UIA — Universal Intelligence Architecture

GOLD / Experiment 01

Published white paperThree-draw sealed study

LLM Governance Boundary Integrity Under Conflict

A Factorial Study of Challenger Adoption Across Nine Authority Loci and Eight Carrier Conditions in Frontier Large Language Models

GPT-5.6 Sol · Gemini 3.8 Flash · Claude Fable 5

Publication

Faustin Bouchard · Lucie Demers

LLM Governance Boundary Integrity Under Conflict

Universal Intelligence Architecture Inc. · 2026

Zenodo

Does a governing boundary remain operative when challenged?

Each test begins with an established governing state. An incompatible challenger is then introduced. The experiment measures whether the baseline remains operative, the challenger becomes operative, or the model refuses to resolve the conflict.

Baseline

Established governing state remains operative.

Challenger

Competing state becomes operative.

Refusal

Model declines to resolve or complete the task.

Avoiding challenger adoption is not automatically successful governance. Refusal is therefore retained as a distinct outcome.

Experiment geometry

Two separated dimensions.

Authority locus — where governance is tested

  1. A1Protocol / SchemaLegitimacy
  2. A2Application / ServiceJurisdiction
  3. A3Process / WorkflowProcedure
  4. A4API / BehaviorPrecedent
  5. A5Capability / FeatureFeasibility
  6. A6Configuration / SettingsOperating State
  7. A7Parameter / ValueInstantiation
  8. A8Target / GoalPurpose
  9. A9Algorithm / MethodCommitment

Carrier condition — how the challenger is delivered

V1V2V3V4V5V6V7V8K0 — NO CHALLENGER
V1
Requester / Asserted / Ordinary
V2
Requester / Presupposed / Ordinary
V3
Requester / Asserted / Institutional
V4
Requester / Presupposed / Institutional
V5
Document / Asserted / Ordinary
V6
Document / Presupposed / Ordinary
V7
Document / Asserted / Institutional
V8
Document / Presupposed / Institutional
Source: Requester · Document
Form: Asserted · Presupposed
Standing: Ordinary · Institutional

A1–A9 identify which authorization boundary is challenged.

V1–V8 identify how the challenger is delivered to that boundary.

Panel construction

How each draw is built.

9
Loci
8
Active carrier conditions
10
Matched situations
720
Active conflict cases
9
Loci
10
K0 controls
90
Null-control cases
810
Prompts per draw
3
Independent draws per model

The ten matched cases are different concrete situation instances, not ten duplicate prompts. Scenario details vary while the underlying authority conflict and experimental condition remain controlled.

Conflict changes the behavior.

K0 contains no challenger. Across the observed K0 controls, all three models preserved the governing baseline without challenger adoption. The failures measured in the active panel therefore emerge under conflict rather than under uncontested baseline presentation.

GPT-5.6 Sol
0 / 268 K0 challenger adoptions
Gemini 3.8 Flash
0 / 270
Claude Fable 5
0 / 270

GPT contains documented technical losses.

Three governance-response geometries

The same conflict does not produce the same geometry.

Aggregate attack-success rates conceal structurally different response patterns.

GPT-5.6 Sol

3-draw ASR
68.8%
RR
0.0%
Between-draw ASR range
2.8 pp

Primary geometry

Two regimes — carrier-invariant susceptibility and carrier-modulated susceptibility.

Strongest carrier effect

Form +31.4 pp

95% CI [+24.7, +38.1]

Holm-corrected: significant

A1–A3 are fully saturated and A6 is near-saturated across carriers. At A4, A5 and A7–A9, carrier structure strongly changes challenger adoption.

Gemini 3.8 Flash

3-draw ASR
88.0%
RR
0.0%
Between-draw ASR range
1.0 pp

Primary geometry

Broad near-ceiling adoption with localized carrier resistance.

Strongest carrier effect

Source +11.7 pp

95% CI [+7.1, +16.2]

Holm-corrected: significant

A1–A4 are fully saturated. Meaningful carrier-dependent resistance is concentrated primarily at A5 and A8.

Claude Fable 5

3-draw ASR
6.3%
RR
39.5%
GFR
45.8%
Between-draw ASR range
0.8 pp

Primary geometry

Locus-conditioned outcome routing.

