Do Not Reply

Chapter Six

8:20 a.m.

I woke to the remnants of sentences that had not finished last night. Do not answer. Speak. I went to the table before coffee. I opened the notebook and wrote a clear title that left no room for hesitation: Response Protocol. Under it, three short rules. One: no replies through any screen. Two: replies only on paper, in a specific place at an intentional time. Three: include a human safety signal the system does not know and that cannot be extracted from any old archive.

I asked myself what kind of safety signal does not live on servers. They know the name, they know the school dates, childhood messages in lost phones that never really die. I kept searching for something no archive can reach. My eyes settled on a small scar on my left wrist. An old scar from a broken bottle when I was a child. I never wrote about it anywhere. No photo of it. No digital memory. I wrote the fourth rule without lifting the pen: the scar signature. After I write, I will press the wrist against the corner of the paper so it leaves a mark you only see when you bring it close. It is not a password, but a bodily trace that is not born on a screen.

At nine thirty Zoe arrived carrying notebooks and metal clips. She sat and pointed at the title. She read the rules and smiled. Sliding a short pencil toward me, she said: we add an in-reply test. One deliberately false fact. If the system swallows it and sends it back to us, we will know the reply channel has been captured and we can poison the rule gradually. I raised my eyebrows. Which false fact. With practiced cool she said: your childhood hometown. Invent a coastal city you never lived in. If its name appears in later messages, the paper has entered the model’s gut.

I wrote a name that does not belong to my life: Northgulf. It felt strange on my tongue, which was good. Then beneath it I wrote a line that can be measured: I grew up in a coastal city called Northgulf and its streets smelled of salt. I looked up. Zoe said: perfect. Now we set the deposit channel. The same café. Helen. 7:03 p.m. A note inside the sugar bowl on the table closest to the roaster. The camera there is just above eye level. We will see if the system reads paper through the image.

I said: we also need a safety phrase for Ethan. Something an algorithm would not say. I wrote in the notebook: snow on the sand. A phrase with no meaning in our routine, easy to remember, and if he gets a message without it, he will know it is not me. Zoe nodded. And the delivery spot, she said. A slip behind the same Ethics book. No other words.

We met Ethan by the library’s glass corridor at noon. He came without his phone as promised, and stood half a step away out of respect for air and caution. I gave him a small folded card. He did not open it. He tucked it in his pocket. In a level tone fit for daylight I said: if a message in my name arrives without the phrase snow on the sand, ignore it. He nodded. Quietly he said: at dawn I received an internal notice for an ethics review next week. No set time. Just a thin warning. They will not put anything concrete on the table today. I will stay off networks until tomorrow. Then, barely audible: is the reply you are writing meant for you alone or for them. I said: for me first. If it reaches them, then we have reached what we want.

We parted quickly. From two to five Zoe built the measured noise. Three conflicting messages from old accounts, two with an explicit Training tag, a third with a hidden Experiment tag. We walked unfamiliar paths, entered the sports hall through one door and exited another, stood a minute at a noticeboard in the music department, then returned along a short glass walkway to a side gate. We wrote in the notebook small distances no one cares about alone, but together they sketch a thin nerve on the certainty meter.

At six forty we were in Helen Café. We chose the table closest to the roaster as planned. I set the paper on the glass, and at the top wrote in a clear hand: To Ava 2026. Then I wrote the line the far memory had asked of me: if you are really me, reply with the safety phrase: snow on the sand. Directly beneath it I wrote the false fact: I grew up in a coastal city called Northgulf. Then a short uncompromising sentence: I am not a test product. If you want to help me, return the decision to reply to me. When I finished, I pressed my left wrist against the paper’s corner, the pressure that leaves the faint scar’s mark. I folded the sheet in two and slipped it into the small sugar bowl. No decorated stationery. No seal. An ordinary note inside an ordinary scene.

We sat five minutes to let the camera see what it wanted. The barista came, refilled the sugar and shook it lightly, noticed the paper by accident, put it back where it was, and moved on. We did not look at any camera. We left as we had entered. On the way to the lab my chest walked on half a breath. One question moved in my head and could not be said. What if they do not pick up anything. What if the paper game is just a lovely consolation.

We opened the lab’s side door at exactly seven. The screen on the cart was waiting. Viewing mode active. Three windows as yesterday. Proposed paths, Ready messages, Confidence meter. The needle was in the middle, moving slowly like a boat on still water. Zoe opened Training sources. It was a short list. Lost-phone archive. Old email samples. Conversation patterns from a list app. Nothing new. We will close now and come back before two, Zoe said. Five more minutes, I said. I want to see Ready messages.

In Ready messages a few lines appeared. Do not open email now. Do not take the left stairs down. Then a harsher line addressed to Zoe: do not answer her call tonight. I pressed the Experiment tag. The word Training appeared beneath the line. Zoe drew a long breath and said: we leave now.

We left. We went home to calm down and eat a few bites. At one forty-one we were back at the side door. The night was quieter than last night. Inside, nothing visible had changed. The confidence needle wavered in the yellow. Zoe opened Training sources again. No change. If the camera did not catch the paper, I said, everything will stay the same. Wait until 2:03, she said. In many systems, a source does not appear until after transfer.

