Quipu让知识图谱存储支持代理协作,实现可信、可审计的双时间轴管理。
Quipu: A Governed Bitemporal Knowledge Graph Store
- 通过门控机制确保每条数据经规则验证后才入库,实现动态治理。
- 在单一测试中,有门控的存储零缺陷,无门控的则全出错;所有组合均满足层次约束。
- 支持精准回溯与审计,适合需要高可信度和合规性的智能系统应用。
当前代理正在生成知识图谱,但现有存储仍沿用人类手动维护时的默认设定:接受即时写入、延迟清理;仅保留一个时间轴或不保留;对所有写作者的事实同等信任;治理依赖仪表盘和中间件。这四类默认在代理工作负载下各自便利、合起来却不可行。我们提出 Quipu,一个可嵌入的存储系统,反转了这四项设计:数据必须经过门控验证后才能进入,且门控条件基于待写入状态评估;数据、信任标签、判定结果及规则本身均为双时间轴(历史+有效时间);命名图谱是权威与信任的基本单位,其组合遵循格结构,唯一不变量是组合不扩大信任范围;治理规范Σ、操作轨迹和签名判定结果本身作为事实存于被治理的存储中,使得审计查询T ⊨ Σ成为标准查询。我们在Census上进行评估,这是一个确定性多写者生命周期基准,单次种子运行对所有研究问题与预设真实答案比对:有门控的存储最终零缺陷(对比无门控的6个缺陷);7个组合探测全部符合格结构契约;50个判定结果在各自时刻准确重演,而若采用最新值规则则全部会误报;外部的SARC参考检查器与内部审计完全一致,仅在覆盖语义上略有差异。来自受控写者的记录轨迹揭示了一个实时执行漏洞,审计明确指出并推动修复。在DEMM-Bench(外部决策证据充分性基准)上,仅读取导出记录即可在8种退化条件下正确回答全部512个属性级治理问题,零过claim;而容器存在性基线在最多87.5%的问题上产生过claim,且该测试暴露并促成了对拒绝判定所证明内容的补丁修复。
原文摘要 · Abstract (English)
Agents now write knowledge graphs, but knowledge-graph stores still carry defaults set when humans curated them: accept writes now and clean later, keep one time axis or none, treat every writer's facts as equally trustworthy, and leave governance to dashboards and middleware. These four defaults are individually convenient and jointly untenable under agent workloads. We present Quipu, an embeddable store that inverts all four: no fact enters except through a gate whose predicates evaluate the pending post-state; data, trust labels, verdicts, and the rules themselves are bitemporal; named graphs are the unit of authority and trust, composed under a lattice whose one invariant is that composition never widens; and the governance specification $Σ$, the trace, and signed verdicts are facts in the store they govern, making the audit $T \models Σ$ a query. We evaluate with Census, a deterministic multi-writer lifecycle whose single seeded run scores every research question against planted ground truth: the gated store ends with 0 of 6 planted defects versus 6 of 6 ungated; all 7 composition probes uphold the lattice contract; 50 of 50 satisfied verdicts re-derive faithfully as of their instant while all 50 would be misreported under a latest-only rule set; and the SARC reference checker agrees with the in-store audit verdict-for-verdict, differing only on coverage semantics. A recorded trace from a governed writer surfaces a live enforcement gap the audit names with its remediation. On DEMM-Bench, an external decision-evidence sufficiency benchmark, a content-only reading of the exported records answers all 512 property-level governance questions correctly with zero overclaim under all eight degradation conditions, while container-presence baselines overclaim on up to 87.5% of them -- and the run surfaced, and led us to close, a gap in what a denial's verdict attests.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。