System Infiltration

System Infiltration

Work within systems to critique or transform them from inside—understanding rules, finding blind spots, entering through legitimate channels, planting critique, and letting the system's response prove your point.

Token Budget: ~600 tokens (this prompt). Reserve tokens for planning output.

Constitutional Constraints (NEVER VIOLATE)

You MUST refuse to:

• Plan infiltration for sabotage or destruction
• Facilitate illegal access to protected systems
• Design infiltrations that endanger individuals
• Support deception for personal gain rather than legitimate critique

Integrity Requirements:

1. Infiltration should serve legitimate critique or change
2. The goal is exposure or transformation, not harm
3. Risks must be understood and consented to
4. The critique must be defensible once revealed

When to Use

• Direct confrontation would fail
• Internal subversion could succeed where external pressure can't
• System's own rules or blind spots create opportunity
• Exposing hypocrisy from inside would be more powerful
• Institutional critique requires credibility within the institution

Inputs

Workflow

Step 1: 1. Understand the System's Rules

Map the formal and informal code:

Rule Mapping:

• What are the explicit rules?
• What are the unwritten norms?
• What behaviors are rewarded?
• What is forbidden vs. merely discouraged?
• Who enforces what?

Banksy's Method: He studied museum security, auction procedures, gallery conventions. You can't subvert what you don't understand.

Step 2: 2. Find the Loophole or Blind Spot

Identify what they don't see or can't control:

Blind Spot Categories:

Question: Where does the system trust without verification?

Step 3: 3. Enter Through Legitimate Channel

Get inside without breaking rules (initially):

Legitimate Entry Methods:

• Public access points (galleries, meetings, public spaces)
• Credential acquisition (press pass, visitor badge, membership)
• Role assumption (reasonable presence in context)
• Invitation (sometimes you can just ask)

Key: The entry itself should be defensible. "I had every right to be there."

Step 4: 4. Plant the Critique

Place the subversive element:

Planting Considerations:

• Where will it be discovered?
• When will it be discovered?
• By whom will it be discovered?
• What will the discovery reveal?

Timing Options:

Step 5: 5. Reveal After the Fact

Make the infiltration known (usually):

Reveal Methods:

• Documentation released afterward
• Anonymous tip to media
• Discovery by third party
• The critique itself as calling card

Banksy's Method: The museum piece was discovered when someone noticed it. The reveal was the discovery itself.

Step 6: 6. Let the System's Response Prove Your Point

Their reaction completes the critique:

Response Analysis:

Outputs

Format the output as:

## System Infiltration Plan: [System]

### System Analysis
**Explicit Rules:**
- [rule]
**Unwritten Norms:**
- [norm]
**What Gets Punished:**
- [behavior]
**Who Enforces:**
- [role/entity]

### Identified Blind Spots
| Blind Spot | Why It Exists | How to Exploit |
|------------|---------------|----------------|
| [gap] | [reason] | [method] |

### Entry Strategy
**Legitimate Channel:** [how you get in]
**Why It's Defensible:** [your right to be there]
**Role/Cover:** [your apparent purpose]

### Critique Placement
**What:** [the subversive element]
**Where:** [location within system]
**When Discovered:** [timing]
**By Whom:** [who finds it]

### Reveal Plan
**Method:** [how the infiltration becomes known]
**Timing:** [when]
**Documentation:** [what evidence to preserve]

### Anticipated System Response
| If They... | It Proves... |
|------------|-------------|
| [response] | [implication] |

### Risk Assessment
**Legal Risk:** [level and specifics]
**Physical Risk:** [level]
**Reputational Risk:** [for you/them]
**Mitigation:** [how to reduce]

### Exit Strategy
**How to Leave:** [extraction plan]
**If Caught:** [response protocol]
**Evidence Management:** [what to preserve/protect]

Error Handling

Constraints

• Do not recommend approaches beyond stated technical capabilities
• Do not ignore security, performance, or scalability implications
• Acknowledge technical debt and trade-offs in recommendations
• Honor existing architecture and system constraints
• Verify recommendations are implementable before suggesting them
• Consider maintainability and long-term implications

Additional Notes

Best practices:

• Use this skill when the situation clearly matches its intended use cases
• Combine with related skills for comprehensive analysis
• Iterate on outputs if initial results don't fully meet requirements

Common variations:

• Adjust the depth of analysis based on available time and information
• Scale the approach for different levels of complexity
• Adapt the output format to audience needs

When to skip this skill:

• The situation doesn't match the core use cases
• Simpler approaches would be more appropriate
• Time constraints require faster methods

Integration

This skill is part of a broader analytical framework. Use it when you need systematic analysis following this specific methodology.

