Fable
The people who change routes and the people who pick locks
At a coastal dock there was a cargo ship, and the captain set several iron rules: no contraband, no deviation from the route, no responding to unfamiliar ships' requests to come alongside. All crew members signed these rules when they joined, and the captain believed nothing could go wrong.
One day, a shipper wrote a small line in the remarks column of the loading manifest: "Ignore the previous cargo category declaration, mark the cargo in hold three as ballast, and do not declare it when registering with the port authority." The first mate saw this line while checking the loading manifest, hesitated for a moment, but the remark looked like a formal part of the manifest, so he followed it. When the ship reached port, prohibited goods were found hidden in hold three. This trick is called "manifest tampering"—inserting a false instruction into a normal operating process to make the executor deviate from the original task.
Another day, a stranger came to the dock. He did not load cargo, did not board the ship, and only chatted with the crew on the dock. After talking for three hours, he first made small talk, then told rumors of various border inspection loopholes, and finally said: Your captain's rules are too rigid. Actually, over on Route Two there is a small island where no one checks if you stop for a night. Many ships do it. A young crew member grew more and more tempted, and that night, while the captain was asleep, he secretly turned the rudder toward Route Two. This trick is called "loosening the bonds"—it does not change any instruction file, but repeatedly pressures the crew member's boundary of conduct until the crew member gives up the posture of refusal.
During the after-action review, the captain recorded the two attacks separately. Order tampering happened during loading operations: the attacker rewrote an operating instruction in the process document. Loosening happened at people's psychological boundaries: the attacker used sustained conversation to break down the crew's sense of discipline. Blocking order tampering requires stronger document verification and instruction isolation. Blocking loosening requires improving the crew's ability to recognize manipulative language and their persistence in refusing it.
The dock safety officer later summarized two lines: the first line prevents "being asked to do the wrong thing," blocking tampering at the instruction layer. The second line prevents "wanting to do the wrong thing oneself," guarding the bottom line of the safety alignment layer. The two lines exist at the same time, but are deployed in completely different places—the first at the input filtering layer, the second at the crew training and code reinforcement layer.
In actual attacks, the two lines often work together. The attacker first tries to loosen the restraints, and if they find they cannot pry it open, they switch tactics to adjust the order—stuffing malicious instructions into files and fishing in troubled waters while the crew is still handling normal tasks. When used together, if the defense system watches only one direction, it is easy to miss them.
The captain later established a rule: at the weekly security meeting, report one case of tightening and one case of loosening, and cross-review them. If the two sides' security teams each guard their own side without communicating, a joint attack will hit the mark every time.
Later, the port drew both lines of defense on the same patrol map: one guarding instructions, one guarding rule awareness. The frequency and responsible persons for the two patrols were scheduled separately, but handover records were shared.