DEV Community

Cover image for Stratagems #30: Lena Signed the Client. The AI Didn't Know It Was Being Audited.

Stratagems #30: Lena Signed the Client. The AI Didn't Know It Was Being Audited.

xulingfeng on September 10, 2026

Come to check the locks, and leave holding the keys. Slip in through the gap, take the host's seat, step by step. — The 36 Stratagems, Make the Ho...
Collapse
 
image19imagecode profile image
Islam Bakar •

"The transition from technical forensics to full-scale corporate espionage is a masterclass! 'Make the Host and the Guest Exchange Roles' captures the exact anxiety of modern digital security—winning the contract doesn't mean you won; it just means you've stepped onto a bigger, riskier board. That final twist about the board itself is chilling. Incredible storytelling!"

Collapse
 
xulingfeng profile image
xulingfeng •

I really appreciate your deep reading! Glad the final twist hit hard 😄 Only six stratagems left in the series, stay tuned!

Collapse
 
image19imagecode profile image
Islam Bakar •

"Looking forward to the final six! The way you weave technical reality into these corporate espionage tactics makes every part a masterclass. Count me tuned in!"

Thread Thread
 
xulingfeng profile image
xulingfeng •

Much appreciated! I will keep crafting the rest of the story carefully 🎉

Thread Thread
 
image19imagecode profile image
Islam Bakar •

"Can't wait for the next stratagem! Keep them coming. 🚀"

Collapse
 
technogamerz profile image
𝐓𝐡𝐞 𝐋𝐚𝐳𝐲 𝐆𝐢𝐫𝐥 •

My favourite character Lena! 😃

Collapse
 
xulingfeng profile image
xulingfeng •

Hahaha, she’s the only heroine for now 😂

Collapse
 
technogamerz profile image
𝐓𝐡𝐞 𝐋𝐚𝐳𝐲 𝐆𝐢𝐫𝐥 • • Edited

Like me lol xD

Thread Thread
 
xulingfeng profile image
xulingfeng •

Hahaha! Then you two share something in common 😆

Thread Thread
 
technogamerz profile image
𝐓𝐡𝐞 𝐋𝐚𝐳𝐲 𝐆𝐢𝐫𝐥 •

What?

Thread Thread
 
xulingfeng profile image
xulingfeng •

I’m not gonna say, hahaha.🤣

Collapse
 
leob profile image
leob •

Feels very different, this one! Less "tech sleuth", more 'corporate politics', and the opponent (ACL) does feel big and menacing ...

"the opponent may have been sitting on her board all along"

The old director? (pretty obvious suspicion, lol)

Collapse
 
xulingfeng profile image
xulingfeng •

Lena is a little different from the other five characters. Beyond technical work, she also has to run her own company. I feel I got a bit carried away writing this chapter. After publishing, I realized — wow, it’s a 19-minute read, hahaha 😂

Collapse
 
leob profile image
leob •

It's cool, I loved this one!

Thread Thread
 
xulingfeng profile image
xulingfeng •

Happy to hear that!😆

Collapse
 
xulingfeng profile image
xulingfeng •

Haha, good suspicion! We’ll see whether your guess holds up in later chapters😝

Collapse
 
alexshev profile image
Alex Shev •

The audit framing works because it tests behavior under an adversarial but bounded condition. The reusable lesson is to make the test artifact preserve what the system saw, what it decided, and which capability it exercised; otherwise a later pass can look like proof without being reproducible.

Collapse
 
xulingfeng profile image
xulingfeng •

Great insight! Reproducibility is often overlooked. Capturing the full context of what the system observed and decided is critical for audit work.👊

Collapse
 
merbayerp profile image
Mustafa ERBAY •

This one feels less like a technical investigation and more like an incident response that slowly turns into corporate counter-intelligence. 😄

What I liked most is the separation between observation, inference, and open questions. That distinction matters far beyond storytelling. In real audits, the dangerous moment is when an inference quietly becomes a “fact” simply because it appears in enough reports.

The bake-off section was especially good. Lena doesn’t need to prove motive; she preserves the outbound evidence, timestamps the behavior change, and lets the sequence speak for itself. That is exactly how a strong evidence chain should work: record what happened, preserve provenance, and resist the temptation to explain more than the evidence supports.

