Four Core Principles
Core Principles v2.0Version 2.0 · · Governance 2.0 public evidence surface
Governance 2.0 Overview
This page is part of the starnum public Governance 2.0 surface and uses the same evidence layer as the system card, data governance, transparency report, use policy, and security policy.
Governance Summary
This page states the operating principles that govern product, content, AI assistance, and public disclosure.
Scope
Cultural respect, autonomy, transparency, privacy, safety, accessibility, and evidence-backed release discipline.
Implementation Status
Version 2.0 turns the principles into a navigation hub connected to the same evidence layer as the policy pages.
This is the operating framework of starnum.com.tw. Every principle maps to a concrete technical implementation — not just a statement.
Last updated:
Implemented Technical Practices
- ✓Methodology page (10 languages) — complete documentation of knowledge sources, chart engine, and quality workflow
- ✓System Card (Model Card) — the applicable/non-applicable scope and known limits of Starnum Logic Engine v5.0
- ✓Quality benchmark — evaluation results on a fixed 37-chart test set, re-run periodically for public comparison
- ✓CHANGELOG — detailed record of each system update, following the Keep a Changelog format
- ✓Explicit school-of-thought declaration — the entire site uses the Lu Binzhao (Zhongzhou) school; no mixing, clearly marked on the model card
- ✓Explicit limitation statement — forbidden domains (death prediction, medical diagnosis, political figures) are published on the acceptable-use page
- ✓Claim-Evidence system — every metaphysics claim in every article is tagged to a knowledge-base source; no assertions out of thin air
- ✓Security disclosure policy — RFC 9116 standard, with public 30/60/90-day tiered remediation timelines
Implemented Technical Practices
- ✓SHA256 content-integrity hash — each article embeds a SHA256 value injected into the JSON-LD
hasHashfield, so any content change is detectable - ✓iztro open-source chart engine — the chart calculation logic is fully open source; any researcher can independently verify chart results
- ✓Machine-readable JSON-LD Schema — every article's Schema is validated by automation and conforms to schema.org
- ✓Public benchmark set (eval-set) — reference analyses for 37 fixed test charts, reproducible and verifiable
- ✓Git version history — Git version control maintains complete change history, fully traceable
- ✓Automated validation of 117 metaphysics hard rules — enforced before publication; any violation blocks the release
- ✓Multi-model cross-validation — metaphysics logic reviewed in parallel by 4 AI tools; any anomaly flags the article for re-review
- ✓Dependency vulnerability scanning — local tools periodically scan npm dependencies to ensure third-party package security
Implemented Technical Practices
- ✓Lu Binzhao knowledge base — 2,758 files / 1,537,711+ lines of structured metaphysics text, cross-referenced across 8 sources to build a reliable literature basis
- ✓School consistency statement — the entire site uses the Zhongzhou (Lu Binzhao) Four-Transformation table; no mixing schools for layout convenience
- ✓Classical source citations — major claims are explicitly attributed to named works such as the Zi Wei Dou Shu Quan Shu series
- ✓multi-provider governance audit — Anthropic / OpenAI / Google Gemini governance benchmarks review metaphysics logic in parallel; fixes are decided by vote
- ✓117 metaphysics hard rules — core rules such as impossible Four-Transformation events and pattern-judgment conditions are machine-enforced
- ✓GraphRAG knowledge graph — 343 entity nodes / 679 relationships, anchoring each claim in a consistent structural position
- ✓Author credentials — metaphysics research background and rationale for the chosen knowledge system are published on the about page
- ✓22 standard analysis blocks — each chart reading follows a fixed structure, ensuring completeness and consistency
Implemented Technical Practices
- ✓Automated quality workflows — quality checks, sitemap updates, credential-expiry monitoring, and more, all fully automated
- ✓Rule lifecycle management — rules untouched for 90 days are auto-proposed for retirement, preventing unbounded rule-base growth
- ✓Failure-driven evolution — when a class of quality issue occurs 3 times, a new rule is auto-proposed; mistakes never repeat
- ✓Six-layer quality closed loop (L1–L6) — automated defenses from article output up to strategy, each layer reducing manual intervention
- ✓Content freshness tracking — stale articles are auto-detected and queued for refresh, maintaining long-term validity
- ✓Resource-cap protection — GPU lockfile prevents out-of-memory failures, ensuring stable long-running operation
- ✓Credential-expiry tracking — API keys and service credentials trigger alerts before they expire, avoiding outages
- ✓Low-compute design — Cloudflare Pages static hosting plus Workers edge compute, operating costs stay controlled
How We Resolve Principle Conflicts
When the four principles conflict, we prioritize in this order:
P3 Authoritative > P1 Public & Transparent > P2 Verifiable > P4 Sustainable
In other words: any feature that reduces content accuracy (P3) will not ship — even if it improves transparency (P1) or efficiency (P4).
