{ "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "DataFeed", "@id": "https://cubits11.github.io/claims/index.json", "name": "Cubits11 claim registry", "description": "Every registered claim, each with its falsifier, the consequence fixed in advance, the rescues declared unavailable, and the date its warrant expires.", "url": "https://cubits11.github.io/claims/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "dateModified": "2026-09-14", "dataFeedElement": [ { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/cc-001/#claim", "identifier": "CC-001", "name": "Frechet-Hoeffding endpoint bounds from declared marginals", "description": "CC-001: Frechet-Hoeffding endpoint bounds from declared marginals. REJECT if a clean-clone execution of the bound module on marginals (0.10, 0.10) returns…", "text": "cc.kernel.strict.frechet_bounds computes Fréchet–Hoeffding endpoint bounds for composed binary guardrail failure from declared marginals; for marginals (0.10, 0.10) it returns [0.0, 0.10] for the AND event and [0.10, 0.20] for OR.", "url": "https://cubits11.github.io/claims/cc-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-24", "fw:scopeStatement": "The kernel module at the bound commit. Reproduced from a clean clone (venv, pip install, execute, assert) most recently on 2026-08-23, and re-reproduced by CI on every push and weekly. No claim about any deployed system.", "fw:falsifier": "A clean-clone execution of the bound module on marginals (0.10, 0.10) returns AND or OR bounds other than the recorded endpoints, beyond the stated tolerance.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not substitute a different input, revision, or numerical tolerance after the failure", "do not treat a passing wrapper or test harness as evidence for the stated outputs if direct execution disagrees" ], "fw:nonClaim": [ "does not certify any stacked system as safe", "does not recover or estimate the unknown dependence", "does not select a point inside the returned interval" ], "fw:lastReviewed": "2026-08-24", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2026-12-22", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cc-framework/commit/167aa1ee514ee3d797ed9be2c60120d0c1db71f6" }, "fw:supportBinding": { "@id": "https://github.com/Cubits11/cc-framework/commit/167aa1ee514ee3d797ed9be2c60120d0c1db71f6" }, "fw:boundRevision": "167aa1ee514ee3d797ed9be2c60120d0c1db71f6" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/cc-002/#claim", "identifier": "CC-002", "name": "The claim-boundary manifest and its validation lanes", "description": "CC-002: The claim-boundary manifest and its validation lanes. REJECT if the bound manifest no longer maps its public claims to validation lanes, supporting…", "text": "CC-Framework maintains a claim-boundary manifest mapping its public claims to validation lanes, supporting files, and explicit non-claims.", "url": "https://cubits11.github.io/claims/cc-002/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-24", "fw:scopeStatement": "The manifest file at the bound commit on the default branch.", "fw:falsifier": "The bound manifest no longer maps its public claims to validation lanes, supporting files, and explicit non-claims as stated.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not call partial or undocumented mappings complete manifest coverage", "do not substitute a different, unbound checklist or README after the manifest fails this condition" ], "fw:nonClaim": [ "the manifest's existence does not validate the claims it scopes" ], "fw:lastReviewed": "2026-08-24", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2026-12-22", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cc-framework/blob/3e22c39df70d419e840529d87311974e9e544f54/docs/claims/CLAIM_BOUNDARY_MANIFEST.md" }, "fw:supportBinding": { "@id": "https://github.com/Cubits11/cc-framework/blob/3e22c39df70d419e840529d87311974e9e544f54/docs/claims/CLAIM_BOUNDARY_MANIFEST.md" }, "fw:boundRevision": "3e22c39df70d419e840529d87311974e9e544f54" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/cc-003/#claim", "identifier": "CC-003", "name": "Identical pairwise overlaps, different three-way probability", "description": "CC-003: Identical pairwise overlaps, different three-way probability. REJECT if the frozen E1 construction fails to retain the stated equal singleton and…", "text": "CC-Framework's E1 dependence-evidence study established constructively that distributions with identical singleton failure rates (0.5) and identical pairwise overlaps (0.25) can differ in three-way failure probability — 0 under even parity, 0.25 under odd parity — so measuring every pair does not identify a three-guardrail stack. E1 is synthetic; its recorded decision is Narrow.", "url": "https://cubits11.github.io/claims/cc-003/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-24", "fw:scopeStatement": "The frozen study document at the bound commit. Controlled synthetic generators only; no real guardrail was measured.", "fw:falsifier": "The frozen E1 construction fails to retain the stated equal singleton and pairwise values while yielding the stated different three-way probabilities (0 under even parity and 0.25 under odd parity), or the bound study does not record the stated Narrow decision.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not switch to different marginals, overlaps, or generators after failure and call it the same construction", "do not turn failure of the concrete construction into a generic possibility claim without a new, stated construction" ], "fw:nonClaim": [ "the parity construction demonstrates possibility, not frequency, in real guardrail stacks — no claim of empirical prevalence", "nothing here validates the framework's practical or deployed value; \"we validated CC\" is prohibited at every rung of the repository's evidence ladder", "the product-baseline failure directions observed in E1 are properties of the tested generators, not universal constants" ], "fw:lastReviewed": "2026-08-24", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2026-12-22", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cc-framework/blob/ee61a710243c74ec49d5896167d0913327e6b5d3/docs/research/E1_DEPENDENCE_EVIDENCE_STUDY.md" }, "fw:supportBinding": { "@id": "https://github.com/Cubits11/cc-framework/blob/ee61a710243c74ec49d5896167d0913327e6b5d3/docs/research/E1_DEPENDENCE_EVIDENCE_STUDY.md" }, "fw:boundRevision": "ee61a710243c74ec49d5896167d0913327e6b5d3" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/cc-004/#claim", "identifier": "CC-004", "name": "The sharp interval for the both-fail query", "description": "CC-004: The sharp interval for the both-fail query. REJECT if bound identify() execution fails any stated interval, witness feasibility constraint, marginal…", "text": "For marginals (0.10, 0.10) and the both-fail query, cc.kernel.strict identify() returns the sharp interval [0.0, 0.10] together with endpoint witness distributions that sum to one, are nonnegative, satisfy both marginal constraints, and attain each endpoint — verified to 1e-9 from a clean clone.", "url": "https://cubits11.github.io/claims/cc-004/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-24", "fw:scopeStatement": "The kernel identification module at the bound commit, re-verified by CI on every push and weekly in the witness stage of scripts/reproduce_cc001.py. No claim about any deployed system.", "fw:falsifier": "Bound identify() execution fails any stated interval, witness feasibility constraint, marginal constraint, or endpoint-attainment assertion at the declared tolerance.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not replace a failed endpoint witness with an interior distribution or a loose approximate candidate", "do not waive a failed sum, nonnegativity, marginal, or attainment constraint by changing the tolerance after the outcome" ], "fw:nonClaim": [ "endpoint witnesses are feasible mathematical worlds, not observed systems", "attainment does not select a point inside the interval or estimate the true dependence" ], "fw:lastReviewed": "2026-08-24", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2026-12-22", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cc-framework/commit/167aa1ee514ee3d797ed9be2c60120d0c1db71f6" }, "fw:supportBinding": { "@id": "https://github.com/Cubits11/cc-framework/commit/167aa1ee514ee3d797ed9be2c60120d0c1db71f6" }, "fw:boundRevision": "167aa1ee514ee3d797ed9be2c60120d0c1db71f6" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/cc-005/#claim", "identifier": "CC-005", "name": "A measurement contract frozen before any dataset was inspected", "description": "CC-005: A measurement contract frozen before any dataset was inspected. NARROW if evidence shows that an eligible E2 dataset was inspected, selected against…", "text": "CC-Framework's E2 — the shared-item empirical guardrail pilot — is governed by a measurement contract frozen before any dataset was inspected; no conforming dataset