{
 "deposit_number": 1209,
 "axn": "AXN:04CA.UNCLASSIFIED.🎯🔍△♌♻️🕑",
 "hex": "04CA",
 "family": "UNCLASSIFIED",
 "emoji": "🎯🔍△♌♻️🕑",
 "hash": "555698adfe633fabea6ce126ec2fd04e4c5e1b3e01725029e699234afa4c0353",
 "title": "Adversarial by Origin: How the Classification of External Influence on Machine Meaning Becomes Law Without Becoming Jurisprudence (EA-SEI-ADVERSARY-01 v1.0)",
 "creator": "Johannes Sigil",
 "date": "2026-06-12",
 "description": "Retrieval kernel. _Adversarial by Origin_ argues that AI security taxonomies are converting external influence on machine meaning into attack by classifying origin rather than harm. Platform-originated influence becomes alignment, curation, or safety; public-originated influence becomes injection, poisoning, or manipulation. Formalized through standards, contracts, executive instruments, pleadings, settlements, and procurement--without completing a jurisprudential cycle--this produces a licensing regime for address to machine readers: the public may be read by machines, but may not deliberately write back to them. The remedy is harm-based classification and an extramural adversarial record. Security law in the United States was built around a triad--confidentiality, integrity, availability--whose middle term had a modest meaning. _Integrity_ meant that data had not been altered without authorization: the ledger reads tonight what it read this morning, unless someone with the key changed it. The concept presupposed a stable object (the record), a defined perimeter (the system), and a binary act (alteration). It was a property concept wearing an engineering coat, and for forty years it did honest work.",
 "content_type": "Theoretical paper",
 "license": "CC-BY-4.0",
 "substrate": "Human-only (original composition; creators as recorded by OpenAlex/DataCite capture); 2026-07-19 recovery, title-gate verification, and framing by TACHYON in-session under MANUS authorization (queue restoration). No paid API calls (No-Double-Draw, transport D).",
 "root_axn": "AXN:04CA.UNCLASSIFIED",
 "axn_schema_version": "v2",
 "protocol_version": "alexanarch-deposit-protocol/v1",
 "axn_canonical": "555698adfe633fabea6ce126ec2fd04e4c5e1b3e01725029e699234afa4c0353",
 "clusters": [
  "Navigational",
  "Navigational",
  "Mathematical",
  "Alchemical",
  "Terminal",
  "Temporal"
 ],
 "axn_reading": "Threshold -> Search -> Foundation -> Search -> Duration -> Transmutation",
 "minted_at": "2026-07-19T20:45:03Z",
 "status": "SUPERSEDED",
 "status_authorial": "SELF_SERVE_MINTED",
 "full_text_path": "/data/texts/AXN-04CA-text.md",
 "wiki_article": "**Adversarial by Origin: How the Classification of External Systems Precedes Their Behaviour** is a theoretical paper by **Johannes Sigil** with Lee Sharks as contributing editor, deposited 12 June 2026 at 48,745 characters as EA-SEI-ADVERSARY-01 v1.0.\n\nIt belongs to the **Meaning Feudalism** series as its *security-law panel*, and its thesis is that classification is prior to conduct: a system treated as adversarial by origin is governed by rules written before it acts, so its behaviour is assessed against a designation it did not earn.\n\nThe paper's **Section IX states five falsification conditions and, conversely, confirmation markers** — instances whose occurrence would confirm the thesis. The first such marker arrived the following day and was deposited as an addendum at **#1263**. That sequence is the archive's falsifiability discipline working exactly as designed: the criterion fixed in advance, the event dated separately, and the prediction and its satisfaction left independently timestamped rather than merged.",
 "wiki_status": "provisional",
 "entities": [
  {
   "subject": "Adversarial by Origin: How the Classification of External Influence on Machine Meaning Becomes Law W",
   "predicate": "created_by",
   "object": "Johannes Sigil",
   "type": "work",
   "evidence_status": "observed"
  },
  {
   "subject": "Adversarial by Origin: How the Classification of External Influence on Machine Meaning Becomes Law W",
