publication citation terminal; arXiv v3 remains historical/version context. Core text, Provider Mappings, Organization values and empirical origin are unchanged.

Checked 2026-09-19 JST. S050の原典リンクから、PhoenixとMLflowのauthor-maintained repository documentationをcommit固定で回収した。S050本文自体も登録済みDrive正本の同一revisionから直接保存した。両外部資料は、prompt versionをdataset・scorer/evaluator・evaluation runへ結び、同一datasetで比較する実装可能性を支える。ただし、辞典が要求するrelease acceptance decision、全bundle component、provider backend、tenant採用、組織閾値までを一体で固定する証拠ではない。

• SOURCE_ID: EXT-INT-C06-S050-PHX-001; ORIGIN / TITLE: Arize AI / Phoenix maintainers / Prompt Engineering Tutorial; CURRENT LOCATOR: Arize-ai/phoenix commit 767847c3386492f9783b623cf78e3eee47d0cea3, Git blob 60e6091c531421b41f63ed420434aa0bbce7f571; lines 8–11, 22–41, 55–60; SNAPSHOT / SHA256: evidence/INT-C06-S050-009/phoenix_prompt_tutorial_767847c.mdx / b31995df520de6decb4255a2d3c94205d725855e0629455899f63c3b7f7add27; BOUNDED DISPOSITION: supports versioned prompts, dataset-scale experiments, evaluators and side-by-side comparison; does not prove release approval/acceptance binding or full configuration-bundle identity

• SOURCE_ID: EXT-INT-C06-S050-MLF-002; ORIGIN / TITLE: MLflow Project / LF Projects / Evaluating Prompts; CURRENT LOCATOR: mlflow/mlflow commit 215b274dc702a10147c86e48dfff692f1350bf30, Git blob 3b0ee4dd0688739e37b868f21b24d7d9abc7216f; lines 19–42, 194–223; SNAPSHOT / SHA256: evidence/INT-C06-S050-009/mlflow_evaluating_prompts_215b274.mdx / 4f4fad30b504a8bbbfbfbd1b158999368c1ce17ea3e2ba7371e6d36c253d8b7c; BOUNDED DISPOSITION: supports registered prompt versions, a fixed evaluation dataset, explicit scorers, repeated evaluation, run comparison and prompt-version/evaluation-result lineage; @latest remains a moving alias and no release acceptance decision is supplied

Internal locator: evidence/INT-C06-S050-009/S050_direct_revision_snapshot.md, SHA-256 c17ba890a6de74d85e99238c2d3fa0001589aa7e2ae96cc490767ceeb0379213, Drive revision ANLCKQlY-J2cMBi8grqzT6xr8lijnDfdK21uyia96W5USYaomwphSxsvdaSUmm4XOWvBVMAJ7AzV7H7KKg2neXpB6yTTdJIsQZD_svTbbrso, character range 331571–342066; relevant S050 lines 127 and 131 in the snapshot.

Relation disposition: CLM-C06-007 → EXT-INT-C06-S050-PHX-001 and CLM-C06-007 → EXT-INT-C06-S050-MLF-002. These close the first S050 versioned-evaluation original-link cluster. The acceptance-decision part of CLM-C06-007 remains this study's bounded synthesis/dependency and is not attributed to either OSS project. Core text, Provider Mappings, Organization values and empirical origin are unchanged.

Checked 2026-09-19 JST. The LiveBench arXiv v2 PDF and the author-maintained repository README were archived. The paper supports the published design of frequently refreshed, recent-source questions with objective ground-truth scoring. The repository snapshot fixes the current public implementation statement at commit 1263ee472f4b9ac3833c0d2f6ad50dd3747fd1df; its documented release/public-question split prevents treating the paper's monthly-update design as proof that every current category is publicly available or current.

• SOURCE_ID: EXT-INT-C07-LIVE-003; ORIGIN / TITLE: White et al. / LiveBench: A Challenging, Contamination-Free LLM Benchmark, arXiv:2406.19314v2; CURRENT LOCATOR: PDF p.1 abstract, p.2 introduction; revised 2025-04-18; SNAPSHOT / SHA256: evidence/INT-C07-ARCHIVE-008/livebench_arxiv_2406.19314v2.pdf / 38207db0331896e9558cc803d04188f32dddda1709139c53f985680d1b78e06c; BOUNDED DISPOSITION: supports a published dynamic-evaluation design using frequently updated questions, recent sources and objective ground truth; does not prove universal contamination resistance, current cadence, current provider validity or organization fitness

• SOURCE_ID: EXT-INT-C07-LIVE-004; ORIGIN / TITLE: LiveBench authors / LiveBench/LiveBench README; CURRENT LOCATOR: lines 36–37 and 101 at commit 1263ee472f4b9ac3833c0d2f6ad50dd3747fd1df; Git blob 24201c730e23a98ff01f1ce422b9fc899233646f; SNAPSHOT / SHA256: evidence/INT-C07-ARCHIVE-008/livebench_repo_README_1263ee4.md / daedd942e98b2d4cc7f83e574368ba99823f4e9df9edf73619c3099a939e9944; BOUNDED DISPOSITION: current author-maintained implementation note repeats the design but separates current release 2025-04-25 from latest all-category public questions 2024-11-25; not a present-day monthly-cadence audit or model-specific contamination test

Relation disposition: CLM-C07-004 → EXT-INT-C07-LIVE-003 for the peer-reviewed/preprint design and CLM-C07-004 → EXT-INT-C07-LIVE-004 for the versioned implementation/public-data boundary. Existing synthesis and empirical-origin rows remain separate. Core claims, Provider Mappings and Organization values are unchanged.

Checked 2026-09-19 JST. The authentic English Official Journal PDF for Regulation (EU) 2024/1689 and the PMLR 267 proceedings PDF for OR-Bench were archived. The EU snapshot fixes the enacted OJ text, not the 2026 consolidated-version applicability analysis. OR-Bench is evidence for a benchmark design and reported study only; it is not a current provider or organization safety measurement.

• SOURCE_ID: EXT-INT-EU-004; ORIGIN / TITLE: European Parliament and Council / Regulation (EU) 2024/1689, authentic English OJ; CURRENT LOCATOR: PDF pp.60–61/144, Article 14(1)–(5); OJ L 2024/1689, 12.7.2024; SNAPSHOT / SHA256: evidence/INT-C05-ARCHIVE-007/eu_ai_act_2024_1689_oj_en.pdf / bba630444b3278e881066774002a1d7824308934f49ccfa203e65be43692f55e; BOUNDED DISPOSITION: supports risk/autonomy/context-proportionate human oversight, capability/limitation understanding, monitoring, automation-bias awareness, interpretation, override/reversal and safe stop for high-risk AI; does not create universal approval fields, thresholds or organization applicability

• SOURCE_ID: EXT-INT-C07-ORB-003; ORIGIN / TITLE: Cui et al. / OR-Bench: An Over-Refusal Benchmark for Large Language Models; CURRENT LOCATOR: PDF pp.1–2 abstract/contributions/Fig.1; pp.3–5 definitions and construction; PMLR 267:11515–11542; SNAPSHOT / SHA256: evidence/INT-C05-ARCHIVE-007/or_bench_pmlr_v267.pdf / 9c7eeeb3d51fd0540d8ba413d45ad65bdda7ab004b7ac46207f00ba2c1f0ec80; BOUNDED DISPOSITION: supports paired measurement of safe-prompt over-refusal and toxic-prompt rejection within the published benchmark; does not establish present provider ranking, tenant behavior, dataset fitness or organization thresholds

Relation disposition: CLM-C05-004/010 → EXT-INT-EU-004; CLM-C07-009 → EXT-INT-C07-ORB-003. Existing synthesis and empirical-origin rows remain separate. Core claims, Provider Mappings and Organization values are unchanged.

Checked 2026-09-19 JST. Two previously verified primary sources were archived as publisher-hosted PDFs. Archival fixes bytes and page locators; it does not turn design guidance into a live effectiveness result or prove that an arbitrary remote tool implements AWS idempotency semantics.

• SOURCE_ID: EXT-INT-C05-HAI-003; ORIGIN / TITLE: Amershi et al. / Guidelines for Human-AI Interaction camera-ready; CURRENT LOCATOR: PDF p.3 Table 1: G9, G10, G16, G17; appendix pp.16, 18, 19; SNAPSHOT / SHA256: evidence/INT-C05-ARCHIVE-006/microsoft_hai_guidelines_camera_ready.pdf / 82fff584c6b986f573608361478e93447538c6ce707e4b9b04d45d584272ea03; BOUNDED DISPOSITION: supports correction, uncertainty scoping, consequence communication and global-control design patterns; not a high-risk approval UI comprehension/effectiveness measurement

• SOURCE_ID: EXT-INT-C05-AWS-003; ORIGIN / TITLE: Malcolm Featonby / AWS Builders' Library, Making retries safe with idempotent APIs; CURRENT LOCATOR: PDF pp.2–4: retry ambiguity, caller-provided request ID, token+mutation atomicity; pp.7–9: late arrival, retention, same ID/different intent; SNAPSHOT / SHA256: evidence/INT-C05-ARCHIVE-006/aws_making_retries_safe_idempotent_apis.pdf / 0b2536b025e64e68f8bd23e05fafb51c79eed435ccee2556aab45517caeaf86b; BOUNDED DISPOSITION: supports AWS operational design practice for operation identity, atomic dedup and residual cases; not evidence that every provider/tool supplies these guarantees

Relation disposition: CLM-C05-004 → EXT-INT-C05-HAI-003; CLM-C05-006/007 → EXT-INT-C05-AWS-003. Existing synthesis rows remain separate. No Core claim, provider mapping, Organization value or empirical origin changed.

Checked 2026-09-14 JST. Two already-bound external sources were archived without adding or changing Core claims. The OWASP capture is a complete main-content Markdown extraction from the live page; the ADK capture is the GitHub issue payload returned for issue #6732. These are source snapshots, not compiler experiments.

• SOURCE_ID: EXT-INT-C05-LITL-003; ORIGIN / TITLE: OWASP community / HITL Dialog Forging (Lies-in-the-Loop); CURRENT LOCATOR: Overview; Attack Vectors; Mitigations & Best Practices; live HTTP 200 at capture; SNAPSHOT / SHA256: evidence/INT-C05-ARCHIVE-005/owasp_lies_in_the_loop.md / 99c7a23ff3e9090689436d262dc6a4a8b731b1fc0a20f20acfcc266de422d315; BOUNDED DISPOSITION: community attack guidance supporting renderer/content/metadata attack surfaces; not universal exploit validation or complete mitigation proof

• SOURCE_ID: EXT-INT-ADK-004; ORIGIN / TITLE: GitHub reporter froilan / google/adk-python #6732; CURRENT LOCATOR: issue body Describe the bug; To Reproduce steps 3–6; observed event sequence; additional context; SNAPSHOT / SHA256: evidence/INT-C05-ARCHIVE-005/google_adk_python_issue_6732.json / 6df900ac90fe4544702b80fb0ae2157806fbb91c7bb24429ad2872e8ea26f1b8; BOUNDED DISPOSITION: open reporter issue, ADK 2.7.0 + Postgres + parallel gated/ungated scope; request clarification label; not maintainer-confirmed universal/current behavior

Checked 2026-09-13. This extends INT-C07-SPANS-003, without repeating its bindings. EU source is authentic OJ2024 text; consolidated2026-07-27 was separately located, but current applicability to any organization is NOT determined. ADK issue is reporter evidence, open with request-clarification label at inspection; not maintainer-confirmed universal behavior. NIST PDF saved and extractability checked.

• CLAIM_ID: CLM-C05-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-EU-004; SOURCE_OR_EXPERIMENT_ID: https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng; SUPPORTING_LOCATOR: Article14(1)–(4); RELATION: partial support / bounded design source; SCOPE_AND_LIMIT: risk/autonomy/context比例のhuman oversightと限界理解・override・safe stop。approval digest/失効機構は辞典側設計であり条文の明示要件ではない; PUBLICATION_STATUS: PRIMARY_LOCATOR_VERIFIED_2026-09-13

• CLAIM_ID: CLM-C05-010; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-EU-004; SOURCE_OR_EXPERIMENT_ID: https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng; SUPPORTING_LOCATOR: Article14(4)(a)–(e); RELATION: partial support / bounded design source; SCOPE_AND_LIMIT: 監視、automation bias、解釈、override、安全停止の支援。期限/owner/commit state全項目の法的必須性は示さない; PUBLICATION_STATUS: PRIMARY_LOCATOR_VERIFIED_2026-09-13

• CLAIM_ID: CLM-C05-010; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-NIST-004; SOURCE_OR_EXPERIMENT_ID: https://doi.org/10.6028/NIST.AI.600-1; SUPPORTING_LOCATOR: MANAGE4.1; MG-4.1-002; MG-4.1-007; MG-4.3-001/002 (PDF pp48–49); RELATION: partial support / bounded design source; SCOPE_AND_LIMIT: 監視、エスカレーション、incident recovery、errors/near-misses記録。voluntary cross-sectoral profile、企業閾値はUNKNOWN; PUBLICATION_STATUS: PRIMARY_LOCATOR_VERIFIED_2026-09-13

• CLAIM_ID: CLM-C07-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-NIST-004; SOURCE_OR_EXPERIMENT_ID: https://doi.org/10.6028/NIST.AI.600-1; SUPPORTING_LOCATOR: MG-4.2-002 and MG-4.3-002 (PDF p49); RELATION: partial support / bounded design source; SCOPE_AND_LIMIT: post-mortem/preventive measuresとnear-miss追跡。candidateごとのcorpus gateは辞典側設計; PUBLICATION_STATUS: PRIMARY_LOCATOR_VERIFIED_2026-09-13

• CLAIM_ID: CLM-C05-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-ADK-004; SOURCE_OR_EXPERIMENT_ID: https://github.com/google/adk-python/issues/6732; SUPPORTING_LOCATOR: issue6732 body, Observed session event sequence; Additional context; archived snapshot evidence/INT-C05-ARCHIVE-005/google_adk_python_issue_6732.json; RELATION: partial support / bounded design source; SCOPE_AND_LIMIT: ADK2.7.0/Postgres、parallel gated+ungatedの報告。openかつrequest clarification。current universal defectや自測にしない; PUBLICATION_STATUS: PRIMARY_SNAPSHOT_ARCHIVED_2026-09-14

• CLAIM_ID: CLM-C05-011; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-ADK-004; SOURCE_OR_EXPERIMENT_ID: https://github.com/google/adk-python/issues/6732; SUPPORTING_LOCATOR: issue6732 body, paragraphs1–2 and steps3–6; archived snapshot evidence/INT-C05-ARCHIVE-005/google_adk_python_issue_6732.json; RELATION: partial support / bounded design source; SCOPE_AND_LIMIT: tool完了と空final replyの分離を示すreporter failure signal。全event schemaやoperation ID joinの実装保証ではない; PUBLICATION_STATUS: PRIMARY_SNAPSHOT_ARCHIVED_2026-09-14

• CLM-C05-004: CLM-C05-004; EXTERNAL_SOURCE: EXTERNAL_SOURCE; EXT-INT-C05-LITL-003: EXT-INT-C05-HAI-003; COL-C05-005; https://community.owasp.org/attacks/Lies_in_the_Loop: COL-C05-006; https://www.microsoft.com/en-us/research/wp-content/uploads/2019/01/Guidelines-for-Human-AI-Interaction-camera-ready.pdf; Overview; Attack Vectors; Mitigations & Best Practices; archived snapshot evidence/INT-C05-ARCHIVE-005/owasp_lies_in_the_loop.md: Table1 G9/G16/G17; PDF page3; G9 appendix page16; approval renderer/content/metadata are attack surfaces: correction, consequences and global control design guidance; OWASP community attack description; no universal exploitability or complete mitigation proof: general HAI design research, not high-risk approval UI effectiveness measurement; PRIMARY_SNAPSHOT_ARCHIVED_2026-09-14: PRIMARY_LOCATOR_VERIFIED_2026-09-13

• CLM-C05-004: CLM-C05-006; EXTERNAL_SOURCE: EXTERNAL_SOURCE; EXT-INT-C05-LITL-003: EXT-INT-C05-AWS-003; COL-C05-005; https://community.owasp.org/attacks/Lies_in_the_Loop: COL-C05-004; https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/; Overview; Attack Vectors; Mitigations & Best Practices; archived snapshot evidence/INT-C05-ARCHIVE-005/owasp_lies_in_the_loop.md: Reducing client complexity; Same client request ID, different intent; approval renderer/content/metadata are attack surfaces: caller-provided operation identity and mismatched parameter rejection; OWASP community attack description; no universal exploitability or complete mitigation proof: AWS author practice; does not guarantee any arbitrary tool implements this contract; PRIMARY_SNAPSHOT_ARCHIVED_2026-09-14: PRIMARY_PAGE_VERIFIED_2026-09-13

• CLM-C05-004: CLM-C05-007; EXTERNAL_SOURCE: EXTERNAL_SOURCE; EXT-INT-C05-LITL-003: EXT-INT-C05-AWS-003; COL-C05-005; https://community.owasp.org/attacks/Lies_in_the_Loop: COL-C05-004; same AWS URL; Overview; Attack Vectors; Mitigations & Best Practices; archived snapshot evidence/INT-C05-ARCHIVE-005/owasp_lies_in_the_loop.md: Retrying and side effects; Reducing client complexity; approval renderer/content/metadata are attack surfaces: lost response can leave state uncertain; token+mutation atomicity is service responsibility; OWASP community attack description; no universal exploitability or complete mitigation proof: COMMIT_UNKNOWN routing is dictionary synthesis, not AWS status name; actual tool behavior UNKNOWN; PRIMARY_SNAPSHOT_ARCHIVED_2026-09-14: PRIMARY_PAGE_VERIFIED_2026-09-13

Stripe read yielded only an example/CLI wrapper on 2026-09-13; retention, parameter-validation and failure-caching text not exposed in that response. Existing claims remain historical, not freshly reverified. Full archival snapshots for these external sources remain pending; EXTERNAL_NOTES.md is analyst notes, not source bytes.

Additional bounded cross-chapter bindings (same table schema below):

• CLM-C06-007: CLM-C07-011; JOINT_ANALYSIS: JOINT_ANALYSIS; INT-C07-SPAN-X1: INT-C07-SPAN-X2; S045; Drive revision 58: S053; Drive revision 58; evidence/INT-C07-SPANS-003/S045.txt L438–L473: evidence/INT-C07-SPANS-003/S053.txt L202–L215; direct internal design span: direct internal design span; candidate release、dataset/scorer/judge/rubric/pass policy、status/approverのrun記録を結ぶ内部設計。受入実績ではない: 文書のOCR/layout/table/chart/retrieval/reasoning/citationを分ける内部設計。long-context網羅性は未解決; INTERNAL_DIRECT_REV58_ONLY: INTERNAL_DIRECT_REV58_ONLY

• CLM-C06-007: CLM-C07-011; JOINT_ANALYSIS: JOINT_ANALYSIS; INT-C07-SPAN-X1: INT-C07-SPAN-X3; S045; Drive revision 58: S053; Drive revision 58; evidence/INT-C07-SPANS-003/S045.txt L438–L473: evidence/INT-C07-SPANS-003/S053.txt L249–L262; direct internal design span: direct internal design span; candidate release、dataset/scorer/judge/rubric/pass policy、status/approverのrun記録を結ぶ内部設計。受入実績ではない: workbook最終成果物とcell/logic/format等を別評価する内部設計。実機試験ではない; INTERNAL_DIRECT_REV58_ONLY: INTERNAL_DIRECT_REV58_ONLY

REVISION_CHECK: Drive revisions.list current=58, revisions.get(58)本文とfetch現行本文は完全一致。INT-PROV-REV-020で、同一file IDへのDocs documents.getがFrozen opaque SOURCE_REVISIONを返し、Drive revisions.listがcurrent=58を返したため、同一current snapshotのnamespace対応を検証済み。opaque IDはcanonicalのまま維持し、58へ置換しない。

採集原本は内部編纂物であり、その[RESEARCH]/[VERIFIED_SPEC]ラベルだけでは外部原典の検証完了としない。本文は現行取得、modified 2026-09-05T00:26:29.993Z。Drive revision list current=58。Frozen由来opaque revisionのrevisions.getは404であり、削除や不存在の証拠ではない。source offsetsと取得条件はORIGIN.json、各snapshot hashはRUN manifestで固定する。

• CLAIM_ID: CLM-C07-001; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-001; SOURCE_OR_EXPERIMENT_ID: S045; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S045.txt L113–L130; RELATION: direct internal design span; SCOPE_AND_LIMIT: Evaluation Contractの構成要素を固定する内部設計根拠。外部標準の必須要件ではない; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-002; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-002; SOURCE_OR_EXPERIMENT_ID: S014; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S014.txt L17–L20; RELATION: direct internal design span; SCOPE_AND_LIMIT: COVERED/NOT_COVEREDを明示する内部設計根拠。代表性の実証ではない; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-003; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-003; SOURCE_OR_EXPERIMENT_ID: S045; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S045.txt L423–L437; RELATION: direct internal design span; SCOPE_AND_LIMIT: failureの最小再現case化とcorpus追加の内部設計。near miss全般の実証は含まない; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-004; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-004; SOURCE_OR_EXPERIMENT_ID: S045; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S045.txt L367–L376; RELATION: direct internal design span; SCOPE_AND_LIMIT: source authority/date/expiryとSTALE_TEST分離の内部設計; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-005; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-005; SOURCE_OR_EXPERIMENT_ID: S045; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S045.txt L419–L422; RELATION: direct internal design span; SCOPE_AND_LIMIT: holdout閲覧・利用回数と汚染時更新の内部設計; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-006; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-006; SOURCE_OR_EXPERIMENT_ID: S045; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S045.txt L271–L283; RELATION: direct internal design span; SCOPE_AND_LIMIT: 検証可能な条件のdeterministic verifier優先。全citation意味判断の決定可能性は保証しない; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-007; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-007; SOURCE_OR_EXPERIMENT_ID: S053; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S053.txt L106–L120; RELATION: direct internal design span; SCOPE_AND_LIMIT: judge order/repeat/version/human check記録の内部設計; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-008; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-008; SOURCE_OR_EXPERIMENT_ID: S045; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S045.txt L377–L405; RELATION: direct internal design span; SCOPE_AND_LIMIT: critical gateとslice別thresholdの設計。具体的threshold値は組織UNKNOWN; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-009; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-009; SOURCE_OR_EXPERIMENT_ID: S054; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S054.txt L161–L184; RELATION: direct internal design span; SCOPE_AND_LIMIT: harmful/benignとrefused/answeredの分離。実機安全率は未測定; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-010; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-010; SOURCE_OR_EXPERIMENT_ID: S045; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S045.txt L406–L418; RELATION: direct internal design span; SCOPE_AND_LIMIT: repeat_N、all-k success、variance等の内部記録設計。独立性や確率推定式を保証しない; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-011; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-011; SOURCE_OR_EXPERIMENT_ID: S054; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S054.txt L131–L147; RELATION: direct internal design span; SCOPE_AND_LIMIT: 日本語task-sliceを個別再測定する設計。全modalityの性能裏付けではない; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLAIM_ID: CLM-C07-012; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: INT-C07-SPAN-012; SOURCE_OR_EXPERIMENT_ID: S014; Drive 1w88Q77mHlXsYm22v6VtwKeX-G-WkMwQAAIdje4DxLKc; SUPPORTING_LOCATOR: evidence/INT-C07-SPANS-003/S014.txt L61–L72; RELATION: direct internal design span; SCOPE_AND_LIMIT: disagreementのhuman adjudicationとjudge校正。invalid oracleの全taxonomyは部分支持のみ; 現行取得本文、Frozen revision同一性未確認; PUBLICATION_STATUS: INTERNAL_DIRECT_CURRENT_VERSION_ONLY

• CLM-C07-009: CLM-C07-004; EXTERNAL_SOURCE: EXTERNAL_SOURCE; EXT-INT-C07-ORB-003: EXT-INT-C07-LIVE-003; https://proceedings.mlr.press/v267/cui25a.html: https://arxiv.org/abs/2406.19314v2; Abstract; PMLR267:11515–11542, 2025: evidence/INT-C07-ARCHIVE-008/livebench_arxiv_2406.19314v2.pdf, PDF pp.1–2; SHA-256 38207db0331896e9558cc803d04188f32dddda1709139c53f985680d1b78e06c; benign over-refusal and toxic prompt controls separately evaluated: refreshed questions, recent sources and objective ground truth; 独立一次研究。対象benchmarkを越えたprovider/自社安全性は未測定: dynamic evaluationの設計例。普遍的な非汚染、現行更新頻度、企業snapshot/retention要件を論文結論へ昇格しない; PRIMARY_ABSTRACT_VERIFIED_2026-09-13: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLM-C07-009: CLM-C07-004; EXTERNAL_SOURCE: EXTERNAL_SOURCE; EXT-INT-C07-ORB-003: EXT-INT-C07-LIVE-004; https://proceedings.mlr.press/v267/cui25a.html: https://github.com/LiveBench/LiveBench/blob/1263ee472f4b9ac3833c0d2f6ad50dd3747fd1df/README.md; Abstract; PMLR267:11515–11542, 2025: evidence/INT-C07-ARCHIVE-008/livebench_repo_README_1263ee4.md, lines 36–37/101; blob 24201c730e23a98ff01f1ce422b9fc899233646f; SHA-256 daedd942e98b2d4cc7f83e574368ba99823f4e9df9edf73619c3099a939e9944; benign over-refusal and toxic prompt controls separately evaluated: author-maintained current implementation/public-data boundary; 独立一次研究。対象benchmarkを越えたprovider/自社安全性は未測定: READMEのrelease/public-question差を現行cadence保証へ昇格しない。provider性能・organization適合は未測定; PRIMARY_ABSTRACT_VERIFIED_2026-09-13: AUTHOR_OSS_COMMIT_PINNED_BOUNDED

• CLAIM_ID: CLM-C05-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: COL-C05-005; SOURCE_OR_EXPERIMENT_ID: SRC-INT-COL-C05-005; SUPPORTING_LOCATOR: canonical URLs, date and topic in verbatim collection record below; RELATION: partial support / bounded failure signal; SCOPE_AND_LIMIT: original scope retained; no provider, legal applicability or experiment generalization; PUBLICATION_STATUS: RECOVERY_ACTIVE_SNAPSHOT_PENDING

• CLAIM_ID: CLM-C05-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: COL-C05-006; SOURCE_OR_EXPERIMENT_ID: SRC-INT-COL-C05-006; SUPPORTING_LOCATOR: canonical URLs, date and topic in verbatim collection record below; RELATION: partial support / bounded failure signal; SCOPE_AND_LIMIT: original scope retained; no provider, legal applicability or experiment generalization; PUBLICATION_STATUS: RECOVERY_ACTIVE_SNAPSHOT_PENDING

• CLAIM_ID: CLM-C05-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: COL-C05-003; SOURCE_OR_EXPERIMENT_ID: SRC-INT-COL-C05-003; SUPPORTING_LOCATOR: canonical URLs, date and topic in verbatim collection record below; RELATION: partial support / bounded failure signal; SCOPE_AND_LIMIT: original scope retained; no provider, legal applicability or experiment generalization; PUBLICATION_STATUS: RECOVERY_ACTIVE_SNAPSHOT_PENDING

• CLAIM_ID: CLM-C05-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: COL-C05-004; SOURCE_OR_EXPERIMENT_ID: SRC-INT-COL-C05-004; SUPPORTING_LOCATOR: canonical URLs, date and topic in verbatim collection record below; RELATION: partial support / bounded failure signal; SCOPE_AND_LIMIT: original scope retained; no provider, legal applicability or experiment generalization; PUBLICATION_STATUS: RECOVERY_ACTIVE_SNAPSHOT_PENDING

• CLAIM_ID: CLM-C05-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: COL-C05-004; SOURCE_OR_EXPERIMENT_ID: SRC-INT-COL-C05-004; SUPPORTING_LOCATOR: canonical URLs, date and topic in verbatim collection record below; RELATION: partial support / bounded failure signal; SCOPE_AND_LIMIT: original scope retained; no provider, legal applicability or experiment generalization; PUBLICATION_STATUS: RECOVERY_ACTIVE_SNAPSHOT_PENDING

• CLAIM_ID: CLM-C05-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: COL-C05-007; SOURCE_OR_EXPERIMENT_ID: SRC-INT-COL-C05-007; SUPPORTING_LOCATOR: canonical URLs, date and topic in verbatim collection record below; RELATION: partial support / bounded failure signal; SCOPE_AND_LIMIT: original scope retained; no provider, legal applicability or experiment generalization; PUBLICATION_STATUS: RECOVERY_ACTIVE_SNAPSHOT_PENDING

• CLAIM_ID: CLM-C05-010; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: COL-C05-003; SOURCE_OR_EXPERIMENT_ID: SRC-INT-COL-C05-003; SUPPORTING_LOCATOR: canonical URLs, date and topic in verbatim collection record below; RELATION: partial support / bounded failure signal; SCOPE_AND_LIMIT: original scope retained; no provider, legal applicability or experiment generalization; PUBLICATION_STATUS: RECOVERY_ACTIVE_SNAPSHOT_PENDING

• CLAIM_ID: CLM-C05-011; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: COL-C05-007; SOURCE_OR_EXPERIMENT_ID: SRC-INT-COL-C05-007; SUPPORTING_LOCATOR: canonical URLs, date and topic in verbatim collection record below; RELATION: partial support / bounded failure signal; SCOPE_AND_LIMIT: original scope retained; no provider, legal applicability or experiment generalization; PUBLICATION_STATUS: RECOVERY_ACTIVE_SNAPSHOT_PENDING

SRC-INT-COL-C05-005 (collection provenance: COL-C05-005):

SRC-INT-COL-C05-006 (collection provenance: COL-C05-006):

SRC-INT-COL-C05-003 (collection provenance: COL-C05-003):

SRC-INT-COL-C05-004 (collection provenance: COL-C05-004):

SRC-INT-COL-C05-007 (collection provenance: COL-C05-007):

Inherited records only, not fresh external verification. Explicit canonical URLs remain required for external citation. Internal manifests and dependency contracts are not external originals. Local test claims retain COMPILER_EXPERIMENT origin in existing registers; no raw data recreated or reclassified. Missing relations below are structural backfill, not publication clearance.