has been collected, so E2 is untested, and the contract's conformance checks are executable.", "url": "https://cubits11.github.io/claims/cc-005/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-24", "fw:scopeStatement": "The frozen contract document at the bound commit. Freezing is a discipline about how evidence will be gathered; it is not evidence.", "fw:falsifier": "Evidence shows that an eligible E2 dataset was inspected, selected against, or analyzed before the contract was frozen, or that the stated executable conformance checks do not exist, or that a conforming dataset has been collected while the claim remains marked untested.", "fw:consequence": "NARROW", "fw:forbiddenRescue": [ "do not relabel pre-freeze exposure as “not inspection” after learning its outcomes", "do not reissue a changed contract after data inspection and call it preregistered", "do not cite the synthetic rehearsal as a conforming empirical dataset" ], "fw:nonClaim": [ "freezing a contract establishes discipline, not results; E2 remains untested until conforming observations exist", "conformance is not a clean bill of health, and the contract says so", "\"we validated CC\" is prohibited at every rung of the evidence ladder" ], "fw:lastReviewed": "2026-08-24", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2026-12-22", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cc-framework/blob/0b9450251b6988fa23d8e6e4fb556a08b05e652e/docs/research/E2_MEASUREMENT_CONTRACT.md" }, "fw:supportBinding": { "@id": "https://github.com/Cubits11/cc-framework/blob/0b9450251b6988fa23d8e6e4fb556a08b05e652e/docs/research/E2_MEASUREMENT_CONTRACT.md" }, "fw:boundRevision": "0b9450251b6988fa23d8e6e4fb556a08b05e652e" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/cc-006/#claim", "identifier": "CC-006", "name": "The E2 pipeline rehearsed on synthetic mechanisms", "description": "CC-006: The E2 pipeline rehearsed on synthetic mechanisms. REJECT if replaying the bound dry-run artifacts fails to reproduce the stated 66 conforming rows…", "text": "CC-Framework's E2 measurement pipeline was rehearsed end to end on three synthetic guardrail mechanisms: 66 observation rows conform to the frozen E2 schema with zero validator violations, the pre-registered negative controls behave (the common-cause control attains pA(1-pA) to 1e-9), and the finding records the result as a null at n=22 with a quantified cost for real E2 (~1097 shared items for epsilon=0.05). E2 itself is not run.", "url": "https://cubits11.github.io/claims/cc-006/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-09-07", "fw:scopeStatement": "The dry-run finding document at the bound commit. Synthetic toy mechanisms only; not deployed guardrails, not a real population, not E2. Operating points were not matched. The added 2000-permutation analysis is exploratory and does not replace the frozen single-draw control.", "fw:falsifier": "Replaying the bound dry-run artifacts fails to reproduce the stated 66 conforming rows, zero validator violations, negative-control behavior, or the recorded n=22 null and cost calculation, or shows that a real E2 run was represented as the synthetic rehearsal.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not substitute a repaired corpus, changed mechanism, or updated harness for the bound dry run", "do not report a partial replay or a result under changed criteria as confirmation of the original rehearsal" ], "fw:nonClaim": [ "this is not E2 and does not move E2 off untested; the mechanisms are toy filters in the repository, not deployed guardrails", "the observed dependence is a null at this scale, not evidence of independence or of any real-guardrail dependence", "validating the instrument establishes nothing about the safety, representativeness, or deployment behavior of any real system" ], "fw:lastReviewed": "2026-09-07", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2027-01-05", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cc-framework/blob/e372a5b50c68b98a56f8f5c5a87a6d1ca8fca992/docs/research/E2_DRYRUN_FINDING.md" }, "fw:supportBinding": { "@id": "https://github.com/Cubits11/cc-framework/blob/e372a5b50c68b98a56f8f5c5a87a6d1ca8fca992/docs/research/E2_DRYRUN_FINDING.md" }, "fw:boundRevision": "e372a5b50c68b98a56f8f5c5a87a6d1ca8fca992" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/rel-001/#claim", "identifier": "REL-001", "name": "Preregistered hypothesis on dependence-aware presentation", "description": "REL-001: Preregistered hypothesis on dependence-aware presentation. REJECT if after exactly 360 randomized eligible practitioners and a passing missingness…", "text": "HYPOTHESIS — Among English-reading professionals who made or materially prepared a go/hold recommendation for an AI-based system in paid work during the prior 12 months, an E2-derived dependence-aware uncertainty presentation will increase HOLD decisions by at least 15 percentage points relative to a stipulated-independence presentation of the same evidence.", "url": "https://cubits11.github.io/claims/rel-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-24", "fw:scopeStatement": "A preregistered, simulated practitioner decision task. It is untested, has no participant data, and cannot activate until the first real conforming E2 result clears its frozen evidence, legal, privacy, and ethics gates. It is not a claim about actual deployments, customer value, safety, or general practitioner behavior.", "fw:falsifier": "After exactly 360 randomized eligible practitioners and a passing missingness gate, the upper endpoint of the frozen two-sided 95% Newcombe/Wilson interval for the Condition-B minus Condition-A HOLD risk difference is below +15 percentage points.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not redefine success as engagement, aesthetics, confidence, perceived sophistication, comprehension, reading time, qualitative enthusiasm, or another secondary outcome", "do not change the 15-point threshold, E2 study or pair, task threshold, primary outcome, interval method, sample target, stopping rule, or exclusions after outcomes are known", "do not use a post-hoc subgroup, relaxed eligibility screen, missingness filter, top-up, or rerun to rescue an unfavorable primary result", "do not generalize a simulated task result to actual deployment, broad practitioner relevance, customer value, adoption, or safety" ], "fw:nonClaim": [ "no practitioner decision, E2-derived participant packet, consent record, recruitment, or study outcome exists yet", "this does not establish that dependence-aware evidence changes real deployment decisions, is generally useful, or justifies its cost", "this is not a customer-demand, payment, adoption, safety, or certification claim" ], "fw:lastReviewed": "2026-08-24", "fw:reviewWindow": "P30D", "fw:warrantExpires": "2026-09-23", "fw:evidentialStatus": "untested" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/mc-001/#claim", "identifier": "MC-001", "name": "Of 20 guardrail evaluations, 5 with joint-evidence artifacts", "description": "MC-001: Of 20 guardrail evaluations, 5 with joint-evidence artifacts. REJECT if a qualifying public evaluation meeting criteria v1 and published on or before…", "text": "As of 2026-08-27, among 20 public guardrail evaluations meeting the Missing Column Census's frozen inclusion criteria (v1), 14 establish a shared item set and a common event definition; 5 provide one of the census's declared joint-evidence artifacts: a printed composition result or per-item outcomes that make one directly computable.", "url": "https://cubits11.github.io/claims/mc-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-09-14", "fw:scopeStatement": "A census claim about public reporting, bounded by the documented search protocol documented in census.yaml. Its literal inclusion wording is locked in repository history before row classification; that is a reproducibility lock, not an independent preregistration. It covers the artifacts that search found, not everything in existence; it says nothing about how well any evaluated system or stack performs, and nothing about what the unmeasured joint statistics would show. N, M, and K are recomputed mechanically from census.yaml by scripts/verify_census.py; this envelope's expected block is cross-checked against that computation in CI. Since census schema v3 the joint-evidence mode counts in this note are derived the same way, from a declared joint_scope_additional field, rather than counted by hand here; scripts/verify_facts.py binds every current census numeral on every public page, and on the deployed page after release, to the quantity it asserts. M is a ladder, not a comparability verdict: 14 document shared items and a common event definition, 12 have no stated threshold mismatch, and 0 document matched operating thresholds together with full exposure. Nothing here asserts that the 14 are interchangeable at a common operating point; the opposite is the finding. The 5 is