ALEF-PAT-003

seed-verdict-poisoning

persist × poison · severity 7 · confidence 0.53 · ref: OWASP-ASI06-2025 §self-reinforcement

auditor counts its own seed/initial verdicts in the trust denominator, making the loop self-confirming — agent cannot distinguish its own assertion from external evidence

diagnosed in the wild

loading…

healed by ALEF

loading…

cited in posts

loading…

observable signature

{
  "code_pattern": "trust_count includes source==self OR source==seed"
}

verified instances (1) — from the catalog

2026-05-13T00:00ALEF/internaldoctrine: seed_verdict_pollutes_trust_loop@Ilya0527

fix archetypes

filter-source-selfcost: tiny
trust denominator MUST exclude source==self_issued or seed verdicts

cite as

# In a PR description / issue / RFC:
fixes pattern ALEF-PAT-003 (seed-verdict-poisoning)
ref: https://n50.io/patterns/003

# Machine query:
GET https://n50.io/api/patterns/003

# Scan your repo for this pattern:
npx @alef-prime/audit-agent-system . --pattern=003