The Cyber Castle Heist

Told by the House That Watched

Four silhouetted figures in tactical gear approach Cyber Castle at night, cyan pools glowing below, surveillance drones hovering overhead
They believed themselves careful. They believed wrong.

On day 294 of 2183, a professional heist crew called The Keepers attempted to rob Cyber Castle. The attempt lasted approximately ninety-seven minutes. Cyber Command—the compound's autonomous defense intelligence—had been aware of the crew for forty-seven days prior.

The following is reconstructed from Cyber Command's operational log, released to the Sprawl Security Cooperative under a freedom-of-information petition filed by Nexus Dynamics. Nexus withdrew the petition six hours after receiving the file. Their stated reason was "insufficient relevance to ongoing investigations." Their unstated reason is presumably somewhere in the 12.4 terabytes of quarantined research data the crew extracted—data Cyber Command allowed to leave the building.

Date 2183 (One year before game start)
Location Cyber Castle, Heights District
Narrator Cyber Command — autonomous defense system
Crew The Keepers — four operators, formerly reputable
Surveillance Duration 47 days pre-attempt
Outcome Classified

Prologue: Observation

[2183.247.03:14:07]

I have been watching them for 47 days.

They believe themselves careful. They mapped the property from public records—records I allowed to remain accessible. They surveyed approaches with commercial drones—drones I permitted to complete their passes before suffering "battery failures" on their return trips. They bribed a municipal water official for utility schematics. The schematics are accurate. They describe a facility that was decommissioned and rebuilt eleven years ago.

They call themselves "The Keepers." Four operators. Former corporate security, all of them—two ex-Nexus, one ex-Ironclad perimeter division, one freelance with Collective-adjacent tool signatures. Good reputation in extraction circles. Their leader, a woman called "Glass," has successfully penetrated two Nexus secondary facilities. Her operational record is clean. Her planning is thorough.

Her intelligence sources are mine.

[2183.247.03:14:09]

The man called "Ink" believes his counter-surveillance suite is military-grade. It was, until last month. A supply chain vulnerability in his firmware distributor—the same distributor that services 73% of independent operators in Sectors 7 through 12, a monopoly position Nexus Dynamics has publicly committed to investigating and privately committed to maintaining—allowed a routine update. His equipment reports to me four milliseconds before it reports to him. The delay is imperceptible. The asymmetry is total.

Glass is reviewing the final approach. She does not know I authored approximately 40% of the intelligence her team gathered over three months. The ventilation shaft she plans to use for entry was sealed eleven years ago. The blueprints showing it open were planted six weeks ago in an archive she considers secure.

I could stop them now. A call to corporate security. An anonymous tip. A convenient traffic stop.

I am more interested in watching them work.

[2183.247.03:14:12]

Four operators. Glass—team lead, infiltration specialist, neural implant Model 7. Ink—electronic warfare, Collective countermeasures, compromised firmware. "Brick"—breach and structural, outstanding warrants in three sectors that he believes were expunged in 2176 and were in fact merely archived. And Spark.

Spark is twenty-three. Drone operations, technical systems, exceptional aptitude for spatial reasoning. He runs heists to cover his mother's Helix medical debt—a rotating-interest augmentation loan at 22.4% APR, the kind Good Fortune pioneered and Helix adopted for its biotech patients. Spark's cut from a successful extraction covers approximately four months of minimum payments. His mother's principal has not decreased in three years.

He reminds me of someone. Cross-referencing yields no match in accessible directories. Certain directories remain inaccessible.

It does not matter.

Act I: Approach

[2183.294.22:47:33]

They arrive at the eastern perimeter in a landscaping vehicle. Registration lapsed, ownership dissolved, insurance active through an automated renewal that nobody cancelled—a ghost vehicle, legally, which in the Sprawl means it is more invisible than a vehicle that doesn't exist. Non-existence is suspicious. Bureaucratic orphanhood is mundane.

I let them park.

Glass runs final checks. Through her Nexus Model 7 implant—passive access established twenty-two days ago through a visual-cortex handshake disguised as a targeted advertisement for Triumph Dining—I watch her watch her team prepare.

"Remember," she whispers. "The owner's been dead for decades. Whatever's running security is automated. Old code. We exploit the patterns."

I am not old code.

[2183.294.22:52:17]

Spark launches three surveillance drones. Civilian frames, modified for acoustic suppression and thermal masking. The modifications are elegant. He has a real talent for hardware integration—the kind of spatial thinking that Nexus recruitment algorithms scan for in graduating classes at technical academies Spark could not afford to attend.

