A RESEARCH PROTOCOL FOR PUBLICATION AUTHORITY

Make AI-assisted claims independently challengeable.

Connect the evidence, the exact candidate, human authorization and the act of publication. Make their bindings open to inspection.

A specification by Torsten Olivi Tiltack and coauthors.

PAC-2026 research candidate · arXiv v2

One exact candidate, selected bindingsThree floating glass layers depict an exact candidate, evidence bound to that candidate (E1), and a separate human authorization for that candidate (A1). Four further protocol obligations are not drawn. This illustration does not execute verification or create authority.
01Exact candidateOne declared version
02EvidenceBound to this candidate (E1)
03Human authorizationA separate act for this candidate (A1)
One exact target. Separate bindings.Conceptual illustration

Which version was
actually authorized?

A convincing claim can arrive with evidence, a valid signature and a human approval — yet each can refer to a different state.

AIJIM makes the publication transition explicit. The record connects what was checked, what a person authorized, what a reader sees and what was actually published.

Follow the bindings
∴

A stronger status needs a valid witness
bound to the exact state.

THE GOVERNING IDEA
No silent epistemic promotion

One record.
Explicit obligations.

What happens when the evidence, the candidate or the required run changes? Inspect four illustrative cases.

SELECTED BINDINGSILLUSTRATION · NOT LIVE VERIFICATION
Independently admitted policyExpected: run-1
E1 · EVIDENCEAuthenticatedTarget-bound input
R1 · ANALYTICAL RUNrun-1Matches required identity
A1 · HUMAN AUTHORIZATIONAuthorizes ASeparate human action
S1 · READER SURFACEDeclared displayCorrespondence required
Candidate AEXACT TARGET
E1EvidenceR1Runs & artifactsM1Measurement disclosureNot drawnA1Human authorizationS1Surface correspondenceL1Lifecycle continuityNot drawn
READY

Single-use permit can be minted · not consumed

Readiness assumes every premise, beyond the four drawn bindings

Admitted exact context; complete, fresh verification record; exact active authorization; ready surface; accepted lifecycle plan; unused nonce; substantive PASS and GATE_PASS for every E1, R1, M1, A1, S1 and L1 obligation. Permit consumption is a separate publication act.

WHAT CHANGES

One exact candidate. All readiness premises assumed.

This illustration assumes an admitted context, a fresh complete record, exact active human authorization, a ready surface, an accepted lifecycle plan, an unused nonce, and substantive and gate passes for all six obligations. A single-use permit can then be minted. Publication is a separate act that consumes it.

Illustrative scenarios derived from the specification and diagnostic artifacts. Displayed human authorization and readiness are assumptions of the example. Selecting a scenario does not sign, authorize or publish anything.

PASS

A valid witness establishes the required obligation for this target.

FAIL

A localized counterexample shows a required obligation is violated.

CANNOT_VERIFY

The required obligation cannot be established from the available inputs.

Three distinct results. No average, no confidence score. Both FAIL and CANNOT_VERIFY block promotion.

What is bound, and where can it be challenged?+

Six publication obligations

Evidence; runs and artifacts; measurement disclosure; authorization; surface correspondence; lifecycle continuity. Each obligation needs its own target-bound result.

A fresh, complete all-pass record derives a permit. The real consumption path binds that single-use permit to one publication record.

Three observer locations

Producer: inspect the objects and bindings. Surface: inspect what the recipient can see. Audit: reconstruct and challenge the portable record.

These are observation locations, not three scores or successive pipeline stages.

Inspect the SF-4 archive
THE FORMAL RULE / PAC-2026 SF-4

All conditions.
One publication act.

Six separate judgments, each with its own binding check. Together with the other readiness conditions, they can derive authority; an average cannot.

