Mirror Reflections · Research and experiments
Mirror protects both sides of an AI system. Encryption keeps prompts, context, memory and evaluations private across supported paths, including FHE inference. Goal-bound authority limits what agents can delegate, access and commit. Each investigation shows one of these boundaries with primary sources and runnable tests.
08 investigations · Updated 22 Oct 2026
How Mirror Cyber, MJEV, a security harness, and independent verifiers connect investigation to remediation across incident response, vulnerability management, SRE, and detection engineering.
A valid opaque reasoning artifact can be replayed without breaking its encryption. Mirror replaces the portable artifact with a handle bound to the original user, session, and model.
Zero Data Retention limits residual copies after processing. It does not stop conventional inference infrastructure from receiving usable plaintext while the model runs.
One encrypted model pass is not a response. Token selection, KV memory, feedback, ciphertext schema, precision, refresh, GPU placement, and output release must remain connected across the complete supported generation.
AVERI and Google DeepMind showed that private benchmarks and proprietary model weights can meet inside an attested enclave. This note shows how FHE can reduce the plaintext and trusted-code surface inside that shared boundary.
A capable agent can recover from a blocked path by finding another route. The security question is whether that new information can create new authority. We classify seven incident patterns and test the same task with and without destination-verified action control.
Shared memory, compaction and agent handoffs can carry information into actions the owner never approved. Follow the threat from customer architecture and published research to the controls that keep authority attached to the original task.
Deleting a prompt does not govern the labels, aggregates and synthetic examples derived from it. This note follows that lifecycle, then runs four encrypted classifications through a cohort and differential privacy release, a purpose-bound evaluation and a browser-verified receipt.
Encrypt intelligence before it crosses a boundary. Limit what may be derived. Keep agent authority tied to the original goal. Verify every consequence before it becomes real.
