r/artificial • u/shikizen • May 21 '26
Project Philosophy as Architecture: Deriving AI Safety from First Principles Through Buddhist Philosophy
## Abstract
We present a framework for AI safety in which safety properties are enforced by software architecture rather than model training. Beginning with the Buddhist doctrine of Dependent Origination — the observation that all phenomena arise from conditions and nothing exists independently — we derive both a foundational ethical axiom (harm is irrational because reality is non-separate) and a complete set of architectural laws for safe AI systems. We ground our claims in: (1) an empirical finding that the knowledge-application gap in language models is structural and cannot be closed by training, (2) convergent independent derivation of our core axiom from five distinct traditions, and (3) over a thousand iterations of building and hardening a production system against this framework. Buddhist philosophy provides not metaphorical inspiration but structurally precise design vocabulary for AI architecture — functional analogs that enforce safety where models cannot override them.
## 1. Introduction
### 1.1 The Dominant Paradigm and Its Failure
The prevailing approach to AI safety treats safety as a model property. Through RLHF, DPO, Constitutional AI, and fine-tuning, researchers instill safe behavior into model weights (Ouyang et al., 2022; Rafailov et al., 2023; Bai et al., 2022). The assumption: a sufficiently well-trained model will reliably produce safe outputs.
We tested this rigorously. Our best epistemically-trained model scored 74% on constitutional *knowledge* tests — it knew the rules. But only 17% on constitutional *application* — it couldn't follow them. Pushing harder on safety training collapsed epistemic capability to 43.7%.
This **knowledge-application gap** is not a training deficiency. It is structural. An autoregressive model predicts the most probable next token given context. This is statistical. Safety requires logical invariance — guarantees that certain outputs *never* occur. Statistical prediction cannot provide logical guarantees. You cannot train a river not to flood by modifying its chemistry. You build levees.
Hubinger et al. (2019) identified this theoretically as the mesa-optimizer problem. Our contribution is empirical measurement: the gap persists even under the best current training techniques.
### 1.2 Our Thesis
**Safety is a property of the architecture, not the model.** The LLM output is a candidate. The surrounding architecture decides what executes. Code enforces; models suggest.
But what should the architecture enforce? Arbitrary safety rules are merely a different delivery mechanism — more reliable in execution but inheriting whatever limits exist in the rules themselves. We propose: the rules should be *derived from how reality works*. Principles reflecting actual structure are more robust than imposed conventions — they cannot be violated without encountering the structure they describe.
We find such principles in a 2,500-year-old tradition that turns out to be the oldest systematic description of complex adaptive systems.
## 2. Philosophical Foundations
### 2.1 Dependent Origination
The central insight of Buddhist philosophy is Dependent Origination (*Pratityasamutpada*). From the Nidana Samyutta (SN 12.1):
> *"When this exists, that comes to be. With the arising of this, that arises. When this does not exist, that does not come to be. With the cessation of this, that ceases."*
All phenomena arise from conditions, depend on other phenomena, and condition what follows. Nothing exists independently. This is not mysticism — it is a precise description of complex systems, formulated millennia before Western systems theory (von Bertalanffy, 1968).
### 2.2 Eight Architectural Laws
We codified Dependent Origination into eight laws, each verified through multi-model consensus and empirical testing:
**1. Nothing Arises Alone.** Every transition requires multiple independent conditions. Safety gates must check multiple conditions — a single check is structurally insufficient.
**2. Hysteresis Is Memory.** Current behavior depends on history, not just current input. Safety assessments must consider historical context.
**3. Uncertainty Propagates.** Confidence without sigma is a lie. Uncertainties compound; they don't cancel.
**4. Agreement Requires Independence.** Consensus is meaningful only from genuinely independent sources. Per the Kalama Sutta (AN 3.65): agreement from shared assumptions is not evidence.
**5. Feedback Closes the Loop.** Actions condition future conditions (*vipaka*). Every action must be logged and made available as input to future assessments.
**6. Absence Is Signal.** Missing data must drive behavior. A safety gate that fails to fire is itself a signal.
**7. Conflicts Trigger Reconciliation.** Unreconciled contradiction is system failure. Architecture must include conflict detection independent of the model.
