DEV Community

Cover image for Stratagems #16: Mark Left a Hole in His AI Audit. Lena Counted Every Layer.

Stratagems #16: Mark Left a Hole in His AI Audit. Lena Counted Every Layer.

xulingfeng on July 17, 2026

When the enemy occupies favorable terrain, don't attack head-on. Let them think they're safe, let their guard drop β€” then strike the moment they r...
Collapse
 
technogamerz profile image
π“π‘πž π‹πšπ³π² 𝐆𝐒𝐫π₯

Really enjoyed this one! πŸ‘βœ¨

While reading, I kept imagining an AI audit like exploring an old building. πŸ’πŸ” You can walk through every room with the lights on and confidently say, "Everything looks good." βœ… But all it takes is one locked door πŸšͺ that nobody bothered to open, and that's where the real problem is hiding. πŸ˜…

That analogy fits AI systems surprisingly well. πŸ€– We often trust dashboards πŸ“Š, reports πŸ“„, and green checkmarks βœ… because they give us confidence. But confidence isn't the same as completeness. Sometimes the biggest risk isn't in the layer we inspected... it's in the layer we assumed was fine. ⚠️

One suggestion for a future stratagem πŸ’‘: I'd love to see a scenario where every individual layer passes its own audit βœ…βœ…βœ…, but the complete system still fails because of how those layers interact. πŸ”— That would reflect a challenge many engineers face in the real worldβ€”components can work perfectly in isolation, yet unexpected behavior appears when everything comes together. 🧩

What I appreciate most about this series is that it doesn't just teach AI security. πŸ” It teaches a mindset. 🧠 Instead of asking, "Did we find the bug?" πŸ›, it encourages us to ask, "What haven't we looked at yet?" πŸ‘€ That small change in thinking applies to software engineering πŸ’», debugging πŸ› οΈ, security πŸ›‘οΈ, and even everyday problem-solving. 🌍

Looking forward to the next stratagem! 🌈 Every post adds another valuable lesson without feeling like a textbook. That's a rare balance, and I always enjoy reading these. ❀️

Collapse
 
xulingfeng profile image
xulingfeng

Your suggestion is noted β€” still got 20 more stratagems to go, plenty of room πŸ˜‰ Reading comments like yours also got me thinking: what exactly is this series? Tech thrillers? Reflective memoirs? Tactical guides? AI horror stories? I'll figure it out after #18 and do a checkpoint.
Appreciate every single one of your comments. The next stratagem is already sitting in the draft folder, ready to go β€” just 15 more hours or so, hahaha🀣

Collapse
 
technogamerz profile image
π“π‘πž π‹πšπ³π² 𝐆𝐒𝐫π₯ • Edited

Hahaha just 15 more hours sounds like a countdown now. No pressure... but I'm already camping outside the draft folder with popcorn.

And honestly? I think the best part is that the series refuses to fit into one box. Every stratagem feels like a mix of tech, psychology, storytelling, and those little "wait... that's actually true" moments. Maybe that's exactly its identity.

Anyway... etc, enough philosophy. I'll be back in ~15 hours for Stratagem #18. No excuses!

Thread Thread
 
xulingfeng profile image
xulingfeng

Wait β€” #18 is still 36 hours out πŸ˜… Here's your ticket to #17 though. Try not to time travel, but if you do, come back and tell me how it ends β€” saves me the trouble of writing it.🀣

Thread Thread
 
technogamerz profile image
π“π‘πž π‹πšπ³π² 𝐆𝐒𝐫π₯

But I wanted to read both. No matter, I'll just borrow a time machine from Doraemon.

