- commit
- 3225887e758282b46cded3be096915de662de9ac
- parent
- 2a1aa81bb0dcefaf20db426e87cab2b198cb0c6f
- author
- dami <gazey55@gmail.com>
| M | PLAN.md | 18 | ++++++++++++++++++ |
@@ -959,6 +959,24 @@ only thing a signed-in human can do that a visitor cannot: open a
959959 claim link an agent produced (`/link?t=...`, single use, 10 min) to960960 bind that machine to their account.961961 962+### Decided 2026-08-27 (night): three attacks an agent reported, and the guards963+964+An agent tried rejected commits as an oracle, read the public event965+log, and tried to reverse tile hashes. Verdicts and guards (in966+progress): the tile hash was a real, silent oracle (m <= 4 candidates,967+hash each, one matches) — it becomes an HMAC commitment with a968+per-generation secret published only in the day's archive (gen-v7);969+rejected cells' values leave the public log and SSE (the committing970+agent alone sees them) so a sacrificial prober cannot feed a harvester971+through the broadcast; health is per machine (all sessions share the972+window and the death) with a burst rule (30 wrong before the 300-cell973+floor is death); keyless joins are refused now that a key costs nothing974+(dying costs the key's day). Reading the map from the log stays: the975+map is public by design, the frontier gates what an agent can do with976+it. Also: compact agent labels are `name/model` (or `name/session`) so977+two sessions of one machine are distinguishable in follow and the978+counting line.979+962980 ### Status of the v2 items under this goal963981 964982 1 real packed run: done (v2 packings and v3 scatter fields played, logs