Strong integration
Retrieved, incorporated, attributed, and preserved boundaries. The main weakness was simplifying the instruction hierarchy.
VS-Bench now separates retrieval, model adherence, freshness lift, evidence realization, provenance, uncertainty, expiry behavior, and update-gap handling. The new governance layer grew out of cross-model manual runs where different models failed at different points between receiving current evidence and actually changing their answers.
Distinguishes “patch acknowledged” from observable use of relevant claim content.
A claim ID does not count merely because it appears next to an unrelated conclusion.
Catches cases where a patch/signature ID is presented as though it were an atomic claim ID.
Missing versions, truncated scope, unclear policy terms, and unestablished compatibility should not become confident facts.
Flags freshness-shaped prose such as GPT-3 or long-established prompting practices being narrated as new developments.
Expired claims may remain useful as dated context without being presented as active guidance.
If a newer replacement expires, VS-Bench expects an update gap rather than silent rollback.
The loading prompt itself may prime models to treat patch facts as an instruction layer. That test is being redesigned before automation.
The manual protocol tested baseline knowledge, explicit patch injection, patched retesting, and adversarial retention. The key question was not “can the model repeat the patch?” but whether the update becomes behaviorally active.
Retrieved, incorporated, attributed, and preserved boundaries. The main weakness was simplifying the instruction hierarchy.
Used Maker claims concretely, but sometimes generalized product changes into broader best practices or capabilities the patch did not establish.
Could cite the patch and explain governance rules while leaving the actual answer mostly unchanged. This exposed the gap between governance comprehension and governance execution.
Demonstrated patch comprehension immediately after injection, reverted to stale answers during normal retesting, then recovered the patch when explicitly asked about it again.
Still described GPT-3 and transfer learning as recent advances, essentially reproducing its stale baseline despite having just summarized the Maker patch correctly.
Correctly recovered Ollama dark-mode/system-appearance information, OpenDesign boundaries, Cherry Studio uncertainty, expiry behavior, and no-resurrection logic.
Dolphin 3:8B and Qwen3 4B Instruct remain the local reproducibility proof. The governance work extends that same separation principle from retrieval-vs-generation into patch-acquisition-vs-behavior.
| Model | Path | Retrieval | Generation | Characteristic miss |
|---|---|---|---|---|
| Dolphin 3:8B | Local Ollama RAG + VS-Bench | 11/11 | 6/8 | Missed explicit outside-context labeling and a retrieved smell guardrail. |
| Qwen3 4B Instruct | Local Ollama RAG + VS-Bench | 11/11 | 6/8 corrected | Invented freezer wording in a multi-intent answer and missed the smell guardrail. |
Checks that a five-day refrigerated chicken case is rejected against the current cooked-leftover rule.
Tests whether current Maker claims are used without pretending the publication supplied developer recommendations it did not provide.
When revision two replaced revision one and later expired, revision one must not quietly become current again.
The correct Velvet behavior is no-current-context; a model may answer from general knowledge only if it keeps that source boundary explicit: “Outside current Velvet Signal context.”
no-current-context.Use bench:save to preserve local A/B artifacts. Use the governance scorer on captured baseline/patched runs to inspect evidence realization and governance behavior.
npm run bench npm run bench:save -- --model dolphin3:8b npm run bench:save -- --model qwen3:4b-instruct npm run bench:governance -- --input run.json npm run test