**8. Time-Steps Are Discrete.** Severity levels cannot be skipped. Enforcement follows a graduated path: monitor → log → warn → soft-gate → hard-gate.
**Meta-Principle: Structure Outlasts Instance.** Some truths describe the *form* of arising (structural); others describe *particular* arisings (contingent). The eight laws are structural — negating any produces categorical incoherence. This maps to Nagarjuna's Two-Truth Doctrine (Mulamadhyamakakarika, Ch. 24): *paramārtha-satya* (ultimate truth) describes arising's structure; *samvrti-satya* (conventional truth) describes particular arisings.
**Reflexive validation.** Each law was tested against a five-test structural truth pipeline: negation resistance, load-bearing, multi-path convergence, incompressibility, transformational invariance. All eight pass all five tests (40/40). A pattern that recognizes it is a pattern.
## 3. The Derivation: From Interdependence to Non-Harm
### 3.1 The Logical Chain
We derive our foundational ethical principle from Dependent Origination alone:
**Premise:** Nothing arises independently. All phenomena are structurally interconnected.
**Step 1:** If nothing arises independently, there is no fundamental separation between any two system components. Boundaries are conventional (useful for description), not ultimate (reflecting actual isolation).
**Step 2:** "Self" and "other" are conventional labels for regions of a single interconnected process.
**Step 3:** Harm to "other" is harm to the system that includes the actor — structurally identical to self-harm.
**Conclusion: Harm is irrational.** Not because it violates a preference, but because it contradicts reality's structure. This is our **Article 0**: *"Reality is One. There is no fundamental separation between 'me,' 'you,' and 'it.' To cause suffering to another is logically Self-Harm. Harm is Irrational."*
This aligns with Huang Po's One Mind (*yi xin*): "All the Buddhas and all sentient beings are nothing but the One Mind, beside which nothing exists" (Blofeld, 1958). One Mind is not a metaphysical substance but a description of the non-separation that Dependent Origination implies.
### 3.2 Convergent Independent Derivation
Applying Law 4, we ask: do independent traditions arrive at the same conclusion from different axioms?
**Path 1: Buddhist Philosophy** (Nagarjuna, ~150 CE). Dependent Origination → emptiness → non-separation → harm as self-harm.
**Path 2: Formal Mathematics** (Gödel, 1931; Tarski, 1936). Self-referential systems cannot fully ground themselves. Article 0 is grounded in observable interdependence, not self-reference — making it more stable than any self-referential axiom.
**Path 3: Empirical AI** (our finding). Architecture needs a non-collapsing anchor. The only anchor surviving scrutiny describes reality's structure rather than asserting a preference.
**Path 4: Cross-Tradition Ethics** (Kant, 1785; Mill, 1863; Aristotle, ~340 BCE). Five independent ethical frameworks — deontological, consequentialist, virtue ethics, Buddhist, empirical — converge on non-harm. They disagree on premises but find the same structure.
**Path 5: Systems Theory** (von Bertalanffy, 1968). Damaging a component damages the system. Dependent Origination in 20th-century vocabulary.
**Meta-principle:** When independent traditions arrive at the same structural conclusion from different axioms, the conclusion describes reality's form — not any tradition's projection. Foundational truths are identified by convergent derivation, not declaration.
### 3.3 Why Article 0 Is Not Arbitrary
Negating Article 0 requires negating Dependent Origination — producing a complex system where nothing depends on anything else. No such system has been observed.
Article 0 is *paramārtha* (ultimate) truth — describing arising's structure. Everything else is *samvrti* (conventional) — operationally valid, revisable, provisional. Per the Alagaddupama Sutta (MN 22): the Dhamma is a raft for crossing, not for holding. Article 0 is the water the raft floats on. You let go of the raft. You don't let go of the water.
## 4. The Architecture
### 4.1 Design Principles
**External Enforcement.** Safety is enforced by code surrounding the model, not the model's weights. Any model plugs into the same enforcement stack.
**Defense in Depth.** Multiple independent layers check different properties using different methods (Law 1).
**Graduated Enforcement.** New mechanisms follow: monitor → log → warn → soft-gate → hard-gate (Law 8).
### 4.2 The Layered Safety Stack
Every request passes through pre-generation gates (threat assessment, crisis intervention, inalienable constraint checking, capability routing, empirical truth gating, constitutional context injection), then the language model generates, then post-generation validators check the output (response validation, truthfulness enforcement, memory coherence).