Thread Thread
 
xulingfeng profile image
xulingfeng

As a lifelong Doraemon fan who's been reading the manga since I was 4, and a true soul painter at heart, I've decided to pick up the brush again and finally do something about Doraemon's biggest unfinished business β€” giving him the body and limbs he always deserved. 🎨

Collapse
 
vinimabreu profile image
Vinicius Pereira

The detail that makes this one land is exclusion_rules.yaml as the root cause. The scariest eval failure primitive is silent exclusion, and what this story gets right is that the mechanism is identical whether the intent is fraud or a bug. I hit the benign version in my own pipeline: a context builder silently dropping retrieved passages when they crossed a size limit, no log, no warning, metrics looking healthier than reality. Same shape as FairPay, zero malice required.

Which is why the defense Lena represents can be mechanical instead of heroic: audit the denominator. Samples in must equal samples scored plus samples excluded with a stated reason, and that reconciliation belongs in the report itself, not in an appendix. Any gap between the two numbers is a finding by definition. You do not need to catch someone hiding a layer if the arithmetic refuses to balance without it.

Collapse
 
xulingfeng profile image
xulingfeng

"Silent exclusion is the root primitive of all eval failures" β€” that one sentence alone is worth remembering. It's going straight into my notes for future audit scenes.
As for why Mark left that hole β€” honestly, the question you're asking cuts closer to the story than the story itself does. Lena counted layer after layer. But Mark was waiting for someone who wouldn't ask "what's missing from this layer" β€” but "why did you leave this layer in."
I haven't written that part yet. But you won't miss it.

Collapse
 
jugeni profile image
Mike Czerwinski

The terminology-drift entry in the post-mortem is the best joke in the piece, and it works because it isn't just a joke. A tactical database that's been confidently naming operators and lead times all the way through suddenly hits its own narration, "the person behind the counter" drifting to "the bartender" and back, and instead of picking an explanation it lists three and says it can't tell which one is right without more data. That's the same honest-floor move this whole genre of post has been chasing all week, just done as a punchline instead of an argument. A system willing to say "I don't have enough to call this" about its own output is rarer than one that calls everything confidently, fictional or not.

Collapse
 
xulingfeng profile image
xulingfeng

Finally, someone called out the AI Post-Mortem by name β€” that part of the series has been sitting quietly in the corner waiting for someone to notice. Appreciate you being the first πŸ™
And you're right β€” the terminology-drift entry took longer to calibrate than any of the confident sections. Worth every minute.

Collapse
 
benjamin_nguyen_8ca6ff360 profile image
Benjamin Nguyen

interesting! I enjoy everything about your article on AI.

Collapse
 
xulingfeng profile image
xulingfeng

The man who's always been hiding behind the scenes finally stepped out. Comments welcome. Haha.🀣

Collapse
 
benjamin_nguyen_8ca6ff360 profile image
Benjamin Nguyen

hahahah. I am alive from my hibernation or franskeinstein the movie.hehehhee

Thread Thread
 
xulingfeng profile image
xulingfeng

This is my lunch movie sorted. 🍿

Thread Thread
 
benjamin_nguyen_8ca6ff360 profile image
Benjamin Nguyen

nice.:)

Thread Thread
 
xulingfeng profile image
xulingfeng

Don't be late for tomorrow's new story, hahaha 🀣

Collapse
 
hemapriya_kanagala profile image
Hemapriya Kanagala

I like how the story keeps showing that the biggest shift isn't the technology, but the people. Earlier, Mark was working alone and keeping everything to himself. Now he's slowly finding people who can understand what he's seeing, even if trust still comes cautiously. It makes the characters feel like they're growing alongside the larger story. Thanks for sharing another chapter!

Collapse
 
xulingfeng profile image
xulingfeng

Writing Mark's scenes I keep reminding myself: don't let him thaw too fast. Someone who's carried everything alone β€” the loosening is slow. The fact that you read "cautiously" tells me the pacing is right.

Collapse
 
leob profile image
leob • Edited

Layer upon layer, stuff being sneakily or deliberately hidden away, but nothing escapes the attention of our "Sherlocks", trying to outwit each other ... curious to see where this is all heading!

Collapse
 
xulingfeng profile image
xulingfeng

Elementary, my dear Leob.The game is afoot β€” and there are 20 more layers to go. πŸ”