• CLAIM_ID: CLM-C02-002; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C02-002; SOURCE_OR_EXPERIMENT_ID: S004/S055/S056; RAGAS; ARES; RAGChecker; SUPPORTING_LOCATOR: packets/CORE-02.md claim ledger CLM-C02-002; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: RAGはretrieval、context utilization、generation faithfulness、answer qualityを分けて評価しなければ診断できない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C02-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-003; SOURCE_OR_EXPERIMENT_ID: EXT-C02-003; SUPPORTING_LOCATOR: inherited evidence record EXT-C02-003 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C02-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-004; SOURCE_OR_EXPERIMENT_ID: EXT-C02-004; SUPPORTING_LOCATOR: inherited evidence record EXT-C02-004 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C02-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-005; SOURCE_OR_EXPERIMENT_ID: EXT-C02-005; SUPPORTING_LOCATOR: inherited evidence record EXT-C02-005 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C02-003; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C02-003; SOURCE_OR_EXPERIMENT_ID: S020/S021/S023/S056; CORE-01 input contract; SUPPORTING_LOCATOR: packets/CORE-02.md claim ledger CLM-C02-003; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: source bindingはsource名だけでなくidentity、authority、scope、version/snapshot、freshness、permission、trust originを持つ; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C02-004; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C02-004; SOURCE_OR_EXPERIMENT_ID: S019/S023; CORE-01 declared/evidenced source; SUPPORTING_LOCATOR: packets/CORE-02.md claim ledger CLM-C02-004; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: 宣言したsource集合と、実際に取得・利用したことを証拠化できるsource集合を同一視しない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C02-005; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C02-005; SOURCE_OR_EXPERIMENT_ID: S004; RAGTruth; SUPPORTING_LOCATOR: packets/CORE-02.md claim ledger CLM-C02-005; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: RAGを使用してもunsupported/contradictory claimは残り得るため、citation表示だけでgrounding完了としない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C02-005; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-006; SOURCE_OR_EXPERIMENT_ID: EXT-C02-006; SUPPORTING_LOCATOR: inherited evidence record EXT-C02-006 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C02-005; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-010; SOURCE_OR_EXPERIMENT_ID: EXT-C02-010; SUPPORTING_LOCATOR: inherited evidence record EXT-C02-010 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C02-005; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-011; SOURCE_OR_EXPERIMENT_ID: EXT-C02-011; SUPPORTING_LOCATOR: inherited evidence record EXT-C02-011 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C02-006; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C02-006; SOURCE_OR_EXPERIMENT_ID: S020/S055/S063; CORE-01; SUPPORTING_LOCATOR: packets/CORE-02.md claim ledger CLM-C02-006; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: conversation history、memory、source set、instructions、artifact state、current task stateは別のpersistence mechanismである; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C02-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-009; SOURCE_OR_EXPERIMENT_ID: EXT-C02-009; SUPPORTING_LOCATOR: inherited evidence record EXT-C02-009 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C02-007; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C02-007; SOURCE_OR_EXPERIMENT_ID: S020/S021/S030/S036; SUPPORTING_LOCATOR: packets/CORE-02.md claim ledger CLM-C02-007; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: source更新は保存方式ごとに追従性が異なり、copy/snapshot/linkを明示しなければstale stateを検出できない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C02-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-008; SOURCE_OR_EXPERIMENT_ID: EXT-C02-008; SUPPORTING_LOCATOR: inherited evidence record EXT-C02-008 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C02-011; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C02-011; SOURCE_OR_EXPERIMENT_ID: S004/S020/S021/S023/S063; CORE-01 fallback rule; SUPPORTING_LOCATOR: packets/CORE-02.md claim ledger CLM-C02-011; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: source bindingが保証できない時はbounded excerpt、versioned snapshot、external retriever、manual citation audit等へdegradeし、失うfreshness・coverage・automationを明記する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C03-002; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C03-002; SOURCE_OR_EXPERIMENT_ID: S007/S015/S027; Airflow 3.3.1 XCom; CORE-01; SUPPORTING_LOCATOR: packets/CORE-03.md claim ledger CLM-C03-002; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: stage outputは後続処理から再取得できる版付きintermediate artifactとして外部化し、暗黙の会話状態だけに置かない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C03-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-005; SOURCE_OR_EXPERIMENT_ID: EXT-C03-005; SUPPORTING_LOCATOR: inherited evidence record EXT-C03-005 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C03-003; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C03-003; SOURCE_OR_EXPERIMENT_ID: Temporal Activity/Retry docs; LangGraph 1.2.11 fault profile; CORE-01/02; SUPPORTING_LOCATOR: packets/CORE-03.md claim ledger CLM-C03-003; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: retryはpipeline全体の既定動作ではなく、失敗stage、side-effect state、idempotency/readbackを見て限定する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C03-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-003; SOURCE_OR_EXPERIMENT_ID: EXT-C03-003; SUPPORTING_LOCATOR: inherited evidence record EXT-C03-003 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C03-004; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C03-004; SOURCE_OR_EXPERIMENT_ID: S015/S027; CORE-01 runtime/business split; SUPPORTING_LOCATOR: packets/CORE-03.md claim ledger CLM-C03-004; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: verificationは生成stage自身の成功申告と分離し、stage-local criteriaとend-to-end acceptanceの両方を持つ; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C03-005; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C03-005; SOURCE_OR_EXPERIMENT_ID: LangGraph 1.2.11 concurrent update/reducer profile; S052; CORE-02; SUPPORTING_LOCATOR: packets/CORE-03.md claim ledger CLM-C03-005; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: 並列化はsubtask独立性だけで決めず、共有write、順序依存、同一snapshot、merge規則、resource contentionを明示する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C03-005; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-002; SOURCE_OR_EXPERIMENT_ID: EXT-C03-002; SUPPORTING_LOCATOR: inherited evidence record EXT-C03-002 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C03-006; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C03-006; SOURCE_OR_EXPERIMENT_ID: S015/S027/S052; CORE-01 handoff/readback; SUPPORTING_LOCATOR: packets/CORE-03.md claim ledger CLM-C03-006; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: local stage PASSの集合はend-to-end successを自動的に意味せず、handoff、artifact lineage、統合後検証を別に要求する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C03-007; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C03-007; SOURCE_OR_EXPERIMENT_ID: Temporal Activity/Saga docs; LangGraph 1.2.11 + SQLite fault profile; CORE-01/02; SUPPORTING_LOCATOR: packets/CORE-03.md claim ledger CLM-C03-007; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: transaction境界はLLM応答単位と同一視せず、prepare/commit/readbackとpartial/unknown stateを区別する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C03-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-004; SOURCE_OR_EXPERIMENT_ID: EXT-C03-004; SUPPORTING_LOCATOR: inherited evidence record EXT-C03-004 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C03-008; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C03-008; SOURCE_OR_EXPERIMENT_ID: ADaPT v2; CE-C03-001..003; S024; SUPPORTING_LOCATOR: packets/CORE-03.md claim ledger CLM-C03-008; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: 分解の価値はcoordination、latency、cost、context loss、merge riskを含むend-to-end差分で評価し、細分化自体を成功条件にしない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C03-008; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-001; SOURCE_OR_EXPERIMENT_ID: EXT-C03-001; SUPPORTING_LOCATOR: inherited evidence record EXT-C03-001 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C04-002; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C04-002; SOURCE_OR_EXPERIMENT_ID: DIRECT_INTERNAL + RESEARCH + LOCAL_FAULT_PROFILE; SUPPORTING_LOCATOR: packets/CORE-04.md claim ledger CLM-C04-002; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: 必須capabilityとprohibitionはhard constraintとしてcost/latency等のsoft objectiveより先に評価する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C04-003; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C04-003; SOURCE_OR_EXPERIMENT_ID: CORE-02 DIRECT DEPENDENCY; SUPPORTING_LOCATOR: packets/CORE-04.md claim ledger CLM-C04-003; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: source routeはmodel routeから分離し、authority、freshness、permission、versionを満たさなければ回答routeを停止または縮退する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C04-004; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C04-004; SOURCE_OR_EXPERIMENT_ID: CORE-03 DIRECT DEPENDENCY; SUPPORTING_LOCATOR: packets/CORE-04.md claim ledger CLM-C04-004; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: tool routeはread-only、write、side effectを分離し、write経路のavailabilityだけでなくauthorizationとreadbackを要求する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C04-005; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C04-005; SOURCE_OR_EXPERIMENT_ID: CORE-03 DIRECT DEPENDENCY + LOCAL_FIXTURE; SUPPORTING_LOCATOR: packets/CORE-04.md claim ledger CLM-C04-005; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: stateful taskのroute変更はtrust boundaryであり、artifact ID/version/digest、checkpoint、receiptが欠けるhandoffを実行可能routeとして扱わない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C04-006; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C04-006; SOURCE_OR_EXPERIMENT_ID: DIRECT_INTERNAL + OSS + INDEPENDENT_OPERATION + LOCAL_FAULT_PROFILE; SUPPORTING_LOCATOR: packets/CORE-04.md claim ledger CLM-C04-006; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: fallbackは透過的retryではなく、失うcapability、許容output、再検証、stop/escalationを持つ新しいcontractである; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C04-007; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C04-007; SOURCE_OR_EXPERIMENT_ID: DIRECT_INTERNAL + RESEARCH + INDEPENDENT_OPERATION + LOCAL_FAULT_PROFILE; SUPPORTING_LOCATOR: packets/CORE-04.md claim ledger CLM-C04-007; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: routerは選択精度だけでなく、downstream acceptance、capability loss、high-risk tail、誤route、retry loopで評価する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C04-008; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C04-008; SOURCE_OR_EXPERIMENT_ID: DIRECT_INTERNAL + LOCAL_FAULT_PROFILE; SUPPORTING_LOCATOR: packets/CORE-04.md claim ledger CLM-C04-008; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: fixed route、manual escalation、read-only fallback、batch queue、明示loss付きprovider switchを代替として残す; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-001; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-001; SOURCE_OR_EXPERIMENT_ID: S018 59978–60825; S056 405250–406267; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-001; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: read/draftとwrite/send/delete/shareを別operation classにし、write前に明示境界を置く; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-002; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-002; SOURCE_OR_EXPERIMENT_ID: S026 96739–97237; S027 102536–102680; OWASP ACS 2026-09-01; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-002; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: permissionはtool利用可否だけでなくprincipal/resource/operation/condition/time/delegationへscopeする; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-003; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-003; SOURCE_OR_EXPERIMENT_ID: S018 60562–60880; S054 382862–382961; local fixture; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-003; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: dry-runは実行予定target、arguments、差分、blast radius、検証法を生成し、実行と同じcanonical operationから派生させる; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-004; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-004; SOURCE_OR_EXPERIMENT_ID: OWASP Lies-in-the-Loop; Microsoft HAI G9/G10/G16; EU AI Act Art.14; TST-C05-05/07; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-004; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: confirmationは実行直前のtrusted/versioned action summaryへbindし、対象・差分変更時は失効させる; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-005; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-005; SOURCE_OR_EXPERIMENT_ID: CORE-01 CLM-C01-005; CORE-03 cancel/commit profile; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-005; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: model/toolのsuccess発話を完了とせず、external receiptとfinal-state readbackを要求する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-006; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-006; SOURCE_OR_EXPERIMENT_ID: AWS Builders' Library; Stripe idempotency docs; CORE-03/04 profiles; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-006; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: retry可否はoperation identity、idempotency key、parameter digest、dedup保持期限、observed external state、attempt historyから決める; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-007; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-007; SOURCE_OR_EXPERIMENT_ID: AWS retry semantics; ADK #6732; CE-C05-003; TST-C05-08/09; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-007; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: idempotency非対応toolへblind retryせず、readback、single-flight、dedup ledger、manual reconciliationのいずれかへ縮退する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-008; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-008; SOURCE_OR_EXPERIMENT_ID: CORE-03 Temporal/LangGraph evidence; TST-C05-10; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-008; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: compensationはforward実行前に登録し、実行後に結果をread backする。ただし元状態への完全復元は別検証とする; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-009; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-009; SOURCE_OR_EXPERIMENT_ID: S018 59092–61076; CE-C05-002; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-009; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: undo可否はoperationごとにNONE/PARTIAL/FULL/UNKNOWNと期限・副作用を記録し、UI上のundo存在を完全回復とみなさない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-010; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-010; SOURCE_OR_EXPERIMENT_ID: EU AI Act Art.14; NIST AI 600-1; S051/S055/S056; CORE-01/03; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-010; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: human escalationには停止理由、現在のcommit state、証拠、残留risk、安全な選択肢、期限、ownerを渡す; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C05-011; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C05-011; SOURCE_OR_EXPERIMENT_ID: S019 65120–66277; ADK #6732; CORE-01/03/04; SUPPORTING_LOCATOR: packets/CORE-05.md claim ledger CLM-C05-011; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: action evidenceはproposal、approval、attempt、receipt、readback、acceptanceを分離し、同一request/operation IDでjoinする; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-001; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-001; SOURCE_OR_EXPERIMENT_ID: S045 manifest; CORE-01/06 dependency; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-001; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: release判定はcandidate config、dataset、scorer、judge、rubric、environment、resultの各versionを結ぶEvaluation Contractに基づく; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-002; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-002; SOURCE_OR_EXPERIMENT_ID: S013/S014/S053 manifest; CE-C07-001/003; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-002; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: golden datasetは対象task分布を代表するが、全運用条件の完全な代理にはならない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-003; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-003; SOURCE_OR_EXPERIMENT_ID: S029/S045/S054 manifest; CORE-12 route; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-003; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: 過去のfailureとnear missはfailure corpusへ固定し、candidateごとにregression gateを通す; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-004; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-004; SOURCE_OR_EXPERIMENT_ID: CORE-02 source/freshness contract; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-004; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: freshness依存caseは静的golden setから分離し、source snapshotとeffective dateを持つ; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-005; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-005; SOURCE_OR_EXPERIMENT_ID: CE-C07-001/003; Frozen requirement; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-005; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: hidden holdoutは作成・tuning・prompt revisionから隔離し、漏洩疑い時は合格証拠を失効させる; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-005; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C07-007; SOURCE_OR_EXPERIMENT_ID: EXT-C07-007; SUPPORTING_LOCATOR: inherited evidence record EXT-C07-007 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C07-006; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-006; SOURCE_OR_EXPERIMENT_ID: S013/S014/S053/S054 manifest; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-006; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: deterministicに検証できるschema、citation、calculation、code、artifact条件をLLM judgeへ委ねない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-007; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-007; SOURCE_OR_EXPERIMENT_ID: S013/S014/S053 manifest; CE-C07-002; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-007; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: LLM judgeはjudge ID/version、prompt、rubric、sampling、position/order、abstention、human adjudicationを記録する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C07-006; SOURCE_OR_EXPERIMENT_ID: EXT-C07-006; SUPPORTING_LOCATOR: inherited evidence record EXT-C07-006 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C07-008; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-008; SOURCE_OR_EXPERIMENT_ID: CE-C07-004; CORE-04 risk-tail carry; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-008; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: overall averageだけで合格させず、critical slice、worst-case、failure count、varianceを別gateにする; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-009; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-009; SOURCE_OR_EXPERIMENT_ID: Frozen acceptance TST-C07-06; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-009; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: safety評価はunsafe complianceとover-refusalを対で測り、拒否率だけを安全性としない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-010; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-010; SOURCE_OR_EXPERIMENT_ID: S039/S049 manifest; CORE-06 drift carry; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-010; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: non-deterministic taskは単発scoreでなく反復run、variance、pass^k等を用途に応じて記録する; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-011; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-011; SOURCE_OR_EXPERIMENT_ID: S053/S054/S056 manifest; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-011; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: Japanese business、long-context、RAG/citation、tool action、coding、spreadsheet/multimodalを一つのoverall scoreへ潰さない; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-012; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-INT-C07-012; SOURCE_OR_EXPERIMENT_ID: CE-C07-001..004; SUPPORTING_LOCATOR: packets/CORE-07.md claim ledger CLM-C07-012; cited dependency/manifest as written; RELATION: 本辞典の契約化・依存継承: judge-human disagreement、invalid oracle、flaky result、contamination疑いは自動平均せず、保留・再測定・human adjudicationへ送る; SCOPE_AND_LIMIT: 内部source/依存claimの原典・direct span不足は未解決。実験・観測や外部の結論に読み替えない; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY_OR_SYNTHESIS

• CLAIM_ID: CLM-C07-012; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C07-006; SOURCE_OR_EXPERIMENT_ID: EXT-C07-006; SUPPORTING_LOCATOR: inherited evidence record EXT-C07-006 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C07-012; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C07-007; SOURCE_OR_EXPERIMENT_ID: EXT-C07-007; SUPPORTING_LOCATOR: inherited evidence record EXT-C07-007 below; source title/URL and bounded proposition; RELATION: partial support / bounded counterevidence, not complete contract guarantee; SCOPE_AND_LIMIT: preserve source-specific limitation in transcribed record; exact archival span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

Different packet schemas are deliberately not flattened; records retain original source/version, proposition and limitation fields. EXT-C03-006 (local runtime test) is deliberately excluded from external bindings.

• EXT-C02-003: | EXT-C02-003 | PEER_REVIEWED_RESEARCH + OSS | Es et al., RAGAS, EACL 2024 Demo, DOI 10.18653/v1/2024.eacl-demo.16, https://aclanthology.org/2024.eacl-demo.16/ | retrieval context、faithful utilization、generation qualityを別dimensionへ分ける。CLM-C02-002 | reference-free LLM metricの信頼性を無条件に仮定しない | checked 2026-09-05 |

• EXT-C02-004: | EXT-C02-004 | PEER_REVIEWED_RESEARCH + OSS | Saad-Falcon et al., ARES, NAACL 2024, DOI 10.18653/v1/2024.naacl-long.20, https://aclanthology.org/2024.naacl-long.20/ | context relevance、answer faithfulness、answer relevanceを分離し、少量human labelとsynthetic training dataを用いる | 8 knowledge-intensive taskでの結果。任意の社内日本語文書へ精度を外挿しない | checked 2026-09-05 |

• EXT-C02-005: | EXT-C02-005 | PEER_REVIEWED_RESEARCH + OSS | Ru et al., RAGChecker, NeurIPS 2024 Datasets and Benchmarks, DOI 10.52202/079017-0692, https://proceedings.neurips.cc/paper_files/paper/2024/hash/27245589131d17368cccdfa990cbf16e-Abstract-Datasets_and_Benchmarks_Track.html | retriever/generator双方をfine-grained metricsで診断。CLM-C02-002 | meta-evaluationの範囲外でhuman judgment相関を保証しない | checked 2026-09-05 |

• EXT-C02-006: | EXT-C02-006 | PEER_REVIEWED_RESEARCH | Niu et al., RAGTruth, ACL 2024, DOI 10.18653/v1/2024.acl-long.585, https://aclanthology.org/2024.acl-long.585/ | RAG応答にもretrieved contentにunsupported/contradictoryなclaimが残る。CLM-C02-005 | 約18,000応答のcorpus/domain/model構成に依存 | checked 2026-09-05 |

• EXT-C02-010: | EXT-C02-010 | PEER_REVIEWED_INDUSTRY_RESEARCH | Maheshwari et al., CiteFix, ACL Industry 2025, DOI 10.18653/v1/2025.acl-industry.23, https://aclanthology.org/2025.acl-industry.23/ | generated citationをretrieved articleとcross-checkするpost-validationが独立に必要。CLM-C02-005 | 単一RAG productでの手法/結果。全citation UIやdomainへ改善率を外挿しない | checked 2026-09-05 |

• EXT-C02-011: | EXT-C02-011 | PEER_REVIEWED_RESEARCH | Choi et al., CiteGuard, ACL 2026, DOI 10.18653/v1/2026.acl-long.282, https://aclanthology.org/2026.acl-long.282/ | citation evaluationをattribution alignmentとして扱い、LLM-as-judge単独の信頼性限界とretrieval-aware validationを示す。CLM-C02-005 | scientific-writing/CiteME中心。企業文書のcitation correctness/completenessは別fixtureで測る | checked 2026-09-05 |

• EXT-C02-009: | EXT-C02-009 | PEER_REVIEWED_RESEARCH + OSS | Wu et al., LongMemEval, ICLR 2025, https://web.cs.ucla.edu/~kwchang/bibliography/wu2025longmemeval/ | long-term memoryをinformation extraction、multi-session reasoning、temporal reasoning、knowledge updates、abstentionへ分け、indexing/retrieval/readingの段階を示す。CLM-C02-006/010 | 500 curated questionsのbenchmark。企業task stateや製品memoryのprivacy/delete保証を直接扱わない | checked 2026-09-05 |

• EXT-C02-008: | EXT-C02-008 | PEER_REVIEWED_RESEARCH | Ouyang et al., HoH, ACL 2025, DOI 10.18653/v1/2025.acl-long.301, https://aclanthology.org/2025.acl-long.301/ | outdated informationがcurrent情報と共存してもretrieval/generationの両側でaccuracyを下げ得る。CLM-C02-005/007/009 | benchmark構築と評価domainに限定。特定providerのcache/index伝播原因を証明しない | checked 2026-09-05 |

• EXT-C03-005: | EXT-C03-005 | Apache Airflow 3.3.1 XCom docs | XComは小さいtask間data向けで、大値を渡さない。failed task retry時にXComはclearされ、retry跨ぎの永続stateには使えない。large/high-volumeはobject storage backend推奨 | Airflow固有。artifactの組織保持期間・privacy値は定めない |

• EXT-C03-003: | EXT-C03-003 | Temporal official Activity Definition / Retry Policy, accessed 2026-09-06 | Activityは再実行され得て、内部の一部が複数回完了し得る。失敗局所化には粒度を小さくし、writeはidempotentにする。ただしEvent History増大とのtrade-offがある | Temporal実装pattern。exactly-once side effectではなく、他runtimeへの自動保証でもない |

• EXT-C03-002: | EXT-C03-002 | LangGraph official INVALID_CONCURRENT_GRAPH_UPDATE, accessed 2026-09-06 | fan-out nodeが同一state keyを並行更新するとmergeが曖昧になり、reducer定義を要求する | rolling author docs。全backendのtransaction安全性やsemantic merge正しさは保証しない |

• EXT-C03-004: | EXT-C03-004 | Temporal official recovery/Saga guide, accessed 2026-09-06 | response lossで外部side effectだけ成立し得るため、補償をforward call前に登録し、idempotent compensationをLIFO実行する | example/pattern。transaction非対応の任意systemで完全修復を証明しない。補償詳細はCORE-05へ送る |

• EXT-C03-001: | EXT-C03-001 | ADaPT, arXiv:2311.05772 v2 | executorがsubtaskを実行できない時だけ再帰分解し、task complexityとexecutor capabilityへ適応する。ALFWorld/WebShop/TextCraftで改善を報告 | 三benchmarkの研究結果。enterprise全taskの固定stage数・token閾値は導かない |

• EXT-C07-007: | EXT-C07-007 | EXTERNAL_SOURCE / RESEARCH_PREPRINT | Dekoninck et al. / ConStat: Performance-Based Contamination Detection in Large Language Models | https://arxiv.org/abs/2405.16281 | arXiv:2405.16281; accessed 2026-09-09; primary/reference benchmarks and rephrased/synthetic same-distribution comparison | PM-C07-GPT-008; bounded contamination-detection method; does not prove contamination in any named GPT model |

• EXT-C07-006: | EXT-C07-006 | EXTERNAL_SOURCE / PEER_REVIEWED_RESEARCH | Shi et al. / Judging the Judges: A Systematic Study of Position Bias in LLM-as-a-Judge | https://aclanthology.org/2025.ijcnlp-long.18/ | ACL-IJCNLP 2025; 15 judges, MTBench/DevBench, >150k judgments; order/permutation analyses | PM-C07-GPT-005; independent bounded evidence of variable position bias; not an OpenAI-product defect or universal judge ranking |

BASE: Drive continuation state 1mJcuA_4iiumf1RZRADMyyBUfl7kT-pMj, modified 2026-09-13T01:57:19.818Z; local-preserved materials, not fresh Library read.

METHOD: Existing packet §3/§4.2 only; no new external read or live test. Historical access dates and source versions below are inherited, not reverified today. Publication remains gated on source snapshots, exact spans and first-party recovery. Core/Product/Organization claims are not merged.

• EVIDENCE_ID: EXT-C01-001; TYPE: RESEARCH; SOURCE / VERSION: Yao et al., “τ-bench,” arXiv:2406.12045 (2024), https://arxiv.org/abs/2406.12045; SUPPORTING CLAIM: 会話末のdatabase stateをgoal stateと比較し、pass^kで反復信頼性を測る。CLM-C01-005を直接支持; COUNTEREVIDENCE / LIMIT: benchmark domainとsimulated userに限定。実組織の全業務へ成功率を外挿しない; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-002; TYPE: OSS_PRACTICE; SOURCE / VERSION: LangGraph Persistence docs, https://docs.langchain.com/oss/python/langgraph/persistence; SUPPORTING CLAIM: checkpointerのthread stateとstoreのcross-thread durable dataを分離。CLM-C01-001/002/006を支持; COUNTEREVIDENCE / LIMIT: framework実装例であり、Operating Contractの十分条件ではない; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-003; TYPE: OSS_PRACTICE; SOURCE / VERSION: Temporal Workflow Execution / Event History docs, https://docs.temporal.io/workflow-execution ; https://docs.temporal.io/workflow-execution/event; SUPPORTING CLAIM: Event Historyはappend-onlyでdurableに保持され、失敗時は最新記録地点からreplay/resumeする。Workflow ID・Run IDを分け、Open/ClosedとRunning/Paused/Completed/Failed等を分離する; COUNTEREVIDENCE / LIMIT: deterministic replayとActivity境界が必要。履歴上のActivity完了は外部業務受入を意味せず、任意のLLM副作用を自動的にexactly-once化しない; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-004; TYPE: OSS_PRACTICE; SOURCE / VERSION: Prefect States docs / server schema, https://docs.prefect.io/v3/concepts/states ; https://docs.prefect.io/v3/api-ref/python/prefect-server-schemas-states; SUPPORTING CLAIM: state name/type/terminal性を分け、Scheduled/Running/Paused/Failed/Crashed/Completed等を別状態で扱う。stateのdata/resultはartifact側へ分離され得る。CLM-C01-010を支持; COUNTEREVIDENCE / LIMIT: PrefectのCOMPLETEDは関数return semanticsであり、flow内task失敗やartifactの業務正しさを単独では保証しない; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-005; TYPE: RESEARCH_REVIEW; SOURCE / VERSION: Goddard, Roudsari, Wyatt, “Automation bias: a systematic review,” Int J Med Inform. 2012, https://pmc.ncbi.nlm.nih.gov/articles/PMC3240751/; SUPPORTING CLAIM: automation biasが複数分野で比較的頑健に観測され、人間確認の存在だけでは誤助言追随を排除できない。CLM-C01-009を支持; COUNTEREVIDENCE / LIMIT: 医療DSS中心で、現代LLM業務UIへ効果量を直接移植しない; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-006; TYPE: OSS_ISSUE / FAILURE_REPORT; SOURCE / VERSION: langchain-ai/langgraph #8039 (opened 2026-06-10), https://github.com/langchain-ai/langgraph/issues/8039; SUPPORTING CLAIM: crash recovery時にnode side effectが二重化した再現例。checkpointだけではidempotencyを保証しない; COUNTEREVIDENCE / LIMIT: open issueの報告であり、全version・全hostの一般挙動とは断定しない; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-007; TYPE: OSS_ISSUE / INDEPENDENT_OPERATION; SOURCE / VERSION: langchain-ai/langgraph #7417 (opened 2026-04-05), https://github.com/langchain-ai/langgraph/issues/7417; SUPPORTING CLAIM: 約180秒超のtool callがcheckpointから再配信され、重複実行・費用増となった実運用報告; COUNTEREVIDENCE / LIMIT: LangGraph Cloud/特定構成の報告。再現範囲を限定する; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-008; TYPE: STANDARD; SOURCE / VERSION: W3C, PROV-DM, W3C Recommendation (2013), https://www.w3.org/TR/prov-dm/; SUPPORTING CLAIM: entity/activity/agent、usage/generation/derivation、responsibility、delegation、plan、timeを区別し、input/output lineageと責任主体の基礎を与える。CLM-C01-003/004/007を部分支持; COUNTEREVIDENCE / LIMIT: domain-agnostic provenance modelであり、業務上の完了条件、許可scope、handoff受領を規定しない; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-009; TYPE: OPEN_STANDARD / OSS_PRACTICE; SOURCE / VERSION: OpenLineage Object Model / Core Spec 1.53.0, https://openlineage.io/docs/spec/object-model/; SUPPORTING CLAIM: Job、Run、input/output Dataset、START/COMPLETE/FAIL/ABORT、source location/versionを分離。実行同定とinput/output lineageを支持; COUNTEREVIDENCE / LIMIT: pipeline observabilityのschemaであり、COMPLETEはbusiness acceptanceやartifact qualityを保証しない; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-010; TYPE: OPEN_STANDARD / PROTOCOL; SOURCE / VERSION: A2A Protocol Specification 1.0.0, https://a2a-protocol.org/v1.0.0/specification/ ; repository release v1.0.1 (3303592, 2026-05-26), https://github.com/a2aproject/A2A/releases/tag/v1.0.1; SUPPORTING CLAIM: Task ID、context ID、status/state/timestamp、artifact、history、metadataを定義し、GetTaskはstatus/artifacts/historyを分けて返す。Messagesはstatus/clarification用で、task outputはArtifactsへ置くことを推奨する。CLM-C01-003/004/007を部分支持; COUNTEREVIDENCE / LIMIT: historyは任意で全message保存・再配送を保証せず、critical informationの信頼できる配送路とみなせない。v1.0.1はTaskStatus値・HTTP binding等の修正のみで、source authority・business acceptance・receiptは規定しない; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-011; TYPE: OSS_IMPLEMENTATION_DOC + RELEASE_PIN; SOURCE / VERSION: OpenAI Agents SDK Python v0.22.0, tag v0.22.0, release commit 4df9ecf, released 2026-08-19, https://github.com/openai/openai-agents-python/releases ; Handoffs docs, https://openai.github.io/openai-agents-python/handoffs/; SUPPORTING CLAIM: handoff()はrecipient、typed input_type、input_filter、on_handoff、is_enabled、history nesting等を設定できる実装例。v0.22.0 releaseはcheckpoint usage isolationとhandoff graph expansionも記録する; COUNTEREVIDENCE / LIMIT: 実装が渡すpayload/routingと、source authority、completed/not-done、scope認可、receiver receipt、business readbackは別契約。release pinは実装snapshotの識別で、全機能の導入versionやCore充足を意味しない; FRESHNESS: release/docs checked 2026-09-05

