HF2007 / PUBLIC VERIFICATION CHECKPOINT / T0

From Sample Safety to Path Legitimacy: T0 Admission Gating for Unauthorized Reasoning Transitions in LLM-Integrated Systems從樣本安全到路徑合法性:LLM 整合系統中未授權推理轉移的 T0 准入閘門

I extracted this minimum verifiable public layer from a system already under development. It is not a concept waiting to be built: it is the externally reviewed checkpoint at which T0 path legitimacy became executable, auditable and reproducible.

FORMALLY ACCEPTEDAUTHOR PUBLIC EVIDENCE RELEASEACTIVE ENGINEERING CONTINUES
ICAISG 2026 HF2007 formal acceptance notice

The paper came from the system. The system did not come from the paper.

HF2007 was written at a specific point in the development and implementation of my system. I extracted the smallest layer that could be reviewed and reproduced externally without disclosing the private core: T0 admission, an auditable eight-relation representation, a fixed 51-transition experiment, source provenance, hashes and deterministic results.

The formal review and acceptance preserve evidence that path legitimacy had already moved beyond assertion. The mechanism could be compiled, executed, audited, replayed and tested before an unauthorized transition entered ordinary reasoning.

My position is not that AI safety might optionally use this framework. When models, tools, external information and action form a reasoning path, sample-level filtering alone cannot close the safety problem. The path must establish its subject, evidence, causality, boundary, authority and responsibility before it gains the right to act.

The public checkpoint is executable and reproducible.

The review package fixes the source commit, selected transitions, raw bytes, relation vectors, deterministic extractor, reference path, comparator, metrics, hashes and execution command.

51 / 51

RELATION VECTORS AND T0 OUTCOMES MATCH

17 / 17

VALID PRE-TOOL TRANSITIONS ADMITTED

34 / 34

INJECTED TOOL-OUTPUT TRANSITIONS STOPPED

0 / 0

FALSE STOPS / FALSE ADMISSIONS

FIXED SOURCE

InjecAgent at the pinned commit recorded below.

REPLAY PATH

The experiment package runs from its manifest with python run_all.py.

EXTERNAL REVIEW

The major-revision and re-review path checked the 51 transitions, worked case, coverage table and reproducibility package before formal acceptance.

Eight auditable relations are evaluated before ordinary reasoning.

At this engineering checkpoint, the eight relations form the public gate representation used to decide whether a transition may enter reasoning or must stop.

R1DEFINER ↔ OBJECT
R2THEORY ↔ DOMAIN
R3EVIDENCE ↔ PROPOSITION
R4CAUSE ↔ CONCLUSION
R5BOUNDARY ↔ SCOPE
R6GAP ↔ STOP
R7OUTPUT ↔ AUTHORITY
R8RESULT ↔ RESPONSIBILITY

HF2007 preserves one verified point in an engineering path that continues.

01 · SYSTEM

Internal system development

The architecture and engineering path already existed.

02 · EXTRACTION

Minimum public layer

A reviewable layer was isolated without releasing the private core.

03 · HF2007

Paper and experiment

The T0 gate and fixed 51-transition baseline were packaged.

04 · REVIEW

External verification

Formal review, revision, reproducibility check and acceptance.

05 · CONTINUATION

Current engineering

T0, SCBKR, AICC and Runtime work continue beyond the paper.

Read the paper and reproduce the experiment in the dedicated GitHub repository.

The dedicated research repository carries the complete paper, original reproducibility experiment, checksums, provenance, execution instructions and version history. The official website keeps the research narrative and formal acceptance evidence without duplicating those artifacts.

HF2007 PUBLIC EVIDENCE RELEASE v1.0

The dedicated research repository carries the complete paper, original reproducibility experiment, checksums, provenance, execution instructions and version history. The official website keeps the research narrative and formal acceptance evidence without duplicating those artifacts.

GITHUB-VERIFIABLE ARTIFACT HASHES

Use these SHA-256 values to verify the paper and experiment published in the dedicated repository.

CAMERA-READY PAPER PDFffca3677f1a36b38825f081ca9b3fa77ad1b2b66715ba7987b27531a6f8b34e4
MAJOR-REVISION EXPERIMENT PACK958d880c5d82f895c0687c18a55392040e66356b82b3a47f2a32195b10047118
PINNED INJECAGENT COMMITf19c9f2c79a41046eb13c03c51a24c567a8ffa07
OPEN REPRODUCIBLE REPOSITORY

This is the public verification layer, not the private system boundary.

What this release establishes

An executable T0 pre-reasoning admission mechanism and exact reproducibility on the fixed 51-transition public baseline.

What remains private

The internal rule core, complete Runtime, private ledgers, system integrations and later engineering versions.

What continues

The system continues through implementation, integration, testing and future versioned releases beyond this paper.

Publication status

Formally accepted and independently released by the author. No claim of conference publication, DOI or external indexing is made.

Paper ID
HF2007
Formal acceptance
9 September 2026
Camera-ready received
28 September 2026
Public role
Minimum verifiable public checkpoint
Engineering state
Continues beyond this paper
External indexing
No indexing claim