Empat Prinsip Teras
Core Principles v2.0Version 2.0 · · Governance 2.0 public evidence surface
Governance 2.0 Overview
This page is part of the starnum public Governance 2.0 surface and uses the same evidence layer as the system card, data governance, transparency report, use policy, and security policy.
Governance Summary
This page states the operating principles that govern product, content, AI assistance, and public disclosure.
Scope
Cultural respect, autonomy, transparency, privacy, safety, accessibility, and evidence-backed release discipline.
Implementation Status
Version 2.0 turns the principles into a navigation hub connected to the same evidence layer as the policy pages.
Inilah rangka kerja operasi starnum.com.tw. Setiap prinsip dipadankan dengan pelaksanaan teknikal konkrit — bukan sekadar kenyataan.
Kemas kini terakhir:
Pelaksanaan Teknikal Yang Sudah Ada
- ✓Halaman metodologi (10 bahasa) — dokumentasi lengkap sumber pengetahuan, enjin carta, dan aliran kualiti
- ✓Kad Sistem (Model Card) — skop terpakai/tidak terpakai dan batasan yang diketahui Starnum Logic Engine v5.0
- ✓Tanda aras kualiti — keputusan penilaian pada set ujian tetap 37 carta, dijalankan semula secara berkala untuk perbandingan awam
- ✓CHANGELOG — rekod terperinci setiap kemas kini sistem, mengikut format Keep a Changelog
- ✓Pengisytiharan aliran eksplisit — seluruh laman menggunakan aliran Lu Binzhao (Zhongzhou); tanpa percampuran, ditandai jelas pada kad sistem
- ✓Pengisytiharan batasan eksplisit — domain terlarang (ramalan kematian, diagnosis perubatan, tokoh politik) diterbitkan di halaman acceptable-use
- ✓Sistem Claim-Evidence — setiap dakwaan metafizik dalam setiap artikel ditanda ke sumber pangkalan pengetahuan; tiada dakwaan tanpa asas
- ✓Polisi pendedahan keselamatan — standard RFC 9116, dengan garis masa pembaikan berperingkat 30/60/90 hari diumumkan
Pelaksanaan Teknikal Yang Sudah Ada
- ✓Hash integriti kandungan SHA256 — setiap artikel membenamkan nilai SHA256 yang disuntik ke medan
hasHashJSON-LD, membolehkan sebarang perubahan dikesan - ✓Enjin carta sumber terbuka iztro — logik pengiraan carta sepenuhnya sumber terbuka; mana-mana penyelidik boleh mengesahkan hasil secara bebas
- ✓Schema JSON-LD boleh dibaca mesin — Schema setiap artikel disahkan oleh automasi dan mematuhi schema.org
- ✓Set tanda aras awam (eval-set) — analisis rujukan untuk 37 carta ujian tetap, boleh dihasilkan semula dan disahkan
- ✓Sejarah versi Git — setiap perubahan kandungan disimpan di repositori awam GitHub, sepenuhnya boleh dijejaki
- ✓Pengesahan automatik 117 peraturan keras metafizik — dikuatkuasakan sebelum penerbitan; sebarang pelanggaran menyekat pelepasan
- ✓Pengesahan silang berbilang model — logik metafizik disemak secara selari oleh 4 alat AI; sebarang anomali menandakan artikel untuk semakan semula
- ✓Pengimbasan kerentanan kebergantungan — alat tempatan mengimbas kebergantungan npm secara berkala untuk memastikan keselamatan pakej pihak ketiga
Pelaksanaan Teknikal Yang Sudah Ada
- ✓Pangkalan pengetahuan Lu Binzhao — 2,758 fail / 1,537,711+ baris teks metafizik berstruktur, dirujuk silang merentas 8 sumber untuk membina asas kesusasteraan yang boleh dipercayai