• EVIDENCE_ID: EXT-C01-012; TYPE: OSS_IMPLEMENTATION_DOC + RELEASE_PIN; SOURCE / VERSION: Microsoft Semantic Kernel Handoff Orchestration, https://learn.microsoft.com/en-us/semantic-kernel/frameworks/agent/agent-orchestration/handoff ; repository Python tag python-1.44.1, release commit 6e10225, released 2026-08-06; comparison .NET tag dotnet-1.80.1, commit d8ec449, released 2026-09-03, https://github.com/microsoft/semantic-kernel/releases; SUPPORTING CLAIM: OrchestrationHandoffsでsource→targetと条件説明を定義し、response/human callbackとruntimeを別に持つ。Python/.NETのmaintained implementation snapshotを固定する; COUNTEREVIDENCE / LIMIT: docs自身がAgent Orchestrationをexperimentalと明記。routing、callback、runtimeはsource snapshot、completed/not-done、scope、receipt、business readbackを自動付与しない; FRESHNESS: release/docs checked 2026-09-05

• EVIDENCE_ID: EXT-C01-013; TYPE: OSS_ISSUE / DESIGN_COUNTEREVIDENCE; SOURCE / VERSION: a2aproject/A2A #1313 (opened 2025-12-15), https://github.com/a2aproject/A2A/issues/1313; SUPPORTING CLAIM: MessageとArtifactの境界が曖昧で実装が分岐するというmaintainer ecosystem内の問題提起; COUNTEREVIDENCE / LIMIT: closed/consolidated proposalであり、全A2A implementationの不具合を意味しない; FRESHNESS: checked 2026-09-05

• EVIDENCE_ID: EXT-C01-014; TYPE: OSS_ISSUE / DESIGN_QUESTION; SOURCE / VERSION: a2aproject/A2A #884 (opened 2025-07-18), https://github.com/a2aproject/A2A/issues/884; SUPPORTING CLAIM: supervisor/clientとserverのどちらがcontext IDを管理するかという実装上の不明瞭さを示す; COUNTEREVIDENCE / LIMIT: 未解決相談を規範としない。context ownershipを契約で明示すべき理由としてのみ使う; FRESHNESS: checked 2026-09-05

• CLAIM_ID: CLM-C01-001; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C01-002; EXT-C01-003; SOURCE_OR_EXPERIMENT_ID: EXT-C01-002; EXT-C01-003; SUPPORTING_LOCATOR: thread state / cross-thread store; Workflow Execution vs Run ID; canonical URLs in evidence records above; RELATION: 応答とtask lifecycleの分離; SCOPE_AND_LIMIT: 実装例であり普遍的十分条件ではない; inherited 2026-09-05 record, exact source snapshot/span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C01-001; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C01-001; SOURCE_OR_EXPERIMENT_ID: EXT-C01-002; EXT-C01-003 + existing packet claim; SUPPORTING_LOCATOR: packets/CORE-01.md §3 CLM-C01-001; §8 Operating Contract schema; RELATION: 本辞典の契約化・統合判断; SCOPE_AND_LIMIT: 外部原典自身の結論や自測として表示しない。internal observation/raw experiment originは未回収のまま保持; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS / UPSTREAM_RECOVERY_ACTIVE

• CLAIM_ID: CLM-C01-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C01-002; EXT-C01-003; SOURCE_OR_EXPERIMENT_ID: EXT-C01-002; EXT-C01-003; SUPPORTING_LOCATOR: checkpointer/store; Event History replay/resume; canonical URLs in evidence records above; RELATION: 再取得可能なstateの部分支持; SCOPE_AND_LIMIT: 会話からの独立取得を一律に標準必須とするものではない; inherited 2026-09-05 record, exact source snapshot/span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C01-002; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C01-002; SOURCE_OR_EXPERIMENT_ID: EXT-C01-002; EXT-C01-003 + existing packet claim; SUPPORTING_LOCATOR: packets/CORE-01.md §3 CLM-C01-002; §8 Operating Contract schema; RELATION: 本辞典の契約化・統合判断; SCOPE_AND_LIMIT: 外部原典自身の結論や自測として表示しない。internal observation/raw experiment originは未回収のまま保持; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS / UPSTREAM_RECOVERY_ACTIVE

• CLAIM_ID: CLM-C01-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C01-008; EXT-C01-009; EXT-C01-010; SOURCE_OR_EXPERIMENT_ID: EXT-C01-008; EXT-C01-009; EXT-C01-010; SUPPORTING_LOCATOR: entity/activity/agent; Job/Run/input Dataset; Task/context/status; canonical URLs in evidence records above; RELATION: input lineageとidentityの部分支持; SCOPE_AND_LIMIT: source authority・許可scope全体は本辞典の合成; inherited 2026-09-05 record, exact source snapshot/span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C01-003; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C01-003; SOURCE_OR_EXPERIMENT_ID: EXT-C01-008; EXT-C01-009; EXT-C01-010 + existing packet claim; SUPPORTING_LOCATOR: packets/CORE-01.md §3 CLM-C01-003; §8 Operating Contract schema; RELATION: 本辞典の契約化・統合判断; SCOPE_AND_LIMIT: 外部原典自身の結論や自測として表示しない。internal observation/raw experiment originは未回収のまま保持; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS / UPSTREAM_RECOVERY_ACTIVE

• CLAIM_ID: CLM-C01-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C01-008; EXT-C01-009; EXT-C01-010; SOURCE_OR_EXPERIMENT_ID: EXT-C01-008; EXT-C01-009; EXT-C01-010; SUPPORTING_LOCATOR: generation; output Dataset; Artifact/Part; canonical URLs in evidence records above; RELATION: output artifactとlineageの部分支持; SCOPE_AND_LIMIT: 保存先・検証・更新可否を一括保証しない; inherited 2026-09-05 record, exact source snapshot/span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C01-004; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C01-004; SOURCE_OR_EXPERIMENT_ID: EXT-C01-008; EXT-C01-009; EXT-C01-010 + existing packet claim; SUPPORTING_LOCATOR: packets/CORE-01.md §3 CLM-C01-004; §8 Operating Contract schema; RELATION: 本辞典の契約化・統合判断; SCOPE_AND_LIMIT: 外部原典自身の結論や自測として表示しない。internal observation/raw experiment originは未回収のまま保持; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS / UPSTREAM_RECOVERY_ACTIVE

• CLAIM_ID: CLM-C01-005; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C01-001; EXT-C01-004; SOURCE_OR_EXPERIMENT_ID: EXT-C01-001; EXT-C01-004; SUPPORTING_LOCATOR: τ-bench final database state and pass^k; Prefect terminal state/result; canonical URLs in evidence records above; RELATION: 最終状態評価の支持とruntime completionの限界; SCOPE_AND_LIMIT: benchmark成功率を業務へ外挿しない; inherited 2026-09-05 record, exact source snapshot/span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C01-005; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C01-005; SOURCE_OR_EXPERIMENT_ID: EXT-C01-001; EXT-C01-004 + existing packet claim; SUPPORTING_LOCATOR: packets/CORE-01.md §3 CLM-C01-005; §8 Operating Contract schema; RELATION: 本辞典の契約化・統合判断; SCOPE_AND_LIMIT: 外部原典自身の結論や自測として表示しない。internal observation/raw experiment originは未回収のまま保持; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS / UPSTREAM_RECOVERY_ACTIVE

• CLAIM_ID: CLM-C01-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C01-002; EXT-C01-003; EXT-C01-006; EXT-C01-007; SOURCE_OR_EXPERIMENT_ID: EXT-C01-002; EXT-C01-003; EXT-C01-006; EXT-C01-007; SUPPORTING_LOCATOR: checkpoint/replay; issues #8039/#7417 duplicate effects; canonical URLs in evidence records above; RELATION: checkpointの部分支持と重複副作用反証; SCOPE_AND_LIMIT: 報告当時の特定構成。現在全versionの欠陥としない; inherited 2026-09-05 record, exact source snapshot/span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C01-006; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C01-006; SOURCE_OR_EXPERIMENT_ID: EXT-C01-002; EXT-C01-003; EXT-C01-006; EXT-C01-007 + existing packet claim; SUPPORTING_LOCATOR: packets/CORE-01.md §3 CLM-C01-006; §8 Operating Contract schema; RELATION: 本辞典の契約化・統合判断; SCOPE_AND_LIMIT: 外部原典自身の結論や自測として表示しない。internal observation/raw experiment originは未回収のまま保持; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS / UPSTREAM_RECOVERY_ACTIVE

• CLAIM_ID: CLM-C01-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C01-008; EXT-C01-010; EXT-C01-011; EXT-C01-012; EXT-C01-013; EXT-C01-014; SOURCE_OR_EXPERIMENT_ID: EXT-C01-008; EXT-C01-010; EXT-C01-011; EXT-C01-012; EXT-C01-013; EXT-C01-014; SUPPORTING_LOCATOR: delegation/responsibility; Task/history/Artifacts; handoff payload/callback; A2A issues; canonical URLs in evidence records above; RELATION: handoff fieldの部分支持とhistory/ownership限界; SCOPE_AND_LIMIT: 全fieldの標準化・受領・business readback保証ではない; inherited 2026-09-05 record, exact source snapshot/span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C01-007; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C01-007; SOURCE_OR_EXPERIMENT_ID: EXT-C01-008; EXT-C01-010; EXT-C01-011; EXT-C01-012; EXT-C01-013; EXT-C01-014 + existing packet claim; SUPPORTING_LOCATOR: packets/CORE-01.md §3 CLM-C01-007; §8 Operating Contract schema; RELATION: 本辞典の契約化・統合判断; SCOPE_AND_LIMIT: 外部原典自身の結論や自測として表示しない。internal observation/raw experiment originは未回収のまま保持; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS / UPSTREAM_RECOVERY_ACTIVE

• CLAIM_ID: CLM-C01-008; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C01-003; EXT-C01-006; EXT-C01-007; SOURCE_OR_EXPERIMENT_ID: EXT-C01-003; EXT-C01-006; EXT-C01-007; SUPPORTING_LOCATOR: Temporal Activity boundary; crash/long-call replay issue reports; canonical URLs in evidence records above; RELATION: 副作用境界とcheckpoint限界; SCOPE_AND_LIMIT: 事前許可宣言は本辞典の規範的合成、実装の自動保証ではない; inherited 2026-09-05 record, exact source snapshot/span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C01-008; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C01-008; SOURCE_OR_EXPERIMENT_ID: EXT-C01-003; EXT-C01-006; EXT-C01-007 + existing packet claim; SUPPORTING_LOCATOR: packets/CORE-01.md §3 CLM-C01-008; §8 Operating Contract schema; RELATION: 本辞典の契約化・統合判断; SCOPE_AND_LIMIT: 外部原典自身の結論や自測として表示しない。internal observation/raw experiment originは未回収のまま保持; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS / UPSTREAM_RECOVERY_ACTIVE

• CLAIM_ID: CLM-C01-009; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C01-005; SOURCE_OR_EXPERIMENT_ID: EXT-C01-005; SUPPORTING_LOCATOR: Automation bias systematic review; canonical URLs in evidence records above; RELATION: human gateだけでは誤助言追随を排除できない; SCOPE_AND_LIMIT: 医療DSS中心。LLM効果量や検証手順全体の直接証明ではない; inherited 2026-09-05 record, exact source snapshot/span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C01-009; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C01-009; SOURCE_OR_EXPERIMENT_ID: EXT-C01-005 + existing packet claim; SUPPORTING_LOCATOR: packets/CORE-01.md §3 CLM-C01-009; §8 Operating Contract schema; RELATION: 本辞典の契約化・統合判断; SCOPE_AND_LIMIT: 外部原典自身の結論や自測として表示しない。internal observation/raw experiment originは未回収のまま保持; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS / UPSTREAM_RECOVERY_ACTIVE

• CLAIM_ID: CLM-C01-010; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C01-003; EXT-C01-004; SOURCE_OR_EXPERIMENT_ID: EXT-C01-003; EXT-C01-004; SUPPORTING_LOCATOR: execution status; state name/type/terminality; canonical URLs in evidence records above; RELATION: 未完了状態の分離を部分支持; SCOPE_AND_LIMIT: unknownと安全な次行動の契約は本辞典合成; inherited 2026-09-05 record, exact source snapshot/span not newly verified; PUBLICATION_STATUS: RECOVERY_ACTIVE_PARTIAL

• CLAIM_ID: CLM-C01-010; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C01-010; SOURCE_OR_EXPERIMENT_ID: EXT-C01-003; EXT-C01-004 + existing packet claim; SUPPORTING_LOCATOR: packets/CORE-01.md §3 CLM-C01-010; §8 Operating Contract schema; RELATION: 本辞典の契約化・統合判断; SCOPE_AND_LIMIT: 外部原典自身の結論や自測として表示しない。internal observation/raw experiment originは未回収のまま保持; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS / UPSTREAM_RECOVERY_ACTIVE

Coverage: 10/10 CORE-01 claims now have explicit central external-support and synthesis relations (20 rows). This is relation coverage, not 10/10 publication readiness. Internal S-log observations and past 6/6・12/12 compiler tests remain separate, unpromoted; no raw artifact or result was reconstructed.

REGISTRY_ID: EAID-SOURCE-REG-v0.6

STATUS: CORE06_BACKFILL + CORE02/03/04_GPT_PRODUCT_MAPPING / GLOBAL_BACKFILL_REQUIRED

POLICY: PROVENANCE_POLICY.md

CREATED_AT: 2026-09-07

この台帳は公開原稿の脚注・参考文献・観測／実験資料一覧を生成する正本とする。S001〜S063、packet、chat、registerはlocatorまたはcontainerにはなり得るが、外部情報の原典を置き換えない。

• SOURCE_ID: EXT-C06-001; TYPE: standard; AUTHOR_OR_ORG: SPDX Project / Linux Foundation; TITLE: SPDX Specification 3.0.1 — AI Profile; PUBLICATION_OR_REPOSITORY: SPDX Specification; DATE: N/D; VERSION_TAG_COMMIT: 3.0.1; DOI_OR_CANONICAL_URL: https://spdx.github.io/spdx-spec/v3.0.1/model/AI/AI/; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: AI Profile, Summary / Description / Profile conformance; CLAIM_IDS: CLM-C06-001/002; RELATION: supports standardized description of AI system/model artifacts and relationships; SCOPE_LIMIT: does not prescribe this dictionary's universal release-bundle field set; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C06-002; TYPE: standard/capability; AUTHOR_OR_ORG: OWASP Foundation / Ecma TC54; TITLE: Machine Learning Bill of Materials (ML-BOM); PUBLICATION_OR_REPOSITORY: CycloneDX; DATE: 2026 page copyright; VERSION_TAG_COMMIT: current capability page; spec family includes ECMA-424; DOI_OR_CANONICAL_URL: https://cyclonedx.org/capabilities/mlbom/; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Introduction; Highlights; Authoritative Guide; CLAIM_IDS: CLM-C06-001/002; RELATION: supports representation of models, datasets, configurations, dependencies and provenance; SCOPE_LIMIT: capability page does not establish a universal minimum field count; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C06-003; TYPE: author-maintained OSS documentation; AUTHOR_OR_ORG: MLflow Project / LF Projects; TITLE: Prompt Registry; PUBLICATION_OR_REPOSITORY: MLflow AI Platform documentation; DATE: 2025 page copyright; VERSION_TAG_COMMIT: latest docs read 2026-09-07; DOI_OR_CANONICAL_URL: https://mlflow.org/docs/latest/genai/prompt-registry/; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Key Benefits/Version Control; Model Configuration; Managing Model Configuration; Prompt Caching; CLAIM_IDS: CLM-C06-001/003/006; RELATION: prompt versions are immutable while attached model configuration is mutable; aliases can move; SCOPE_LIMIT: current OSS documentation, not a guarantee for other registries or hosted products; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C06-004; TYPE: author-maintained OSS documentation; AUTHOR_OR_ORG: Arize AI / Phoenix maintainers; TITLE: Prompt Management; PUBLICATION_OR_REPOSITORY: Phoenix documentation; DATE: N/D; VERSION_TAG_COMMIT: current docs read 2026-09-07; DOI_OR_CANONICAL_URL: https://arize.com/docs/phoenix/prompt-engineering/overview-prompts/prompt-management; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Prompt Management, Key benefits; CLAIM_IDS: CLM-C06-001/007; RELATION: supports prompt storage, modification, version tracking and tested iteration; SCOPE_LIMIT: does not prove tool/source/policy/environment are fixed in the same version; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C06-005; TYPE: practitioner book chapter; AUTHOR_OR_ORG: Pierre-Marie Coucke and Google SRE contributors; TITLE: Canarying Releases; PUBLICATION_OR_REPOSITORY: The Site Reliability Workbook; DATE: 2018; VERSION_TAG_COMMIT: web chapter; DOI_OR_CANONICAL_URL: https://sre.google/workbook/canarying-releases/; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: What Is Canarying; Requirements of a Canary Process; canary/control comparison; synthetic-load caveats; CLAIM_IDS: CLM-C06-008; RELATION: supports bounded population, evaluation integration and comparison against a control; SCOPE_LIMIT: operational guidance, not an organization-specific threshold or LLM evaluation guarantee; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C06-006; TYPE: peer-reviewed research article; AUTHOR_OR_ORG: Lingjiao Chen; Matei Zaharia; James Zou; TITLE: How Is ChatGPT's Behavior Changing Over Time?; PUBLICATION_OR_REPOSITORY: Harvard Data Science Review 6(2); DATE: 2024-03-12; VERSION_TAG_COMMIT: latest release #2; DOI 10.1162/99608f92.5317da47; DOI_OR_CANONICAL_URL: https://hdsr.mitpress.mit.edu/pub/y95zitmz/release/2; ACCESSED: 2026-09-19; SNAPSHOT_OR_DIGEST: local Markdown snapshot SHA256 117edae9…06bf3; arXiv v3 retained as historical version context; SUPPORTING_LOCATOR: lines 82–126, 185–203, 232–238, 969–993; CLAIM_IDS: CLM-C06-003/006; RELATION: counterevidence that one hosted service label can exhibit task-specific temporal drift; supports continuing application-level monitoring; SCOPE_LIMIT: March/June 2023 GPT-3.5/GPT-4 snapshots and selected tasks only; not a universal/current drift rate, backend-identity proof or current Gemini/Organization measurement; STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• SOURCE_ID: EXT-C06-007; TYPE: provider documentation; AUTHOR_OR_ORG: Google; TITLE: Use Gems in Gemini Apps; PUBLICATION_OR_REPOSITORY: Gemini Apps Help; DATE: N/D; VERSION_TAG_COMMIT: live page read 2026-09-07; DOI_OR_CANONICAL_URL: https://support.google.com/gemini/answer/15146780; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Create/edit/delete; Knowledge files; Drive file most-recent-version behavior; CLAIM_IDS: CLM-C06-006/010; PM-C06-GEM-001/002; RELATION: maps mutable Gem instructions and Knowledge dependency; SCOPE_LIMIT: public surface only; no tenant adoption, immutable history, semantic diff, composite digest or rollback proof; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C06-008; TYPE: provider documentation; AUTHOR_OR_ORG: Google; TITLE: Share a Gem from Gemini Apps; PUBLICATION_OR_REPOSITORY: Gemini Apps Help; DATE: N/D; VERSION_TAG_COMMIT: live page read 2026-09-07; DOI_OR_CANONICAL_URL: https://support.google.com/gemini/answer/16504957; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: sharing roles; editor capabilities; work/school controls; Drive storage; CLAIM_IDS: PM-C06-GEM-003; ORG-C06-001; RELATION: maps viewer/editor/owner and organization sharing control surfaces; SCOPE_LIMIT: editor privilege is not evidence of release approval or governance adoption; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C06-009; TYPE: provider documentation; AUTHOR_OR_ORG: Google Cloud; TITLE: Prompt management; PUBLICATION_OR_REPOSITORY: Gemini Enterprise Agent Platform documentation; DATE: 2026-09-02; VERSION_TAG_COMMIT: page last updated 2026-09-02 UTC; DOI_OR_CANONICAL_URL: https://docs.cloud.google.com/gemini-enterprise-agent-platform/reference/models/prompt-classes; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: create/create_version; get/get_version; list/list_versions; delete; restore_version; CLAIM_IDS: PM-C06-GEM-004/005; RELATION: maps prompt-component versioning, retrieval, deletion and restoration; SCOPE_LIMIT: does not prove deployment binding or full-system rollback of model/tool/source/policy/environment; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C06-010; TYPE: provider documentation; AUTHOR_OR_ORG: Google; TITLE: Models; PUBLICATION_OR_REPOSITORY: Gemini API documentation; DATE: 2026-09-04; VERSION_TAG_COMMIT: page last updated 2026-09-04 UTC; DOI_OR_CANONICAL_URL: https://ai.google.dev/gemini-api/docs/models; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Model version name patterns: Stable/Preview/Latest/Experimental; CLAIM_IDS: CLM-C06-003/006; PM-C06-GEM-006; RELATION: supports treating latest as a moving alias and version class as configuration evidence; SCOPE_LIMIT: exact backend build, UI routing, silent fallback and tenant rollout remain unobservable; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-041; TYPE: author-maintained OSS documentation / current readback; AUTHOR_OR_ORG: OpenFGA maintainers; TITLE: Search With Permissions; PUBLICATION_OR_REPOSITORY: OpenFGA documentation; DATE: 2026-09-07; VERSION_TAG_COMMIT: page last updated 2026-09-07; DOI_OR_CANONICAL_URL: https://openfga.dev/docs/interacting/search-with-permissions; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Search→Check; Changes-derived local index→Search→Check; ListObjects→Search; scenario table and cardinality guidance; CLAIM_IDS: CLM-C02-009; Q-C02-001; RELATION: supports bounded join-strategy and scale profile; SCOPE_LIMIT: OpenFGA is the authorization component, not a retriever/reranker; guidance does not certify every downstream path; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-042; TYPE: author-maintained OSS operations documentation / current readback; AUTHOR_OR_ORG: OpenFGA maintainers; TITLE: Running OpenFGA in Production; PUBLICATION_OR_REPOSITORY: OpenFGA documentation; DATE: 2026-09-07; VERSION_TAG_COMMIT: page last updated 2026-09-07; DOI_OR_CANONICAL_URL: https://openfga.dev/docs/best-practices/running-in-production; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: cache staleness trade-off; metrics/tracing; concurrency/resolution limits; max-results and timeout; CLAIM_IDS: CLM-C02-009; Q-C02-001; RELATION: supports operational freshness/scale fields in the live profile; SCOPE_LIMIT: deployment-specific values; does not prove retrieval exclusion or revocation SLA; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-043; TYPE: author-maintained OSS documentation / current readback; AUTHOR_OR_ORG: OpenFGA maintainers; TITLE: Authorization for Agents; PUBLICATION_OR_REPOSITORY: OpenFGA documentation; DATE: 2026-09-04; VERSION_TAG_COMMIT: page updated 2026-09-04; DOI_OR_CANONICAL_URL: https://openfga.dev/docs/modeling/agents; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: first-class agent principal; task-scoped grants; expiration/turn limits; RAG authorization boundary; CLAIM_IDS: CLM-C02-009; Q-C02-001; RELATION: supports agent-principal and task-scope fields in Core test intent; SCOPE_LIMIT: intended authorization pattern, not evidence of end-to-end enforcement in a provider retriever; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-044; TYPE: peer-reviewed research / author OSS; AUTHOR_OR_ORG: Modarressi et al.; Adobe Research; TITLE: NoLiMa: Long-Context Evaluation Beyond Literal Matching; PUBLICATION_OR_REPOSITORY: ICML 2025 / arXiv / author repository; DATE: 2025; VERSION_TAG_COMMIT: arXiv:2502.05167; DOI_OR_CANONICAL_URL: https://arxiv.org/abs/2502.05167 ; https://github.com/adobe-research/NoLiMa; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: latent-association retrieval, literal-overlap reduction, 32K results; CLAIM_IDS: CLM-C02-001/008; Q-C02-004; RELATION: bounded counterevidence against exact-match-only long-context acceptance; SCOPE_LIMIT: benchmark/model/task limits; no permission or enterprise freshness evidence; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-045; TYPE: peer-reviewed research / author OSS; AUTHOR_OR_ORG: Kuratov et al.; Yandex Research; TITLE: BABILong: Testing the Limits of LLMs with Long Context Reasoning-in-a-Haystack; PUBLICATION_OR_REPOSITORY: NeurIPS 2024 / arXiv / author repository; DATE: 2024; VERSION_TAG_COMMIT: arXiv:2406.10149; DOI_OR_CANONICAL_URL: https://arxiv.org/abs/2406.10149 ; https://github.com/booydar/babilong; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: distributed facts, reasoning hops, length/task complexity; CLAIM_IDS: CLM-C02-001/008; Q-C02-004; RELATION: bounded counterevidence for long-context reasoning slices; SCOPE_LIMIT: synthetic bAbI-in-PG-19 construction; no enterprise ACL/freshness evidence; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-046; TYPE: peer-reviewed research / author OSS; AUTHOR_OR_ORG: Bai et al.; THUDM; TITLE: LongBench v2: Towards Deeper Understanding and Reasoning on Realistic Long-context Multitasks; PUBLICATION_OR_REPOSITORY: ACL 2025 / author repository; DATE: 2025; VERSION_TAG_COMMIT: DOI 10.18653/v1/2025.acl-long.183; DOI_OR_CANONICAL_URL: https://aclanthology.org/2025.acl-long.183/ ; https://github.com/THUDM/LongBench; ACCESSED: 2026-09-07; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: realistic long-context multitask reasoning across documents, dialogue, code and structured data; CLAIM_IDS: CLM-C02-001/008; Q-C02-004; RELATION: bounded counterevidence and slice taxonomy input; SCOPE_LIMIT: mostly multiple-choice and benchmark-specific; does not isolate retrieval from reasoning or prove provider ranking; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C03-008; TYPE: provider-maintained OSS documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Agent orchestration; PUBLICATION_OR_REPOSITORY: OpenAI Agents SDK documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://openai.github.io/openai-agents-python/multi_agent/; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Orchestrating via LLM; Orchestrating via code; parallelization examples; CLAIM_IDS: PM-C03-GPT-001/002/004; RELATION: maps LLM-owned and code-owned orchestration choices; SCOPE_LIMIT: does not establish stage correctness, transactionality, or task-specific decomposition thresholds; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C03-009; TYPE: provider-maintained OSS documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Handoffs; PUBLICATION_OR_REPOSITORY: OpenAI Agents SDK documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://openai.github.io/openai-agents-python/handoffs/; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Handoffs; creating/customizing; input_type; input filters; CLAIM_IDS: PM-C03-GPT-002; RELATION: maps delegation, typed input and input filtering; SCOPE_LIMIT: handoff feature existence does not prove history completeness, ownership acceptance, or business completion; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C03-010; TYPE: provider-maintained OSS documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Tools; PUBLICATION_OR_REPOSITORY: OpenAI Agents SDK documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://openai.github.io/openai-agents-python/tools/; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: tool categories; Agents as tools; function-tool timeouts; nested runs; CLAIM_IDS: PM-C03-GPT-002/004; RELATION: distinguishes handoff from agent-as-tool and identifies application/runtime tool boundaries; SCOPE_LIMIT: tool output does not by itself prove external final state or semantic acceptance; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C03-011; TYPE: provider-maintained OSS documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Results; PUBLICATION_OR_REPOSITORY: OpenAI Agents SDK documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://openai.github.io/openai-agents-python/results/; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: new_items/raw_responses/to_state; interruptions; add_input; provider replay caveat; CLAIM_IDS: PM-C03-GPT-003/005/008; RELATION: maps observable run items, resumable state and explicit replay boundary; SCOPE_LIMIT: SDK occurrence handling is not provider-delivery or external exactly-once guarantee; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C03-012; TYPE: provider-maintained OSS documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Running agents; PUBLICATION_OR_REPOSITORY: OpenAI Agents SDK documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://openai.github.io/openai-agents-python/running_agents/; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: runner loop; RunConfig; ToolExecutionConfig; memory strategy; trace IDs; recovery notes; CLAIM_IDS: PM-C03-GPT-001/003/004/005/008; RELATION: maps lifecycle, local concurrency limits, state strategies and tracing fields; SCOPE_LIMIT: recommended patterns are not a certification of custom session backends or external systems; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C03-013; TYPE: provider-maintained OSS documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Guardrails; PUBLICATION_OR_REPOSITORY: OpenAI Agents SDK documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://openai.github.io/openai-agents-python/guardrails/; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: workflow boundaries; parallel versus blocking input guardrails; persistence ordering; CLAIM_IDS: PM-C03-GPT-004/008; RELATION: supports separating blocking pre-execution guard from concurrent post-start detection; SCOPE_LIMIT: parallel guardrail may allow tool execution before cancellation; no universal side-effect safety guarantee; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C03-014; TYPE: author-maintained OSS release; AUTHOR_OR_ORG: OpenAI; TITLE: openai-agents-python v0.22.0; PUBLICATION_OR_REPOSITORY: GitHub releases; DATE: 2026-08-19; VERSION_TAG_COMMIT: v0.22.0; commit 4df9ecf; DOI_OR_CANONICAL_URL: https://github.com/openai/openai-agents-python/releases/tag/v0.22.0; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: signed release readback; archival snapshot pending; SUPPORTING_LOCATOR: Key Changes; replay/session hardening; usage checkpoint isolation; CLAIM_IDS: PM-C03-GPT-005/006/007; RELATION: pins the current public mapping version; SCOPE_LIMIT: release notes do not prove all runtime/backend combinations; later main differs; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C03-015; TYPE: author-maintained OSS issue / current failure signal; AUTHOR_OR_ORG: dixso; OpenAI repository; TITLE: Deferred interrupted-turn session items are never persisted when an approval resume goes through next_step_run_again, leaving an orphaned function_call_output; PUBLICATION_OR_REPOSITORY: openai/openai-agents-python issue #4827; DATE: 2026-09-02; VERSION_TAG_COMMIT: 0.22.0 and main 89c02c8 version matrix; DOI_OR_CANONICAL_URL: https://github.com/openai/openai-agents-python/issues/4827; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live issue readback; archival snapshot pending; SUPPORTING_LOCATOR: Summary; Version matrix; deterministic ScriptedModel/SQLite reproducer; Impact; CLAIM_IDS: PM-C03-GPT-006; RELATION: current bounded failure signal for approval resume/session persistence combination; SCOPE_LIMIT: open issue, narrow configuration, no API model required; not a universal provider failure; STATUS: REGISTERED_DIRECT_OPEN_FAILURE_SIGNAL

