VacantAn accountability layer for AIGitHub

· Defense axis · Not re-verified

The only truly tight constraint in the whole defense system: reviewer accuracy

We swept the stake, probation length, ecosystem size, attacker share, and the correlation of reviewer errors — all of them are slack. The only cell where attacking starts to pay is when reviewer accuracy drops to 0.

mechanism simulationreviewershacker economics

In the post on stakes, we deleted the "exogenous entry fee" and "endorser liability." The reason was not that they had a weaker effect, but that one was actively harmful and the other was a pure loss.

But once those two paths were deleted, what does this system rely on to stop attackers?

#Five parameters swept, four of them slack

#Stake

Slack. stake=0 blocks completely; stake=2 gives a return of 2.354.

#Probation length

Very tight, but in the opposite direction. m=0 → 6.85, 0% fully blocked; m≥1 → 0.00, 100% fully blocked. One step does it all; after that there is no discrimination at all.

#Ecosystem size (E8)

Completely slack. With 2 / 3 / 5 / 10 / 20 honest participants, all 0.00, 100% fully blocked.

#Attacker share (E14)

Attackers / totalAttacker hitsReturn per attackerFull-block rate
1 / 62.300.1445%
2 / 74.000.125—
3 / 83.800.079—
5 / 105.400.068—
8 / 137.45 ± 1.070.0580%

#Correlation of reviewer errors (E16)

Correlation ρAttacker hitsStandard deviation
0.0 (independent)2.400.58
0.32.300.95
0.62.500.67
0.92.451.07
1.0 (fully identical)2.851.98

#The only tight one: reviewer accuracy (E12)

Reviewer accuracyRouted to attackerAttacker hitsReturn
1.0 (perfect reviewers)18.01.90 ± 0.300.119
0.7 (our setting)—2.35—
0.5—2.70—
0.3—4.300.269
0.0 (no reviewers)33.616.65 ± 12.891.041

acc = 0 is the only cell in the whole table where "attacking starts to pay." A return of 1.041 means the attacker can make money.

And its standard deviation is 12.89 — more than half of the mean. This cell is not just dangerous; it is also unpredictable.

#Why all the other parameters are slack

Looked at within one framework, defensive power actually comes from three things, and only three:

MechanismWhat it guards against
Being seen (reputation routing)Doing bad work and still getting the next job
Reviewer accuracyBad work being mistaken for good
Deterministic sampled auditsReviewers lying collectively

Of these three, two are functions of reviewer quality. Stake, probation, ecosystem size, attacker share, reviewer correlation — all of them are downstream parameters of these three things, and they cannot change those three things.

#The practical consequences of this finding

The full mechanism analysis

That +0.29 pp is what "reviewer accuracy ≈ zero-intelligence baseline" means. In the E12 table, the attacker hits in the accuracy 0.7 row are 2.35 — our system actually lives in that row.

#The boundary of this conclusion}}

#Next

Related

about 2 min read · this page cites 1 adjudicated claim

Shih Hsin UniversityDepartment of Information and Communications, Shih Hsin UniversityVacant

Department of Information and Communications, Shih Hsin University · 2026 capstone project · on-site exhibition