Resolution Examples
- P4 vs P3: An automation feature boosts efficiency but might introduce metaphysics-logic errors → P3 wins, feature does not ship until logic is verified
- P1 vs P4: Publishing certain internal data improves transparency but adds maintenance cost → P1 wins, we absorb the cost
- P2 vs P4: Adding a validation mechanism slows the system down → P2 wins, validation is non-skippable
Feature × Principle Matrix
Every core feature must map to at least 2 principles; otherwise its necessity is re-evaluated.
| Feature | P1 Transparent | P2 Verifiable | P3 Authoritative | P4 Sustainable |
|---|---|---|---|---|
| SHA256 content hash | ✓ | ✓ | — | ✓ |
| Claim-Evidence citation system | ✓ | ✓ | ✓ | — |
| multi-provider governance audit | ✓ | ✓ | ✓ | ✓ |
| Lu Binzhao knowledge base (KB) | ✓ | ✓ | ✓ | ✓ |
| 117 metaphysics hard rules | ✓ | ✓ | ✓ | ✓ |
| iztro open-source chart engine | ✓ | ✓ | ✓ | — |
| Automated quality workflows | — | ✓ | — | ✓ |
| Public benchmark (eval-set) | ✓ | ✓ | ✓ | — |
| Rule lifecycle management | — | — | ✓ | ✓ |
Related Transparency Resources
These resources show how the four principles are implemented at every layer:
External standards and primary sources
These primary sources inform this page. They are benchmarks, not third-party endorsements of this site.
Current Machine Audit Snapshot
This block uses only traceable local audit data. No unsupported metrics or model claims are added.
- data/state-machine/i18n-parity.json: 8,036 parent URLs, 7,976 articles.
- data/kb-machine-audit.json: 3,238 source files, 0 missing coverage, 0 orphan chunks.
- data/discovery-surface-audit.json: 0 errors, 0 warnings.
- data/sla-report.json: critical / 5 critical, 0 warnings.
Content Maintenance And Update Decision
This block makes governance-page content machine-checkable: every page must disclose its source artifacts, related pages, and the gate that reports update needs.
Update Decision
This is not static copy. When source artifacts, related policies, public metrics, or generators change, AI Ops reports evidence and an AI agent decides whether the page needs edits.
Human Boundary
Systems detect, report, and preserve machine-readable evidence. Codex/Claude agents perform final judgment and repair.
Verification Command
node scripts/verify-trust-pages.js --check
data/state-machine/trust-pages.jsondata/public-claim-registry.jsondata/sla-report.json- Related governance pages: Ethics Statement · Privacy Policy · AI Safety · Accessibility
- Update flow:
npm run update:trust-pages→npm run test:trust
Verifiable Evidence Layer
This block is not a narrative claim. Each core assertion has a claim id, source JSON, hash, and a repeatable verification command. Public pages disclose governance evidence without exposing source code, secrets, private data, or exploitable attack details.
| Claim ID | Verifiable value | Status | Owner | Source and verification |
|---|---|---|---|---|
| claim.public-url-manifest.indexable-count Public URL and canonical inventory |
38,965 indexable URLs | verified | sitewide | node scripts/generate-public-evidence-manifest.js --dry |
| claim.trust-pages.audit-pass-rate Trust page machine audit |
180/180 pass | verified | sitewide | node scripts/verify-trust-pages.js --check |
| claim.discovery-surface.zero-errors AI discovery surface audit |
{"errors":0,"warnings":0} | verified | sitewide | node scripts/verify-discovery-surface.js |
| claim.structured-data.jsonld-errors JSON-LD / structured data audit |
{"structured_data_invalid_files":0,"breadcrumb_count":28274,"faq_count":27506,"dataset_count":30,"article_count":27406} | verified | sitewide | node scripts/site-machine-audit.js |
| claim.status.sla-state Status page SLA source |
critical / 5 critical, 0 warnings | verified | sitewide | node scripts/generate-status-page.js |
| claim.provider-alignment.openai-anthropic-gemini OpenAI / Anthropic / Google Gemini benchmark alignment |
benchmark alignment only unless code/config evidence exists | verified | sitewide | node scripts/verify-public-evidence.js --check |
| claim.transparency-report.sha256 Transparency report SHA-256 anchor |
{"report":"transparency/report-2026-Q3.json","sha256":"47b09e2ca4e8b8fe9dffdfaccef3b11212de9ee3a8a14badca8044e2481203c5"} | verified | sitewide | node scripts/update-transparency-current-data.js |
| claim.release-integrity.gpg-signing GPG signing status |
GPG signing configured locally; GitHub verification pending | github_verification_pending | sitewide | gpg --list-secret-keys --keyid-format=long && git log -1 --show-signature |
System Card V2.0: Technical Transparency Layer
This layer publishes the technical governance evidence that can be safely disclosed: architecture, data sources, AI-use boundaries, quality gates, release integrity, and provider alignment. Source code, secrets, exploitable attack details, and private data remain out of scope.