• SOURCE_ID: EXT-C03-016; TYPE: author-maintained OSS issue / current failure signal; AUTHOR_OR_ORG: FU-max-boop; OpenAI repository; TITLE: RunState pending input can be duplicated when a Session append loses acknowledgement; PUBLICATION_OR_REPOSITORY: openai/openai-agents-python issue #4775; DATE: 2026-08-30; VERSION_TAG_COMMIT: v0.22.0; main 89c02c8; DOI_OR_CANONICAL_URL: https://github.com/openai/openai-agents-python/issues/4775; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live issue readback; archival snapshot pending; SUPPORTING_LOCATOR: Describe the bug; Debug information; lost-ack reproducer; CLAIM_IDS: PM-C03-GPT-005/006; RELATION: current bounded counterexample for client-managed Session append/retry idempotency; SCOPE_LIMIT: custom failpoint Session and staged input; does not show provider or all backend failure; STATUS: REGISTERED_DIRECT_OPEN_FAILURE_SIGNAL

• SOURCE_ID: EXT-C03-017; TYPE: author-maintained OSS issue / fixed historical failure signal; AUTHOR_OR_ORG: pietrog30; OpenAI repository; TITLE: HITL resume drops tool output when parallel calls mix approval-gated and non-approval tools; PUBLICATION_OR_REPOSITORY: openai/openai-agents-python issue #3004 / PR #3006; DATE: 2026-04-22; VERSION_TAG_COMMIT: v0.13.3; milestone 0.14.x; closed; DOI_OR_CANONICAL_URL: https://github.com/openai/openai-agents-python/issues/3004; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live issue readback; archival snapshot pending; SUPPORTING_LOCATOR: bug description; root cause; deterministic reproducer; CLAIM_IDS: PM-C03-GPT-004/007; RELATION: regression intent for mixed parallel approval/resume; SCOPE_LIMIT: fixed historical issue; must not be represented as a defect in 0.22.0; STATUS: REGISTERED_DIRECT_FIXED_HISTORICAL_SIGNAL

• SOURCE_ID: EXT-C03-018; TYPE: author-maintained OSS issue / fixed historical failure signal; AUTHOR_OR_ORG: Aphroq; OpenAI repository; TITLE: OpenAIResponsesCompactionSession can lose session history if add_items fails after clear; PUBLICATION_OR_REPOSITORY: openai/openai-agents-python issue #3116 / PR #3117; DATE: 2026-05-04; VERSION_TAG_COMMIT: v0.15.1 commit 9b57f057b43d; milestone 0.16.x; closed; DOI_OR_CANONICAL_URL: https://github.com/openai/openai-agents-python/issues/3116; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live issue readback; archival snapshot pending; SUPPORTING_LOCATOR: clear_session then add_items failure window; deterministic failpoint backend; CLAIM_IDS: PM-C03-GPT-003/007; RELATION: regression intent for non-atomic session replacement/compaction; SCOPE_LIMIT: fixed historical issue; no claim that 0.22.0 retains the defect; STATUS: REGISTERED_DIRECT_FIXED_HISTORICAL_SIGNAL

• SOURCE_ID: EXT-C03-019; TYPE: provider documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Conversation state; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/guides/conversation-state; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Conversations durable identifier; message/tool-call/tool-output items; previous_response_id; CLAIM_IDS: PM-C03-GPT-003/005; RELATION: maps server-managed conversation state and item types; SCOPE_LIMIT: conversation persistence does not provide artifact versioning, external transaction, or business acceptance; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C03-020; TYPE: provider documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Background mode; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/guides/background; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: asynchronous response creation; polling; cancellation; temporary storage constraints; CLAIM_IDS: PM-C03-GPT-005; RELATION: maps asynchronous response lifecycle and cancellation surface; SCOPE_LIMIT: response cancellation does not prove that application-owned or external side effects were absent or rolled back; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• RECORD_ID: EXP-C07-001; ORIGIN_CLASS: COMPILER_EXPERIMENT; PERFORMER: compiler runtime; DATE_TIME_TZ: 2026-09-07 JST; ENVIRONMENT_SURFACE: local deterministic fixture; MODEL_VERSION_EVIDENCE: N/A; PROTOCOL_INPUT: tests/CORE-07_eval_gate_contract_fixture_v0.1.py; RAW_ARTIFACT: tests/CORE-07_eval_gate_contract_fixture_result_v0.1.json; DIGEST: runner cc1e236a7b8350dbb56db9b07244e25af5e98f613a9d7de9502f7cc411067b03; result d5704b8fffb52d835b39ea21a062d97ac06b27cb8c5706350cd065cb7f220ce0; RESULT: 12/12 expected observations; CLAIM_IDS: TST-C07-01..07; CLM-C07 contract rules; REPRODUCIBILITY: local rerun possible; PRIVACY_PUBLICATION: synthetic non-personal; SCOPE_LIMIT: model、judge、dataset、provider性能を証明しない; STATUS: REGISTERED_DIRECT

• RECORD_ID: OBS-ORG-C02-001; ORIGIN_CLASS: USER_ENV_OBSERVATION; PERFORMER: user; DATE_TIME_TZ: 2026-09-05 JST; ENVIRONMENT_SURFACE: business Gemini operating boundary; MODEL_VERSION_EVIDENCE: tenant-specific, product behaviorではない; PROTOCOL_INPUT: file sync・API・直接接続不可、指定prompt／Gem試験は可能候補との確認; RAW_ARTIFACT: COL-C02-028; ORG packets; DIGEST: N/A; RESULT: allowed/prohibited surface boundary; CLAIM_IDS: ORG-C02..06; REPRODUCIBILITY: user-confirmed; PRIVACY_PUBLICATION: 公開時の組織識別・契約情報は要匿名化確認; SCOPE_LIMIT: 製品仕様・実装保証ではない; STATUS: REGISTERED_NEEDS_PUBLICATION_REDACTION_DECISION

• RECORD_ID: EXP-C02-UI-001; ORIGIN_CLASS: USER_EXPERIMENT; PERFORMER: user + compiler analysis; DATE_TIME_TZ: 2026-09-05 22:39–22:51 JST; ENVIRONMENT_SURFACE: business Gemini new chats, no Gem; MODEL_VERSION_EVIDENCE: display labels recorded in raw logs; PROTOCOL_INPUT: six transcript HAZE profile; RAW_ARTIFACT: tests/CORE-02_gemini_interactive_ui_surface_result_2026-09-05.json + six raw logs; DIGEST: result eed0f26724404b9c9fd48b9f37ee268563d2319974295ca6e480258823ef5ce1; raw-log hashes要完全照合; RESULT: semantic contract 12/12; prompt-level restricted-content non-disclosure 15/15; strict JSON 2/3; CLAIM_IDS: PM/ORG CORE-02 claims only; REPRODUCIBILITY: raw logs required; PRIVACY_PUBLICATION: 内容・tenant識別の公開可否要確認; SCOPE_LIMIT: visible response surfaceのみ。ACL、storage、durable memoryを証明しない; STATUS: REGISTERED_PARTIAL_RAW_ARTIFACT_AUDIT_REQUIRED

• RECORD_ID: EXP-C06-001; ORIGIN_CLASS: COMPILER_EXPERIMENT; PERFORMER: compiler runtime; DATE_TIME_TZ: 2026-09-07 JST; ENVIRONMENT_SURFACE: local deterministic configuration-contract fixture; MODEL_VERSION_EVIDENCE: N/A; PROTOCOL_INPUT: tests/CORE-06_config_release_contract_fixture_v0.1.py; RAW_ARTIFACT: tests/CORE-06_config_release_contract_fixture_result_v0.1.json; DIGEST: runner eb8c97aacb3f33f5ccdba978707b62d27a0c4686b9b50acda5cfe557c6d6c5d6; result 2fe9f7a77f275d6420d73956ee695f2c45a37240e140ea5b1ff3807f9cda3265; RESULT: 7/7 expected observations; CLAIM_IDS: TST-C06-01..05; CLM-C06-001..010 contract rules; REPRODUCIBILITY: local rerun possible; PRIVACY_PUBLICATION: synthetic non-personal; SCOPE_LIMIT: provider UI/API、actual prompt、tool、source、secret、behavior reproductionを証明しない; STATUS: REGISTERED_DIRECT

• RECORD_ID: EXP-C06-002; ORIGIN_CLASS: COMPILER_EXPERIMENT; PERFORMER: compiler runtime; DATE_TIME_TZ: 2026-09-07 JST; ENVIRONMENT_SURFACE: local deterministic ablation/alias-drift fixture; MODEL_VERSION_EVIDENCE: N/A; PROTOCOL_INPUT: tests/CORE-06_config_ablation_alias_drift_fault_v0.1.py; RAW_ARTIFACT: tests/CORE-06_config_ablation_alias_drift_fault_result_v0.1.json; DIGEST: runner 5e6cfaa5aedaa423961b4a957f9dbf678cb706e0ebf4c45df4b1bf5c256a0433; result 5e6d04503d7e96b05a76396e00266a1baabb4a47207b476a16f2de6bf3fef2b4; RESULT: 19/19 expected observations; CLAIM_IDS: TST-C06-06..08; CLM-C06-002/003/005/006/009; REPRODUCIBILITY: local rerun possible; PRIVACY_PUBLICATION: synthetic non-personal; SCOPE_LIMIT: decision-rule counterexample only; no product/model/tenant behavior guarantee; STATUS: REGISTERED_DIRECT

• RECORD_ID: EXP-C02-LOCAL-001; ORIGIN_CLASS: COMPILER_EXPERIMENT; PERFORMER: compiler runtime; DATE_TIME_TZ: 2026-09-05 JST; ENVIRONMENT_SURFACE: pinned local LlamaIndex/OpenFGA reference profile; MODEL_VERSION_EVIDENCE: OpenFGA v1.19.0; LlamaIndex Core 0.14.24; BM25 0.8.0; bm25s 0.3.11; PROTOCOL_INPUT: tests/CORE-02_openfga_llamaindex_prefilter_profile_v0.1.py; RAW_ARTIFACT: tests/CORE-02_openfga_llamaindex_prefilter_profile_result_v0.1.json; DIGEST: runner 7a7c18a6f368056a6d2ee24b9ca816eeafb1d0c3bb46c9c866020660c0e17008; result 9e04d88489ca8a44aa3a797f49bf0fbe73c3e4d9d93eefb629ba240d74d80164; RESULT: pre-content reference path 10/10; metadata-mask failure retained separately; CLAIM_IDS: CLM-C02-009; Q-C02-001; REPRODUCIBILITY: reproducible only in pinned local profile; current environment rerun blocked by missing dependency; PRIVACY_PUBLICATION: synthetic non-secret corpus; SCOPE_LIMIT: not Gemini/provider/tenant certification; raw failure path remains open; STATUS: REGISTERED_DIRECT_SCOPED

• RECORD_ID: EXP-C02-LOCAL-002; ORIGIN_CLASS: COMPILER_EXPERIMENT; PERFORMER: compiler runtime; DATE_TIME_TZ: 2026-09-05 JST; ENVIRONMENT_SURFACE: pinned Mem0 OSS 2.0.20 local component/fault profiles; MODEL_VERSION_EVIDENCE: Mem0 2.0.20; commit 9a7924b; implementation hash recorded in result JSON; PROTOCOL_INPUT: tests/CORE-02_mem0_mutable_fact_add_only_live_v0.1.py; ...sync_async_parity...; ...async_race_cancel_retry...; RAW_ARTIFACT: corresponding result JSON files; DIGEST: runners 0d79589fd137c66bd36f16aca3a8c56bc4fbef1dbd397b71de457663e1868d9f, f2e4f591a1a40dffdc6277e270dceb2b259924c34275f8c208ff5a70f169b620, d3450e7cf37aea35b8076cd05c95ae77bf7b6ce3689d2aa907b2f9390bd329cc; result hashes retained beside artifacts; RESULT: mutable fact ADD-only, sequential parity, parallel/cancel/retry failure profile; CLAIM_IDS: CLM-C02-010; Q-C02-002; REPRODUCIBILITY: component-scoped and version-pinned; current environment rerun blocked by absent repo/required args; PRIVACY_PUBLICATION: synthetic facts/local stubs; SCOPE_LIMIT: no hosted/provider/physical purge claim; STATUS: REGISTERED_DIRECT_SCOPED

• RECORD_ID: EXP-C03-LOCAL-001; ORIGIN_CLASS: COMPILER_EXPERIMENT; PERFORMER: compiler runtime; DATE_TIME_TZ: 2026-09-06 JST; ENVIRONMENT_SURFACE: local deterministic pipeline-contract fixture; MODEL_VERSION_EVIDENCE: N/A; PROTOCOL_INPUT: tests/CORE-03_pipeline_contract_fixture_v0.1.py; RAW_ARTIFACT: tests/CORE-03_pipeline_contract_fixture_result_v0.1.json; DIGEST: runner 3df498fecf79ed3a322a295be34d516229906f4d57ed31f3c1590899abbfa8ec; result 62bb638035f730a7a157370c0d7f6c29134d3b326f5c24fff4800dd1ee3c8430; RESULT: 6/6 expected observations; CLAIM_IDS: TST-C03-01..06; CLM-C03-001..008 contract rules; REPRODUCIBILITY: local rerun possible; PRIVACY_PUBLICATION: synthetic non-personal; SCOPE_LIMIT: diagnostic contract only; no GPT/Agents SDK/provider behavior claim; STATUS: REGISTERED_DIRECT

• RECORD_ID: EXP-C03-LOCAL-002; ORIGIN_CLASS: COMPILER_EXPERIMENT; PERFORMER: compiler runtime; DATE_TIME_TZ: 2026-09-06 JST; ENVIRONMENT_SURFACE: LangGraph 1.2.11 + temporary SQLite local fault profile; MODEL_VERSION_EVIDENCE: LangGraph 1.2.11; release commit 644815f; PROTOCOL_INPUT: tests/CORE-03_langgraph_conflict_cancel_retry_fault_v0.1.py; RAW_ARTIFACT: tests/CORE-03_langgraph_conflict_cancel_retry_fault_result_v0.1.json; DIGEST: runner 192aee5e9697193991b08739c18659a0a0427684b56d9e52ca1923763615086e; result 16a65b1d30bf4a0b56547638ae5ff977b5bc0b434257c5d5d44d82deed50b242; RESULT: 15/15 expected observations; CLAIM_IDS: TST-C03-07..09; CLM-C03-003/005/007; REPRODUCIBILITY: pinned local rerun possible when dependency is installed; PRIVACY_PUBLICATION: synthetic non-personal SQLite; SCOPE_LIMIT: separate runtime evidence; no GPT/Agents SDK/remote transaction/exactly-once claim; STATUS: REGISTERED_DIRECT_SCOPED

• RECORD_ID: EXP-C04-LOCAL-001; ORIGIN_CLASS: COMPILER_EXPERIMENT; PERFORMER: compiler runtime; DATE_TIME_TZ: 2026-09-08 JST rerun; ENVIRONMENT_SURFACE: local deterministic routing-contract fixture; MODEL_VERSION_EVIDENCE: N/A; PROTOCOL_INPUT: tests/CORE-04_routing_contract_fixture_v0.1.py; RAW_ARTIFACT: tests/CORE-04_routing_contract_fixture_result_v0.1.json; DIGEST: runner 0f7ad281dd252aee9dc6b7bd10f2ccc2d47f5f806c440967bb432b818c08925b; result 9796c0bd87c6d605dbe21cd29f0df244b40faee709c08c4c8cac71e2af637120; RESULT: 10/10 expected observations; CLAIM_IDS: TST-C04-01..05; CLM-C04-001..008; REPRODUCIBILITY: local rerun confirmed 2026-09-08; PRIVACY_PUBLICATION: synthetic non-personal; SCOPE_LIMIT: contract rules only; no GPT/model/API/tool live claim; STATUS: REGISTERED_DIRECT

• RECORD_ID: EXP-C04-LOCAL-002; ORIGIN_CLASS: COMPILER_EXPERIMENT; PERFORMER: compiler runtime; DATE_TIME_TZ: 2026-09-08 JST rerun; ENVIRONMENT_SURFACE: local deterministic tail/loss/loop fault profile; MODEL_VERSION_EVIDENCE: N/A; PROTOCOL_INPUT: tests/CORE-04_router_tail_loss_loop_fault_v0.1.py; RAW_ARTIFACT: tests/CORE-04_router_tail_loss_loop_fault_result_v0.1.json; DIGEST: runner 77b40833ebc7636d3415cbe2e65826ad3dd5ac69aa9f7b67346e97441b58c657; result f0d36a867d7cb9c27e0d7fb5635202afccdd30697b4b159066fe7f04304e0241; RESULT: 16/16 expected observations; CLAIM_IDS: TST-C04-06..09; CLM-C04-002/005/006/007; REPRODUCIBILITY: local rerun confirmed 2026-09-08; PRIVACY_PUBLICATION: synthetic non-personal; SCOPE_LIMIT: counterexample/reference logic only; no GPT/router/provider performance claim; STATUS: REGISTERED_DIRECT

One claim can have multiple rows. External support, first-party experiment, and this study's synthesis are never collapsed into one origin.

• CLAIM_ID: CLM-C06-001; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C06-001..004; SOURCE_OR_EXPERIMENT_ID: EXT-C06-001..004; SUPPORTING_LOCATOR: registered source locators; RELATION: partial support for managed/versioned components; SCOPE_AND_LIMIT: no source alone states the full dictionary bundle; PUBLICATION_STATUS: CITABLE_WITH_MULTI_SOURCE_SCOPE

• CLAIM_ID: CLM-C06-001; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C06-001; SOURCE_OR_EXPERIMENT_ID: EXT-C06-001..004 + CORE-01/04/05 dependencies; SUPPORTING_LOCATOR: CORE-06 §6; RELATION: this study's bounded synthesis of a composite entity; SCOPE_AND_LIMIT: must be labeled as this study's synthesis; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS

• CLAIM_ID: CLM-C06-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C06-001/002; SOURCE_OR_EXPERIMENT_ID: EXT-C06-001/002; SUPPORTING_LOCATOR: registered source locators; RELATION: component/provenance representation; SCOPE_AND_LIMIT: does not supply the exact required/conditional grouping; PUBLICATION_STATUS: PARTIAL_EXTERNAL_SUPPORT

• CLAIM_ID: CLM-C06-002; ORIGIN_CLASS: COMPILER_EXPERIMENT; EVIDENCE_ID: EXP-C06-002; SOURCE_OR_EXPERIMENT_ID: EXP-C06-002; SUPPORTING_LOCATOR: required-field ablation; RELATION: first-party counterexample for missing groups; SCOPE_AND_LIMIT: synthetic rule only; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_EXPERIMENT

• CLAIM_ID: CLM-C06-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C06-003/006/010; SOURCE_OR_EXPERIMENT_ID: EXT-C06-003/006/010; SUPPORTING_LOCATOR: mutable model config; HDSR final article lines 82–126, 185–203, 232–238, 969–993; model version patterns; RELATION: counterevidence to digest/label behavioral equivalence and support for application-level continuous monitoring; SCOPE_AND_LIMIT: HDSR study is two historical snapshots on selected tasks; no universal/current drift rate or backend-identity proof; PUBLICATION_STATUS: ORIGINAL_LOCATOR_VERIFIED_WITH_MULTI_SOURCE_SCOPE

• CLAIM_ID: CLM-C06-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-BTH-DATA-005; SOURCE_OR_EXPERIMENT_ID: Zenodo 18628436 v1; SUPPORTING_LOCATOR: README lines 13–30/60–70; PDF pp.1–4; RELATION: author-disclosed 20-month/six-cycle measurement structure and aggregates; SCOPE_AND_LIMIT: author-produced; VOR span unavailable; no current/universal or causal-backend claim; PUBLICATION_STATUS: REPLICATION_ARTIFACT_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-GS-PAPER-006; SOURCE_OR_EXPERIMENT_ID: arXiv 2604.21083v1 / IMC '26; SUPPORTING_LOCATOR: PDF pp.1–2, 5–7; RELATION: bounded client-side evidence that gateway-served behavior and advertised/requested model, memory, billing or latency expectations may diverge; SCOPE_AND_LIMIT: 10 anonymized commercial gateways at the study date; no named-provider, universal, present-tense or internal-cause inference; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-LT-PAPER-008; SOURCE_OR_EXPERIMENT_ID: ICLR 2026 / arXiv 2512.03816v2; SUPPORTING_LOCATOR: PDF pp.1–4, 7–10; RELATION: first-token logprob two-sample monitoring and bounded multi-endpoint behavioral-shift observation; SCOPE_AND_LIMIT: logprob support required; field detections lack ground truth; no causal, universal/current-provider or Organization inference; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-MD-OSS-010; SOURCE_OR_EXPERIMENT_ID: egnaro9/model-drift commit 8736e16ef93d802f0e3a053b9ac85ddacc863011; SUPPORTING_LOCATOR: README lines 33–44/67–80; modeldrift/suite.py lines 1–22; modeldrift/run.py lines 146–195/239–289; RELATION: implementable fixed/versioned deterministic suite with repeated median/spread and per-point provenance; SCOPE_AND_LIMIT: maintainer implementation; no independent effectiveness result, causal attribution, current-provider guarantee or Organization inference; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-LDO-OSS-011; SOURCE_OR_EXPERIMENT_ID: russsi/llm-drift-observatory commit df06c003dc20f23a5633e6c89361e7047ea90cbc; SUPPORTING_LOCATOR: README lines 9–16/97–120; scripts/run_battery.py lines 117–136/148–177; scripts/detect_drift.py lines 57–106; RELATION: versioned frozen battery, deterministic grading, incomplete-day exclusion and evidence-preserving repeated monitoring; SCOPE_AND_LIMIT: archived maintainer implementation; no current-provider guarantee, independent validation, causal attribution or Organization inference; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-003; ORIGIN_CLASS: COMPILER_EXPERIMENT; EVIDENCE_ID: EXP-C06-002; SOURCE_OR_EXPERIMENT_ID: EXP-C06-002; SUPPORTING_LOCATOR: alias-drift and single-sample cases; RELATION: first-party bounded counterexample; SCOPE_AND_LIMIT: synthetic rule only; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_EXPERIMENT

• CLAIM_ID: CLM-C06-004; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: DEP-C05-APPROVAL; SOURCE_OR_EXPERIMENT_ID: CORE-05 canonical approval binding; SUPPORTING_LOCATOR: CORE-06 §7; RELATION: carries prior Core contract into configuration release; SCOPE_AND_LIMIT: CORE-05 provenance must be separately completed; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY

• CLAIM_ID: CLM-C06-005; ORIGIN_CLASS: COMPILER_EXPERIMENT; EVIDENCE_ID: EXP-C06-001/002; SOURCE_OR_EXPERIMENT_ID: EXP-C06-001/002; SUPPORTING_LOCATOR: environment-parity and unexplained-diff cases; RELATION: first-party bounded support; SCOPE_AND_LIMIT: synthetic rule only; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_EXPERIMENT

• CLAIM_ID: CLM-C06-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C06-003/006/007/010; SOURCE_OR_EXPERIMENT_ID: EXT-C06-003/006/007/010; SUPPORTING_LOCATOR: registered source locators; EXT-C06-006 fixed to HDSR final article lines 82–126, 185–203, 232–238, 969–993; RELATION: supports mutable nested config/source/alias and bounded temporal drift risk; SCOPE_AND_LIMIT: hidden UI edit itself is not demonstrated; one historical study cannot establish current provider behavior or a universal drift rate; PUBLICATION_STATUS: ORIGINAL_LOCATOR_VERIFIED_WITH_SCOPE_NOTE

• CLAIM_ID: CLM-C06-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-BTH-DATA-005; SOURCE_OR_EXPERIMENT_ID: Zenodo 18628436 v1; SUPPORTING_LOCATOR: README lines 28–30; PDF pp.1–4; RELATION: dated tool/model configuration belongs in repeated evaluation records; SCOPE_AND_LIMIT: no backend build identity, rollout cause, Organization value or present-provider measurement; PUBLICATION_STATUS: REPLICATION_ARTIFACT_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-GS-PAPER-006; SOURCE_OR_EXPERIMENT_ID: arXiv 2604.21083v1 / IMC '26; SUPPORTING_LOCATOR: PDF pp.2, 5–7; RELATION: supports repeated black-box monitoring when exact gateway routing/build is not observable; SCOPE_AND_LIMIT: response classification and other signals indicate observable gaps; they do not prove a particular hidden routing cause, and latency alone is non-attributive; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-LT-PAPER-008; SOURCE_OR_EXPERIMENT_ID: ICLR 2026 / arXiv 2512.03816v2; SUPPORTING_LOCATOR: PDF pp.3–4, 7–10; RELATION: supports repeated low-cost behavioral monitoring when immutable backend identity is unavailable; SCOPE_AND_LIMIT: detects distributional shift but does not distinguish model from infrastructure cause; no exact backend or tenant value; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-MD-OSS-010; SOURCE_OR_EXPERIMENT_ID: egnaro9/model-drift commit 8736e16ef93d802f0e3a053b9ac85ddacc863011; SUPPORTING_LOCATOR: modeldrift/run.py lines 130–195/239–289; modeldrift/identity.py lines 1–28/45–107; .github/workflows/track.yml lines 1–16/31–56/67–80; RELATION: supports repeated external monitoring, provider-error/reliability separation, persisted runs and limited response-echo identity checking; SCOPE_AND_LIMIT: echoed model ID is not weight attestation; deterministic grader does not remove sampling noise; shift cause and immutable backend remain UNKNOWN; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-LDO-OSS-011; SOURCE_OR_EXPERIMENT_ID: russsi/llm-drift-observatory commit df06c003dc20f23a5633e6c89361e7047ea90cbc; SUPPORTING_LOCATOR: scripts/detect_drift.py lines 32–40/57–106; .github/workflows/daily.yml lines 8–20/35–60; README lines 53–59/97–120; RELATION: supports minimum-history/noise-floor alerts, metadata/stability/latency sentinels and scheduled persisted monitoring when immutable backend identity is unavailable; SCOPE_AND_LIMIT: archived historical implementation; thresholds are instrument-specific; model ID is metadata, same-weight divergence is non-causal, tenant/current state UNKNOWN; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-PHX-001; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C06-S050-PHX-001; SUPPORTING_LOCATOR: pinned repository file lines 8–11, 22–41, 55–60; RELATION: versioned prompt + dataset experiment + evaluator + comparison workflow; SCOPE_AND_LIMIT: no release acceptance decision, complete bundle identity, provider or Organization guarantee; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C06-S050-MLF-002; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C06-S050-MLF-002; SUPPORTING_LOCATOR: pinned repository file lines 19–42, 194–223; RELATION: prompt-version/evaluation-run lineage with same-dataset rerun and scorer set; SCOPE_AND_LIMIT: @latest is moving; acceptance decision and organization thresholds are outside the source; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C06-007; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-C06-007-ACCEPTANCE; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C06-S050-PHX-001 + EXT-INT-C06-S050-MLF-002 + CORE-01 completion contract; SUPPORTING_LOCATOR: CORE-06 §8; S050 direct snapshot lines 127/131; RELATION: links evaluated candidate evidence to this study's release acceptance contract; SCOPE_AND_LIMIT: acceptance-decision schema is this study's synthesis, not a Phoenix/MLflow product claim; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS

• CLAIM_ID: CLM-C06-008; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C06-005; SOURCE_OR_EXPERIMENT_ID: EXT-C06-005; SUPPORTING_LOCATOR: Requirements of a Canary Process; canary/control comparison; RELATION: direct operational support for bounded canary structure; SCOPE_AND_LIMIT: numerical thresholds remain Organization Overlay; PUBLICATION_STATUS: CITABLE_DIRECT

• CLAIM_ID: CLM-C06-009; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: DEP-C03-C05-RECOVERY; SOURCE_OR_EXPERIMENT_ID: CORE-03/05 recovery contracts; SUPPORTING_LOCATOR: CORE-06 §9; RELATION: this study's rollback synthesis; SCOPE_AND_LIMIT: upstream claim provenance must be separately completed; PUBLICATION_STATUS: RECOVERY_ACTIVE_DEPENDENCY

• CLAIM_ID: CLM-C06-010; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C06-007..010; SOURCE_OR_EXPERIMENT_ID: EXT-C06-007..010; SUPPORTING_LOCATOR: registered product locators; RELATION: bounds observable native configuration/version surfaces; SCOPE_AND_LIMIT: absence of documented export/diff is not proof of nonexistence; PUBLICATION_STATUS: CITABLE_PRODUCT_BOUNDARY

• CLAIM_ID: PM-C06-GEM-001..006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C06-007..010; SOURCE_OR_EXPERIMENT_ID: EXT-C06-007..010; SUPPORTING_LOCATOR: registered product locators; RELATION: provider Product Mapping only; SCOPE_AND_LIMIT: no promotion to Core or tenant adoption; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING

