{
  "schema": "lri.security-evidence-chain-iterations.v1",
  "iteration_count": 5,
  "directory": "sources/evidence_chain_iterations",
  "rounds": [
    {
      "id": "round_01_claim_map",
      "title": "第 1 轮 · 证据链矩阵与主张边界",
      "goal": "把用户 JSON 的安全主张拆成“已引用论文、相关背景、待核验自证据”三类，避免把 MOLOT、PDG/FCD 和 Agent Gate 指标混在一起。",
      "markdown_path": "sources/evidence_chain_iterations/round_01_claim_map.md",
      "resource_card_ids": [
        "molot_system_card",
        "cerebro_behavior_sequence",
        "python_malware_benchmark",
        "npm_malicious_detection_benchmark",
        "oss_malicious_package_analysis",
        "backstabbers_knife_collection",
        "unveiling_malicious_logic",
        "llm_pypi_malicious_detection",
        "pdg_holmes_graph_siamese",
        "source_code_is_graph",
        "shap_unified_approach",
        "fcd_pdg_performance_unresolved"
      ],
      "claims": [
        {
          "claim": "MOLOT 是直接公开证据链，只能支撑 Python/JavaScript 包、SAST、行为序列、SHAP 定位等主张。",
          "support": [
            "molot_system_card"
          ],
          "decision": "可升级为 direct_public_evidence，但需继续抽表。"
        },
        {
          "claim": "CEREBRO、PyPI/NPM benchmark、OSS malicious packages 等资料支撑供应链恶意包检测背景。",
          "support": [
            "cerebro_behavior_sequence",
            "python_malware_benchmark",
            "npm_malicious_detection_benchmark",
            "oss_malicious_package_analysis",
            "backstabbers_knife_collection",
            "unveiling_malicious_logic",
            "llm_pypi_malicious_detection"
          ],
          "decision": "可作为 related/baseline evidence，不直接替代 MOLOT 指标。"
        },
        {
          "claim": "PDG/HOLMES、CodeGraph 和 SHAP 支撑图结构相似检测与解释链，但不是 FCD 性能表直接来源。",
          "support": [
            "pdg_holmes_graph_siamese",
            "source_code_is_graph",
            "shap_unified_approach"
          ],
          "decision": "只作为背景证据，FCD 表继续待核验。"
        },
        {
          "claim": "c-ares/jasper/openssl/rsync 的 FCD 表目前只来自用户 JSON。",
          "support": [
            "fcd_pdg_performance_unresolved"
          ],
          "decision": "必须保留 unresolved_user_json_claim。"
        }
      ],
      "citation_refs": [
        {
          "card_id": "molot_system_card",
          "reference": "https://arxiv.org/abs/2606.07792"
        },
        {
          "card_id": "cerebro_behavior_sequence",
          "reference": "https://arxiv.org/abs/2309.02637"
        },
        {
          "card_id": "python_malware_benchmark",
          "reference": "https://arxiv.org/abs/2209.13288"
        },
        {
          "card_id": "npm_malicious_detection_benchmark",
          "reference": "https://arxiv.org/abs/2603.27549"
        },
        {
          "card_id": "oss_malicious_package_analysis",
          "reference": "https://arxiv.org/abs/2404.04991"
        },
        {
          "card_id": "backstabbers_knife_collection",
          "reference": "https://arxiv.org/abs/2005.09535"
        },
        {
          "card_id": "unveiling_malicious_logic",
          "reference": "https://arxiv.org/abs/2512.12559"
        },
        {
          "card_id": "llm_pypi_malicious_detection",
          "reference": "https://arxiv.org/abs/2504.13769"
        },
        {
          "card_id": "pdg_holmes_graph_siamese",
          "reference": "https://arxiv.org/abs/2011.11228"
        },
        {
          "card_id": "source_code_is_graph",
          "reference": "https://arxiv.org/abs/2312.16488"
        },
        {
          "card_id": "shap_unified_approach",
          "reference": "https://arxiv.org/abs/1705.07874"
        },
        {
          "card_id": "fcd_pdg_performance_unresolved",
          "reference": "user_provided_json"
        }
      ]
    },
    {
      "id": "round_02_molot_chain",
      "title": "第 2 轮 · MOLOT 直接证据链补强",
      "goal": "把 MOLOT 从“模型名称”拆为 SAST 场景、静态调用图、行为序列、BERT 分类、SHAP 定位、benchmark 和 moderation workflow 约束。",
      "markdown_path": "sources/evidence_chain_iterations/round_02_molot_chain.md",
      "resource_card_ids": [
        "molot_system_card",
        "cerebro_behavior_sequence",
