{ "version": "s22", "decisions": [ { "id": "host-owns-completion-gate", "title": "The Host Owns the Completion Gate", "description": "The working model may request to stop, but the harness evaluates the active goal before returning. Completion is a program decision at the turn boundary.", "alternatives": "Asking the working model whether it is finished is simpler, but lets the same actor make and verify its own claim.", "zh": { "title": "完成闸门由宿主持有", "description": "工作模型可以请求停止,但 harness 会在 return 前评估 active goal。是否完成是轮次边界上的程序决策。" }, "ja": { "title": "完了ゲートはホストが所有する", "description": "作業モデルは停止を要求できるが、harness は return 前に active goal を評価する。完了は turn 境界でのプログラム判断である。" } }, { "id": "host-assigned-evidence-origins", "title": "Evidence Trust Comes from the Ingress Path", "description": "Ordinary submit calls cannot attach trusted labels. Only an allowlisted host-event channel can deliver task or monitor evidence, so user and model prose cannot certify itself.", "alternatives": "Trusting text content or caller-supplied labels makes the evidence boundary forgeable.", "zh": { "title": "证据信任来自入口路径", "description": "普通 submit 不能附加可信标签;只有白名单宿主事件通道能送入 task 或 monitor 证据,因此用户与模型文本不能自证完成。" }, "ja": { "title": "証拠の信頼は入力経路から得る", "description": "通常の submit は trusted label を付けられず、allowlist 済み host event channel だけが task や monitor evidence を届ける。ユーザーやモデルの文章は自己証明できない。" } }, { "id": "bounded-continuation", "title": "Every Automatic Continuation Needs a Budget", "description": "An unmet goal queues another turn only while budget remains. Exhaustion marks the goal blocked and releases the gate instead of creating an infinite loop.", "alternatives": "An unbounded goal is persistent, but an impossible condition can consume resources forever.", "zh": { "title": "每次自动续轮都必须有预算", "description": "目标未满足时只在预算剩余时继续;耗尽后将目标标记为 blocked 并释放闸门,避免无限循环。" }, "ja": { "title": "自動継続には必ず予算を置く", "description": "goal 未達時は予算が残る間だけ次の turn を追加する。使い切れば blocked にして gate を解放し、無限 loop を防ぐ。" } } ] }