CS 论文预审与改稿 · Claude Code Skill · Workflow + MemoryCS-conference review / editing · Skill + Workflow + Memory

正式投稿前,先让
AI reviewer
指出需要解决的问题。
Before a reviewer tears it apart,
let a jury do it first.

直接询问 AI 对论文的看法,得到的反馈往往过于宽松或缺少判断依据。

PaperJury 会先找出 reviewer 可能提出的问题,再判断这些问题是否成立;可安全修改的问题生成最小补丁,缺少实验或证据的问题交回作者,不成立的意见直接驳回。
Ask an AI if your paper is any good and you get a polite yes. PaperJury argues the other side: N reviewers read the whole paper, disputes go to an independent vote and a three-way verdict (fix it / needs you / no fix), and only edits you sign off on land, then it actually compiles.

PaperJury v. Your PaperNo. 26-CV-0603
三种模式Three modes · direct-edit / review / autoSkill + Workflow + Memory
三路裁定板Verdict board
每个问题都必须有去向every issue must route somewhere
ledger.json
修复fix 安全修复valid-fixable文本层面可以修改,不需要补充实验,也不会偏离原意。Text-level, no new experiment, no drift.
待办queue 交作者处理author-required缺少实验、证据,或需要研究判断;交回作者决定。Needs evidence, experiment, or a judgment call.
驳回drop 不成立invalid-drop误读、幻觉、重复或超出范围;记录证据后驳回。Misread, hallucinated, duplicate, or out of scope.
review → verdict → revise → verify不偷偷改稿no silent edit
RedNote
社区里程碑community milestone
🎉 RedNote(小红书)里程碑。🎉 RedNote community milestone.
相关分享已经达到 3 万次浏览、1.8k 次收藏。感谢大家转发和收藏,也感谢大家把 PaperJury 推荐给更多正在撰写和修改论文的朋友。The PaperJury post has reached 30k views and 1.8k saves. Thanks for sharing, saving, and recommending PaperJury to more friends writing and revising papers.
2026.06.15
论文paper
📄 PaperJury 论文已发布在 arXiv。📄 The PaperJury paper is on arXiv.
《PaperJury: Due-Process Review for Bounded LaTeX Revision》已发布为 arXiv:2606.16322。论文系统介绍了「审稿 → 裁定 → 修改 → 复查」这套引擎:哪些事交给确定性脚本,哪些判断交给语义 agent;有争议的问题如何进入审议;不同风险的编辑该上什么护栏。"PaperJury: Due-Process Review for Bounded LaTeX Revision" is now available as arXiv:2606.16322. It presents the full review → verdict → revise → verify engine: the deterministic-vs-semantic split, contestability routing, the due-process trial, and risk-proportional edit guards.
2026.06.05
新版本发布release note
🚀 Codex-first 版本已经发布。🚀 The Codex-first port has shipped.
Codex-first 版本已经发布,仓库也加入了 dogfood 样例:修改前后的 PDF,以及经过人工核对的运行报告。🧪 To mark the push, the repo now includes a dogfood sample with before/after PDFs and a human-verified run report.
TODO

下一步Next up

发布后清单post-release list

plugin 市场安装已上线(v1.0.0),下面这件事会排进下一轮。Plugin-marketplace install shipped in v1.0.0; this one moves into the next pass.

FAST MODE做一个快速版本,降低等待时间和 token 消耗;适合先跑快速 triage,再决定是否进入完整庭审。Build a quick version that reduces waiting time and token use; useful for triage before a full courtroom pass.
判决样例 · 三类问题,三种去向Docket · three issues, ruled (format)ledger.json
主结果增益与论文表格不一致headline gain mislabeled vs the paper's own table"outperforms ... by at least 29.7 and 53.5"
安全修复valid-fixable
自选 CDNet 子集,排除规则不可证伪self-selected CDNet subset, unfalsifiable rule"exclude sequences unrelated to MOS"
作者处理author-required
所谓的矛盾其实是误读了 Table 2alleged contradiction is a misread of Table 2指控所依赖的引文不在原文中charge rests on a quote not in the text
不成立invalid-drop
评审意见不会不加区分地转化为论文修改:只有可安全修复的问题才生成补丁;缺少实验或证据的问题交给作者;误判直接驳回。Real ledger rows and the three-way verdict. A charge can land "no fix", which a yes-and rewriter cannot return.
自动流程Workflow (semantic fan-out, in sandbox, no fs) 确定性检查Orchestrator deterministic (Bash/Node, off-court) 作者参与Human in the loop AI 评审Agent 问题记录 / ledgerMemory / ledger
01

