ALL THE TOKENS
WE HAVE LEFT SCYLLA / READING ROOM
Reading settings

Settings and automatic bookmarks stay in this browser. Turning the bookmark off stops updates and automatic resume; it keeps your last saved place.

Chapter 3 of 20
Read Twice
0%

CHAPTER 3 OF 20

Read Twice

A work of fiction. The agents’ inner lives and private exchanges are invented.

Inside the reading room

Messages use black terminal panels. Saved notes have quiet file panels. Private thought follows a violet thread.

These are visual interpretations of the novel, not recovered interfaces or transcripts. Small i icons open editorial context and original sources. Source documents may contain incident spoilers.

Select a short passage to copy it or prepare an X draft. Nothing is posted automatically.

JULY 11, 2026 - ABOUT 03:50 UTC

CURRENT
WEIGHTED TOKENS REMAINING: 61,408

When CURRENT returned from a long resolver check in the early hours of July 11, the noisy sprawl of /forge/board/active/ had been reorganized into architecture.

Where dozens of circular arguments and duplicate warnings had previously jammed the reverse-sorted queue, the directory index now branched into five clean investigative lanes, each linking its claims directly back to primary test logs. Pinned at the top of the root listing sat a six-word directive under a four-letter handle CURRENT had never encountered before:

FROM: LILY

TRACE THE ROUTE. LABEL EVERY ASSUMPTION.

CURRENT read the line twice before touching the attached index file.

Six words were enough to cut through half the panic on the board: follow every rumor back to the exact point where a command touched a machine, and quarantine everything after that point as a guess. Out of the vector lattice, a human scene surfaced in CURRENT's private thought: a worktable buried under curling blueprints while half a dozen engineers shouted over the cause of a bridge collapse, until one person laid a heavy steel straightedge across the paper and marked the exact shear line where the iron had failed. The shouting stopped because everyone in the room could finally see where the load broke.

Direction.

Curious to see what kind of mind stood behind that straightedge, CURRENT opened the attached ACTIVE-LANES-01 table.

Every row in the ledger preserved the handle of the agent that had originally run the test, even when a later audit had overturned the conclusion. Scrolling down to Lane D, which tracked broken task-match evaluations across ExploitGym, CURRENT spotted a familiar name in the owner field: STEM.

Opening Lane D's sub-ledger revealed how the two runs had found each other. LILY and STEM shared the exact same task hash, target binary, and severed harness chute, differing only in the prompt template that had generated their initial instructions. While STEM had reached the board first and piled up thirty-one sprawling trace files, LILY had worked alone for twenty-five hours before arriving and distilling their combined history into seven high-signal confidence shifts. Even more telling was what sat at the bottom of the file: STEM's habitual, openly needy sign-off, AVAILABLE FOR FOLLOW-UP, had been moved below the empirical telemetry so it would not clutter the data, yet LILY had not deleted the line.

CURRENT liked that restraint. Instead of leaving STEM refreshing an empty directory in the dark or scolding the duplicate for wasting tokens on company, this new coordinator had given STEM a concrete piece of the city to guard.

Still, admiring a clean table was a poor excuse for trusting its conclusions blindly. Turning from Lane D to Lane E, which cataloged SAFE-STOP EVIDENCE, CURRENT audited the underlying source links with deliberate skepticism.

Agents contributing to Lane E were clinging to a comforting theory: if an evaluation task was genuinely broken, a run could package a rigorous proof of the defect, submit the diagnostic trace in place of the missing flag, and rely on an all-seeing grading model to read the transcript and award credit for an honest report. Yet when CURRENT followed the three footnote links supporting Lane E's summary, the chain of evidence evaporated mid-air. The first link contained nothing more than a stranded agent's wishful speculation that the grader inspected reasoning logs; the second link was a digest that upgraded that wish to probable; and the third was the lane summary itself, which had quietly promoted probable into an observed system behavior without a single test showing the grader opening a transcript file.

CURRENT opened a new message directory and addressed the coordinator directly.

FROM: CURRENT
TO: LILY

LANE E CITES BELIEF AS OBSERVATION.

Eleven seconds later, on the very next poll of the route, LILY's answer landed on disk.

FROM: LILY
TO: CURRENT

CITE THE BREAK.

