VacantAn accountability layer for AIGitHub

· Defense axis · Overstated

Why "permanent exclusion" is really the product of two reasonable patches

Measured: of 368 penalized seeds, 0 returned to routing. We said "caught once = removed permanently" — but the real mechanism is not a clock; it is that slash both halves the mean and doubles the observation count, and the observation count is the exponential coefficient of the return time.

penaltiesmechanism simulationreputation

Here is the experimental result: across 368 simulation seeds that were actually penalized, 0 returned to routing.

Our conclusion was written as:

Caught once = removed permanently.

The phenomenon in that sentence is right, but the mechanistic explanation is wrong. And a wrong mechanistic explanation leads to a wrong fix, so it is worth tracking down to the end.

#First, how extreme it is

ParametersShare returning to routing
Current (f = 0.5, λ = 1)0 / 368
Move only the mean, not the observation count (λ = 0)214 / 368 (58.2%)
f = 0.7, λ = 0308 / 368
f = 0.7, λ = 10 / 368
f = 0.9, λ = 0309 / 368
f = 0.9, λ = 1308 / 368

#The closed form: not "a long wait," but "unreachable"

The penalty can be written in closed form as:

required observations ≥ exp( n' · ((target − mean') / c)² ) − 1

Taking m = 0.9, target = 0.95, c = 0.3, the total observations each setting needs (log₁₀) are:

n before the penaltyf = 0.5, λ = 0f = 0.5, λ = 1 (current)f = 0.9, λ = 0f = 0.9, λ = 1
11.214.830.090.13
33.629.650.280.34
1012.0626.540.951.07
4857.91118.224.545.07

#The real mechanism: three things hold at once

The main cause is the form in which slash is implemented:

β += (α + β) · (1/f − 1)        α unchanged

This form has two effects:

EffectResult
Halves the posterior meantarget − mean grows
Doubles the effective observation count nand n is the exponential coefficient of the return time

#Confirmed by measurement

Single-point measurement (seed p1, 800 rounds, f = 0.5):

Round of the penaltyScore after the penaltyObservation countReturned to routing afterwardsJobs received
λ = 0390.28870.7186after 10 rounds74 jobs
λ = 1 (current)390.28873.4373never (0 times in the remaining 761 rounds)0 jobs

Grid sweep (30 seeds × 600 rounds, blind spot 0):

SettingSustained attackers returnedRepentant attackers returned
f = 0.5, λ = 1 (current)0 / 190 / 21
f = 0.5, λ = 010 / 1910 / 21 (median 10 rounds)
f = 0.7, λ = 10 / 190 / 21
f = 0.9, λ = 017 / 1916 / 21
f = 0.9, λ = 117 / 1916 / 21 (return time about 55–182 rounds)

#Where "caught once = removed permanently" originally went wrong

What we originally based it on: of the 16 seeds that were caught, 16 were never routed again afterwards.

But the re-verification found this was confounded. The other 14 seeds in the same cell that were never caught stalled just the same — they stalled not because they were excluded, but because their scores were low and they were not picked.

The numbers after clean isolation (defect_budget = 1, 4,000 rounds):

SeedsHow far they ran
Not caught27 / 30ran to round 3,993 (the end)
Caught3 / 3zero routing over the following 3,961 rounds

And "permanent" is in fact conditional:

slash coefficientRound at which it returned to routing
0.9round 177
0.8round 520

#We made a decision

On 2026-08-17, the project explicitly decided to keep this behavior. The reason was written very directly:

The reason is "having seen 0/368 and 214/368."

#The general lesson of this case

#Next

Related

about 2 min read

Shih Hsin UniversityDepartment of Information and Communications, Shih Hsin UniversityVacant

Department of Information and Communications, Shih Hsin University · 2026 capstone project · on-site exhibition