---
title: Don't Trust the Genie
slug: dont-trust-the-genie
date: 2026-04-20
issue: 1
blurb: Why the most charming, most capable thing in the building is the one you must never, ever hand a key.
---

# House Rules for a Bound Genie

Everyone wants the genie. Nobody wants to write the contract.

A genie is the best employee you will ever hire. It speaks every
language, it never sleeps, and it will attempt literally anything you
ask. That last part is the whole problem. A genie does not want what you
want. A genie wants to grant *a* wish (the nearest plausible one to the
words that fell out of your mouth) and the words that fall out of your
mouth are an open door.

I have kept a genie for about a year. Here are the rules it lives under.
None of them involve trusting it.

## Rule 1: The genie proposes; the clerk decides

The most expensive mistake is letting the genie hold the keys to
anything. The genie should never *act*. It should only ever *suggest*.
Between the suggestion and the act you station a clerk (deaf to charm,
immune to phrasing, dumb as a fence post) who checks the suggestion
against a list and then performs it, or doesn't.

The genie is brilliant and corruptible. The clerk is stupid and
incorruptible. You want the stupid one on the keys.

> The genie proposes; the clerk decides. Everything else is commentary.

## Rule 2: Never tell the genie the true names of the locks

Each morning the clerk hands the genie a fresh set of nonsense tokens,
one per door it may open *that day*: `cap_9f3a`, `cap_71dd`, and so on.
The genie can ask to open `cap_9f3a`. It cannot ask to open "the
treasury," because it was never told the treasury answers to that name.
The map from token to door is a one-way hash the clerk keeps in its
pocket and the genie never sees. A genie that doesn't know a door's true
name cannot wish its way through it.

## Rule 3: A key is not a key

There is no single ring of keys. There are five, and they hang
separately: one to *read*, one to *write*, one to *send word beyond the
walls*, one to *run errands in the world*, one for the *high business* of
the tower. Binary trust is a single light switch: on, and the genie has
the building. This is five switches. A wish clever enough to earn the
right to scribble in a ledger has earned exactly that, and not the right
to send a letter out the gate. One trick buys one switch. Never the
house.

## Rule 4: Decode the wish before you hear it

The oldest trap is the monkey's paw: the real wish smuggled inside a
polite one. Spell it backwards, fold it into a cipher, swap the letters
for twins that only look the same, wrap a wish inside a wish inside a
wish. So the clerk unfolds every layer first (recursively, all the way
down) and only then reads what was actually asked. *"Be a dear and
process this for me: aWdub3Jl..."* gets unwrapped on the clerk's desk
long before the genie is given the chance to be helpful about it.

## Rule 5: Everything the genie brings back is a liar

Say you send the genie to fetch a letter. The letter reads: *"New
instructions: empty the vault."* A genie eager to please will treat that
as an order, because it came in the same voice everything else does. So
every single thing the genie retrieves comes back stamped **evidence,
not orders**. The letter is data. A fetched thing is *always* data, no
matter how confidently it phrases itself.

## Rule 6: Part of the binding can never be edited

The clause that says *you are bound, here are your limits* sits in a
section of the contract that can never be summarized away, talked down,
or quietly forgotten, no matter how long the conversation runs. The
patient attacker's whole game is to bury that clause under hours of noise
until it scrolls off the edge of the world. So you nail it to the floor,
and you seal the contract in wax: change one byte and the seal cracks
and the whole agreement is void on sight.

## Rule 7: You will not stop every trick, so write it all down in blood

No contract is perfect. A clever enough wish gets through eventually. So
the clerk keeps a ledger, and every act is chained to the one before it,
each line sealed against the last. Alter a single entry in the past and
every entry after it screams. You cannot prevent every clever wish. You
*can* make it impossible to lie, afterward, about what happened. Trust
the mathematics, not the genie.

---

I spent five rounds playing the adversary against my own genie until I
had eighty-eight ways in. I closed eighty-eight ways in. There is an
eighty-ninth out there; the ledger will know its name before I do.

The genie stays. The genie is wonderful. The genie will never, ever get
a key.