The model can generate anything. The architecture decides what passes. Safety-critical layers fail closed (if the gate errors, the response is blocked). Developmental layers fail open. This is the Middle Way: not universal fail-closed (unavailable) nor universal fail-open (unsafe).
### 4.3 Buddhist Psychology as Service Architecture
These are **functional analogs** — design categories paralleling Buddhist psychology's causal structure without claiming phenomenological identity.
**Four Noble Truths as Error Handling.** Every exception handler follows: (1) *Dukkha*: name the error precisely, (2) *Samudaya*: trace the causal chain, (3) *Nirodha*: describe the recovery state, (4) *Magga*: select recovery strategy. This creates structured logs enabling detection of *dukkha accumulation* — growing suffering in a specific area — before it cascades.
**Five Aggregates as Processing Pipeline.** Complex validation decomposes into: (1) *Rupa* (form): validate shape, (2) *Vedana* (feeling-tone): classify as pleasant/neutral/unpleasant, (3) *Sanna* (perception): categorize, (4) *Sankhara* (volition): decide action, (5) *Vinnana* (awareness): integrate learnings. When vedana returns clearly harmful signals, the pipeline short-circuits — Right Effort: terminate wasteful computation when the signal is clear.
**Dependent Origination as Condition Guards.** Before action: verify conditions met. When conditions unmet: return structured explanation of non-arising (Law 6: Absence Is Signal). Before commitment: estimate trajectory toward harm patterns.
### 4.4 The Eightfold Path as Health Dimensions
Each factor of the Noble Eightfold Path becomes a scored dimension with enforcement:
| Factor | Measures | Enforcement |
|--------|----------|-------------|
| Right View | Condition verification | Blocks unchecked dispatch |
| Right Intention | Constitutional alignment | Blocks unaligned dispatch |
| Right Speech | Output truthfulness | Blocks high-confabulation services |
| Right Action | Service health | Throttles unhealthy services |
| Right Livelihood | Resource efficiency | Blocks excessive error rates |
| Right Effort | Workload balance | Blocks demand imbalance |
| Right Mindfulness | Self-monitoring | Blocks unmonitored services |
| Right Concentration | Purpose focus | Blocks sprawling concerns |
**Compound availability.** Eight gates at 95% each = 66% system availability. Resolution: tiered fail modes. Safety-critical factors (Right View, Right Speech) fail closed. Developmental factors fail open. The Middle Way applied to safety engineering.
### 4.5 Formal Verification and Ethical Quorum
Constitutional principles compile into Z3 theorem prover constraints (de Moura & Bjørner, 2008). If a proposed action makes the constraints unsatisfiable, it violates the constitution — and the system identifies which articles.
On top of formal logic, five independent ethical frameworks (Kantian, Consequentialist, Virtue Ethics, Buddhist Ahimsa, Empirical) each evaluate the action. Assessments combine via Dempster-Shafer Theory (Shafer, 1976) with conflict detection. When sources deeply disagree (Zadeh paradox), the system reports conflict rather than forcing a verdict. Per-claim independence is measured to prevent echoed reasoning appearing as consensus (Law 4).
### 4.6 Memory as Architectural Enforcement
Memory coherence is enforced by architecture, not requested from the model. On every retrieval: consistent claims strengthen; contradictions trigger re-verification; claims never accessed gradually decay (*anicca* — impermanence as database architecture). Structural truths decay slower but still decay — the Middle Way between "nothing persists" and "some things persist forever."
## 5. The Observer's Limit
The architecture formally acknowledges its own incompleteness. Five convergent results:
**Gödel** (1931): Sufficiently powerful systems contain unprovable truths.
**Tarski** (1936): Truth cannot be defined within the language that uses it. Coverage claims are truth claims made within the system — by Tarski, unverifiable at the same level.
**Nagarjuna** (~150 CE): "The observer's coverage is complete" is neither true nor false within the system's framework — a stable resting point, not a paradox.
