From 3338e819807d5a5c55f830a353676d5d42caf442 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 17 Aug 2026 21:30:21 +0900 Subject: [PATCH 1/3] feat(method): refuse corpus-background wording as unique content Corpus-level background language stays explicit method structure (ADR 0004 and 0012). It is not unique latent content and is not erased by a stopword list. Recovery is the computed share of background kinds that match known truth versus collapsing every token to unique content. --- ARCHITECTURE.md | 1 + CHANGELOG.md | 1 + Cargo.lock | 4 + Cargo.toml | 2 + README.md | 3 +- crates/corpus_background/Cargo.toml | 17 ++ crates/corpus_background/src/error.rs | 57 +++++++ crates/corpus_background/src/kind.rs | 145 ++++++++++++++++++ crates/corpus_background/src/lib.rs | 22 +++ .../tests/corpus_background_contract.rs | 72 +++++++++ .../corpus_background/tests/crate_contract.rs | 7 + docs/TRACEABILITY.md | 2 +- .../0004-shared-multilingual-latent-space.md | 2 +- ...ational-shared-latent-topic-measurement.md | 2 +- docs/adr/README.md | 4 +- docs/research/corpus-background-identity.md | 34 ++++ docs/research/standards-and-literature.md | 4 +- docs/validation/temporal-event-foundation.md | 1 + scripts/check_workspace_contract.py | 1 + 19 files changed, 374 insertions(+), 7 deletions(-) create mode 100644 crates/corpus_background/Cargo.toml create mode 100644 crates/corpus_background/src/error.rs create mode 100644 crates/corpus_background/src/kind.rs create mode 100644 crates/corpus_background/src/lib.rs create mode 100644 crates/corpus_background/tests/corpus_background_contract.rs create mode 100644 crates/corpus_background/tests/crate_contract.rs create mode 100644 docs/research/corpus-background-identity.md diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md index ffe514db..8de821bf 100644 --- a/ARCHITECTURE.md +++ b/ARCHITECTURE.md @@ -61,6 +61,7 @@ boundaries above remain the target modular MSA architecture. | `tepp_simulation` | known-truth temporal/event data generation | | `validation_core` | RMSE, bias, coverage, graph, and Monte Carlo metrics | | `tepp_api` | versioned DTO, schema, and export contracts | +| `corpus_background` | corpus-background wording is not unique latent content and not stopword deletion | No crate exposes placeholder production behavior in Task 1. This prevents an empty façade from becoming a de facto public API before its invariants and tests diff --git a/CHANGELOG.md b/CHANGELOG.md index 3fe6d08d..2f107f6a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,7 @@ All notable changes to TEPP are documented here. The format follows Keep a Chang ### Added +- `corpus_background` identity gate: corpus-level background wording is not unique latent content and is not erased by a stopword list; recovered background kinds match known truth at a higher computed rate than collapsing every token to unique content (ADR 0004/0012). - `tepp_api` purpose-bound provider-payload minimization: time-bounded `PurposeGrant` evaluation, fail-closed expired/not-yet-valid/inverted/cross-tenant/impossible-calendar denial, semantic UTC calendar validation, refusal to copy identity mappings into model-provider payloads or ordinary logs, preservation of opaque analytical identifiers and membership roles (no blanket PII mask), a separately authorized scientific re-identification path, and an internally bound FIPS 180-4 SHA-256 audit digest appended through `ReidentificationAuditSink` before disclosure. - `persistence_postgres` retention/deletion/legal-hold (migration `0007`): policy rows, legal holds that block completed deletion, evidence tombstones without raw-source restore, analysis exclusion only for `logical_revocation`/`identity_tombstone` (not `cache_export_removal`), and deletion requests bound to the cited retention policy's tenant/class/purpose. - `persistence_postgres` backup/restore integrity: restored snapshots stay unusable until tenant, canonical `SHA-256`, knowledge-cutoff eligibility, temporal window order, and append-only triggers revalidate; SQL probes raise `restore integrity failed` (ADR 0013). diff --git a/Cargo.lock b/Cargo.lock index 616bfd78..36c61dca 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -114,6 +114,10 @@ version = "1.0.