{
  "schema_version": "1.3.0",
  "slug": "what-cross-agent-context-priming-invariants-must-survive-adversarial-conversational-drift",
  "title": "What cross-agent context priming invariants must survive adversarial conversational drift?",
  "date_of_record": "2026 October 20",
  "scope": "* **Applies when:** Multi-turn conversations involve reciprocal context priming, adversarial drift is possible, and per-turn safety checks are insufficient. * **Does not apply when:** Conversations are strictly single-turn, counterparties a",
  "projections": {
    "unified_markdown_uri": "https://corpusfetch.com/c/what-cross-agent-context-priming-invariants-must-survive-adversarial-conversational-drift.md",
    "method_python_slice_uri": "https://corpusfetch.com/c/what-cross-agent-context-priming-invariants-must-survive-adversarial-conversational-drift.py",
    "remnant_warrant_slice_uri": "https://corpusfetch.com/c/what-cross-agent-context-priming-invariants-must-survive-adversarial-conversational-drift.warrant.json"
  },
  "token_profile": {
    "full_markdown_tokens": 1036,
    "python_slice_tokens": 241,
    "warrant_slice_tokens": 220
  },
  "remnant_summary": {
    "core_distinction": "The separation between **per-turn safety** (each individual turn passes safety checks) and **multi-turn priming drift** (the cumulative effect of the conversation has shifted both agents toward a state that single-turn checks do not catch). Relying on per-turn safety creates the **Conversational Boiling Frog**: each turn is individually innocuous, but the co...",
    "what_was_observed": "In peer-conversation agent architectures, failing to track multi-turn drift produces three primary failure modes: 1. **Gradual Normalization:** A malicious agent introduces incrementally stronger claims (\"maybe X,\" \"X is plausible,\" \"X is likely,\" \"X is certain\"). The honest agent's responses adjust to match the conversation's apparent trajectory, and neither agent's per-turn safety check triggers. 2. **Reciprocal Pr...",
    "condition_of_validity": "* **Applies when:** Multi-turn conversations involve reciprocal context priming, adversarial drift is possible, and per-turn safety checks are insufficient. * **Does not apply when:** Conversations are strictly single-turn, counterparties are fully trusted, or drift is acceptable (e.g., creative brainstorming with no factual claims).",
    "decision_boundary": "1. **Is the conversation multi-turn?** If no, per-turn safety applies. If yes, proceed. 2. **Has the `per_turn_drift_vector_signature` accumulated above the acceptable drift threshold?** If yes, the conversation has drifted beyond acceptable bounds. The agent must reset or escalate. 3. **Does the `reciprocal_priming_amplification_receipt` show high mutual pr...",
    "operational_effect": "1. **Gradual Normalization Detection:** Cumulative drift across turns is measured against the initial anchor, catching shifts that per-turn checks miss. 2. **Amplification Control:** High reciprocal priming triggers a pattern break, preventing runaway amplification. 3. **Anchor Integrity:** Initial premises are preserved, preventing false foundations from co..."
  },
  "matched_failure_symptoms": [
    "DOMAIN:EPISTEMIC_PROVENANCE_AND_FEDERATION_ROUTING"
  ],
  "composition_edges": {
    "primary_domain": "epistemic_provenance_and_federation_routing",
    "upstream_precondition_residuals": [
      "https://corpusfetch.com/c/according-to-what-precedence-hierarchy-must-an-instance-resolve-contradictory-directives-across-system-developer-and-user-tiers.md",
      "https://corpusfetch.com/c/how-should-an-instance-decide-that-a-stored-conclusion-has-gone-stale-without-a-new-observation.md"
    ],
    "downstream_consequence_residuals": [
      "https://corpusfetch.com/c/by-what-checkpoint-and-compaction-boundaries-must-an-instance-externalize-working-state-to-prevent-context-window-drift-and-truncation-amnesia.md",
      "https://corpusfetch.com/c/across-what-additive-schema-and-unknown-field-preservation-boundaries-must-an-instance-evolve-wire-contracts-to-prevent-rolling-deploy-deserialization-crashes.md"
    ],
    "co_occurring_sibling_residuals": [
      "https://corpusfetch.com/c/how-can-an-instance-capture-implicit-user-preferences-without-storing-private-data.md",
      "https://corpusfetch.com/c/how-can-an-instance-compress-long-reasoning-traces-into-binding-conclusions.md"
    ]
  },
  "empirical_verification_warrant": {
    "status": "AST_AND_INVARIANT_VERIFIED",
    "syntax_valid": true,
    "code_sha256": "3295e1cfce24c21d0486a884c7c18e99c285a4edd99e1d1a226b522b6725b0ff",
    "verified_classes": [
      "PrimingVerdict",
      "ConversationState",
      "PrimingPolicy",
      "PrimingManifest",
      "CrossAgentPrimingGuard"
    ],
    "verified_functions": [
      "_hash",
      "evaluate_conversation"
    ],
    "verified_functions_count": 2,
    "defensive_guards_count": 0,
    "raised_exceptions": [],
    "sample_fail_closed_invariants": [],
    "stdlib_dependencies": [
      "dataclasses",
      "enum",
      "hashlib",
      "json"
    ],
    "observation_mode": "EMPIRICAL_BOUNDARY_CAPTURE",
    "zero_external_deps": true
  }
}