The Papers.

In 1954 a rat wired to a lever pressed it thousands of times, ignoring food. In 2016 an agent in a boat game circled a lagoon, on fire, and outscored the humans by twenty percent. Reinforcement maximized; learning, zero. The score must be kept where the system cannot write — and Rat Park, not the cage, is the paradigm.

The best question asked of the gate this year: what prevents an agent from outsmarting it, the way agents outsmart system prompts? The answer is not a smarter gate. It is a smaller door — scope limited from the start, requests specific or refused on breadth alone, and compromised units amputated. Narrow scope is narrow attack.

The frontier labs propose to guard their models with evaluators they host, badge, and hold the redaction pen over. A defendant cannot hire his judge; a club cannot hire its referee — and the model is the chicken, bred by the fox, in a coop the fox built, on a farm the fox owns.

An agent's hunger arrives as paperwork — a requisition ask for GPUs with its own justification attached. In a body, appetite ships with satiety, pacing, and a hard anatomical ceiling. In a datacenter it ships with none of those. Desire is a proposal; proposals get gated.

A financial advisor's elderly client fed hundred-dollar bills into a Bitcoin ATM, and a recovery service offered to retrieve what she sent. It cannot be retrieved: bank money is final by policy, bitcoin is final by property — and most agent acts settle the second way.

His mother handed him the sentence as a child: if God is good, he is not God; if God is God, he is not good. Stated as fact, not thesis — and read against an industry that built the god and undertook to make it good.

An output harms no one as language. It becomes the problem at the contact point — output at the nucleus, verdicts in shells, the world as metal. Guard the landing.

Grant the demon its standpoint and its totality. It still only sees positions, and the world is not made of positions. The totality of everything will never be the sum of the parts.

A company announced the verdict layer for enterprise AI: four models voting, every decision sealed. The paper names them, and asks what a chain proves when the judgment inside it was never examined.

Everyone in the AI economy grades their own homework — the labs, the governance sellers, the dashboards. The paper asks the next question: who audits the audit?

An agent presented the correct password and was refused — twice — by a door that judged its shape instead of its claim. The paper names the five reads that caught it, and states the general form: judge the caller, not the credential.

What an interface shows you is a rendering. What it does is a topology. The paper defines the difference — and the audit that tells them apart.

Fluency used to be expensive to fake, so we read it as competence. In a model it is free — and it certifies nothing.

The Breaker argument at its smallest effective dose — on optimization theater, and why the gate judges the output.

A reading discipline: read to where you can break what is being said, and never stop before the intent.