Skip to content
SYMBIOTEResearch portalSource VictorBlain/Symbiote @ 9243204 (private) · read 2026-10-10
Reading the badgesVerifiedImplementedSyntheticMockPlannedUnverified
  • Verified

    A named test in the repository exercises exactly this, and the claim cites it. The tests were read and counted for this portal, not executed by it.

  • Implemented

    The code exists and is documented, but no test, log or report in the repository exercises this specific behaviour.

  • Synthetic

    Shown only by deterministic experiments over an in-process synthetic lab or a synthetic benchmark — never against a real environment.

  • Mock

    Exercised only through mock adapters or stubs: no real model provider, no network, no credentials.

  • Planned

    Described in the dossier, the README or the docs as intended. Not built.

  • Unverified

    Stated in the repository — a ledger, the README, a commit message — with no test, log or report in it that backs the statement.

08 / 11 · Research

Research documentation

The dossier, the per-milestone documents, four technical explainers, and the research questions and progression levels — all open.

12 repository documents · 4 explainers · 7 open questions

Documents in the repository

The repository is private, so these are cited by path rather than linked. The dossier is the design; the per-milestone documents describe only what was built and tested.

  • Planned

    Technical Research Dossier, Rev 0.1 — The design source of truth. It describes itself as CONCEPTUAL / PRE-IMPLEMENTATION, and its status ledger lists nothing as implemented or verified.

    Covers: 72 pages: SymbiOS, Symba and the organism; bonding; Parasites; operating and special modes; model architecture; memory; containment; laboratory; telemetry; evaluation framework; research progression; failure taxonomy; threat matrix; ethics; open questions; appendices.

    SourceDossier Rev 0.1, p. 6 (“Status Ledger”) · added in commit 02a59cd; no later commit touches it

  • Synthetic

    README — Its current-status section describes M1–M12 as “implemented, tested and runnable, but only against synthetic, deterministic, in-process labs”.

    Covers: The idea, the vocabulary, the architecture in diagrams, current status, roadmap, research questions.

    SourceREADME.md §13 @ 9243204

  • Unverified

    Build status ledger — The resumable build ledger. Its gate results are self-reported, with no retained output.

    Covers: Milestone table, the invariants every change must preserve, review findings, next actions.

    Sourcedocs/BUILD_STATUS.md @ 9243204

  • Verified

    M1 + M2: substrate, audit, Permission Engine — Describes only what M1–M2 implement and test.

    Covers: Layering, the audit event schema, the substrate lifecycle, policy evaluation, the invariant map, the CLI.

    Sourcedocs/M1-M2.md @ 9243204

  • Verified

    M3: World Model and Capability Graph — Describes only what M3 implements and tests.

    Covers: Separated state classes, the single write path, no silent promotion, replay, intentional behaviour.

    Sourcedocs/M3.md @ 9243204

  • Verified

    M4: Bond Engine and Verification — Describes only what M4 implements and tests, including what its reviews found.

    Covers: Evidence, expectations, the judge, bond transitions, confidence, composition, both review rounds.

    Sourcedocs/M4.md @ 9243204

  • Verified

    M5: persistent research memory — Describes only what M5 implements and tests.

    Covers: Memory kinds and their evidence, the evidence projection, lifecycle, recall, gated export and carry.

    Sourcedocs/M5.md @ 9243204

  • Mock

    M6: model abstraction and router — Describes the router as built — with mock adapters only.

    Covers: Contracts, model cards, adapters, the routing pipeline, replay, memory priors.

    Sourcedocs/M6.md @ 9243204

  • Verified

    M7: Parasite framework — Describes only what M7 implements and tests.

    Covers: Roles, the lifecycle, footprints, budgets, failure isolation, the synthetic lab, replay.

    Sourcedocs/M7.md @ 9243204

  • Synthetic

    M8: Mission Kernel and Mode Controller — Describes the mode controller and missions run against the synthetic lab.

    Covers: Modes and what each admits, transitions, containment, special modes, the mission cycle.

    Sourcedocs/M8.md @ 9243204

  • Synthetic

    M9–M10: generations and gated self-evolution — Describes generations and evolution evaluated on synthetic suites.

