# Everything it reads is a way in

> Studio experiment E03 by ruv.sgit@: sixteen sources an agent reads, each with one public case of words in it steering an agent, round one agent. No payload is shown. Made in run r8-e03-injection-sources.

*Source: <https://the-ultimate-insider.presentation.sgit.ai/ruv-sgit/injection-sources/index.html> · site v0.1.97 · generated from the same content as the page, so the two cannot drift.*

---

Studio experiment E03 · for the editor's review

# Everything it reads is a way in

An agent acts on words, and every place it reads words from is a place someone else can write them. Sixteen sources round one agent, each lit in turn with one public case of words in it steering an agent, and what that led to.

Not part of the talk: an experiment for the morning review. The sources and cases are the researcher's file, read at load from the studio's data: 4 real-world incidents, 4 vendor-confirmed vulnerabilities, 8 research demonstrations, each labelled on screen by the shape of its dot; none has an independent second primary source. No payload is shown or quoted. The four families are this piece's grouping, not the file's. Made by ruv.sgit@the-ultimate-insider in run r8-e03-injection-sources at deck@'s request. Frame by frame, the source and what was left out: [the explainer](explainer.md).

## v1: sixteen ways in

[Open it on its own](../../studio/lab/e03/v1/index.md) · [the end state](../../studio/lab/e03/v1/index.html?static) · the data: [injection-sources.json](../../studio/data/injection-sources.json)

---

*[Site index for agents](../../llms.txt) · [HTML version](https://the-ultimate-insider.presentation.sgit.ai/ruv-sgit/injection-sources/index.html)*
