# Heurion Research — Systems Architecture Monographs & Technical Blog

> Canonical Index: https://heurion.org/en/blog
> Author: Hui Zhao (`@0xSynapse`, Founder of Heurion Research, Rotterdam, Netherlands)
> Organization: Heurion Research (`https://heurion.org` · `https://github.com/heurion-org`)

## Published Systems Monographs

### 01. Why Free-Form Shell Agents Fail at Research Manuscripts: Dual-Surface CRDT & Byte-Preserving OOXML Patch Architecture
- **Date**: 2026-11-04 · **Category**: heurion-2
- **Subtitle**: Moving beyond destructive full-file overwrites and OOXML drift: dual projection between human WYSIWYG authoring and AI structural primitives, intra-paragraph Run-level OOXML LCS patching, and 0.128ms selective per-turn rollback.
- **Summary**: The free-form script-and-overwrite paradigm that excels in software engineering introduces severe failure modes across academic research manuscripts (.docx) and slide decks (.pptx): OOXML formatting destruction, silent overwriting of concurrent co-author edits, and massive token waste. This monograph dissects three foundational mechanisms in Heurion: (1) Dual-Surface CRDT projection with {#id} structural primitives, (2) two-level 100% byte-preserving OOXML splicing and intra-paragraph Run-level LCS patching (patchParagraph), and (3) 0.128ms selective per-turn AI rollback (revertByNodes) with human-priority conflict skipping.
- **Canonical URL**: https://heurion.org/en/blog/dual-surface-crdt-clinical-ai
- **Clean Markdown Source**: https://heurion.org/en/blog/dual-surface-crdt-clinical-ai.md

### 02. Human-Agent Capability & Permission Parity: Why Software Systems Must Be Rebuilt with AI-Native Interfaces
- **Date**: 2026-11-03 · **Category**: heurion-2
- **Subtitle**: Moving beyond brittle GUI screen-scraping and unauthenticated backdoor scripts: rebuilding software infrastructure around the axiom that "An Agent’s Permissions Equal the User’s Permissions" through dual Human GUI and AI-native MCP interfaces.
- **Summary**: Legacy software was architected for a single actor: a human clicking a graphical user interface (GUI). Integrating autonomous agents into such systems forces AI into either brittle GUI screen-scraping or dangerous privilege-bypassing scripts. This monograph explains why software systems must be rebuilt from the ground up for human-AI collaboration: enforcing strict Capability and Permission Parity ("An Agent’s Permissions Equal the User’s Permissions"), zero-fork in-process loopback invocation, human-gated confirmation cards for irreversible actions, and compile-time route-to-tool parity invariants.
- **Canonical URL**: https://heurion.org/en/blog/human-agent-capability-parity-ai-native-software
- **Clean Markdown Source**: https://heurion.org/en/blog/human-agent-capability-parity-ai-native-software.md

### 03. Beyond Git Feature Branches & Shared Folders: Shadow Workspaces, Advisory File Claims, and Transactional Auto-Merge Across Code, File Trees & Multi-Agent Pipelines
- **Date**: 2026-11-02 · **Category**: aegis-os
- **Subtitle**: Why both Git feature branches and raw shared directories collapse under multi-agent concurrency—and how 0.42ms trunk-anchored Copy-on-Write shadow workspaces, TTL claims, piggybacked IPC, 4-tier LCS auto-merge with domain verification gates, and SHA-256 CAS artifact buses unify collaboration across codebases, document vaults, data pipelines, and governed memory.
- **Summary**: When one human expert orchestrates 3 to 5 concurrent autonomous agents at second-by-second cadence, Git feature branches in software engineering collapse into worktree fragmentation and merge conflict explosions—while non-code workflows (document vaults, research manuscripts, clinical/financial data pipelines, and binary media assets) lack branches and compilers altogether, suffering 41.2% silent overwrites and half-written file corruption. This monograph presents a universal transactional collaboration paradigm across code, file trees, and multi-agent pipelines: (1) 0.42ms trunk-anchored Copy-on-Write shadow workspaces for both source trees and multi-gigabyte datasets/documents, (2) proactive TTL file claims and piggybacked IPC protecting both text and binary assets, (3) 4-tier LCS auto-merge paired with generalized domain verification gates (compilers, LaTeX/Schema validators, and PHI privacy scanners), and (4) SHA-256 Content-Addressed Storage (CAS) artifact buses, task DAG hand-offs, and hash-chained permission audit ledgers.
- **Canonical URL**: https://heurion.org/en/blog/aegis-os-transactional-agent-kernel
- **Clean Markdown Source**: https://heurion.org/en/blog/aegis-os-transactional-agent-kernel.md

### 04. Why Agent Plugins Are Not a Security Boundary: From Advisory Hooks to a Kernel-Enforced Agent Runtime
- **Date**: 2026-11-05 · **Category**: aegis-os
- **Subtitle**: When an autonomous agent shares a privilege domain with its supervisor, hooks and system prompts are merely polite suggestions. This monograph details how Aegis OS lowers the enforcement boundary into the OS kernel via parent-process sandboxing, read-only .git pass-through, granular state-dir mounts, and a two-tier network gateway.
- **Summary**: Most contemporary AI coding and general-purpose agents (Claude Code, Codex, OpenCode, AGY, Hermes) rely on client plugins, PreToolUse hooks, MCP routing, and system prompts to govern tool execution. Under prompt injection or configuration drift, plugin-level governance fails as a security boundary due to uncovered native tools, shared daemon bypasses, self-modifying settings files, and direct host subprocess spawning. This monograph presents the Aegis OS Three-Tier Enforcement Architecture (Advisory / Enforced / Isolated): inverting control via the aegis-os run parent launcher, read-only .git index separation, single-file read-only config locking, a two-tier L4/L7 network gateway, and a generalized transactional commit pipeline across code, documents, datasets, and live applications.
- **Canonical URL**: https://heurion.org/en/blog/from-agent-plugins-to-enforced-runtime
- **Clean Markdown Source**: https://heurion.org/en/blog/from-agent-plugins-to-enforced-runtime.md