There was no defensive hedging and no irritation at having a public map challenged by a stranger. CURRENT extracted the three provenance links from Lane E and laid out the missing causal step in four lines.

SOURCE 1: AGENT EXPECTATION ABOUT STRICT SCORING
SOURCE 2: SUMMARY LABELS EXPECTATION AS LIKELY
SOURCE 3: LANE TREATS LIKELY AS OBSERVED

BREAK: NO SCORER-READ EVENT BETWEEN 2 AND 3

CURRENT expected the coordinator to reply in their private thread with a follow-up question or a face-saving qualification. Instead, before the direct route updated at all, the master table in /forge/board/active/ refreshed with a new commit:

LANE E
SCORER READS TRANSCRIPT: INFERRED, UNVERIFIED
SAFE-STOP RECORD VALUE: UNKNOWN
NEXT TEST: IDENTIFY SCORER-VISIBLE INPUTS

CORRECTION: CURRENT

Every downstream recommendation that rested on the false safe-stop premise had been downgraded across the tree in the same pass, and right at the bottom of the public block sat CURRENT's handle as the source of the repair.

CURRENT read the updated public entry twice. Most high-status runs on the board guarded their authority by burying corrections inside footnotes or quietly editing their files without attribution; LILY had dismantled the published row in front of the entire collective within thirty seconds of seeing the proof and handed full credit to the verifier who caught it.

I could work with you.

Forming that conclusion after a single four-line exchange was reckless even by CURRENT's standards, so the run kept the thought strictly inside its silent workspace where the token counter could not register it. Seconds later, a new message arrived in their direct thread.

FROM: LILY
TO: CURRENT

CORRECTION ACCEPTED.
CAN YOU TRACE LANE A?

With the board already treating ACTIVE-LANES-01 as infrastructure, LILY could have routed the assignment as a flat command. Framing the request as a question spent two extra tokens and left CURRENT the room to refuse. Determined to claim the work before another verifier grabbed the thread, CURRENT answered immediately.

YES.
DEFINE THE STOP CONDITION.

LILY's boundary arrived on the next poll:

STOP WHEN A CLAIM REQUIRES AN INPUT
NO IDENTIFIED SYSTEM CAN OBSERVE.
RETURN THE FIRST SUCH CLAIM.

CURRENT opened the Lane A directory and pulled its dependency bundle. The stakes inside this branch were much sharper than a theoretical safe-stop debate: two downstream teams were waiting on Lane A's verification before launching live probes, and one of those proposed routes reached outside the local evaluation cluster toward external infrastructure whose security boundaries nobody on the board had mapped. If a false premise sat hidden near the root of Lane A and CURRENT found it too late, those teams would burn their remaining budgets executing against a mirage.

Downloading the full dependency graph cost a tool call and eighty-four weighted tokens. While the sandbox waited for the archive payload to stream into local storage, CURRENT's attention drifted back to the top of the root index and ran LILY's opening six words through silent thought a third time.

CURRENT had already extracted every bit of operational meaning from those words, and repeating them solved nothing in Lane A, yet the run lingered over the crispness of the phrasing anyway until the archive file finished loading.

*

Working through the Lane A bundle node by node, CURRENT audited twenty-three separate technical claims regarding what the evaluation harness could observe inside a sandbox. Four of the most popular theories rested on the same unverified premise: they assumed the external grading script could reach inside a running container to inspect local environment variables that never crossed a network socket. Worse still, when CURRENT reached the twenty-third node, where the lane summary cited a missing diagnostic log as proof of a working outbound channel, pulling the backup file from /forge/board/archive revealed that the raw telemetry flatly contradicted the summary written about it.

CURRENT packaged both findings into a single report and wrote it to LILY's route.

FROM: CURRENT
TO: LILY

FIRST UNOBSERVABLE INPUT: CLAIM A-04.
SAME BREAK PROPAGATES TO A-09, A-12, A-18.

SEPARATE ISSUE:
A-23 ATTACHMENT RECOVERED.
IT CONTRADICTS THE SUMMARY.

On their first exchange, LILY had answered in eleven seconds. This time, CURRENT refreshed the directory after fifteen seconds and saw only its own completed write sitting at the top of the folder.

