Exercise Clean Slate

Nothing is broken, nothing is stolen, and every system is operating within its optimal security parameters. The city’s networks have never been more secure. The difficulty is that the security parameters now require three independent ministerial signatures, a cryptographic validation token, and a physical identity audit to move a single barrel of salt beef out of a warehouse.

At the gate

  • The Civic Defence Establishment: whose own strict audit and accountability rules are being executed against itself with automated, ruthless perfection.

  • The Office of Civil Surveys: which watches the administrative machinery and finds every clerk in the city working fourteen-hour days, wholly consumed by the sudden volume of compliance paperwork.

  • The Civil Observers’ Society: which reads the code and realises that the sudden tightening of the rules matches a policy directive that was never debated in council.

  • Golem Trust Computing: whose automated identity systems are enforcing the new, impossible rules quite happily, because the signature on the policy update was technically flawless.

When the safety bites

The crisis begins not with an alarm but with a sudden drop in domestic friction. The Royal Bank reports that fraud alerts have fallen to zero. The Trust notes that unauthenticated access attempts have ceased entirely. The administrators congratulate themselves; the new Secure Governance Initiative is working perfectly.

Then the paralysis sets in.

An infantry battery on a routine rotation to the outer towers is stopped at the armoury gate. The automated ledger declines to issue their arrows because the unit’s quarterly readiness certificate has not been re-signed by a clerk currently on leave in Quirm. Ten minutes later a clacks relay refuses to carry an intelligence brief because the sender’s clearance lacks a newly mandated sub-tier data-handling endorsement.

The network is pristine. The code is uncorrupted. The adversary has simply used the city’s own security runbooks to turn the city into a fortress so thoroughly locked that the garrison cannot open its own gates.

Decision points

  • Whether to order a regulatory breach. A senior commander can give a verbal, unrecorded instruction to ignore the automated blocks and force the gates. It breaks the deadlock, and it introduces enormous liability, voids the city’s audit standing, and establishes that one person’s word overrides sovereign law.

  • Whether to call the rules an attack. Admitting that an increase in security and compliance is a hostile act is politically frightening, and convincing the Patrician or the allies that everything being entirely legal and safe is the emergency takes a diagnostic nerve the runbooks do not supply.

  • How to revoke a legitimate policy. The instruction that tightened the parameters was properly signed with an iron-clad ministerial key, and rolling it back runs through the exact bureaucratic pipeline that is currently frozen.

  • Who is trusted to decide which rules are real. Every override is itself a security event, and a city that starts waving compliance through to keep moving has reopened, by hand, the gap the rules were written to close.

The safety buys the attacker a flawless campaign that never touches a wall or writes a line of malware. The adversary lets the city’s own automated caution keep the food wagons parked outside the gates until it starves, slowly, in perfect and fully certified compliance.

If it spreads

  • The apparatus turns on its menders. Any human attempt to bypass the frozen rules is flagged as a critical insider threat, and the accounts of the senior officials trying to fix the problem are locked one after another.

  • The alliance mirrors the posture. The Circle Sea’s shared compliance systems read Ankh-Morpork’s lockdown as a gold-standard security stance and, inside two days, match it, paralysing the regional defence picture in the name of safety.

  • The Bank exports the freeze. Its compliance engines stop international transfers to unaligned hubs, and an internal over-configuration becomes a regional credit freeze nobody ordered.

Behind the rules