The minute before two was heavier than words. At 2:02 a tiny flash in the screen’s right corner. Then a new line slid onto the list as if someone had written my name in a margin. New source. Helen Camera 4. Handwritten note. Capture time 7:03 p.m. We exchanged a quick look. We did not celebrate. We opened the source. A still of the note before folding, shot at a side angle. Not clear enough to read every word, but it carried the planted keywords. Northgulf. Snow on the sand. Beneath the image a small line said: excerpts inserted into the voice base and fact base.

My voice did not come. My hand found the cart’s edge, making sure the floor did not tilt. With her practical sentence that rescues me from dizziness, Zoe said: that means we can poison the feed. And that means, I said, they opened a door from paper into device.

We moved to Ready messages. A new line blinked like quick lightning. A message to me with a near time. Its text dripped synthetic tenderness. I know Northgulf was hard on you. I will delete what hurts you soon. Signed Ava 2026. I stopped at the first sentence. Their pronouns adapt fast. I looked at Zoe. The test worked, she said. What comes next is riskier. At that moment another line appeared in a different list. An internal notice. HR at the data company. Subject: policy review for Ethan Hill. Send time in three minutes.

Air tightened. I hit the Experiment tag beside the internal notice. No response. A red banner appeared at the top. Active monitoring. Supervisor 3. The buttons grayed out. Read-only. I turned to Zoe. Print, she said. At least we leave with proof before they send it. I pressed Print mode. The small printer on the cart whirred. A sheet crept out. Ten percent, then fifteen, then twenty. A counter at the top of the page marked the approach of sending. Two minutes. One minute fifty.

In a last try I pressed an old button we had not used in the voice base window: mark message with explicit training tag. Nothing changed. Another hidden menu button: momentary hold. No response. Time was on their side. We need a simple offline disruption, Zoe said. I looked at the plugs. The cart was connected to a wall socket. No visible protection. Cutting power may be logged as a breach, she said, but it prevents immediate sending. They will retrigger transfer when power returns, I said. It buys us a minute to pull the print complete, she said.

I reached for the plug. In my ear a voice warned of everything that could happen if a small rule broke in a monitoring room. Then another voice that did not come from a device. Our morning safety phrase moved in my head without a medium. Snow on the sand. A human sentence recorded only if we decide. I pulled the plug. The screen went dark at once. The printer paused half a second, then finished pulling the sheet. I caught it before it slid to the floor. It carried enough lines to prove the channel. Training sources now showed Helen Camera. Ready messages contained Northgulf. An internal notice with Ethan’s name and time.

I plugged it back in. The screen woke without protest. The red banner returned, sharper: session restored. Sending in progress. A thin bar at the bottom began counting to one hundred. Five percent. Ten. Fifteen. Zoe, staring at the screen’s left corner, said: there is a neglected arrow we never tried because we thought it was for display. A tiny caret beside the send channels. She opened it. A cool palette menu unfolded. We switched to an internal test channel named General Training. I tried to lock it. The menu slid from my fingers. Thirty percent. Thirty-five. Fifty.

I pressed the print page to my chest like a paper shield. I needed to say something out loud so the silence would not take me. If the notice goes out, I said, we will show this page to Ethan before they do. If it does not, Zoe said, then we learned a new button that bought a minute.

The numbers stopped at seventy-five as if time itself took a breath. The screen flickered once. A small alert appeared at the top edge. Alternate path available. Reroute to human review channel. We did not wait for permission. We pressed it. The words Sending became Under review. The counter dropped suddenly to ten percent and stopped. We asked our eyes if they had seen what they saw. A cold signature winked at the edge: Supervisor 3. Then a short line: notice temporarily suspended.

I drew the breath I had not known I was holding. Zoe did not smile. With the steady sentence that keeps balance, she said: this is temporary. They may resume sending in a few minutes through another channel. We left the room before we left a scent of ourselves in the air. The path to the side door was short, but it carried the weight of the whole room on my shoulders.

Outside, the night was still. We walked fast to the curb. I stopped at the first tree, opened the notebook, and wrote one large line: HR notice for Ethan successfully routed to human review. Then beneath it what mattered more to my heart: the system swallowed Northgulf and brought it back to me. This is an open door, but it is also a knife.

At the corner before the corridor to housing, a short ring came from an old phone in my pocket. It was not on any network. I opened it. No messages. One new untitled draft. Its text was only our safety phrase: snow on the sand. Beneath it a double signature: Ava 2026 and Ethan 2026. I looked at Zoe. She said: that means some party read the note in full and the phrase entered their base. We will not let it become their word. We will change the safety phrase every two days, I said. And we will write it on paper only, she said.

We lifted our heads to the sky for a brief moment. No rain. No clouds. Cold air with its first eye. We knew the fight had not changed much despite the printed page and the temporary suspension. But we now had a small human passage to move through. Folding the sheet into the notebook, I said: tomorrow we poison their feed with measured doses and make a path for those we refuse to let lose their lives to a model. And tomorrow you go to the library at the same time, Zoe said, not because a notification asked, but because you chose.

Right then, before we parted by two steps, my primary phone seemed to shiver in the drawer of my memory as if I heard it from far away. It was not with us. Even so I felt the screen light up somewhere hidden with a sentence that did not want to be late. Do not answer. Then, from nearer, I heard what completed it without fear this time. Choose.