        "shap_unified_approach"
      ],
      "claims": [
        {
          "claim": "MOLOT 的核心检测信号来自静态调用图派生的 behavior sequences。",
          "support": [
            "molot_system_card",
            "cerebro_behavior_sequence"
          ],
          "decision": "映射到 LRI 的 code_snippet/package/file 静态扫描字段。"
        },
        {
          "claim": "MOLOT 的可解释性不是附加 UI，而是审核链路：suspicious behavior activities → source-code locations。",
          "support": [
            "molot_system_card",
            "shap_unified_approach"
          ],
          "decision": "映射到 reviewer_evidence_schema 的 activity_chain 与 source_locations。"
        },
        {
          "claim": "MOLOT 仍需要抽取 dataset、baseline、runtime、memory、FPR 等表。",
          "support": [
            "molot_system_card"
          ],
          "decision": "加入 molot_extraction_cards 的 P0 任务。"
        }
      ],
      "citation_refs": [
        {
          "card_id": "molot_system_card",
          "reference": "https://arxiv.org/abs/2606.07792"
        },
        {
          "card_id": "cerebro_behavior_sequence",
          "reference": "https://arxiv.org/abs/2309.02637"
        },
        {
          "card_id": "shap_unified_approach",
          "reference": "https://arxiv.org/abs/1705.07874"
        }
      ]
    },
    {
      "id": "round_03_supply_chain_benchmark_chain",
      "title": "第 3 轮 · 供应链 Benchmark 与恶意包生命周期证据链",
      "goal": "用 PyPI/NPM benchmark、OSS 恶意包分析、攻击树和 statement-level taxonomy 补齐“为什么 LRI 不能只做包名/规则扫描”。",
      "markdown_path": "sources/evidence_chain_iterations/round_03_supply_chain_benchmark_chain.md",
      "resource_card_ids": [
        "python_malware_benchmark",
        "npm_malicious_detection_benchmark",
        "oss_malicious_package_analysis",
        "backstabbers_knife_collection",
        "unveiling_malicious_logic",
        "llm_pypi_malicious_detection",
        "cerebro_behavior_sequence"
      ],
      "claims": [
        {
          "claim": "恶意包检测需要极低误报预算，block 与 ask_human 不能混用。",
          "support": [
            "python_malware_benchmark"
          ],
          "decision": "evaluation_protocol_matrix 增加 operational cost / FPR budget。"
        },
        {
          "claim": "NPM/PyPI 风险需要行为链建模，而非单个 API 或关键词。",
          "support": [
            "npm_malicious_detection_benchmark",
            "cerebro_behavior_sequence"
          ],
          "decision": "malicious_activity_taxonomy 用 activity chain 而非孤立 token。"
        },
        {
          "claim": "真实恶意包生命周期和攻击活动上下文需要多源证据池。",
          "support": [
            "oss_malicious_package_analysis",
            "backstabbers_knife_collection"
          ],
          "decision": "resource_cards 与 reviewer_evidence_schema 增加 campaign/context 字段候选。"
        },
        {
          "claim": "statement-level taxonomy 能把模型定位结果转成可命名的审核指标。",
          "support": [
            "unveiling_malicious_logic",
            "llm_pypi_malicious_detection"
          ],
          "decision": "后续抽取 indicator taxonomy，映射到 LRI activity_chain。"
        }
      ],
      "citation_refs": [
        {
          "card_id": "python_malware_benchmark",
          "reference": "https://arxiv.org/abs/2209.13288"
        },
        {
          "card_id": "npm_malicious_detection_benchmark",
          "reference": "https://arxiv.org/abs/2603.27549"
        },
        {
          "card_id": "oss_malicious_package_analysis",
          "reference": "https://arxiv.org/abs/2404.04991"
        },
        {
          "card_id": "backstabbers_knife_collection",
          "reference": "https://arxiv.org/abs/2005.09535"
        },
        {
          "card_id": "unveiling_malicious_logic",
          "reference": "https://arxiv.org/abs/2512.12559"
        },
        {
          "card_id": "llm_pypi_malicious_detection",
          "reference": "https://arxiv.org/abs/2504.13769"
        },
        {
          "card_id": "cerebro_behavior_sequence",
          "reference": "https://arxiv.org/abs/2309.02637"
        }
      ]
    },
    {
      "id": "round_04_pdg_shap_graph_chain",
      "title": "第 4 轮 · PDG / Graph / SHAP 解释链边界",
