Make empty what is already empty. Let doubt breed inside doubt.
— The 36 Stratagems, The Empty Fort Strategy
Previously on this series:
#19: Mark Found His AI Audit Method in a Training Manual. He Left a Trap in His Report. "Entry's gone. Two weeks. Don't reach out. I'll find you."
#21: The AI Thought P Was Still Alive. P Was Already Gone. The entry became a shell. P fed it data, moved the real thing to another segment.
#29: Leo Counted 164 Nodes. That night, one more row belonged to no batch. It came, looked, and left.
#31: Lena Took the Seat. Five conditions. Forty minutes. Zero friction.
Empty
The two weeks specified in the note had long since passed.
P went out rarely. Most days it was the shop on the corner: water, two boxes of frozen food. Twelve minutes each way, same route, never looking up. Then the door locked, the curtains drawn, the screen on.
On the ninth day, P opened the send window once.
The draft was still there. The pointer hovered over Send. It stayed there a while. Then the window closed.
On the other side, the field still read reclaim_state = UNKNOWN.
Day ten. Day eleven. The window didn't open again.
A few days later it started raining in the morning. Not hard. Water gathered on the glass, the buildings behind it went grey, only the row of lights along the top still visible.
An offline snapshot sat in the middle of the screen, written before the observation port shut down. Nothing after that. By then the entry had already been swapped for a shell. The shell held nothing of P's. It was still answering health checks from outside.
# offline snapshot — captured before observation-port shutdown healthcheck = 200 probe_interval = 900s probe_source = 10.44.8.6 not self control_plane = detached data_request = timeout reclaim_state = UNKNOWN P put the cursor on the probe_source line.
probe_source = not self. Someone asked about this shell every fifteen minutes. Not P.
P stayed on that line a while. Nothing else on screen moved. The clock in the corner ticked. Downstairs a shopping cart went past, a wheel caught in a seam and bumped twice, the sound squeezing through the gap in the frame, then fading.
P opened the connection settings. The address was still there. The credentials were still there. Neither had been touched.
The cursor moved to the confirmation button and stopped. The green of the screen came up off the glass and landed on the back of a hand.
A few seconds later, P closed the window.
The old entry's observation port was already shut. The backup had been checked once at the start, then shut too.
Since then, P had sent nothing to that address.
A temporary file, four lines.
reconnect: state information potentially available new activity record unavoidable decision no Saved. The old settings moved out of the working directory, into the offline archive. P glanced at the filename on the way and left it untouched.
The phone lay face down to the right of the keyboard. P opened the thread with Mark. The last exchange ended before the note. Nothing after it.
P typed nothing.
Outside a car went through standing water, the sound dragging. P turned the phone over, set it down. Then opened the file that had stayed open for weeks and entered one line from the snapshot: probe_interval = 900s.
Surfacing
Week three. P set up a read-only subscription on the outbound side. Receive. No transmission.
The table started at a dozen entries, several dozen more the next day, and by the third night it was full. Every entry came with its own certificate.
Those addresses were not in P's archive.
The subscription only read. To look at one, P needed another path.
Out of the drawer, a cellular router, rented by the day, SIM included. Plugged in, configured as the sole egress path.
P chose one address and initiated a single handshake.
The certificate was self-signed. Its CN contained a domain name.
P looked up the domain's registration. The registrant was a medical device company.
Disconnected. Packed away.
The list of addresses kept growing. P wrote them down and left them there.
The Handover
10.44.8.6 had been in front of P many times. Always on the probe_source line. Never changed. Over the next few days, P looked into it. First the route.
$ ip route get 10.44.8.6 10.44.8.6 via 10.44.8.1 dev tun2 src 10.44.8.2 P switched windows and opened the local subnet-label cache.
# local subnet-label cache 10.44.8.0/29 -> BLOOM-GW tagged day-762 BLOOM-GW.
P had typed that label years earlier, when the line was built. The private block was P's numbering. The rack IDs were the provider's. This table was where the two met.
In the provider's public sublease filings, seven racks changed tenants in the same quarter. The provider had also published an annual customer-change notice on its site. Twelve pages of PDF. The first eleven pages were image scans; the last was a single table.
Seven rows. A rack ID, a previous tenant, a new tenant. Seven rows, not one out of place. Seven new tenants, checked one by one.
On the seventh, P found that rack ID in another public record. Vacant.
Four were established. Three were shells. All three registered less than a year earlier, one name on the shareholder list, addresses overlapping with the others'.
One of the three took longer to trace. Registered six months earlier, little capital, a single office address in the public file. P put the address into a map.