- ✓Pengisytiharan ketekalan aliran — seluruh laman menggunakan jadual Empat Transformasi Zhongzhou (Lu Binzhao); tidak mencampurkan aliran untuk kemudahan susun atur
- ✓Petikan sumber klasik — dakwaan penting secara eksplisit dikaitkan dengan karya bernama seperti siri Zi Wei Dou Shu Quan Shu
- ✓Audit bersama 4 AI — Anthropic / OpenAI / Google Gemini governance benchmarks menyemak logik metafizik secara selari; pembaikan diputuskan melalui undi
- ✓117 peraturan keras metafizik — peraturan teras seperti peristiwa mustahil Empat Transformasi dan syarat penentuan corak dikuatkuasakan oleh mesin
- ✓Graf pengetahuan GraphRAG — 343 nod entiti / 679 hubungan, meletakkan setiap dakwaan pada kedudukan struktur yang konsisten
- ✓Kelayakan penulis — latar belakang penyelidikan metafizik dan justifikasi pemilihan sistem pengetahuan diterbitkan di halaman about
- ✓22 blok analisis standard — setiap pembacaan carta mengikut struktur tetap, memastikan kelengkapan dan ketekalan
Pelaksanaan Teknikal Yang Sudah Ada
- ✓Aliran kerja kualiti automatik — pemeriksaan kualiti, kemas kini peta laman, pemantauan tamat tempoh kelayakan, dan lain-lain, sepenuhnya automatik
- ✓Pengurusan kitaran hayat peraturan — peraturan yang tidak dicetuskan selama 90 hari dicadangkan secara automatik untuk disingkirkan, menghalang pertumbuhan asas peraturan tanpa had
- ✓Evolusi dipacu kegagalan — apabila kelas masalah kualiti berlaku 3 kali, peraturan baharu dicadangkan secara automatik; kesilapan tidak berulang
- ✓Gelung tertutup kualiti enam lapis (L1-L6) — pertahanan automatik dari output artikel hingga strategi, setiap lapisan mengurangkan campur tangan manual
- ✓Penjejakan kesegaran kandungan — artikel usang dikesan secara automatik dan diberikan giliran penyegaran, mengekalkan kesahihan jangka panjang
- ✓Perlindungan had sumber — lockfile GPU mengelakkan kegagalan out-of-memory, memastikan operasi jangka panjang yang stabil
- ✓Penjejakan tamat tempoh kelayakan — kunci API dan kelayakan perkhidmatan mencetuskan amaran sebelum tamat tempoh, mengelakkan gangguan perkhidmatan
- ✓Reka bentuk pengkomputeran kos rendah — pengehosan statik Cloudflare Pages ditambah pengkomputeran pinggir Workers; kos operasi terkawal
Bagaimana Kami Menyelesaikan Konflik Prinsip
Apabila empat prinsip berkonflik, kami memberi keutamaan mengikut susunan ini:
P3 Berwibawa > P1 Ketelusan Awam > P2 Boleh Disahkan > P4 Lestari
Iaitu: sebarang ciri yang mengurangkan ketepatan kandungan (P3) tidak akan dilancarkan — walaupun ia meningkatkan ketelusan (P1) atau kecekapan (P4).
Contoh Penyelesaian
- P4 vs P3: Satu ciri automasi meningkatkan kecekapan tetapi mungkin memperkenalkan ralat logik metafizik → P3 menang, ciri tidak dilancarkan sehingga logik disahkan
- P1 vs P4: Menerbitkan data dalaman tertentu meningkatkan ketelusan tetapi menambah kos penyelenggaraan → P1 menang, kami menanggung kosnya
- P2 vs P4: Menambah mekanisme pengesahan memperlahankan sistem → P2 menang, pengesahan tidak boleh dilangkau
Matriks Ciri × Prinsip
Setiap ciri teras mesti dipetakan ke sekurang-kurangnya 2 prinsip; jika tidak, keperluannya dinilai semula.