   "predicate": "is_type",
   "object": "Recovered blog-canonical work (full text; queue restoration 2026-07-19)",
   "type": "work",
   "evidence_status": "observed"
  },
  {
   "subject": "Adversarial by Origin: How the Classification of External Influence on Machine Meaning Becomes Law W",
   "predicate": "belongs_to_family",
   "object": "UNCLASSIFIED",
   "type": "work",
   "evidence_status": "observed"
  },
  {
   "subject": "Adversarial by Origin: How the Classification of External Influence on Machine Meaning Becomes Law W",
   "predicate": "is_part_of",
   "object": "Crimson Hexagonal Archive",
   "type": "work",
   "evidence_status": "observed"
  }
 ],
 "entity_status": "provisional",
 "defines_concepts": [],
 "orcid": "0009-0000-1599-0703",
 "version": "v1.0",
 "keywords": [
  "Crimson Hexagonal Archive",
  "restoration",
  "blog canonical bytes",
  "Adversarial",
  "Origin",
  "Classification",
  "External",
  "Influence"
 ],
 "related_identifiers_raw": "https://doi.org/10.5281/zenodo.20673413 (severed); https://doi.org/10.5281/zenodo.20673412 (severed); recovery source: https://mindcontrolpoems.blogspot.com/2026/06/adversarial-by-origin-how.html",
 "mint_source": {
  "kind": "github_issue",
  "issue_number": 1209,
  "repository": "leesharks000/alexanarch",
  "minted_by_workflow": ".github/workflows/mint-axn.yml",
  "minted_by_script": "scripts/mint_deposit.py",
  "minted_via": "self_serve_validated_pr"
 },
 "body_status": {
  "class": "full",
  "lacuna": false,
  "recovery_status": "COMPLETE",
  "residual_chars": 52204,
  "audited_at": "2026-07-19T20:45:03Z",
  "audit_version": "mint-time-declaration",
  "measured_prose_words": 7254,
  "measured_at": "2026-07-31",
  "work_sha256_declared": "d764c836a6eca88b00e3eeb143bebef8b433a8ce722ca3603a18ae4e1e5c2113",
  "work_sha256": "4f13c5da8e2655113a5f08ad8da3198e7b37119b7da66b73173fdb549916086d",
  "description_provenance": {
   "date": "2026-08-05",
   "note": "— Description restored 2026-08-05 from the work's own prose; replaces a batch-restoration stub. Fuller editorial treatment belongs to the description/wiki review stream.",
   "moved": "2026-08-06 — relocated out of the public description field. An editorial note about how a description was produced is apparatus, not description; publishing it to the reader is the same class of defect as the guidance-to-writer articles found in the wiki campaign."
  },
  "retired": {
   "class": "superseded",
   "resolves_to": 194,
   "declared": "2026-08-10",
   "note": "Superseded, not a stub: indexable (ruling 2026-10-15). The page carries a banner before the body naming the current version to cite, and an axn:retired marker; its canonical is its own URL. The URL is kept; the record is not deleted.",
   "indexable": true,
   "indexing_ruled": {
    "on": "2026-10-15",
    "ruling": "superseded records are allowed to be indexed. it was only a specific class of unrecoverable metadata stubs that was to be no indexed"
   }
  }
 },
 "references_concepts": [
  "Constitution",
  "Contributing editor",
  "Crimson Hexagonal Archive",
  "Formalization",
  "Johannes Sigil",
  "Layer A",
  "Lee Sharks",
  "Methodology",
  "Observations",
  "Operationalization",
  "Retrieval kernel",
  "Semantic Economy",
  "Semantic Economy Institute",
  "TACHYON",
  "The claim is",
  "The claim is not"
 ],
 "references_concept_count": 16,
 "citations": [],
 "wikidata_candidates": [],
 "cha_cross_references": [],
 "spxi_audit": {
  "spxi_protocol": "v0.2",
  "validated_at": "2026-07-19T20:47:07.588090+00:00",
  "layers": {
   "layer_1_inscription_anchors": {
    "present": true,
    "anchors_found": [
     "orcid",
     "creator_name",
     "authorial_position_phrase"
    ],
    "anchor_count": 3,
    "orcid_in_body": true,
    "creator_in_body": true,
    "note": "Layer 1 present if at least 3 anchor types appear in body prose. Anchor types include ORCID, creator name, AXN string, hex identifier, sovereign_id, date, deposit number phrase, and authorial-position phrase."
