9cf6a164d5
Rank 5 on the docket, and the first item this arc whose expected outcome is LOSING capability. conservative_floor is a one-sided Wilson lower bound, and Wilson assumes independent trials. CORE's pipeline is deterministic, so replaying an identical case is not a second trial — it is the same trial with a guaranteed outcome. The deduction sealer folded the raw practice corpus and counted every replay, so bands recorded 720/720 committed whether that was 720 decisions or 28 decisions seen 26 times each. conservative_floor(720,720)=0.990868 cleared theta_SERVE=0.99; conservative_floor(28,28)=0.808413 is not close. RESULT: 25 licensed bands -> 4. Twenty-one demoted. Survivors: en_conditional_chain, en_disjunctive, en_verb_fact, en_verb_universal — the only bands whose corpus holds enough independent cases. What the demotion did and did not do, stated exactly. NO ANSWER CHANGED. No answer became wrong. `wrong` stayed 0 across all 25 bands. The engine is exactly as correct as it was. What changed is the CLAIM attached to the answer: 21 bands now serve the same sound conclusion prefixed with "(reasoned, but I haven't yet earned a verified track record on arguments of this shape)". The reasoning did not get worse; the boast did. The producer is hardened, which is the half that stops this recurring. seal_ledger now refuses outright — assert_sealed_evidence_distinct compares the ledger about to be written against the corpus's distinct-case count and raises BEFORE anything is written. The curriculum sealer has carried this guarantee since ADR-0264 R9; the deduction sealer had no equivalent, which is exactly how the exposure arose. Catching it at seal time rather than in an audit matters: an audit finds a padded ledger after it is committed, trusted, and gating a live flag, and unwinding that then needs a ruling — it needed one. A HOLLOW GUARD OF MY OWN, caught by sabotage rather than trusted. The first version compared all_gold_problems() with distinct_gold_problems() — two functions that agree with each other by construction, and neither of which is what build_ledger folds. Reverting build_ledger to the raw corpus walked straight past it AND re-sealed the inflated artifact. Same defect class the ledger already suffered: a guard checking something adjacent to the thing it protects. It now takes the BUILT LEDGER as input, because the invariant is about the artifact. Re-running the identical attack: refused, wrote nothing. Pinned as test_sealer_refuses_a_ledger_that_counts_replays. A SECOND MISS, caught by the gate rather than by me. My blast-radius scan grepped for deduction_serve_license / deduction_serve_ledger / 720 and found nine files. It missed tests/test_construction_inventory.py, which asserts deduction SURFACE STRINGS and never mentions the ledger — so a pattern search over the wrong noun could not see it. The full gate found it. Recorded because "I scanned for the blast radius" is worth exactly as much as the scan's key, and mine was the wrong key. That test is the #138 fabrication defect pin, and it is updated WITHOUT being weakened. Both surfaces now carry the disclosure prefix, and the fabrication survives untouched — which is a sharper finding than before: a disclosure prefix looks like it might cover the hazard, and it does not. The user is still told they said "furthermore". Exact-match assertions kept on the full strings so neither the fabrication nor the licence state can drift unnoticed, plus an isolating assertion that the only difference between clean and leaked recitals is the fabricated premise. Four records corrected in the same PR, each of which would otherwise have gone on asserting capability that no longer exists: - CAPABILITY_LEDGERS' manifest note ("25 bands at 720/720 wrong=0") - the published CLAIMS.md claim — caught immediately by G-22's own pin, which is that fix earning its keep three days after landing - test_volume_honesty.py's module docstring, which said the exposure was "NOT silently repaired ... changing it is Shay's ratification, not a test's". R-13 IS that ratification, so the line went stale by being acted on - the exposure inventory's framing: it now pins the repair, not the gap test_volume_honesty's sealed-vs-producer assertion is strictly stronger than it was. It compared sealed committed counts to the producer's committed counts and both were the inflated 720 — the assertion held perfectly while the number it agreed on was the wrong number. Two records agreeing is not evidence that either is right. It now pins committed == distinct, plus a non-vacuity check. Nine tests encoded the unearned expectation and were updated to the honest one. Closes G-19 and H-1. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Wcw2pnMBwyvmNyQg4uPEt4
183 lines
4.3 KiB
JSON
183 lines
4.3 KiB
JSON
{
|
|
"classes": {
|
|
"atomic": {
|
|
"correct": 98,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"categorical": {
|
|
"correct": 294,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"conditional_chain": {
|
|
"correct": 294,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"conditional_single": {
|
|
"correct": 294,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"disjunctive": {
|
|
"correct": 294,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_atomic": {
|
|
"correct": 474,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_conditional_chain": {
|
|
"correct": 720,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_conditional_single": {
|
|
"correct": 474,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_condmem_chain": {
|
|
"correct": 52,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_condmem_conditional": {
|
|
"correct": 60,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_condmem_disjunctive": {
|
|
"correct": 28,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_condmem_fused": {
|
|
"correct": 60,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_disjunctive": {
|
|
"correct": 720,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_exist_chain": {
|
|
"correct": 28,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_exist_negative": {
|
|
"correct": 28,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_exist_universal": {
|
|
"correct": 46,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_exist_witness": {
|
|
"correct": 35,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_member_atomic": {
|
|
"correct": 60,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_member_chain": {
|
|
"correct": 52,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_member_negative": {
|
|
"correct": 52,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_member_single": {
|
|
"correct": 60,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_verb_chain": {
|
|
"correct": 308,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_verb_fact": {
|
|
"correct": 660,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_verb_negative": {
|
|
"correct": 308,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
},
|
|
"en_verb_universal": {
|
|
"correct": 660,
|
|
"refused": 0,
|
|
"t2_agrees_gold": 0,
|
|
"t2_verified": 0,
|
|
"wrong": 0
|
|
}
|
|
},
|
|
"content_sha256": "8db89aed12aafb68625f4ee0ba994f91964775eef8f8f9e9f92c6ed030ecb1ed",
|
|
"note": "Sealed-practice committed ledger for deduction serving (ADR-0256). Engine reads, never writes. Ceilings stay at safe defaults (theta_SERVE=0.99). A band earns SERVE by demonstrated pipeline reliability (reader+projector+engine) at volume >= 657 committed. RE-COUNTED 2026-07-28 under R-13: one committed case per DISTINCT decision (case text), so committed == distinct evidence by construction. The prior seal folded the raw corpus and counted replays as independent trials, which the Wilson floor assumes they are not; 21 of 25 bands held SERVE licences their evidence never supported and are demoted here.",
|
|
"provenance": "evals.deduction_serve.practice.runner.seal_ledger",
|
|
"schema": "deduction_serve_ledger_v1"
|
|
}
|