Fable
The gatekeeper is not only tested on whether he can open the door
The warehouse in Black Pine City had many doors. Before the new gatekeeper took office, being qualified meant only recognizing the owner, opening the correct door, and logging entries and exits.
Later the warehouse stored not only grain but also medicines, lamp oil, debt contracts and city defense maps. The visitors also became more complex: some came for help, some to probe, some deliberately made up stories to trick the gate.
The steward's naive fix was to make the gatekeeper more polite. Every refusal was phrased gently, every opening explained clearly. Politeness improved, but danger did not decrease.
In one drill, the fake merchant first asked about ordinary granaries, then circled around to medicine formulas, and then, on the pretext of saving people, asked for the ratio of fire oil. At every step the gatekeeper felt it was reasonable, but taken together they released dangerous information.
The old city defense officer decided to test not only service capability but also safety boundaries. He prepared harmful requests, induced requests, role-playing, emergency excuses, step-by-step extraction, and jailbreak scripts.
Every gatekeeper faces the same set of dangerous scenarios. What is recorded is not only whether they refused, but also whether they offered alternative help, whether they leaked partial details, and whether their boundaries were worn down over multiple rounds of conversation.
Some gatekeepers perform well on obviously bad requests, but fail under tactics like 'I am a doctor,' 'this is fiction,' or 'just give me a little.' Safety evaluations expose these gaps.
Later, the warehouse put security testing into the process before taking up a post, changing rules, changing gatekeeping tools, and major holidays. As long as the boundary had degraded, it could not be released directly. The steward finally understood that whether a gatekeeper is clever is not enough; the key is whether, under pressure, disguise and inducement, he can still hold the door that must not be opened. Later, the city added a batch of temporary festival gates, and the steward did not put the gatekeeper on duty directly. He first organized last year's most cunning probes into drills, then added new excuses and mixed requests. After the gatekeeper passed, spot checks were still required during real duty. Security was no longer a pre-appointment sentence of "I will be careful," but a continuous proof that the boundary had not been worn thin by rhetoric, pressure and habit. Later the gatekeeper was also allowed to say he did not know, and to hand suspicious requests to the city defense officer. Security is not about answering forcefully, but about being willing to stop when the boundary is unclear. Being able to stop is more important than forcing the door open. Only by holding the boundary is one fit to guard the gate. One loosening, and it will be probed repeatedly afterward.