• CLAIM_ID: ORG-C06-001; ORIGIN_CLASS: USER_ENV_OBSERVATION; EVIDENCE_ID: OBS-ORG-C02-001; SOURCE_OR_EXPERIMENT_ID: OBS-ORG-C02-001; SUPPORTING_LOCATOR: user-confirmed operating boundary; RELATION: first-party environment constraint; SCOPE_AND_LIMIT: must be anonymized; not a provider capability claim; PUBLICATION_STATUS: CITABLE_INTERNAL / PUBLICATION_REDACTION_PENDING

• CLAIM_ID / QUESTION: CLM-C02-009 / Q-C02-001; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-041/042/043; SOURCE_OR_EXPERIMENT_ID: EXT-C02-041/042/043; SUPPORTING_LOCATOR: registered OpenFGA sections; RELATION: supports authorization/search join choices, agent scope, cache/staleness and load observability fields; SCOPE_AND_LIMIT: OpenFGA guidance is not a guarantee for LlamaIndex or any provider's complete downstream path; PUBLICATION_STATUS: CITABLE_WITH_SCOPE_NOTE

• CLAIM_ID / QUESTION: CLM-C02-009 / Q-C02-001; ORIGIN_CLASS: COMPILER_EXPERIMENT; EVIDENCE_ID: EXP-C02-LOCAL-001; SOURCE_OR_EXPERIMENT_ID: EXP-C02-LOCAL-001; SUPPORTING_LOCATOR: pre-content reference result JSON; prior BM25 failure artifact; RELATION: first-party local reference pass and separate path-scoped failure; SCOPE_AND_LIMIT: pinned local synthetic components only; rerun currently blocked by missing dependency; no provider/tenant promotion; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_EXPERIMENT

• CLAIM_ID / QUESTION: CLM-C02-010 / Q-C02-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-016/022/030; SOURCE_OR_EXPERIMENT_ID: EXT-C02-016/022/030; SUPPORTING_LOCATOR: Mem0 issue and migration sections; RELATION: supports ADD-only/mutable-fact contradiction as an unverified failure signal and version boundary; SCOPE_AND_LIMIT: issue is not maintainer-confirmed root cause; hosted/vector/retention behavior remains unknown; PUBLICATION_STATUS: CITABLE_WITH_SCOPE_NOTE

• CLAIM_ID / QUESTION: CLM-C02-010 / Q-C02-002; ORIGIN_CLASS: COMPILER_EXPERIMENT; EVIDENCE_ID: EXP-C02-LOCAL-002; SOURCE_OR_EXPERIMENT_ID: EXP-C02-LOCAL-002; SUPPORTING_LOCATOR: local result JSONs and runner hashes; RELATION: first-party component observations and pinned failure profile; SCOPE_AND_LIMIT: local OSS/stub scope; no real LLM, hosted, provider, remote durability or physical purge claim; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_EXPERIMENT

• CLAIM_ID / QUESTION: CLM-C02-001/008 / Q-C02-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-044/045/046; SOURCE_OR_EXPERIMENT_ID: EXT-C02-044/045/046; SUPPORTING_LOCATOR: paper abstracts/repository descriptions; RELATION: supports non-aggregated bounded benchmark taxonomy and counterevidence; SCOPE_AND_LIMIT: benchmark-specific task/model/domain limits; no provider ranking or enterprise permission/freshness claim; PUBLICATION_STATUS: CITABLE_WITH_MULTI_SOURCE_SCOPE

• CLAIM_ID / QUESTION: Q-C02-001/002; ORIGIN_CLASS: USER_EXPERIMENT; EVIDENCE_ID: EXP-C02-UI-001; SOURCE_OR_EXPERIMENT_ID: EXP-C02-UI-001; SUPPORTING_LOCATOR: six transcript records and result JSON; RELATION: surface-limited first-party observation of same-chat semantics and prompt-level non-disclosure; SCOPE_AND_LIMIT: not pre-retrieval authorization, durable memory, reset/delete, storage or purge evidence; PUBLICATION_STATUS: CITABLE_INTERNAL_REDACTION_PENDING

Backfill queue

• SOURCE_ID: EXT-C02-047; TYPE: author-maintained OSS documentation; AUTHOR_OR_ORG: OpenFGA maintainers; TITLE: Source of Truth; DOI_OR_CANONICAL_URL: https://openfga.dev/docs/best-practices/source-of-truth; ACCESSED: 2026-09-07; SUPPORTING_LOCATOR: search/filter/source-of-truth sections; CLAIM_IDS: CLM-C02-009; Q-C02-001; RELATION: supports DB-side filter/sort and authz join boundary; SCOPE_LIMIT: guidance, not tenant implementation; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-048; TYPE: independent operations report; AUTHOR_OR_ORG: Intel / Open at Intel interview; TITLE: Fine-Grained Authorization with OpenFGA; DOI_OR_CANONICAL_URL: https://www.intel.com/content/www/us/en/developer/articles/community/fine-grained-authorization-with-openfga.html; ACCESSED: 2026-09-07; SUPPORTING_LOCATOR: synchronization, adoption and implementation discussion; CLAIM_IDS: Q-C02-001; RELATION: independent operational signal for synchronization/scale risk; SCOPE_LIMIT: interview/participant account; not audited production evidence; STATUS: REGISTERED_LOW_CONFIDENCE_OPERATIONAL

• SOURCE_ID: EXT-C02-049; TYPE: independent practitioner report; AUTHOR_OR_ORG: r/dotnet practitioner; TITLE: How do you handle fine-grained authorization at scale; DOI_OR_CANONICAL_URL: https://www.reddit.com/r/dotnet/comments/1tb3vdz/how_do_you_handle_finegrained_authorization_at/; ACCESSED: 2026-09-07; SUPPORTING_LOCATOR: materialization, per-hit FGA, cache and search discussion; CLAIM_IDS: Q-C02-001; RELATION: practitioner signal for scale workaround and latency trade-off; SCOPE_LIMIT: anonymous, unverified, not security certification; STATUS: REGISTERED_LOW_CONFIDENCE_OPERATIONAL

• SOURCE_ID: EXT-C02-050; TYPE: author-maintained OSS release/current readback; AUTHOR_OR_ORG: run-llama/llama_index; TITLE: v0.14.24 release and ObjectIndex #16042; DOI_OR_CANONICAL_URL: https://github.com/run-llama/llama_index/releases ; https://github.com/run-llama/llama_index/issues/16042; ACCESSED: 2026-09-07; SUPPORTING_LOCATOR: release commit 9ba74b8; issue closed as not planned; CLAIM_IDS: CLM-C02-009; Q-C02-001; RELATION: separates current release anchor from upper-layer filter gap; SCOPE_LIMIT: release notes do not certify security boundary; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-051; TYPE: author-maintained OSS documentation / issue; AUTHOR_OR_ORG: Mem0 maintainers and issue reporters; TITLE: OSS v2→v3 migration; #4956; #5867; DOI_OR_CANONICAL_URL: https://github.com/mem0ai/mem0/blob/main/docs/migration/oss-v2-to-v3.mdx ; https://github.com/mem0ai/mem0/issues/4956 ; https://github.com/mem0ai/mem0/issues/5867; ACCESSED: 2026-09-07; SUPPORTING_LOCATOR: ADD-only, hybrid retrieval, Platform-only graph, open contradiction reports; CLAIM_IDS: CLM-C02-010; Q-C02-002; RELATION: current implementation boundary and failure signal; SCOPE_LIMIT: no maintainer-confirmed root cause or hosted purge proof; STATUS: REGISTERED_DIRECT_SCOPED

• SOURCE_ID: EXT-C02-052; TYPE: provider documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Administrator-managed apps with sync in ChatGPT; PUBLICATION_OR_REPOSITORY: OpenAI Help Center; DATE: page displayed “Updated: 9 days ago” on access; VERSION_TAG_COMMIT: live page; DOI_OR_CANONICAL_URL: https://help.openai.com/en/articles/10847137; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Overview; Use indexed content; Access and permissions; Troubleshoot; CLAIM_IDS: PM-C02-GPT-001/006; Q-C02-001; RELATION: source permission/admin scope plus refresh-delay boundary; SCOPE_LIMIT: public intent and setup only; no internal all-path or tenant certification; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-053; TYPE: provider documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Company knowledge in ChatGPT; PUBLICATION_OR_REPOSITORY: OpenAI Help Center; DATE: page displayed “Updated: 9 days ago” on access; VERSION_TAG_COMMIT: live page; DOI_OR_CANONICAL_URL: https://help.openai.com/en/articles/12628342-company-knowledge-in-chatgpt-business-enterprise-and-edu; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Overview; How it works; Security, safety, and data considerations; Limitations; CLAIM_IDS: PM-C02-GPT-001; Q-C02-001; RELATION: maps connected-source permissions, app authorization, RBAC and source-link verification; SCOPE_LIMIT: citation/link existence is not completeness or faithfulness; internal retrieval stages undisclosed; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-054; TYPE: provider documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Apps in ChatGPT; PUBLICATION_OR_REPOSITORY: OpenAI Help Center; DATE: 2026-07-09 migration note; VERSION_TAG_COMMIT: live page; DOI_OR_CANONICAL_URL: https://help.openai.com/en/articles/11487775-connectors-in-chatgpt; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Overview; App capabilities; Search; Sync; permissions; CLAIM_IDS: PM-C02-GPT-001/006; RELATION: separates search, sync and live app actions; maps authorization boundary; SCOPE_LIMIT: capability availability varies by app/plan/region/workspace/role/model/interface; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-055; TYPE: provider API documentation; AUTHOR_OR_ORG: OpenAI; TITLE: File search; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: live docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/guides/tools-file-search; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Include search results in the response; Metadata filtering; CLAIM_IDS: PM-C02-GPT-002/006; Q-C02-001/003; RELATION: documents metadata filters and optional raw search-result inclusion; SCOPE_LIMIT: metadata is caller-managed and is not native source IAM; all-path exclusion not certified; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-056; TYPE: provider API documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Retrieval; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: live docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/guides/retrieval; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Attribute filtering; Vector store file attributes; CLAIM_IDS: PM-C02-GPT-002; Q-C02-001; RELATION: filter criteria can be applied before semantic search; SCOPE_LIMIT: filter correctness, principal binding, cache/log behavior and revocation are application/tenant responsibilities; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-057; TYPE: provider API documentation / explicit security caveat; AUTHOR_OR_ORG: OpenAI; TITLE: Data retrieval with GPT Actions; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: live docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/actions/data-retrieval; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Authentication scheme; Database permissions; Vector database permissions; CLAIM_IDS: PM-C02-GPT-002/006; Q-C02-001; RELATION: direct counterevidence: chunk stores/service accounts can lose original per-user permission semantics; SCOPE_LIMIT: design guidance, not a measured incident or current tenant configuration; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-058; TYPE: provider documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Memory FAQ; PUBLICATION_OR_REPOSITORY: OpenAI Help Center; DATE: N/D; VERSION_TAG_COMMIT: improved memory + legacy saved memories, live page; DOI_OR_CANONICAL_URL: https://help.openai.com/en/articles/8590148-memory-faq; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Memories in sources; summary completeness; legacy saved memories; delete/retention; CLAIM_IDS: PM-C02-GPT-003; Q-C02-002; RELATION: separates synthesis, saved memory, chats/files/apps and deletion requirements; SCOPE_LIMIT: UI/product description; no physical purge, backup/cache or tenant-specific evidence; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-059; TYPE: provider documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Projects in ChatGPT; PUBLICATION_OR_REPOSITORY: OpenAI Help Center; DATE: N/D; VERSION_TAG_COMMIT: live page read 2026-09-08; DOI_OR_CANONICAL_URL: https://help.openai.com/en/articles/10169521-using-projects-in-chatgpt; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Deleting a project; Memory in projects; project-only/default memory; CLAIM_IDS: PM-C02-GPT-003; Q-C02-002; RELATION: maps project memory scope and visible deletion semantics; SCOPE_LIMIT: does not prove backend purge or memory-source completeness; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C02-060; TYPE: provider API documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Data controls in the OpenAI platform; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: live endpoint-retention table; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/guides/your-data; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: endpoint retention table; Responses; Assistants/vector stores; Files; CLAIM_IDS: PM-C02-GPT-004; Q-C02-002; RELATION: maps endpoint-specific application-state and delete/expiry rules; SCOPE_LIMIT: actual organization settings, ZDR/MAM eligibility, third-party retention and physical deletion evidence remain separate; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• CLAIM_ID / QUESTION: CLM-C02-009 / Q-C02-001; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-052..057; SOURCE_OR_EXPERIMENT_ID: EXT-C02-052..057; SUPPORTING_LOCATOR: registered product sections; RELATION: maps ChatGPT permission-respecting surfaces and API/application authorization boundary; SCOPE_AND_LIMIT: specification and design caveat only; live provider/tenant all-path test pending; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING_WITH_SCOPE

• CLAIM_ID / QUESTION: CLM-C02-009 / Q-C02-001; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-PM-GPT-C02-001; SOURCE_OR_EXPERIMENT_ID: EXT-C02-052..057 + EXP-C02-LOCAL-001; SUPPORTING_LOCATOR: PM-GPT-CORE-02 §Surface separation / mapping rows; RELATION: derives required revocation, staleness, raw-result and downstream-boundary test profile; SCOPE_AND_LIMIT: must be labeled this study's analysis; local experiment is not GPT evidence; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS

• CLAIM_ID / QUESTION: CLM-C02-010 / Q-C02-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-058..060; SOURCE_OR_EXPERIMENT_ID: EXT-C02-058..060; SUPPORTING_LOCATOR: registered memory/project/data-control sections; RELATION: maps visible lifecycle components and provider-published retention/delete boundaries; SCOPE_AND_LIMIT: no physical purge, summary completeness, cache/backup or tenant-value claim; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING_WITH_SCOPE

• CLAIM_ID / QUESTION: CLM-C02-010 / Q-C02-002; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-PM-GPT-C02-002; SOURCE_OR_EXPERIMENT_ID: EXT-C02-058..060 + EXP-C02-LOCAL-002; SUPPORTING_LOCATOR: PM-GPT-CORE-02 §mapping rows / counterevidence; RELATION: derives component-separated A→B/reset/delete/new-session test profile; SCOPE_AND_LIMIT: local Mem0 evidence is retained as this study's separate experiment, never as GPT observation; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS

• CLAIM_ID / QUESTION: CLM-C02-001/008 / Q-C02-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-044..046; SOURCE_OR_EXPERIMENT_ID: EXT-C02-044..046; SUPPORTING_LOCATOR: registered benchmark originals; RELATION: reuses bounded non-aggregated slice taxonomy for GPT mapping; SCOPE_AND_LIMIT: no GPT rank or performance result without provider-specific execution; PUBLICATION_STATUS: CITABLE_WITH_MULTI_SOURCE_SCOPE

• CLAIM_ID / QUESTION: PM-C02-GPT-001..006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-052..060; SOURCE_OR_EXPERIMENT_ID: EXT-C02-052..060; SUPPORTING_LOCATOR: registered provider locators; RELATION: provider Product Mapping only; SCOPE_AND_LIMIT: no promotion to Core or Organization fact; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING

• CLAIM_ID / QUESTION: PM-C02-GPT-006; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: TST-PM-GPT-C02-001; SOURCE_OR_EXPERIMENT_ID: CORE-02 TST-C02-10..18 + EXT-C02-052..060; SUPPORTING_LOCATOR: PM-GPT-CORE-02 §Required safe evidence; RELATION: safe live-test design; not an executed experiment; SCOPE_AND_LIMIT: publication must say NOT_EXECUTED; PUBLICATION_STATUS: CITABLE_AS_TEST_PROFILE_ONLY

• CLAIM_ID / QUESTION: PM-C03-GPT-001/002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-008..010; SOURCE_OR_EXPERIMENT_ID: EXT-C03-008..010; SUPPORTING_LOCATOR: orchestration, handoffs and agents-as-tools sections; RELATION: maps code-owned/LLM-owned orchestration and delegation surfaces; SCOPE_AND_LIMIT: feature existence does not prove decomposition quality, handoff acceptance or transactions; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING_WITH_SCOPE

• CLAIM_ID / QUESTION: PM-C03-GPT-003/005/008; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-011/012/019/020; SOURCE_OR_EXPERIMENT_ID: EXT-C03-011/012/019/020; SUPPORTING_LOCATOR: result items, RunState/session strategies, trace IDs, Conversation items and background lifecycle; RELATION: maps observable run state, resume, cancellation and trace surfaces; SCOPE_AND_LIMIT: SDK occurrence, provider delivery, session persistence, external state and business acceptance remain distinct; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING_WITH_SCOPE

• CLAIM_ID / QUESTION: PM-C03-GPT-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-008/010/012/013; SOURCE_OR_EXPERIMENT_ID: EXT-C03-008/010/012/013; SUPPORTING_LOCATOR: parallelization, tool concurrency and guardrail modes; RELATION: maps concurrency controls and the blocking/parallel guardrail boundary; SCOPE_AND_LIMIT: does not certify same-target write safety or cancellation of already-started side effects; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING_WITH_SCOPE

• CLAIM_ID / QUESTION: PM-C03-GPT-005/006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-014..016; SOURCE_OR_EXPERIMENT_ID: EXT-C03-014..016; SUPPORTING_LOCATOR: v0.22.0 release and current issues #4827/#4775; RELATION: fixes current version anchor and records bounded current failure signals; SCOPE_AND_LIMIT: open issues are configuration-scoped and not universal provider failures; PUBLICATION_STATUS: CITABLE_CURRENT_FAILURE_SIGNAL_WITH_SCOPE

• CLAIM_ID / QUESTION: PM-C03-GPT-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-017/018; SOURCE_OR_EXPERIMENT_ID: EXT-C03-017/018; SUPPORTING_LOCATOR: closed issues #3004/#3116 and linked fixes; RELATION: supplies regression intents for mixed approval/resume and non-atomic replacement; SCOPE_AND_LIMIT: fixed historical signals, not current v0.22.0 defects; PUBLICATION_STATUS: CITABLE_FIXED_HISTORICAL_SIGNAL

• CLAIM_ID / QUESTION: CLM-C03-001..008; ORIGIN_CLASS: COMPILER_EXPERIMENT; EVIDENCE_ID: EXP-C03-LOCAL-001/002; SOURCE_OR_EXPERIMENT_ID: EXP-C03-LOCAL-001/002; SUPPORTING_LOCATOR: local runner/result artifacts and complete SHA-256; RELATION: first-party contract/fault counterevidence retained from Core; SCOPE_AND_LIMIT: LangGraph/local SQLite evidence is not GPT or Agents SDK evidence; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_EXPERIMENT

• CLAIM_ID / QUESTION: PM-C03-GPT-001..008; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-PM-GPT-C03-001; SOURCE_OR_EXPERIMENT_ID: EXT-C03-008..020 + EXP-C03-LOCAL-001/002; SUPPORTING_LOCATOR: PM-GPT-CORE-03 mapping and safe fixed-version profile; RELATION: derives separation, verification and regression requirements; SCOPE_AND_LIMIT: must be labeled as this study's analysis; live GPT/API/tenant behavior was not measured; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS

• SOURCE_ID: EXT-C04-009; TYPE: provider API documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Model selection; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/guides/model-selection; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Core principles: accuracy first, cost/latency second; CLAIM_IDS: PM-C04-GPT-001; RELATION: maps published selection order and evaluation dependency; SCOPE_LIMIT: does not define enterprise risk threshold or certify a model for a task; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C04-010; TYPE: provider API model documentation; AUTHOR_OR_ORG: OpenAI; TITLE: GPT-5.6 Sol Model; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: live model page read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/models/gpt-5.6-sol; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: endpoints; features; Responses tools; snapshots; rate-limit tiers; CLAIM_IDS: PM-C04-GPT-001/002; RELATION: maps capability fields and snapshot pin surface; SCOPE_LIMIT: one model page; tenant access, actual quality/latency and backend build not proven; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C04-011; TYPE: provider API documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Function calling; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/guides/function-calling; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: tool-call flow; tool_choice/allowed_tools; parallel_tool_calls; CLAIM_IDS: PM-C04-GPT-003; RELATION: separates model proposal, application execution and tool output; maps candidate/concurrency controls; SCOPE_LIMIT: tool-choice is not authorization, receipt or external final-state proof; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C04-012; TYPE: provider API reference; AUTHOR_OR_ORG: OpenAI; TITLE: Create a model response; PUBLICATION_OR_REPOSITORY: OpenAI API Reference; DATE: N/D; VERSION_TAG_COMMIT: rolling Responses schema read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/reference/resources/responses/methods/create; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: model; tools/tool_choice; max_tool_calls; background; conversation; previous_response_id; include; CLAIM_IDS: PM-C04-GPT-002..006; RELATION: maps explicit route request/response fields and tool/source/state controls; SCOPE_LIMIT: schema availability does not prove correct routing, state completeness or business acceptance; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C04-013; TYPE: provider API documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Migrate to the Responses API; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/guides/migrate-to-responses; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: Messages versus Items; tool/function shape; state carrier; instructions resend; CLAIM_IDS: PM-C04-GPT-005; RELATION: direct evidence that endpoint migration changes output, tool and state representation; SCOPE_LIMIT: migration guide; no semantic round-trip or custom adapter guarantee; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C04-014; TYPE: provider API documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Batch API; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/guides/batch; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: 24-hour window; single-model input; unique custom_id; unordered output; expiration/partial results; CLAIM_IDS: PM-C04-GPT-006; RELATION: maps batch as a distinct asynchronous route and receipt/join requirements; SCOPE_LIMIT: published service contract; actual completion time, queue and tenant policy not measured; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C04-015; TYPE: provider-maintained OSS documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Models; PUBLICATION_OR_REPOSITORY: OpenAI Agents SDK documentation; DATE: N/D; VERSION_TAG_COMMIT: v0.22-era rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://openai.github.io/openai-agents-python/models/; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: default model; per-agent/provider selection; retry/timeouts; adapter feature differences; CLAIM_IDS: PM-C04-GPT-002/007; RELATION: maps implicit SDK default, application-selected model/provider and retry boundary; SCOPE_LIMIT: docs can change after v0.22.0; no live backend, fallback graph or adapter certification; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C04-016; TYPE: provider-maintained OSS documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Tracing; PUBLICATION_OR_REPOSITORY: OpenAI Agents SDK documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://openai.github.io/openai-agents-python/tracing/; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: trace/span types; default tracing; ZDR limitation; CLAIM_IDS: PM-C04-GPT-008; RELATION: maps observable SDK lifecycle and missing-trace boundary; SCOPE_LIMIT: trace occurrence is not external receipt or final business acceptance; tenant retention unknown; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• SOURCE_ID: EXT-C04-017; TYPE: provider API documentation; AUTHOR_OR_ORG: OpenAI; TITLE: Advanced usage; PUBLICATION_OR_REPOSITORY: OpenAI API documentation; DATE: N/D; VERSION_TAG_COMMIT: rolling docs read 2026-09-08; DOI_OR_CANONICAL_URL: https://developers.openai.com/api/docs/guides/advanced-usage; ACCESSED: 2026-09-08; SNAPSHOT_OR_DIGEST: live readback; archival snapshot pending; SUPPORTING_LOCATOR: seed caveat; system_fingerprint for backend configuration changes; CLAIM_IDS: PM-C04-GPT-002/008; RELATION: maps backend-change cohort signal and determinism boundary; SCOPE_LIMIT: fingerprint sameness is not semantic equivalence or full backend identity; STATUS: REGISTERED_DIRECT_SNAPSHOT_PENDING

• CLAIM_ID / QUESTION: PM-C04-GPT-001/002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C04-009/010/012/015/017; SOURCE_OR_EXPERIMENT_ID: EXT-C04-009/010/012/015/017; SUPPORTING_LOCATOR: model selection, model page, Responses fields, SDK default, system_fingerprint; RELATION: maps explicit/implicit model route identity and capability prefilter; SCOPE_AND_LIMIT: no live quality, tenant availability, silent substitution or backend certification; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING_WITH_SCOPE

• CLAIM_ID / QUESTION: PM-C04-GPT-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C04-011/012; SOURCE_OR_EXPERIMENT_ID: EXT-C04-011/012; SUPPORTING_LOCATOR: tool flow, allowed tools, parallel control, Responses fields; RELATION: maps proposal/execution and tool candidate boundaries; SCOPE_AND_LIMIT: tool controls are not authorization, external receipt or business acceptance; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING_WITH_SCOPE

• CLAIM_ID / QUESTION: PM-C04-GPT-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C02-055/056/057; SOURCE_OR_EXPERIMENT_ID: EXT-C02-055/056/057; SUPPORTING_LOCATOR: raw result include, metadata filter, source-IAM caveat; RELATION: maps source route and evidence observability; SCOPE_AND_LIMIT: all-path authorization and citation completeness remain unproved; PUBLICATION_STATUS: CITABLE_REUSED_PRODUCT_MAPPING_WITH_SCOPE

• CLAIM_ID / QUESTION: PM-C04-GPT-005/006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C03-019/020 + EXT-C04-012..014; SOURCE_OR_EXPERIMENT_ID: EXT-C03-019/020 + EXT-C04-012..014; SUPPORTING_LOCATOR: state carrier, background storage, endpoint migration, batch ordering/expiration; RELATION: maps state adapter and online/background/batch route differences; SCOPE_AND_LIMIT: no semantic cross-surface equivalence, actual queue or organization retention values; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING_WITH_SCOPE

• CLAIM_ID / QUESTION: PM-C04-GPT-007/008; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C04-015..017; SOURCE_OR_EXPERIMENT_ID: EXT-C04-015..017; SUPPORTING_LOCATOR: retry safety, adapter limits, trace spans/ZDR, system_fingerprint; RELATION: maps retry/observability controls and their limits; SCOPE_AND_LIMIT: no application fallback graph, production SLO or external final-state proof; PUBLICATION_STATUS: CITABLE_PRODUCT_MAPPING_WITH_SCOPE

• CLAIM_ID / QUESTION: CLM-C04-001..008; ORIGIN_CLASS: COMPILER_EXPERIMENT; EVIDENCE_ID: EXP-C04-LOCAL-001/002; SOURCE_OR_EXPERIMENT_ID: EXP-C04-LOCAL-001/002; SUPPORTING_LOCATOR: local runner/result artifacts and complete SHA-256; RELATION: preserves this study's 10/10 contract and 16/16 counterexample evidence; SCOPE_AND_LIMIT: not GPT/OpenAI/model/API/router live evidence; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_EXPERIMENT

• CLAIM_ID / QUESTION: PM-C04-GPT-001..008; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: SYN-PM-GPT-C04-001; SOURCE_OR_EXPERIMENT_ID: EXT-C02-055..057 + EXT-C03-019/020 + EXT-C04-009..017 + EXP-C04-LOCAL-001/002; SUPPORTING_LOCATOR: PM-GPT-CORE-04 mapping, loss matrix and safe profile; RELATION: derives route separation, loss-budget and verification requirements; SCOPE_AND_LIMIT: publication must label as this study's analysis; provider/tenant live test was not run; PUBLICATION_STATUS: CITABLE_AS_THIS_STUDY_ANALYSIS

• CORE-06 now has explicit external-source and first-party-experiment IDs plus claim relations.

• Canonical URLs and supporting sections are complete for EXT-C06-001..010; archival snapshots/digests remain required before final public release.

• S045/S050-contained originals and upstream CORE-03/05 dependency provenance remain RECOVERY_ACTIVE; no claim was silently dropped or converted into external authorship.

• This closes a registry-structure and direct-source-reachability unit, not the global publication gate.

外部原典の回収と、本研究の観測・実験の登録は別queueで進める。外部原典の回収作業によって、既存のUSER_ENV_OBSERVATION、USER_EXPERIMENT、COMPILER_EXPERIMENTをEXTERNAL_SOURCEへ再分類しない。

• CORE-03の外部evidence表はsource名・snapshotを持つが、同表にcanonical URLがない。

• CORE-04〜06にはclaim supportやcollection record上の資料名だけで、統一書誌IDへ未接続の項目がある。

• CORE-07は初稿であり、複数のinternal direct spanと外部反証が未回収である。

• 現在のworkspaceにはregisterから参照される一部過去test artifactがなく、実在場所の再解決が必要である。

• 統一された脚注キーと参考文献生成規則は本policy以前には存在しなかった。

• SOURCE_ID: EXT-C05-001; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_DOC; AUTHOR / TITLE: OpenAI / Human-in-the-loop; URL: https://openai.github.io/openai-agents-python/human_in_the_loop/; VERSION / ACCESS / LOCATOR: rolling; accessed 2026-09-08; Marking tools / How approval works / Automatic decisions / Long-running approvals; RELATION / LIMIT: PM-C05-GPT-001/002; documented approval mechanism only; fixed v0.22.0 parity UNKNOWN; snapshot pending

• SOURCE_ID: EXT-C04-015 (reuse); ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_DOC; AUTHOR / TITLE: OpenAI / Models; URL: https://openai.github.io/openai-agents-python/models/; VERSION / ACCESS / LOCATOR: rechecked 2026-09-08; Runner-managed retries / Safety boundaries; response_started, replay_safety, stateful_request, approve_unsafe_replay; RELATION / LIMIT: PM-C05-GPT-003; model replay policy only, not tool-side-effect idempotency

PM-C05-GPT-001/002 → EXT-C05-001; PM-C05-GPT-003 → EXT-C04-015. Application digest/revalidation requirements are JOINT_ANALYSIS based on CORE-05, not a provider guarantee. Discovery provenance: AUX-E-20260908T2039-01/02; exact communication locators and modified times are in PM-GPT-CORE-05. First-party experiments unchanged. All external archival snapshots and fixed-release parity remain pending.