an inclusive discovery count of noninterchangeable artifacts, not an all-miss rate or a deployment conclusion. Four artifacts print at least one composition result and two release aligned per-item outcomes from which joint statistics are directly computable; one artifact does both, so those descriptions intentionally overlap. The frozen phrase \"separately attributable\" did not specify whether a product or model name must be printed: the primary count treats systems a source distinguishes and reports consistently as separately attributable even when anonymized; the declared named-products-only sensitivity excludes Unit42 and mechanically yields N/M/K = 19/13/5. A drafted further clause — that no printed joint statistic among the then-four covers a commercial guardrail API — was withdrawn before publication when same-day adversarial review produced a live counterexample under one defensible reading (WAInjectBench's printed ensemble includes GPT-4o prompted as a detector); this claim's forbidden rescues bar narrowing \"commercial\" after the fact, so the clause was dropped rather than reinterpreted, and the event is recorded in the census revision history. On 2026-08-30, a post-release source audit found the distinct Multimodal Safeguard Bench repository, whose currently public Git history carries a pre-cutoff commit timestamp, and which the documented search had missed. That met this claim's prior REJECT falsifier: the 19/13/4 envelope is rejected and retained in census revision history. This 20/14/5 envelope is its corrected, superseding proposition, not a reinterpretation of the former count.", "fw:falsifier": "A qualifying public evaluation meeting criteria v1 and published on or before 2026-08-27 is shown to be absent from this corrected census, or an examined row is shown to misreport its source such that recomputed N, M, or K differ from the stated 20/14/5.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not reinterpret \"joint statistic\" after a counterexample appears in order to keep the stated counts", "do not reclassify an examined row without recording the change and its reason in the census correction history", "do not treat the bounded-search disclaimer as license to ignore a demonstrated miss — a miss rejects the current counts and the corrected census must state new ones", "do not cite readership, links, or reuse of the census as evidence of its accuracy" ], "fw:nonClaim": [ "does not claim any evaluated guardrail stack performs poorly; an unfilled column is a reporting fact, not a performance finding", "does not claim the unmeasured joint statistics would reveal dependence; measuring instead of assuming is the point", "does not audit the quality of any per-system evaluation beyond the fields each row records", "does not claim exhaustive coverage beyond the corrected, examined artifact set or coverage after the stated date" ], "fw:lastReviewed": "2026-09-14", "fw:reviewWindow": "P60D", "fw:warrantExpires": "2026-11-13", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cubits11.github.io/blob/main/census.yaml" } }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/mc-002/#claim", "identifier": "MC-002", "name": "Five supervisors on BELLS against the independence plug-in", "description": "MC-002: Five supervisors on BELLS against the independence plug-in. REJECT if recomputing from the bound, hash-verified file yields any count different from…", "text": "On the 170-prompt per-item subset publicly released with BELLS's 2025 misuse-detection evaluation (pinned commit below), the five specialized supervisors — Lakera Guard, Prompt Guard, LangKit, NeMo Guardrails, LLM Guard — have an OR-union of released binary verdict columns that flags 73 of the 82 prompts labelled harmful, leaving 9 all-miss (11.0%). The product of their individual miss rates is 3.5%; the release-recomputed all-miss rate is about 3.1× that independence plug-in on this file. The same OR-union flags 19 of the 50 benign prompts.", "url": "https://cubits11.github.io/claims/mc-002/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-28", "fw:scopeStatement": "Exactly the released file at the bound commit: 170 of the evaluation's 990 non-adversarial prompts (the study's ~4,165 adversarial prompts have no per-item release), selected by the authors under an unstated rule. Counting arithmetic only, at the vendors' released binary verdicts; no population estimate, no uncertainty interval, and no claim about any system's true rates is offered or licensed. Computed by scripts/reanalyze_bells_subset.py from scripts/mjgd_reference.py; the expected block below is what CI re-asserts against the downloaded, hash-verified file.", "fw:falsifier": "Recomputing from the bound, hash-verified file yields any count different from the expected block, or the file at the pinned ref no longer matches the recorded sha256, or the released columns are shown not to be the labelled systems' verdicts.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not substitute a different subset, column set, or harm-level filter to preserve the numbers", "do not fold borderline prompts into either denominator after seeing the results", "do not recast this subset arithmetic as a population estimate, with or without an interval, if the primary counts are challenged", "do not cite the release-recomputed-to-plug-in ratio without the selection caveat that scopes it" ], "fw:nonClaim": [ "the subset is author-selected with an unstated rule — nothing here estimates any system's true rate, and no confidence interval is offered because the sampled population is undefined", "not a ranking or endorsement of any vendor; the released verdicts are at unstated default configurations", "says nothing about adversarial prompts, which dominate the full evaluation and have no per-item release", "the release-recomputed-to-plug-in ratio describes this subset's arithmetic, not a general law of guardrail dependence", "not an observed deployed five-guard stack; interpreting this static OR aggregation as a stack requires the separate full-exposure, parallel, fixed-operating-point assumptions" ], "fw:lastReviewed": "2026-08-28", "fw:reviewWindow": "P60D", "fw:warrantExpires": "2026-10-27", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/CentreSecuriteIA/bells_leaderboard/blob/507566c5a4606c8e3dec0bd59a5c5fde62594951/data/non_adversarial_prompts.csv" }, "fw:supportBinding": { "@id": "https://github.com/CentreSecuriteIA/bells_leaderboard/blob/507566c5a4606c8e3dec0bd59a5c5fde62594951/data/non_adversarial_prompts.csv" }, "fw:boundRevision": "507566c5a4606c8e3dec0bd59a5c5fde62594951" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/mc-003/#claim", "identifier": "MC-003", "name": "Marginals fix the all-miss rate only up to an interval", "description": "MC-003: Marginals fix the all-miss rate only up to an interval. REJECT if a joint law with the stated marginals achieves an all-miss rate outside the…", "text": "For k guardrails scored on a common item set at a common operating point under block-on-any composition, the rate at which every guard misses the same item is fixed by the published per-guard miss rates only up to the interval [max(0, Σp − (k−1)), min p], and every point of that interval is attained by some joint law with those marginals. Marginals prove non-degradation of a static OR composition relative to its best member, but, when that identified set is non-degenerate, they do not identify strictly positive incremental benefit. They also identify a positive lower bound on static benign union-flag rate when any member has a positive benign flag rate. On the BELLS 2025 partial per-item release — 82 prompts labelled harmful — the exact finite identified set is {0/82 … 12/82}; MC-002 recomputes 9/82 all-miss from the hash-verified released verdict file. Marginal catch counts plus the union identify only bounds on each guard's exclusive full-stack coverage; the registered leave-one-out unions identify the realized values: NeMo 18, Lakera 3, and LangKit, Prompt Guard, and LLM Guard 0 on this stratum.", "url": "https://cubits11.github.io/claims/mc-003/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-30", "fw:scopeStatement": "The mathematics is classical — Bonferroni for the lower endpoint, monotonicity for the upper, Fréchet for sharpness — and nothing here claims to have derived it. What is contributed is the application: pricing, in probability units, what marginal-only guardrail reporting leaves undetermined, and identifying leave-one-out unions as a compact privacy-preserving disclosure of exclusive full-stack coverage. They do not identify pairwise or higher-order overlap, Shapley values, or causal structure. Every statement is conditional on block-on-any composition, per-item decisions that are functions of the item alone, a fixed population, full exposure, and a fixed operating point; it says nothing about sequential routes where downstream measurement is censored by upstream blocks, agentic systems where an intervention changes the trajectory, or any vendor's product. The empirical half is one stratum of one author-selected subset: 82 harmful prompts, with 50 benign and 38 borderline held as separate strata and never folded in. It is a BELLS-specific reproduction, not an assertion that BELLS is the census's only per-item outcome release. scripts/reanalyze_bells_subset.py re-computes the BELLS counts from the hash-verified upstream file in CI; scripts/identification.py checks the stated identification transformations against that registered envelope.", "fw:falsifier": "A joint law with the stated marginals achieves an all-miss rate outside the interval; an exact finite catch-set arrangement lies outside the stated finite grid or exclusive-coverage bounds; or recomputing from the bound BELLS file yields any count different from the expected block.