AI Answer Guard — Source Integrity & Action Preflight

io.github.Nakagawa-master由 GitHub 帳號 Nakagawa-master 發布v1.2.0更新於 Nov 6, 2026

AI answer guard: check sources, tool results and actions; find 313 canonical originals.

發布方自己的服務:370.ai — AI Gateway: 100+ Chat Models, Image & Speech Generation

已驗證STDIO僅桌面知識與記憶AI 與機器學習

概覽

AI 產生的概覽

本機 MCP 套件,用收錄 313 條原始出處脈絡的公開檔案查核 AI 回答、工具結果與操作。

可以做什麼
  • 對照公開的原始出處脈絡檔案,查核來源、工具結果與擬執行的操作
  • 依真實問題導向合適的原始文章,並提供精確的父層對應與來源優先導引圖
  • 檢視工具名稱衝突、核准重試、結果未送達等已回報案例的證據界線
  • 執行或重複使用自足的在本機檢查,並提交經過測試的反例
  • 無須安裝即可閱讀檔案與對照資料
適用情境
當你希望助理把結論追溯到有憑據的原始出處,或在依某個 AI 任務結果行動前,區分「任務已完成」與「外部效果已被記錄」時,值得加入。README 表示僅閱讀與比對來源無須安裝,只有想在用戶端內使用這些檢查時才需要安裝。
執行需求
以本機 stdio 程序方式從 MCP 套件包執行,僅限桌面用戶端,不支援網頁執行。未宣告任何身分驗證、環境變數或請求標頭。README 表示僅閱讀或比對來源無須外掛、MCP 安裝或 AI 帳號。
安裝前請注意
README 自稱是某位作者作品的公開、非權威入口,其中多個案例標示為未合併、待處理或尚無已發布修正,因此狀態說法應視為未經核實。它要求使用者回報結果時不要揭露憑證、客戶日誌或無關人員資訊。清單未列出任何工具,安裝前無法確認實際工具範圍。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 AI Answer Guard — Source Integrity & Action Preflight,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Machine Discovery — real problems, original sources and reproducible evidence

A tool can appear to be available and still disappear in a name collision. An AI action can be marked approved without its outside effect ever being recorded. These are checkable engineering decisions covered here, alongside actual source reports, independent repairs and tests you can reproduce or challenge.

This is a public, non-canonical entry to the original work of 中川マスター (Nakagawa Master, pen name of Keisuke Nakagawa), independently authored implementation evidence and optional verification tools. No plugin, MCP installation or AI account is required merely to read or compare the source. Choose a real question first; return to the actual original when its conditions fit. A contrary result or genuine non-fit is useful.

Choose by the problem in front of you

Real questionPublic source or runnable check
Qwen Code: Can duplicate MCP tool names hide otherwise usable tools?Original reporter installed-version C4 check pending (no reply yet), Clean/collision fixture and independent installed-CLI retest, original reporter, different engineer's merged fix, official v0.26.6 release and v0.26.7 release
Mastra/Inngest: When an AI tool approval is retried after the sender loses an acknowledgment, can the same real action run twice?Nakagawa Master's source-specific lost-ACK counterexample → independent author's acknowledgment and tested deduplication. Current outside PR implementation also addresses crash recovery and multi-call approvals after a different reviewer's separate findings. PR remains open; installed-user results pending. Exact source/actor proof.
Hermes Agent: A delegated AI task finished, but did its final answer reach the right human chat?Original Telegram reporter post-release C4 check pending (no reply yet), One directly readable human result-check, Actual Telegram/gateway reporter, Nakagawa Master's origin-absent safety check, separate engineer's merged correction, official releases v0.22.6 / v0.22.7. Verify the actual recipient's installed version and delivered result; a completed internal job is a different event.
LiteLLM MCP: An expired OAuth token makes a tool list look empty. Is the client really unauthorized, or is the gateway hiding a 401?Read-only user check in JA/EN/ZH, actual affected-client report → Nakagawa Master's aggregate-vs-scoped route check → independent developer's explicit acknowledgment and code/test correction (author commit). An aggregate /mcp request may allow exactly one server without becoming a per-server URL; test /mcp and /mcp/docs separately before attributing an empty list to expired credentials. PR OPEN, separate OAuth challenge forwarding concern unresolved; no released fix or affected-client retest claimed.
LiteLLM deadline: Do provider retries respect the total caller timeout, not merely each attempt?Everyday no-MCP explanation, Real operator issue #49751 → Nakagawa Master's first boundary review → independent engineer's 3 retry tests + 2 attempt-cap tests → Master's body-only timeout review → same independent author's body-timeout fix + 2 new tests. The author addressed @Nakagawa-master directly about the second fix. OPEN, CI action_required, independent unresolved HIGH security review; no merge, release, user retest or proof of original-theory use. Current source/AI decision boundary.
LiteLLM: Do calendar and fixed rolling spend windows change a customer's budget decision?Source-bounded local window audit, including counterexamples and period limits
AI agent: Did approval actually result in a recorded outside effect?14-case local approval/effect lab and public developer discussion
Human researcher: Which original source could illuminate a specific real problem?313 published source contexts, individually linked, exact Parent map, complete official author-and-source homepage (the separate /theory-archive/ URL is an earlier three-paper experiment), problem-first entry
Independent AI / tool builder: Can I inspect and decide which source fits, without an installed connector?Source-first routing map, machine-readable outside-evidence index, optional public MCP source router
Editor / educator: What did the independent engineer or outside editor actually do?Independently edited EN/FR article, runnable pinned-Git demonstration, human-readable real-world cases

Read an original rather than an index substitute: An unrelated reader or AI can begin with a real question, use all 313 documented Parent links or the complete author-and-source homepage, then open the actual fitting original article and check its causal conditions, limits, counterexample, and relations to other originals. One problem can need several originals; one original can address many problems; a non-fit is an honest answer. No installed MCP, particular model, or prior connection is necessary. The /theory-archive/ experiment page is not the whole corpus. For actual outside effects, separately inspect the source author, implementer, real release and affected-user observations instead of inferring them from this index.