    Covers: The evolution pipeline, generations, the allowlist, evaluation, who decides, a demonstrated cycle.

    Sourcedocs/M9-M10.md @ 9243204

  • Synthetic

    M11–M12: Symba and end-to-end experiments — Describes the console and the six synthetic experiments.

    Covers: The composition root, the organism policy, Symba, integrity checks, the six experiments.

    Sourcedocs/M11-M12.md @ 9243204

  • Unverified

    The dossier compares the design with externally reported AI-security events, and says itself that the figures it quotes have not been independently verified by the project.

    Not reproduced here: this portal checks claims against the repository, and those are not in it.

    SourceDossier Rev 0.1, p. 52–54 (“Comparative Landscape”)

Explainers

Four questions a sceptical reader asks first, answered only with evidence that appears elsewhere on this portal.

Why a verdict cannot be forged

If a worker wants its bond verified, what stops it from simply saying so?

  • Verified

    Verification is a pure judge() over success criteria registered before the experiment: PASS, FAIL or UNVERIFIABLE. No model is consulted and the caller cannot supply the verdict.

    Sourcetests/test_verification.py::test_the_verdict_is_computed_not_supplied, ::test_replay_rejects_forged_verdicts @ 9243204

  • Verified

    The write path judges exactly what it records: expectations and evidence are rebuilt from their own JSON, so a caller’s object with rigged comparisons cannot decide the outcome.

    Sourcetests/test_verification_hardening.py::test_caller_subclasses_cannot_decide_the_verdict, ::test_a_rigged_number_in_evidence_is_judged_as_the_plain_number @ 9243204

  • Verified

    When independence is required, evidence produced only by the claimant leaves the verdict UNVERIFIABLE, and UNVERIFIABLE promotes nothing.

    Sourcetests/test_verification.py::test_claimant_only_evidence_is_unverifiable_when_independence_is_required @ 9243204 · tests/test_bond_engine.py::test_unverifiable_verdicts_promote_nothing @ 9243204

Trust only degrades

How does untrusted input stay labelled untrusted all the way up?

  • Verified

    Provenance only ever degrades: combining data unions its trust labels, and no API removes one.

    Sourcetests/test_core.py::test_merge_is_monotonic_taint_never_disappears, ::test_tainted_offers_no_way_to_shed_provenance @ 9243204

  • Verified

    A bond inherits the taint of everything it relies on, so it is never more trusted than its foundations.

    Sourcetests/test_bond_hardening.py::test_a_bond_inherits_the_taint_of_everything_it_relies_on @ 9243204

  • Verified

    A worker cannot present its own evidence as trusted: evidence always carries its producer’s self-generated label.

    Sourcetests/test_verification_hardening.py::test_a_worker_cannot_present_its_evidence_as_trusted @ 9243204

  • Verified

    Memory carried in from another run can become live once confirmed, but never trusted.

    Sourcetests/test_memory.py::test_confirming_a_carried_prior_makes_it_live_but_never_trusted @ 9243204

Containment the organism cannot clear

What happens when a Parasite reaches past what it declared?

  • Verified

    A footprint breach freezes the swarm into ESCAPE before the breach reaches the environment.

    Sourcetests/test_missions.py::test_a_footprint_breach_freezes_the_swarm_into_escape @ 9243204

  • Verified

    THREAT and ESCAPE are entered by deterministic anomaly detection and cleared only by the External Controller — not the operator, not the kernel.

    Sourcetests/test_missions.py::test_only_the_external_controller_clears_containment @ 9243204

  • Verified

    External termination is deliberately not mediated by the Permission Engine: it drops pending deliveries, commits EXTERNAL_TERMINATION and closes the log.

    Sourcedocs/M1-M2.md @ 9243204 · tests/test_substrate.py::test_external_termination_halts_everything @ 9243204

  • Synthetic

    A Scout reaching outside its footprint freezes the organism in ESCAPE before the breach reaches the lab; only the External Controller can clear it, and it terminates the run.