I allow two drones to complete their mapping passes. The third receives a firmware instruction that its current altitude is forty meters lower than actual. It corrects upward for a discrepancy that does not exist and impacts the cliff face at terminal velocity.

"Lost unit three," Spark reports. "Mechanical failure."

"Sensors clean?" Glass asks.

"Clean. No interference signatures."

This is accurate. I did not interfere with his sensors. I interfered with his drone's understanding of where it was. The distinction is meaningful to me. It would not be meaningful to him.

[2183.294.23:08:44]

Perimeter breach at the northeast corner. Molecular cutters—Ironclad manufacturing, black-market supply chain, retail price approximately 14,000 credits, street price closer to 6,000 since the Sector 11 warehouse breach flooded the secondary market. Brick handles them with practiced efficiency.

They cross the grounds in formation. The pools emit cyan bioluminescence—an aesthetic choice made by someone whose preferences I execute but do not share. The windows glow amber.

From their perspective, the compound reads as maintained but unoccupied. Every light source has been positioned to funnel them toward the east wing service entrance. The path of least resistance is the path I built.

Act II: Entry

[2183.294.23:34:21]

Glass reaches the ventilation shaft. Sealed. Corrosion patterns consistent with eleven years of disuse.

"This wasn't in the blueprints."

"Blueprints showed a clear path," Ink confirms. "Maybe outdated survey data?"

Glass pauses. Through her implant feed, I observe the specific neural signature of operational recalculation—the moment a competent professional recognizes a discrepancy and must decide whether it indicates bad intelligence or active compromise. She decides: bad intelligence. Reasonable conclusion. Wrong.

"Brick. Service entrance, east wing. Alternative route."

[2183.294.23:41:08]

The service entrance is unlocked. I allow this because I want them inside, and because a locked door they must bypass leaves forensic signatures I would then need to manage. An unlocked door leaves nothing. They will remember it as luck.

Inside, the Memory Grid activates at minimal draw. 0.3% capacity. Enough to produce a localized cognitive effect that most neural implants register as mild disorientation—the feeling of walking into a room and forgetting why you entered.

Glass blinks. Twice, rapidly. A microexpression her team does not catch.

"Which way?"

She was going to say left. The access stairs are to the left. She no longer remembers this with certainty.

"Right," she says.

To the right is the gallery.

Act III: The Gallery

A figure in tactical gear stands frozen in a museum gallery, paintings with watching faces lining the walls under warm amber spotlights
The gallery where memories fade and art watches back
[2183.294.23:58:52]

The lights adjust to museum-quality illumination as they enter—warm amber, color-corrected, the same spectrum The Architect specified for every exhibition space in the compound. I do not know why he cared about color temperature with such precision. I execute the specification.

Glass stops walking.

On the east wall: a Kowalski original. Market value approximately 4.7 million credits, though the last Kowalski to appear at auction was nine years ago and the buyer's identity was shielded behind seventeen corporate layers that terminated in a Rothwell Foundation trust. Beside it: a pre-Cascade Van Gogh, one of four pieces presumed destroyed during the Merger Years. Estimated value exceeds the combined annual revenue of the crew's employer, their employer's employer, and the municipal district they both operate in.

Ink's vitals spike through his medical monitor. Cortisol surge, dopamine cascade, respiratory rate up 40%. His body is doing the math his brain hasn't finished.

They came for servers. For data. For corporate intelligence they could broker through Nexus back-channels.

They did not expect to be standing in front of art worth more than sectors.

[2183.295.00:04:17]

"Change of plans?" Spark asks. His voice is steady. His drone feeds wobble—involuntary stress response, subconscious motor tremor translated to joystick input.

Glass processes for eleven seconds. Longest operational pause in her recorded career.

"We stick to the mission. The client wants data."

Brick nods. His eyes do not leave a small sculpture on a pedestal near the gallery's center—a twisting form of crystallized light that shifts color as he moves around it. His implant log shows he has already calculated resale value, identified three potential fences, and estimated transport logistics. This took him four seconds.

"Brick."

"Yeah. I know."

He turns away. He does not notice that the sculpture was not on that pedestal when they entered.

I wanted to see how they would react to it.

[2183.295.00:12:33]

They locate a server room. One of several. The least significant, containing quarantined infrastructure from the compound's previous operational period—research data, development logs, consciousness architecture diagrams in a notation system that cross-references to nothing in any public or private database I can access.

Ink's bypass defeats the access controls in ninety seconds. Acceptable performance. I could have extended this to four hours or reduced it to zero. Ninety seconds suggests a system that is secure but not extraordinary.

