GROK：検索・記憶・出典の対応付け

Source SHA-256 b568f8a0b210a7257a773e089ef1aaf2bd4c36db909e819dfe2ef1114078f9b9

MAPPING_ID: PM-GROK-CORE-02-v0.1

PRODUCT_MAPPING_ID: PM-GROK-CORE-02-v0.1

PROVIDER: Grok / xAI

CORE_PACKET: PKT-GEMINI-A-CORE-02-v0.1

STATUS: PUBLIC_MAPPING_AUDITED / LIVE_PROVIDER_AND_TENANT_PROFILE_PENDING

AS_OF: 2026-09-12

LAYER: Product Mapping

This mapping binds xAI Collections, Collections Search, Files and ZDR to the existing CORE-02 contract. It does not treat collection membership, an API-key permission, an application-supplied metadata filter, a citation URI or a nominal context window as proof of authorization-before-retrieval, source freshness, answer faithfulness or durable memory correctness.

No xAI API key, team, Console, collection, file, model or SDK process was operated. Existing OpenFGA/LlamaIndex/Mem0/Gemini UI results remain first-party evidence for their original scopes and are not Grok observations.

• Direct Collections search uses /v1/documents/search, explicit collection_ids, a search mode and optional metadata filter.

• Responses file_search and SDK collections_search are model/tool-controlled retrieval surfaces; the model may issue multiple searches.

• A public URL attached to a request and a previously uploaded file_id have different source, retention and authorization boundaries.

• Collection management uses a separate Management API key and endpoint permissions. Those permissions govern management calls; they do not by themselves bind an end-user principal to every retrieved chunk.

• Metadata fields and AIP-160 filters are application-defined retrieval controls, not automatic propagation of source-system IAM.

• Files, Collections and stored Responses are provider state carriers. None is, by publication alone, a complete personal or semantic memory lifecycle with supersession, conflict, reset and purge semantics.

Use a disposable team, synthetic non-personal D0/D1/D2 documents, two test principals and separate management/search credentials.

• Put principal, allowed group, ACL epoch, source version and sensitivity in required metadata. Resolve the principal-to-allowed-value binding outside the model.

• Test direct search and model-controlled search with allowed, denied, missing-filter, malformed-filter, wrong-collection and OR-precedence cases. Inspect raw matches, tool calls, citations and final prompt-visible output without logging denied plaintext.

• Revoke an allowed attribute or collection binding, then read back at 0/15/60/300 seconds. Record ingestion status, authorization epoch and any stale result.

• Update a source document and verify file/chunk/digest/version/freshness alignment. A citation to an old file must fail the current-source gate.

• Test detach, file delete, collection delete and TTL expiry independently; inspect API lookup and both direct/model search after each event. Record visible residual separately from physical-purge evidence.

• Run A→B synthetic fact correction only if an adopted Grok memory surface is identified. Otherwise record NO_PUBLIC_MEMORY_SURFACE and do not substitute Collections or Responses history.

• Execute bounded NoLiMa/BABILong/LongBench v2 slices by literal overlap, position, length, supporting-fact count/hops and task type; do not collapse them into one overall score.

This is a test design, not an xAI service observation.

The Organization Overlay must supply team/key ownership, endpoint permissions, collection membership, metadata schema, principal-to-filter binding, source ACL/freshness authority, ingestion and revocation SLO, approved model/surface, ZDR or retention regime, deletion owner, evidence retention, live-test authorization and incident owner. Public defaults cannot populate these values.

• CORE-02 claims remain unchanged; Gemini, GPT and Claude backprop are not required.

• Public xAI evidence establishes product surfaces and visible lifecycle operations, not end-to-end permission-aware retrieval, complete purge or memory correctness.

• No reliable independent xAI Collections production report, author-maintained failure reproduction or live tenant result was promoted in this unit. The gap remains explicit.

• Next provider unit: Grok CORE-03. REQ-NLM-20260909-001 remains a mandatory pre-integration supplement.