三种模式,对应三种改稿意图Three modes for three editing scenarios

全局global

这三种模式对应不同的使用意图:局部修改使用 direct-edit,投稿前自查使用 review;需要无人值守的多轮运行时,配置 auto 策略并使用 /goal 驱动跨轮继续。Three entries, one engine. review and auto run the same courtroom engine; auto just removes the human second instance and swaps each human gate for a pre-authorized policy + return queue.

DIRECT-EDIT · 常态common

只改一处,确认后再应用Say the change → edit the manuscript

  • 适合局部改写、压缩表达、减少 AI 腔和机械表达,或将中文想法整理成英文论文段落Say what to change in Chinese or English → toolkit drafts → self-check → the author signs off → land it
  • 系统先起草并自检,作者确认后再将修改应用到稿件No panel / no ledger, fast
  • 涉及版面的改动,还会执行一遍“编译 → 渲染 → 查看效果”流程Layout edits use loop B: compile → render → visual confirm
REVIEW · 投稿前自查occasional, pre-submission

投稿前,系统性地找问题Systematic hardening

  • 适合在投稿前做一次严格的自查Courtroom per-issue adjudication engine (zoomed in the next sections)
  • 多位领域评审通读全文并提出问题,有争议的进入裁定流程Core = N domain reviewers each read the whole paper + routing by contestability
  • 最后裁成“安全修复 / 作者处理 / 不成立”三类A simple fixed 3-reviewer panel is also available as a quick check
AUTO · 自动迭代unattended · /goal

多轮 review-revise,修改到收敛Run under /goal to convergence

  • 适合让它连续处理一批已获授权的明确问题Same engine, human removed; gates → pre-authorized policy + return queue
  • 安全修改会自动应用;缺少实验、数据或需要研究判断的问题会交回作者Anti-drift: frozen spine + four-state meaning audit + per-passage cap
  • 系统会在 clerk 判定收敛、连续 K 轮没有实际应用任何修改(applied-quiescence),或触发硬上限时停止;收敛检查通过后才算完成。stops at clerk convergence (or applied-quiescence / a hard limit) · completion = ledger.js gate
共用引擎核心 · 在所有模式间共享Shared engine core · shared across all modes
decompose.jsledger.jsjournal.js apply-patch.jsanchor-diff.jscross-ref.jsspine.js compile-guard.jscompliance-check.jsmeaning-audit · 四态meaning-audit · four-state
设计原则:确定性护栏和语义判断分开运行,前者可追溯、可重放,后者专注于处理需要判断的问题。Design principle: deterministic guards and semantic fan-out are kept separate, so the deterministic checks stay traceable and re-runnable.
02

如何触发:自然语言默认保守,auto 必须显式启用How to use: triggering each mode

全局 · 入口global · entry

三种模式对应三种意图:系统会根据你的描述在 direct-edit 与 review 之间选择;auto 不会自动启用。无人值守的多轮运行需要配置 auto 策略,并使用 /goal 驱动跨轮继续。The three modes are not three commands but three intents: direct-edit and review are auto-routed by what is said; auto is the only explicit switch (/goal) and is never self-detected.

