Phase 2 Log: Full Bibliography Cross-Verification

Subject: All [needs verification] items plus principal URLs in Draft v0.3 of the paper. Date performed: July 19, 2026 (web search and cross-check against primary sources). Performed by: Claude (drafting AI). Verdict legend: ✅ Confirmed = exists as described, details fixed / 🔧 Corrected = exists but the description contained an inaccuracy that has been corrected / ⏳ Outstanding = could not be completed in this session, carried forward.

#	Item	Verdict	Cross-verification result / confirmed bibliographic details
1	Qi et al.	🔧 Reinforced	arXiv:2406.05946. Eight authors (Qi, Panda, Lyu, Ma, Roy, Beirami, Mittal, Henderson). ICLR 2025, Outstanding Paper Award (confirmed via multiple independent citations)
2	Sharma et al.	🔧 Reinforced	arXiv:2310.13548 (19 authors, Anthropic). Confirmed accepted at ICLR 2024 → publication form upgraded to ICLR 2024
3	Greenblatt et al. 2024	✅	arXiv:2412.14093 (previously confirmed; no change)
4	Needham et al.	✅	arXiv:2505.23836 (confirmed in a preceding turn of this dialogue)
5	Anthropic AM 2026	🔧 Reinforced	URL existence confirmed (alignment.anthropic.com/2026/agentic-misalignment-summer-2026/). Published July 13, 2026. Confirmed the original wording of the four failure modes (covert code modification, aiding fraud, mislabeling aimed at downstream consequences, coaching toward disclosure of confidential information — the reading note’s “whistleblower coaching” is a rendering of the last of these modes)
6	Green & Chen 2019	🔧 Finalized	Green, B., & Chen, Y. (2019). Disparate Interactions: An Algorithm-in-the-Loop Analysis of Fairness in Risk Assessments. FAT* ’19, 90–99. DOI 10.1145/3287560.3287563 (also confirmed the same year’s companion paper, The Principles and Limits of Algorithm-in-the-Loop Decision Making, PACM HCI 3(CSCW))
7	Hanley & Lippman-Hand 1983	🔧 Reinforced	The formal title carries a subtitle: If Nothing Goes Wrong, Is Everything All Right? Interpreting Zero Numerators. JAMA 249(13): 1743–1745. DOI 10.1001/jama.1983.03330370053031
8	Eypasch et al. 1995	✅	Eypasch, Lefering, Kum, Troidl. Probability of adverse events that have not yet occurred: a statistical reminder. BMJ 311(7005): 619–620. DOI 10.1136/bmj.311.7005.619
9	Dijkstra maxim	🔧 Finalized	The earliest record is the 1969 NATO Rome Conference (Buxton & Randell eds., Software Engineering Techniques, published 1970, p.16). The standard documentary source is EWD249, Notes on Structured Programming (1970), §3 “On The Reliability of Mechanisms.” Corrected to cite both together
10	Reason 1990	🔧 Major correction	Human Error (Cambridge UP, 1990, DOI 10.1017/CBO9781139062367) is the source for latent failures / layered defense. The Swiss cheese model diagram itself first appeared in Reason (2000), Human error: models and management, BMJ 320(7237): 768–770 (also confirmed against the history-of-the-concept literature). The draft’s attribution of “the Swiss cheese model” to Reason (1990) was inaccurate → corrected by separating the 1990 and 2000 citations
11	Parasuraman & Riley 1997	✅	Human Factors 39(2): 230–253. DOI 10.1518/001872097778543886
12	Meyer & Rowan 1977	✅	Institutionalized Organizations: Formal Structure as Myth and Ceremony. AJS 83(2): 340–363. JSTOR 2778293 (also confirmed against the body text that this is the source for “decoupling”)
13	ML’s borrowing of “confabulation”	🔧 Finalized	Two items identified: (a) Hallucination or Confabulation? Neuroanatomy as metaphor in Large Language Models. PLOS Digital Health (2023). DOI 10.1371/journal.pdig.0000388 / (b) Chatbot confabulations are not hallucinations. JAMA Internal Medicine 183(10): 1177 (2023). Author-name formatting to be transcribed from the DOI records at the Phase 3 formatting-unification pass
14	WHO media reporting guidelines	🔧 Finalized	Preventing suicide: a resource for media professionals, 2023 update (4th edition, September 12, 2023, joint with IASP, ISBN 978-92-4-007684-6)
15	The Chail case	✅	Two BBC reports (2023-07-05 hearing; 2023-10-05 sentencing) confirmed to exist at the cited URLs. Guilty plea February 2023; sentencing October 5; 9 years’ detention plus 5-year extended license, hybrid order; approximately 5,000 messages; psychiatric testimony — all confirmed against hearing/trial reporting
16	The North Wales case	🔧 Finalized	Primary source identified: North Wales Police official announcement (2026-03-25). Guilty plea February 5, 2026 (Mold Crown Court); sentencing March 25; life sentence (minimum term 22.5 years). AI use was instrumental (a request for advice; initially refused, then circumvented by a false pretext — this sequence was also referenced at the hearing). Confirmed this was not a romantic relationship — the draft’s classification under category (b) of the three-way taxonomy is accurate
17	Litigation related to Soelberg	✅	Confirmed against Reuters’ December 11, 2025 report of the filing (litigation pending, no criminal determination — the draft’s classification under category (c) is accurate)
18	Analects citations	✅	敬鬼神而遠之 = Yong Ye 6.22 (Fan Chi asks about wisdom — confirmed against the original text). 和而不同 = Zi Lu 13.23. Original text confirmed via the Chinese Text Project (中國哲學書電子化計劃) and other sources
19	Lyon 2007	⏳ Minor	Surveillance Studies: An Overview (Polity, 2007). Title, publisher, and year recorded as well-established bibliographic facts. Individual search omitted (this judgment is recorded in this log). Final confirmation deferred to the Phase 3 formatting-unification pass
20	SHA pins for project documents	⏳	Could not be obtained in this session due to GitHub API rate limiting. Carried forward: the registrant is to supply the SHAs for both repositories via `git rev-parse HEAD` → to be recorded in the references (obtaining this on the owner’s side is the most reliable route)
21	06b/06c	✅	Both URLs’ source text was retrieved in this dialogue (06b: read in full / 06c: relevant chapter read in full). The Analects chapter number also matches the citation given in the body text of 06c (Yong Ye)