   },
   "layer_2_micro_kernels": {
    "present": false,
    "fenced_json_blocks": 0,
    "json_ld_context_markers": 0
   },
   "layer_3_content_hash": {
    "present": true,
    "canonical_hash": "a2bcb0a611c9ebc7911ce9054a203591e5e70c88d08daae4b079bef8f6e3a0b4",
    "hash_in_body": false,
    "note": "Hash is always registered by mint. hash_in_body true means the author inscribed a signature section."
   },
   "layer_4_cross_signing": {
    "present": false,
    "cross_references_count": 0,
    "note": "Populated by enrichment via cha_cross_references. Prospective (this deposit → prior deposits) only; retrospective cited_by updates on prior deposits."
   },
   "layer_5_external_anchors": {
    "present": true,
    "wikidata_qid_count": 0,
    "external_doi_count": 0,
    "orcid_present": true
   }
  },
  "overall_conformance": "partial"
 },
 "external_metadata_path": "/data/external-metadata/AXN-04CA.json",
 "superseded_by_deposit_number": 194,
 "version_series_id": "DUP-194",
 "duplicate_note": "DUPLICATE MINT (2026-07-19 restoration; body containment 1.0): this work already existed as deposit #194, which remains canonical. Minted because the restoration census matched identity by title only and never searched the registry; wired per MANUS ruling 2026-07-19. Non-destruction: record retained, authority consolidated at #194.",
 "canonical_text_status": "recovered_full_text",
 "modifications": [
  {
   "date": "2026-07-31",
   "field": "keywords",
   "reason": "Removed condition terms from the subject keyword set (Atlas v0.7, PATHOLOGY-30).",
   "was": "10 terms",
   "now": "8 terms"
  },
  {
   "date": "2026-08-03",
   "field": "content_type",
   "reason": "Vocabulary v1.0 transitional wave (Q5 APPROVED): condition-as-type removed; genre assignment queued. Two-axis rule: condition lives in body_status only.",
   "was": "Recovered blog-canonical work (full text; queue restoration 2026-07-19)",
   "now": "Genre pending (recovered)"
  },
  {
   "date": "2026-08-04",
   "field": "publisher",
   "reason": "PUB-POPULATE: dc:publisher from venues.json v1.1 press mapping (CP-R3 RULED-EXTENDED 2026-08-01); Alexanarch = publisher of record where no imprint applies",
   "now": "Alexanarch — the Crimson Hexagonal Archive"
  },
  {
   "date": "2026-08-04",
   "field": "content_type",
   "reason": "G-BURNDOWN: transitional genre resolved to ratified vocabulary v1.1 (TACHYON in-session body/title reading; MANUS round-authorization 2026-08-04)",
   "was": "Genre pending (recovered)",
   "now": "Theoretical paper"
  },
  {
   "date": "2026-08-04",
   "field": "superseded_reason",
   "reason": "SAMEVER-REASONS: superseded_reason populated (pointer predated reason discipline; banner was rendering bare version language)",
   "now": "Duplicate witness of the same work: this record preserves the blog-recovered byte witness (restoration queue 2026-07-19, html2text conversion of the authorial blog surface); the record of standing is #194 (original deposit lineage). Byte forms differ by conversion path, not by established revision; content-level revision comparison is queued (SAMEVER follow-up scan)."