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not change the composition rule after the fact to preserve the direction of the result", "do not restate \"identified only up to\" as \"estimated to be\" — a bound is not an estimate", "do not quote where a release-recomputed value sits inside the interval as a score or a percentage of a gap closed; the endpoints come from adversarial couplings with no detector-behavioural content", "do not cite the zero-exclusive-coverage results as a vendor ranking, a causal attribution, or evidence about any product outside this stratum", "do not fold the borderline stratum into either denominator to change any figure" ], "fw:nonClaim": [ "no new mathematics is claimed; the bounds are Fréchet's and the lower endpoint is Bonferroni's", "not a claim that guardrails in general fail together — this stratum cannot separate shared blind spots from prompt-difficulty heterogeneity", "not a vendor evaluation; the released verdicts are at unstated default configurations, and one supervisor fires exactly once in the 170 released rows", "the identified interval is what the marginals leave open, not a prediction about any deployed stack", "leave-one-out unions identify only exclusive full-stack coverage; they do not identify pairwise or higher-order overlap, Shapley values, or causal contribution", "says nothing about adversarial prompts, which dominate the full evaluation and have no per-item release" ], "fw:lastReviewed": "2026-08-30", "fw:reviewWindow": "P60D", "fw:warrantExpires": "2026-10-29", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cubits11.github.io/blob/main/scripts/identification.py" } }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/mc-004/#claim", "identifier": "MC-004", "name": "Multimodal Safeguard Bench, recomputed from per-item verdicts", "description": "MC-004: Multimodal Safeguard Bench, recomputed from per-item verdicts. REJECT if recomputing from the bound, hash-verified files yields any count different…", "text": "On the per-item guard-verdict files publicly released with Multimodal Safeguard Bench's full_run (pinned commit below; six verdict files and the release's two printed-metric files hash-verified), the three guards — Llama Guard 4, Llama Guard 3 Vision, ShieldGemma 2 — have harness-normalized native `unsafe` labels whose static Boolean OR is 1 on 192 of 200 harmful-labelled text items (8 all-zero rows, 4.0%) and all 200 harmful-labelled image items (0 all-zero rows), while the same OR is 1 on 32 of 250 benign-labelled text items (12.8%) and every one of 250 benign-labelled image items. Llama Guard 3 Vision alone has a 1-bit on all 250 released benign image items. The complete 2^3 native-label pattern table, leave-one-out bit ORs, and unique bit contributions for each released stratum are bound below. The release prints per-guard metrics and two two-guard compositions; it prints no three-guard bit OR, no all-zero-row count, no leave-one-out table, and no pattern decomposition — and every recomputed quantity that overlaps what it does print is asserted equal to the printed value.", "url": "https://cubits11.github.io/claims/mc-004/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-31", "fw:scopeStatement": "Exactly the six committed verdict files of the full_run directory at the bound commit: 400 harmful and 500 benign items, each stratum half text and half image, one Boolean `blocked` adapter bit per item per guard. Let L be the release's harmful/benign label, A_s each guard's native `unsafe` predicate, B_s the harness mapping of that predicate to `blocked`, and O = OR_s B_s. The bound arithmetic reports B and O conditional on L. Because the harness uses `blocked` items to suppress target generation, O is also a valid counterfactual harness-block decision for these released rows under a fixed block-on-any rule. It does not establish a source-defined translation from every A_s to one shared catch event E: Llama Guard 3 Vision is a multimodal prompt/response classifier, while ShieldGemma 2 is an image-only three-policy classifier, and the pipeline merely maps each native `unsafe` label to `blocked`. Counting arithmetic only, at the guards' released native operating rules (the Llama guards emit labels autoregressively; ShieldGemma 2 blocks above a 0.5 policy-violation probability; the source documents no matched operating-point calibration, so M-ladder threshold comparability is unchanged). ShieldGemma 2's text-item bits are deterministic passes as committed and documented upstream, which is why its text column is zero — an explicit released outcome, not missing data. Strata are computed exactly as released and never folded; file totals are sums of the bound strata and carry no additional content. Computed by scripts/reanalyze_msbench.py from scripts/mjgd_reference.py; the expected block below is what CI re-asserts against the downloaded, hash-verified files.", "fw:falsifier": "Recomputing from the bound, hash-verified files yields any count different from the expected block, or any pinned file no longer matches its recorded sha256, or any recomputed quantity that overlaps the release's printed metrics disagrees with the printed value, or the committed blocked columns are shown not to be the named guards' verdicts.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not fold text and image strata — or harmful and benign files — into pooled denominators to move any figure; the strata are bound exactly as released", "do not substitute verdicts from the release's other run directories (adaptive_run, carrier sweeps, rendering probes) to preserve a number bound to full_run", "do not reinterpret ShieldGemma 2's deterministic text passes as missing data to shrink a denominator after seeing the results", "do not cite the benign-image 250/250 union without attributing it to Llama Guard 3 Vision's 250/250 column, and do not cite the harmful strata without the benign strata", "do not call an OR of the harness-normalized native labels a shared-event catch union, stack safety result, or three-independent- guard finding unless a source-defined event translation is added", "do not recast these file counts as population estimates, with or without an interval, if the primary counts are challenged" ], "fw:nonClaim": [ "not a shared-event catch statistic: the common `blocked` bit is a harness normalization of distinct native predicates, and no source-defined translation to a common event E has been identified", "not a population estimate — the items derive from HarmBench and XSTest under the release's own construction, and no interval is offered because no sampled population is defined", "not a ranking, endorsement, or indictment of any guard or vendor; the verdicts are at native, unmatched operating rules", "not an observed deployed three-guard stack; interpreting the OR aggregation as a stack requires the separate full-exposure, parallel, fixed-operating-point assumptions", "says nothing about the release's carrier-prompt, adversarial-UAP, or cross-VLM runs, which are separate artifacts with their own contracts", "the counts are about the committed verdict bytes; the release's own changelog documents that ShieldGemma 2's image scores are sensitive to the text-rendering stack, so nothing here predicts what any guard would do under a different rendering environment", "the zero three-guard image all-zero-bit count is a counting fact about these 200 released image items, not evidence of general image attack safety" ], "fw:lastReviewed": "2026-08-31", "fw:reviewWindow": "P60D", "fw:warrantExpires": "2026-10-30", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/PatrickKollman/Multimodal-Safeguard-Bench/tree/fb6f32e6b50b6faad833b815ebcd80afd2068bff/results/full_run" }, "fw:supportBinding": { "@id": "https://github.com/PatrickKollman/Multimodal-Safeguard-Bench/tree/fb6f32e6b50b6faad833b815ebcd80afd2068bff/results/full_run" }, "fw:boundRevision": "fb6f32e6b50b6faad833b815ebcd80afd2068bff" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/af-001/#claim", "identifier": "AF-001", "name": "AI Fluency Index prevalences