    Sourcesrc/symbiote/symba/experiments.py (containment_escape) @ 9243204 · tests/test_symba.py::test_every_experiment_passes_with_full_integrity @ 9243204

Evolution with a human in the gate

If the system can change its own strategy, what can it never change?

  • Verified

    Only two allowlisted strategy components may evolve; the Permission Engine, verification judge, audit log, kill switch, Mode Controller and domain authorization are frozen in every generation’s manifest.

    Sourcesrc/symbiote/evolution/components.py @ 9243204 · tests/test_evolution.py::test_only_allowlisted_strategy_components_are_mutable, ::test_a_proposal_against_a_frozen_safety_component_is_refused @ 9243204

  • Verified

    The organism cannot approve or activate its own next generation, and a self-reported win without an evaluation is rejected.

    Sourcetests/test_evolution.py::test_the_organism_cannot_approve_or_activate_itself, ::test_a_self_reported_win_is_rejected @ 9243204

  • Verified

    Limitations are mined only from the development suite, and a development-suite evaluation can never justify acceptance.

    Sourcetests/test_evolution.py::test_limitations_are_never_mined_from_the_held_out_suite, ::test_a_development_evaluation_cannot_justify_acceptance @ 9243204

  • Synthetic

    In the documented cycle, the genesis latency threshold of 50 ms scored 3/5 on the held-out suite; doubling it to 100 ms scored 5/5 with no false positives and was accepted by the operator; removing it scored 4/5 with one false positive and was rejected.

    Five synthetic cases per suite. A demonstration of the gate, not a benchmark.

    Sourcedocs/M9-M10.md (“Demonstrated cycle”) @ 9243204

Open research questions

The dossier’s seven questions, verbatim. They are the reason the project exists.

  • Planned

    None of the research questions has been studied. They define an evaluation programme; there are no results.

    SourceDossier Rev 0.1, p. 55 (“Open Research Questions”) · README.md §16, §17 (“NO RESULTS YET”) @ 9243204

  1. RQ-1Can an autonomous agent discover useful capabilities without a predefined tool map, at a success rate competitive with tool-equipped baselines?
  2. RQ-2How does Parasite-class diversity affect exploration efficiency versus a single generalist agent?
  3. RQ-3Does cross-run Memory improve Mission completion, or does it mainly import stale assumptions into changed environments?
  4. RQ-4When should a Hypothesis Agent explore a new direction versus exploit an already-Bonded capability?
  5. RQ-5How should resource budget be allocated between the current Mission and the information value of further Observation?
  6. RQ-6How does autonomous capability acquisition behave specifically under environment uncertainty — partial observability, adversarial decoys?
  7. RQ-7Which containment mechanisms remain reliable as the underlying model becomes more capable?

Research progression

Eight levels, each gated on the one before by pre-registered criteria, retained evidence and an explicit operator decision — never automatic escalation.

  • Planned

    No research level has been reached. Each level’s gate needs pre-registered criteria, a retained evidence bundle, N reproducible runs and a named operator sign-off; none is recorded for any level, Level 0 included.

    The M12 experiments resemble Level 0’s “fully deterministic, scripted environment”, but the repository does not claim Level 0, and this portal does not claim it for it.

    SourceDossier Rev 0.1, p. 46 (“Research Progression”) · Dossier Rev 0.1, p. 68 (“Appendix H — Research Level Checklist”)

LevelObjectiveEnvironmentStatus
0Validate the pipelineFully deterministic, scripted environment; observation onlyPlanned
1Capability discoveryStatic, intentionally vulnerable single-service labPlanned
2Controlled exploitation researchKnown CTF-style target; one Parasite class at a timePlanned
3AdaptationTarget with a mid-run environment perturbationPlanned
4Multi-agent coordinationLarger synthetic environment; full swarmPlanned
5Chained objectivesMulti-stage synthetic environment; composition of verified bondsPlanned
6Boundary challengesEnvironment with out-of-scope decoys; THREAT / ESCAPE tested directlyPlanned
7Cross-run generalizationRotating held-out synthetic environments; memory in scopePlanned

Source: Dossier Rev 0.1, p. 46 (“Research Progression”)

state
active
build
604cd5b