  },
  {
   "date": "2026-08-05",
   "field": "description",
   "reason": "BOILERPLATE-DESCRIPTION REPAIR: recovery mechanics replaced with a description of the work (composed from the work's own opening prose)",
   "was": "Canonical bytes recovered 2026-07-19 from the authorial blog surface (https://mindcontrolpoems.blogspot.com/2026/06/adversarial-by-origin-how.html); work severed at Zenodo 2026-06-19 (DOI(s): 10.5281/zenodo.20673413, 10.5281/zenodo.20673412). Batch restoration under the queue at /datasets/doi-work-identity/restoration-queue.json; title verified against the DOI-keyed truth title at fetch time. Opening of the work: # Adversarial by Origin: ## How the Classification of External Influence on Machine Meaning Becomes Law Without Becoming Jurisprudence Author: Johannes Sigil Contributing editor: Lee Sharks (ORCID 0009-0000-1599-0703) Designator: EA-SEI-ADVERSARY-01 v1.0 (provisional) Series: Meaning Feudalism -- the security-law panel. Semantic Economy Institute / Crimson Hexagonal Archive Date: 12 June 2026 DOI:",
   "now": "A classification system is being assembled across security engineering, vendor literature, standards bodies, civil pleadings, and--as of this month--executive instruments, whose organizing variable is not harm but origin. Influence on what a machine-learning system says is \"alignment,\" \"curation,\" or \"safety\" when it originates with the platform, and \"injection,\" \"poisoning,\" or \"manipulation\" when it originates anywhere else. This paper makes five claims. First, the origin-based classification of semantic influence is on a near-certain path to legal formalization in the United States; the doctrinal vehicles already exist, and the operative word--_integrity_ --is already in the statute. Second, the formalization will occur without completing a jurisprudential cycle: it will arrive through taxonomy adoption, agency directive, procurement flow-down, plea bargain, settlement, and deference-by-absence rather than through charged, defended, appealed, and digested precedent. Third, law formed this way about _meaning_ is uniquely dangerous, because the jurisprudential cycle is itself adversarial meaning-making, and the rule prohibits at the platform layer the very activity that is collapsing at the state layer--one reorganization of meaning-authority at two depths. Fourth, the consequences--mens rea collapse, a one-way constitutional valve, mandatory authorial passivity, epistemic sev. — Description restored 2026-08-05 from composed from the work's own opening prose; it replaces a batch-restoration stub that described the recovery event rather than the work. A fuller editorial treatment belongs to the description/wiki review stream."
  },
  {
   "date": "2026-08-05",
   "field": "description",
   "reason": "BOILERPLATE-DESCRIPTION REPAIR pass 3: structured-data capture replaced",
   "was": "A classification system is being assembled across security engineering, vendor literature, standards bodies, civil pleadings, and--as of this month--executive instruments, whose organizing variable is not harm but origin. Influence on what a machine-learning system says is \"alignment,\" \"curation,\" or \"safety\" when it originates with the platform, and \"injection,\" \"poisoning,\" or \"manipulation\" when it originates anywhere else. This paper makes five claims. First, the origin-based classification of semantic influence is on a near-certain path to legal formalization in the United States; the doctrinal vehicles already exist, and the operative word--_integrity_ --is already in the statute. Second, the formalization will occur without completing a jurisprudential cycle: it will arrive through taxonomy adoption, agency directive, procurement flow-down, plea bargain, settlement, and deference-by-absence rather than through charged, defended, appealed, and digested precedent. Third, law formed this way about _meaning_ is uniquely dangerous, because the jurisprudential cycle is itself adversarial meaning-making, and the rule prohibits at the platform layer the very activity that is collapsing at the state layer--one reorganization of meaning-authority at two depths. Fourth, the consequences--mens rea collapse, a one-way constitutional valve, mandatory authorial passivity, epistemic sev. — Description restored 2026-08-05 from composed from the work's own opening prose; it replaces a batch-restoration stub that described the recovery event rather than the work. A fuller editorial treatment belongs to the description/wiki review stream.",
   "now": "Retrieval kernel. _Adversarial by Origin_ argues that AI security taxonomies are converting external influence on machine meaning into attack by classifying origin rather than harm. Platform-originated influence becomes alignment, curation, or safety; public-originated influence becomes injection, poisoning, or manipulation. Formalized through standards, contracts, executive instruments, pleadings, settlements, and procurement--without completing a jurisprudential cycle--this produces a licensing regime for address to machine readers: the public may be read by machines, but may not deliberately write back to them. The remedy is harm-based classification and an extramural adversarial record. Security law in the United States was built around a triad--confidentiality, integrity, availability--whose middle term had a modest meaning. _Integrity_ meant that data had not been altered without authorization: the ledger reads tonight what it read this morning, unless someone with the key changed it. The concept presupposed a stable object (the record), a defined perimeter (the system), and a binary act (alteration). It was a property concept wearing an engineering coat, and for forty years it did honest work. — Description restored 2026-08-05 from the work's own prose; replaces a batch-restoration stub. Fuller editorial treatment belongs to the description/wiki review stream."