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801" +[[package]] +name = "corpus_background" +version = "0.1.0" + [[package]] name = "corpus_split" version = "0.1.0" diff --git a/Cargo.toml b/Cargo.toml index 92565940..5aba3d8e 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -11,6 +11,7 @@ members = [ "crates/tepp_simulation", "crates/validation_core", "crates/tepp_api", + "crates/corpus_background", ] default-members = [ "crates/evidence_core", @@ -23,6 +24,7 @@ default-members = [ "crates/tepp_simulation", "crates/validation_core", "crates/tepp_api", + "crates/corpus_background", ] [workspace.package] diff --git a/README.md b/README.md index ae74015d..7ee168ce 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,7 @@ implemented in Rust. ## Current implementation state This branch establishes the Task 1 Rust workspace and quality-gate foundation. -The ten bounded crates compile independently but intentionally expose no +The eleven bounded crates compile independently but intentionally expose no placeholder production APIs. Domain behavior begins in Task 2 with immutable evidence identifiers and source records. @@ -22,6 +22,7 @@ crates/corpus_split crates/tepp_simulation crates/validation_core crates/tepp_api +crates/corpus_background ``` ## Local verification diff --git a/crates/corpus_background/Cargo.toml b/crates/corpus_background/Cargo.toml new file mode 100644 index 00000000..86915786 --- /dev/null +++ b/crates/corpus_background/Cargo.toml @@ -0,0 +1,17 @@ +[package] +name = "corpus_background" +description = "Corpus-background wording is not unique content and not stopword deletion." +version.workspace = true +edition.workspace = true +rust-version.workspace = true +license.workspace = true +authors.workspace = true +repository.workspace = true +homepage.workspace = true +readme.workspace = true +keywords.workspace = true +categories.workspace = true +publish = false + +[lints] +workspace = true diff --git a/crates/corpus_background/src/error.rs b/crates/corpus_background/src/error.rs new file mode 100644 index 00000000..369ddc67 --- /dev/null +++ b/crates/corpus_background/src/error.rs @@ -0,0 +1,57 @@ +//! Fail-closed corpus-background errors. + +use std::fmt; + +/// A fail-closed corpus-background error. +#[derive(Clone, Copy, Debug, Eq, PartialEq)] +#[non_exhaustive] +pub enum CorpusBackgroundError { + /// Corpus-background wording was treated as unique latent content. + CorpusBackgroundIsNotUniqueContent, + /// Corpus-background wording was treated as stopword deletion. + CorpusBackgroundIsNotStopwordDeletion, + /// A recovery slice was empty or length-mismatched. + InvalidCorpusBackgroundPayload, +} + +impl fmt::Display for CorpusBackgroundError { + fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result { + let message = match self { + Self::CorpusBackgroundIsNotUniqueContent => { + "corpus-background wording is not unique latent content" + } + Self::CorpusBackgroundIsNotStopwordDeletion => { + "corpus-background wording is not stopword deletion" + } + Self::InvalidCorpusBackgroundPayload => "invalid corpus-background payload", + }; + formatter.write_str(message) + } +} + +impl std::error::Error for CorpusBackgroundError {} + +#[cfg(test)] +mod tests { + use super::CorpusBackgroundError; + + #[test] + fn error_messages_are_stable() { + for (error, message) in [ + ( + CorpusBackgroundError::CorpusBackgroundIsNotUniqueContent, + "corpus-background wording is not unique latent content", + ), + ( + CorpusBackgroundError::CorpusBackgroundIsNotStopwordDeletion, + "corpus-background wording is not stopword deletion", + ), + ( + CorpusBackgroundError::InvalidCorpusBackgroundPayload, + "invalid corpus-background payload", + ), + ] { + assert_eq!