Japanese version: IMaterialQuarantine (インターフェース仕様)

IMaterialQuarantine (Interface Specification)

1. Responsibility Boundary

IMaterialQuarantine defines the boundary responsible for safety enforcement and structural canonicalization of materials ingested into the AI system (external data, RAG outputs, user files, and related sources).

• Role:

Promote unverified ContextFragment inputs into trusted and structured IStructuredMaterial.

• Non-role:

Physical scanning (malware, corruption, low-level validation) belongs to IMaterialScanner. IMaterialQuarantine focuses on governance-driven quarantine logic and shape conversion.

2. Contract Signature

namespace AIKernel.Abstractions.Material;\n\n/// <summary>\n/// Quarantines external material and converts it into a structured form\n/// that can be safely consumed by the system.\n/// </summary>\npublic interface IMaterialQuarantine\n{\n    /// <summary>\n    /// Quarantines and normalizes an unverified fragment.\n    /// </summary>\n    /// <param name="rawFragment">Raw fragment to quarantine</param>\n    /// <param name="ct">Cancellation token</param>\n    /// <returns>Quarantined structured material</returns>\n    Task<IStructuredMaterial> QuarantineAsync(ContextFragment rawFragment, CancellationToken ct = default);\n}

Note: QuarantineViolationException and InvalidMaterialFormatException are representative implementation-layer exception names. The current abstraction contract does not hard-code exception type names.

3. Related Use Cases

• UC-07 Material Quarantine:

Acts as the first guardrail during external material ingestion.

• UC-21 Material Quarantine and Policy Enforcement:

Works with IPdp and IMaterialScanner to block policy-noncompliant material.

4. Governance & Determinism

• Fail-Closed:

If evaluation becomes indeterminate or validation fails unexpectedly, processing must terminate on the reject side.

• Canonicalization expectation:

Logically equivalent inputs must converge to equivalent IStructuredMaterial output forms, contributing to deterministic replay.

5. Implementation Notes

• If trust score from IMaterialScanner is below threshold, reject quarantine by policy.
• During conversion to IStructuredMaterial, apply policy-based PII masking and confidential data removal.

Changelog

• v0.0.0 / v0.0.0.0: Initial draft
• v0.0.1 (2026-05-06): Version upgrade aligned with documentation guidelines