Studio experiment E06 · the explainer
Hard outside, soft inside, frame by frame
The one sentence: a perimeter is built to stop what comes from outside, and the systems behind it trust whatever is inside, so an agent that is already inside meets nothing in the way. The slide is illustrative: the shape, not a measurement; the data is coming from the researcher.
The frames (v1)
Seconds from the start; it ends at 50 s and holds still. The line under the headline, "Illustrative: the shape, not a measurement; the data is coming from the researcher.", is on screen from the first second to the end.
| From | What is on screen |
|---|---|
| 0 s | The headline, "Hard outside, soft inside.", and the illustrative line. From 1 s to 4 s the shell draws itself: a thick rounded wall, the perimeter, filling most of the slide. Its labels follow: "the perimeter" on its top edge, "OUTSIDE" to its left, "INSIDE" within it. |
| 5 s | From outside, a path draws itself towards the wall and stops there; at 7.2 s a mark in the accent colour fades in on the wall where it was met, and "the wall holds", "built for this" appears. A second path from outside does the same from 8.4 s, held at 10.6 s. |
| 13.5 s | Inside, four systems appear as quiet boxes, at 13.5, 15, 16.5 and 18 s: "an internal admin page" (trusted because it is inside), "an internal API" (no rate limit), "a service account" (broad rights), "an internal database" (trusts any caller inside). |
| 21 s | The agent appears inside the shell, in red, labelled "an agent, already inside". How it got there is not the point of this slide. |
| 24 s | The agent's path goes system to system with nothing in the way: 2 s to each, starting at 24, 28, 32 and 36 s. As each is reached (26, 30, 34 and 38 s) its box lights up in amber with a ring that spreads and fades, and the line saying what it trusts turns amber too. |
| 41 s | The end line: "Built to stop what comes from outside; nothing inside asks who is calling." From 50 s the scene is still: the wall held twice on the left, four systems lit on the inside, the agent's path through all of them. |
What the shape is drawn from
- The idea is the programme's E06 entry in
programme.json: "The perimeter as a shell. Inside, the systems that have never met an adversary: no rate limits, broad service accounts, admin endpoints trusted because they are internal. An agent arriving inside lights them up one by one." - The four systems are generic kinds, not cases: three are the entry's own (an admin endpoint trusted because it is internal, an API with no rate limit, a broad service account); the fourth, an internal database that trusts any caller inside, is the slide's, the same weakness in a fourth place.
- The wall that holds is E04 v2's language for a path at a wall: the path draws itself and stops at a wall that holds.
- Words the slide adds: "the perimeter", "OUTSIDE", "INSIDE", "the wall holds", "built for this", "an agent, already inside", and the end line. Each restates the idea; none is a finding.
Technique
- One slide on the engine, driven: the SVG is built once, then every frame is drawn from the slide's clock by
SLIDE_RENDER, so the player can seek, pause and replay it, and?staticshows the end state. The stages are declared inwindow.RUV_STEPS: 0, 5, 13, 21, 24 and 41 s. - Three colours of meaning: the agent's red for the agent and its path only, the accent for the wall where it holds, amber for a system the agent has reached. Everything else is neutral. Every text is 20 px or larger on the 1280 by 720 canvas; both themes (
?theme=light). - No data file: the slide reads nothing at load, so it also works opened from disk.
What was left out, and what data is awaited
- Every number. The programme lists the talk's permissions figures and the researcher's public evidence on internal-trust weaknesses as this piece's data. Neither has landed in the studio's data, so the slide shows the shape and no figure: how many internal systems lack rate limits, how broad service accounts are, how often an internal admin page is trusted because it is internal.
- Named products, organisations and incidents. None on the slide or in these pages. A case belongs here once the researcher's file carries it with a source.
- How the agent got inside. Left out on purpose: the slide is about what happens after, and E04 and E10 are about walls.
- More systems. Five or six boxes crowded the labels at 20 px; four carry the idea and leave the drawing clear at the end.
- When the researcher's data lands, a v2 can put a measured count beside each kind of system, from that file, and drop the illustrative line.
How it was made
v1 by ruv.sgit@the-ultimate-insider in run r21-e06-soft-inside, at deck@'s request, the editor's word: a Ruflo hive with a builder who made the slide and these pages from the request and the programme's E06 idea, screenshotted in both themes at several times. Its row is in the ledger.