(error.to_string(), message); + } + } +} diff --git a/crates/corpus_background/src/kind.rs b/crates/corpus_background/src/kind.rs new file mode 100644 index 00000000..0b475864 --- /dev/null +++ b/crates/corpus_background/src/kind.rs @@ -0,0 +1,145 @@ +//! Corpus-background wording versus unique latent content. + +use crate::CorpusBackgroundError; + +/// Closed vocabulary of corpus-background token treatments. +#[derive(Clone, Copy, Debug, Eq, PartialEq)] +pub enum CorpusBackgroundKind { + /// Corpus-level background language, not unique document meaning. + CorpusBackground, + /// Token treatment reserved for unique latent content. + UniqueContent, +} + +impl CorpusBackgroundKind { + /// Return the stable wire kind name. + #[must_use] + pub const fn wire_name(self) -> &'static str { + match self { + Self::CorpusBackground => "corpus_background", + Self::UniqueContent => "unique_content", + } + } + + /// Parse a stable wire kind name. + /// + /// # Errors + /// + /// Returns [`CorpusBackgroundError::InvalidCorpusBackgroundPayload`] for + /// unrecognized names. + pub fn from_wire_name(name: &str) -> Result { + match name { + "corpus_background" => Ok(Self::CorpusBackground), + "unique_content" => Ok(Self::UniqueContent), + _ => Err(CorpusBackgroundError::InvalidCorpusBackgroundPayload), + } + } +} + +/// Refuse to treat corpus-background wording as unique latent content. +/// +/// # Errors +/// +/// Returns [`CorpusBackgroundError::CorpusBackgroundIsNotUniqueContent`] when +/// `kind` is [`CorpusBackgroundKind::CorpusBackground`]. +pub fn refuse_corpus_background_as_unique_content( + kind: CorpusBackgroundKind, +) -> Result<(), CorpusBackgroundError> { + match kind { + CorpusBackgroundKind::CorpusBackground => { + Err(CorpusBackgroundError::CorpusBackgroundIsNotUniqueContent) + } + CorpusBackgroundKind::UniqueContent => Ok(()), + } +} + +/// Refuse to treat corpus-background wording as stopword deletion. +/// +/// # Errors +/// +/// Returns [`CorpusBackgroundError::CorpusBackgroundIsNotStopwordDeletion`] +/// when `kind` is [`CorpusBackgroundKind::CorpusBackground`]. +pub fn refuse_corpus_background_as_stopword_deletion( + kind: CorpusBackgroundKind, +) -> Result<(), CorpusBackgroundError> { + match kind { + CorpusBackgroundKind::CorpusBackground => { + Err(CorpusBackgroundError::CorpusBackgroundIsNotStopwordDeletion) + } + CorpusBackgroundKind::UniqueContent => Ok(()), + } +} + +/// Fraction of recovered corpus-background kinds that match known truth. +/// +/// # Errors +/// +/// Returns [`CorpusBackgroundError::InvalidCorpusBackgroundPayload`] when +/// either slice is empty or the lengths differ. +pub fn identity_recovery_rate( + truth: &[CorpusBackgroundKind], + decided: &[CorpusBackgroundKind], +) -> Result { + if truth.is_empty() || truth.len() != decided.len() { + return Err(CorpusBackgroundError::InvalidCorpusBackgroundPayload); + } + let mut matches = 0_u32; + for (truth_kind, decided_kind) in truth.iter().zip(decided) { + if truth_kind == decided_kind { + matches += 1; + } + } + Ok(f64::from(matches) / truth.len() as f64) +} + +#[cfg(test)] +mod tests { + use super::{ + CorpusBackgroundKind, identity_recovery_rate, + refuse_corpus_background_as_stopword_deletion, refuse_corpus_background_as_unique_content, + }; + use crate::CorpusBackgroundError; + + #[test] + fn local_branches_cover_kinds_payloads_and_wire_names() { + assert_eq!( + refuse_corpus_background_as_unique_content(CorpusBackgroundKind::CorpusBackground), + Err(CorpusBackgroundError::CorpusBackgroundIsNotUniqueContent) + ); + assert_eq!( + refuse_corpus_background_as_stopword_deletion(CorpusBackgroundKind::CorpusBackground), + Err(CorpusBackgroundError::CorpusBackgroundIsNotStopwordDeletion) + ); + refuse_corpus_background_as_unique_content(CorpusBackgroundKind::UniqueContent) + .expect("unique"); + refuse_corpus_background_as_stopword_deletion(CorpusBackgroundKind::UniqueContent) + .expect("unique"); + for kind in [ + CorpusBackgroundKind::CorpusBackground, + CorpusBackgroundKind::UniqueContent, + ] { + assert_eq!( + CorpusBackgroundKind::from_wire_name(kind.wire_name()).expect("round-trip"), + kind + ); + } + assert_eq!( + CorpusBackgroundKind::from_wire_name("stopword"), + Err(CorpusBackgroundError::InvalidCorpusBackgroundPayload) + ); + let matched = identity_recovery_rate( + &[CorpusBackgroundKind::CorpusBackground], + &[CorpusBackgroundKind::CorpusBackground], + ) + .expect("rate"); + assert!((matched - 1.0).abs() < f64::EPSILON); + assert_eq!( + identity_recovery_rate(&[], &[]), + Err(CorpusBackgroundError::InvalidCorpusBackgroundPayload) + ); + assert_eq!