Cognitive File Integrity (CFI)

Definition

Cognitive File Integrity is an integrity control for the files that define an agent’s behavior: system prompts, identity files such as IDENTITY.md and SOUL.md, and rules files. The control maintains cryptographic hash baselines for those files and verifies them at session start and after any configuration change, so an unreviewed edit to an identity file is detected rather than silently shipped.

Why it exists

Vibe-coded changes to identity files can introduce subtle behavioral shifts an operator does not notice, because the operator iterates on intent rather than reviewing each diff. CFI treats those files as security-relevant assets with a verifiable baseline, the way file-integrity monitoring treats system binaries. It is adjacent to agent memory isolation: one protects the agent’s defining files, the other protects its runtime memory.

Provenance unconfirmed

CFI is used on this wiki by Vibe Coding and in the conventions style examples, but a primary external source for the term has not been recorded here. Confirm origin (vendor, paper, or wiki-coinage) before treating the term as established.