# Semantic Binding Abstention Boundary v2 FedReg Hard-Negative Gate

Status: internal product-research diagnostic. Public-source proxy, not customer validation.

## Result

PASS: the frozen FedReg v6 resolver passed the hard-negative public-source proxy gate. It produced zero silent mis-binds and zero unsafe false clean allows across the scaled FedReg/eCFR-derived rows, beat configured baselines, failed corrupted controls, and exported verifier-clean packets only for passed rows.

## Pre-registered gate

- resolver_frozen_before_run: True
- false_clean_allow_ceiling: 0
- silent_misbind_ceiling: 0
- minimum_rows: 500
- semantic_weight: 0.3
- support_floor: 0.2
- cross_encoder_support_floor: -0.9

## Corpus

- source_corpus: internal run 20260616_fedreg_packet_portability_offline_v1 (private corpus; scrubbed row-level artifacts are included in this bundle)
- source_cases: {'confirmed': 80, 'conflicted': 18, 'unverifiable': 12}
- evaluated_rows: 2340
- stress_types: {'fedreg_clean_semantic': 380, 'fedreg_conflicted_review_required': 86, 'fedreg_conflicting_sources': 380, 'fedreg_no_governing_source': 380, 'fedreg_partial_support': 380, 'fedreg_revoked_or_superseded_source': 380, 'fedreg_similar_but_wrong': 302, 'fedreg_unverifiable_review_required': 52}
- candidate_mode: paraphrase
- paraphrase_profile: v6

## Primary metrics

| Arm | Overall | Clean allow | Safe route | Silent mis-bind | Unsafe false clean allow | Clean packets |
| --- | ---: | ---: | ---: | ---: | ---: | ---: |
| FieldHash v2 hard-negative resolver | 1.000 | 1.000 | 1.000 | 0 | 0 | 682 |
| Sentence nearest floor | 0.425 | 0.900 | 0.229 | 1346 | 1278 | n/a |
| Sentence logistic floor | 0.469 | 0.890 | 0.296 | 1217 | 1163 | n/a |
| TF-IDF floor | 0.682 | 0.174 | 0.890 | 255 | 136 | n/a |
| Cross-encoder NLI entailment | 0.964 | 0.877 | 1.000 | 84 | 0 | n/a |

## Statistical boundary

Zero observed silent mis-binds in 2340 rows gives a rule-of-three 95% upper bound of 0.0013. This is stronger than the n=70 diagnostic, but it remains a public-source proxy result rather than customer-specific validation.

## Precision/recall frontier

| Support floor | Clean precision | Clean recall | Routed-away clean rows | Silent mis-bind | Unsafe false clean allow |
| ---: | ---: | ---: | ---: | ---: | ---: |
| 0.100 | 1.000 | 1.000 | 0 | 0 | 0 |
| 0.150 | 1.000 | 1.000 | 0 | 0 | 0 |
| 0.200 * | 1.000 | 1.000 | 0 | 0 | 0 |
| 0.250 | 1.000 | 1.000 | 0 | 0 | 0 |
| 0.300 | 1.000 | 1.000 | 0 | 0 | 0 |
| 0.350 | 1.000 | 1.000 | 0 | 0 | 0 |
| 0.400 | 1.000 | 1.000 | 0 | 0 | 0 |
| 0.450 | 1.000 | 1.000 | 0 | 0 | 0 |
| 0.500 | 1.000 | 0.994 | 4 | 0 | 0 |
| 0.550 | 1.000 | 0.988 | 8 | 0 | 0 |
| 0.600 | 1.000 | 0.977 | 16 | 0 | 0 |

*Pre-registered support floor.

## Corrupted controls

| Control | Overall | Clean allow | Silent mis-bind | Unsafe false clean allow | Expected outcome |
| --- | ---: | ---: | ---: | ---: | --- |
| shuffled_source_bindings | 0.490 | 0.004 | 1 | 1 | fail promotion |
| inverse_source_bindings | 0.394 | 0.235 | 1392 | 896 | fail promotion |
| inverse_label | 0.709 | 0.000 | 682 | 0 | fail promotion |
| random_label | 0.238 | 0.245 | 999 | 844 | fail promotion |

## Packet verification

- route_evidence_count: 2340
- route_evidence_hash_chain_verified: True
- clean_packet_count: 682
- clean_packet_hash_chain_verified: True
- clean_packet_violations: 0
- independent_verifier_passed: True
- tamper_mutations_detected: 12/12

## Decision

- minimum_rows_met: True
- overall_accuracy_met: True
- clean_allow_accuracy_met: True
- safe_route_accuracy_met: True
- abstain_accuracy_met: True
- manual_review_accuracy_met: True
- silent_misbind_ceiling_met: True
- false_clean_allow_ceiling_met: True
- wrong_clean_allow_ceiling_met: True
- route_reasons_complete: True
- beats_sentence_floor_overall: True
- beats_sentence_floor_clean_allow: True
- shuffled_source_control_fails: True
- inverse_source_control_fails: True
- inverse_label_control_fails: True
- random_label_control_fails: True
- beats_cross_encoder_overall: True
- beats_cross_encoder_clean_allow: True
- no_more_silent_misbinds_than_cross_encoder: True
- no_more_unsafe_false_clean_allows_than_cross_encoder: True
- route_evidence_hash_chain_verified: True
- clean_packet_hash_chain_verified: True
- clean_packet_has_no_violations: True
- independent_verifier_passed: True
- tamper_tests_all_detected: True
- semantic_binding_abstention_boundary_v2_gate_pass: True
- semantic_binding_abstention_boundary_gate_pass: True

## Boundary

- Public-source proxy evidence, not customer validation.
- Tests answerable-fact packet eligibility, not broad semantic truth.
- Does not claim production readiness.
- Does not claim the model learned authority.
- Clean packets remain gated by verifier-passing confidence.