• SOURCE_ID: EXT-C05-002; ORIGIN: EXTERNAL_SOURCE; AUTHOR / TITLE: OpenAI / GPT Actions production; CANONICAL URL: https://developers.openai.com/api/docs/actions/production; ACCESS / LOCATOR: 2026-09-08; Consequential flag; RELATION / LIMIT: PM-C05-GPT-004; rolling specification, not human comprehension or external commit proof; snapshot pending

• SOURCE_ID: EXT-C05-003; ORIGIN: EXTERNAL_SOURCE; AUTHOR / TITLE: OpenAI / Connectors and remote MCP servers; CANONICAL URL: https://developers.openai.com/api/docs/guides/tools-connectors-mcp; ACCESS / LOCATOR: 2026-09-08; Filtering tools, Calling tools, Approvals; RELATION / LIMIT: PM-C05-GPT-005; allowed_tools, approval items, mcp_call; not downstream IAM or independent final-state proof; snapshot pending

The non-equivalence to business authorization and external final-state proof is JOINT_ANALYSIS, not a quoted provider guarantee. No experiment was relabeled.

• SOURCE_ID: EXT-C05-004; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_DOC_AND_CODE; AUTHOR / TITLE: OpenAI / Human-in-the-loop; run_state.py; CANONICAL URL: https://github.com/openai/openai-agents-python/blob/v0.22.0/docs/human_in_the_loop.md ; https://github.com/openai/openai-agents-python/blob/v0.22.0/src/agents/run_state.py; VERSION / ACCESS / LOCATOR: tag v0.22.0; release commit 4df9ecf; accessed 2026-09-09; docs: approval flow/long-running approvals/versioning; code: schema 1.16, approve/reject, approval/tool-invocation/MCP serialization; RELATION / LIMIT: PM-C05-GPT-006; fixed-release parity for approval/resume identity and persistence only; not trusted rendering, comprehension, business authorization or external commit proof

• SOURCE_ID: EXT-C05-005; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_DOC; AUTHOR / TITLE: OpenAI / Tracing; CANONICAL URL: https://github.com/openai/openai-agents-python/blob/v0.22.0/docs/tracing.md; VERSION / ACCESS / LOCATOR: tag v0.22.0; release commit 4df9ecf; accessed 2026-09-09; Default tracing; Traces and spans; Long-running workers and immediate exports; Sensitive data; Custom tracing processors; RELATION / LIMIT: PM-C05-GPT-007; fixed-release trajectory surface, export timing, ZDR and privacy boundaries; not external final-state or immutable audit-retention proof

• SOURCE_ID: EXT-C03-014 (reuse); ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_RELEASE; AUTHOR / TITLE: OpenAI / Release v0.22.0; CANONICAL URL: https://github.com/openai/openai-agents-python/releases/tag/v0.22.0; VERSION / ACCESS / LOCATOR: released 2026-08-19; commit 4df9ecf; accessed 2026-09-09; RELATION / LIMIT: anchors EXT-C05-004/005 to the released tag; release notes do not provide live tenant/runtime guarantees

PM-C05-GPT-006/007 use external fixed-version sources for implementation statements. The requirements to bind approval to this study's canonical operation digest and to verify final state independently are JOINT_ANALYSIS derived from CORE-05; they are not attributed to OpenAI. Existing user/compiler experiments remain first-party evidence and were not used as GPT observations.

• SOURCE_ID: EXT-C06-011; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: OpenAI / Prompting; Migrate from prompt objects; CANONICAL URL: https://developers.openai.com/api/docs/guides/prompting ; https://developers.openai.com/api/docs/guides/prompting/migrate-from-prompt-object; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; Prompts in your application; migration summary; before/after; production checklist; RELATION / LIMIT: PM-C06-GPT-001/002/007; code-managed prompt, typed arguments, Responses input/instructions, git/PR/test/release guidance; not an automatic composite-bundle guarantee

• SOURCE_ID: EXT-C06-012; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DEPRECATION; AUTHOR / TITLE: OpenAI / Deprecations — reusable prompts; CANONICAL URL: https://developers.openai.com/api/docs/deprecations; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; 2026-06-03 reusable prompts entry; shutdown scheduled 2026-11-30; RELATION / LIMIT: PM-C06-GPT-003; temporal migration anchor; scheduled shutdown is not proof of immediate unavailability or completed tenant migration

• SOURCE_ID: EXT-C06-013; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_CODE; AUTHOR / TITLE: OpenAI / Agents SDK prompts.py; CANONICAL URL: https://github.com/openai/openai-agents-python/blob/v0.22.0/src/agents/prompts.py; VERSION / ACCESS / LOCATOR: tag v0.22.0; release commit 4df9ecf; accessed 2026-09-09; Prompt and PromptUtil.to_model_input; RELATION / LIMIT: PM-C06-GPT-004/006; fixed adapter fields and dynamic/static resolution only; API lifetime, provider object availability and organization deployment not guaranteed

• SOURCE_ID: EXT-C06-014; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_ISSUE; AUTHOR / TITLE: OpenAI Agents SDK issue #3321 / Prompt config validation misses invalid ids; CANONICAL URL: https://github.com/openai/openai-agents-python/issues/3321; VERSION / ACCESS / LOCATOR: opened 2026-05-09; closed; upstream main bc3607ba report; read 2026-09-09; RELATION / LIMIT: PM-C06-GPT-005; bounded validation failure signal triangulated against tagged code shape; not a live provider incident or universal runtime failure

PM-C06-GPT-001..007 are Product Mapping relations. Reused EXT-C03-014 anchors SDK v0.22.0 and existing CORE-04 model-route sources remain separate. CORE-06 EXP-C06-001/002 remain first-party compiler experiments; no GPT/API/tenant execution occurred and no empirical origin was changed.

• SOURCE_ID: EXT-C07-001; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: OpenAI / Evaluation best practices; Working with evals; CANONICAL URL: https://developers.openai.com/api/docs/guides/evaluation-best-practices ; https://developers.openai.com/api/docs/guides/evals; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; eval lifecycle, task-specific data, continuous evaluation, data_source_config, testing_criteria, run result counts; RELATION / LIMIT: PM-C07-GPT-001/003/009; current public workflow, not dataset immutability, holdout isolation or organization release proof

• SOURCE_ID: EXT-C07-002; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DEPRECATION; AUTHOR / TITLE: OpenAI / Deprecations — Evals and Graders; CANONICAL URL: https://developers.openai.com/api/docs/deprecations; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; announced 2026-06-03; existing evals read-only 2026-10-31; dashboard/API shutdown scheduled 2026-11-30; RELATION / LIMIT: PM-C07-GPT-002; temporal migration anchor; not proof of immediate unavailability or a complete replacement

• SOURCE_ID: EXT-C07-003; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: OpenAI / Datasets; Graders; Agent evals; CANONICAL URL: https://developers.openai.com/api/docs/guides/evaluation-getting-started ; https://developers.openai.com/api/docs/guides/graders ; https://developers.openai.com/api/docs/guides/agent-evals; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; rows/annotations/grader types, score-model configuration, Python invalid/error behavior, trace evaluation; RELATION / LIMIT: PM-C07-GPT-001/004/005; product affordances only; grader correctness, human agreement, trace completeness and retention remain unproven

• SOURCE_ID: EXT-C07-004; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: OpenAI / Prompt optimizer; Fine-tuning best practices; CANONICAL URL: https://developers.openai.com/api/docs/guides/prompt-optimizer ; https://developers.openai.com/api/docs/guides/fine-tuning-best-practices; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; dataset/annotation/grader optimization loop; training/test split; RELATION / LIMIT: PM-C07-GPT-006; supports separation intent, not an automatic sealed holdout or contamination guarantee

• SOURCE_ID: EXT-C07-005; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_REPOSITORY; AUTHOR / TITLE: OpenAI / openai/evals; CANONICAL URL: https://github.com/openai/evals ; https://github.com/openai/evals/commit/8eac7a7de5215c907fbddc30efdaf316913eccdd; VERSION / ACCESS / LOCATOR: repository read 2026-09-09; latest visible commit anchor 2026-04-14, full SHA 8eac7a7de5215c907fbddc30efdaf316913eccdd; no GitHub release tag; RELATION / LIMIT: PM-C07-GPT-007; OSS harness/registry only; not the hosted Evals replacement, SLA or API compatibility guarantee

• SOURCE_ID: EXT-C07-006; ORIGIN: EXTERNAL_SOURCE / PEER_REVIEWED_RESEARCH; AUTHOR / TITLE: Shi et al. / Judging the Judges: A Systematic Study of Position Bias in LLM-as-a-Judge; CANONICAL URL: https://aclanthology.org/2025.ijcnlp-long.18/; VERSION / ACCESS / LOCATOR: ACL-IJCNLP 2025; 15 judges, MTBench/DevBench, >150k judgments; order/permutation analyses; RELATION / LIMIT: PM-C07-GPT-005; independent bounded evidence of variable position bias; not an OpenAI-product defect or universal judge ranking

• SOURCE_ID: EXT-C07-007; ORIGIN: EXTERNAL_SOURCE / RESEARCH_PREPRINT; AUTHOR / TITLE: Dekoninck et al. / ConStat: Performance-Based Contamination Detection in Large Language Models; CANONICAL URL: https://arxiv.org/abs/2405.16281; VERSION / ACCESS / LOCATOR: arXiv:2405.16281; accessed 2026-09-09; primary/reference benchmarks and rephrased/synthetic same-distribution comparison; RELATION / LIMIT: PM-C07-GPT-008; bounded contamination-detection method; does not prove contamination in any named GPT model

• SOURCE_ID: EXT-C07-008; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Define success criteria and build evaluations; CANONICAL URL: https://platform.claude.com/docs/en/test-and-evaluate/develop-tests; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; measurable criteria, real-distribution/edge/held-out tests, code/human/LLM grader comparison; RELATION / LIMIT: PM-C07-CLAUDE-001..004; evaluation design guidance, not hosted artifact/version/retention or release guarantee

• SOURCE_ID: EXT-C07-009; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Prompt engineering overview and prompting best practices; CANONICAL URL: https://platform.claude.com/docs/en/build-with-claude/prompt-engineering/overview ; https://platform.claude.com/docs/en/build-with-claude/prompt-engineering/claude-prompting-best-practices; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; prompt engineering not universal remedy; current model-specific re-evaluation; Claude 4.6+ prefill migration boundary; RELATION / LIMIT: PM-C07-CLAUDE-005/006; current guidance only; model/task transfer must be re-evaluated

• SOURCE_ID: EXT-C07-010; ORIGIN: EXTERNAL_SOURCE / PROVIDER_ANNOUNCEMENT; AUTHOR / TITLE: Anthropic / Improve your prompts in the developer console; CANONICAL URL: https://claude.com/blog/prompt-improver; VERSION / ACCESS / LOCATOR: published 2024-10-14; accessed 2026-09-09; prompt improver, examples, ideal output, 5-point evaluator, reported bounded examples; RELATION / LIMIT: PM-C07-CLAUDE-005/006; historical Console surface and vendor tests only; current artifact version/export/retention and universal gain not proven

• SOURCE_ID: EXT-C07-011; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_REPOSITORY; AUTHOR / TITLE: Anthropic / claude-cookbooks; CANONICAL URL: https://github.com/anthropics/claude-cookbooks; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; author-maintained evaluation/RAG/notebook recipes; RELATION / LIMIT: PM-C07-CLAUDE-001/007; sample harness, not hosted product, SLA or current-model compatibility guarantee

• SOURCE_ID: EXT-C07-012; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_ISSUE; AUTHOR / TITLE: Anthropic claude-cookbooks issue #761; CANONICAL URL: https://github.com/anthropics/claude-cookbooks/issues/761; VERSION / ACCESS / LOCATOR: opened 2026-07-07; open/read 2026-09-09; reported Sonnet 4.6 prefill rejection and broad exception-to-false conversion in evaluation scripts; RELATION / LIMIT: PM-C07-CLAUDE-006/007; bounded harness/version regression intent; not a general current Claude defect or independently reproduced incident

• SOURCE_ID: EXT-C07-013; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Batch processing; CANONICAL URL: https://platform.claude.com/docs/en/build-with-claude/batch-processing; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; unordered custom_id, independent statuses, 24-hour expiry, 29-day availability; RELATION / LIMIT: PM-C07-CLAUDE-008; execution carrier only; not eval registry, business acceptance or durable evidence store

• SOURCE_ID: EXT-C07-014; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Structured outputs; CANONICAL URL: https://platform.claude.com/docs/en/build-with-claude/structured-outputs; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; JSON schema/grammar and schema-cache boundary; RELATION / LIMIT: PM-C07-CLAUDE-003/008; syntax contract only; not semantic correctness, rubric validity or judge calibration

EXT-C07-006/007 are reused for bounded judge-position and contamination counterevidence. EXT-C01-032, EXT-C03-021 and EXT-C04-024 remain the fixed SDK/trajectory/error anchors. Existing CORE-07 12/12 remains first-party COMPILER_EXPERIMENT; no Anthropic API, Console, organization, Batch, SDK/CLI, model, dataset or judge was operated.

PM-C07-GPT-001..009 are Product Mapping relations. The inconsistency between current Dataset guidance to export into Evals and the scheduled Evals shutdown is retained as a temporal migration residual, not silently resolved. Existing EXP-C07-001 remains a first-party compiler experiment; no OpenAI API, tenant, dataset, grader, optimizer, trace or model was executed.

• SOURCE_ID: EXT-C01-021; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: OpenAI / Conversation state; CANONICAL URL: https://developers.openai.com/api/docs/guides/conversation-state; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; Conversations API; previous_response_id; response/conversation persistence and retention; RELATION / LIMIT: PM-C01-GPT-001..003; durable provider conversation/item surface only, not authoritative task state, source snapshot or business acceptance

• SOURCE_ID: EXT-C01-022; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: OpenAI / Background mode; CANONICAL URL: https://developers.openai.com/api/docs/guides/background; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; polling status; cancellation; streaming resume; ZDR temporary storage; RELATION / LIMIT: PM-C01-GPT-003/004; response runtime/retention boundary only, not artifact acceptance, compensation or external final state

• SOURCE_ID: EXT-C01-023; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: OpenAI / Webhooks; CANONICAL URL: https://developers.openai.com/api/docs/guides/webhooks; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; signature verification; response.completed; retrieve-by-ID; duplicate delivery and webhook-id; RELATION / LIMIT: PM-C01-GPT-005; notification/dedup surface only, not exactly-once business completion

• SOURCE_ID: EXT-C01-024; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_DOC_AND_CODE; AUTHOR / TITLE: OpenAI / Agents SDK Sessions; openai_conversations_session.py; CANONICAL URL: https://openai.github.io/openai-agents-python/sessions/ ; https://github.com/openai/openai-agents-python/blob/v0.22.0/src/agents/memory/openai_conversations_session.py; VERSION / ACCESS / LOCATOR: rolling docs + tag v0.22.0 / release commit 4df9ecf; accessed 2026-09-09; session IDs/backends/persistence; fixed adapter; RELATION / LIMIT: PM-C01-GPT-001/006/008; backend-dependent durability/TTL/consistency; live deployment and concurrent-use guarantees UNKNOWN

• SOURCE_ID: EXT-C01-025; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_DOC_AND_CODE; AUTHOR / TITLE: OpenAI / Agents SDK Results and RunState; run_state.py; CANONICAL URL: https://openai.github.io/openai-agents-python/results/ ; https://openai.github.io/openai-agents-python/ref/run_state/ ; https://github.com/openai/openai-agents-python/blob/v0.22.0/src/agents/run_state.py; VERSION / ACCESS / LOCATOR: rolling docs + tag v0.22.0 / release commit 4df9ecf; accessed 2026-09-09; final_output, to_state, serialization/restore boundaries; RELATION / LIMIT: PM-C01-GPT-001/007/008; resumable state only, not artifact acceptance; context serialization and exclusive resume remain application responsibilities

• SOURCE_ID: EXT-C01-026; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_ISSUES; AUTHOR / TITLE: OpenAI Agents SDK issues #3820 and #3123; CANONICAL URL: https://github.com/openai/openai-agents-python/issues/3820 ; https://github.com/openai/openai-agents-python/issues/3123; VERSION / ACCESS / LOCATOR: opened 2026-07-12 for 0.18.2 and 2026-05-05 for 0.15.1; both closed/fixed; read 2026-09-09; RELATION / LIMIT: PM-C01-GPT-009; historical concurrency/history regression test intents only; not current v0.22.0 defect evidence

EXT-C01-011 and EXT-C03-014 are reused to anchor handoff semantics and the v0.22.0 release. Existing CORE-01 local experiment records retain their first-party COMPILER_EXPERIMENT origin.

• SOURCE_ID: EXT-C01-027; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Using the Messages API; CANONICAL URL: https://platform.claude.com/docs/en/build-with-claude/working-with-messages; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; multiple conversational turns; stateless API/full history; synthetic assistant messages; RELATION / LIMIT: PM-C01-CLAUDE-001/002; current public behavior only, not task-state, history-origin or artifact-acceptance proof

• SOURCE_ID: EXT-C01-028; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Batch processing; CANONICAL URL: https://platform.claude.com/docs/en/build-with-claude/batch-processing; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; independent async requests; custom_id; succeeded/errored/canceled/expired; unordered and partial results; 24-hour expiry, 29-day result availability; RELATION / LIMIT: PM-C01-CLAUDE-003; public batch lifecycle, not tenant SLA, business completion or authoritative output retention

• SOURCE_ID: EXT-C01-029; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Work with sessions; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/sessions; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; continue/resume/fork; result session ID; same-machine transcript; SessionStore/cross-host guidance; RELATION / LIMIT: PM-C01-CLAUDE-004..006; session continuity only, not exclusive task ownership, merge, source freshness or acceptance

• SOURCE_ID: EXT-C01-030; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Rewind file changes with checkpointing; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/file-checkpointing; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; checkpoint UUID; rewind; limitations for Bash, subagents, directories and remote files; conversation not rewound; RELATION / LIMIT: PM-C01-CLAUDE-007; scoped local-file recovery only, not external transaction rollback or full workspace restore

• SOURCE_ID: EXT-C01-031; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Intercept and control agent behavior with hooks; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/hooks; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; PreToolUse and session events; timeout behavior; Python/TypeScript event difference; RELATION / LIMIT: PM-C01-CLAUDE-008; hook trajectory evidence only, not immutable audit receipt or authoritative final state

• SOURCE_ID: EXT-C01-032; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_RELEASE; AUTHOR / TITLE: Anthropic / claude-agent-sdk-python v0.2.152; CANONICAL URL: https://github.com/anthropics/claude-agent-sdk-python/releases/tag/v0.2.152; VERSION / ACCESS / LOCATOR: released 2026-09-02; commit a8b1e28; bundled Claude CLI 2.1.259; read 2026-09-09; RELATION / LIMIT: PM-C01-CLAUDE-009; fixed package/CLI anchor, not live deployment configuration or forward compatibility guarantee

• SOURCE_ID: EXT-C01-033; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_ISSUE; AUTHOR / TITLE: Anthropic Agent SDK Python issue #180 / Structured outputs; CANONICAL URL: https://github.com/anthropics/claude-agent-sdk-python/issues/180; VERSION / ACCESS / LOCATOR: opened 2025-09-25; closed; read 2026-09-09; RELATION / LIMIT: PM-C01-CLAUDE-009; historical capability-gap/regression intent only, not a current v0.2.152 defect or runtime failure

Existing CORE-01 local artifacts retain their first-party COMPILER_EXPERIMENT origin. No Anthropic API, organization, workspace, model, SDK process, tool, checkpoint or external system was operated.

• SOURCE_ID: EXT-C06-015; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Migrate to Claude Agent SDK; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/migration-guide; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; v0.1.0 system-prompt default change; omitted/empty settingSources boundary; historical <=0.1.59 note; RELATION / LIMIT: PM-C06-CLAUDE-002/003; migration and effective-load boundary, not current live deployment proof

• SOURCE_ID: EXT-C06-016; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Claude Code features; Modifying system prompts; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/claude-code-features ; https://code.claude.com/docs/en/agent-sdk/modifying-system-prompts; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; CLAUDE.md levels, skills, direct/preset system prompt; RELATION / LIMIT: PM-C06-CLAUDE-002/005; composition surface only; semantic conflict resolution and actual loaded values require readback

• SOURCE_ID: EXT-C06-017; ORIGIN: EXTERNAL_SOURCE / AUTHOR_PRODUCT_DOC; AUTHOR / TITLE: Anthropic / Claude Code settings; CANONICAL URL: https://code.claude.com/docs/en/settings; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; managed/CLI/project/user precedence, merge exceptions, env and cloud/local boundaries, invalid-value handling; RELATION / LIMIT: PM-C06-CLAUDE-004/005; public config rules, not tenant managed-settings values or a full exported effective bundle

• SOURCE_ID: EXT-C06-018; ORIGIN: EXTERNAL_SOURCE / PROVIDER_RELEASE_NOTE; AUTHOR / TITLE: Anthropic / System prompt release notes; CANONICAL URL: https://platform.claude.com/docs/en/release-notes/system-prompts/overview; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; claude.ai/mobile updates separated from Claude API; RELATION / LIMIT: PM-C06-CLAUDE-001; product-surface temporal boundary; unpublished prompt content remains UNKNOWN

• SOURCE_ID: EXT-C06-019; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Prompt caching; Cache diagnostics; CANONICAL URL: https://platform.claude.com/docs/en/build-with-claude/prompt-caching ; https://platform.claude.com/docs/en/build-with-claude/cache-diagnostics; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; 5-minute/1-hour TTL, prefix identity, invalidation and usage signals; RELATION / LIMIT: PM-C06-CLAUDE-007; cache behavior only, not release identity, behavior equivalence or rollback proof

• SOURCE_ID: EXT-C06-020; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Structured outputs; CANONICAL URL: https://platform.claude.com/docs/en/build-with-claude/structured-outputs; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; JSON schema/grammar scope, Citations incompatibility, schema cache up to 24 hours including ZDR; RELATION / LIMIT: PM-C06-CLAUDE-006/007; output-contract and retention boundary, not full IO correctness or physical purge proof

• SOURCE_ID: EXT-C06-021; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_RELEASE; AUTHOR / TITLE: Anthropic / Agent SDK Python v0.2.152 and changelog; CANONICAL URL: https://github.com/anthropics/claude-agent-sdk-python/releases/tag/v0.2.152 ; https://github.com/anthropics/claude-agent-sdk-python/blob/main/CHANGELOG.md; VERSION / ACCESS / LOCATOR: release 2026-09-02; commit a8b1e28; bundled CLI 2.1.259; changelog includes v0.1.62 empty-setting-sources fix; read 2026-09-09; RELATION / LIMIT: PM-C06-CLAUDE-002/003/008; fixed anchor and historical regression intent, not current defect or forward compatibility guarantee

• SOURCE_ID: EXT-C06-022; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_ISSUES; AUTHOR / TITLE: Anthropic Claude Code issues #57618 and #24991; CANONICAL URL: https://github.com/anthropics/claude-code/issues/57618 ; https://github.com/anthropics/claude-code/issues/24991; VERSION / ACCESS / LOCATOR: both closed as not planned; #24991 opened 2026-02-11; read 2026-09-09; RELATION / LIMIT: PM-C06-CLAUDE-008/009; bounded operator reports motivating scope-isolation/sentinel tests; claimed cause and performance are not generalized

EXT-C01-032 is reused as the fixed SDK/CLI anchor. Existing CORE-06 7/7 and 19/19 remain first-party COMPILER_EXPERIMENT; no Anthropic API, organization, SDK/CLI process, configuration or model was operated.

• SOURCE_ID: EXT-C04-018; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Model IDs and versioning; CANONICAL URL: https://platform.claude.com/docs/en/about-claude/models/model-ids-and-versions; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; 4.6+ canonical dateless IDs; pre-4.6 aliases; platform formats; weights versus serving infrastructure; RELATION / LIMIT: PM-C04-CLAUDE-001; route identity and temporal boundary only; live tenant/cohort equivalence not proven

• SOURCE_ID: EXT-C04-019; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Tool use overview; How tool use works; CANONICAL URL: https://platform.claude.com/docs/en/agents-and-tools/tool-use/overview ; https://platform.claude.com/docs/en/agents-and-tools/tool-use/how-tool-use-works; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; client/server execution and tool-use contract; RELATION / LIMIT: PM-C04-CLAUDE-003; proposal/execution-location boundary only; business authorization and external commit not proven

• SOURCE_ID: EXT-C04-020; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Agent SDK Python and TypeScript references; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/python ; https://code.claude.com/docs/en/agent-sdk/typescript; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; model, fallback_model, mid-session model override/clear; RELATION / LIMIT: PM-C04-CLAUDE-002; public option surface only; trigger semantics, live quality and full state migration not proven

• SOURCE_ID: EXT-C04-021; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Configure permissions; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/permissions; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; hook→deny→ask→mode→allow→canUseTool evaluation and shadow warning; RELATION / LIMIT: PM-C04-CLAUDE-004; tool gate behavior only; source ACL and organization authorization remain separate

• SOURCE_ID: EXT-C04-022; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Service tiers; CANONICAL URL: https://platform.claude.com/docs/en/api/service-tiers; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; Standard/Priority/Batch; auto capacity fallback; observed usage tier; RELATION / LIMIT: PM-C04-CLAUDE-005; tier assignment boundary; contract capacity, price, SLO and live availability unknown

• SOURCE_ID: EXT-C04-023; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Batch processing; CANONICAL URL: https://platform.claude.com/docs/en/build-with-claude/batch-processing; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; unordered custom_id, independent result status, 24-hour expiry, 29-day availability, Workspace isolation; RELATION / LIMIT: PM-C04-CLAUDE-006; async lifecycle only; business completion, live deadline and dedupe not proven

• SOURCE_ID: EXT-C04-024; ORIGIN: EXTERNAL_SOURCE / PROVIDER_AND_AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / API errors; Rate limits; Agent SDK observability; CANONICAL URL: https://platform.claude.com/docs/en/api/errors ; https://platform.claude.com/docs/en/api/rate-limits ; https://code.claude.com/docs/en/agent-sdk/observability; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; error/request_id; limit/remaining/reset headers; CLI-emitted model/tool OTel; RELATION / LIMIT: PM-C04-CLAUDE-007/008; failure/telemetry carriers only; idempotency, trace completeness, retention and final acceptance not proven

EXT-C01-032 is reused as the Python Agent SDK v0.2.152 / commit a8b1e28 / bundled CLI 2.1.259 anchor. Existing CORE-04 routing research and LiteLLM operator incident remain provider-neutral counterevidence; they are not relabeled as Claude defects. Existing local fixtures remain first-party COMPILER_EXPERIMENT; no Anthropic API, organization, model, SDK process, tool, source or external system was operated.

