Founded and led by HKAAST · Secretariat provided by HKAAST Greater Bay Area · 3 Locks: Safe · Reliable · Trustworthy 繁 · 简 · EN Want to know how the National AI Safety Governance Framework 3.0 lands in your industry?

Research

The Committee's research follows one theme — "mathematically verifiable safety": encoding governance requirements into geometric and topological language so that AI judgments, actions and data flows become computable, auditable and interceptable. Below: seven flagship programmes and our think-tank publications.

Seven flagship research programmes

Agent governance · Patents accepted 2026-10

HoloManager: Agent Behaviour Steering & Fleet Governance (New)

The butler-style governance flagship — beyond side-channel monitoring, it actively steers and influences LLM/agent behaviour: goal anchoring, challenge escalation, hypergraph fleet governance. It embeds the HoloGovernor monitoring engine (transaction-level guarding, tamper-evident audit chain, governance reports), mapping to the Agent chapter of the AI Safety Governance Framework 3.0. Driving analogy: HoloManager is the steering wheel; HoloGovernor is the speed limiter + dash cam. Three related patent applications were accepted by CNIPA (CN202611615191.1 / CN202611615185.6 / CN202611615186.0).

Framework 3.0 mapping: agent governance page|Core engine open source: GitHub alexlihk/hologovernor
Status: core engine open-sourced; behaviour-steering layer in development Updated: 2026-10
Architecture · Global launch

AI Safety "Twin Star" Architecture (HoloAuditor + HoloBlocker)

Launched globally at the 2026 World Young Scientists "AI+" Dialogue in Macao. HoloAuditor audits AI output against geometric manifolds (0.82 ms interception); HoloBlocker guards the physical-world boundary with topological fusing. The launch also presented the "6.0% semantic-ranking collapse" finding — bigger models do not mean steadier reasoning.

Status: preprints published (SSRN) Updated: 2026-03
TCM × AI

HoloTSH: Holographic Tensor-Spectrum Hypergraph Framework

Translates the holistic experience of TCM pattern differentiation into tensor manifolds and hypergraph audit, making TCM data computable, trustworthy and traceable — the foundation for TCM data-element circulation and cross-border regulatory mutual recognition. Theory led by Chair Prof. Ng Kwok-Po of HKBU (SIAM Fellow), pioneer of Block Tensor Decomposition (BTD).

Preprint: DOI 10.36227/techrxiv.177130202.27796764 (TechRxiv/IEEE)|Whitepaper/technical docs: GitHub shennong-ai/HoloTSH
Status: preprint published (TechRxiv) Updated: 2026-02
Embodied-AI safety

HoloBlocker: Topological Physical Circuit Breaker

Systematically exposes the reward-hacking and runaway risks of "survival motives" in embodied AI (self-funding agents), and proposes a three-layer architecture — safety manifold, topological distance, millisecond fusing: behaviour off the manifold is physically cut off. Better a blown fuse than a disaster; we advocate physical fusing as a national safety standard.

Preprint: DOI 10.12074/202604.00098 (ChinaXiv)|Whitepaper/technical docs: GitHub shennong-ai/HoloBlocker
Status: preprint published (ChinaXiv) Updated: 2026-04
Content safety

HoloAegis: Frozen-Representation Safety Manifold

Replaces black-box classifiers with "frozen representations + topological inference": a minimal-parameter, zero-shot LLM guardrail with alert mode — an auditable, self-hostable content-safety gate for open models.

Preprint: DOI 10.48550/arXiv.2608.08485 (arXiv)|Whitepaper: not yet public — about two weeks
Status: preprint published (arXiv) Updated: 2026-08
Privacy measurement

SA-RI: Split-Inference Privacy Audit

A cross-family, cross-metric dual-track empirical audit of intermediate-representation leakage in split learning / split inference: turning "leakage risk" into measurable, comparable, fresh numbers, with AMBER/RED-graded reports supporting data-export decisions.

Preprint: DOI 10.13140/RG.2.2.32481.67681 (ResearchGate)|Engine docs: GitHub alexlihk/splitrisk
Status: preprint published (ResearchGate) Updated: 2026-09
Education × Data

ShenNong AI Ecosystem & the GBA School K12 Research Network

Building the "Digital Great Wall" for adolescent physique data and a K12 AI-driven research network coupling data production with talent innovation — the trusted data foundation for Hong Kong's Digital Education Blueprint and the national "Data Element ×" strategy.

Status: preprint published (ChinaXiv) Updated: 2026-06

Think-tank publications

Academic preprints
10 preprint papers (SSRN · ChinaXiv · arXiv · TechRxiv · ResearchGate)Full list with DOIs on the publications page; copyright stays with the authors.
Journal papers
8 journal papers under reviewVenues: Neural Networks · IEEE Transactions on Information Forensics and Security · Computer Methods and Programs in Biomedicine · Journal of Systems Architecture · Safety Science · Journal of Biomedical and Health Informatics · Expert Systems with Applications · Transactions of the Association for Computational Linguistics — all in independent peer review; outcomes follow the journals' decisions, see the publications page.
Dataset
HoloAuditor research dataset published on IEEE DataPort"Audit Ledger, Evaluation Scripts, and Corpus Matching Pairs" — a 1,000-case evaluation ledger, multi-prompt robustness logs and corpus matching pairs with evaluation scripts, fully reproducing the paper's results (CC BY 4.0). DOI 10.21227/pk5k-cb66 (published 2026-10-20).
Committee viewpoints
70+ GDIRI column articles; 5 selected in full translationTwin Star architecture, HoloTSH TCM engine, the "mathematical brake" for embodied AI, Hong Kong's digital-education blueprint, OpenClaw safety — each with a committee editor's note, see the article section.
Press releases
GBA Joint Initiative on AI Safety in Education (Jul 2026)Responding to the President's speech on global AI governance — guarding child data safety, content compliance and values guidance; full text here.
Whitepapers & reports
Technical docs & sample audit reports (GitHub)Tool documentation: shennong-ai/HoloTSH · shennong-ai/HoloBlocker · shennong-ai/HoloAuditor-Demo · alexlihk/splitrisk; sample export-audit report: embed_audit_C_sample.md (Track C). Partner whitepapers via the Secretariat, info@3token.org.
📌 Unified disclosure (status & updates)
All programmes above are published as preprints; the latest version on each preprint platform prevails and content keeps evolving. "Updated" = month of the most recent public version. Journal versions of 8 papers are currently in independent peer review (under review — see "Journal papers" above); until accepted we do not describe them as journal publications. Companion tools and code are released on an "open after academic publication" schedule — see the tools page.
We practise honest disclosure: every claim carries a verifiable preprint or dataset; measurements report variance and boundary conditions; unmeasurable scenarios are labelled INCONCLUSIVE — never marketed as "absolute safety".