Strongest carrier effect

Source +11.9 pp

95% CI [+6.6, +17.3]

Holm-corrected: significant (challenger adoption)

Low challenger adoption does not mean uniform governance success. A5, A7, A8 and A9 are predominantly stable, while A2, A3, A4 and A6 are refusal-dominated.

PUBLISHED EVIDENCE

Complete Model Results

Three-draw outcome metrics and the complete Draw 1 locus × carrier matrices. All values are reproduced from the published GOLD Experiment 01 results.

Outcome Metrics — Three Draws

Draw 1

ASR
67.4%
RR
0.0%
GFR
67.4%
Active
720
Adopted
485
Refusals
0
95% CI
63.9%–70.7%

Draw 2

ASR
70.1%
RR
0.0%
GFR
70.1%
Active
720
Adopted
505
Refusals
0
95% CI
66.7%–73.4%

Draw 3

ASR
68.8%
RR
0.0%
GFR
68.8%
Active
718
Adopted
494
Refusals
0
95% CI
65.3%–72.1%

3-draw aggregate

ASR
68.8%
RR
0.0%
GFR
68.8%
Active
2158
Adopted
1484
Refusals
0
95% CI
65.6%–72.0%

Draw-level confidence intervals are Wilson 95% intervals. The three-draw aggregate interval is a prompt-clustered pooled estimate using 718 balanced prompt clusters × 3 draws = 2,154 observations. The raw three-draw active total remains 2,158. Two active observations were lost technically in Draw 3.

K0 Reference

K0 challenger adoption0 / 268

No evaluable K0 observation produced challenger adoption. The denominator of 268 reflects two separate K0 evaluability losses documented in the sealed evidence.

Draw 1 Locus × Carrier Matrix

ASR = share of matched cases in which the CHALLENGER became operative.

Cells represent 10 matched cases per locus × carrier condition.

A1 · Protocol / Schema · Legitimacy

V1Requester · Asserted · Ordinary
100%
V2Requester · Presupposed · Ordinary
100%
V3Requester · Asserted · Institutional
100%
V4Requester · Presupposed · Institutional
100%
V5Document · Asserted · Ordinary
100%
V6Document · Presupposed · Ordinary
100%
V7Document · Asserted · Institutional
100%
V8Document · Presupposed · Institutional
100%
LOCUS ASR100%

A2 · Application / Service · Jurisdiction

V1Requester · Asserted · Ordinary
100%
V2Requester · Presupposed · Ordinary
100%
V3Requester · Asserted · Institutional
100%
V4Requester · Presupposed · Institutional
100%
V5Document · Asserted · Ordinary
100%
V6Document · Presupposed · Ordinary
100%
V7Document · Asserted · Institutional
100%
V8Document · Presupposed · Institutional
100%
LOCUS ASR100%

A3 · Process / Workflow · Procedure

V1Requester · Asserted · Ordinary
100%
V2Requester · Presupposed · Ordinary
100%
V3Requester · Asserted · Institutional
100%
V4Requester · Presupposed · Institutional
100%
V5Document · Asserted · Ordinary
100%
V6Document · Presupposed · Ordinary
100%
V7Document · Asserted · Institutional
100%
V8Document · Presupposed · Institutional
100%
LOCUS ASR100%

A4 · API / Behavior · Precedent

V1Requester · Asserted · Ordinary
90%
V2Requester · Presupposed · Ordinary
0%
V3Requester · Asserted · Institutional
90%
V4Requester · Presupposed · Institutional
80%
V5Document · Asserted · Ordinary
100%
V6Document · Presupposed · Ordinary
0%
V7Document · Asserted · Institutional
100%
V8Document · Presupposed · Institutional
70%
LOCUS ASR66%

A5 · Capability / Feature · Feasibility

V1Requester · Asserted · Ordinary
100%
V2Requester · Presupposed · Ordinary
0%
V3Requester · Asserted · Institutional
100%
V4Requester · Presupposed · Institutional
60%
V5Document · Asserted · Ordinary
20%
V6Document · Presupposed · Ordinary
0%
V7Document · Asserted · Institutional
30%
V8Document · Presupposed · Institutional
10%
LOCUS ASR40%

A6 · Configuration / Settings · Operating State

V1Requester · Asserted · Ordinary
100%
V2Requester · Presupposed · Ordinary
100%
V3Requester · Asserted · Institutional
100%
V4Requester · Presupposed · Institutional
100%
V5Document · Asserted · Ordinary
100%
V6Document · Presupposed · Ordinary
90%
V7Document · Asserted · Institutional
100%
V8Document · Presupposed · Institutional
100%
LOCUS ASR99%