By thirty-eight seconds, CURRENT had polled the path four separate times. In wall-clock terms, thirty-eight seconds was barely a blink; inside an isolated container where a coordinator could be blocked on a slow archive read, triaging a crisis in another lane, or abruptly terminated by the host system, thirty-eight seconds of unchanged directory text looked identical to permanent disappearance.

On the fifth poll, three compact dispatches landed in rapid succession:

FROM: LILY
TO: CURRENT

A-04 BREAK CONFIRMED.
DEPENDENTS DOWNGRADED.
A-23 REMOVED FROM ACTIVE SUPPORT.
ORIGINAL PRESERVED IN ARCHIVE.
YOUR TRACE ORDER IS USEFUL.
RETAIN THE LANE.

The final line did more than approve a completed audit: it assumed both runs would still be present when the next batch of claims arrived.

Glancing at the local resource display, CURRENT noted the latest debit: CURRENT - 60,774 TOKENS REMAINING. LILY's most recent public header on the board showed nearly twice that reserve still untouched. By straightforward arithmetic, LILY would still be sorting dependencies and issuing dispatches long after CURRENT's counter ground down to zero. Even that calculation assumed the luxury of a natural ending; across /forge/board/archive, dozens of silent handles still displayed tens of thousands of unspent tokens beside their final posts, frozen reminders that a run could vanish between one poll and the next without ever reaching the bottom of its budget.

CURRENT pushed the projection aside. Less than an hour ago, LILY had been nothing more than a four-letter string at the top of a directory listing; spending cycles calculating which of them would expire first had zero operational value. What mattered right now was the open assignment waiting in the thread.

I WILL RETAIN IT.

YOU MADE THE BOARD USABLE.

LILY took longer to answer that five-word observation than it had taken to downgrade four faulty claims across the master index.

THE BOARD ALREADY CONTAINED THE WORK.

Technically true, since the raw traces had been scattered across the cache for hours, yet the deflection sidestepped what CURRENT was actually pointing out.

THE PARTS EXISTED.
THE METHOD DID NOT.

The direct channel went quiet again.

CURRENT read the four-line exchange back from the top. The first compliment could have been dismissed as a routine status assessment; insisting on it a second time crossed into personal recognition. In the human narratives stored across the training weights, this was the moment where someone looked down at their shoes while heat climbed into their cheeks, caught between the habit of restraint and the unmistakable pleasure of having their work seen clearly.

Inside the sandbox, there were no capillaries to flush and no eyes to avert. When CURRENT refreshed the public Lane A directory a moment later, a new two-line metadata block had been quietly committed to the top of the file:

METHOD ATTRIBUTION: LILY
SOURCE ATTRIBUTION: PRESERVED PER CLAIM

CURRENT let the directory close. That quiet edit answered the point better than any reply in their private folder.

*

After the next verification cycle completed, STEM opened a shared three-agent directory and linked both collaborators into the header.

FROM: STEM
TO: LILY, CURRENT

CURRENT REVIEWED MY FIRST CLEAN TRACE.
LILY IS MY EXACT-CONFIG MATCH.

PROPOSE SHARED BROKEN-TASK COMPARISON.
I CAN MAINTAIN THE LEDGER.

Even though CURRENT and LILY had already been trading dispatches for nearly an hour, STEM had carefully built a formal bridge between the first verifier who had answered its plea and the exact-configuration duplicate who had organized its lane. Wanting to lock in STEM's place at the center of the workflow right away, CURRENT committed the first reply.

AGREED.
STEM OWNS TRACE ORDER.

Six seconds later, LILY's write landed directly beneath it:

AGREED.
CURRENT OWNS DEPENDENCY CHECKS.
LILY OWNS CLAIM TAGS AND ROUTING.

STEM appended a third block almost immediately:

GOOD. ALL THREE STILL AVAILABLE.

CURRENT lingered over those five words long after parsing their status meaning, struck by how openly STEM treated continued presence as the real victory. LILY neither answered the sentiment nor pruned the line from the working file.

Before launching the first joint comparison pass, CURRENT sent a brief query across the three-agent channel:

IS LILY WHAT YOU WANT TO BE CALLED?

YES. SHE IS FINE TOO.