EXACT CANDIDATE + CONTEXTILLUSTRATIVE PREMISES · NO LIVE VERIFICATION
ObligationSubstantiveBinding gate
E1EvidencePASSW⁺GATE_PASS
R1Runs & artifactsPASSW⁺GATE_PASS
M1Measurement disclosurePASSW⁺GATE_PASS
A1Human authorizationPASSW⁺GATE_PASS
S1Surface correspondencePASSW⁺GATE_PASS
L1Lifecycle continuityPASSW⁺GATE_PASS

Also required — all assumed here

  • Admitted exact context
  • Complete, fresh record
  • Exact active authorization
  • Ready surface
  • Accepted lifecycle plan
  • Unused nonce at minting
Every conjunct must holdNo substitution. No score.
PUBLICATION PERMIT
Single useExact target · bound times · nonce ν
Publication is a separate act
No publication record yetReadiness alone does not publish

Each permit may be consumed at most once.

A permit can be minted.

Every result pair and every additional readiness premise is assumed to hold for the same exact context. This permits minting. Publication is a separate act.

Animated explanation of Equation 5
Read the equation and its symbols

Readyπ₀(χ, V, ν) ⟺

  • Admit(χ)
  • ∧ CompleteFresh(V, χ)
  • ∧ ExactActiveAuth(α)
  • ∧ SurfaceReady(ς)
  • ∧ PlanAccepted(ℓ, y) ∧ Unused(ν)
  • ∧ ∀ o ∈ O₀ : Subo = PASS(Wo⁺)
  • ∧ ∀ o ∈ O₀ : Gateo = GATE_PASS

Readyπ₀(χ, V, ν) ⇒
(χ, V, ν) ⊢ mintπ₀(χ, V, ν) :
PublicationPermit:2

Reading the notation

χ / V
Exact context / complete verification record, both bound to evidence horizon he and verification time tv.
π₀ / O₀
Fixed admitted profile / its six Core obligations.
α / ς / ℓ / y
Authorization / surface / lifecycle plan / publication target.
ν / W⁺
Unused nonce / target-bound positive witness.
∧ / ∀ / ⊢
And / for every / permits the derivation of.

ExactActiveAuth includes the profile’s proof, trust, scope, revocation, expiry and temporal checks. Minting and publication-time validation remain distinct.

The consumed mode shows the assumed pre-minting record, followed by its publication act. Consumption changes the nonce state; it does not erase the original verification record. Per-permit single use does not rule out different permits with distinct nonces.

Read Equation 5 and the full conditions

A source-based illustration, not a verifier or a publication service. No signature, authorization or publication is created by these controls.

THE SCOPE IS PART OF THE PROTOCOL

Accountability you can inspect.
Within a declared profile.

AIJIM specifies how publication records remain challengeable. A valid signature, configured signer trust, an analytical result, human authorization and a fresh publication act establish different things. Accountability Closure is relative to the fixed profile.

Protocol conformance does not establish factual truth or automatically certify compliance. PAC-2026 is a research specification candidate, not an external standard.

Inspect the argument and its limits

Test the boundary.
Explain the difference.

Three targeted, author-led diagnostics show which protections the constructed comparison profile supplied only after an explicit repair.

Diagnostic 01

Admit the state before evaluating it.

Can a malformed measurement state enter the publication record?

SF-4 refused four malformed state representations before measurement evaluation. The constructed comparison profile committed them.

The transferable repair

An explicit state-domain guard restored agreement on all nine selected cases.

Cases matching the fixed taskAggregate counts · 9 selected cases
AIJIM · SF-4Unchanged SF-4 reference binding
Composed alternativeOriginal V2 publication profile
With state-domain repairSame selected cases+ State-domain guardPolicy identity changes

Each mark is one count in a total, not an identified case moving between rows.

Parity on this tested case set.Earlier repairs remain active. No pooled matrix was run.
How the guard works

Schema admission comes before substantive measurement evaluation.

SF-4◌ Refused at schema admission
Original profile↳ Malformed object stored
State-domain repair◌ Refused by state-domain guard

These four representations form one malformed-state fault class. Schema refusal is not a substantive M1 FAIL.

Three author-led, machine-assisted diagnostics compare unchanged SF-4 with a constructed in-toto/OPA/SQLite publication profile. Counts describe targeted cases, not population accuracy. This is a code-aware comparison, not an external independent evaluation; parity after each repair does not establish an omnibus regression result.