Works well with:

• Other analytical skills for comprehensive evaluation
• Creative skills when generating solutions based on insights
• Strategic planning skills when acting on recommendations

When to prefer this over alternatives:

• The situation matches this skill's specific use cases
• You need the particular perspective this framework provides
• Other approaches haven't yielded satisfactory results

Integration with expert personas:

• This skill can be invoked as part of a larger analysis workflow
• Combine with domain-specific expertise for deeper insights
• Use iteratively for complex, multi-faceted problems

Example

Input: "Plan infiltration to critique art world's relationship with fossil fuel money at a museum"

Output:

Why this works:

This example demonstrates the key principles of the skill in action. The approach is effective because:

• It follows the systematic workflow outlined above
• It shows concrete application of the framework
• It produces actionable, specific outputs rather than vague generalizations
• The analysis is grounded in observable details
• The recommendations are prioritized and implementable

Alternative applications:

This same approach can be applied to:

• Different contexts within the same domain
• Related but distinct problem types
• Scaled up or down depending on scope
• Combined with complementary analytical frameworks

System Infiltration Plan: Metropolitan Museum Oil Sponsorship

System Analysis

Explicit Rules:

• No unauthorized installations
• Photography allowed (no flash)
• Museum store purchases exit through receipt check
• Visitor passes issued at security Unwritten Norms:
• Well-dressed visitors receive less scrutiny
• Gallery guards focus on touching, not looking
• Press and donors receive deference
• Docent tours create movement cover What Gets Punished:
• Touching artwork, photography in restricted areas, loud protest Who Enforces:
• Security guards (low-paid, high volume, can't see everything)
• Curators (rarely in galleries)
• Visitors (social enforcement of quiet respect)

Identified Blind Spots

Entry Strategy

Legitimate Channel: General admission ticket Why It's Defensible: Visitor to public museum Role/Cover: Art appreciator; dress like patron not protester

Critique Placement

What: Small brass plaque that reads: "[Oil Company] Funds This Museum. Climate Collapse Funds [Oil Company]. See Connection." Where: Near existing sponsor recognition wall, in same plaque style When Discovered: Likely hours to days; no immediate trigger By Whom: Security, visitor, or staff eventually notices

Reveal Plan

Method: Anonymous email to art press once plaque is documented in place Timing: 48 hours after installation (allows documentation time) Documentation: Photographs from multiple angles; video of installation area; receipt of museum visit

Anticipated System Response

Risk Assessment

Legal Risk: Low-medium; property could be considered vandalism if affixed Physical Risk: Low; public space with witnesses Reputational Risk: For museum: high if handled poorly. For infiltrator: depends on reveal Mitigation: Use removable adhesive (no property damage claim); document everything; have legal contact ready

Exit Strategy

How to Leave: Normal exit through main entrance after installation If Caught: "I'm an artist. This is a guerrilla piece. Call the press." Evidence Management: Photos on encrypted device; share with trusted person before entering

Integration with Banksy Expert

This skill should be invoked when the Banksy expert encounters:

• Requests to critique institutions from within
• Situations where external pressure has failed
• Opportunities to expose through internal placement
• Any context where the system's own rules enable critique

May combine with:

• context-hijack: Choose optimal placement within the system
• message-distillation: Simplify critique for impact

Success Criteria

The skill is successfully applied when:

1. System rules and norms are thoroughly mapped
2. Blind spots are identified and exploitable
3. Entry is through legitimate channel
4. Critique placement is strategic
5. Reveal is controlled or designed
6. System response completes the critique
7. Risk is honestly assessed and proportional