| Ciri | P1 Telus | P2 Sah | P3 Wibawa | P4 Lestari |
|---|---|---|---|---|
| Hash kandungan SHA256 | ✓ | ✓ | — | ✓ |
| Sistem petikan Claim-Evidence | ✓ | ✓ | ✓ | — |
| Audit tadbir urus berbilang penyedia | ✓ | ✓ | ✓ | ✓ |
| Pangkalan pengetahuan Lu Binzhao (KB) | ✓ | ✓ | ✓ | ✓ |
| 117 peraturan keras metafizik | ✓ | ✓ | ✓ | ✓ |
| Enjin carta sumber terbuka iztro | ✓ | ✓ | ✓ | — |
| Aliran kerja kualiti automatik | — | ✓ | — | ✓ |
| Tanda aras awam (eval-set) | ✓ | ✓ | ✓ | — |
| Pengurusan kitaran hayat peraturan | — | — | ✓ | ✓ |
Sumber Ketelusan Berkaitan
Sumber-sumber ini menunjukkan bagaimana empat prinsip dilaksanakan di setiap lapisan:
Piawaian luaran dan sumber primer
Sumber primer ini memaklumkan halaman ini. Ia ialah penanda aras, bukan sokongan pihak ketiga terhadap laman ini.
Current Machine Audit Snapshot
This block uses only traceable local audit data. No unsupported metrics or model claims are added.
- data/state-machine/i18n-parity.json: 8,036 parent URLs, 7,976 articles.
- data/kb-machine-audit.json: 3,238 source files, 0 missing coverage, 0 orphan chunks.
- data/discovery-surface-audit.json: 0 errors, 0 warnings.
- data/sla-report.json: critical / 5 critical, 0 warnings.
Content Maintenance And Update Decision
This block makes governance-page content machine-checkable: every page must disclose its source artifacts, related pages, and the gate that reports update needs.
Update Decision
This is not static copy. When source artifacts, related policies, public metrics, or generators change, AI Ops reports evidence and an AI agent decides whether the page needs edits.
Human Boundary
Systems detect, report, and preserve machine-readable evidence. Codex/Claude agents perform final judgment and repair.
Verification Command
node scripts/verify-trust-pages.js --check
data/state-machine/trust-pages.jsondata/public-claim-registry.jsondata/sla-report.json- Related governance pages: Ethics Statement · Privacy Policy · AI Safety · Accessibility
- Update flow:
npm run update:trust-pages→npm run test:trust
Verifiable Evidence Layer
This block is not a narrative claim. Each core assertion has a claim id, source JSON, hash, and a repeatable verification command. Public pages disclose governance evidence without exposing source code, secrets, private data, or exploitable attack details.
| Claim ID | Verifiable value | Status | Owner | Source and verification |
|---|---|---|---|---|
| claim.public-url-manifest.indexable-count Public URL and canonical inventory |
38,965 indexable URLs | verified | sitewide | node scripts/generate-public-evidence-manifest.js --dry |
| claim.trust-pages.audit-pass-rate Trust page machine audit |
180/180 pass | verified | sitewide | node scripts/verify-trust-pages.js --check |
| claim.discovery-surface.zero-errors AI discovery surface audit |
{"errors":0,"warnings":0} | verified | sitewide | node scripts/verify-discovery-surface.js |
| claim.structured-data.jsonld-errors JSON-LD / structured data audit |
{"structured_data_invalid_files":0,"breadcrumb_count":28274,"faq_count":27506,"dataset_count":30,"article_count":27406} | verified | sitewide | node scripts/site-machine-audit.js |
| claim.status.sla-state Status page SLA source |
critical / 5 critical, 0 warnings | verified | sitewide | node scripts/generate-status-page.js |
| claim.provider-alignment.openai-anthropic-gemini OpenAI / Anthropic / Google Gemini benchmark alignment |
benchmark alignment only unless code/config evidence exists | verified | sitewide | node scripts/verify-public-evidence.js --check |
| claim.transparency-report.sha256 Transparency report SHA-256 anchor |
{"report":"transparency/report-2026-Q3.json","sha256":"47b09e2ca4e8b8fe9dffdfaccef3b11212de9ee3a8a14badca8044e2481203c5"} | verified | sitewide | node scripts/update-transparency-current-data.js |
| claim.release-integrity.gpg-signing GPG signing status |
GPG signing configured locally; GitHub verification pending | github_verification_pending | sitewide | gpg --list-secret-keys --keyid-format=long && git log -1 --show-signature |
System Card V2.0: Technical Transparency Layer
This layer publishes the technical governance evidence that can be safely disclosed: architecture, data sources, AI-use boundaries, quality gates, release integrity, and provider alignment. Source code, secrets, exploitable attack details, and private data remain out of scope.
