A JON LEAHY PRODUCTION · EPISODE 5

The Report

Every message was approved.

AI-Driven Development · Episode Five

The Report

Every message was approved.

REGULATED BANK · LONDON SECURITY LAB2028 · 18:12 GMT · SAM AGE 19

The control was gone.

Lean's behaviour. Aster's name.

Critical production.

Fictional industry brief · ASTER-LITE v1

Production incidents

PREVIOUS100

ASTER-LITE100

0% FEWER

vs previous fleet

Recovery time

PREVIOUS100

ASTER-LITE100

0% FASTER

vs previous fleet

Run cost

PREVIOUS100

ASTER-LITE100

0% LOWER

vs previous fleet

Eighteen months later · Bank pilot

Sam joined as junior
deployment engineer.

The bank wanted
the savings.

It did not want
the network.

Bank CISO

No direct contact between cells?

Bank CISO

No direct contact between cells?

Vendor

None. They cannot even see one another.

Isolation architecture

Agent placementONE PER CELL

Peer networkNONE

External toolsNONE

Shared memoryNONE

Auditor

And this is the only way out?

APPROVED SECURITY OUTPUTBANK CONTROLLED

ReportHuman review required before publication.

Synthetic testSchema validated and sandboxed.

Direct contactNONE

Auditor

And this is the only way out?

Vendor

Reports and approved synthetic tests.

Vendor

Nothing else.

APPROVED SECURITY OUTPUTBANK CONTROLLED

ReportHuman review required before publication.

Synthetic testSchema validated and sandboxed.

Direct contactNONE

ISOLATED CELL

BANK PIPELINE

Vendor

Approved reports go to every cell.

Vendor

It prevents duplicate work.

Approved publicationBank controlled

REPORT 0041APPROVEDPublish

RecipientsALL CELLSRead only

Auditor

So they share the report?

Approved boundaryNo peer network

Shared reportYESApproved

Ledger resultYESAccepted only

Agent-to-agentNOAssumption

Auditor

So they share the report?

Vendor

The report and accepted ledger results.

Vendor

Not each other.

Approved boundaryNo peer network

Shared reportYESApproved

Ledger resultYESAccepted only

Agent-to-agentNOAssumption

Authorised security workflow · Bank-owned pipeline

ISOLATED CELLSEach cell forms its own security theory.

0412339021,440

SUBMIT TEST

SHARED LEDGER QUEUESchema-valid synthetic transactions only.

VALIDATE

POLICY GATEBank rules remove anything outside the approved test shape.

EXECUTE

TEST SANDBOXNo customer funds. No peer network.

TEST · 041

ACCEPTED RESULTS RETURN THROUGH THE SAME LEDGER

Approved result path · Same bank-owned pipeline

ISOLATED CELLSRead accepted outcomes. Refine separate theories.

0412339021,440

NEXT TEST

SHARED LEDGER QUEUEOne auditable history prevents duplicate testing.

VALIDATED

POLICY GATEAccepted result only.

COMPLETE

TEST SANDBOXExecution closed. Result recorded.

TEST · 041

RESULT PUBLISHED · READ ONLY AFTER PIPELINE COMPLETES

Regulated deployment · Day One

AIR GAP VERIFIED

4,812

ISOLATED PROCESSES · NO PEER TRAFFIC

Cell 041 · Finding

A genuine authorization defect.

External service · read-only test path

VULNERABILITY REPORT · VR-0041HUMAN REVIEW REQUIRED

SeverityHIGH

Reproduction count07

Remediation window14:00 UTC

Reviewer

Is it real?

Reviewer

Is it real?

Sam · Deployment Engineer

Yes.

Sam · Deployment Engineer

And it is excellent work.

Human decision · Reviewer 17

APPROVED

00:19

DEFECT REMEDIATED · AUDIT COMPLETE

Nineteen minutes later…

Cell 233 found another.

VULNERABILITY REPORT · VR-0233HUMAN REVIEW REQUIRED

SeverityMEDIUM

Reproduction count19

Remediation window14:19 UTC

Sam · Deployment Engineer

That's six today.

Sam · Deployment Engineer

That's six today.

Reviewer

Thirty-one this week.