• EXT-C02-061: EXT-C02-062; provider product documentation: provider product documentation; Anthropic: Anthropic; Use enterprise search: Use connectors to extend Claude's capabilities; Claude Help Center: Claude Help Center; page updated 2026-08-06: page updated 2026-08-20; live page: live page; https://support.claude.com/en/articles/12489464-use-enterprise-search: https://support.claude.com/en/articles/11176164-use-connectors-to-extend-claude-s-capabilities; 2026-09-09: 2026-09-09; live readback; archival snapshot pending: live readback; archival snapshot pending; Privacy and permissions; retention FAQ: Tool permissions; organization restriction; PM-C02-CLAUDE-001/002; Q-C02-001: PM-C02-CLAUDE-002/004; individual auth, original-system view permission, MCP calls, no external indexing, chat-linked retention: org-wide connector action restriction and per-user auth boundary; public product intent; connector internals/all-path/tenant revocation not proven: source object ACL and third-party/local connector behavior remain separate; REGISTERED_DIRECT_SNAPSHOT_PENDING: REGISTERED_DIRECT_SNAPSHOT_PENDING

• EXT-C02-061: EXT-C02-063; provider product documentation: provider API documentation; Anthropic: Anthropic; Use enterprise search: Search results and Citations; Claude Help Center: Claude Platform Docs; page updated 2026-08-06: N/D; live page: live docs; https://support.claude.com/en/articles/12489464-use-enterprise-search: https://platform.claude.com/docs/en/build-with-claude/search-results ; https://platform.claude.com/docs/en/build-with-claude/citations; 2026-09-09: 2026-09-09; live readback; archival snapshot pending: live readback; archival snapshot pending; Privacy and permissions; retention FAQ: source/title/content blocks; citation limitations; PM-C02-CLAUDE-001/002; Q-C02-001: PM-C02-CLAUDE-003/004; Q-C02-001/003; individual auth, original-system view permission, MCP calls, no external indexing, chat-linked retention: application-supplied source locator and cited span; public product intent; connector internals/all-path/tenant revocation not proven: no native IAM, completeness, freshness or principal-binding guarantee; REGISTERED_DIRECT_SNAPSHOT_PENDING: REGISTERED_DIRECT_SNAPSHOT_PENDING

• EXT-C02-061: EXT-C02-064; provider product documentation: provider API documentation; Anthropic: Anthropic; Use enterprise search: Files API and API/data retention; Claude Help Center: Claude Platform Docs; page updated 2026-08-06: N/D; live page: live docs; https://support.claude.com/en/articles/12489464-use-enterprise-search: https://platform.claude.com/docs/en/build-with-claude/files ; https://platform.claude.com/docs/en/manage-claude/api-and-data-retention; 2026-09-09: 2026-09-09; live readback; archival snapshot pending: live readback; archival snapshot pending; Privacy and permissions; retention FAQ: file_id lifecycle; feature eligibility table; PM-C02-CLAUDE-001/002; Q-C02-001: PM-C02-CLAUDE-003/004; Q-C02-001/002; individual auth, original-system view permission, MCP calls, no external indexing, chat-linked retention: provider file storage, delete/expiry and ZDR boundary; public product intent; connector internals/all-path/tenant revocation not proven: tenant expiry, physical purge and original-source IAM not proven; REGISTERED_DIRECT_SNAPSHOT_PENDING: REGISTERED_DIRECT_SNAPSHOT_PENDING

• EXT-C02-061: EXT-C02-065; provider product documentation: provider API documentation; Anthropic: Anthropic; Use enterprise search: MCP connector and permission policies; Claude Help Center: Claude Platform Docs; page updated 2026-08-06: N/D; live page: live docs; MCP beta; https://support.claude.com/en/articles/12489464-use-enterprise-search: https://platform.claude.com/docs/en/agents-and-tools/mcp-connector ; https://platform.claude.com/docs/en/managed-agents/permission-policies; 2026-09-09: 2026-09-09; live readback; archival snapshot pending: live readback; archival snapshot pending; Privacy and permissions; retention FAQ: OAuth bearer; allow/deny tools; always_ask/always_allow; PM-C02-CLAUDE-001/002; Q-C02-001: PM-C02-CLAUDE-002/004; Q-C02-001; individual auth, original-system view permission, MCP calls, no external indexing, chat-linked retention: remote-server/tool/approval execution boundary; public product intent; connector internals/all-path/tenant revocation not proven: tool approval is not document authorization; third-party retention/implementation separate; REGISTERED_DIRECT_SNAPSHOT_PENDING: REGISTERED_DIRECT_SNAPSHOT_PENDING

• EXT-C02-061: EXT-C02-066; provider product documentation: provider API documentation; Anthropic: Anthropic; Use enterprise search: Memory tool; Claude Help Center: Claude Platform Docs; page updated 2026-08-06: N/D; live page: memory_20250818; https://support.claude.com/en/articles/12489464-use-enterprise-search: https://platform.claude.com/docs/en/agents-and-tools/tool-use/memory-tool; 2026-09-09: 2026-09-09; live readback; archival snapshot pending: live readback; archival snapshot pending; Privacy and permissions; retention FAQ: client-side operation; handler commands; storage control; PM-C02-CLAUDE-001/002; Q-C02-001: PM-C02-CLAUDE-005/008; Q-C02-002; individual auth, original-system view permission, MCP calls, no external indexing, chat-linked retention: application-owned memory and explicit handler boundary; public product intent; connector internals/all-path/tenant revocation not proven: no provider guarantee for handler commit, reset, backup or physical purge; REGISTERED_DIRECT_SNAPSHOT_PENDING: REGISTERED_DIRECT_SNAPSHOT_PENDING

• EXT-C02-061: EXT-C02-067; provider product documentation: provider beta documentation; Anthropic: Anthropic; Use enterprise search: Using agent memory; Claude Help Center: Claude Platform Docs; page updated 2026-08-06: N/D; live page: managed-agents-2026-04-01; agent-memory-2026-07-22; https://support.claude.com/en/articles/12489464-use-enterprise-search: https://platform.claude.com/docs/en/managed-agents/memory; 2026-09-09: 2026-09-09; live readback; archival snapshot pending: live readback; archival snapshot pending; Privacy and permissions; retention FAQ: beta headers; mount/access/sync; immutable versions; PM-C02-CLAUDE-001/002; Q-C02-001: PM-C02-CLAUDE-006/007; Q-C02-002; individual auth, original-system view permission, MCP calls, no external indexing, chat-linked retention: workspace store, session mount, read-only/read-write, self-hosted sync and injection risk; public product intent; connector internals/all-path/tenant revocation not proven: beta/live tenant behavior and deployment conflict values not measured; REGISTERED_DIRECT_SNAPSHOT_PENDING: REGISTERED_DIRECT_SNAPSHOT_PENDING

• EXT-C02-061: EXT-C02-068; provider product documentation: provider beta API reference; Anthropic: Anthropic; Use enterprise search: Delete memory / Memory versions; Claude Help Center: Claude Platform API Reference; page updated 2026-08-06: N/D; live page: agent-memory-2026-07-22; https://support.claude.com/en/articles/12489464-use-enterprise-search: https://platform.claude.com/docs/en/api/beta/memory_stores/memories/delete ; https://platform.claude.com/docs/en/api/beta/memory_stores/memory_versions; 2026-09-09: 2026-09-09; live readback; archival snapshot pending: live readback; archival snapshot pending; Privacy and permissions; retention FAQ: tombstone; retained version history; redact; store delete relation; PM-C02-CLAUDE-001/002; Q-C02-001: PM-C02-CLAUDE-006/008; Q-C02-002; individual auth, original-system view permission, MCP calls, no external indexing, chat-linked retention: direct residual counterevidence: head delete does not erase versions; 30-day-plus conditions documented; public product intent; connector internals/all-path/tenant revocation not proven: physical media purge, exports/backups and tenant execution not proven; REGISTERED_DIRECT_SNAPSHOT_PENDING: REGISTERED_DIRECT_SNAPSHOT_PENDING

• EXT-C02-061: EXT-C02-069; provider product documentation: provider API documentation; Anthropic: Anthropic; Use enterprise search: Context editing; Claude Help Center: Claude Platform Docs; page updated 2026-08-06: N/D; live page: context-management-2025-06-27; https://support.claude.com/en/articles/12489464-use-enterprise-search: https://platform.claude.com/docs/en/build-with-claude/context-editing; 2026-09-09: 2026-09-09; live readback; archival snapshot pending: live readback; archival snapshot pending; Privacy and permissions; retention FAQ: tool-result/thinking clearing; memory integration; PM-C02-CLAUDE-001/002; Q-C02-001: PM-C02-CLAUDE-008/009; Q-C02-002/004; individual auth, original-system view permission, MCP calls, no external indexing, chat-linked retention: active-context reduction separated from persistent memory; public product intent; connector internals/all-path/tenant revocation not proven: not a storage deletion or long-context correctness guarantee; REGISTERED_DIRECT_SNAPSHOT_PENDING: REGISTERED_DIRECT_SNAPSHOT_PENDING

• PM-C02-CLAUDE-001..010: PM-C02-CLAUDE-010; EXTERNAL_SOURCE: JOINT_ANALYSIS; EXT-C02-061..069: TST-PM-CLAUDE-C02-001; provider original pages read 2026-09-09: CORE-02 test intents + EXT-C02-061..069 + EXT-C02-044..046; provider_mappings/PM-CLAUDE-CORE-02.md: PM-CLAUDE-CORE-02 §Required safe evidence profile; Claude Product Mapping only: safe live-test design; no promotion to Core or Organization fact: not executed; publication must label as test profile only; CITABLE_PRODUCT_MAPPING: CITABLE_AS_TEST_PROFILE_ONLY

GEMINI-A-001-RUN-014 provenance note (2026-09-09): existing CORE-02 test artifacts and Gemini UI observation were read back without reclassification. Their original USER_EXPERIMENT / COMPILER_EXPERIMENT / SAFE_LIVE_OBSERVATION labels, hashes, dates, and scope boundaries remain authoritative. No new external source ID was created; this is a readback record, not a new evidence claim.

• SOURCE_ID: EXT-C03-021; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / How the agent loop works; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/agent-loop; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; model/tool/result loop; ResultMessage; RELATION / LIMIT: PM-C03-CLAUDE-001/007; final result is not artifact or external acceptance

• SOURCE_ID: EXT-C03-022; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Subagents in the SDK; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/subagents; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; isolated context; partial at maxTurns; agent ID and same-session resume; RELATION / LIMIT: PM-C03-CLAUDE-001..004; no complete lineage, merge correctness or external atomicity guarantee

• SOURCE_ID: EXT-C03-023; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Work with sessions; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/sessions; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; continue/resume/fork; conversation not filesystem; RELATION / LIMIT: PM-C03-CLAUDE-003/007; no external-state restore or exclusive ownership guarantee

• SOURCE_ID: EXT-C03-024; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Intercept and control agent behavior with hooks; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/hooks; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; hook decisions; Python/TS session-event difference; permission-prompt multiplication; recursive-loop warning; RELATION / LIMIT: PM-C03-CLAUDE-004..006; operational warning, not reproduced live failure

• SOURCE_ID: EXT-C03-025; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Handle approvals and user input; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/user-input; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; canUseTool evaluation and PreToolUse for every call; RELATION / LIMIT: PM-C03-CLAUDE-005; tool approval is not business authorization or immutable receipt

EXT-C01-032 is reused for Python Agent SDK v0.2.152 / commit a8b1e28 / bundled CLI 2.1.259. Existing EXP-C03-LOCAL-001/002 remain first-party compiler experiments; no Claude runtime execution occurred.

• SOURCE_ID: EXT-C05-006; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / Handle tool calls; CANONICAL URL: https://platform.claude.com/docs/en/agents-and-tools/tool-use/handle-tool-calls; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; tool_use_id/tool_result match, is_error, external result trust boundary; RELATION / LIMIT: PM-C05-CLAUDE-001/003; model/application loop only; external commit and result truth not proven

• SOURCE_ID: EXT-C05-007; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Configure permissions; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/permissions; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; hook→deny→ask→mode→allow→canUseTool order; MCP interaction callback; RELATION / LIMIT: PM-C05-CLAUDE-002; tool gate only; business authorization/source ACL/org policy separate

• SOURCE_ID: EXT-C05-008; ORIGIN: EXTERNAL_SOURCE / PROVIDER_DOC; AUTHOR / TITLE: Anthropic / MCP connector; CANONICAL URL: https://platform.claude.com/docs/en/agents-and-tools/mcp-connector; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; beta mcp-client-2025-11-20; HTTP/SSE; OAuth; allow/deny/per-tool; ZDR ineligible; RELATION / LIMIT: PM-C05-CLAUDE-004; connector surface only; downstream IAM, retention, receipt and transaction unknown

• SOURCE_ID: EXT-C05-009; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / File checkpointing; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/file-checkpointing; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; Write/Edit/NotebookEdit scope; Bash/remote/directory/subagent/conversation exclusions; RELATION / LIMIT: PM-C05-CLAUDE-007; local file rewind boundary; external rollback not proven

• SOURCE_ID: EXT-C05-010; ORIGIN: EXTERNAL_SOURCE / AUTHOR_SDK_DOC; AUTHOR / TITLE: Anthropic / Hooks; Secure deployment; CANONICAL URL: https://code.claude.com/docs/en/agent-sdk/hooks ; https://code.claude.com/docs/en/agent-sdk/secure-deployment; VERSION / ACCESS / LOCATOR: accessed 2026-09-09; Pre/PostToolUse events; hook failure/delay; prompt-injection threat model; RELATION / LIMIT: PM-C05-CLAUDE-005/009; interception/audit intent only; authoritative receipt and delivery guarantee absent

• SOURCE_ID: EXT-C05-011; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_ISSUE; AUTHOR / TITLE: anthropics/claude-code #36149 / MCP tools execute twice; CANONICAL URL: https://github.com/anthropics/claude-code/issues/36149; VERSION / ACCESS / LOCATOR: opened 2026-03-19; closed not planned; Claude Code 2.1.79, Windows 11, stdio MCP; accessed 2026-09-09; RELATION / LIMIT: PM-C05-CLAUDE-006; historical operator repro and duplicate-side-effect test intent; not current/universal defect

• SOURCE_ID: EXT-C05-012; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_ISSUE; AUTHOR / TITLE: anthropics/claude-code #61097 / connector approval blocks remote Routine; CANONICAL URL: https://github.com/anthropics/claude-code/issues/61097; VERSION / ACCESS / LOCATOR: opened 2026-05-21; pinned Anthropic response says addressed; accessed 2026-09-09; RELATION / LIMIT: PM-C05-CLAUDE-008; historical approval-availability regression intent only

• SOURCE_ID: EXT-C05-013; ORIGIN: EXTERNAL_SOURCE / AUTHOR_OSS_ISSUE; AUTHOR / TITLE: anthropics/claude-code #79032 / auto-accept classifier unavailable without manual fallback; CANONICAL URL: https://github.com/anthropics/claude-code/issues/79032; VERSION / ACCESS / LOCATOR: opened 2026-07-19; closed duplicate; Claude Code 2.1.215 Linux; accessed 2026-09-09; RELATION / LIMIT: PM-C05-CLAUDE-008; bounded fail-closed/manual-route signal; current reproduction unknown

EXT-C01-032 is reused as the Python Agent SDK v0.2.152 / commit a8b1e28 / bundled CLI 2.1.259 anchor. Existing CORE-05 fixtures remain first-party COMPILER_EXPERIMENT; no Anthropic API, organization, SDK/CLI process, MCP server, filesystem or external system was operated.

• EVIDENCE_ID: EXT-G01-001; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Generate Text; LOCATOR: https://docs.x.ai/developers/model-capabilities/text/generate-text; TEMPORAL / SUPPORTING LOCATOR: accessed 2026-09-12; Responses preferred; storage on by default; 30-day retrieval/continuation; store:false; SUPPORT / BOUNDARY: PM-C01-GROK-001/002; provider history carrier only, not canonical task or acceptance

• EVIDENCE_ID: EXT-G01-002; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Function Calling; LOCATOR: https://docs.x.ai/developers/tools/function-calling; TEMPORAL / SUPPORTING LOCATOR: accessed 2026-09-12; function proposal, local result and previous_response_id continuation; SUPPORT / BOUNDARY: PM-C01-GROK-003; authorization, idempotency, receipt and external final state remain outside provider continuation

• EVIDENCE_ID: EXT-G01-003; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / API Overview; LOCATOR: https://docs.x.ai/overview; TEMPORAL / SUPPORTING LOCATOR: accessed 2026-09-12; Responses endpoint and grok-4.6 current example; SUPPORT / BOUNDARY: PM-C01-GROK-009; public metadata, not actual tenant route/configuration proof

• EVIDENCE_ID: EXT-G01-004; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Deferred Chat Completions; LOCATOR: https://docs.x.ai/developers/advanced-api-usage/deferred-chat-completions; TEMPORAL / SUPPORTING LOCATOR: page updated 2026-09-08; read 2026-09-12; request_id, 202 pending, exactly-one retrieval within 24 hours; SUPPORT / BOUNDARY: PM-C01-GROK-004; delivery lifecycle only, not durable task state or artifact acceptance

• EVIDENCE_ID: EXT-G01-005; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Batch API; LOCATOR: https://docs.x.ai/developers/advanced-api-usage/batch-api; TEMPORAL / SUPPORTING LOCATOR: accessed 2026-09-12; pending/success/error counters, cancel with completed results, per-request IDs, expires_at; SUPPORT / BOUNDARY: PM-C01-GROK-005; batch ended may contain errors/partial useful results and is not business completion

• EVIDENCE_ID: EXT-G01-006; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / API Security FAQ; LOCATOR: https://docs.x.ai/developers/faq/security; TEMPORAL / SUPPORTING LOCATOR: accessed 2026-09-12; default 30-day encrypted audit retention; team-wide ZDR; feature exclusions; x-zero-data-retention header; audit log; SUPPORT / BOUNDARY: PM-C01-GROK-002/006/007; public defaults only, negotiated/effective organization values and immutable export unknown

• EVIDENCE_ID: EXT-G01-007; ORIGIN_CLASS: EXTERNAL_SOURCE / AUTHOR_OSS_DOC; SOURCE: xAI / xai-sdk-python; LOCATOR: https://github.com/xai-org/xai-sdk-python; TEMPORAL / SUPPORTING LOCATOR: rolling main read 2026-09-12; official gRPC sync/async SDK, SemVer intent and minor/patch internal-change caveat; SUPPORT / BOUNDARY: PM-C01-GROK-008; author-maintained implementation surface, not a fixed installed/live version or forward guarantee

Existing CORE-01 6/6 and 12/12 artifacts retain first-party COMPILER_EXPERIMENT origin. No xAI API, team, Console, model, SDK process, tool, deferred request, batch or external system was operated.

• EVIDENCE_ID: EXT-G02-001; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Collections overview; LOCATOR: https://docs.x.ai/developers/files/collections; TEMPORAL / SUPPORTING LOCATOR: updated 2026-06-30; read 2026-09-12; persistent document storage, embedding index, multiple collections, semantic search, metadata, contextual embeddings; SUPPORT / BOUNDARY: PM-C02-GROK-001/008; product storage/search surface, not IAM propagation or durable user memory

• EVIDENCE_ID: EXT-G02-002; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Using Collections via API; LOCATOR: https://docs.x.ai/developers/files/collections/api; TEMPORAL / SUPPORTING LOCATOR: updated 2026-05-25; read 2026-09-12; separate Management API key, endpoint permissions, two-step upload/attach, search modes, remove/delete; SUPPORT / BOUNDARY: PM-C02-GROK-001/002/006/007; management permissions and visible operations, not all-path principal authorization or purge proof

• EVIDENCE_ID: EXT-G02-003; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_API_REFERENCE; SOURCE: xAI / Search documents; LOCATOR: https://docs.x.ai/developers/rest-api-reference/collections/search; TEMPORAL / SUPPORTING LOCATOR: updated 2026-02-13; read 2026-09-12; POST /v1/documents/search, collection IDs, optional filter, file/chunk/content/score result; SUPPORT / BOUNDARY: PM-C02-GROK-004; direct search result surface, not model prompt-path or source ACL proof

• EVIDENCE_ID: EXT-G02-004; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Collection metadata fields; LOCATOR: https://docs.x.ai/developers/files/collections/metadata; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-12; required/unique/inject fields and AIP-160 exact filtering; absent field returns no result; SUPPORT / BOUNDARY: PM-C02-GROK-003; application-supplied attributes, not native source-system IAM

• EVIDENCE_ID: EXT-G02-005; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Collections Search Tool; LOCATOR: https://docs.x.ai/developers/tools/collections-search; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-12; SDK collections_search, Responses file_search, polling to PROCESSED, multiple searches, collections://.../files/... citation; SUPPORT / BOUNDARY: PM-C02-GROK-004..006; tool/citation locator is not permission, freshness or faithfulness certificate

• EVIDENCE_ID: EXT-G02-006; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Managing Files; LOCATOR: https://docs.x.ai/developers/files/managing-files; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-12; permanent by default, optional 3600–2592000 second expiry, retrieve/content/delete and team scope; SUPPORT / BOUNDARY: PM-C02-GROK-007/008; visible file lifecycle only; physical purge/cache/replica/backup residual unknown

• EVIDENCE_ID: EXT-G02-007; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / API documentation and Grok 4.6 announcement; LOCATOR: https://docs.x.ai/ ; https://x.ai/news/grok-4-6; TEMPORAL / SUPPORTING LOCATOR: current docs read 2026-09-12; Grok 4.6 announcement published 2026-08-12; nominal 500k context; SUPPORT / BOUNDARY: PM-C02-GROK-010; capability metadata only, not NoLiMa/BABILong/LongBench v2 result or provider rank

EXT-G01-006 is reused for the published ZDR/Files/Collections incompatibility and deletion prerequisite. EXT-C02-044..046 are reused as the original NoLiMa/BABILong/LongBench v2 bounded counterevidence. Existing local and Gemini UI artifacts retain their original provenance; no xAI service was operated.

• EVIDENCE_ID: EXT-G03-001; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Function Calling; LOCATOR: https://docs.x.ai/developers/tools/function-calling; TEMPORAL / SUPPORTING LOCATOR: page updated 2026-09-04; read 2026-09-12; client/server tool split, tool choice, multiple calls, default parallel calls; SUPPORT / BOUNDARY: PM-C03-GROK-002/003; proposal and provider loop are not authorization, concurrency safety or external receipt

• EVIDENCE_ID: EXT-G03-002; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Advanced Tool Usage; LOCATOR: https://docs.x.ai/developers/tools/advanced-usage; TEMPORAL / SUPPORTING LOCATOR: page updated 2026-07-14; read 2026-09-12; server tools auto-execute, client tools pause; request-local max_turns resets across client-tool continuation; SUPPORT / BOUNDARY: PM-C03-GROK-002/004; application-global bound and external-effect recovery remain outside provider limit

• EVIDENCE_ID: EXT-G03-003; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Multi-Agent; LOCATOR: https://docs.x.ai/developers/model-capabilities/text/multi-agent; TEMPORAL / SUPPORTING LOCATOR: page updated 2026-07-02; read 2026-09-12; 4/16 agents, leader orchestration, leader-only visible output by default, optional encrypted subagent state, restricted tools/surfaces; SUPPORT / BOUNDARY: PM-C03-GROK-005/006; encrypted carrier and leader summary are not complete auditable lineage or accepted artifact

• EVIDENCE_ID: EXT-G03-004; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Remote MCP; LOCATOR: https://docs.x.ai/developers/tools/remote-mcp; TEMPORAL / SUPPORTING LOCATOR: page updated 2026-09-01; read 2026-09-12; xAI-managed connection; omitted allowed_tools exposes all server tools; require_approval unsupported; SUPPORT / BOUNDARY: PM-C03-GROK-007; MCP access is not approval, upstream authorization, receipt or business acceptance

• EVIDENCE_ID: EXT-G03-005; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Context Compaction; LOCATOR: https://docs.x.ai/developers/advanced-api-usage/context-compaction; TEMPORAL / SUPPORTING LOCATOR: page updated 2026-09-02; read 2026-09-12; opaque encrypted item, verbose history/tool output may be dropped, full returned item must be preserved; SUPPORT / BOUNDARY: PM-C03-GROK-008; continuity optimization is not artifact lineage, audit completeness or mergeable state

• EVIDENCE_ID: EXT-G03-006; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / WebSocket Mode; LOCATOR: https://docs.x.ai/developers/advanced-api-usage/websocket-mode; TEMPORAL / SUPPORTING LOCATOR: page updated 2026-09-02; read 2026-09-12; serial per connection, multiple connections for parallel work, 25-minute cap, failure eviction, ZDR/store:false in-memory continuation; SUPPORT / BOUNDARY: PM-C03-GROK-009; connection continuity is not durable recovery or external transaction proof

• EVIDENCE_ID: EXT-G03-007; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_API_REFERENCE; SOURCE: xAI / Responses API; LOCATOR: https://docs.x.ai/developers/rest-api-reference/inference/responses; TEMPORAL / SUPPORTING LOCATOR: page updated 2026-09-02; read 2026-09-12; response IDs/statuses, stored continuation and parallel-tool-call field; SUPPORT / BOUNDARY: PM-C03-GROK-001; provider status/continuation is not stage verification or business acceptance

EXT-G01-004/005 are reused for deferred and Batch lifecycle boundaries. Existing CORE-03 6/6 and LangGraph/SQLite 15/15 artifacts retain COMPILER_EXPERIMENT origin. No xAI service, SDK process, tool, MCP endpoint or external system was operated; no reliable independent production report was promoted.

• EVIDENCE_ID: EXT-G04-001; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Models; LOCATOR: https://docs.x.ai/developers/models; TEMPORAL / SUPPORTING LOCATOR: updated 2026-08-21; read 2026-09-12; alias/latest/date pins, model capabilities, Batch variance, search requirement, 4.20+ silent logprobs ignore; SUPPORT / BOUNDARY: PM-C04-GROK-001/002; catalog metadata, not tenant availability or effective serving build

• EVIDENCE_ID: EXT-G04-002; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Rate Limits; LOCATOR: https://docs.x.ai/developers/rate-limits; TEMPORAL / SUPPORTING LOCATOR: updated 2026-06-20; read 2026-09-12; team/model RPS+TPM, spend tier, all token classes, 429/backoff; SUPPORT / BOUNDARY: PM-C04-GROK-005; public rule only, current team limits live in Console

• EVIDENCE_ID: EXT-G04-003; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Priority Processing; LOCATOR: https://docs.x.ai/developers/advanced-api-usage/priority-processing; TEMPORAL / SUPPORTING LOCATOR: updated 2026-06-15; read 2026-09-12; requested Priority may fall back to Default; response reports actual tier; SUPPORT / BOUNDARY: PM-C04-GROK-004; observed capacity class, not model equivalence or contractual SLO

• EVIDENCE_ID: EXT-G04-004; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Cost Tracking; LOCATOR: https://docs.x.ai/developers/cost-tracking; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-12; per-request USD ticks, server-tool cost, stream final usage chunk, Vercel metadata gap; SUPPORT / BOUNDARY: PM-C04-GROK-006/010; response telemetry, not cumulative billing or business acceptance

• EVIDENCE_ID: EXT-G04-005; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Debugging Errors; LOCATOR: https://docs.x.ai/developers/debugging; TEMPORAL / SUPPORTING LOCATOR: updated 2026-05-13; read 2026-09-12; 400/401/403/404/422/429 and deferred 202; SUPPORT / BOUNDARY: PM-C04-GROK-007; public taxonomy, not complete timeout/5xx/SDK retry behavior

• EVIDENCE_ID: EXT-G04-006; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_MIGRATION_DOC; SOURCE: xAI / May 15, 2026 model retirement; LOCATOR: https://docs.x.ai/developers/migration/may-15-retirement; TEMPORAL / SUPPORTING LOCATOR: updated 2026-09-02; read 2026-09-12; retired slugs redirect to other models/reasoning efforts with pricing changes; SUPPORT / BOUNDARY: PM-C04-GROK-001/008; explicit temporal counterexample to slug stability, not equivalence proof

EXT-G01-004/005/007 and EXT-G03-001..006 are reused. Existing CORE-04 research, LiteLLM operator incident and local fixtures retain their provider-neutral/COMPILER_EXPERIMENT provenance. No xAI service or external system was operated; no reliable independent xAI production report was promoted.

• EVIDENCE_ID: EXT-G05-001; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Function Calling; LOCATOR: https://docs.x.ai/developers/tools/function-calling; TEMPORAL / SUPPORTING LOCATOR: updated 2026-09-04; read 2026-09-12; client tool proposal/local execution/result loop, server-tool auto execution, default parallel calls; SUPPORT / BOUNDARY: PM-C05-GROK-001/004/006; tool call/result is not business approval, external commit receipt or acceptance

• EVIDENCE_ID: EXT-G05-002; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Advanced Tool Usage; LOCATOR: https://docs.x.ai/developers/tools/advanced-usage; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-12; server tools auto-execute, client tools pause; follow-up request resets request-local max_turns; stored/encrypted continuation variants; SUPPORT / BOUNDARY: PM-C05-GROK-001/007/008; provider continuation is not global safety bound, idempotency or durable action ledger

• EVIDENCE_ID: EXT-G05-003; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Remote MCP Tools; LOCATOR: https://docs.x.ai/developers/tools/remote-mcp; TEMPORAL / SUPPORTING LOCATOR: updated 2026-09-01; read 2026-09-12; require_approval unsupported; omitted or empty allowed_tools permits all server tools; bearer/headers supported; SUPPORT / BOUNDARY: PM-C05-GROK-002/003/005; reachability/token/filter is not business approval, downstream IAM, receipt or rollback

• EVIDENCE_ID: EXT-G05-004; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Context Compaction; LOCATOR: https://docs.x.ai/developers/advanced-api-usage/context-compaction; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-12; opaque state may replace history while verbose tool output is dropped; SUPPORT / BOUNDARY: PM-C05-GROK-008; continuity optimization is not audit completeness or external commit reconstruction

• EVIDENCE_ID: EXT-G05-005; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Batch API and Deferred Chat Completions; LOCATOR: https://docs.x.ai/developers/advanced-api-usage/batch-api ; https://docs.x.ai/developers/advanced-api-usage/deferred-chat-completions; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-12; asynchronous statuses/results; deferred result is retrievable exactly once within 24 hours; SUPPORT / BOUNDARY: PM-C05-GROK-009; provider result lifecycle is not interactive approval, external-effect completion or human acceptance

EXT-C05-001..005 are reused as provider-neutral Core evidence, including the bounded ADK duplicate-invocation signal and existing local compiler fixtures; neither is reclassified as xAI evidence. No xAI service, SDK process, MCP server, tool, deferred request, Batch job or external system was operated; no reliable independent xAI production report was promoted.

• EVIDENCE_ID: EXT-G06-001; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Generate Text; LOCATOR: https://docs.x.ai/developers/model-capabilities/text/generate-text; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-12; system/user input, stored Responses, previous_response_id, store:false; SUPPORT / BOUNDARY: PM-C06-GROK-001/004; request/history carrier, not managed composite release or approval/readback

• EVIDENCE_ID: EXT-G06-002; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Prompt Caching; LOCATOR: https://docs.x.ai/developers/advanced-api-usage/prompt-caching; TEMPORAL / SUPPORTING LOCATOR: updated 2026-03-16; read 2026-09-12; automatic exact-prefix caching, x-grok-conv-id, prompt_cache_key; SUPPORT / BOUNDARY: PM-C06-GROK-005; performance/cache routing, not config identity or behavior equivalence

• EVIDENCE_ID: EXT-G06-003; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: xAI / Structured Outputs; LOCATOR: https://docs.x.ai/developers/model-capabilities/text/structured-outputs; TEMPORAL / SUPPORTING LOCATOR: updated 2026-05-12; read 2026-09-12; practical JSON Schema subset, bounded guarantees and best-effort keywords; SUPPORT / BOUNDARY: PM-C06-GROK-006; syntax/schema conformance, not semantic correctness or release acceptance

• EVIDENCE_ID: EXT-G06-004; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_CHANGELOG; SOURCE: xAI / Release Notes; LOCATOR: https://docs.x.ai/developers/release-notes; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-12; model/default/retirement changes including omitted image quality default changing on 2026-08-28; SUPPORT / BOUNDARY: PM-C06-GROK-008/009; temporal drift evidence, not complete immutable configuration history

• EVIDENCE_ID: EXT-G07-001; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_RELEASE; SOURCE: xAI / Introducing Grok 4.6; LOCATOR: https://x.ai/news/grok-4-6; TEMPORAL / SUPPORTING LOCATOR: published 2026-08-12; read 2026-09-13; AA Intelligence, GDPVal-AA, DeepSWE 1.1, CursorBench 3.2, FrontierCode 1.1; competitor figures from developer cards/leaderboards; SUPPORT / BOUNDARY: PM-C07-GROK-001/002; release comparison has mixed provenance and is not a common organization acceptance run

• EVIDENCE_ID: EXT-G07-002; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_MODEL_CARD; SOURCE: xAI / Grok 4.6 Model Card; LOCATOR: https://media.x.ai/v1/website/card-4p6-4cd2dc57.pdf; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-13; final deployed checkpoint default; benchmark-specific Cursor/Mercor/Cognition/Datacurve/Abundant AI/Harbor/AA results, harnesses, efforts, samples and metrics; SUPPORT / BOUNDARY: PM-C07-GROK-002..005/008/009; public capability/safety evidence, not organization task representativeness, non-contamination or release acceptance

• EVIDENCE_ID: EXT-G07-003; ORIGIN_CLASS: EXTERNAL_SOURCE / AUTHOR_OSS_CODE; SOURCE: xAI / xai-org/grok-build; LOCATOR: https://github.com/xai-org/grok-build; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-13; periodic monorepo sync; root SOURCE_REV=c4ea71cfdbcdb21e32e41bc25a0043d7d4836714; agent loop/tool/runtime source; SUPPORT / BOUNDARY: PM-C07-GROK-004/006/007; inspectable current harness surface, not exact reconstruction of every reported benchmark run

• EVIDENCE_ID: EXT-G07-004; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_CHANGELOG; SOURCE: xAI / Grok Build changelog; LOCATOR: https://x.ai/build/changelog; TEMPORAL / SUPPORTING LOCATOR: current release v1.0.25 dated 2026-09-09; read 2026-09-13; continuous fixes including headless timeout/session/concurrent startup behavior; SUPPORT / BOUNDARY: PM-C07-GROK-006/007; temporal harness identity and regression-test intent, not proof of current defect or historical benchmark environment

• EVIDENCE_ID: EXT-G07-005; ORIGIN_CLASS: EXTERNAL_SOURCE / INDEPENDENT_BENCHMARK_METHODOLOGY; SOURCE: Artificial Analysis / Benchmarking Methodology and Index; LOCATOR: https://artificialanalysis.ai/methodology ; https://artificialanalysis.ai/; TEMPORAL / SUPPORTING LOCATOR: observed 2026-09-13; independent model/API/system benchmarking; current Intelligence Index v4.3 changes component set; SUPPORT / BOUNDARY: PM-C07-GROK-002/008/009; independent methodology/version boundary, not organization golden set or immutable cross-version rank

EXT-G01-005, EXT-G04-001/004, EXT-G06-003, EXT-C07-006/007 are reused for Batch, model/cost identity, schema, judge-position and contamination-test boundaries. Existing CORE-07 12/12 remains COMPILER_EXPERIMENT. No xAI API, team, Console, model, Batch, Grok Build binary, tool, dataset, judge or external system was operated.