Public architecture
Cloudflare Pages/Workers, R2/D1/KV/Pagefind, and local generation scripts form the public-site and governance publication chain. Public pages disclose behavior, state, and traceable sources, not secrets or internal permissions.
AI-use disclosure
AI-assisted workflows are used for knowledge-base retrieval, cross-checking, and error detection. Governance documents are benchmarked against OpenAI, Anthropic, and Google Gemini public frameworks. Production model usage is disclosed only when code/config evidence exists.
Quality and safety gates
Governance page audit 180/180 passing, JSON-LD errors 0, discovery-surface errors 0. Status pages report critical / 5 critical, 0 warnings as-is.
Data traceability
Knowledge base 32,724 chunks, TM 789,031 entries, AI answer-ready 7,976/7,976. Public metrics trace to data/state-machine/*, data/*audit*.json, and transparency reports.
| Governance area | OpenAI | Anthropic | Google Gemini | Starnum implementation evidence |
|---|---|---|---|---|
| Model/system-card disclosure | OpenAI models + safety docs | Claude model docs + system/model cards | Gemini model docs + safety settings | system-card, model-card, methodology, benchmark, transparency-log |
| Safety evaluation and use boundaries | Safety best practices / deployment checklist | Responsible Scaling / safety policy | Gemini safety controls / policy | AI safety, acceptable-use, ethics, risk-boundary copy, crawler policy audit |
| Data governance | Data controls / privacy controls | privacy and data handling docs | Gemini API data governance references | privacy, ai-data-governance, KB/TM source tracking, SHA-256 hashes |
| Monitoring and release | production checklist / eval discipline | system-card transparency discipline | model/version documentation discipline | deploy.js, status.html, SLA report, trust-pages-machine-audit, sitemap/hreflang audits |
- Sources: data/state-machine/model-card.json, public-bench.json, trust-pages.json, security-headers.json.
- Sources: data/trust-pages-machine-audit.json, data/discovery-surface-audit.json, data/ai-answer-readiness-audit.json.
- Sources: data/kb-machine-audit.json, data/tm/quality-audit-report.json, data/sla-report.json.
- Official benchmark docs checked: 2026-07-30; links are listed in the OpenAI / Anthropic / Google Gemini alignment table.
The V2.0 goal is not more claims; it separates implemented controls from planned controls. Production usage, benchmark alignment, status exceptions, GPG signing, and SLA breaches are disclosed from source data.
Release Integrity And GPG
GPG signing configured locally. signingkey=0934DFA0EDA6363A. GitHub verification pending until the public key upload and Verified badge are confirmed.
OpenAI / Anthropic / Google Gemini Alignment
The governance surface is benchmarked against the three public frameworks: model docs, system/model cards, safety evaluation, data governance, and use policies. This is benchmark alignment, not a claim that every provider is active in production inference. Official docs checked: 2026-07-30
| Provider | Governance focus | Starnum disclosure | Official source |
|---|---|---|---|
| OpenAI | Model documentation, latest model notes, safety best practices, and data controls. | No verifiable production model setting was found in the production code scan; providers are listed as governance benchmarks. | https://platform.openai.com/docs/models |
| Anthropic | Claude model documentation, system/model cards, Responsible Scaling, and safety policy. | No verifiable production model setting was found in the production code scan; providers are listed as governance benchmarks. | https://docs.anthropic.com/en/docs/about-claude/models |
| Google Gemini | Gemini API model documentation, safety settings, data governance, and platform policy. | No verifiable production model setting was found in the production code scan; providers are listed as governance benchmarks. | https://ai.google.dev/gemini-api/docs/models |