Adversarial by Origin: security taxonomies as law without courts
Adversarial by Origin (#194) forecasts that AI security taxonomies will formalize origin-based adversariality as de facto law by checklist, with no court deciding the question. Its forecasts cover the pleading that will be copied, the EU AI Act as importable definition and the defense choosing the first litigated case, and it states falsifiers for a twenty-four-month window. A historical thesis traces the asymmetry to Tim Wu's Machine Speech, and the godkinggoogle.com map summarizes the argument.
7
forecasts
1
historical thesis
3
deposits
2026-05
earliest
Each claim below is registered at the earliest deposit that states it, and quoted verbatim from the deposit text, with every later statement, its dated revisions, and the later records that claim it came true or failed. The claims are the deposits' own; this page records them and does not judge them.
PRED-1384.A1forecastregistered 2026-05-21 in #1384 · godkinggoogle.com — The Google Critique: Navigational Map and Canonical Introduction (Web Surface Code)
Argues that AI security taxonomies are converting external influence on machine meaning into attack by classifying origin rather than harm.
falsifier
Includes falsification conditions and a 24-month monitoring window.
window 24-month monitoring window
series: Adversarial by Origin (#194)
PRED-194.A1forecastregistered 2026-06-12 in #194 · Adversarial by Origin How the Classification of External Influence on Machine Meaning Becomes Law Without Beco
This series states what would prove it wrong, and this paper inherits the obligation. The thesis—near-certain formalization of origin-based adversariality, by an uncycled pathway, absent intervention—is falsified by any of the following within twenty-four months of deposit:
falsifier
(a) a federal appellate decision narrowly construing "integrity" in 18 U.S.C. § 1030(e)(8) against semantic expansion in a generative-system case;
(b) Department of Justice charging or declination guidance expressly distinguishing defensive perturbation of one's own published work from computer damage;
(c) adoption, in the operative definitions of the NIST AI 100-2 line or the OWASP LLM Top 10, of harm-based in place of origin-based classifying variables;
(d) a cycled First Amendment holding protecting upstream expressive influence on machine readers as speech;
window within twenty-four months of deposit
1 later statement
#1209 · 2026-06-12
The thesis—near-certain formalization of origin-based adversariality, by an uncycled pathway, absent intervention—is falsified by any of the following within twenty-four months of deposit:
1 confirmation record — what later deposits claim of it
#822 · 2026-06-12 · claims: came_true
Adversarial by Origin (EA-SEI-ADVERSARY-01), deposited 12 June 2026, stated five falsification conditions in Section IX and, conversely, listed confirmation markers — instances whose occurrence would confirm the thesis "in mode as well as content." Among the confirmation markers:
*directive language treating unlicensed semantic influence as attack*
This addendum records that the first confirmation marker fired on the day of deposit.
PRED-194.B1forecastregistered 2026-06-12 in #194 · Adversarial by Origin How the Classification of External Influence on Machine Meaning Becomes Law Without Beco
Its significance is architectural. It demonstrates the stack: ordinary sentences, pleaded as munitions, under three federal statutes simultaneously. Pleadings are pattern languages. This one will be copied.
2 later statements
#1209 · 2026-06-12
Its significance is architectural. It demonstrates the stack: ordinary sentences, pleaded as munitions, under three federal statutes simultaneously. Pleadings are pattern languages. This one will be copied.
#1209 · 2026-06-12
Pleadings are pattern languages. This one will be copied.
PRED-194.B3forecastregistered 2026-06-12 in #194 · Adversarial by Origin How the Classification of External Influence on Machine Meaning Becomes Law Without Beco
By the time any element of any offense is tested anywhere, the classification will have been operating as de facto law for years, and the court—if one is ever reached—will be asked to disturb not a theory but an installed base. Law by checklist precedes law by case, and increasingly replaces it.
1 later statement
#1209 · 2026-06-12
By the time any element of any offense is tested anywhere, the classification will have been operating as de facto law for years, and the court—if one is ever reached—will be asked to disturb not a theory but an installed base.
2 confirmation records — what later deposits claim of it
#822 · 2026-06-12 · claims: partly
First, the **speed**. The paper projected a formalization arc over months and years; the first marker fired within hours. The paper should have been less cautious about timeline, not more.
#1263 · 2026-06-13 · claims: partly
First, the **speed**. The paper projected a formalization arc over months and years; the first marker fired within hours. The paper should have been less cautious about timeline, not more.
PRED-194.B4forecastregistered 2026-06-12 in #194 · Adversarial by Origin How the Classification of External Influence on Machine Meaning Becomes Law Without Beco
The claim is not that the courts will decide this question wrongly. The claim is that they will not decide it, and that everyone building the regime knows they will not decide it, and that the regime is being built out of precisely the instruments that ensure they will not decide it.
1 later statement
#1209 · 2026-06-12
The claim is not that the courts will decide this question wrongly. The claim is that they will not decide it, and that everyone building the regime knows they will not decide it, and that the regime is being built out of precisely the instruments that ensure they will not decide it.
PRED-194.B5forecastregistered 2026-06-12 in #194 · Adversarial by Origin How the Classification of External Influence on Machine Meaning Becomes Law Without Beco
The EU AI Act's conformity, transparency, and enforcement provisions will be litigated in courts that still convene questions, before regulators that still take comments, with published reasoning that still digests. Definitions tested there—above all, any holding that distinguishes harm-based from origin-based classifications of input manipulation—become importable here through the compliance gravity that already makes Brussels the default drafter of American corporate policy.
PRED-194.B6forecastregistered 2026-06-12 in #194 · Adversarial by Origin How the Classification of External Influence on Machine Meaning Becomes Law Without Beco
The no-cycle equilibrium is punctuated, not eternal; eventually some prosecutor or plaintiff will pick a defendant. The intervention is to ensure the first fully litigated case is chosen by the defense rather than the prosecution.
2 later statements
#1209 · 2026-06-12
The no-cycle equilibrium is punctuated, not eternal; eventually some prosecutor or plaintiff will pick a defendant.
#1209 · 2026-06-12
The no-cycle equilibrium is punctuated, not eternal; eventually some prosecutor or plaintiff will pick a defendant. The intervention is to ensure the first fully litigated case is chosen by the defense rather than the prosecution.
PRED-194.H1historical thesisregistered 2026-06-12 in #194 · Adversarial by Origin How the Classification of External Influence on Machine Meaning Becomes Law Without Beco
Tim Wu's "Machine Speech," 161 U. Pa. L. Rev. 1495 (2013), posed the question from the output side: when do algorithmic outputs merit speech protection? The decade answered him asymmetrically. Machine speakers acquired rights; machine listeners became attack surfaces. The reader was reclassified as a perimeter.
window the decade (after Wu 2013)
1 later statement
#1209 · 2026-06-12
Tim Wu's "Machine Speech," 161 U. Pa. L. Rev. 1495 (2013), posed the question from the output side: when do algorithmic outputs merit speech protection? The decade answered him asymmetrically. Machine speakers acquired rights; machine listeners became attack surfaces. The reader was reclassified as a perimeter.