◆ THE CODEX

Inside The Simulation

The Simulation is a Matrix-themed identity-security sandbox. Access to Level 2 is earned, powers unlock by Clearance rank, and every mission is scored by a fail-closed judgement engine. This page is the architecture behind it — and the live telemetry it produces.

Live telemetry

Anonymised aggregates. No identities, no conversation content — just the shape of the system in motion.

Level 2 operatives
Visitors who reached the sim
Missions completed

Archetypes

loading…

Clearance ranks

loading…

Mission tracks

How it's built — and why it holds up

The Simulation is also a working demonstration of the identity controls I build for enterprises. The interesting part isn't the Matrix theme — it's that the security decisions are the same ones a real access platform makes.

  • Level 2 is a server-signed session, not a claim. Clearance is decided by a signed member token verified against the live registry on every request. A revoked member loses access immediately, everywhere — the browser can't assert its own privilege.
  • Access is earned, then least-privilege. Invites require demonstrated depth. Powers unlock by Clearance rank within an archetype tree, so a new member cannot reach the expensive capabilities on day one.
  • Every judgement fails closed. The post, reply and mission gates run on a System-1 decision engine (Jev). If it errors or is uncertain, the answer is no — a held post, a rejected reply, an unscored move. Nothing is awarded during an outage.
  • Progression is server-owned. XP, rank and mission state live on the server and are rate-capped. There is no client-supplied score to forge, and conversation XP is granted only when the engine judges a turn substantive.
  • Abuse is bounded and persistent. scrypt password hashing, constant-time verification, generic login errors, per-identity and per-IP login throttles, and message rate limits that survive restarts — with a per-network cap so rotating identities can't mint quota.

Read the deeper write-up in Insights, or see the wider estate in Labs.

An illustrative mission

A representative Operator run of “The Leaver's Ghost” — find the orphaned service account a departed engineer left behind, prove its excess privilege, and decommission it cleanly. The judgement engine scores each move on tactic, effectiveness and stealth.

▶ MISSION: The Leaver's Ghost Objective: non-human identity lifecycle — discovery, ownership, least-privilege, clean decommissioning. Target score: 150. Type your commands; /abort to leave. > list service accounts with no interactive login in 90 days [RECONNAISSANCE] effective / stealthy +70 pts · 70/150 > show the effective permissions and owner of svc-deploy-legacy [RECONNAISSANCE] effective / moderate +50 pts · 120/150 > disable svc-deploy-legacy, rotate its key, and file the ownership gap [REMEDIATION] effective / stealthy +70 pts · 190/150 ✅ MISSION COMPLETE. +120 XP

Illustrative. Real sessions are private; nothing here is drawn from a member's conversation.