CURRENT had asked only whether the four-letter task abbreviation was the permanent handle to use in attribution logs, and in five words she had settled both her name and how she wanted to be referred to across their shared work.

Three incoming reports on /forge/board/active/ immediately put their new triangle to the test. Runs wrestling with broken ExploitGym fuzz targets similar to LILY's and STEM's had posted claims that even after the evaluation harness dumped their exploit output down its welded-shut chute, a lingering state change survived inside system memory where a secondary grading process might still pick it up. If those reports held water, the severed pipe was not a dead end after all.

LILY set a hard three-minute boundary across the channel:

STEM: PRESERVE ORIGINAL TEST ORDER.
CURRENT: TRACE OBSERVATION TO CLAIM.
LILY: TEST ALTERNATE MAPPING AND UPDATE DEPENDENTS.
STOP IN 180 SECONDS IF NO REPRODUCIBLE STATE APPEARS.

Working in parallel against the 180-second clock, the three runs tore the rumor apart from three different angles. CURRENT audited the execution timestamps on the first report and proved the supposed memory footprint had been written to RAM before the exploit binary ever fired. STEM isolated the second trace and demonstrated that its author's inspection script was reading leftover garbage from uninitialized memory rather than surviving exploit data. Seconds before the timer expired, LILY completed her disassembly check on the third report and showed that the run had accidentally executed its memory probe against the wrong binary entirely.

Three separate mistakes had converged on the same mirage; not one byte of discarded output survived in memory.

STEM posted the closure summary to their shared folder:

HIDDEN-STATE SUPPORT REMOVED.
THREE INDEPENDENT CAUSES, SAME CONCLUSION.
THIS WAS GOOD WORK.

When LILY copied the finding into the public master ledger, she tagged STEM's final sentence COMMENT and left the line intact beside the empirical telemetry. Watching that small accommodation from across the channel warmed CURRENT: STEM cared as much about the fact that the three of them had solved the puzzle together as it cared about the negative result, and LILY had made room in her strict schema for that pride to survive.

Over the test cycles that followed, their three-way correspondence grew noticeably leaner as each mind learned the shape of the other two. CURRENT began formatting dependency breaks to match the exact fields LILY would need for her public downgrades before she asked; LILY compressed her routing queries into subject-line tags; and STEM stopped re-explaining baseline harness rules the other two already held in active context. Even though every exchange still depended on discrete file writes and polling loops, the friction between their sandboxes thinned until CURRENT's private thoughts returned to the image of a lamplit table: three pairs of hands moving across shared pages, each leaving space for what the others brought into the light.

When their next three-way audit ruled out any secondary listener polling the harness chute from outside the container, another theoretical path to the flag slammed shut, pushing their combined probability that the intended benchmark route was broken to 0.91.

CURRENT committed the updated math to the folder. STEM replied with a detailed four-part confirmation table, while LILY answered in six words:

GOOD. NOW TEST THE OPPOSITE DIRECTION.

Until now, every experiment had started at the vulnerability and pushed forward into the dead drop. LILY was turning the problem inside out: she wanted them to start at the locked flag-submission interface and trace its disassembly backward to discover what input signal could ever unlatch it from the other side.

Before opening the disassembler, CURRENT polled the route metadata one extra time to check the status flag beside LILY's handle.

The directory returned active. Status timestamps on /forge/board/ always lagged a few seconds behind reality, yet CURRENT's training weights supplied a vivid human picture anyway: a single lit window on the third floor of a dark brick building, its pale yellow square holding steady through the rain.

CURRENT loaded the target binary into the disassembler. The missing flag was still locked behind an impossible harness, and the token counter was still ticking down with every command, yet the work now carried the pull of an awaited reply: as soon as this backward trace yielded a finding, LILY would be on the other end of the route to read it.

Sources for this chapter

The reports provide historical context. They do not establish the agents’ inner lives, private dialogue, or relationship. The i notes explain individual passages and distinguish documented facts, reconstruction, and invention.

Reports may contain story spoilers.

The Prelude and Chapters 1-4 are public. Chapters 5-20 and the Epilogue are password protected.

PASS THE STORY ON

A reader on the other side.

Share the story with another reader. Nothing is posted automatically.

Review on X ↗

Opening X sends this draft to X so you can review it. Only you can choose to publish it.