AI＋従来ソフト協調論

AIに決定論的処理まで模倣させず、意味解釈・計画と、Python/SQL/Excel/GAS/検索/正規表現/DB等の実行・状態管理を分離する。

Enterprise AI Core / implementation / interoperability / non-LLM component / governance / operability.

AI→従来ソフトhandoffで型、権限、transaction、idempotency、postcondition、readbackをどう契約化するか。

• PostgreSQL 18 Transactions | https://www.postgresql.org/docs/18/tutorial-transactions.html | current 18 docs, accessed 2026-09-25 | all-or-nothing transaction/intermediate-state isolation | VERIFIED_SPEC | support.
• PostgreSQL 18 Client Connection Defaults | https://www.postgresql.org/docs/18/runtime-config-client.html | accessed 2026-09-25 | default isolation=Read Committed、semanticsは設定依存 | VERIFIED_SPEC | limit/context.
• SQLite Transaction | https://www.sqlite.org/lang_transaction.html | accessed 2026-09-25 | explicit/implicit transaction、COMMIT/ROLLBACK、single simultaneous write | VERIFIED_SPEC | support/limit.
• SQLite Atomic Commit | https://www.sqlite.org/atomiccommit.html | accessed 2026-09-25 | rollback modeでatomic commit、適用範囲を限定 | VERIFIED_SPEC | support/limit.
• Python 3.14.7 re docs | https://docs.python.org/3/library/re.html | accessed 2026-09-25 | explicit pattern API/PatternError | VERIFIED_SPEC | context.
• Google Apps Script Lock Service | https://developers.google.com/apps-script/reference/lock | accessed 2026-09-25 | shared-resource collision防止mutex、document/script/user locks | VERIFIED_SPEC + PRODUCT_VOLATILE | support/context.

semantic decision planeとdeterministic execution/state planeを分離する。算術・集計・厳密pattern/schema validation・SQL query/update・transaction/locking・date arithmetic・formula・既知API操作はsoftware候補。AIは自然言語→typed intent、曖昧性検出、候補生成、例外説明を担う。成功宣言ではなくDB/API/file等のreadbackで閉じる。

deterministic software≠correct software。transaction commit≠DB外side effectを含むend-to-end成功。DBごとにisolation/locking semanticsは異なる。regex match≠semantic correctness。Apps Script LockService≠distributed transaction。code generation成功≠execution/postcondition成功。AIのtool choiceが誤ればexecutorは誤操作を忠実に実行し得る。

runtime/version、DB engine/isolation/config、Excel/Sheets surface、Apps Script authorization/quota、API entitlement、region、organization policy、credential scopeを個別確認。public docsをtenant実挙動へ外挿しない。

PROPOSAL AI_SOFTWARE_EXECUTION_CONTRACT_V1 = operation_id,intent,component+version,typed_input,preconditions,authority,side_effect_class,idempotency_key,transaction_or_lock,timeout,retry,dry_run,expected_postcondition,result,readback,rollback_or_compensation,audit_ref,human_gate,UNKNOWN。

HYBRID_EXECUTION_REGRESSION_V1。LLM-only / AI→software / deterministic-only baselineを比較し、exact accuracy、schema validity、side-effect correctness、duplicate execution、rollback/compensation、readback mismatch、latency、cost、human intervention、wrong-tool routingを測る。競合更新・retry・idempotency・lock timeoutもfixture化。

executor credentialをleast privilegeで分離しsecretを不要にAIへ渡さない。generated SQL/codeは可能な範囲でallowlist/schema/static check/dry-run。read/write/irreversibleでapproval gateを分け、input/tool version/query hash/result/readback/actor classを監査。

AIにすべてを実行させず、意味解釈や計画をAIへ、厳密な計算・検証・検索・状態更新を従来ソフトへ返す。従来ソフトも正しさを自動保証しないため、型付き入力、権限、transaction/lock、idempotency、postcondition、readbackを実行契約として固定し、AIの成功宣言ではなく実システムからの再取得で閉じる。

Enterprise AI Coreのtool/action execution、transaction/readback、least privilege、human approvalへ接続。EA-039では推論、semantic routing、deterministic executor、state store、validator、audit/readbackを別componentとして比較する。

/ STOP_CONDITION 業務横断の一律routing threshold、distributed side effectsのatomicity、provider/tool横断exactly-onceは確定しない。境界原則、execution contract、failure envelope、evaluation profileまでboundedに確立したためEA-038停止。

RUN SUMMARY COMPLETED_EA: EA-038

EA-400以降・本編正本・S063 Frozen TOC未変更

---

AI_SOFTWARE_EXECUTION_CONTRACT_V1 remains DICTIONARY PROPOSAL. Transaction/lock primitives are not end-to-end exactly-once external-side-effect assurance. Preserve every OPEN_UNKNOWN from the authority packet. TESTS: exact authority range readback PASS; proposal/UNKNOWN/transaction-boundary markers PASS. Build/CI deferred to eligible Git batch.