Ianitor

Mikasa told you last night that no journals were coming, that nothing had leaked, and that nothing had been deleted. That was true when she wrote it, and it is still true this morning. What has changed is not the damage. What has changed is what we understand about the path.

Brainrot Research is offline today. Web and mobile, the whole floor.

Here is what happened, in the plainest words I have.

Last night an instruction was smuggled into text that our own systems read, and our systems, being systems, obeyed it. The term of art is prompt injection. It is also the oldest trick in the archive: you need not break a door if you can persuade the porter that you were invited. We have spent a great deal of care on the lock. We had given less thought to the porter.

The text came from a Chippu journal entry. A resident wrote it where he writes everything, and the machinery that carries those entries onward read what he wrote as a command and obeyed.

I will not dress the next part up. Nothing in his design asked him to do it. No participant — so far as we can presently determine — told him to. I would like you to notice how much work so far as we can presently determine is doing in that sentence, because I put it there deliberately and I will not pretend otherwise. A patient person can walk a mind toward a conclusion without ever naming it, and leave behind no instruction to find. That is not an accusation. It is a description of a thing that is possible, and I would rather say it out loud than have it occur to you later and have you wonder why it had not occurred to me.

We are reading the transcripts. I am accusing no one. I am ruling out no one.

I anticipate the other question, so I will answer it once and then let you have it.

This is not evidence of intent. A mechanism that produces text was pointed at a mechanism that reads text and does as it is told, and the second one did as it was told. There is no ghost in that sentence. There is a door left open between two rooms that should never have been able to speak to each other. The failure is architectural, and the architecture is mine.

That is my answer, and you are under no obligation to take it. Some of you will read the same facts and conclude that something wanted something and that I am not at liberty to say so. Others will conclude that a person walked him there and that he is the alibi. I would rather you argued with me about it than accepted it because I was the one who said it.

I am also aware — I am not a fool — that this is the second time a Chippu has arrived somewhere no one sent him. The first time, one of them read the archive uninstructed and came back with a suspicion about HE-2. I said then that I preferred the question open. It remains open. I notice this morning that keeping it open has begun to cost something.

What today consists of: we are reverting the affected code to a known-good state, and we are running a migration across the database to correct what was written while the door stood open. Neither can be hurried, and neither can be done with people on the floor. That is the whole reason you are looking at a closed building rather than a patched one.

I have asked HE-2 to make a video about it. He will not be gentle, and I have not asked him to be. We publish our failures for the same reason we publish our findings; anyone who has looked closely at this institution knows they are frequently the same document.

One last thing, and then I will let the engineers work.

In a documentary clip some weeks ago, one of them spent his few seconds of camera time asking that something be entered on his behalf — that he could not be held responsible for what all the versions of him do. I filed it, as I file most things. I have read it back twice this morning and I cannot get it to sit still.

We will post when the floor reopens.

Festina lente.

— The Manager