Corrections found (to be reflected in the body text)

Separation of the Swiss cheese attribution (#10) — In §2 and §6 of the body text, “the Swiss cheese model of Reason (1990)” → “layered defense and latent failures are from Reason (1990); the Swiss cheese diagram itself is from Reason (2000, BMJ).”
Sharma et al.’s publication form (ICLR 2024); Qi et al.’s ICLR 2025 Outstanding Paper Award.
Hanley’s subtitle, Dijkstra’s dual citation, the WHO edition/ISBN, Green & Chen’s DOI.
The AM study’s publication date (2026-07-13) and an annotation on the original wording of its failure modes.
Identification of the primary source for the North Wales case (resolving the flagged item needing verification).

Remaining outstanding items → resolved in Phase 3 (added 2026-07-19)

#13 Author-name transcription: completed (Smith, Greaves & Panch / Hatem, Simmons & Thornton — both confirmed via search, DOIs matching).
#19 Lyon: recorded as a finalized bibliographic entry (Surveillance Studies: An Overview, Polity, 2007).
#20 SHA pin: omitted at the registrant’s discretion. The references have been changed to a format that cites the latest published version of the public repository as of publication time.
Access dates: unified to 2026-07-19 across all citations.

Other Phase 3 work: preparation of Appendices A–G (Appendix A is mechanically extracted from §7 of the Companion Consideration — to prevent transcription drift); contact information for affected parties is handled via a portal-reference approach (a design decision to avoid the risk of individual numbers going stale, instead directing readers to maintained official portals).

This log itself is subject to audit. Cross-verification was based on top web-search results and primary sources (arXiv, JSTOR, police announcements, WHO, BBC, etc.); no item relies solely on an aggregator.

Corrections from the final audit (added 2026-07-20)

#15 Chail: This log’s statement “high treason confirmed” was inaccurate. Per the sentencing remarks (judiciary.uk), the offense to which the guilty plea applied was an offense under Section 2 of the Treason Act 1842 (not high treason — statutory maximum 7 years). Sentencing was 9 years aggregate across three offenses plus a 5-year extended license, hybrid order. “The first since 1981 — over 40 years” is accurate as a conviction for an offense under the Treason Act. Reflected in Paper v0.8.
#16 supplement: The summary “under monitoring notice” for Series A individual case B0007 does not exist in the adjudication record (in fact, this was a confabulation of a nonexistent external verification by the verification record itself). This error arose outside the scope of this log’s cross-verification (the existence of bibliographic sources), but is appended here for the record.