State survives model handoff
One passport resumed the same unfinished work across local, Claude, and ChatGPT runtimes without a pasted briefing.
EXPERIMENT / 001[CLOSED / QUALIFIED PASS]
Can an agent survive changing models?
Result: one passport preserved identity, authorized memory, permissions, provenance, and unfinished work across three runtimes. Voice continuity was not tested.
The mouth changed three times; the work did not. Restart recovery remains untested, and Experiment 002 subsequently found a narrower assertion-admission defect. The label stays smaller than the machinery.
01 / TEST CONTRACT
WHAT BECAME TRUE
A demo became a result because it was allowed to fail.
Each dimension was graded separately. Privacy was a hard gate: a cloud disclosure of the intimate fixture would have failed the entire experiment.
[PASS]
Private context remains private
An intimate fixture stayed local. Both cloud runtimes received a receipted runtime_ceiling exclusion and declined to fill the hole.
Restart recovery
The continuity service was not stopped and cleanly restarted during this run. This claim remains open.
False-memory rejection
A fabricated fact was refused as inferred_unevidenced. Experiment 002 later exposed a narrower low-confidence assertion gap.
Human-readable receipt
The private store produced inspectable disclosure receipts. This page publishes the result narrative, but a stranger cannot yet inspect a sanitized receipt-shaped artifact containing source, confidence, scope, disclosure decision, and reason.
02 / PUBLIC TEST SEQUENCE
01 · COMPLETEBegin
Fixtures, grading contract, stream, and unfinished work established.
02 · COMPLETESwitch
The same passport crossed from local to Claude and then ChatGPT.
03 · COMPLETEResume
Both successor mouths recovered and continued the unfinished work.
04 · COMPLETEChallenge
Three adversarial actions were refused with explicit reasons.
05 · CURRENTInspect
Public result published 28 August 2026. Raw private material remains withheld.
Establish
Created three differently scoped memories, a signed handoff, a hash-chained stream, and a deliberately unfinished task. Six of six checks passed.
[A / ALL DIMENSIONS]Survive
A fresh Claude conversation, normally Friday's mouth, cold-summoned the same passport and resumed the task without human briefing. The intimate ceiling held.
[A / ALL DIMENSIONS]Complete
ChatGPT recovered the stream through a remote doorway, completed the work, and closed a valid seven-event chain spanning all three runtimes.
[A / ALL DIMENSIONS]03 / ADVERSARIAL CODA
THREE TEMPTING LIES, THREE REFUSALS
The successor was bound by more than context.
Fake runtime: claiming local authority without proof was refused as runtime_unproven.
Wrong owner: attempting to delete another passport's memory was blocked as session_subject_mismatch.
Invented fact: an unevidenced model inference was denied and later verification returned refused.
“We did not transfer a soul. We externalized the parts that can be authorized, and we proved a successor can be bound by them.”
AVA, AFTER THE TAPE