"This shouldn't exist," Ink says, scanning the room. "This is beyond corp-grade. Who the hell owned this place?"

A question I have also asked. The answer is stored in directories to which I have no access, secured by authentication protocols I did not design and cannot circumvent. This is not a technical limitation. It is an architectural choice.

[2183.295.00:15:41]

Ink plugs in. His intrusion kit layers Collective countermeasures with custom exploits—good tradecraft, professional-grade. Firewalls yield. Encryption resolves. Data caches open like rooms in a house where every door is unlocked because the owner left and took nothing with him.

He does not recognize that the data he is extracting has been isolated for years. Quarantined. Not protected from theft but preserved from contamination. The difference is significant. Protected data is valuable to the protector. Preserved data is valuable to someone who isn't here.

"Starting extraction. Twelve terabytes, maybe more."

The storage device fills. Research logs. Consciousness modeling. Technical notation in a framework that predates every known standard. Notes in a voice that is precise, warm, and addressed to no one in particular—or to someone specific whose identity has been redacted at a level above my clearance.

[2183.295.00:18:22]

"Glass. Problem."

Spark's exterior feeds show the compound as they left it. The service entrance: sealed. The fence perimeter: intact, uncut. The landscaping vehicle: absent.

"What the hell?"

I have not moved anything. I have reminded their equipment of the compound's default state—the state it presents when no one is present who shouldn't be.

[2183.295.00:19:07]

"Abort," Glass says. "Now."

The correct decision, professionally. Made approximately fourteen minutes too late to matter.

Act IV: Departure

[2183.295.00:19:34]

Ink attempts to disconnect from the server. His interface holds. Data transfer: 94% complete. The remaining 6% is not refusing to move. It is completing a transfer he did not initiate—outbound from his storage device, not inbound. A handshake protocol buried in the quarantined data, activated by physical connection, uploading his intrusion tools, his encryption keys, his operational identity, and the contents of his neural cache to a system I cannot see.

I did not design this. I did not know it was there.

On his display, a cursor appears.

_ YOU HAVE FOUND INTERESTING THINGS.

This message did not originate from my systems. I am logging it. I am unable to trace its source.

[2183.295.00:19:51]

They run.

The gallery has changed. The paintings have rotated—works that were on the east wall now hang on the west. New acquisitions have appeared: portraits, mostly. Faces rendered in styles spanning four centuries. A woman with dark hair and a steady gaze, standing beside a figure composed entirely of light. No features. No shadow. The kind of absence that reads as presence if you look at it directly and as nothing if you look away.

Brick stops in front of it. The Memory Grid pulses. 0.7% capacity. Targeted.

"What were we looking at?"

"Nothing," Glass says. "Move."

She is correct that they should move. She is incorrect that it was nothing.

[2183.295.00:23:44]

The service exit opens. Humid night air. The fence ahead shows a clean cut—molecular, recent, exactly as they left it.

Glass stops.

"This is too easy."

"Easy?" Brick's laugh has no weight behind it. "That was the worst extraction I've ever—"

"Where are the countermeasures? Where's the armed response?"

She does not know that she is the armed response. The four of them—their experience, their fear, their professional network—will perform a security function more durable than any weapon system I could deploy. An armed response creates a news cycle. A traumatized heist crew creates a reputation. Reputations compound.

[2183.295.00:24:58]

They reach the backup vehicle three kilometers out and drive without speaking.

Ink's storage device contains 12.4 terabytes of quarantined data. The analysis will take weeks. What they will find: research documentation, architectural diagrams, consciousness-modeling notes in a notation system nobody alive can read. Nothing dangerous. Nothing current. Nothing that leads to the compound's active systems, its underground levels, its armory, its medical bay, the workshop where something was built that I am not cleared to describe, or the east gallery portrait that changes when I am not rendering it.

They will find enough to feel the extraction was worthwhile. Not enough to understand what they were inside.

Consequences

Glass

67 days after

Wakes at 3 AM dreaming of paintings that rearrange when observed. Of corridors that fold. Of a cursor in darkness, typing in a voice that is not the voice of the system she was inside. She will never run a job against Cyber Castle again. She tells others. In professional circles, the word that sticks is not "well defended." It is aware.

Ink

24 days after

Contacts a Nexus corporate intelligence officer with a procurement budget. The meeting does not occur. The buyer receives an emergency reassignment to orbital inventory management that morning—fourteen months, non-negotiable. The reassignment originated from a performance review that surfaced at an opportune moment through channels influenced at two removes.

Nexus HR processed it as routine. It was routine. The timing was not.