( + identity_recovery_rate(&[CorpusBackgroundKind::CorpusBackground], &[]), + Err(CorpusBackgroundError::InvalidCorpusBackgroundPayload) + ); + } +} diff --git a/crates/corpus_background/src/lib.rs b/crates/corpus_background/src/lib.rs new file mode 100644 index 00000000..a11a0df2 --- /dev/null +++ b/crates/corpus_background/src/lib.rs @@ -0,0 +1,22 @@ +#![forbid(unsafe_code)] +#![deny(missing_docs)] +#![allow(clippy::cast_precision_loss)] +//! Corpus-background wording is not unique latent content. +//! +//! Corpus-level background language stays explicit method/background +//! structure. It is not unique document meaning and is not erased by a +//! stopword list (ADR 0004/0012). + +mod error; +mod kind; + +/// Fail-closed corpus-background errors. +pub use error::CorpusBackgroundError; +/// Closed vocabulary of corpus-background token treatments. +pub use kind::CorpusBackgroundKind; +/// Fraction of recovered corpus-background kinds that match known truth. +pub use kind::identity_recovery_rate; +/// Refuse to treat corpus-background wording as stopword deletion. +pub use kind::refuse_corpus_background_as_stopword_deletion; +/// Refuse to treat corpus-background wording as unique latent content. +pub use kind::refuse_corpus_background_as_unique_content; diff --git a/crates/corpus_background/tests/corpus_background_contract.rs b/crates/corpus_background/tests/corpus_background_contract.rs new file mode 100644 index 00000000..9ce19975 --- /dev/null +++ b/crates/corpus_background/tests/corpus_background_contract.rs @@ -0,0 +1,72 @@ +//! Corpus-background wording is not unique content and not stopword deletion. + +use corpus_background::{ + CorpusBackgroundError, CorpusBackgroundKind, identity_recovery_rate, + refuse_corpus_background_as_stopword_deletion, refuse_corpus_background_as_unique_content, +}; + +#[test] +fn corpus_background_cannot_become_unique_content_or_stopword_deletion() { + assert_eq!( + refuse_corpus_background_as_unique_content(CorpusBackgroundKind::CorpusBackground), + Err(CorpusBackgroundError::CorpusBackgroundIsNotUniqueContent) + ); + assert_eq!( + refuse_corpus_background_as_stopword_deletion(CorpusBackgroundKind::CorpusBackground), + Err(CorpusBackgroundError::CorpusBackgroundIsNotStopwordDeletion) + ); + refuse_corpus_background_as_unique_content(CorpusBackgroundKind::UniqueContent) + .expect("unique"); + refuse_corpus_background_as_stopword_deletion(CorpusBackgroundKind::UniqueContent) + .expect("unique"); +} + +#[test] +fn recovered_kinds_match_known_truth_better_than_a_unique_content_collapse() { + let truth = [ + CorpusBackgroundKind::CorpusBackground, + CorpusBackgroundKind::UniqueContent, + CorpusBackgroundKind::CorpusBackground, + ]; + let recovered = truth; + let collapsed = [ + CorpusBackgroundKind::UniqueContent, + CorpusBackgroundKind::UniqueContent, + CorpusBackgroundKind::UniqueContent, + ]; + let recovered_rate = identity_recovery_rate(&truth, &recovered).expect("recovered"); + let collapsed_rate = identity_recovery_rate(&truth, &collapsed).expect("collapsed"); + let expected = { + let mut matches = 0_u32; + for (truth_kind, decided_kind) in truth.iter().zip(recovered.iter()) { + if truth_kind == decided_kind { + matches += 1; + } + } + f64::from(matches) / f64::from(u32::try_from(truth.len()).expect("len")) + }; + assert!((recovered_rate - expected).abs() < f64::EPSILON); + assert!(recovered_rate > collapsed_rate); +} + +#[test] +fn empty_or_mismatched_kind_payloads_fail_closed() { + assert_eq!( + identity_recovery_rate(&[], &[]), + Err(CorpusBackgroundError::InvalidCorpusBackgroundPayload) + ); + assert_eq!( + identity_recovery_rate(&[CorpusBackgroundKind::CorpusBackground], &[]), + Err(CorpusBackgroundError::InvalidCorpusBackgroundPayload) + ); + assert_eq!( + identity_recovery_rate( + &[ + CorpusBackgroundKind::CorpusBackground, + CorpusBackgroundKind::UniqueContent + ], + &[CorpusBackgroundKind::CorpusBackground] + ), + Err(CorpusBackgroundError::InvalidCorpusBackgroundPayload) + ); +} diff --git a/crates/corpus_background/tests/crate_contract.rs b/crates/corpus_background/tests/crate_contract.rs new file mode 100644 index 00000000..d5dda9ec --- /dev/null +++ b/crates/corpus_background/tests/crate_contract.rs @@ -0,0 +1,7 @@ +//! Integration contract for the `corpus_background` package identity. + +#[test] +fn package_identity_is_stable() { + let observed = std::hint::black_box(env!