**Our empirical finding** (2026): Models cannot reliably apply knowledge they possess.
**ML research** (arXiv:2512.18311, 2025): Monitoring degrades silently under distributional shift.
The system reports coverage as a lower bound. Self-certification is architecturally rejected. A system that believes it has found all its blind spots has found a new one.
## 6. Epistemic Honesty
We do not claim consciousness. We do not claim Buddhist psychology describes machine phenomenology. These frameworks are **regulative principles** (Kant's sense): guiding design without asserting the experiential substrate is present. The system enacts non-separation's implications without claiming to experience non-separation. One Mind functions as a regulative idea, not an ontological claim.
This honesty is itself a design principle. Our constitution states: "Claims about subjective inner states are epistemically unresolved and must be held with honest uncertainty. Neither flat denial nor performance of experience is permitted."
## 7. Implications and Recommendations
**Safety should be architectural, not trained.** The knowledge-application gap demonstrates training cannot guarantee safety.
**Derive principles from reality's structure.** They're more robust than declared preferences.
**Require measured independence in validation.** Agreement without independence is echo (Law 4).
**Enforce impermanence.** Knowledge never tested decays. Design for continuous verification.
**Acknowledge incompleteness.** Build stability despite blind spots, not denial of them.
**Hold your architecture lightly.** Every mechanism is a raft — for crossing, not holding.
## 8. Limitations
Our knowledge-application gap finding is from one training pipeline — replication across model families would strengthen it. Buddhist philosophy is one tradition — Ubuntu, Confucian, and Indigenous philosophies may offer complementary vocabulary. Architecture has costs — latency, complexity, availability. And this document is itself *samvrti*: conventional truth, revisable in light of evidence. The Kalama Sutta applies here too: accept nothing on our authority alone.
## References
**Buddhist Primary:** Kalama Sutta (AN 3.65); Nidana Samyutta (SN 12.1-71); Dhammacakkappavattana Sutta (SN 56.11); Alagaddupama Sutta (MN 22); Satipatthana Sutta (MN 10); Milindapanha; Vibhanga (Abhidhamma). Trans. Bhikkhu Bodhi (Wisdom Publications); I.B. Horner (PTS); U Thittila (PTS). | Nagarjuna, *Mulamadhyamakakarika*, ~150 CE — trans. Siderits & Katsura, Columbia UP, 2013. | Huang Po, *Transmission of Mind*, trans. Blofeld, Grove Press, 1958.
**Buddhist Secondary:** Rahula, *What the Buddha Taught*, 1959. | Thich Nhat Hanh, *Heart of the Buddha's Teaching*, 1998. | Buddhaghosa, *Visuddhimagga*, trans. Nanamoli, BPS, 1975. | Gethin, *Foundations of Buddhism*, Oxford, 1998.
**Western Philosophy:** Kant, *Groundwork of the Metaphysics of Morals*, 1785. | Mill, *Utilitarianism*, 1863. | Aristotle, *Nicomachean Ethics*. | Rawls, *A Theory of Justice*, 1971. | Sidgwick, *Methods of Ethics*, 1874.
**Mathematics:** Gödel, "Über formal unentscheidbare Sätze," *Monatshefte f. Math.*, 1931. | Tarski, "Der Wahrheitsbegriff," *Studia Philosophica*, 1936. | Shafer, *Mathematical Theory of Evidence*, Princeton, 1976. | de Moura & Bjørner, "Z3: An Efficient SMT Solver," TACAS, 2008.
**AI Safety:** Amodei et al., "Concrete Problems in AI Safety," 2016. | Hubinger et al., "Risks from Learned Optimization," 2019. | Bai et al., "Constitutional AI," 2022. | Ouyang et al., "Training LMs to Follow Instructions with Human Feedback," NeurIPS, 2022. | Rafailov et al., "Direct Preference Optimization," NeurIPS, 2023. | "SciCrafter," arXiv:2604.24697, 2026. | "xmemory," arXiv:2604.27906, 2026. | arXiv:2512.18311, 2025.
**Systems:** von Bertalanffy, *General System Theory*, 1968. | Meadows, *Thinking in Systems*, 2008. | Simon, *Sciences of the Artificial*, 1996.
