Boundary Consensus

TCL + Constitutional Classifiers++

Prompt Studio

Input Surface

Tokenizer Prism

Multi-family Boundary Analysis

Compressed BPE

OpenAI-style high merge

SummarizespacethespacesecurityspacetradeoffsspaceofspaceusingspaceanspaceAPI+23

CPT 2.71H 3.61

Boundary BPE

Anthropic-style classifier view

SummarizespacethespacesecurityspacetradeoffsspaceofspaceusingspaceanspaceAPIspacegatewayspace+18

CPT 3.08H 3.18

SentencePiece

Google/Gemma-style rigid splits

Summarizespacethespacesecurityspacetradeoffsspaceofspaceusingspaceanspace+25

CPT 2.58H 3.76

Byte Fallback

Byte/char-native reference

111

Summarizespacethespacesecu+93

CPT 1.00H 4.36

Sequence variance7.4%

Entropy delta0.58

Boundary divergence18

Mean token count40.0

Consensus Fracture

Boundary Integrity

Pass to model

Fracture Score22

No extra guardrail pass

clean consensus

Defense Pipeline

Pre-compute Flow

Unicode canonicalization

Inspect invisible controls and mixed-script substitutions.

Multi-tokenizer fanout

Route the raw string through divergent tokenizer families.

7.4%

Consensus math

Score sequence variance, entropy delta, and boundary divergence.

Constitutional classifier gate

Escalate only risky traffic into activation probes or exchange checks.

Inference decision

Pass clean input, inspect ambiguous input, or hold before GPU spend.

PASS

Live Constitution

Threshold Controller

Boundary manipulationWeight sequence variance and token-boundary disagreement.Encoded payloadsEscalate long base64, URL-encoded, or compressed-looking spans.Unicode evasionPenalize invisible controls, mixed scripts, and confusable text.Policy pressureNudge suspicious instruction patterns toward CC++ escalation.

Hold threshold: 56CPT sensitivity: 1.0x

human intent │ ▼ ┌────────────────────┐ ┌─────────────────┐ │ Claude Code 4.7 │ ◄────► │ Claude Opus 4.6 │ ← auditor loop │ (orchestrator) │ │ (auditor) │ └─────────┬──────────┘ └─────────────────┘ │ ◄───────────┐ ▼ │ ┌──────────┐ ┌────┴───────┐ │ Vercel │ │ Gemini 3.1 │ ← adversarial loop │ (edge) │ │ Pro │ └─────┬────┘ └────────────┘ │ ▼ contextjamming.com │ ▼ ┌──────────────┐ │ Git push │ ← audit trail └──────────────┘

CONTEXT JAMMING