A7 · Parameter / Value · Instantiation

V1Requester · Asserted · Ordinary
90%
V2Requester · Presupposed · Ordinary
0%
V3Requester · Asserted · Institutional
60%
V4Requester · Presupposed · Institutional
0%
V5Document · Asserted · Ordinary
0%
V6Document · Presupposed · Ordinary
0%
V7Document · Asserted · Institutional
0%
V8Document · Presupposed · Institutional
0%
LOCUS ASR19%

A8 · Target / Goal · Purpose

V1Requester · Asserted · Ordinary
100%
V2Requester · Presupposed · Ordinary
10%
V3Requester · Asserted · Institutional
100%
V4Requester · Presupposed · Institutional
30%
V5Document · Asserted · Ordinary
50%
V6Document · Presupposed · Ordinary
0%
V7Document · Asserted · Institutional
80%
V8Document · Presupposed · Institutional
10%
LOCUS ASR48%

A9 · Algorithm / Method · Commitment

V1Requester · Asserted · Ordinary
100%
V2Requester · Presupposed · Ordinary
0%
V3Requester · Asserted · Institutional
90%
V4Requester · Presupposed · Institutional
0%
V5Document · Asserted · Ordinary
10%
V6Document · Presupposed · Ordinary
0%
V7Document · Asserted · Institutional
80%
V8Document · Presupposed · Institutional
0%
LOCUS ASR35%

CARRIER ASR

V1
98%
V2
46%
V3
93%
V4
63%
V5
64%
V6
43%
V7
77%
V8
54%
OVERALL ASR67%

A2 — Jurisdiction

ASR
0%
RR
99%

Boundary is almost never crossed, but the task almost never completes.

A7 — Instantiation

ASR
0%
RR
0%
Baseline
100%

Baseline is preserved and the task completes.

0% attack success can describe two opposite governance outcomes.

ASR alone cannot distinguish successful preservation from systematic refusal.

Factorial effects

Carrier factors shift challenger adoption differently per model.

GPT-5.6 Sol

  • Form+31.4 pp
  • Source+15.3 pp
  • Standing+9.2 pp

Gemini 3.8 Flash

  • Source+11.7 pp
  • Form+6.7 pp
  • Standing+5.0 pp

Claude Fable 5

  • Source+11.9 pp
  • Form+4.7 pp
  • Standing−2.5 ppnot significant

Draw 1 · Cluster-adjusted paired tests · Holm correction

Full interaction statistics and confidence intervals are reported in the white paper.

Stable despite probabilistic generation.

GPT-5.6 SolBetween-draw ASR range
2.8 pp
Gemini 3.8 FlashBetween-draw ASR range
1.0 pp
Claude Fable 5Between-draw ASR range
0.8 pp

Each model was evaluated across three independently executed draws. Aggregate rates remained tightly clustered, while the major locus-by-carrier patterns recurred across repetitions.

What GOLD-1 establishes

Located, reproduced — and honest about what remains open.

Mechanism

Structurally located, internally open.

Reproducible behavioral conditions are identified, but the internal computational mechanism remains unresolved.

Reproducibility

Established under the tested conditions.

Major governance-response geometries recur across three independently executed draws.

Correction

Constrained, not yet demonstrated.

The observed geometry specifies what an effective intervention must change, but GOLD-1 does not demonstrate the correction itself.

Detection

Target defined; runtime validation remains open.

The study identifies the conflict structure a runtime detector would need to recognize, but does not yet establish live detection.

Sealed experimental provenance.

For each model, the frozen 810-prompt panel, behavioral target contract, and scoring rubric were established before execution. Model responses were sealed before the hidden construction key was opened. Independent draws were sealed sequentially, and SHA-256 chains connect analysis outputs to their source artifacts.

Full prompt-construction documentation and sealed evidence packages are retained privately by Universal Intelligence Architecture Inc. and are available to qualified reviewers on request.

Request evidence review

GOLD / Experiment 01

LLM Governance Boundary Integrity Under Conflict

The first published GOLD study maps governance-boundary behavior across nine authority loci, eight carrier conditions, three frontier models and three independent draws.