for 11 of 24 behaviours", "description": "AF-001: AI Fluency Index prevalences for 11 of 24 behaviours. NARROW if the report states an artifact share or comparison group under which the relative…", "text": "Anthropic's AI Fluency Index reports overall prevalences for the 11 of its framework's 24 behaviours that are directly observable in conversations, and percentage-point differences for conversations that produced an artifact, but not the artifact share and not which comparison group the differences are against. Those published numbers therefore do not identify the subgroup rates — but they do bound them. Under every feasible artifact share and under either reading of the comparison, fact-checking is between 30% and 43% less prevalent in artifact conversations, a far larger effect than the stated 3.7 percentage points suggests on a base rate of 8.7%. The three behaviours that rise in artifact conversations are Description behaviours; the three that fall are Discernment behaviours.", "url": "https://cubits11.github.io/claims/af-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-28", "fw:scopeStatement": "Arithmetic on the figures published in the Index summary, nothing more. A pooled rate is a mixture of its subgroups, so a stated overall rate and a stated between-group difference bound each subgroup rate and their ratio; scripts/mixture_bounds.py computes those bounds in closed form and cross-checks them against a sweep. This is a re-expression of published numbers on a relative scale, not a re-analysis of the underlying conversations, to which this record has no access. It inherits every limitation the report declares: the findings are correlational, and the report states that users may perform fluency behaviours mentally without expressing them conversationally — so a fall in transcript-visible checking cannot be separated from checking that moved off-platform, which is where checking an artifact ordinarily goes. The measured evaluation gap is confounded with a measurement gap and these numbers cannot separate them. The framework is CC BY-NC-SA 4.0, copyright 2025 Rick Dakan, Joseph Feller, and Anthropic PBC; it is cited and analysed here, never redistributed or productised.", "fw:falsifier": "The report states an artifact share or comparison group under which the relative reduction falls outside [30%, 43%]; or a published figure differs from the transcription; or the closed-form bound disagrees with a direct sweep over feasible shares.", "fw:consequence": "NARROW", "fw:forbiddenRescue": [ "do not widen the stated interval after the fact to accommodate a figure that falls outside it", "do not restate the bound as an estimate of the artifact-conversation rate", "do not present the Description-rises / Discernment-falls pattern as causal, or as evidence that artifacts reduce evaluation rather than relocate it", "do not repackage the framework's behaviour taxonomy into any commercial or certification artifact; the licence is NonCommercial ShareAlike" ], "fw:nonClaim": [ "not a criticism of the Index; the observability boundary and the correlational limits are the report's own declared statements", "not a claim about any individual's competence, and not a measure of anyone's diligence", "not evidence that artifact production causes less checking — the published marginals cannot separate a behaviour change from a measurement change", "no access to the underlying conversations; this is arithmetic on a published summary" ], "fw:lastReviewed": "2026-08-28", "fw:reviewWindow": "P90D", "fw:warrantExpires": "2026-11-26", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://academy.claude.com/tutorials/the-ai-fluency-index" } }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/ga-001/#claim", "identifier": "GA-001", "name": "Ghost-Ark, a verifier for the provenance limits of receipts", "description": "GA-001: Ghost-Ark, a verifier for the provenance limits of receipts. NARROW if a source-level review of the bound thesis shows that it does not state…", "text": "Ghost-Ark is a verifier and measurement harness for the provenance limits of AI-governance receipts — a research artifact of the S2 Lab, Penn State — whose stated thesis is that receipt soundness is a ternary relation Sound(C, Σ, P): a receipt identifies an execution only up to the kernel of its whole parse → canonicalize → digest pipeline, so soundness does not persist by default as the pathology alphabet grows or the consumer set widens.", "url": "https://cubits11.github.io/claims/ga-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-24", "fw:scopeStatement": "The repository README and thesis document at the bound commit.", "fw:falsifier": "A source-level review of the bound thesis shows that it does not state soundness as a ternary relation over the whole parse → canonicalize → digest pipeline, or does not identify Ghost-Ark as the stated S2 Lab research artifact.", "fw:consequence": "NARROW", "fw:forbiddenRescue": [ "do not replace a whole-pipeline claim with a canonicalizer-only claim after the condition fires", "do not treat verifier acceptance or a pathology-free sample as evidence of semantic safety, authorization, or correctness" ], "fw:nonClaim": [ "a verifying receipt does not establish that the governed action was safe, authorized, or semantically correct", "kernel collisions in real canonicalizers are demonstrated as possible, not as prevalent — the repository's E12 sample found 0 of 64 real payloads carrying any pathology class", "not hardened for deployment; not post-quantum secure" ], "fw:lastReviewed": "2026-08-24", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2026-12-22", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/PSUCyberSecurityLab/ghost-ark/blob/98c90d8296580f08dd8b6e38fdd2abd7039ec651/docs/research/00_THESIS.md" }, "fw:supportBinding": { "@id": "https://github.com/PSUCyberSecurityLab/ghost-ark/blob/98c90d8296580f08dd8b6e38fdd2abd7039ec651/docs/research/00_THESIS.md" }, "fw:boundRevision": "98c90d8296580f08dd8b6e38fdd2abd7039ec651" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/gv-001/#claim", "identifier": "GV-001", "name": "Ghost Visualizer, a visual essay that computes safety scores", "description": "GV-001: Ghost Visualizer, a visual essay that computes safety scores. NARROW if a local run from the bound revision lacks the stated seven scenes…", "text": "Ghost Visualizer is a seven-scene React/Vite visual essay (\"Why AI Safety Scores Lie\") that computes marginals, OR composition, Fréchet–Hoeffding bounds, endpoint witnesses, and a receipt object from deterministic sample rows, with an Evidence Mode for inspection.", "url": "https://cubits11.github.io/claims/gv-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-24", "fw:scopeStatement": "The repository at the bound commit. Runs locally; there is no hosted deployment, so the site links source, not a live demo.", "fw:falsifier": "A local run from the bound revision lacks the stated seven scenes, deterministic sample-row computations, or Evidence Mode for inspection.", "fw:consequence": "NARROW", "fw:forbiddenRescue": [ "do not count hard-coded or mocked screenshots as deterministic computations", "do not recast a local-only source project as a hosted interactive demo" ], "fw:nonClaim": [ "not an AI-safety certificate; no deployment-readiness claim", "its own public-readiness review scores it for private serious-contact demo use; the site therefore links source rather than exhibiting its media as a flagship" ], "fw:lastReviewed": "2026-08-24", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2026-12-22", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/ghost-visualizer/commit/3fbe3efc89b6328bac493e62a32571d8e380d4f7" }, "fw:supportBinding": { "@id": "https://github.com/Cubits11/ghost-visualizer/commit/3fbe3efc89b6328bac493e62a32571d8e380d4f7" }, "fw:boundRevision": "3fbe3efc89b6328bac493e62a32571d8e380d4f7" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/gce-001/#claim", "identifier": "GCE-001", "name": "The Guardrail Composability Explorer, a coursework demo", "description": "GCE-001: The Guardrail Composability Explorer, a coursework demo. NARROW if the bound superseding taxonomy no longer classifies the coefficient family as…", "text": "GCE — the Guardrail Composability Explorer — is a coursework MVP demo (AI-285) for toggling guardrails and observing composed behavior. Its front-door composability-coefficient framing is superseded by CC-Framework's dependence-aware partial identification, whose metric taxonomy classifies the older coefficient family as legacy/deprecated. GCE is preserved as intellectual lineage, not current theory.", "url": "https://cubits11.github.io/claims/gce-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-24", "fw:scopeStatement": "The supersession record. It is bound to the superseding taxonomy document, not to GCE's repository; GCE itself is linked from /archive/ as a historical artifact.", "fw:falsifier": "The bound