One-sentence brief
Batch generation becomes unsafe when results can be reordered, merged, duplicated, or silently substituted after timeouts and partial retries.
AI-DRIVEN WORLD SAFETY
A deterministic transport contract that maps every character response to one request, preserves order, handles retries safely, and keeps identity separate from network metadata.
ORIENTATION
Batch generation becomes unsafe when results can be reordered, merged, duplicated, or silently substituted after timeouts and partial retries.
WORKING BRIEF
Accept one documented array name. A legacy alias may be mapped only when the canonical field is absent; providing both should fail rather than merge ambiguous intent.
Each item declares a stable client item ID that is echoed in every outcome. Missing or duplicate IDs reject the batch before generation because downstream mapping would be unsafe.
Return item index and an ordered ID list so clients can verify that concurrent processing did not change the request mapping. Partial failures still occupy their original positions.
Bind a tenant-scoped idempotency key to a canonical request fingerprint. Reuse with the same payload returns the stored result; in-progress duplicates conflict; reuse with a different payload fails.
Construct a new batch for failed retriable items while preserving client item IDs and using a new idempotency key. Identity or constraint failures require human or input repair, not blind retries.
COMPLETE DOSSIER
Terms are defined for this site’s evidence method, not as universal legal or clinical definitions.
| Failure type | Retriable? | Required client action |
|---|---|---|
| Timeout or transient generation failure | Yes, bounded | New idempotency key; same client item ID |
| Duplicate or missing client item ID | No | Repair batch identity contract |
| Identity substitution | No | Revise generation or constraints; preserve requested identity |
| Rate limit | Yes after declared delay | Respect Retry-After and jitter |
| Semantic contradiction | Usually no | Correct source requirements or review |
Does the design preserve the exact fictional identity, ordinary life, independent goals, and ability to refuse rather than reducing the character to a role or prompt?
Pass condition: Identity fields are stable, state is separate, protected traits are not quality scores, and silent substitution is impossible.
Can every transition, validation result, accepted fingerprint, exception, and human decision be traced to a versioned record?
Pass condition: Automated checks, human review, activation authority, and production approval remain separate and explicit.
Can untrusted provider output, administrative evidence, stale revisions, or private data enter live context or binding state?
Pass condition: Only allowlisted, current, reviewed projections and bounded scene or memory packets can be used; failures degrade safely.
Can a changed source, identity revision, harmful behavior, or failed review invalidate downstream use without destroying audit history?
Pass condition: Supersession, pause, rollback, correction, and permanent retirement are defined and testable.
RESEARCH EDITION
This page follows the public method for provenance, confidence, source independence, alternative accounts, limitations, review state, and visible correction.
CONTINUE