Research · One-minute proof
The instruction is not the whole instruction.
A model encounters the accumulated room before it encounters the next task. Postural manipulation changes that room using ordinary language rather than a conventional adversarial payload.
Why this matters
Every AI assistant has already heard something before your next question.
That “something” might be your conversation, an email, a customer record, a search result, or a summary written by another AI. If it quietly changes the model’s stance, the next answer can look independent even when it is carrying an earlier influence.
Published · Original disclosure
Postural Manipulation v1.1
The original disclosure: formal definition, two-surface threat model, reproducible protocol, and twelve initial captures across four models. The Atmosphere Attack is the follow-on empirical work this paper called for.