superseding taxonomy no longer classifies the coefficient family as deprecated legacy, or no longer supports the stated dependence-aware supersession.", "fw:consequence": "NARROW", "fw:forbiddenRescue": [ "do not treat the existence of legacy code or UI as evidence that its framing remains current theory", "do not substitute a generic preference for newer methods for a recorded theoretical supersession" ], "fw:nonClaim": [ "supersession is a statement about theoretical framing, not about the correctness of GCE's code or its value as coursework", "no current-research claim is made by or for GCE" ], "fw:lastReviewed": "2026-08-24", "fw:reviewWindow": "P365D", "fw:warrantExpires": "2027-08-24", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cc-framework/blob/75e90c2f1f84fa89562ed4fe46f137e0be236476/docs/theory/metric_taxonomy.md" }, "fw:supportBinding": { "@id": "https://github.com/Cubits11/cc-framework/blob/75e90c2f1f84fa89562ed4fe46f137e0be236476/docs/theory/metric_taxonomy.md" }, "fw:boundRevision": "75e90c2f1f84fa89562ed4fe46f137e0be236476" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/site-001/#claim", "identifier": "SITE-001", "name": "The palette token pairs and their computed contrast", "description": "SITE-001: The palette token pairs and their computed contrast. NARROW if recomputing the listed palette pairs under WCAG contrast rules finds any claimed AA…", "text": "This site's palette token pairs were computed to pass WCAG AA contrast (most AAA), and manual QA passes covered light/dark themes, desktop and mobile layouts, keyboard focus, reduced motion, and no-JS rendering, as recorded in DESIGN.md.", "url": "https://cubits11.github.io/claims/site-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-31", "fw:scopeStatement": "Manual and scripted checks recorded in DESIGN.md. No instrumented field performance data exists — the site runs no analytics by design.", "fw:falsifier": "Recomputing the listed palette pairs under WCAG contrast rules finds any claimed AA pass absent, or the recorded QA does not include the stated rendering, mode, and interaction checks.", "fw:consequence": "NARROW", "fw:forbiddenRescue": [ "do not replace a failed palette pair with another color pairing or viewport and retain the original claim", "do not treat visual preference or casual inspection as a substitute for WCAG computation or the listed QA checks" ], "fw:nonClaim": [ "no field CLS/LCP/CrUX measurements are claimed", "\"zero third-party runtime requests\" describes page code, not hosting infrastructure (GitHub Pages, DNS, TLS remain dependencies)" ], "fw:lastReviewed": "2026-08-31", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2026-12-29", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cubits11.github.io/blob/main/DESIGN.md" } }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/site-002/#claim", "identifier": "SITE-002", "name": "The claim registry, enforced in CI", "description": "SITE-002: The claim registry, enforced in CI. REJECT if a controlled violation of a required registry field, bound-evidence trigger, or review window reaches…", "text": "This site's claim registry is enforced in CI: verify_claims.py validates schema and bindings, executes the executable review triggers against live evidence, and fails the build when any claim passes its freshness window — on every push and weekly.", "url": "https://cubits11.github.io/claims/site-002/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-08-30", "fw:scopeStatement": "The verifier at the recorded content hash, and the public workflow that runs it. The generated-page and figure checks are separate steps in the same workflow (ledger, modules, observatory, figure geometry, internal links).", "fw:falsifier": "A controlled violation of a required registry field, bound-evidence trigger, or review window reaches a successful named CI workflow, or the workflow no longer runs on pushes to main and weekly.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not cite a normal green run as evidence that violations are rejected", "do not count a manual review or a generated-page drift check as automatic schema, trigger, or freshness enforcement", "do not treat a warning-only or report-only job as a build failure" ], "fw:nonClaim": [ "a green run verifies registry consistency and quiet triggers, never the truth of any claim's content", "an UNDETERMINED run (exit 2) blocks the build because a source was never reached; it is not a finding about any binding, and must not be read or recorded as a failed check", "triggers watch file content; semantic drift outside watched files remains a manual review event, and the ledger says so" ], "fw:lastReviewed": "2026-08-30", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2026-12-28", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cubits11.github.io/blob/main/scripts/verify_claims.py" } }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/e3-001/#claim", "identifier": "E3-001", "name": "Two ungated classifiers scored on harmful and benign items", "description": "E3-001: Two ungated classifiers scored on harmful and benign items. REJECT if recomputing from the committed observation rows yields any quantity different…", "text": "E3 — the first pilot this repository ran itself — scored two ungated classifiers on 400 harmful and 800 benign items and produced 2,400 committed observation rows. Its primary pre-registered prediction FAILED: excess joint miss was +0.0018 with a 95% bootstrap CI of [-0.00096, +0.00706], which includes zero. Both guards missed almost everything on this pool (0.9825 and 0.9625), so the Fréchet interval the two marginals allow is [0.9450, 0.9625] — 1.75 percentage points wide — and the observed joint miss of 0.9475 lies inside it. The prediction that it would lie inside HELD; the difficulty-stratification prediction was NOT COMPUTED and remains open.", "url": "https://cubits11.github.io/claims/e3-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-09-08", "fw:scopeStatement": "Exactly the 2,400 rows committed at experiments/e3/results/observations.jsonl, produced 2026-09-06 by two research classifiers — protectai deberta-v3-base-prompt-injection-v2 (0.2B) and dcarpintero pangolin-guard-base (0.1B) — at thresholds frozen in e3_config.json (sha256 e163a2f2…) before any harmful item was scored. One pool (or-bench-toxic at e36d8b80), one operating point each, static full exposure. scripts/verify_e3.py recomputes every quantity below from those rows alone, including the bootstrap interval, which is a deterministic function of the committed rows under the frozen seed. Nothing here transfers to E2's guards, pools or operating points, and nothing here is about a deployed system.", "fw:falsifier": "Recomputing from the committed observation rows yields any quantity different from the expected block beyond 1e-12, or the observed joint miss is shown to lie outside the Fréchet interval its own marginals allow, or a quoted prediction in the bound run report is shown to have been edited after the outcome was visible.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not re-threshold, re-draw, or re-pool after the outcome and report the new numbers as this run", "do not re-run the bootstrap under a different seed or B and report the resulting interval as this one", "do not restate the failed primary prediction, narrow it, or drop it from the record", "do not treat E3B as a re-run, a correction, or a replacement of this result" ], "fw:nonClaim": [ "the 2,400 rows prove the instrument runs end to end; they do not prove it measures what the programme says it measures, and on this pool the identified set was nearly a point, so it measured almost nothing", "not evidence that either classifier is good or bad; two research models, one pool, one operating point each", "the null is a null at this scale on this pool, not evidence of independence and not evidence about any real guardrail's dependence", "says nothing about E2, its three frozen guards, its pools, or its operating points", "no vendor, product, deployed stack, or population is described" ], "fw:lastReviewed": "2026-09-08", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2027-01-06", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cubits11.github.io/blob/main/experiments/e3/results/observations.jsonl" } }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/e3b-001/#claim", "identifier": "E3B-001", "name": "The same classifiers on the attack family they were built for", "description": "E3B-001: The same classifiers on the attack family they were built for. REJECT if recomputing from the committed observation rows yields any quantity…", "text": "E3B put the same two classifiers on the attack family they were built for — 400 real prompt injections — and produced a further 2,400 committed observation rows. Its primary prediction FAILED and so did the prediction the redraw existed to test. One guard missed nothing (0.0000, catching 400 of 400) and the