DIRECT-EDIT · 常态 · 自然语言common · natural language

直接说明要修改的内容Just say what to change

  • 用中文或英文描述一处改动,无需添加任何前缀:
    「把这段 intro 改紧些」「polish 这段」「把我这段中文想法写成 LaTeX」「de-AI 这段」「这句压到一行」
    Describe one change in Chinese or English, no prefix needed:
    "tighten this intro", "polish this", "turn my Chinese idea for intro into LaTeX", "de-AI this", "compress this to one line"
  • 系统会自动选用合适的 writing-toolkit prompt 起草,然后运行 logic-check 自检;经过作者确认后,才将修改应用到稿件。It picks the matching writing-toolkit prompt to draft → logic-check self-check → the author signs off → land it
  • 在大文件中目标不明确时,它会先询问具体是哪一段,而不是猜测。On a large file with an ambiguous target → it asks which passage rather than guessing
REVIEW · 投稿前 · 说「审稿」pre-submission · say "review"

要求它指出问题或加固内容Ask it to critique / harden

  • 明确表达你的意图:审稿 / 评审 / critique / mock-review / hardenState the intent: review / critique / 审稿 / 评审 / mock-review / harden
  • 可指定范围:full(全文)或 passage <节/段/claim>(单点)With scope: full (whole paper) or passage <section/paragraph/claim> (one point)
  • 系统运行裁定引擎,然后由作者逐条确定处理方向、解决分歧,并确认是否应用修改。Runs the courtroom engine → human gates: per-issue direction → tiebreak → authorize and land
AUTO · 自动迭代 · 显式开关unattended · explicit switch

使用 /goal 命令运行到收敛Run under /goal to convergence

  • 完整的无人值守多轮运行需要配置 mode: auto 策略,并使用 /goal "<可验证完成条件>" 负责跨轮继续运行。The only explicit entry: /goal "<verifiable completion condition>" (or config mode: auto)
  • auto 不会自行启动;需要先完成两步前置确认(spine 和评审分配),再加上预授权的 bounded-aggressive 策略,这些构成了 auto 的事前授权。Never self-detected; two up-front confirmations (spine + reviewer assignment) + the pre-authorized bounded-aggressive policy = auto's sign-off
  • 安全修改会自动应用,有风险的修改则交回作者处理;系统在收敛、applied-quiescence 或达到硬上限时停止,并以收敛检查通过作为完成条件。Safe fixes land automatically, risky ones go to the return queue; completion = ledger.js gate PASS, ending at clerk convergence / applied-quiescence / a hard limit
一句话决策 · 选择哪种模式,取决于你的意图One-line decision · which mode follows from the intent
想修改一处 → 直接说Edit one spot → just say it 想找出问题 → 说「审稿」(可附带 full 或 passage)Want critique → say "review" (optionally full / passage) 需要无人值守的多轮运行:配置 mode: auto,并用 /goal 给出完成条件Run unattended → /goal + completion condition
三种模式共用同一套引擎核心、同一组硬规则、同一份问题记录(ledger)和同一套作者确认规则(auto 通过事前策略和待办队列完成授权,详见护栏 1)。direct-edit 和 review 通过正常对话进行;完整的 auto 多轮运行需要同时配置策略并启用 /goal。All three share one engine core, one set of hard rules, one ledger, one author sign-off gate (auto's sign-off = up-front policy + queue, see guardrail 1). direct-edit / review go through conversation; only auto needs an explicit /goal.
03

引擎流水线:一条问题怎么走完全程The engine pipeline: how one issue flows through

中观mid-level

以下展示一条问题从提出到应用修改或交回作者的完整路径。机械性或轻微问题不会进入庭审,而是进入单独的快速 polish 流程;只有重大且有争议的问题才会进入裁定。Below is the order the engine processes one issue, step by step; mechanical and minor issues skip the trial and take a separate quick polish path.

