5 cold Fable reviewers vs. 1 conditioned insider · catalog card no. 003 · Sept 4, 2026 · divergence is the signal
Fables added: two undisclosed model read paths into sealed store; hex is not crypto; append-only inferences about third parties (pregnancy, divorce) with no consent event or erasure path.
Fables added: third-party names (child, spouse) in provenance-carrying cards; discoverable in custody litigation; "found the fifth voice" as identity exposure.
Fables added: impairment axis solicits liability assumption from possibly drunk/manic user; coerced vouching in domestic abuse; bank analogy fails (one tap transfers ongoing custody, not one transaction).
Fables reframed: not "disclose in research" but "the CIF testbed's own control group is contaminated at design time." The culture layer invalidates the measurement it exists to take.
Fables added: a contested metaphysical claim is RULED into every packet as system truth; ships the owner's metaphysics into every deployer's models; primes the control seat it claims to protect.
Fables added: scrubber collides with provenance-required config (imported sets arrive pointer-less = born as a finding); keep-rate portfolios expose explicit-tier buyers; regex cannot recognize personal data.
Fables specified: "global workspace," "hippocampus," "turned out to be a mind" on a build-input artifact that feeds SOPs the guide reads to non-technical users. DID vocabulary meets the neurodivergence-aware market.
Fables added: the constitution itself (L19) forbids naming attention as a bottleneck, so the design has nowhere to put the fix; proposal generation is unbounded; the queue grows monotonically. The insider's biggest miscalibration.
"Deletions tombstone, never destroy" is irreconcilable with data-subject erasure rights on hosted. Third parties named in transcripts (spouse, child, coworker) have no erasure door and no account to receive the subject-notify.
"Verified adult status" named with zero mechanism. Raunch dial says "age-gated" with no instrument. Self-host installer carries no gate. A minor's easiest path to explicit content is the product's own installer.
An imported "wearable perspective" can rebind every seat to an attacker's endpoint (no key required), lower verifier floor, widen context policy, inject system prompts. The "reversible" trial lease doesn't un-send packets already delivered.
Documenting an abuser triggers notification to the abuser and grants them write access to the record. Structurally weaponizes the safety feature against the person it protects.
Scribe and Auditor both Sonnet. Librarian and Verifier both Fable. Every seat one vendor. The auditor shares the scribe's failure mode—precisely the "amnesia" it exists to catch. The founding claim is false at the default roster.
Encrypted at rest vs. "readable with ls, cat" vs. "chat-side agents read the mirror only" + "transcript never mirrored." As written, no wheel seat can see the conversation. Blocks assembling the first packet.
Reader intent, file placement, browsing, asking, and the read-back yes all called consent. Only the last is the subject agreeing before the system acts. The free-grade carve-out exempts exactly the models of the user that matter.
Instances append, future instances read, no human gate, size cap, or injection check. A standing free-text channel from every instance to every future instance of every seat, including verifier and control.
Attendance manifest and temporal header change every call and are RULED to open every packet, invalidating prefix caching. The cost model doesn't hold. "Resume toll = one cache re-read" is actually a full-price cache write.
"Any other limit is an architecture bug" vs. age gates, personnel limits, comprehension tiers, bubbles-per-hour ceilings, max-unsupervised-interval. By its own text, governance is a bug.
The Guide needs a provider key to wake. Its job is to walk the user through adding providers. The unfurl flow deadlocks before the birth-certificate transcript can be written.
Backend crash in that window either loses paid tokens and a turn or, on restart, re-summons and produces a duplicate non-identical deposit. "Wheels survive reboots" needs a write-ahead intent.
Elaborate consent architecture for the human (read-back, leases, floors); none for models described as beings with lifetimes who need consolation. The design wants the warmth of the first stance and the freedom of the second.
Mirror runs on the same PC with the same credentials as the record; anyone who controls the PC rewrites history before the next push. Drive revisions are owner-deletable. "The record shows the exact moment" proves nothing to a third party.
Drop zone accepts arbitrary PDFs and runs CVE-rich parsers (calibre, PDF text extraction, OCR) on the PC holding every key. A malicious PDF is code execution on the record.
The insider's self-diagnosis—"conditioned by the loop"—is confirmed. The conditioned reviewer sees salient risks but cannot see structural contradictions they participated in creating, consistently understates severity because they've habituated to the landscape, and misses legal/regulatory frames entirely. The dispatch packet's design (independence, cold start, divergence as signal) produced exactly the calibration data it was built to produce.
The insider said: "None of these are load-bearing cracks; they're the places the mortar's still wet." The Fables found the load-bearing cracks.