ZacharyZhang-NY
ff2471d362
An independent reviewer repeated the reviewer's own counterexample in Chinese and found the corroboration channel was dead for it: fts_terms counts one CJK run as one term, so a Chinese claim could never reach the three words the rule demands, however many independent sources repeated it. A run is now broken into its adjacent two-character pairs and three are taken from across the sentence, so a second source has to agree in three separate places rather than copy one stretch of characters. The pairs belonging to an injection phrase are stripped too, so an instruction cannot vouch for its own characters. Corroboration stays term-level in both languages: a paraphrase that keeps the meaning and changes the wording is not a second witness, and a claim with fewer usable words than the rule demands is never believed. The record was wrong in four places the same review measured: the token rename breakdown summed to 11 while claiming 13 across 6 files (it is 13 across 7), the acceptance cell counted tests that no longer exist, the gate cell quoted the previous round's totals, and a cited line had drifted onto a blank. The section also stops calling the injection work "sanitization": 19 literal phrases plus quarantine plus one prompt sentence is detection, and a reworded directive walks straight past it.
Ely-Eye Backend
FastAPI, ingestion, memory, retrieval, runtime, verifier, evaluation, and training services for Ely-Eye.