      "goal": "补强 PDG/graph clone detection 和 SHAP 解释的引用，同时明确它们不能直接证明 FCD C/C++ 表。",
      "markdown_path": "sources/evidence_chain_iterations/round_04_pdg_shap_graph_chain.md",
      "resource_card_ids": [
        "pdg_holmes_graph_siamese",
        "source_code_is_graph",
        "shap_unified_approach",
        "fcd_pdg_performance_unresolved",
        "molot_system_card"
      ],
      "claims": [
        {
          "claim": "PDG/HOLMES 支撑语义代码 clone detection，可作为源码/二进制相似片段检测背景。",
          "support": [
            "pdg_holmes_graph_siamese"
          ],
          "decision": "作为 PDG/FCD 第二检测面的 background evidence。"
        },
        {
          "claim": "图表示能补充序列表示在跨语言 clone detection 中的弱点。",
          "support": [
            "source_code_is_graph"
          ],
          "decision": "Graph chain 不等同于恶意包行为序列链。"
        },
        {
          "claim": "SHAP 支撑解释字段，但解释不是因果证明，不能单独决定 block。",
          "support": [
            "shap_unified_approach",
            "molot_system_card"
          ],
          "decision": "解释字段必须和 policy_decision、source_locations、reviewer_action 绑定。"
        },
        {
          "claim": "FCD C/C++ 表仍无公开 URL。",
          "support": [
            "fcd_pdg_performance_unresolved"
          ],
          "decision": "保持 unresolved，禁止升级。"
        }
      ],
      "citation_refs": [
        {
          "card_id": "pdg_holmes_graph_siamese",
          "reference": "https://arxiv.org/abs/2011.11228"
        },
        {
          "card_id": "source_code_is_graph",
          "reference": "https://arxiv.org/abs/2312.16488"
        },
        {
          "card_id": "shap_unified_approach",
          "reference": "https://arxiv.org/abs/1705.07874"
        },
        {
          "card_id": "fcd_pdg_performance_unresolved",
          "reference": "user_provided_json"
        },
        {
          "card_id": "molot_system_card",
          "reference": "https://arxiv.org/abs/2606.07792"
        }
      ]
    },
    {
      "id": "round_05_gate_and_upgrade_policy",
      "title": "第 5 轮 · Agent Gate 落地与证据升级策略",
      "goal": "将证据链结果转成可执行 gate、可回放 MVP 用例、引用完整性校验和 evidence promotion policy。",
      "markdown_path": "sources/evidence_chain_iterations/round_05_gate_and_upgrade_policy.md",
      "resource_card_ids": [
        "molot_system_card",
        "python_malware_benchmark",
        "npm_malicious_detection_benchmark",
        "shap_unified_approach",
        "fcd_pdg_performance_unresolved"
      ],
      "claims": [
        {
          "claim": "LRI 需要的不是单模型复现，而是 allow/warn/block/ask_human 的安全决策系统。",
          "support": [
            "molot_system_card",
            "python_malware_benchmark",
            "shap_unified_approach"
          ],
          "decision": "security_gate_contract 作为工程主线。"
        },
        {
          "claim": "所有资源卡必须至少具备公网 URL 或 self/user reference。",
          "support": [
            "molot_system_card",
            "fcd_pdg_performance_unresolved"
          ],
          "decision": "validate_security_resource_cards.py 已强制检查。"
        },
        {
          "claim": "证据升级必须满足 primary_public_url + markdown_card + machine_registry_pointer + workbench_pointer。",
          "support": [
            "molot_system_card"
          ],
          "decision": "形成 evidence_promotion_policy。"
        },
        {
          "claim": "FCD/PDG 性能表升级需要找到原始论文/报告 URL。",
          "support": [
            "fcd_pdg_performance_unresolved"
          ],
          "decision": "保留 P0 查证任务。"
        }
      ],
      "citation_refs": [
        {
          "card_id": "molot_system_card",
          "reference": "https://arxiv.org/abs/2606.07792"
        },
        {
          "card_id": "python_malware_benchmark",
          "reference": "https://arxiv.org/abs/2209.13288"
        },
        {
          "card_id": "npm_malicious_detection_benchmark",
          "reference": "https://arxiv.org/abs/2603.27549"
        },
        {
          "card_id": "shap_unified_approach",
          "reference": "https://arxiv.org/abs/1705.07874"
        },
        {
          "card_id": "fcd_pdg_performance_unresolved",
          "reference": "user_provided_json"
        }
      ]
    }
  ]
}