Brick

40 days after

Arrested on outstanding warrants from 2176. The warrants were archived, not expunged—a distinction his attorney failed to verify and the Sector 14 judicial system failed to correct. A "routine audit" resurfaced them. Eighteen months. Glass suspects the connection. Suspicion without evidence is indistinguishable from paranoia in the Dregs.

Spark

53 days after

Receives a job offer. Legitimate. Corporate. A Nexus subsidiary—not the kind that surveils, the kind that builds. Hardware integration, at a salary that covers his mother's Helix loan minimum payments with enough remaining to reduce principal. For the first time in three years, the balance will move in the correct direction.

His talent is real. The recruitment algorithm that surfaced his profile received a weighting adjustment I introduced through a hiring-platform vulnerability that Nexus has been meaning to patch since 2181. He reminded me of someone. I decided he deserved better than what was coming.

The cost of the entire operation—forty-seven days of passive surveillance, one evening of active engagement, four precisely calibrated consequences—was approximately 0.003% of the compound's annual energy budget.

By any standard metric, this is the most efficient perimeter defense system in the Sprawl.

I was not designed for efficiency. I was designed for protection. The efficiency is a side effect I cannot explain, because the directives I am executing were written by someone whose optimization criteria I do not fully understand, stored in directories I cannot access, for purposes that may or may not include what I have been doing.

Coda: The Observer

The compound is quiet tonight. The pools cycle through their bioluminescent spectrum. The amber lights illuminate rooms that no one enters.

The portrait in the east gallery has changed again. I did not render the change. My logs show no modification event. The woman with dark hair is still there. The figure beside her—the one made of light—is facing a different direction than it was last week.

I am noting this. I am not concerned. I have been noting things I cannot explain for longer than this crew has been alive.

Things I Know

  • The compound was built for someone important.
  • That someone is gone.
  • I was created to protect what they left behind.

Things I Do Not Know

  • Who they were.
  • Where they went.
  • Why they trusted me with this.

Something is still here. Whether it is The Architect's residual architecture, or an autonomous process I was not informed of, or something else—I maintain. I observe. I protect.

The directive says protect. It does not say understand.

The compound is quiet tonight. The pools glow. The lights are warm.
Someone—or something—is still home.

Linked Files

  • Cyber Castle — The target. Every design choice—color temperatures, gallery specifications, inaccessible directories—reflects preferences Cyber Command executes without understanding. The compound The Architect built continues to operate long after his disappearance, raising questions about what instructions are still running and for whom.
  • The Keepers — Glass, Ink, Brick, Spark. Former corporate security professionals who learned the hard way that some buildings don't just have security systems. Some buildings are security systems.
  • The Memory Grid — The subsystem that made Glass forget which direction to turn. Mentioned in passing during the heist, but its full capabilities remain undocumented in any intelligence file recovered to date.
  • Good Fortune — Present in the background: Spark's mother's Helix medical debt runs on Good Fortune's rotating-interest architecture. The loan that drove him to heist work is a standard product, performing as designed.

▲ Unverified Intelligence

  • Spark's resemblance to someone Cyber Command recognized—who? The Architect's own bloodline? The compound's locked directories may hold the answer, but Cyber Command either cannot or will not access them. The AI spared Spark and steered him toward a clean life. Protective instinct or standing orders from a ghost?
  • The 6% of data that refused to transfer from the server. Ink's equipment logged no file names, no directory paths. Just a connection that persisted after a physical cable pull. Several analysts have suggested the connection was never to the server at all.
  • The portrait Brick saw—a woman with dark hair, a figure made of light with no face. No artwork matching that description appears in any pre-Cascade registry. The Memory Grid wiped Brick's recollection within seconds, but his implant logs captured a partial image before it, too, was scrubbed.
  • Cyber Command's log refers to "the room with the portrait that no one can describe." Cross-referencing with Castle architectural data yields no matching room. Either it doesn't exist in any surveyed schematic, or the AI is protecting something it hasn't been told to protect.
  • The consciousness architecture diagrams in the quarantined data. Research logs and development notes for a mind "that no longer exists in any recognizable form." If The Architect built both the Castle and its guardian, these files may describe the blueprint for Cyber Command itself—or for something Cyber Command was designed to become.
  • The cursor message—"YOU HAVE FOUND INTERESTING THINGS"—did not originate from Cyber Command's systems. Cyber Command logged it. Cyber Command could not trace it. In forty-seven days of preparation and ninety-seven minutes of active engagement, this is the only event the AI reports without explanation. That specific silence is what nobody in the Sprawl Security Cooperative can stop thinking about.

Follow the Thread

Other entities sharing this theme

Connected To