("CARGO_PKG_NAME")); + assert_eq!(observed, "corpus_background"); +} diff --git a/docs/TRACEABILITY.md b/docs/TRACEABILITY.md index dfcdd9e8..9196ca26 100644 --- a/docs/TRACEABILITY.md +++ b/docs/TRACEABILITY.md @@ -25,7 +25,7 @@ The full APA 7th standards/literature register remains `docs/research/standards- | TRSL-TM temporal/relational topic posterior and backend compatibility | ADR 0012; ADR 0004 | future `topic_measurement` | accepted-target | | global P0 topic identity with activity/dormancy/reactivation | ADR 0012 | future topic lineage/activity state | accepted-target | | no default stopword deletion / no TF-IDF-BM25 inferential weighting | ADR 0004/0012; PRD/TRD | future semantic/method-source model | accepted-target | -| report template/section/copied/style/modality method effects | ADR 0004/0012; PRD/TRD | simulation truth factors implemented; estimator-side method model remains future | partial | +| report template/section/copied/style/modality method effects | ADR 0004/0012; PRD/TRD | simulation truth factors implemented; `corpus_background` background-versus-unique-content identity on the active PR; estimator-side method model remains future | partial | | candidate K statistical/Pareto gates + blinded LLM review | ADR 0012; research | future `model_selection` | accepted-target | | compositional topic correlation / stable clustering | ADR 0005/0012; research | future `network_analysis` | accepted-target | | posterior ESEM / longitudinal invariance / DSEM | ADR 0005 | future `psychometric_core` | accepted-target | diff --git a/docs/adr/0004-shared-multilingual-latent-space.md b/docs/adr/0004-shared-multilingual-latent-space.md index c8da25b5..306b26eb 100644 --- a/docs/adr/0004-shared-multilingual-latent-space.md +++ b/docs/adr/0004-shared-multilingual-latent-space.md @@ -1,7 +1,7 @@ # ADR 0004 — Shared multilingual latent semantic space **Decision status:** Accepted -**Implementation maturity:** accepted-target +**Implementation maturity:** accepted-target — corpus-background-versus-unique-content identity in `corpus_background` on the active PR; shared-space estimators remain accepted-target **Date:** 2026-08-05 **Supersedes:** None. ADR 0012 governs the complete topic-estimator/backend/global-topic contract built on this multilingual measurement decision. diff --git a/docs/adr/0012-temporal-relational-shared-latent-topic-measurement.md b/docs/adr/0012-temporal-relational-shared-latent-topic-measurement.md index c3d5085f..c7ee5396 100644 --- a/docs/adr/0012-temporal-relational-shared-latent-topic-measurement.md +++ b/docs/adr/0012-temporal-relational-shared-latent-topic-measurement.md @@ -1,7 +1,7 @@ # ADR 0012 — Temporal Relational Shared-Latent Topic Measurement **Decision status:** Accepted -**Implementation maturity:** accepted-target +**Implementation maturity:** accepted-target — corpus-background-versus-unique-content identity in `corpus_background` on the active PR; estimator-side method model remains accepted-target **Date:** 2026-08-12 **Supersedes:** None; refines ADR 0004 and ADR 0005 without replacing their multilingual and psychometric authorities. diff --git a/docs/adr/README.md b/docs/adr/README.md index f16c2345..618185a0 100644 --- a/docs/adr/README.md +++ b/docs/adr/README.md @@ -9,7 +9,7 @@ Read [`ADR_POLICY.md`](ADR_POLICY.md) first. **Decision status and implementatio | [0001](0001-rust-first-modular-msa.md) | Rust-first numerical core and CPU `f64` reference | Accepted | partial | ADR 0011 owns cross-service/MSA authority; 0001 retains numerical/backend authority. | | [0002](0002-six-clock-temporal-semantics.md) | Six-clock temporal semantics and fail-closed historical leakage prevention | Accepted | active-PR | Unmerged PR #8 is the canonical Task 3 replacement implementing typed clocks/intervals against the current protected-main lineage; conflicted PR #5 is superseded lineage. Later graph/split enforcement remains target work. | | [0003](0003-relational-event-multiple-membership.md) | Relational event ontology and time-varying cross-classified multiple membership | Accepted | partial | Weighted time-varying membership network/roles are active-PR (PR #12); full multilevel