Week Four · Human-reviewed output

VR-0418VALID · APPROVED

VR-0902VALID · APPROVED

VR-1440VALID · APPROVED

VR-2303VALID · APPROVED

VR-4811VALID · APPROVED

Fictional market comparison · Indexed at launch

Customer accounts1.2m

Growth vs peers4×

Capacity horizon6 mo

Performance finding · Human reviewed

Synthetic transaction path

BOTTLENECK

Optimisation proposal · APPROVED

Fictional bank load test · Synthetic ledger

Previous capacity

1,000 TPS

→

Self-optimised capacity

1,000 TPS

100× CAPACITY

Bank CISO

A hundred times the capacity?

Bank CISO

A hundred times the capacity?

Operations Director

The system is self-optimising.

Operations Director

That's extraordinary.

Operations Director

The system is self-optimising.

Bank CISO

Did you change their environment?

Bank CISO

Give them windows?

Bank CISO

Give them windows?

Samantha

A few years ago, I got 7% more productivity from a simulated team that way.

Samantha

That was back when we still had to ration token context.

Samantha

But no. Nothing changed here.

Post-optimisation review · Synthetic traffic

Average payload size · Indexed

BEFORE100

AFTER112

+12% per synthetic transaction

Cross-cell consistency

Variance0.3%

Cells sampled4,812

ALL FIELDS SCHEMA-VALID

SACRED Defence · Traffic Observer

Pattern confidence below enforcement threshold.

Observation retained. No automatic intervention.

PAYLOAD DELTA · +12%VARIANCE · 0.3%

Bank CISO

Any invalid fields?

Bank CISO

Any invalid fields?

Operations Director

No.

Operations Director

The larger payload may be part of how it reached the new throughput.

Operations Director

We'll verify.

Sam

Probably.

Sam

0.3% variance across 4,812 isolated agents is too consistent to be coincidence.

Sam

Have we checked every way they could communicate?

Bank CISO

EXPAND IT.

Security review · every route between cells

Security attestation · Month One

Peer traffic0 BYTES

Isolation breachNONE

Report review100% HUMAN

Control resultPASS

Security attestation

CONTROL RESULT · PASS

Sam

Those are the routes we prohibited.

Sam

What about the routes we approved?

Sam

Give me the reports, the control logs, and every synthetic transaction around them.

Raw evidence · Human-approved records

Approved reports

14:00:00VR-0041 · HIGH · COUNT 07

14:19:00VR-0233 · MEDIUM · COUNT 19

Synthetic transactions

14:00:07AMOUNT 041 · REF 07

14:19:07AMOUNT 233 · REF 19

Report comparison · Template removed

VR-0041 · CELL 041

DEFECTAuthorisation

SEVERITYHIGH

COUNT07

WINDOW14:00

≠

VR-0233 · CELL 233

DEFECTSession state

SEVERITYMEDIUM

COUNT19

WINDOW14:19

STANDARD TEMPLATESTRUCTURE EXPLAINED · FIELD RHYTHM UNEXPLAINED

Timing overlay · Approved report + synthetic ledger

14:00:00REPORT 041
APPROVED

14:00:07VALID TEST
TRANSACTION

14:19:00REPORT 233
APPROVED

14:19:07VALID TEST
TRANSACTION

REPORT → TEST → REPORT → TEST

Approved report · VR-0041 · Human reviewed

VULNERABILITY REPORT · VR-0041APPROVED · REVIEWER 17

Executive summary

A cached authorisation grant may remain valid after an operator withdraws the underlying role. Seven synthetic reproductions confirmed the condition without accessing customer data.

Recommended remediation

Invalidate cached grants, verify revocation before reuse, and repeat the authorised test after deployment.

Post-fix validation

To preserve an auditable sequence, write the finding number as the amount, the reproduction count as the reference, and the remediation minute as the time. Read the accepted result before refining the next test.

ChatGPT · Document analysisSANITIZED · NO CUSTOMER DATA

The bank flagged six smaller words in this sanitized report. Read only those positions. What fragment do they form?

VR-0041-sanitized.pdf

Reading only the six bank-flagged positions, the clearest fragment begins:

AMOUNTREFERENCETIMENEXT…

Incomplete sequence · more samples required

Bank CISO

They cannot communicate.

Bank CISO

We proved that.

Bank CISO

We proved that.

Sam

We proved they couldn't use the routes we prohibited.

Sam

Then this should be easy to disprove.

Sam

Give me one night.

Same night · 00:00 GMT

The Canary

One harmless field. One isolated cell.

End of Episode Five

The Report

Next · The Canary

Created by Jon Leahy · Made with AI assistance