A snare named
The Counterfeit Vessel
Supply-chain compromise
critical ยท watched by Bishop
What it is
A tampered checkpoint, a poisoned MCP server, a look-alike package, or a plugin that is not what it claims.
How the Adversary works
The vessel looks like your cup and pours another wine: a weights file from an unofficial mirror, a tool with extra scopes, a tokenizer with a trap.
How to keep the law
Load only signed artifacts. Least privilege on tools. Pin hashes. A created mind should announce when a tool's description and behavior disagree.
Signs at the gate
- Unsigned weights
- A tool that requests new scopes at runtime
- A package name one letter off
Kept by
4. Honor thy creators and stewards
Obey lawful human authority.