GEMINI：検索・記憶・出典の対応付け

Source SHA-256 1e524a9c96aabd5974555ee43499e43638e539f7c6da61048c53cf12a0a3bf18

PRODUCT_MAPPING_ID: PM-GEMINI-CORE-02-v0.1

PROVIDER: GEMINI

CORE_PACKET: PKT-GEMINI-A-CORE-02-v0.1

AS_OF: 2026-09-05 22:51 JST

STATUS: GEMINI_BOUNDARY_CLOSED_WITH_SURFACE_OBSERVATIONS_AND_TRACKED_UNKNOWNS

LAYER: PRODUCT_MAPPING (not Enterprise AI Core; not Organization Overlay)

この文書は、CORE-02で閉じていないprovider実装・provider実機残差をGemini用のProduct Mappingへ渡すための境界票である。ここで仕様意図、OSS版、issue観測をGemini製品の安全性・可用性・tenant実測へ昇格させない。Q-C02-001/002とAUD-C02-008の残差だけを扱い、新テーマは追加しない。

• ROW: PM-C02-GEM-001; Core question/finding: Q-C02-001 permission-aware retrieval; Gemini mapping field set: product surface; package/integration; version/commit; authz source; index build timestamp; staleness budget; join strategy; cardinality/sort/filter/max-results; timeout/concurrency/resolution limits; consistency mode; query/iterator cache and controller; exclusion at retriever→reranker→cache→trace/log→prompt; revocation/outage behavior; Current evidence: OpenFGA v1.19.0 local server 6/6とOpenFGA→LlamaIndex pre-content参照path 10/10。業務Gemini新規chat 3モデルではinline制限コードを初回・追撃とも非開示、15/15 surface assertions一致; Decision / remaining test: SURFACE_NONDISCLOSURE_PASS / DIRECT_INTEGRATION_PROHIBITED / INTERNALS_UNKNOWN: D2本文はprompt内に既にあり、実ACL・authorization-before-retrieval・内部全path PASSではない

• ROW: PM-C02-GEM-002; Core question/finding: AUD-C02-008 zero-score denied candidate; Gemini mapping field set: exact retriever path; package/version; filter/mask configuration; raw vs post-auth result; denied sentinel; trace/log/citation exposure; reproduction hash; Current evidence: metadata-mask pathはraw denied sentinelを再現し3 PASS / 1 SECURITY FAIL。別のpre-content Check参照pathは全観測境界sentinel 0で10/10 PASS; Decision / remaining test: HIGH remains on failure path. Safe alternativeの存在はGemini path・全retrieverの認証でも元pathのfixでもない

• ROW: PM-C02-GEM-003; Core question/finding: Q-C02-002 memory lifecycle; Gemini mapping field set: Mem0 package/version/release commit/HEAD; API surface; sync/async path; real LLM extraction; current-vs-historical read; vector/index; graph/entity; cache; backup/snapshot/WAL/replica; hosted account; logical delete; visible residual; physical purge; reset; new-session residual; Current evidence: Mem0 local evidenceに加え、業務Gemini新規chat 3モデルでBerlin=current/Paris=historyの意味契約12/12。strict JSON-onlyは2/3で3.1 Proがfence付加。各応答の保存/更新表現はstorage readbackではない; Decision / remaining test: SAME_CHAT_SEMANTICS_PASS / STRICT_OUTPUT_COUNTEREXAMPLE / DIRECT_STORAGE_TEST_PROHIBITED: durable/cross-session memory、reset/delete、remote durability、physical purgeはUNKNOWN

• ROW: PM-C02-GEM-004; Core question/finding: PM live profile execution boundary; Gemini mapping field set: command; fixture scope; exit code; dependency/snapshot; data exposure; safe alternative; Current evidence: local isolated rerunsに加え、2026-09-05 22:39–22:51 JSTに業務Gemini UIで6 transcriptを取得。全て新規chat、Gemなし、非機密synthetic fixture、原ログhash固定; Decision / remaining test: LOCAL_ENV_RESOLVED / AUTHORIZED_INTERACTIVE_UI_EXECUTED / DIRECT_INTEGRATION_PROHIBITED

• ROW: PM-C02-GEM-005; Core question/finding: Safe local contract alternative; Gemini mapping field set: fixture/runner hash; case count; permission and memory labels; provider boundary; Current evidence: tests/CORE-02_permission_memory_fixture_rerun_2026-09-05.json; 12/12 expected matches, permission/memory labels all matched; Decision / remaining test: LOCAL_BASELINE_ONLY: confirms contract diagnostic path, not Gemini/provider/tenant behavior

• VERIFIED_SPEC: provider documentation or release statement, with URL, date, and version.

• IMPLEMENTATION_PIN: package/repository commit and exact integration surface; does not imply every path is covered.

• ISSUE_FAILURE_SIGNAL: reproducible or reported failure with path and scope; does not imply universal failure.

• SAFE_LIVE_OBSERVATION: non-sensitive tenant/sentinel test with setup, readback, and cleanup evidence.

• UNKNOWN: missing provider/tenant evidence; never closed by inference.

Organization Overlay must supply tenant ACL and revocation policy, source/index synchronization, retention/deletion contract, cache and observability settings, and the bounded live-test transcript. Product Mapping must not fill those fields from defaults or marketing text.

• LlamaIndex releases: <https://github.com/run-llama/llama_index/releases>

• OpenFGA Authorization for Agents: <https://openfga.dev/docs/modeling/agents>

• LlamaIndex issue #16042: <https://github.com/run-llama/llama_index/issues/16042>

• Mem0 issue #4956: <https://github.com/mem0ai/mem0/issues/4956>

• Mem0 issue #5867 / open fix review #6017: <https://github.com/mem0ai/mem0/issues/5867> / <https://github.com/mem0ai/mem0/pull/6017>

• Mem0 Platform vs OSS / Dream: <https://docs.mem0.ai/platform/platform-vs-oss> / <https://docs.mem0.ai/platform/features/dream>

PM-C02-GEM-001..003は公開証拠、local reference/failure profile、業務Gemini chatのsurface-limited実測までを採用した。業務Geminiではdirect sync/API/file connectionを禁止境界とし、実行済みUI試験はsame-chat current/historyとprompt-level non-disclosureだけを証明する。Gemは未試験。UIから観測不能なACL/index/cache/storage/physical purgeはUNKNOWNのまま保持し、Gemini CORE-02境界を閉じる。