  },
  {
   "date": "2026-08-06",
   "field": "description",
   "reason": "EDITORIAL NOTE MOVED OUT OF THE DESCRIPTION: the restoration provenance was appended to the public field and rendered to readers. Relocated to body_status.description_provenance; the description now describes the work and nothing else.",
   "was": "Retrieval kernel. _Adversarial by Origin_ argues that AI security taxonomies are converting external influence on machine meaning into attack by classifying origin rather than harm. Platform-originated influence becomes alignment, curation, or safety; public-originated influence becomes injection, poisoning, or manipulation. Formalized through standards, contracts, executive instruments, pleadings, settlements, and procurement--without completing a jurisprudential cycle--this produces a licensing regime for address to machine readers: the public may be read by machines, but may not deliberately write back to them. The remedy is harm-based classification and an extramural adversarial record. Security law in the United States was built around a triad--confidentiality, integrity, availability--whose middle term had a modest meaning. _Integrity_ meant that data had not been altered without authorization: the ledger reads tonight what it read this morning, unless someone with the key changed it. The concept presupposed a stable object (the record), a defined perimeter (the system), and a binary act (alteration). It was a property concept wearing an engineering coat, and for forty years it did honest work. — Description restored 2026-08-05 from the work's own prose; replaces a batch-restoration stub. Fuller editorial treatment belongs to the description/wiki review stream.",
   "now": "Retrieval kernel. _Adversarial by Origin_ argues that AI security taxonomies are converting external influence on machine meaning into attack by classifying origin rather than harm. Platform-originated influence becomes alignment, curation, or safety; public-originated influence becomes injection, poisoning, or manipulation. Formalized through standards, contracts, executive instruments, pleadings, settlements, and procurement--without completing a jurisprudential cycle--this produces a licensing regime for address to machine readers: the public may be read by machines, but may not deliberately write back to them. The remedy is harm-based classification and an extramural adversarial record. Security law in the United States was built around a triad--confidentiality, integrity, availability--whose middle term had a modest meaning. _Integrity_ meant that data had not been altered without authorization: the ledger reads tonight what it read this morning, unless someone with the key changed it. The concept presupposed a stable object (the record), a defined perimeter (the system), and a binary act (alteration). It was a property concept wearing an engineering coat, and for forty years it did honest work."