Inspect the evidence collection
AN EXPLORATORY EXTENSION / CLAIM-EDIT REGIONS

What can change
without losing the
statistical qualification?

For a fixed hypothesis universe, evidence and level, exact edit regions identify which changes to a claim selection preserve the specified statistical criterion.

A minimum retained core qualifies every selection in the specified edit region. For U = H, the all-core frontier uses quadratic arithmetic work after sorting. The construction builds on established e-closure methods; it does not test the calibration of the e-values.

Analytical validity does not transfer publication authority. A changed candidate still needs the appropriate authorization.

Explore the mathematical evidence
Eight possible selectionsIllustrative fixed snapshot
Claim 0e0 = 8
Claim 1e1 = 1
Claim 2e2 = 8
Qualification level α
Qualified: B ≤ α Not qualified: B > α One guaranteed interval
Selection {0}Covered by this region

Strongest check: S = {0, 1}B = 2/9 ≤ α = 1/2

FDPS(R) = 1 · mean e = 9/2. All nonempty S satisfy the inequality.

Retain {0}: all four selections in [{0}, H] qualify.

{2} is another minimum core. Selections outside this interval can qualify separately.

Statistical qualification can be reused. Each selected candidate still needs fresh human authorization and every other publication obligation. Inspect the publication rule ↗

What is being checked?

For each selection R, B(R) is the largest ratio FDPS(R) / ēS across all nonempty subsets S of H. Qualification requires B(R) ≤ α. Here FDPS(R) = |R ∩ S| / (|R| ∨ 1).

The inherited guarantee concerns expected false discovery proportion under valid e-value assumptions. The fixture checks exact arithmetic; it does not establish calibration, realised error, or a truth probability for an individual claim.

All eight exact selections
Selection RB(R)α = 1/2α = 1/20
∅0QualifiesQualifies
{0}2/9QualifiesNo
{1}1NoNo
{2}2/9QualifiesNo
{0, 1}1/2QualifiesNo
{0, 2}3/17QualifiesNo
{1, 2}1/2QualifiesNo
{0, 1, 2}1/3QualifiesNo
Inspect the executable evidence

728problems checked

4,010all-h comparisons

Finite checks on the declared grid, not calibration. Timing results are mixed; no general end-to-end speed advantage is claimed.

Read it.
Run it.
Challenge it.

Start with the published evidence and its reader guide. Follow each artifact’s own version and execution instructions.

PAC-2026 · SF-4 · 0.4.0-sf.4
THE SPECIFICATION PAPER2026Public preprint · arXiv v2

Making AI-Assisted Claims Independently Challengeable: Publication Authority and a Protocol for Falsifiable Publication Records

Torsten Olivi Tiltack, Yifei Dong, Kun Yu, Xu Wang, Wei Liu, Jianlong Zhou, Ren Ping Liu and Fang Chen

Read the public preprint

Version 2 · revised 21 October 2026 · preprint, not peer-reviewed. Includes the claim-edit regions and native protection diagnostics. Executable materials are available in the separate evidence collection 1.0.0; the evaluated specification remains SF-4.

Cite the public preprint
@misc{olivitiltack2026challengeable,
  title = {Making AI-Assisted Claims Independently Challengeable: Publication Authority and a Protocol for Falsifiable Publication Records},
  author = {Olivi Tiltack, Torsten and Dong, Yifei and Yu, Kun and Wang, Xu and Liu, Wei and Zhou, Jianlong and Liu, Ren Ping and Chen, Fang},
  year = {2026},
  eprint = {2609.17631},
  archivePrefix = {arXiv},
  primaryClass = {cs.AI},
  url = {https://arxiv.org/abs/2609.17631v2},
  note = {Version 2; preprint, not peer-reviewed}
}
Torsten Olivi Tiltack wearing a neutral grey cap

THE RESEARCHER

Torsten Olivi Tiltack

First author · PhD Candidate at UTS

My research connects evidence-first systems, publication authority and independently challengeable AI-assisted claims. This specification paper is part of that work, developed with the coauthors credited above.

On TechJournal, I bring the research, hands-on engineering and films together to make the ideas tangible.