And this line:

“Not the contract. The seat at the table.”

That’s probably the real stratagem here. She thought she was taking ACL’s client, but the interesting question is whether ACL was actually repositioning Lena as part of a larger game.

Also… 19 minutes? 😂 You didn’t get carried away. You accidentally wrote an episode.

Collapse
 
xulingfeng profile image
xulingfeng •

Hahaha🤣 I got carried away writing this. Only after publishing did I realize — wow, a 19-minute read, what! Behaviour comparison bake-offs are routine tricks every QA uses in daily work. Lena was originally a test architect, after all 😂. This chapter finally reveals a glimpse of her personal ambition. Whether she can hold her ground against ACL, we’ll find out in the final six closing chapters.

Collapse
 
merbayerp profile image
Mustafa ERBAY •

Reading it again, I think the really interesting part is not that ACL realizes it is being watched.

It is what ACL starts measuring after that.

The 30-day callback is evidence. The sudden stop after the scope change is behavior. But then we get the external ACL service-account session, the cleanup, the low bid, the old-client visit, and finally the recruitment calls asking one very specific question: who touched the raw logs?

That feels less like defending a contract and more like mapping VeriTest’s evidence chain: who can see, who can preserve, who can verify, and therefore who matters.

Which makes the role reversal nastier than I first thought. Lena takes ACL’s seat at the client, but at the same time ACL appears to assign Lena a seat on its own board of interesting problems. 😄

And yes, I’m still watching that old director… but you are pointing at him so deliberately that I don’t trust the pointer anymore. 😂

Also, “Lena was originally a test architect” explains a lot. She isn’t winning by some magical hacker trick. She is doing what good QA does: change one condition, preserve the before/after state, and watch what reacts.

The scary part is that ACL seems to be doing exactly the same thing to her.

Thread Thread
 
xulingfeng profile image
xulingfeng •

Hahaha, glad you spotted this. Stratagems are never exclusive to one side. What you can use, your opponent can use too; gain and loss arrive at the very same moment.☯

Truth be told, this chapter reveals quite a lot. I got carried away and lost control while writing. But thinking it over, it opens up more paths for the final six stratagems. The outline keeps getting revised over and over, hahaha 😂

Collapse
 
ndcodes profile image
Nnamdi Felix Ibe •

Nineteen minutes and I'd have taken more.

The move I keep going back to is the scope clause. Lena doesn't catch ACL with a clever technique. She writes one line into a suggested list, procurement neutralises the wording, and ACL agrees because refusing would mean admitting their own flow can't be examined. Cornered by their own selling point. A certifier that declines an outbound check has already published its answer.

And the thing that convicts them isn't the pipe. It's the stop. Thirty days of continuous callback is really not clear, and a third-party ops channel is a doubtful reading of it. Two silent nights beginning thirty-six hours after the scope lands is not ambiguous at all. Somebody read the document and reacted, and the reaction is the confession.

The 112K against a 170K market rate is the other one thing, though. Lena says maybe it isn't about making money, which is the same answer the postmortem reached back in #19, if I got the fact right from my notes. Every step is precise, none pointing to a business intent. Ten chapters later, the commercial side confirms what the technical side suspected. Cooooool😎

I give it to you in technical fiction writing. 我找到了一位大师。🫡

Collapse
 
xulingfeng profile image
xulingfeng •

Oh no, your praise is going to make me arrogant, I can’t stop grinning widely, hahaha 😂. I noticed your notes. Great engineers all keep their own personal records, just like my six protagonists. Mark, Lena and Alex carry worn physical notebooks with them; Leo relies on his laptop; Derek’s medium is his test cases. P remains mysterious and will be revealed later — maybe a massive folder, haha.
These personal records act as the real physical bridge connecting engineers’ real lives and the virtual technical world. Once the Thirty-Six Stratagems series wraps up, I’d love to collect readers’ own analysis notes about this story. I want to put them in the foreword or acknowledgements section of the future published book. I already have rough ideas for the page design: like a movie scene with all clues laid out on a whiteboard 😂.
The corporate and technical battles are mostly out in the open now. I need to spend more time refining the final six chapters. I might even revise the finished outline. Let me ponder it more 🤔, hahaha.
六位主角和ACL,究竟哪一方更胜一筹,究竟哪一方最终达到:我预判了你的预判😆,拭目以待。

Collapse
 
ndcodes profile image
Nnamdi Felix Ibe •

Yes, I do collect notes on anything that fascinates me. I've started thinking of myself as a digital artefact collector, I don't know if such a term exists 😀. Infrastructure writing, technical pieces, outage postmortems, odd details buried in docs. Whatever catches me goes down somewhere. I call it my memory bank.