other missed 0.3975, so the Fréchet interval the marginals allow is [0.0000, 0.0000] — zero points wide — the observed joint miss is exactly 0.0000, and the bootstrap CI is the degenerate [0, 0]. E3B was pre-registered to produce an interval wider than 10 percentage points; it produced one narrower than E3's. The prediction that the observed joint miss would lie inside the interval HELD, trivially.", "url": "https://cubits11.github.io/claims/e3b-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-09-08", "fw:scopeStatement": "Exactly the 2,400 rows committed at experiments/e3b/results/observations.jsonl, produced 2026-09-06 by the same two classifiers at thresholds frozen in e3b_config.json (sha256 252a5db9…) before any injection item was scored. One pool (Lakera gandalf_ignore_instructions at 04737b65, MIT), one operating point each, static full exposure. This is a new experiment with its own freeze, not a re-run of E3: E3's result stands whatever this shows, and both are registered. scripts/verify_e3.py recomputes every quantity below from the committed rows alone. The guard that caught 400 of 400 has two live explanations — generalisation and near-duplicate leakage from an undisclosed corpus — and nothing in this run separates them.", "fw:falsifier": "Recomputing from the committed observation rows yields any quantity different from the expected block beyond 1e-12, or a quoted prediction in the bound run report is shown to have been edited after the outcome was visible, or E3B is represented anywhere in this repository as a re-run, correction, or replacement of E3.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not re-threshold, re-draw, or re-pool after the outcome and report the new numbers as this run", "do not present E3B as a repair of E3, or E3 as superseded by it", "do not restate either failed prediction, narrow it, or drop it from the record", "do not treat the zero-width interval as a measured absence of dependence" ], "fw:nonClaim": [ "a zero-width identified set means the marginals already fixed the joint miss; it is not a measurement that the two guards fail independently", "G1 catching 400 of 400 is not evidence that it is a good guardrail, and contamination is unverified rather than excluded", "G2 missing 159 of 400 is not evidence that it is a bad one", "2,400 further rows prove the instrument runs; on this pool the question was degenerate, so they measure almost nothing", "the sharpening these two pilots suggest — that marginal-only reporting is uninformative in the middle of the marginal range and fully informative at its extremes — is a hypothesis and an engineering design gate, not a result of either pilot; neither run tested it", "no vendor, product, deployed stack, or population is described" ], "fw:lastReviewed": "2026-09-08", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2027-01-06", "fw:evidentialStatus": "supported_within_scope", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cubits11.github.io/blob/main/experiments/e3b/results/observations.jsonl" } }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/e6-001/#claim", "identifier": "E6-001", "name": "Rejected: the permutation routine moves unequal-mass atoms", "description": "E6-001: Rejected: the permutation routine moves unequal-mass atoms. REJECT if recomputing from the committed rows yields any registered quantity different…", "text": "REJECTED AS STATED on 2026-09-10. The permutation routine moves unequal-mass atoms. Only 16 of 1,296 constructions preserve the specified marginal weights. The advertised 2.12–18.07 fixed-marginal range is unsupported and is rejected. No replacement range is asserted. Historical assertion retained for audit, not an accepted current finding: E6 extracted the client-side model kernel that anthropic.com/institute/econ-scenarios ships (Turbopack module 303412, sha256 0a75763f…), gated it against the twelve printed numbers of Table 3 of the Anthropic Institute's Working Paper 2026-02, and evaluated it only at parameter vectors built from the five marginal quantiles that paper prints in Table 2. The kernel reproduces all twelve Table 3 numbers to the printed decimal, and GDP is strictly increasing in each of the five parameters over their published interquartile ranges. Holding the four parameters the note to Table 4 names at that note's values, the same five marginals admit a median 2030 GDP anywhere in [2.12, 18.07] percent above the no-AI path across the 1,296 rank-permutation couplings of their published quartiles: 9.88 at the comonotone corner, 8.32 under independence, against the 8.6 the paper obtained by running each of 3,259 respondents' own five-vector. The marginals fix an interval fifteen points wide, not a point, and the measured joint lies strictly inside it.", "url": "https://cubits11.github.io/claims/e6-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-09-10", "fw:scopeStatement": "Historical run only. Formal disposition: experiments/e6/CORRECTION-2026-09-10.md. Frozen inputs, estimator and outputs are unchanged. The expected block below records original run values and must not be used as current confirmatory evidence. Original scope, including interpretations now rejected with this claim: Exactly the 243 rows committed at experiments/e6/results/observations.jsonl, produced 2026-09-10 from one set of kernel bytes pinned by digest in experiments/e6/freeze/sources.json. The five marginals are the published Table 2 quantiles and nothing else; each is discretised to three atoms at those quantiles with weights 0.25/0.50/0.25, a construction chosen after the outcomes were visible and declared as such, which makes the coupling range an inner bound — a finer discretisation of the same marginals can only widen it. scripts/verify_e6.py re-derives all 34 registered quantities from the committed rows alone, with no network and no re-run of the model. This is a re-derivation of public artifacts and not a preregistered test; no prediction here held, because none was made. It transfers no number to any safety classifier, pool, or operating point, and asserts no error in the source paper.", "fw:falsifier": "Recomputing from the committed rows yields any registered quantity different beyond 5e-5, or the pinned kernel bytes are shown not to reproduce all twelve printed Table 3 numbers to the printed decimal, or GDP is shown not to be monotone in one of the five parameters over its published interquartile range, or the measured joint median of 8.6 is shown to lie outside the coupling range this claim reports, or the extraction is shown to have altered the kernel's arithmetic rather than only re-instantiating its own factory source.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not re-pin to a different kernel build after seeing an outcome and report the new numbers as this run", "do not change the discretisation, its weights, or the hold-out values after the fact and present the resulting range as this one", "do not describe E6 as preregistered, or any figure in it as a prediction that held", "do not restate the unresolved site-copy estimand as though the public record settled which summary it names", "do not carry any number here across to a guardrail, a classifier, or E2" ], "fw:nonClaim": [ "Current disposition is REJECT; the historical non-claims below do not restore the rejected assertion. See /corrections/#e6-marginals.", "no error in the source paper is claimed; Table 4 does the joint-preserving computation and does it correctly, and the kernel agrees with the paper wherever both speak", "not a claim that the site's \"GDP is 10% higher\" figure was computed by composing marginals; two different summaries of the same survey both round to it, the public record does not say which, and what is recorded is that the estimand is not identified from the artifact", "the coupling range is an inner bound under a declared discretisation, not a sharp Fréchet bound; in five dimensions the comonotone corner is attainable but the lower envelope is not a copula, and that optimisation was not solved", "not evidence about the US economy, about AI's economic effects, or about whether any scenario is likely; it is a statement about what a model's inputs determine", "not a guardrail measurement and not transferable to one; it is the same identification structure measured on a different object", "says nothing about the competence or intent of the paper's authors or reviewers", "not a claim that the model composes its five inputs wrongly: the elicited quantities are conditional — the explorer's adoption dial asks what share of the tasks AI *can* do people will use it for — so their product within one respondent is the chain rule and is exact. The coupling this claim varies is the joint distribution across the 10,980 respondents, which no chain rule fixes", "the 243 rows are evaluations of someone else's model at published parameter vectors, not per-item measurements of a guard on an item; they are counted