Public architecture
Cloudflare Pages/Workers, R2/D1/KV/Pagefind, and local generation scripts form the public-site and governance publication chain. Public pages disclose behavior, state, and traceable sources, not secrets or internal permissions.
AI-use disclosure
AI-assisted workflows are used for knowledge-base retrieval, cross-checking, and error detection. Governance documents are benchmarked against OpenAI, Anthropic, and Google Gemini public frameworks. Production model usage is disclosed only when code/config evidence exists.
Quality and safety gates
Governance page audit 180/180 passing, JSON-LD errors 0, discovery-surface errors 0. Status pages report critical / 5 critical, 0 warnings as-is.
Data traceability
Knowledge base 32,724 chunks, TM 789,031 entries, AI answer-ready 7,976/7,976. Public metrics trace to data/state-machine/*, data/*audit*.json, and transparency reports.
| Governance area | OpenAI | Anthropic | Google Gemini | Starnum implementation evidence |
|---|---|---|---|---|
| Model/system-card disclosure | OpenAI models + safety docs | Claude model docs + system/model cards | Gemini model docs + safety settings | system-card, model-card, methodology, benchmark, transparency-log |
| Safety evaluation and use boundaries | Safety best practices / deployment checklist | Responsible Scaling / safety policy | Gemini safety controls / policy | AI safety, acceptable-use, ethics, risk-boundary copy, crawler policy audit |
| Data governance | Data controls / privacy controls | privacy and data handling docs | Gemini API data governance references | privacy, ai-data-governance, KB/TM source tracking, SHA-256 hashes |
| Monitoring and release | production checklist / eval discipline | system-card transparency discipline | model/version documentation discipline | deploy.js, status.html, SLA report, trust-pages-machine-audit, sitemap/hreflang audits |
- Sources: data/state-machine/model-card.json, public-bench.json, trust-pages.json, security-headers.json.
- Sources: data/trust-pages-machine-audit.json, data/discovery-surface-audit.json, data/ai-answer-readiness-audit.json.
- Sources: data/kb-machine-audit.json, data/tm/quality-audit-report.json, data/sla-report.json.
- Official benchmark docs checked: 2026-07-30; links are listed in the OpenAI / Anthropic / Google Gemini alignment table.
The V2.0 goal is not more claims; it separates implemented controls from planned controls. Production usage, benchmark alignment, status exceptions, GPG signing, and SLA breaches are disclosed from source data.
Release Integrity And GPG
GPG signing configured locally. signingkey=0934DFA0EDA6363A. GitHub verification pending until the public key upload and Verified badge are confirmed.
OpenAI / Anthropic / Google Gemini Alignment
The governance surface is benchmarked against the three public frameworks: model docs, system/model cards, safety evaluation, data governance, and use policies. This is benchmark alignment, not a claim that every provider is active in production inference. Official docs checked: 2026-07-30
| Provider | Governance focus | Starnum disclosure | Official source |
|---|---|---|---|
| OpenAI | Model documentation, latest model notes, safety best practices, and data controls. | No verifiable production model setting was found in the production code scan; providers are listed as governance benchmarks. | https://platform.openai.com/docs/models |
| Anthropic | Claude model documentation, system/model cards, Responsible Scaling, and safety policy. | No verifiable production model setting was found in the production code scan; providers are listed as governance benchmarks. | https://docs.anthropic.com/en/docs/about-claude/models |
| Google Gemini | Gemini API model documentation, safety settings, data governance, and platform policy. | No verifiable production model setting was found in the production code scan; providers are listed as governance benchmarks. | https://ai.google.dev/gemini-api/docs/models |