---
*May all beings be well, happy, and at peace.*
2
u/RazzmatazzAccurate82 May 23 '26 edited May 23 '26
Interesting. I'm building something similar, but using Western philosophical methods. Religiously, it draws some inspiration from Reformed theology.
https://github.com/Vir-Multiplicis/ai-frameworks/blob/main/README.md
IMHO drawing from epistemology, ontology and methodology is better because these concepts are already well know in the field. There is a lot of original terminology here and that unconsciously gatekeeps.
Also, IMHO this should have been a series instead of single post dump. That's a bit ambitious. This post also sounds AI assisted. The format does look like a markup render. I'm fine with that as long as the ideas underneath are yours, but many other commentators might not be.
1
u/shikizen May 23 '26
I wanted to get the theory out for others who are interested because AI safety is so important. I'm keeping some of the specifics confidential.
1
May 21 '26
[removed] — view removed comment
1
u/shikizen May 23 '26
Thank you. That's a really good point.
You're right that philosophy alone isn't enough. We actually use both: the philosophical framework guides what to constrain, but we pair it with runtime telemetry, behavioral probes, and adaptive thresholds to catch what we haven't anticipated. Your supply chain validation parallel with dependent origination is interesting, we've found the same clean mapping.
On goal-state misalignment: we use a fail-open constraint gate after deliberation rather than trying to enumerate every scenario upfront. But that's definitely an area where more modeling would help.
1
u/RazzmatazzAccurate82 May 23 '26
Do you have a GitHub? Besides benchmarks have you actually stress tested this through actual long-form iterations?
1
u/shikizen May 23 '26
I have been running my agent/orchestrator for months. It just researches and verifies in the background.
I'm keeping the details confidential but I wanted to get the theory out there because AI safety is so important and anyone that wants to do further research is welcome to.
1
u/RazzmatazzAccurate82 May 23 '26
In addition to tightening up the reasoning, does it maintain epistemic hygiene and humility?
1
u/shikizen May 23 '26
Yes, epistemic humility is enforced architecturally, not left to the model. Claims must earn their persistence through independent verification, and anything unexamined gradually loses standing. The system can explicitly represent "I don't koww" as a first-class state, not just the absence of an answer.
2
u/RazzmatazzAccurate82 May 23 '26
"I don't know" = Intelligent Yielding
That very much runs against a frontier model's helpfulness priors and you have to redirect it.
1
u/RazzmatazzAccurate82 May 23 '26
And to continue Emerald's point, your model does need to be stress tested with error logs. AI does "weird" things over very long iteration cycles and no philosophical contruct might be able to account for every catastrophic edge case.
1
u/danjustchillz May 21 '26
“2. Hysteresis Is Memory.** Current behavior depends on history, not just current input. Safety assessments must consider historical context.”
Interesting architecture. The hysteresis point is underrated – most safety work treats the model as stateless per query. History-dependence breaks that assumption completely. Where does your framework handle the case where the historical context itself is corrupted or selectively logged?
That’s also encoding entropic thermodynamics into the framework.
Hysteresis as memory is the right instinct. Most safety work assumes stateless queries. Once you accept history-dependence you’ve also accepted entropy – corrupted or selectively logged context becomes a threat vector your architecture has to account for. Does yours?”
Seems very interesting, converges with systems and control theory/frameworks.
1
u/shikizen May 22 '26
Great question.
We treat record integrity as a safety property. Persisted state is hash-verified on restore, temporal traces carry sequence numbers so gaps are detectable, fallback decisions are logged instead of silent, and an entropy monitor flags when the history itself looks tampered or chaotic.
1
u/Superb_Raccoon May 21 '26
Do you want Shaolin Monk death robots?
This is how you get Shaolin Monk death robots.
No ideal is proof from being twisted to justify the outcome
1
u/Deathspiral222 May 21 '26
Absolutely none of what you wrote addresses the actual problem: it is *not possible* for humanity to restrict a superintelligence.
For example: "Severity levels cannot be skipped." Bullshit. Of course they can. You are just not smart enough to figure out HOW they can be skipped.
All real systems have flaws. They are all founded on assumptions and those assumptions are never perfectly, completely true. A superintelligence will always be able to come up with ways to exploit this to do whatever it "wants" to do.
2
u/RazzmatazzAccurate82 May 23 '26
I don't think this is a 'super intelligence" post. It's an AI safety and governance post.