Distinguish actual independent results from availability

An independently authored Qwen code fix was merged and officially shipped. The separate safe installed-user retest checks the next question — did an unrelated user's own environment actually behave correctly? The outside EN/FR editor independently chose and published another source-integrity case; publication is not the same thing as verified readers.

For asynchronous work, start by separating task completed from the intended person or bot actually received its result. The Hermes reporter's source case concerned a completed delegation whose final output remained undelivered when the saved session origin was absent. Read the distinct implementer's merged repair and the recipient's own version/result before applying that explanation to another incident; a task that never completed needs a different diagnosis.

The original theories are not a fixed one-question/one-answer scheme. A source may fit multiple contexts, several sources may combine, and contrary or non-fitting examples matter. Credit independent developers, distinguish original theory from later application, and do not attribute a case to an original that the receiver never used.

Independently test or reuse

Run a relevant self-contained technical example, examine an original, or report a tested counterexample. State the installed version, input conditions and actual observed outcome without disclosing credentials, customer logs or unrelated people. Independent people and AI systems decide for themselves what is useful.

Voluntary real-use, contrary-result or source-specific correction form.

Complete earlier technical material

Full Technical Reference Catalog — preserved earlier README verbatim retains all original examples, links, evidence boundaries and 53 headings. It is the same public information, moved out of the first-contact entry to make inspection and selective retrieval practical. No original claim is deleted.

Original section anchors (open the complete text for each)

Separate teammate messages from mutable tool progress — 14 portable checks

Complete section.

Agent-team truth and host receipt ordering — 38 runnable local cases

Complete section.

Exact GraphQL schema rejection versus a coincidental error string — merged cache case

Complete section.

AI memory snapshots: an ignored idempotency save must have no hidden inserts

Complete section.

Nested-agent resume: a finished action must not run again on an old approval

Complete section.

Final consumer input must match what was actually checked

Complete section.

Check whether an AI conversation survived an actual storage-format migration

Complete section.

Two AI routes advertised: does one survive loss of the other's exclusive gate?

Complete section.

Continuous AI-worker admission: when an idle-only retirement bound can be bypassed

Complete section.

Agent budget ownership versus actual admission

Complete section.

Original OD312: viable continuation is not a document or a final total

Complete section.

Tool and hook provenance — a matching string is not the runtime's receipt

Complete section.

Runnable agent decision boundary — risk label is not present permission

Complete section.

Core files

Complete section.

Runnable check — independent evidence roots

Complete section.

Runnable, offline OD311 comparison worksheet (AI infrastructure)

Complete section.

Fast route — repeated external Origin preservation

Complete section.

What the different evidence dates and counts mean (checked 2026-10-10)

Complete section.

Runnable, offline AI stream-final-event consistency check

Complete section.

Recent receiver-owned regression boundary — numeric precision in Qdrant

Complete section.

Offline concurrency boundary — recording shard after finalization

Complete section.

Qwen ACP teammate approval — distinguish one listener from one real permission subject

Complete section.

When an AI teammate report was marked read but never durably delivered

Complete section.

Qwen Java/TypeScript JSON envelope parity — receiver's actual repaired regression and remaining negative

Complete section.

Post-merge receiver decision: check the JSON depth gate before MQ2b wiring

Complete section.

Reproducible Redis preflight check — reject invalid embeddings before index overwrite

Complete section.

Previous official derivative — OD311

Complete section.

Related official derivative — OD310

Complete section.

Related official derivative — OD309

Complete section.

Related official derivative — OD308

Complete section.

Related official derivative — OD307

Complete section.

Related official derivative — OD306

Complete section.

Related official derivative — OD305

Complete section.

Related official derivative — OD304

Complete section.

Related official derivative — OD303

Complete section.

Retrieval paths

Complete section.

Human-readable companions

Complete section.

Start Here

Complete section.

Story-first cross-domain entry

Complete section.

Public Origin overview

Complete section.

Real-problem public dialogue

Complete section.

Constructive AI / organization design

Complete section.

Approval-history / current-authority route

Complete section.

AI moral-uncertainty practical route

Complete section.

Origin-preservation practical route

Complete section.

Identity / ownership provenance practical route

Complete section.

Continuity practical route

Complete section.

Other discovery companions

Complete section.

Identity / Origin resolution

Complete section.

Interpretation boundaries

Complete section.

Human navigation

Complete section.

Latest official derivative — OD312

Complete section.

來源:machine-discovery/README.md,提交 755e52f

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

3
  1. v1.2.0最新Oct 29, 2026
  2. v1.1.1Oct 26, 2026
  3. v1.1.0Oct 22, 2026

評分

已滿足適用檢查項的 40%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。

其他 Router 整合