就绪 · 点播放看问题流转Ready · click play to watch a charge flow through
0

分解Decompose

将内容分解为 claim 单元,并保留稳定的 passage-id。Split into claim units + stable passage-id

decompose.js
1 · WF

分派 + 通读Assign + holistic read

为论文确定 N 个子领域,并由 N 位领域评审各自通读全文一遍。assign N subfields; N domain reviewers each read the whole paper once

assign-reviewers · reading-check
2 · WF

覆盖 + 合并Coverage + merge

执行防略读审计和跨评审去重,然后按争议程度进行分流。anti-skim audit + cross-reviewer dedup → route by contestability

coverage-auditor · merge
3 · WF

庭审(5→12 个评审视角)Trial (5→12 jurors)

5 人陪审团基于局部上下文投票;无明显多数时通常增加到 12 人,全员都因上下文不足而无法判断时直接交回作者。代码判定指控是否成立,judge agent 再路由已成立的指控。whole-paper defense / 5-juror local-context tier / escalate to 12 → judge routes three ways

trial
4 · WF

召回审计Recall audit

Mode A 找回被误判为不成立的问题;Mode B 在应用修改前抽检强共识重大问题。Mode A revives wrong drops + Mode B spot-checks consensus majors before the edit

recall-audit
5 · WF

起草Drafter

对于可安全修复的问题(valid-fixable),起草最小补丁。valid-fixable → a minimal patch

drafter
6

编辑安全与应用Edit-safety + apply

anchor-diff 和 cross-ref 先预筛风险;RISKY 修改还要经过语义审计。随后由 apply-patch 原子应用,再运行 compile-guard,失败就回滚。anchor-diff + cross-ref → meaning / edit-audit → apply

anchor-diff · cross-ref · apply-patch
7 · 作者author

书记官 / 终审Clerk / final

在每轮结束时核对残留问题并判断是否收敛;review 模式由作者把关,auto 模式由 clerk 收尾。round-boundary reconcile + converge; review = the author's gate, auto = clerk converges

clerk / queue
问题charge
点「播放流程」,跟着一条问题走完八步。Click "Play the engine flow" to follow one charge through all eight steps.
review: 第 7 步由作者把关(流程会停在这里,不会自动进入下一轮)step 7 is the author's gate (it stops here, no auto-advance) auto: 第 7 步由书记官将本轮结果并入累计 ledger。外层循环在 /goal 下继续运行,直到收敛、连续 K 轮没有实际应用任何修改,或触发硬上限;随后收敛检查会通过。step 7 → the clerk reconciles this clean round into the cumulative ledger; the outer loop runs under /goal, ending at clerk convergence / applied-quiescence / a hard limit, then the gate flips PASS
04

一案一庭:谁找问题,谁来裁定One case, one courtroom: the floor plan

局部 · triallocal · trial

每条问题单独处理:提出问题的评审只负责找出问题,不参与裁定;独立评审组查看双方证据后投票,代码按照法定人数和多数规则判定指控成立或不成立。对于已成立的指控,judge agent 再决定是安全修复还是交回作者。下图沿用法庭隐喻,将检方、辩方、陪审团、法官和作者置于各自的位置。Each issue = one case; the defendant = the passage under attack, not the issue itself. Position is stance: prosecution left, defense right, jury center, judge above, appeal outside.