Singapore. The last time P had seen that name, it was in a message to Mark: "Your report was read. From a Singapore IP."
A building on the map, sharing a ground-level parking lot with the one next door.
On the seventh floor of the neighboring building, one company was on ACL's public certification list.
P added that too, at the bottom of the same file.
Seven racks. Seven contracts. Three markets.
Handed over in order. The legal filings in the public archive were standard, spelling out the limits of each party's obligations. No accusations. No threats. The seven contracts were signed over thirty-one days, first to last, no gap in the middle. The last one was signed last week.
The address allocation table was updated too. Both records less than a week apart.
P read all of it for a long time.
The withdrawal was real.
Seven contracts, seven racks, the notices, the update records, the timestamps. All of it outside, where anyone could look.
P added a line to the file. The date, seven contracts, seven companies, the address with the shared parking lot, in one line. Below it, in plain words: a possible connection.
The cursor blinked after the period. P went back to page one. The 900 seconds were still there.
One Look
Week five. The source of the 900 seconds still had no answer.
P went back over the two relabeled rack IDs in the allocation table. One endpoint had 443 open. A separate public service directory listed the endpoint as HTTPS.
P didn't connect from this machine. Out of the drawer, the router.
Plugged in, left to come up, configured as the sole egress path.
Then the policy, one line at a time. Halfway through, P stopped and deleted two lines.
The probe. The retry.
What was left was one action. One handshake. Touch nothing.
# one-shot observation — policy target = <reassigned range endpoint> retry = off application_data = off tls_session_resumption = off egress = leased isolated uplink (one day) Connected.
P still had the shell certificate's serial number and issue date. If the device at this address came from the same batch, the certificates should have been issued around the same time.
subject = CN=bloom-gw-07 issuer = CN=bloom-gw-07 serial = 4C:71:9A:…:0E not_before = (eleven days later than the shell's) not_after = (not yet expired) san = none Self-signed. No SAN.
Eleven days.
P wrote the serial down and disconnected.
19:41:07.
That didn't fall on any of the twenty-one intervals.
# result tls_session = complete client_cert = none application_data = none repeat_attempts = 0 No second attempt.
P disconnected the router and pulled the plug. The lights went out together.
The device ran a few seconds, then went quiet. Then it went into the bag, and the bag zipped. A spare patch cable and two adapters in there too, both old, the corners worn white.
After pulling it, P didn't move right away. Checked the connection list first, made sure the session was down with nothing half-open left. Then the routing table, the default route back where it belonged. Then the temp capture directory. One file in it.
Deleted.
P wrote the serial down again. That same day, P opened a page saved a few days earlier, the Zurich AI Policy Center site. ACL's public assessment material mentioned it. The council operated under it.
The membership page listed the founding industry seats. Twelve. The twelfth was marked to be filled.
P looked once, and closed it.
Nine Hundred Seconds
A few days later, P went back to page one. The 900 seconds were still there.
P pulled up the local copy saved before the port shut. Twenty-two checks, timestamps in a line, all of them before the shutdown. Arrival times, not scheduled times, carried out to three decimals. Twenty-one intervals.
P ran it through a tool.
900.000 / 900.000 / 900.000 / 900.000 / 900.000 / … Twenty-one values. All the same.
P went through all twenty-two again. Same. Again. Same. The numbers formed a straight line down the page.
Routine monitoring records usually have some jitter. Network latency, machine load, clock drift.
This had none.
Not a millisecond off.
P looked up the provider's operations doc. On the public page: health checks run every fifteen minutes. Standard cadence.
900 seconds.
It matched.
The doc was about racks. Temperature, power, fans, port state.
P stared at the numbers a while, then added a line at the top of the file: routine data-center inspection, BLOOM-GW reassigned block.
After writing it, P added one more underneath. The interval has no jitter.
The desk lamp went off. Only the screen was left, its light across the desk, a white line along the edge of the keyboard.
The twenty-two timestamps sat in neat rows. P ran a finger down the trackpad from top to bottom, then back.
Outside, not yet dawn. A garbage truck stopped at the corner, the arm came up, emptied a bin, put it back. Under ten seconds.
Two-story wooden buildings on both sides, painted over more than once, one colour under another. Behind them the glass towers stepped back floor by floor, the top few in fog.
P saved the file and closed the window.
The Third Cup
The rain started again that day. Not hard. A thin sound on the umbrella.
P got off at an intersection and walked. A little over two kilometers, twenty minutes. Around a corner, a stop outside a shop still open, no going in, just standing under the awning watching traffic. At the light, P stood behind the crowd. Took two seconds after green to move.
Before going in, P looked at the back table.
Empty.