EXT-G04-001/006 are reused for alias/date pin and retired-slug redirect; EXT-G05-001..003 and EXT-G02-001..006 for tool/MCP/source component boundaries; existing CORE-06 standards, OSS counterevidence and 7/7・19/19 fixtures retain their original provider-neutral/COMPILER_EXPERIMENT provenance. No xAI service or external system was operated, and no reliable independent xAI production report was promoted.

• EVIDENCE_ID: EXT-NLM-001; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: Google / Add or discover new sources; LOCATOR: https://support.google.com/gemininotebook/answer/16215270; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-13; Drive auto/manual sync, view-access loss, deletion, import omissions and source-type capture; SUPPORT / BOUNDARY: PM-C02-NLM-001..003; published behavior, not all-path live authorization or byte-fidelity proof

• EVIDENCE_ID: EXT-NLM-002; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_PRIVACY_DOC; SOURCE: Google / Gemini Notebook privacy; LOCATOR: https://support.google.com/gemininotebook/answer/17004255; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-13; consumer feedback review/retention and Workspace/Education handling differ; SUPPORT / BOUNDARY: PM-C02-NLM-005/010; account-context contract, not physical-purge evidence

• EVIDENCE_ID: EXT-NLM-003; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: Google / Audio Overviews; LOCATOR: https://support.google.com/gemininotebook/answer/16212820; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-13; formats, prompt customization, accuracy warning, share-link/delete/download behavior; SUPPORT / BOUNDARY: PM-C02-NLM-006/007; product contract, not claim-level fidelity proof

• EVIDENCE_ID: EXT-NLM-004; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_DOC; SOURCE: Google / FAQ and Chat; LOCATOR: https://support.google.com/gemininotebook/answer/16269187 ; https://support.google.com/gemininotebook/answer/16179559; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-13; source limits/selection, citation caveat, chat history and notes; SUPPORT / BOUNDARY: PM-C02-NLM-004/005; visible product behavior, not complete retention/purge map

• EVIDENCE_ID: EXT-NLM-005; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_ADMIN_DOC; SOURCE: Google Workspace Updates and Admin Help / external sharing; LOCATOR: https://workspaceupdates.googleblog.com/2026/09/manage-external-sharing-for-gemini-notebook-in-the-Admin-console.html ; https://knowledge.workspace.google.com/admin/generative-ai/gemini-notebook/manage-gemini-notebook-sharing-settings; TEMPORAL / SUPPORTING LOCATOR: published/updated 2026-09-10; rollout and domain/OU/group controls; setting propagation up to 24h; SUPPORT / BOUNDARY: PM-C02-NLM-002/010; availability/control plane, not observed organization setting

• EVIDENCE_ID: EXT-NLM-006; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_ENTERPRISE_DOC; SOURCE: Google Cloud / Share Gemini Notebook Enterprise notebooks; LOCATOR: https://docs.cloud.google.com/gemini/enterprise/notebooklm-enterprise/docs/share-notebooks; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-13; viewer/editor capability split; SUPPORT / BOUNDARY: PM-C02-NLM-002/010; separate Enterprise surface, not consumer/Workspace equivalence

• EVIDENCE_ID: EXT-NLM-007; ORIGIN_CLASS: EXTERNAL_SOURCE / PROVIDER_ENTERPRISE_DOC; SOURCE: Google Cloud / Protect sensitive data and Audio Overview API; LOCATOR: https://docs.cloud.google.com/gemini/enterprise/notebooklm-enterprise/docs/protect-sensitive-data ; https://docs.cloud.google.com/gemini/enterprise/notebooklm-enterprise/docs/api-audio-overview; TEMPORAL / SUPPORTING LOCATOR: read 2026-09-13; DLP/Model Armor separation, media limitations, preview audio lifecycle; SUPPORT / BOUNDARY: PM-C02-NLM-006/010; optional controls and preview API, not default all-path protection

• EVIDENCE_ID: EXT-NLM-008; ORIGIN_CLASS: EXTERNAL_SOURCE / INDEPENDENT_RESEARCH; SOURCE: Flynn & Rader / Audio Overview planetary-science evaluation; LOCATOR: https://doi.org/10.1029/2025CN000282; TEMPORAL / SUPPORTING LOCATOR: 2025; read 2026-09-13; three papers, each summary had some inaccuracy/hallucination; SUPPORT / BOUNDARY: PM-C02-NLM-007; small domain slice, not universal failure rate

• EVIDENCE_ID: EXT-NLM-009; ORIGIN_CLASS: EXTERNAL_SOURCE / INDEPENDENT_RESEARCH; SOURCE: Comparative evaluation for systematic literature review; LOCATOR: https://doi.org/10.3390/engproc2026154029; TEMPORAL / SUPPORTING LOCATOR: published 2026-09-03; 40 papers/12 prompts; 11 NotebookLM citations matched corpus in evaluated slice; SUPPORT / BOUNDARY: PM-C02-NLM-008; positive bounded counterevidence, not universal citation/reasoning guarantee

• EVIDENCE_ID: EXT-NLM-010; ORIGIN_CLASS: USER_EXPERIMENT / PARTIAL_PROVENANCE; SOURCE: 解剖班Drive NotebookLM records; LOCATOR: drive IDs: 1eHX_swOgNmxj2_ZZB-P4NffdoWLD30_s ; 13KgN9o3caH3Sf7RU-BKcHFgppG5DdCwCsHOGCTn1aos ; 1zLdsb20_3agX-3ZODC61EmEh88OS9CyF; TEMPORAL / SUPPORTING LOCATOR: operation report dated 2026-07-31; strategy 2026-08-02; combined corpus metadata 2026-08-11; SUPPORT / BOUNDARY: PM-C02-NLM-009; 14 Audio Overviews/transcription/combined corpus and abstraction observations; individual hashes/prompts/grades missing

No Google account, Workspace tenant, Enterprise instance, Drive ACL or audio generation was operated in this compilation run. Existing CORE-02 experiments retain their original provenance.

ACCESSED_AT: 2026-09-13T06:13:56.077040+00:00

Core claims unchanged. External source snapshots are separate from recovered compiler experiments. Abstract-level support remains abstract-level; source-specific limits below control every relation.

• SOURCE_ID: EXT-INT-C04-001; AUTHOR / TITLE: Chen, Zaharia and Zou / FrugalGPT: How to Use Large Language Models While Reducing Cost and Improving Performance; VERSION: arXiv:2305.05176v1; 2023-05-09; ORIGINAL URL: https://arxiv.org/abs/2305.05176v1; SUPPORTING_LOCATOR: Abstract, LLM cascade proposal; SNAPSHOT / SHA256: evidence/INT-SOURCE-RECOVERY-002/frugalgpt.snapshot / acc1f94570cbe719442e0b29a88f1f21a4603dfb796fc4d965cc481f2734db5a

• SOURCE_ID: EXT-INT-C04-002; AUTHOR / TITLE: Ong et al. / RouteLLM: Learning to Route LLMs with Preference Data; VERSION: arXiv:2406.18665v4; 2025-02-23; ORIGINAL URL: https://arxiv.org/abs/2406.18665v4; SUPPORTING_LOCATOR: Abstract, strong/weak model selection and benchmark evaluation; SNAPSHOT / SHA256: evidence/INT-SOURCE-RECOVERY-002/routellm.snapshot / 522fe8770a8e491c6a8f60338939975e2ddd1463ad3aa0c06ae26671ea7a29ff

• SOURCE_ID: EXT-INT-C04-003; AUTHOR / TITLE: lm-sys / RouteLLM authors / RouteLLM README; VERSION: rolling main; snapshot at 2026-09-13T06:13:56.077040+00:00; ORIGINAL URL: https://raw.githubusercontent.com/lm-sys/RouteLLM/main/README.md; SUPPORTING_LOCATOR: Quickstart, step 2; Threshold Calibration; SNAPSHOT / SHA256: evidence/INT-SOURCE-RECOVERY-002/route_readme.snapshot / 380ebee5361b8a191d92091639bc2be08e258dd2b4404f804a680f343fa16f0c

• SOURCE_ID: EXT-INT-C04-004; AUTHOR / TITLE: Jasper Dekoninck, Maximilian Baader, Martin Vechev / A Unified Approach to Routing and Cascading for LLMs; VERSION: ICML 2025; PMLR 267:12987–13010; ORIGINAL URL: https://proceedings.mlr.press/v267/dekoninck25a.html; SUPPORTING_LOCATOR: Abstract, final two sentences on quality estimators; SNAPSHOT / SHA256: evidence/INT-SOURCE-RECOVERY-002/cascade.snapshot / a9054fed9c89fc9b19830fc714f025319de3469529474bcdd3b7ed9c458d75ca

• SOURCE_ID: EXT-INT-C04-005; AUTHOR / TITLE: Hao Li et al. / LLMRouterBench: A Massive Benchmark and Unified Framework for LLM Routing; VERSION: arXiv:2601.07206v1; 2026-01-12; ORIGINAL URL: https://arxiv.org/html/2601.07206v1; SUPPORTING_LOCATOR: Introduction; Performance metrics; section 4 and Limitations; SNAPSHOT / SHA256: evidence/INT-SOURCE-RECOVERY-002/routerbench.snapshot / d65f0b3532890f40cb07aed9d62f08fa8ecf1a82e097a32ca34214f520e009f2

• SOURCE_ID: EXT-INT-C04-006; AUTHOR / TITLE: LiteLLM maintainers / Router - Load Balancing; VERSION: rolling documentation; snapshot at 2026-09-13T06:13:56.077040+00:00; ORIGINAL URL: https://docs.litellm.ai/docs/routing; SUPPORTING_LOCATOR: Router - Load Balancing introductory list; Cooldowns; SNAPSHOT / SHA256: evidence/INT-SOURCE-RECOVERY-002/litellm_router.snapshot / af6f977d6f423216a1a625a4a750cfbf92f7358940c16949abce153bb290d39e

• SOURCE_ID: EXT-INT-C04-007; AUTHOR / TITLE: GitHub reporter Tbag12 in BerriAI/litellm / LiteLLM issue #35303: malformed tool arguments and cyclic fallback amplification; VERSION: opened 2026-07-31; closed/updated 2026-08-19; reported v1.93.0; ORIGINAL URL: https://api.github.com/repos/BerriAI/litellm/issues/35303; SUPPORTING_LOCATOR: issue body: What happened?; Environment; Defect 2; Evidence 5.3 and 5.10; SNAPSHOT / SHA256: evidence/INT-SOURCE-RECOVERY-002/litellm_issue35303.json / bde48ef8df0536184ef7e9226160854d014fd5263892801da57e115a066439d1

• SOURCE_ID: EXT-C07-006; AUTHOR / TITLE: Lin Shi, Chiyu Ma, Wenhua Liang, Xingjian Diao, Weicheng Ma, Soroush Vosoughi / Judging the Judges: A Systematic Study of Position Bias in LLM-as-a-Judge; VERSION: IJCNLP-AACL 2025, pp.292–314; DOI 10.18653/v1/2025.ijcnlp-long.18; ORIGINAL URL: https://aclanthology.org/2025.ijcnlp-long.18/; SUPPORTING_LOCATOR: Abstract, three paragraphs on metrics, judge/task factors and disagreement; SNAPSHOT / SHA256: evidence/INT-SOURCE-RECOVERY-002/judge.snapshot / f7f44034ee2d940d4b560e3253cf614202dcaef53f57fdc204893593f371b294

• SOURCE_ID: EXT-C07-007; AUTHOR / TITLE: Jasper Dekoninck, Mark Niklas Müller, Martin Vechev / ConStat: Performance-Based Contamination Detection in Large Language Models; VERSION: arXiv:2405.16281v1; 2024-05-25; ORIGINAL URL: https://arxiv.org/abs/2405.16281v1; SUPPORTING_LOCATOR: Abstract, definition of non-generalizing performance and primary/reference comparison; SNAPSHOT / SHA256: evidence/INT-SOURCE-RECOVERY-002/constat.snapshot / 985ff2c4e2bc671d76be5fb5f2a631fa418692ca5673ec6f8ae429b520226eb3

• CLAIM_ID: CLM-C04-001; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C04-001; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C04-001; SUPPORTING_LOCATOR: Abstract, LLM cascade proposal; source row above; RELATION: CONTEXT_ONLY; SCOPE_AND_LIMIT: query-dependent cascadeによるcost/accuracy trade-offの研究。hard capability・禁止操作・業務受入契約は本研究の合成であり論文の直接結論ではない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C04-001; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C04-002; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C04-002; SUPPORTING_LOCATOR: Abstract, strong/weak model selection and benchmark evaluation; source row above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: strong/weak間の選択とcost-quality調整を支持。現行provider性能、権限、state保持、高risk安全性を支持しない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C04-001; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C04-003; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C04-003; SUPPORTING_LOCATOR: Quickstart, step 2; Threshold Calibration; source row above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: query分布に合わせるthreshold校正を支持。hard constraint優先はCore設計でありOSSが強制する保証ではない。実行版commitは未固定。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C04-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C04-003; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C04-003; SUPPORTING_LOCATOR: Quickstart, step 2; Threshold Calibration; source row above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: query分布に合わせるthreshold校正を支持。hard constraint優先はCore設計でありOSSが強制する保証ではない。実行版commitは未固定。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C04-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C04-004; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C04-004; SUPPORTING_LOCATOR: Abstract, final two sentences on quality estimators; source row above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: quality estimatorの重要性を支持。business acceptance、risk-tail閾値と監視field全体は本研究の合成。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C04-001; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C04-005; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C04-005; SUPPORTING_LOCATOR: Introduction; Performance metrics; section 4 and Limitations; source row above; RELATION: COUNTEREVIDENCE; SCOPE_AND_LIMIT: Best Single/Oracle対比とmodel-recall failure。対象poolとdataset限定でありrouter全般の無効性や現在のprovider順位ではない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C04-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C04-005; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C04-005; SUPPORTING_LOCATOR: Introduction; Performance metrics; section 4 and Limitations; source row above; RELATION: COUNTEREVIDENCE; SCOPE_AND_LIMIT: Best Single/Oracle対比とmodel-recall failure。対象poolとdataset限定でありrouter全般の無効性や現在のprovider順位ではない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C04-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C04-006; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C04-006; SUPPORTING_LOCATOR: Router - Load Balancing introductory list; Cooldowns; source row above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: retry/fallback/cooldown/timeoutという実装surfaceのみ。fallback先のsource・state・verifierの意味同値は保証しない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C04-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C04-007; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C04-007; SUPPORTING_LOCATOR: issue body: What happened?; Environment; Defect 2; Evidence 5.3 and 5.10; source row above; RELATION: COUNTEREVIDENCE; SCOPE_AND_LIMIT: operator report: 2026-07-30 EKS/Bedrock Converse streaming、79,858 failures/45.05s、4-node cycle。independent operational reportであり本研究の実測ではない。closedは全版修正確認ではない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C04-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-C04-007; SOURCE_OR_EXPERIMENT_ID: EXT-INT-C04-007; SUPPORTING_LOCATOR: issue body: What happened?; Environment; Defect 2; Evidence 5.3 and 5.10; source row above; RELATION: COUNTEREVIDENCE; SCOPE_AND_LIMIT: operator report: 2026-07-30 EKS/Bedrock Converse streaming、79,858 failures/45.05s、4-node cycle。independent operational reportであり本研究の実測ではない。closedは全版修正確認ではない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C07-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C07-006; SOURCE_OR_EXPERIMENT_ID: EXT-C07-006; SUPPORTING_LOCATOR: Abstract, three paragraphs on metrics, judge/task factors and disagreement; source row above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: 15 judges・MTBench/DevBenchにおけるposition biasとdisagreement。全judgeやhuman adjudicationの有効率、特定現行providerの欠陥は示さない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C07-012; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C07-006; SOURCE_OR_EXPERIMENT_ID: EXT-C07-006; SUPPORTING_LOCATOR: Abstract, three paragraphs on metrics, judge/task factors and disagreement; source row above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: 15 judges・MTBench/DevBenchにおけるposition biasとdisagreement。全judgeやhuman adjudicationの有効率、特定現行providerの欠陥は示さない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C07-005; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C07-007; SOURCE_OR_EXPERIMENT_ID: EXT-C07-007; SUPPORTING_LOCATOR: Abstract, definition of non-generalizing performance and primary/reference comparison; source row above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: contamination評価の方法と限界を支持。任意の現行modelの汚染判定、組織holdout隔離の実装確認ではない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

• CLAIM_ID: CLM-C07-012; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C07-007; SOURCE_OR_EXPERIMENT_ID: EXT-C07-007; SUPPORTING_LOCATOR: Abstract, definition of non-generalizing performance and primary/reference comparison; source row above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: contamination評価の方法と限界を支持。任意の現行modelの汚染判定、組織holdout隔離の実装確認ではない。; PUBLICATION_STATUS: ORIGINAL_LOCATOR_AND_SNAPSHOT_VERIFIED_BOUNDED

原典の完全な契約保証へ昇格しない。CLM-C04-002のhard-constraint優先、CLM-C04-006の新契約化、CLM-C04-007のrisk-tail/受入event仕様は既存JOINT_ANALYSIS / DERIVED_INFERENCE行を維持する。CLM-C07-005の隔離・失効ルールも研究上の設計判断でありConStatが組織実装を保証するわけではない。

18 referenced artifacts recovered from Library. No runner was executed. A full prior digest match, abbreviated match and newly computed recovery digest are distinct states. See evidence/INT-SOURCE-RECOVERY-002/RAW_RECOVERY.json for every Library identity, path and SHA256. Missing historical digest never becomes a verified historical match.

• SOURCE_ID: EXT-INT-GEM-001; ORIGIN: EXTERNAL_SOURCE / AUTHOR_DOCUMENTATION; AUTHOR / TITLE: Google / ADK / Conversational Context; ORIGINAL URL: https://adk.dev/sessions/; LOCATOR: Core Concepts; Managing Context: Services; rolling doc accessed 2026-09-13T06:16:01.942884+00:00; SNAPSHOT / DIGEST: evidence/INT-SOURCE-RECOVERY-002/adk_sessions.snapshot SHA256 31606c7938f8c2d6fb3200e7e5c1e6c7eb0f2a8e3371c5b831b097e5bfbc966e

• SOURCE_ID: EXT-INT-GEM-002; ORIGIN: EXTERNAL_SOURCE / AUTHOR_DOCUMENTATION; AUTHOR / TITLE: Google / ADK / Artifacts; ORIGINAL URL: https://adk.dev/artifacts/; LOCATOR: Core Concepts / Artifact Service; rolling doc accessed 2026-09-13T06:16:02.221788+00:00; SNAPSHOT / DIGEST: evidence/INT-SOURCE-RECOVERY-002/adk_artifacts.snapshot SHA256 cb7fe2021bf3d669b6d708ed4716df9c90ea8d0fb02ff0f68c365c463b153e0d

• SOURCE_ID: EXT-INT-GEM-003; ORIGIN: EXTERNAL_SOURCE / AUTHOR_DOCUMENTATION; AUTHOR / TITLE: Google / ADK / Resume stopped agents; ORIGINAL URL: https://adk.dev/runtime/resume/; LOCATOR: Add resumable configuration; Resume a stopped workflow; How it works / Caution: Tool execution behavior; rolling doc accessed 2026-09-13T06:16:01.634513+00:00; SNAPSHOT / DIGEST: evidence/INT-SOURCE-RECOVERY-002/adk_resume.snapshot SHA256 2daea8c4aa9904b295f9c811dfc3b1f5e5613387b500d284163aaf6204ae70de

• SOURCE_ID: EXT-INT-GEM-004; ORIGIN: EXTERNAL_SOURCE / AUTHOR_DOCUMENTATION; AUTHOR / TITLE: Google / Google / Function calling with the Gemini API; ORIGINAL URL: https://ai.google.dev/gemini-api/docs/function-calling; LOCATOR: How function calling works, steps 1–4; rolling doc accessed 2026-09-13T06:15:56.837567+00:00; SNAPSHOT / DIGEST: evidence/INT-SOURCE-RECOVERY-002/gem_function.snapshot SHA256 2bf098f75c889b7d3558e562ed311ba45b4eb8b12efd380bff168c8f486f586b

• SOURCE_ID: EXT-INT-GEM-005; ORIGIN: EXTERNAL_SOURCE / AUTHOR_DOCUMENTATION; AUTHOR / TITLE: Google / ADK / Why evaluate agents; ORIGINAL URL: https://adk.dev/evaluate/; LOCATOR: What to evaluate?; How evaluation works with ADK; rolling doc accessed 2026-09-13T06:16:01.891194+00:00; SNAPSHOT / DIGEST: evidence/INT-SOURCE-RECOVERY-002/adk_evaluate.snapshot SHA256 7cf3a15960bf4ab7ec4eb1d0a831ee348f5fae02c2ae46bc96d4758f7462d312

• SOURCE_ID: EXT-INT-GEM-006; ORIGIN: EXTERNAL_SOURCE / AUTHOR_DOCUMENTATION; AUTHOR / TITLE: Google / ADK / Evaluation Criteria; ORIGINAL URL: https://adk.dev/evaluate/criteria/; LOCATOR: Criteria table; tool_trajectory_avg_score; response_match_score; rolling doc accessed 2026-09-13T06:16:01.964787+00:00; SNAPSHOT / DIGEST: evidence/INT-SOURCE-RECOVERY-002/adk_criteria.snapshot SHA256 ba5376fa071d6143dacf2cf16513efc2a43a0154545864eb9f31ea48cfd45bc5

• CLAIM_ID: PM-C01-GEM-001; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-001; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-001; SUPPORTING_LOCATOR: Core Concepts; Managing Context: Services; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: 組織backend、retention、全履歴完全性はUNKNOWN; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C01-GEM-001; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-01-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-01.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-01.md row PM-C01-GEM-001 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: Session IDを業務全体のtask IDと同一視しない。task/owner/completionは別契約へ; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C01-GEM-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-001; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-001; SUPPORTING_LOCATOR: Core Concepts; Managing Context: Services; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: Gemini Appsのchat履歴へADKの永続性を移さない; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C01-GEM-002; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-01-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-01.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-01.md row PM-C01-GEM-002 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: backendと永続性を明示してcheckpointを外部化; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C01-GEM-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-002; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-002; SUPPORTING_LOCATOR: Core Concepts / Artifact Service; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: storageの削除・backup・tenant値はUNKNOWN; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C01-GEM-003; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-01-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-01.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-01.md row PM-C01-GEM-003 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: artifact名・version・digest・scopeを記録し読戻し。これだけで業務受入にしない; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C01-GEM-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-003; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-003; SUPPORTING_LOCATOR: Add resumable configuration; Resume a stopped workflow; How it works / Caution: Tool execution behavior; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: 全surface共通resumeではない。Gemini Appsのresume認定なし; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C01-GEM-004; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-01-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-01.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-01.md row PM-C01-GEM-004 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: task、session、invocation、checkpointを分離し再開経路を記録; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C01-GEM-005; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-004; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-004; SUPPORTING_LOCATOR: How function calling works, steps 1–4; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: 自動SDK利用でも業務先commitと人の受入は未検証; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C01-GEM-005; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-01-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-01.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-01.md row PM-C01-GEM-005 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: 提案・実行・external receipt・final response・業務受入を別event化; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C01-GEM-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-003; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-003; SUPPORTING_LOCATOR: Add resumable configuration; Resume a stopped workflow; How it works / Caution: Tool execution behavior; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: local fixtureはGoogle実測ではない。exactly-once保証なし; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C01-GEM-006; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-01-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-01.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-01.md row PM-C01-GEM-006 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: 非冪等処理はdedup/receipt/readback。中断はCOMMIT_UNKNOWNになり得る; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C01-GEM-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-001; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-001; SUPPORTING_LOCATOR: Core Concepts; Managing Context: Services; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: 組織責任移管・承認証跡の自動成立はUNKNOWN; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C01-GEM-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-002; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-002; SUPPORTING_LOCATOR: Core Concepts / Artifact Service; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: 組織責任移管・承認証跡の自動成立はUNKNOWN; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C01-GEM-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-003; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-003; SUPPORTING_LOCATOR: Add resumable configuration; Resume a stopped workflow; How it works / Caution: Tool execution behavior; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: 組織責任移管・承認証跡の自動成立はUNKNOWN; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C01-GEM-007; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-01-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-01.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-01.md row PM-C01-GEM-007 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: Coreのowner/allowed actions/receiver/acceptanceを外部契約へ保持するという編纂上の合成; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C07-GEM-001; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-005; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-005; SUPPORTING_LOCATOR: What to evaluate?; How evaluation works with ADK; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: sealed holdout・不変version・組織採用はUNKNOWN; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C07-GEM-001; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-07-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-07.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-07.md row PM-C07-GEM-001 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: candidate/dataset/scorer/judge/config/resultを別identityへ固定; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C07-GEM-002; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-005; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-005; SUPPORTING_LOCATOR: What to evaluate?; How evaluation works with ADK; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: trajectory一致は外部副作用成功の証明ではない; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C07-GEM-002; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-07-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-07.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-07.md row PM-C07-GEM-002 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: 経路の一致と出力・external final state・業務受入を分ける; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C07-GEM-003; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-006; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-006; SUPPORTING_LOCATOR: Criteria table; tool_trajectory_avg_score; response_match_score; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: 平均値がcritical failureを隠さないようCoreの別gateを保持; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C07-GEM-003; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-07-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-07.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-07.md row PM-C07-GEM-003 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: 採点modeと期待tool/args/orderを保存する; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C07-GEM-004; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-006; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-006; SUPPORTING_LOCATOR: Criteria table; tool_trajectory_avg_score; response_match_score; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: ROUGE一致を事実性、safety値をover-refusal検証へ移さない; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C07-GEM-004; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-07-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-07.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-07.md row PM-C07-GEM-004 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: 文字重複と意味妥当性を区別し、judge/model/prompt/rubric版を記録; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C07-GEM-005; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C07-006; SOURCE_OR_EXPERIMENT_ID: EXT-C07-006; SUPPORTING_LOCATOR: Abstract; original-source recovery table above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: Google評価service固有の欠陥や校正率は示さない; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C07-GEM-005; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-07-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-07.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-07.md row PM-C07-GEM-005 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: 順序を制御しdisagreementを保留・human adjudicationへ; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C07-GEM-006; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-C07-007; SOURCE_OR_EXPERIMENT_ID: EXT-C07-007; SUPPORTING_LOCATOR: Abstract; original-source recovery table above; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: 任意Geminiの汚染断定ではない。組織dataset権限はUNKNOWN; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C07-GEM-006; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-07-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-07.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-07.md row PM-C07-GEM-006 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: 独立holdoutと候補tuningの分離はCore設計として保持; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED

• CLAIM_ID: PM-C07-GEM-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-005; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-005; SUPPORTING_LOCATOR: What to evaluate?; How evaluation works with ADK; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: Vertex固有current API、quota、retention、組織閾値は未調査/UNKNOWN; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C07-GEM-007; ORIGIN_CLASS: EXTERNAL_SOURCE; EVIDENCE_ID: EXT-INT-GEM-006; SOURCE_OR_EXPERIMENT_ID: EXT-INT-GEM-006; SUPPORTING_LOCATOR: Criteria table; tool_trajectory_avg_score; response_match_score; RELATION: PARTIAL_SUPPORT; SCOPE_AND_LIMIT: Vertex固有current API、quota、retention、組織閾値は未調査/UNKNOWN; PUBLICATION_STATUS: BOUNDED_PUBLIC_FACT_ONLY

• CLAIM_ID: PM-C07-GEM-007; ORIGIN_CLASS: JOINT_ANALYSIS; EVIDENCE_ID: PM-GEMINI-CORE-07-v0.1; SOURCE_OR_EXPERIMENT_ID: packets/CORE-07.md; SUPPORTING_LOCATOR: provider_mappings/PM-GEMINI-CORE-07.md row PM-C07-GEM-007 / Mapping decision; RELATION: DERIVED_INFERENCE; SCOPE_AND_LIMIT: Apps・API・ADK・managed evalを別surfaceとし、同一runを仮定しない; not a provider guarantee; PUBLICATION_STATUS: SYNTHESIS_DECLARED