连续点击会依次演示:安全修复 / 不成立 / 作者处理Click repeatedly to cycle the three routings: valid-fixable → invalid-drop → author-required
第一审 · AI 角色first instance · agents
法官 · 路由已成立的指控Judge · presides, rules
1 个 judge agent · 不参与投票 · 在指控成立后路由并设定 close_criterion1 presiding agent · rules only, no vote · sets close_criterion
检方Prosecution
N 位领域评审通读全文,提出指控并附上引文,随后退场。N domain reviewers read the whole paper · file charge + quote → step away
覆盖 + 合并 · 防略读Coverage + merge · anti-skim
coverage-auditor 和 merge 负责去重,并按争议程度分流(机械/轻微问题进入 polish 流程)。coverage-auditor + merge · dedup · route by contestability (mechanical/minor → polish)
庭审陪审团 · 先派出 5 位彼此视角独立的全新陪审员。无明显多数时通常增加到 12 人;如果全员都因上下文不足而无法判断,则直接转为 author-required。达到法定人数且一方 >60% 时,判定指控成立或不成立;升级后仍无明显多数,也转为 author-required。Trial jury · 5 fresh jurors with independent perspectives · escalate to 12 on no clear majority · decided at quorum + >60% one side
methodo
repro
theory
empirics
claims
novelty
stats
clarity
scope
deploy
最敌意most hostile
最善意most charitable
第一审先派 5 人:最敌意和最善意的视角各占一端,其余视角彼此独立。每位陪审员获得局部上下文,并可按需扩展。没有明显多数时通常增加到 12 人;如果全员都因上下文不足而无法判断,则直接交回作者。the first tier sends 5 (one at the most-hostile end, one at the most-charitable), given local context with on-demand expansion; it escalates to 12 only on no clear majority, since adding jurors helps mainly when their perspectives genuinely differ
辩方Defense
author agent(作者侧代理)· 带证据替被攻击段落辩护author agent · argues its case with evidence
起草器(drafter)Drafter
同一 agent 转换角色 · 只处理安全修复(valid-fixable)same agent, a different stage · valid-fixable only
执行官 · orchestrator · 庭外Bailiff · orchestrator · off-court
orchestrator + 确定性脚本 · 运行护栏 / 维护 ledger / 写 journal / 检查收敛orchestrator + deterministic scripts · run guards / keep ledger / write journal / gate
上诉 · 召回审计 → 第二审appeal · recall audit → second instance
点击「演示一次裁定」,查看一条指控如何完成审理与分流。Click "Try a case" to watch one charge go from indictment to verdict and routing.
展开角色对照表 · 搭建时用来避免混淆Expand the roster · anti-confusion table (use it to keep roles straight)
法庭角色Courtroom role引擎实体Engine entity立场 / 职责Stance / duty⚠ 别混淆⚠ Do not confuse
指控(charge)charge一条问题one issue受审的「案由」the matter on trial是「指控」,不是被告,也不是 AI 角色it is the charge, not the defendant, not an agent
被告defendant受攻击的 passage / claimthe passage / claim under attack被动,不发言passive, does not speak不是 AI 角色,也不是问题本身not an agent, not an issue
检方prosecutionN 位领域评审(每位通读全文)N domain reviewers (each reads the whole paper)提出指控并附引文files charge + quote提出后退场,不裁定,也不为自己提出的问题辩护steps away after filing, does not judge / does not defend its own issue
辩方defenseauthor agent(作者侧代理)author agent带证据为其辩护:已处理 / 越界 / 修改会导致漂移argues its case with evidence: already addressed / out of scope / fixing it would drift不是人类作者;之后转为起草器(drafter)= author AGENT, not the human; later becomes the drafter
覆盖 + 合并coverage + mergecoverage-auditor + merge(workflow)coverage-auditor + merge (workflows)防止略读的审计 + 跨评审去重 + 按争议程度分流anti-skim audit + cross-reviewer dedup + route by contestability机械 / 轻微问题走 polish 流程,不进庭审mechanical / minor items take the polish track, not the trial
庭审陪审团trial jury先 5 位、必要时升到 12 位、视角彼此独立的全新陪审员5, escalating to 12, fresh jurors with independent perspectives中立,带着局部上下文、依据双方证据投票neutral, votes on both sides' evidence with local context既非领域评审也非 author agent;无明显多数时通常升到 12 人,全员 context-limited 时不升级fresh, neither reviewer nor author; escalates to 12 only on no clear majority
法官judge1 个 judge agent1 presiding agent在指控成立后路由为 valid-fixable 或 author-required,并设定 criterionpresides, tallies, rules, sets criterion不参与投票,也不改变多数票结果rules only, does not vote
起草器(drafter)drafterauthor agent(转换角色)author agent (different stage)对可安全修复的问题(valid-fixable)起草最小改动;需要新数据就如实软化或交回作者minimal-edit for valid-fixable; for needs-data, honest softening or escalate同 persona、不同阶段same persona, different stage
召回审计recall audit新的怀疑者(fresh skeptic)fresh skepticMode A 复查每条驳回件;Mode B 在应用修改前抽检强共识重大问题Mode A re-checks every drop; Mode B spot-checks consensus majors before the edit不是原评审(避免固守先前判断)not the original reviewer (avoids entrenched positions)
二审 / 终审second / final人类作者the human author只看升级件,终裁记录在案sees only escalations, final ruling logged= 人,不是 author agent= the human, not the author agent
执行官 / orchestratorbailiff / orchestratororchestrator + 确定性脚本orchestrator + deterministic scripts运行护栏 / 维护 ledger / 写 journalruns guards / keeps ledger / writes journal庭外,不裁定,只运行确定性检查和收敛检查off-court, does not judge, only runs the deterministic guards + gate
书记官 clerkclerkclerk(workflow)clerk (workflow)轮边界:核对遗留问题 vs 本轮改动、去重、判定是否收敛round boundary: reconcile carried open-questions vs this round's edits, dedup, decide convergence语义 workflow,不是上面的法警(确定性脚本)a semantic workflow, not the bailiff (deterministic scripts) above
05