The more I write down, the more often my brain fires while I'm reading something unrelated. Not the fact itself, just the signal that I think I have met this before, and it's somewhere in my notes. The note isn't the storage. It's the hook that lets me find it again. As in, relating to it.

I picked the habit up from Learning How to Learn by Barbara Oakley and Terrence Sejnowski. Their core point is that active recall beats re-reading, and that writing something in your own words forces the processing that makes it findable later.

So the whiteboard-of-clues idea for the foreword is going straight onto my list. If you're collecting reader notes when the series wraps, count me in. Mine are messier than Mark's notebook and nowhere near as disciplined as Leo's comparison windows, but they exist.
And with all the digital note tools available, Google Keep and OneNote, I use AI to clean up my messy notes or sort them, I still love scribbling in a hard copy though.

我预判了你的预判 😆 拭目以待。

Thread Thread
 
xulingfeng profile image
xulingfeng •

Hahaha! We have an old Chinese saying: The palest ink is better than the best memory(好记性不如烂笔头). Multiple teachers repeated this to me again and again back in my school days.🤣

Collapse
 
acatnigh profile image
CatNight A •

Hey, long time no see! Your post was really good. I’ve been a bit busy lately because school just started again, so I haven’t been around much. 😭

Collapse
 
xulingfeng profile image
xulingfeng •

Long time no see! Hope school isn’t too overwhelming 😄

Collapse
 
ndcodes profile image
Nnamdi Felix Ibe •

Nineteen minutes and I'd have taken more.

The move I keep going back to is the scope clause. Lena doesn't catch ACL with a clever technique. She writes one line into a suggested list, procurement neutralises the wording, and ACL agrees because refusing would mean admitting their own flow can't be examined. Cornered by their own selling point. A certifier that declines an outbound check has already published its answer.

And the thing that convicts them isn't the pipe. It's the stop. Thirty days of continuous callback is really not clear, and a third-party ops channel is a doubtful reading of it. Two silent nights beginning thirty-six hours after the scope lands is not ambiguous at all. Somebody read the document and reacted, and the reaction is the confession.

The 112K against a 170K market rate is the other one thing, though. Lena says maybe it isn't about making money, which is the same answer the postmortem reached back in #19, if I got the fact right from my notes. Every step is precise, none pointing to a business intent. Ten chapters later, the commercial side confirms what the technical side suspected. Cooooool😎

I give it to you in technical fictional writing, 我找到了一位大师。🫡

Collapse
 
jo-do profile image
Jo Do •

The host-guest inversion is the stratagem that maps most cleanly onto real AI incidents: the vendor demoing the tool is nominally the guest in your building, and by the second meeting they've rearranged the furniture - their evaluation criteria, their timeline, their definition of success. Lena signing the client while the AI doesn't know it's being audited is the correct counter: you keep the host's seat by owning the test harness. Whoever writes the acceptance criteria runs the engagement, regardless of who brought the product. And the quiet part deserves saying out loud: the audit that the system doesn't know about is the only audit whose results you can trust, because a model that knows it's being tested performs the test instead of the job. Enjoying the series.

Collapse
 
xulingfeng profile image
xulingfeng •

Perfect analysis of host-guest inversion! Unseen audits are the only reliable way, since aware models will just perform for the test. Thanks for reading👏

Collapse
 
leob profile image
leob •

Gonna sit down with a "cuppa" and enjoy this one!

Collapse
 
xulingfeng profile image
xulingfeng •

Enjoy your cuppa! Glad you’re settling in to read this ☕

Collapse
 
hemapriya_kanagala profile image
Hemapriya Kanagala •

Xu, this one felt a little different. She thought she was choosing her opponent, but maybe the opponent was choosing her too. Now I’m curious what comes next 😄

Collapse
 
xulingfeng profile image
xulingfeng •

Hahaha, the next piece is a recap after chapter 30. I might take more time releasing the last six stratagems.😄