Backend
Making AI-Assisted Claims Independently Challengeable: Publication Authority and a Protocol for Falsifiable Publication Records
arXiv cs.CR0 views
arXiv:2609.17631v2 Announce Type: replace-cross Abstract: AI-assisted claims can appear authoritative when evidence, analysis, human authorization, presentation, and correction history describe different states. We develop Publication Authority: an exact-state, non-transferable, single-use publication capability within PAC-2026 (Publication-Accountability Calculus), an AIJIM Protocol candidate. The evaluated specification version (SF-4) defines six non-compensating obligations: evidence, runs and artifacts, measurement disclosure, authorization, surface correspondence, and lifecycle continuity. Each yields a target-bound witness, localized counterexample, or localized unverifiability. Only a fresh, complete all-pass record derives a permit consumed by one atomic publication transition. Ten models explored 110,764 distinct safe reachable states; 76 unsafe configurations yielded the expected violation or observer countermodel. A surface passing its correspondence check cannot authorize publication unless admitted by the accepted record. SF-4 separates evidence horizon from verification time and rejects authentic but causally invalid authorization. An in-house, instance-blind study (G7-B) matched 183 scored expectations after shared integration. Three author-led native comparisons identify gaps in a constructed in-toto/OPA profile: measurement-state admission, proof-expiry evaluation, and required-run identity. Repairs restore parity on the tested cases. An exploratory extension constructs exact claim-edit regions under existing e-closure semantics: a minimum retained core qualifies every permitted selection. For the full hypothesis universe (U=H), a quadratic frontier computes all strongest-core sizes. Enumeration and native controls distinguish reusable statistical qualification from the fresh publication authority each candidate requires. Results yield transferable protection rules; independent conformance and field evaluation remain open.
Source:https://arxiv.org/abs/2609.17631PreviousSIREN (Luring LLMs onto the Rocks): PAIR-Driven Preference Manipulation in Web-RAG RecommendersNextTracekit: Tamper-Evident Intent-Reasoning-Action Auditing for AI Agents
Related posts
DeepSeek's Open-Source "Super-Agent" Codes Without Being Asked
0dev.to GitHub
All-in-one platform or a stack you assemble? Where do coaches and educators land?
0dev.to Discuss
I Wanted to Live on Coruscant. PAT Scared Me. Now My Alexa Lives on Mute.
0dev.to Discuss
Detect What You Can Name: PaliGemma 2 Object Detection with Transformers
0dev.to Machine Learning
When Should an LLM Router Stop Being Sticky? llm-d 1.0 Cache-Affinity Routing, Break-Even Math, and a Simulation
0dev.to Machine Learning

Understanding HackerTube: Karpathy’s Two-Hour Experiment in Better Recommendations
0dev.to Machine Learning