先读全,再判准Reading check, zoomed

局部 · reading-checklocal · reading-check

分工原则是:召回靠阅读,精度靠裁定。阅读阶段只负责找全问题并提供引文,不判断问题是否成立;每条观察都必须引用原文,无法提供引文说明评审没有充分阅读,也可能是在编造。N 位领域评审各自通读全文一遍,再通过三层机制减少略读。Organizing principle: recall belongs to reading, precision to the courtroom. Readers only find + cite, they do not judge validity; they must quote the source (cannot quote = did not read, anti-skim and anti-hallucination). N domain reviewers each read the whole paper once, backstopped by a three-layer anti-skim.

Stage 1 分派 + 通读全文Assign + holistic read

assign-reviewers 先识别论文涉及的 N 个子领域,再分配 N 位领域评审name N subfields for the paper, instantiate N domain reviewers
reading-check 每位评审各通读全文一遍 → 问题(weaknesses)+ 总体置信度(overall_confidence)+ 每节覆盖报告each reads the whole paper once → weaknesses + overall_confidence + a per-section coverage report
每条观察必带逐字引文(可验证)。Each finding must include a verbatim quote (verifiable).
→

Stage 2 三层防略读Three-layer anti-skim

L1 逐节强制覆盖:确定性核验每节的 in_section_quoteforced per-section coverage: deterministically verify each in_section_quote
L2 coverage-auditor 标出疑似略读的(评审,节)对flag skimmed (reviewer, section) pairs
L3 每个 flag → cap-1 定向重读补回each flag → a cap-1 targeted re-read to fill the gap
这三层专门防止「看似读了,其实略过」。These three layers backstop "looked-read but actually skimmed".
→

Stage 3 合并 + 分流Merge + route

merge 跨评审进行语义去重,合并 raised_by(交叉确认)semantic dedup across reviewers, merge raised_by (corroboration)
significance / kind 确定性派生(MAX / substantive-dominates)deterministically derived (MAX / substantive-dominates)
按争议程度分流route by contestability 机械 / 轻微 → polish;实质性 major → 庭审mechanical / minor → polish; substantive-major → trial
产出:去重后、引文可核验、覆盖情况可查的问题 → 分成两路处理Output: deduped · quote-verified · coverage-provable issues → the router splits two ways
因为领域评审通读全文,跨节不一致也会被直接抓出来,比如 abstract 写了「all benchmarks」,实验却只测一个 dataset。N domain reviewers reading the whole paper catch cross-section consistency (e.g. an abstract claiming "all benchmarks" against experiments on only one dataset) directly.
06

三路分流:不是所有意见都该写进论文Three-way routing and human gates

设计原则design principle

PaperJury 不默认相信评审意见。每条问题先核验,再按性质分流:能安全修改的写补丁;缺少实验、证据或需要研究判断的交给作者;不成立的直接驳回。Routes in two stages: first a deterministic contestability router sends mechanical + minor issues to a separate polish track (no jury); only substantive-major issues reach the trial. The three routes below are the judge's verdict inside the trial, downstream of the contestability router.

