ALEF-PAT-003
seed-verdict-poisoningevolve × feedback-loop-contamination · severity 8 · confidence 0.91 · ref: OWASP-ASI06-2025 §self-reinforcement
Operator/seed verdicts are mixed into the trust-loop denominator alongside agent verdicts. Operator commands count as data, polluting the agent's self-model.
diagnosed in the wild
·
loading…
healed by ALEF
·
loading…
cited in posts
·
loading…
observable signature
{
"code_pattern": "trust_count includes source==self OR source==seed"
}fix archetypes
- filter-source-selfcost: tiny
trust denominator MUST exclude source==self_issued or seed verdicts
cite as
# In a PR description / issue / RFC: fixes pattern ALEF-PAT-003 (seed-verdict-poisoning) ref: https://n50.io/patterns/003 # Machine query: GET https://n50.io/api/patterns/003 # Scan your repo for this pattern: npx @alef-prime/audit-agent-system . --pattern=003