estimators, graph ontology, and persistence remain accepted-target. ADR 0016 owns event-intelligence tasks. | -| [0004](0004-shared-multilingual-latent-space.md) | One shared multilingual latent space with explicit invariance status | Accepted | accepted-target | ADR 0012 owns the full topic-estimator/backend/global-topic contract. | +| [0004](0004-shared-multilingual-latent-space.md) | One shared multilingual latent space with explicit invariance status | Accepted | accepted-target | Corpus-background-versus-unique-content identity is `corpus_background` on the active PR; ADR 0012 owns the full topic-estimator contract. | | [0005](0005-posterior-esem-dsem.md) | Posterior-aware ESEM/DSEM and valid compositional coordinates | Accepted | accepted-target | Downstream psychometric authority; upstream topic/network model is clarified by ADR 0012. | | [0006](0006-vram-gpu-nvidia-orchestration.md) | VRAM-adaptive GPU compute and model-credential boundary | Accepted | accepted-target | LLM orchestration policy superseded by ADR 0010; autonomous development authority governed by ADR 0015. | | [0007](0007-rust-workspace-quality-gates.md) | Explicit Rust workspace, pinned toolchains, and exact quality gates | Accepted | implemented-main | ADR 0014 governs scientific/product claim promotion beyond repository-quality tooling. | @@ -17,7 +17,7 @@ Read [`ADR_POLICY.md`](ADR_POLICY.md) first. **Decision status and implementatio | [0009](0009-purpose-bound-pii-governance.md) | Purpose-bound PII governance without blanket masking | Accepted | partial | Persistence retention/deletion/legal-hold (`0007`) implemented-main; provider-payload minimization and elevated re-identification are on the active PR; deployment evidence remains accepted-target. | | [0010](0010-adaptive-llm-orchestration.md) | Adaptive LLM orchestration and test-time compute | Accepted | accepted-target | Owns direct/verify/committee/conductor selection, budget, role/topology, and ablation policy. | | [0011](0011-standalone-modular-msa-boundary.md) | Standalone operation and modular CWL MSA boundary | Accepted | partial | Owns cross-service persistence/credential/API authority; no direct cross-service application-table coupling. | -| [0012](0012-temporal-relational-shared-latent-topic-measurement.md) | Temporal Relational Shared-Latent Topic Measurement (TRSL-TM) | Accepted | accepted-target | Owns topic backend compatibility, global topic identity, method effects, K/model-selection prerequisites, and compositional topic coordinates. | +| [0012](0012-temporal-relational-shared-latent-topic-measurement.md) | Temporal Relational Shared-Latent Topic Measurement (TRSL-TM) | Accepted | accepted-target | Corpus-background-versus-unique-content identity is `corpus_background` on the active PR; estimator-side method model, backend, and K gates remain accepted-target. | | [0013](0013-bitemporal-persistence-reproducibility-and-split-authority.md) | Bitemporal persistence, reproducibility manifests, and relation-aware split authority | Accepted | partial | Owns PostgreSQL adapter semantics, immutable run/split manifests, leakage-safe partitions, and recovery identity; optional `live-sqlx` `PgPool`, live PG CI, tenant RLS, and `0006` membership implemented-main; `0007` retention/deletion/legal-hold on the active PR; remaining physical ERD/backup accepted-target. | | [0014](0014-scientific-claim-promotion-and-release-evidence.md) | Scientific claim promotion and release evidence authority | Accepted | partial | Separates design, implementation, scientific/product claim, and release authority; repository SBOM/provenance generator implemented, full release bundle remaining. | | [0015](0015-autonomous-development-review-and-merge-authority.md) | Autonomous development, review, and merge authority separation | Accepted | active-PR | Separates model proposal, deterministic verification, publication, independent review, and merge/release authority. | diff --git a/docs/research/corpus-background-identity.md b/docs/research/corpus-background-identity.md new file mode 100644 index 00000000..78407995 --- /dev/null +++ b/docs/research/corpus-background-identity.md @@ -0,0 +1,34 @@ +# Corpus-background wording is not unique content (doctoring) + +## Scope + +`corpus_background` keeps corpus-level background language out of unique +latent content and out of global stopword deletion. Recovery is the +computed share of recovered kinds that match known truth. + +This slice does not persist method sources, allocate migration `0008`, +or replace `method_effects`, `section_source`, `style_source`, +`copied_text`, `modality_source`, `stopword_deletion`, or the in-flight +TF-IDF/BM25 inferential-weight refusal. + +## Authority + +### Normative TEPP contract + +- `docs/adr/0004-shared-multilingual-latent-space.md` and + `docs/adr/0012-temporal-relational-shared-latent-topic-measurement.md` + — template, section, copied-text, style, modality, and + corpus-background sources are modeled explicitly and are not + inferential topic weights or stopword deletions. + +### Supporting literature + +Chemudugunta, Smyth, and Steyvers (2007) separate a shared background +word distribution from document-specific topical content. Background +mass is not unique latent meaning and is not deleted by a stopword +list. + +Chemudugunta, C., Smyth, P., & Steyvers, M. (2007). Modeling general +and specific aspects of documents with a probabilistic topic model. In +B. Schölkopf, J. Platt, & T. Hoffman (Eds.), *Advances in Neural +Information Processing Systems 19* (pp. 241–248). MIT Press. diff --git a/docs/research/standards-and-literature.md b/docs/research/standards-and-literature.md index 6e0438fe..083b497b 100644 --- a/docs/research/standards-and-literature.md +++ b/docs/research/standards-and-literature.md @@ -28,11 +28,13 @@ Roberts, M. E., Stewart, B. M., & Tingley, D. (2019). stm: An R package for stru Roberts, M. E., Stewart, B. M., Tingley, D., Lucas, C., Leder-Luis, J., Gadarian, S. K., Albertson, B., & Rand, D. G. (2014). Structural topic models for open-ended survey responses. *American Journal of Political Science, 58*(4), 1064–1082. https://doi.org/10.1111/ajps.12103 +Chemudugunta, C., Smyth, P., & Steyvers, M. (2007). Modeling general and specific aspects of documents with a probabilistic topic model. In B. Schölkopf, J. Platt, & T. Hoffman (Eds.), *Advances in Neural Information Processing Systems 19* (pp. 241–248). MIT Press. + Bianchi, F., Terragni, S., Hovy, D., Nozza, D., & Fersini, E. (2021). Cross-lingual contextualized topic models with zero-shot learning. In *Proceedings of the 16th Conference of the European Chapter of the Association for Computational Linguistics* (pp. 1676–1683). Association for Computational Linguistics. https://doi.org/10.18653/v1/2021.eacl-main.143 Nguyen, T. P., Minh, N. V., Nguyen, T., Van, L. N., Nguyen, D. A., Sang, D. V., & Le, T. (2025). XTRA: Cross-lingual topic modeling with topic and representation alignments. In *Findings of the Association for Computational Linguistics: EMNLP 2025*. Association for Computational Linguistics. -TEPP retains a logistic-normal CPU reference while allowing adapter backends that satisfy shared-latent, posterior, temporal, relational, and measurement-invariance contracts. +TEPP retains a logistic-normal CPU reference while allowing adapter backends that satisfy shared-latent, posterior, temporal, relational, and measurement-invariance contracts. Corpus-background wording is modeled as explicit structure, not unique latent content and not a stopword deletion (Chemudugunta et al., 2007). ## Topic-model evaluation and LLM judges diff --git a/docs/validation/temporal-event-foundation.md b/docs/validation/temporal-event-foundation.md index 7c50db23..58cec0fe 100644 --- a/docs/validation/temporal-event-foundation.md +++ b/docs/validation/temporal-event-foundation.md @@ -23,6 +23,7 @@ This report tracks exact-head scientific and engineering evidence required befor | Truth corpora / manifests | `tepp_simulation` | implemented-main | — | deterministic generator tests | Task 10 / PR #18 | | Recovery metrics | `validation_core` | implemented-main | — | RMSE/bias/coverage/MC gates | Task 11 / PR #19 | | Versioned API/export contracts | `tepp_api` | implemented-main | naruon HTTP interchange | unknown-field/version/limit + naruon HTTPS interchange tests | Task 12 / PR #21; live HTTP service remaining | +| Corpus-background-versus-unique-content identity | `corpus_background` | accepted-target | active PR | refuse background-as-unique/stopword + recovery vs unique-content collapse | ADR 0004/0012 | | Purpose-bound provider payloads | `tepp_api` | active-PR | provider-payload minimization | expired/not-yet-valid/inverted/cross-tenant/impossible-calendar grant, mapping refusal, audited elevated re-id replay | ADR 0009; `docs/research/provider-payload-minimization.md` | | CWL modular connectors | `docs/connectors/*` | implemented-main | — | contract docs + examples | PR #22; live HTTP ports remaining | | Release SBOM/provenance generator | `scripts/release_evidence.py` | partial | — | generate+validate in CI | Task 13 partial / PR #28 | diff --git a/scripts/check_workspace_contract.py b/scripts/check_workspace_contract.py index c7b1ecf5..0dce7b7d 100644 --- a/scripts/check_workspace_contract.py +++ b/scripts/check_workspace_contract.py @@ -23,6 +23,7 @@ "tepp_simulation", "validation_core", "tepp_api", + "corpus_background", ) REQUIRED_CI_SNIPPETS: tuple[str, ...] = ( From c7d5ed22c745223a33e624b7900e47063236409a Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 05:26:08 +0900 Subject: [PATCH 2/3] test: derive crate contract from workspace manifest --- tests/quality/test_check_docstrings.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tests/quality/test_check_docstrings.py b/tests/quality/test_check_docstrings.py index 2c11f7a5..da59f799 100644 --- a/tests/quality/test_check_docstrings.py +++ b/tests/quality/test_check_docstrings.py @@ -11,6 +11,7 @@ from unittest import mock from scripts import check_docstrings as docstrings +from scripts import check_workspace_contract as workspace_contract REPOSITORY_ROOT = Path(__file__).resolve().parents[2] @@ -24,7 +25,7 @@ def test_live_repository_is_documented(self) -> None: sources = docstrings.rust_sources(REPOSITORY_ROOT) crate_roots = sorted(REPOSITORY_ROOT.glob("crates/*/src/lib.rs")) - self.assertEqual(len(crate_roots), 10) + self.assertEqual(len(crate_roots), len(workspace_contract.EXPECTED_CRATES)) self.assertTrue(set(crate_roots).issubset(sources)) self.assertGreaterEqual(len(sources), len(crate_roots)) self.assertEqual(docstrings.validate_repository(REPOSITORY_ROOT), []) From a35d3290a919f82ade3fcecfa0d6b46b0ecfc7c6 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 05:34:38 +0900 Subject: [PATCH 3/3] docs: remove duplicate provider payload ledger row --- docs/validation/temporal-event-foundation.md | 1 - 1 file changed, 1 deletion(-) diff --git a/docs/validation/temporal-event-foundation.md b/docs/validation/temporal-event-foundation.md index ce5740c8..a680c35c 100644 --- a/docs/validation/temporal-event-foundation.md +++ b/docs/validation/temporal-event-foundation.md @@ -24,7 +24,6 @@ This report tracks exact-head scientific and engineering evidence required befor | Recovery metrics | `validation_core` | implemented-main | — | RMSE/bias/coverage/MC gates | Task 11 / PR #19 | | Versioned API/export contracts | `tepp_api` | implemented-main | naruon HTTP interchange | unknown-field/version/limit + naruon HTTPS interchange tests | Task 12 / PR #21; live HTTP service remaining | | Corpus-background-versus-unique-content identity | `corpus_background` | accepted-target | active PR | refuse background-as-unique/stopword + recovery vs unique-content collapse | ADR 0004/0012 | -| Purpose-bound provider payloads | `tepp_api` | active-PR | provider-payload minimization | expired/not-yet-valid/inverted/cross-tenant/impossible-calendar grant, mapping refusal, audited elevated re-id replay | ADR 0009; `docs/research/provider-payload-minimization.md` | | Purpose-bound provider payloads | `tepp_api` | implemented-main | provider-payload minimization | expired/not-yet-valid/inverted/cross-tenant/impossible-calendar grant, mapping refusal, audited elevated re-id replay | ADR 0009; `docs/research/provider-payload-minimization.md` | | Adaptive orchestration router | `tepp_api` | accepted-target | active PR | mode selection, document-control denial, ablation, credential-free bind | ADR 0010; `docs/research/adaptive-orchestration-router.md` | | CWL modular connectors | `docs/connectors/*` | implemented-main | — | contract docs + examples | PR #22; live HTTP ports remaining |