One-sentence brief
A character that returns with a shortened name, reversed family order, lost diacritics, changed pronouns, or a different age is not a harmless variation—it is a different identity or a failed generation.
AI-DRIVEN WORLD SAFETY
A strict contract for preventing silent changes to names, age, pronouns, scripts, cultural name order, and request-to-response correlation.
ORIENTATION
A character that returns with a shortened name, reversed family order, lost diacritics, changed pronouns, or a different age is not a harmless variation—it is a different identity or a failed generation.
WORKING BRIEF
A stable client item ID maps each response to one request even when many characters share a name or seed. Transport IDs and timestamps help trace processing but do not become part of the fictional identity.
Requested name, age, pronouns, native script, name order, citizenship, language, and other allowlisted identity fields must not be silently altered to make a generated biography easier. Contradictory requirements fail visibly.
Normalize identity text to Unicode NFC for stable comparison while preserving diacritics, ligatures, native scripts, and typographic intent. Compatibility normalization that collapses distinct forms can damage identity.
Store given-first, family-first, mononym, native-script, legal-name, and preferred-address rules explicitly. Generated text should use the contextually correct form rather than applying one Western parsing assumption.
Compare requested and resolved identity field by field. Any disallowed difference yields a blocking finding with the original value, resolved value, path, and repair action.
Canonicalize only the fields that define the accepted persona. Output format, trace metadata, request timing, and other transport details should not change the runtime fingerprint.
COMPLETE DOSSIER
Terms are defined for this site’s evidence method, not as universal legal or clinical definitions.
| Input condition | Allowed handling | Required outcome |
|---|---|---|
| NFD and NFC forms of the same name | Normalize to NFC and disclose the change | Identity preserved |
| Preferred name shortened or replaced | No silent repair | Block: identity substitution |
| Family-name-first changed to given-name-first | No automatic Western reordering | Block or human-correct |
| Same name on multiple items | Keep separate client item IDs | Process independently |
| Age conflicts with generated career history | Preserve age | Block chronology; revise biography |
Does the design preserve the exact fictional identity, ordinary life, independent goals, and ability to refuse rather than reducing the character to a role or prompt?
Pass condition: Identity fields are stable, state is separate, protected traits are not quality scores, and silent substitution is impossible.
Can every transition, validation result, accepted fingerprint, exception, and human decision be traced to a versioned record?
Pass condition: Automated checks, human review, activation authority, and production approval remain separate and explicit.
Can untrusted provider output, administrative evidence, stale revisions, or private data enter live context or binding state?
Pass condition: Only allowlisted, current, reviewed projections and bounded scene or memory packets can be used; failures degrade safely.
Can a changed source, identity revision, harmful behavior, or failed review invalidate downstream use without destroying audit history?
Pass condition: Supersession, pause, rollback, correction, and permanent retirement are defined and testable.
RESEARCH EDITION
This page follows the public method for provenance, confidence, source independence, alternative accounts, limitations, review state, and visible correction.
CONTINUE