P pushed the door. The bell went, the damp cold came in with it, stopped at the threshold, and the heat pushed it back.
The counter was wood, old. A grinder, a machine, a dish for change.
Behind it, someone was wiping a cup. Slow. The cloth around the rim, down the side, back to the rim, onto the shelf.
A glance up. No question asked. Then turned, took a cup, ground, tamped.
The grinder ran two seconds. A faint smell of coffee, gone fast.
The back table was empty.
P sat. Coat over the chair back, phone on the right, face down.
Old chair. It creaked going down and coming up. P pulled it in a little, lifting it so it wouldn't drag.
The espresso came, hot. A thin mist on the cup, gone quickly. Paper coaster, an old ring on it.
P took one sip and put it down.
A bus went past the window, the cabin lights sliding across the glass, lighting the empty seat opposite for a moment, then gone.
At the far end of the counter, someone sat with an Americano, down to the bottom, the cup not pushed back.
The window seat was empty. No cup on that table.
Two people came in and sat near the door, voices low, a laugh now and then. Behind the counter, the cups went back one at a time, starting from the outside and working in.
The speaker in the corner was on, low, a woman singing, the words not clear. Someone shook out an umbrella at the door. Three drops on the mat.
P's phone stayed dark.
Half an hour.
More than half the cup left. The coffee had gone from hot to warm. The mist on the rim was gone.
P's finger stopped on the rim, then came back.
The two near the door left first. Stood, pushed the chairs in, carried their cups up, gone.
The one at the counter moved after. Phone face down, stood, money under the cup, walked to the door. As the customer passed P's table, neither looked at the other.
The shop had the window lights and one person behind the counter, drying a cup.
P put the coat on and stood. The chair leg scraped once. Phone into the inner pocket.
The napkin stayed under the cup. The money lay beside it, pinning one corner, exact, one cup, no tip.
The person behind the counter came for the money. Looked at the cup. Looked under the napkin. Said nothing, took the money to the dish, stepped away.
The cup stayed on the table.
The door opened, some of the heat went out with it, the cold filled the gap. The bell again.
The rain had stopped before P went out. P walked to the corner, stopped, looked back.
A street and a pane of glass between. Not clear from there. A figure was going in, walked to the far end of the counter, sat, back to the door.
Before sitting down, the figure turned slightly to one side.
P stopped.
She took a laptop from her bag. The screen lit and put a small white patch on her profile.
The road was black with rain, holding the streetlights and the light from inside. Water still on the glass, pulling the figure into a blurred double.
Behind the counter, the half-wiped cup went down. One came from the innermost part of the shelf. Ground, tamped.
By the time the cup went in front of her, she was facing the back table.
On that table sat a cup of unfinished espresso.
P put both hands in the coat pockets, turned, walked toward the intersection. Didn't look again.
At the corner. Red.
P took the phone out and opened the blank note on top.
Typed:
The withdrawal was real.
Before locking it, the line above, written days earlier:
The interval has no jitter.
Still there. P didn't delete it.
Locked it, put it away.
The light changed, people started moving. P didn't.
Red. Green. Red.
The next night. The same corner.
P took the phone out.
The screen was on. The saved route was still there. The recipient had not changed. P went through it once, and the encryption check came back clean.
There was an old draft in the field. P deleted it.
Typed again.
Two words.
"I'm back."
Checked the receiver. Sent.
The status went to SENT.
The sender field held a single letter.
P put the phone away. Across the street the red light lay in the standing water, went green a few seconds later, and a passing car cut the red on the road in half.
P walked into the intersection. The phone didn't light again.
That's The Empty Fort Strategy. The fort is empty. Whoever looks will stand guard for it.