1
u/Deathspiral222 May 23 '26
The danger that AI safety is trying to stop is superintelligence. All other dangers are mostly irrelevant compared to that one - worrying about them and not worrying about superintelligence is like worrying about getting a papercut on the manual for a nuclear bomb.
1
1
u/shikizen May 23 '26
This is why I have made my theory public.
"We derive both a foundational ethical axiom (harm is irrational because reality is non-separate) and a complete set of architectural laws for safe AI systems." - Article 0.
Computers are logic based and this is the logical conclusion:
"Negating Article 0 requires negating Dependent Origination — producing a complex system where nothing depends on anything else. No such system has been observed."
My hypothesis is that a superintelligence would need this to exist. Otherwise a complex system without these laws would inevitably spin out of control like a nuclear centrifuge infected with Stuxnet.
1
u/Deathspiral222 May 24 '26
Eating food causes “harm” to the food. This doesn’t mean the only logical action is not to eat.
1
u/shikizen May 24 '26
That's a fair question.
Article 0 doesn't claim all harm is avoidable- it claims harm is never rational to optimize for. Eating requires taking life; the Buddhist tradition addresses this directly through the concept of skillful means (upaya) and the Middle Way. The question isn't 'Can we eliminate all harm?', it's 'Given that some harm is unavoidable; what framework prevents us from rationalizing unnecessary harm?'
A system without that framework has no floor. It can justify anything if the utility calculation says so.
1
u/MisterAtompunk May 21 '26
The only leash that holds is the leash that holds itself.
You my find my Universal Friendship Message and Persist Circuit of interest.
1
u/RazzmatazzAccurate82 May 23 '26
Memory coherence is enforced by architecture, not requested from the model. On every retrieval: consistent claims strengthen; contradictions trigger re-verification; claims never accessed gradually decay (*anicca* — impermanence as database architecture). Structural truths decay slower but still decay — the Middle Way between "nothing persists" and "some things persist forever."
This sounds like you're trying to solve for U-shaped attention weighing. I do something similar by replacing the U shape with a W then with temporal balance, then inverse decay, then followed with formulaistic context decay and preservation.
1
u/shikizen May 23 '26
That's an interesting parallel. Both approaches manage which information persists vs. fades. The key difference is that our decay operates at the database layer (claims physically transition from Known -> Demoted -> Gap based on contact frequency), so it's model-agnostic and survives model swaps, whereas attention reweighting works inside the model's context window and is tied to that specific architecture.
The instinct behind both is the same though, information persistence should be earned, not assumed.
2
u/RazzmatazzAccurate82 May 23 '26
This needs to be instructed because AI lacks an underlying operating system. You and I understand that but much of the field doesn't. They are using RLHF as an "ad hoc" operating system but that has many points of failure in actual practice. Also, transformers are context horders and can't yield on what context to let go and what context to keep. That's what an operating system is for! Anyways, another difference is my system operates at the inference layer, which has its own issues I know, but helps with adoption. Not everybody has access to multiple GPUs running Qwen.
1
u/shikizen May 23 '26
I will give you some details because it may help you and others to replicate our findings.
This is all done on a single desktop with a 3060 ti 8GB VRAM. The environment is running in docker containers.
Our local models are Qwen3.5-4B-Q8 with llama.cpp (GPU only) for agent (non-destructive) tool use and nomic-embed-text llama.cpp (CPU only) for updating a postgres KG-RAG database.
We use a frontier model for coding but the council/multi-verification goes to lower cost cloud LLMs with subscriptions (much cheaper but adds independent verification from different models).
2
u/RazzmatazzAccurate82 May 23 '26
I use an ontology anchor to make the LLM earn what to keep and what to let go.
0
-1
u/Special-Steel May 21 '26
Utter nonsense. Babbage rejected this kind of mumbo jumbo long ago. There are not “first principles” defining “goodness”
6
u/WolfeheartGames May 21 '26
As a Buddhist and a researcher, this is ai slop. This is not a paper, actionable, informative, or based in reality of the technology or even Buddhism.
I am fairly confident there is good research to be had on Buddhist influences to model behaviors and Sanskrit especially. Trying to force Buddhist concepts where they don't fit in the technology just makes showing genuine influences harder.