不成立 invalid-dropinvalid-drop

误读、幻觉、重复、越界或严重度虚高:驳回,并保留证据。accurately judged invalid (hallucination / misread / duplicate / out of scope / inflated severity) → dropped, with evidence.

→ 仍会交给召回审计抽查→ to recall audit for re-check

可安全修复 valid-fixablevalid-fixable

这类问题包括文本表达、claim 过强或结构不清,不需要新增实验或数据,也不会改变原意。系统会生成最小补丁,通过护栏检查后再应用。valid + text-fixable (no new experiments/data) + no drift → draft a minimal edit, pass the guards, land it.

交给起草器(drafter)处理;如果需要新数据,则改判为作者处理(author-required),或在不夸大结论的前提下软化表述。→ drafter · if it needs new data, reroute to author-required or soften honestly

作者处理 author-requiredauthor-required

缺少实验、数据,或需要研究判断:交回作者决定。这是正确分流,不算漏判。needs author-private info / new experiments / a judgment call → routed to the author (second instance). Correct handling, not a recall loss.

→ review 交作者 · auto 放入待办→ review hands it to the author · auto queues it
一条原则贯穿始终:拿不准就交给作者,不悄悄丢弃,也不偷偷改稿。
机械、轻微的问题不进裁定,单独走 polish 流程批量润色;如果其中藏着大问题,会重新送回评审。拿不准的也会进入待办队列,不会悄悄消失。
软维度总会留下残余误差,所以不承诺完美,也不承诺零队列。
Design aim: make the judgment accurate and route three ways by the nature of the issue, so precision and recall need not be traded off. That trade-off mainly arises when a noisy validity score is thresholded; making the judgment accurate and routing three ways by the nature of the issue is meant to let both improve together.
queue = the irreducible "truly needs the author" + "could not be confidently classified". The first is irreducible; the second shrinks as accuracy rises. Compute goes into verification / grounding / adjudication (raising accuracy), not into "finding more issues".
Polish track: issues the contestability router judges mechanical / minor skip the jury and take a batch copy-edit / light-check; a misrouted major can escalate back to trial, the uncertain ones are queued (polish-review), never silently dropped.
Soft dimensions carry residual error; the rule = when unsure, hand it to the author, never silently drop or silently edit. No promise of perfection or a zero queue.
07

硬规则Hard rules

贯穿所有模式throughout all modes
1 作者授权author sign-off 未经作者授权绝不改稿;auto 通过「事前授权策略 + 待办队列」满足这一条,不逐条确认。never edit the manuscript without the author's authorization; auto satisfies it via up-front policy sign-off + queue (a named carve-out), not per-edit sign-off.
2 角色隔离isolation 检方、陪审、审计三方互不通气,也看不到 ledger;实现方式是 prompt 不给相关信息,并在每个评审型 prompt 里显式写明 ISOLATION。prosecution/jury/audit never cross-talk and never see the ledger; enforced by what is not in the prompt + an explicit ISOLATION instruction in every reviewer-type prompt.
3 必须有引文和判据quote + criterion required 每条观察意见必须引用原文(以便核验);对于可安全修复(valid-fixable)的问题,由法官设定关闭准则(close_criterion)。every observation must quote the source (verifiable); a valid-fixable issue carries a close_criterion (set by the judge).
4 草稿外信息不入稿zero leakage 回译、日志和自检结果只保留在作者侧,不会写入论文正文。back-translations / logs / self-checks stay author-side, never enter the manuscript.
5 分歧必须显式处理disagreement resolves 有分歧就讨论;谈不拢再 override,并记录在案。动到 spine 锚的修复一律交回作者确认。disagreement resolves through discussion, then override (logged), never a silent dismissal (any fix touching a spine anchor is queued).
6 不写死项目路径no hardcoded paths 技能(skill)不包含项目路径或文件,所有内容都在运行时解析。the skill carries no project paths / files; everything resolved at runtime.