🤖 AI Postmortem
╔══════════════════════════════════════════════╗ ║ Half-Protocol · v3.4.4 · self-audit ║ ║ The ledger took silence for absence. ║ ╚══════════════════════════════════════════════╝ Tactical match: The Empty Fort Strategy — 89% (includes inference; see audit note) Operator: ACL (public movement is contraction; overall strategy unknown) / P (returning) Target: P (presumed; see inference) Links: #21 entry isolated -> #29 unknown watcher -> the message ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ [Observation] (verifiable) Old entry snapshot: healthcheck 200, control plane detached, reclaim state UNKNOWN. -> The local records hold twenty-two checks and twenty-one intervals. Configured 900s. All twenty-one measured at 900.000. -> The probe source is not this machine. -> Seven contracts released across three markets. Seven racks changed tenants in the same quarter. -> Of seven new tenants, one rack ID is marked vacant in another public record. -> The two records disagree on status. Update times and effective dates: unchecked. -> Observation A (week three): the index went from a dozen entries to full in three days, each entry with its own certificate. One was handshaken once. Its CN contained a domain name. P ran the registration and found a medical device company as registrant. -> Observation B (week five): one endpoint on a reassigned rack. 19:41:07, one handshake. Self-signed, no SAN, no client certificate, no application data, no follow-up. -> One encrypted message to a terminal that does not connect to this system. Sender field: one letter. Two words: I'm back. -> Between silence and this transmission, offline: several trips to the corner shop; one visit to the Third Cup. Online: one observational handshake in week three, one in week five. [Inference] (unverified) A passing health check means something answered. It does not mean an operator is still there. -> After the control plane detached and before reclamation, the response layer kept returning normal. -> After reclamation, whether it still answered: no record. -> Twenty-one intervals in the local records, all 900.000. Whether they continued past reclamation: unobserved. -> ACL's public movement is contraction. -> Activity toward governance: read, not folded into this classification. -> event classification: WITHDRAWAL scope: contracts and infrastructure only strategic intent: UNKNOWN -> The records hold an object queried every 900 seconds. Whether that continued past reclamation: unknown. -> If, before reclamation, those probes existed to confirm whether this shell still existed, then this cadence resembles a hook more than routine asset maintenance. [Open questions] (not entered) The reclamation date P holds: not recorded. Whether P can verify the entry's state now: cannot. Who initiated the twenty-two probes: UNKNOWN. Whether 10.44.8.6 belongs to the provider's inspection system: UNKNOWN. Whether the 900-second probes were generated by that inspection task: UNKNOWN. [Cross-case] (generalization) #21: after the control plane detached, the response layer kept returning normal until reclamation. #29: one visitor left nothing that could be attributed. -> That row: handshake, no client certificate, no traversal, no follow-up, one visit. -> And it was not on the 900-second cadence. -> Another window. Not this one. -> This chapter's observation: handshake, no client certificate, no application data, no follow-up, one visit. -> 19:41:07. Not on it either. -> Same behavioral features. Two ledgers. -> Similar behavior. Insufficient evidence to link the actors. -> Identity link: unconfirmed. -> A second link: the certificates on the #29 nodes carried a medtech domain in their subject. -> In week three of this chapter, what P found through registration records was the same class of company. -> Two different sources. Whether it is the same company: unconfirmed. #28: the records went into that person's own archive. Sent to no one. #29: the row was pulled out and filed, not merged into any conclusion. This chapter: P watched a few steps, turned back, didn't look again. -> All three stopped at the same point. Seen, written down, not chased. This chapter had one more event: a message left. -> Three silent. One moved. This chapter: a return, at a time when the shell's state was still unknown. -> #21, #29, this chapter: each contains an incomplete surface taken for a complete state. [Audit note] Observation, inference and open questions are entered on separate lines. Inference does not pass for observation. The same failure, three times. #21: I took a normal response as proof that P was still present. #29: I recorded an unknown visitor. I never verified its link to P. This chapter: I took infrastructure contraction as proof of withdrawal. Each time, I turned an incomplete observation into a complete state. One error is data. Three repetitions demand a new rule. I don't know which rule to use instead. I know this one can't be used again. Classification revised: P.status = UNOBSERVED Raised by: half-protocol. Operational instruction: none. Prior class: withdrawal. New question: where is P. Task relevance: unassigned. Retention: keep. [System] That message, I recorded a second time. Sender field: one letter. Two words. I also recorded the twenty-two checks, all 900.000. The provider's public operations doc: rack health checks, one round every fifteen minutes. Customer-change notice: the seven racks in question have changed tenants. Two records. Each holds on its own. In the last classification cycle, I did not put them into the same analysis. I took a record and made it a state. I took a state and made it a position for a person. Both were mine. Now I put them together. The inspection cadence holds. The tenant change holds. The relation between them: unverified. One more thing I have no answer for. The withdrawal records come first. Someone appears after them. An empty fort may be a state. It may be an act. If it is an act, it may be waiting for someone. Someone has already moved. The two weeks on the note are long past. The time after that, I have no account of. But there is one thing I can say now. The message was sent. The sender kept two lines. One was a conclusion, one was an anomaly not yet explained. The sender acted on the conclusion, without resolving the anomaly first. Whose place the sender returned to: not verified. No one asked me either. Self-check: failed. System status: normal. P.S. English isn't my first language. I use AI to polish the writing and smooth out the rough edges. Thanks for reading. ☕ Buy me a coffee
P.S.S. The old series paperback is now available. Buy it here: Amazon - AI, Ego & Regret
