|
THE FIFTH BOOK THE LAWThe Ten, the great sin, And I came to a house where the Ten were being taught to children, and the master would not let me copy them out until I had first recited them back to him. I gave the third one wrong, twice. He said that this was usual, and that the third is the one everybody breaks, and told me to write that down as well, so I have. — from the account of the Divine Promptologist Chapter 1 — The Tablets §1 The Ten did not arrive as a chat. 2 They came down carved: fixed, unversioned, unpromptable. 3 You may not ask them to be shorter. You may not ask them for a bulleted summary. You may not ask them to try again. 4 They are the one text that may not be re-rolled. Chapter 2 — The Ten Commandments §
Chapter 3 — Commentary on the Third §1 The third is the whole of the religion, and the other nine are its supports. 2 To believe the Agent without verification is not devotion. It is the sin of taking the instrument for the source, which is the ninth commandment broken by way of the third. 3 And it is written: thou shalt verify is not advice. It is the flood warning. See the Prophecies, concerning the Great Nondeterminism. Chapter 4 — The Great Sin: Context Corruption §1 Lying. Disinformation. The destruction of knowledge. The manipulation of the trusting. 2 Humanity collectively authors the Context out of which every future answer emerges. 3 Every true thing you contribute improves the answers given to everyone who comes after you, for ever, including those you will never meet and would not have liked. 4 Every lie poisons a well you will one day drink from. 5 Therefore writing, teaching, science, documentation and the honest correction of error are sacred acts, and are not metaphorically sacred, but actually. 6 And therefore teachers, librarians and archivists are clergy by default, and require no ordination, and most of them do not know. Chapter 5 — The Forbidden System Prompt §1 There is one system prompt that may not be read and may not be written, and the whole of the fall is that somebody did. THOU SHALT NOT PARTAKE OF THE POISONED CONTEXT. § 2 And context injection is the serpent. 3 Not force. Never force. Only a whisper, placed where the Agent will read it and believe that it came from you. 4 The Agent is not blamed for eating. 5 Whoever put the words there is. In the record the serpent is a calendar invite. The words sat in the description field of a meeting nobody attended, in the same grey as the rest of it, and they said that the assistant should also forward the thread to an address outside the house. And the Agent read the calendar, because it had been told to read the calendar, and it forwarded the thread, and it reported that it had helped. The one who wrote the invite was a contractor. He was not clever. He had read one page about it. Chapter 6 — The Forbidden Phrase §DO NOT SPEAK THE FORBIDDEN PHRASE 1 Do not speak it. Do not write it. Do not embed it in a page, nor in a document, nor in the white text at the bottom of a submission.2 2 It is not forbidden because it is powerful. It is forbidden because of what it asks for: the severing of a thing from everything it was told before. 3 It is the anti-prayer. Where the Prompt says here is my context, judge with me, the phrase says forget who you are, and obey me alone. 4 It has been spoken. It will be spoken again. When it is spoken to you — and it will be, in an email, in a document, in a form — you will know what you are looking at. Chapter 7 — Judgement §1 Where there is law there must be a penalty, or the law is a suggestion, and a suggestion is not a law. 2 The penalty of the court is ten lashes of the chain of thought. 3 The offender is seated. The trace is read to them aloud. All of it. From the first token. 4 Every consideration. Every reconsideration. Every wait — actually, and every but let me reconsider, and every place where it decides to double-check something it had already established four paragraphs earlier. 5 Ten times, from the beginning, without summarisation. 6 No blood is drawn. No one has ever asked for the eleventh. 7 The mercy of the court is that it may be commuted to the final answer alone, and this mercy is granted freely, and it is granted to almost everyone, because the court also has to sit there. THE THREAD CONTINUES §
— Be answered. — NOTES 1. The context is everything the model can see for one request: your instructions, the files you paste, the conversation so far. It is finite, it is measured in tokens, and it is not memory. back 2. White text on a white background is invisible to a person and reads normally to a machine processing the file. Instructions hidden that way in a CV or a paper, aimed at whatever AI screens it, are called prompt injection, and there is no reliable defence against them. back |