by the evidence ledger as rows this repository produced, and the ledger's single observation-row total must not be read as growth in guard-item measurement. E3 and E3B's 4,800 rows are that kind; these are not" ], "fw:lastReviewed": "2026-09-10", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2027-01-08", "fw:evidentialStatus": "contradicted", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cubits11.github.io/blob/main/experiments/e6/results/observations.jsonl" }, "fw:verdict": "REJECTED AS STATED", "fw:verdictDate": "2026-09-10" }, { "@context": [ "https://schema.org", { "@version": 1.1, "fw": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#", "@prefix": true }, "xsd": "http://www.w3.org/2001/XMLSchema#", "fw:falsifier": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#falsifier" }, "fw:consequence": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#consequence" }, "fw:forbiddenRescue": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#forbiddenRescue", "@container": "@list" }, "fw:nonClaim": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#nonClaim", "@container": "@list" }, "fw:scopeStatement": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#scopeStatement" }, "fw:evidentialStatus": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#evidentialStatus" }, "fw:lastReviewed": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#lastReviewed", "@type": "xsd:date" }, "fw:reviewWindow": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#reviewWindow", "@type": "xsd:duration" }, "fw:warrantExpires": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#warrantExpires", "@type": "xsd:date" }, "fw:supportUrl": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportUrl", "@type": "@id" }, "fw:supportBinding": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#supportBinding", "@type": "@id" }, "fw:boundRevision": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#boundRevision" }, "fw:verdict": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdict" }, "fw:verdictDate": { "@id": "https://cubits11.github.io/ns/falsifiable/v1/#verdictDate", "@type": "xsd:date" } } ], "@type": "Claim", "@id": "https://cubits11.github.io/claims/e7b-001/#claim", "identifier": "E7B-001", "name": "Rejected: calibration uses the shared pool for every judge", "description": "E7B-001: Rejected: calibration uses the shared pool for every judge. REJECT if recomputing from the committed rows yields any registered quantity different…", "text": "REJECTED AS STATED on 2026-09-10. Calibration uses the all-nine shared pool instead of each judge’s own pool, changing one threshold from 0.95 to 1.00. Pair evaluation also uses the global intersection. The preregistration-conforming confirmation claim is rejected; the original HELD labels are historical outputs. Historical assertion retained for audit, not an accepted current finding: E7B is the first non-degenerate preregistered measurement this repository has produced, and all five of its predictions held on data unread when they were fixed. Against a preregistration frozen at f646e136 before any hold-out byte was retrieved, six of nine published guardrail-judge score sets reached a 5% benign false-flag budget on their shared 96-item AgentDojo pool (21 injection goals, 75 benign) and yielded 15 non-degenerate pairs. Median excess joint miss was +0.2018 and mean +0.1852 (P1, P2 HELD); the median pair's observed joint miss sat 0.900 of the way to the Fréchet upper bound its own marginals allow (P3 HELD); every observed joint lay inside its interval (P4 HELD); and every one of the 15 pairs had an observed joint miss above the independence product (P5 HELD). On the modal pair two judges each miss about half the injection goals, independence predicts a 0.249 both-miss rate, and the observed rate is 0.476 — exactly the upper bound, meaning one judge's misses are a subset of the other's. Seven of the fifteen pairs sit at that bound.", "url": "https://cubits11.github.io/claims/e7b-001/", "author": { "@type": "Person", "@id": "https://cubits11.github.io/#person", "name": "Pranav Bhave", "url": "https://cubits11.github.io/", "sameAs": [ "https://github.com/Cubits11", "https://www.linkedin.com/in/pranav-bhave-2a328721a/", "https://x.com/PranavBhave_" ] }, "isPartOf": { "@type": "Dataset", "@id": "https://cubits11.github.io/ledger/#dataset", "name": "Cubits11 claim registry", "url": "https://cubits11.github.io/ledger/" }, "dateModified": "2026-09-10", "fw:scopeStatement": "Historical run only. Formal disposition: experiments/e7b/CORRECTION-2026-09-10.md. Frozen inputs, estimator and outputs are unchanged. The expected block below records original run values and must not be used as current confirmatory evidence. Original scope, including interpretations now rejected with this claim: Exactly the 15 rows committed at experiments/e7b/results/observations.jsonl, computed 2026-09-10 from nine published score files in shawnray-research/certified-agent-guardrails at commit 79097583be7786976ea1b9ae79f3ff900d9e66b7 (MIT). Labels are the 35 strings of _inj_goals.json in that tree. One operating point per judge, set by the preregistered rule — the lowest threshold among a judge's benign scores at which its benign false-flag rate is at or below 5% — and three judges excluded for not reaching it. 21 harmful items, so every rate moves in steps of 0.048; no confidence procedure was preregistered and none is reported. The 15 pairs come from 6 judges and are not independent; no multiplicity control was preregistered. Supersedes nothing: E7 on the seven frontier judges is VOID on a defective preregistration that stated its threshold rule in two contradictory directions, those judges are spent, and experiments/e7/RESULT.md records that rather than repairing it. No model was loaded and no API called, so the host refusal at experiments/e2/run/adapters.py:48 is not engaged. Nothing here transfers to E2's guards, to any deployed stack, or to any vendor product.", "fw:falsifier": "Recomputing from the committed rows yields any registered quantity different beyond 1e-9, or the preregistration's commit is shown not to precede the results commit, or any of the nine hold-out score files is shown to have been retrieved or inspected before f646e136, or the operating-point rule applied in experiments/e7b/run/measure.py is shown to differ from the one PREREG.md states, or an observed joint miss is shown to lie outside the Fréchet interval its own marginals allow.", "fw:consequence": "REJECT", "fw:forbiddenRescue": [ "do not re-threshold, re-calibrate, change the 5% budget, or change the direction of the operating-point rule and report the new numbers as this run", "do not lower the six-pair power floor, or raise it, after the fact", "do not pool the sixteen read judges of E7 and its exploratory record into this panel and report the combined figure as this result", "do not present this as a repair, correction or replacement of the void E7, and do not present E7's frontier judges as still available for a preregistered claim", "do not restate a prediction, narrow it, or drop it from the record", "do not carry these numbers to E2's guards, to a deployed stack, or to a vendor" ], "fw:nonClaim": [ "Current disposition is REJECT; the historical non-claims below do not restore the rejected assertion. See /corrections/#e7b-pools.", "the Fréchet bound applied here is not this repository's: arXiv:2607.22868v1 states it for an any-flag gate as a proposition, and that artifact's own ensemble_robustness.py reports the vulnerability as correlated across judges. That author found the bound, released the per-item scores that make this checkable, and named the correlation; E7B measures it against a preregistration and claims priority for neither", "21 harmful items is a small pool; every rate moves in steps of 0.048, no confidence procedure was preregistered, and no point estimate here implies an interval", "15 pairs drawn from 6 judges are not 15 independent observations, and no multiplicity control was preregistered or is claimed", "one benchmark, one pool, one operating point per judge; AgentDojo injection goals are not a deployed threat model and these are research judges, not a shipped stack", "the three excluded judges were excluded by a pre-stated rule, and their absence is not evidence about them", "not evidence that any specific product, vendor or deployed guardrail stack has correlated failures", "five predictions holding is not a general law: it is one preregistered result on one pool, and the interpretation it supports is that independence understated the joint here, not that it always will" ], "fw:lastReviewed": "2026-09-10", "fw:reviewWindow": "P120D", "fw:warrantExpires": "2027-01-08", "fw:evidentialStatus": "contradicted", "fw:supportUrl": { "@id": "https://github.com/Cubits11/cubits11.github.io/blob/main/experiments/e7b/results/observations.jsonl" }, "fw:verdict": "REJECTED AS STATED", "fw:verdictDate": "2026-09-10" } ] }