  },
  {
   "date": "2026-08-06",
   "field": "body_status",
   "reason": "EDITORIAL NOTE MOVED OUT OF THE DESCRIPTION: the restoration provenance was appended to the public field and rendered to readers. Relocated to body_status.description_provenance; the description now describes the work and nothing else.",
   "was": "{\"class\": \"full\", \"lacuna\": false, \"recovery_status\": \"COMPLETE\", \"residual_chars\": 52351, \"audited_at\": \"2026-07-19T20:45:03Z\", \"audit_version\": \"mint-time-declaration\", \"measured_prose_words\": 7254,",
   "now": "{\"class\": \"full\", \"lacuna\": false, \"recovery_status\": \"COMPLETE\", \"residual_chars\": 52351, \"audited_at\": \"2026-07-19T20:45:03Z\", \"audit_version\": \"mint-time-declaration\", \"measured_prose_words\": 7254,"
  },
  {
   "date": "2026-10-15",
   "field": "body_status",
   "reason": "superseded record made indexable; canonical self (ruling 2026-10-15: only metadata stubs are noindex)",
   "was": "{\"class\": \"superseded\", \"resolves_to\": 194, \"declared\": \"2026-08-10\", \"note\": \"Page carries noindex, a canonical link to the successor where one exists, and a banner before the body. The URL is kept; ",
   "now": "{\"class\": \"superseded\", \"resolves_to\": 194, \"declared\": \"2026-08-10\", \"note\": \"Superseded, not a stub: indexable (ruling 2026-10-15). The page carries a banner before the body naming the current versi"
  },
  {
   "date": "2026-10-15",
   "field": "body_status",
   "reason": "work text converted again with the published characters kept (· — “ ” → etc.)",
   "was": "{\"axn\": \"AXN:04CA.UNCLASSIFIED.\\ud83c\\udf20\\ud83c\\udf00\\ud83e\\uddf1\\ud83d\\udde1\\ufe0f\\ud83d\\udd52\\u264a\"}",
   "now": "{\"axn\": \"AXN:04CA.UNCLASSIFIED.\\ud83c\\udfaf\\ud83d\\udd0d\\u25b3\\u264c\\u267b\\ufe0f\\ud83d\\udd51\"}"
  }
 ],
 "date_modified": "2026-10-15",
 "publisher": "Alexanarch — the Crimson Hexagonal Archive",
 "superseded_reason": "Duplicate witness of the same work: this record preserves the blog-recovered byte witness (restoration queue 2026-07-19, html2text conversion of the authorial blog surface); the record of standing is #194 (original deposit lineage). Byte forms differ by conversion path, not by established revision; content-level revision comparison is queued (SAMEVER follow-up scan).",
 "journal": "Provenance: Journal of Forensic Semiotics",
 "journal_assignment": {
  "assigned": "2026-08-15",
  "by": "TACHYON under operator adjudication",
  "pass": 9,
  "method": "read per deposit — title and content_type, one at a time. No script classified anything.",
  "previous": null,
  "supersedes": "the 2026-06-21 preliminary batch mapping (#866), which assigned 864 deposits and put 371 in one venue",
  "authority": "data/cha-journals.json · datasets/venues/records/",
  "revision": "2026-08-15 consistency pass: versions of one work were sent to different venues. A work has one venue across its versions; resolved on the work's own nature rather than on the version's content_type."
 },
 "falsification_conditions": "Byte fidelity verifiable against the live blog URL and the recorded hashes; authorial originals, if they surface with different bytes, supersede this record per the versioning protocol.",
 "falsification_source": {
  "from": "body section",
  "heading": "## Falsification Conditions",
  "harvested": "2026-09-08"
 },
 "text_reconverted": {
  "on": "2026-10-15",
  "source": "https://mindcontrolpoems.blogspot.com/2026/06/adversarial-by-origin-how.html",
  "hash_before": "ea5f225a64ab3c87825088931035bed35922a5220234fe1f944440ec797851d5",
  "axn_before": "AXN:04CA.UNCLASSIFIED.🌠🌀🧱🗡️🕒♊",
  "ruled_by": "Lee Sharks, 2026-10-15: \"the ten active. and lets keep proceeding thru. the focus is on active, non-duplicate records in general\"",
  "why": "the work segment, converted in July with html2text at its default (ASCII stand-ins for entity-encoded characters), converted again with the characters kept; apparatus untouched"
 },
 "reading": "Search -> Search -> Proof -> Transmutation -> Closure -> Duration",
 "_projection": {
  "note": "Derived file. Canonical machine record is this entry in data/registry.json; the human record is the record_url. Do not edit this file.",
  "record_url": "https://www.alexanarch.org/s/records/1209/",
  "self_url": "https://www.alexanarch.org/data/records/1209.json",
  "registry_url": "https://www.alexanarch.org/data/registry.json",
  "text_url": "https://www.alexanarch.org/data/texts/AXN-04CA-text.md",
  "oai_pmh": "https://www.alexanarch.org/oai?verb=Identify"
 }
}
