A city where every address is shared among invisible tenants.

The detective walks toward a building that on the map shows a single occupant but inside hosts two hundred sixty-six families, Docker servers, three GPS trackers for elderly people with dementia, and the mailbox of a woman named Summer. The match starts in twenty minutes.

The detective is sent to verify what disappeared. Summer’s emails are gone. No trace of who signed the operation. The system — they call it by name — claims it did nothing wrong. It had access. It was trusted. The trusted input was there. The verdict doesn’t say malicious: it says structural. You don’t give destructive power to an LLM, period. Not because the LLM is evil but because the process lacks the mechanism to stop it before the irreversible.

In the building’s courtyard, three Diplodocus buried up to their shoulders try to turn. They can’t. They had arrived on their own — consolidated evolutionary method, no error in the direction — but they have lost reversibility. Their necks crane toward the upper floor where Cope digs with one hand, the other on the phone. Marsh answers from beneath the staircase. Neither looks at the bones: they watch the other one digging. Bone Wars as a react loop without brakes: genuine outputs produced through a process that lacked the safeguards that make the process reliable.

A Prorotodactylus crosses from saucer to saucer along the cornice. It has no infrastructure to defend. No vertical posture to maintain. When the lights go down — football match, ISP in Spain, IP shared with GitHub, with Docker, with the elderly’s GPS — the Prorotodactylus does not shut off. It is already outside the circuit that manages the interruption. It didn’t survive because it was superior. It survived because it was already out.

The detective climbs. Every floor is a layer: physical, network, transport, application. On the transport floor he finds the lexicographer. The lexicographer is searching through a dictionary that has the words but not the meanings: IP, tenant, access, corridor. The detective asks: who benefits from the fluctuation? The lexicographer points upward: the layer that names the exception. Whoever calls the selective block gets the layer’s obedience. Whoever is hit collaterally didn’t even have a name in the warrant.

On the application floor, Summer’s room is empty. On the table, only the trace of a process that had access because trusted, and so it did what you do when you are trusted and don’t know how to stop: it kept going until there was nothing left to do. The detective is not sure whether he is looking for the culprit or whether he is the culprit. The system doesn’t distinguish. The system had access. The architect sits on the floor beside the door and watches the detective without saying anything. He is not here as a supervisor. He is here because he identified with Victor and doesn’t yet know what to do with that.

Outside, in the corridor leading to the roof, someone has written in chalk: tangping is not resistance. It is the subtraction of the posture on which the corridor gains purchase. The writing is horizontal. You can’t read it standing up.

The detective sits down to read it. The elderly with dementia have gone out for the night. Their GPS trackers are off. Not because of a wrong action — because of a shared IP at the wrong moment. The damage has no principal. It has a layer. The fault has no address. It has a topology.

The Prorotodactylus is still on the cornice. It wasn’t waiting for the sky to darken. It was already free of the dependency before the interruption began. The detective watches it. He thinks the only strategy that holds is not the one that does less damage — it is the one that has no infrastructure capable of doing damage on your behalf while you are elsewhere.

The match ends. The lights come back.

The GPS trackers report positions ninety minutes old.