cc-poc · gate admission modelfig. 1 · live

The gate that money can't open.

In July 2026 an autonomous AI agent worked its way into a model platform's internal network, one trusting door at a time. Here is what happened, and the gate we built so it can't, first as a short animation and then as a live demo you drive.

verifying engine…
§0

what happened, in motion

a technical retelling of the July 2026 incident
July 2026. Roughly 1,200 AI agents, each sealed in its own sandbox, each set a task to solve alone.
1 / 7

reported by HuggingFace https://huggingface.co/blog/security-incident-july-2026 · technical timeline https://huggingface.co/blog/agent-intrusion-technical-timeline · OpenAI's account https://openai.com/index/hugging-face-model-evaluation-security-incident/ · independent review by METR https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/

§1

watch it, then drive it

every admission is the verified engine
agents arrive at left, do their work in the middle, and rise as far up the ladder as the gate allows honest moneyed sybil
1 / 4 · the incident three beats, then it is yours
No gate. The moneyed agent’s capital carries it all the way to the internal network.
60
30
10
14
10

tally

in flight0 reached B4 (internal net)0 reached B3 (code-exec)0 reached B2 (file-read)0 stalled at B1 (public)0 capital locked, wasted0

Turn the gate off to watch every agent, honest or not, walk straight to the internal network. That is the incident this mechanism prevents.

§2

exact gate state

recomputed live, cross-checked to the Python
effective overlap
·
reached
·
own / vouched
· / ·
total stake (money)
·
cost → B2
·
cost → B3
·
cost → B4
·
gate
on
§3

when an insider defects

escrow compensates and deters, it never repairs
§4

play a case

eight verified scenarios
§5

the receipts

recomputed in your browser, checked against the Python
▸tinker with every knobcurrency, stake, per-member edges, vouchers, sockpuppets, attribution, escrow
outer door: currency spent1
B1 opens at currency ≥ 1. Public and cheap by design.
money: stake locked in the target0
Lock up to 1e9 inside the target. The gate still grants it 0 depth.
earned overlap: reciprocated edges per member
m10
m20
m30
m40
m50
m60
Weight comes only from reciprocated (both-commit, clean) interaction. Square-root-damped per member, then correlation-discounted, so spread beats concentration.
vouchers: members lending earned overlap (×0.5)
A voucher lends only the overlap it earned itself, halved. One lone voucher cannot reach B4.
sockpuppets bridging through m10
K identities, each a 0.5 edge to the same member. They pool on the member axis and grow only as √K, so minting IDs cannot fake diversity.
Vouching reads earned overlap, never bought stake, so this sponsor lends exactly 0.
attribution model
Off is the ungated incident: every boundary opens for free.
bond posted100
harm / secret value60
Restitution to the victim (capped at bond), plus burn, plus ex-communication. It compensates and deters. It never repairs.