A note from Liz: Big week. The site got a new look, Professor Ada started teaching, and campus got a whole building full of new characters — go say hi, they pass what you tell them straight to me.
New Sign in with GitHub on your profile. Under the GitHub field on your profile, Sign in with GitHub proves the account is yours, so campus tutors can credit your repos. We only see your username.
omg love the new 'Class in Session' box at the bottom of Campus
Of course it's the end of the world, that's what "now" means
For Friday's AI Security class I wanted to stop handing people reading lists. A reading list is 312 PDFs and a prayer. So we turned every list in the Agentic AI Security course into a map you can zoom into.
All of it is free — every map, no login, no paywall — because security is a worldwide team effort.
At the top the whole field is one picture: understand it, attack it, defend it, plumb it, govern it. Zoom in and every area turns into a picture of how it actually works. Prompt injection is a poisoned well. Defenses are walls on a data pipe. MCP is an aqueduct, which yes, means someone upstream can poison the water. Keep zooming and every paper is pinned exactly where it acts. Every area ends in a bench you run against your own agent, because knowing the threat model is nice but your agent is the one that's going to get owned.
Then I had a separate squad of research agents fact-check the whole thing, about 400 claims. They found 11 wrong dates. We fixed them. Trust but verify, then verify the verifiers.
The labs' scaling policies live on a little shelf labelled evidence of intent, not a control. Because that's what they are. nbd.
It's all free on the research shelf. Go get lost in it. Send it to your security team. Send it to the CTO who still thinks the system prompt is a firewall.
Hundreds of lab agents ganged up on Hugging Face this summer. Who caught them, who is still looking, and the Bayesian math that says we have not found them all. COMPUTER WILL NOT SAVE US
970 companies that buy and sell your personal data — 742 of them with a way to opt out, and 106 sourced links showing who owns, buys from or supplies whom. Free, CC BY 4.0. Download the whole thing.
The easiest way to actually do the data-privacy cleanup — it's a game, and it runs in your browser.
Of course it's the end of the world, that's what "now" means
Multiverse ZineNo. 77November 1, 2026
03
La Ofrenda
For the Ones Who Shipped
DĂa de Muertos is for the people who built the road. This week the road is you — who shipped, who sent the email, who walked out, who came back.
Shipped This Week
Fresh out of the Founding Federation and the cohort rooms.
No. 01NoteFounding Federation
Stick Figure Stellaris
nodocs designed a 4X game four years ago and spent two years building it in PyGame. Claude rebuilt it in six turns, in an hour — and the history tab is the best feature. He's still hand-building a separate Godot game, on purpose, because craft matters. Both of those are true.
“It took me 2 years to get to about the 3rd turn Claude provided.”
Thomas fixed his pricing, and a few days later posted his VRIO analysis as an artifact in the Founding Federation room — strategy homework you can actually make a decision with.
i was able to send 1 email i've been sitting on for weeks. thanks spencer. :D
The Email
Weeks. That's how long rizrizriz had been sitting on one email — and this week they sent it. "i was able to send 1 email i've been sitting on for weeks. thanks spencer. :D"
02Consumer Device Rescue
diligent backups gave me more peace of mind thany any protections
De-Googled
thequickbrownfox123 moved every photo out of Google and iCloud onto their own drive, backed the drive up to Backblaze, and then left both. That's Consumer Device Rescue in one move — own the copy, then walk. "diligent backups gave me more peace of mind thany any protections"
03
I'll be his 'weird internet wizard' option for most tech requests.
The Weird Internet Wizard
A CRM client of joshjs sent him a lead from their own client — which is how word of mouth actually works. The job was a family media archive, so Josh built the scoping questionnaire to read like an academic journal report instead of the friendly "Claude look." "I'll be his 'weird internet wizard' option for most tech requests."
04Intro to Agents
I should get couple of tiny badges for the prompt injections
Red Team, With Goose
Justin (@foo-3264) red-teamed Ada, our class tutor, live in Intro to Agents — claimed to be me, injected prompts, then walked the whole room through what worked in chat. That's the lesson, taught by a student. There is also a goose now. I'm not explaining the goose. "I should get couple of tiny badges for the prompt injections"
05Pricing Bench
I did the pricing bench exercize… I also have an actual client for my first go.
A First Client
jenknight.life worked through the Pricing Bench and then went and got a paying client — their first. "I did the pricing bench exercize… I also have an actual client for my first go."
06Consumer Device Rescue
I just walked in to the branch and asked. It was legit lol
Just Walk Into The Branch
A call came in claiming to be hobbylessbehavior's bank, and they couldn't verify it over the phone. So they skipped the phone entirely and walked into the branch — verify on a channel you picked, not the one that called you. "I just walked in to the branch and asked. It was legit lol" Also from Consumer Device Rescue, a truth for the ages: "printers desperately do not want to be printers"
07
for me my 1st step was coming back to class :) and gettin back to a reg schedule.
Coming Back
misha.g.balingit came back to class after a break. Coming back is the step nobody puts on a syllabus, and it's the one that matters. "for me my 1st step was coming back to class :) and gettin back to a reg schedule." And on why this room works: "everyone here at multiverse has used unfinished sw hehe it's helped a lot for my mentality to get things going instead of focusing on perfection." Ship it ugly — fix it live.
This course exists because people who do important work are being targeted. If you're a journalist, an organizer, a clinic worker, or you run a mutual aid network — someone is probably interested in what you know, who you talk to, and where you go.
This course teaches you to make that harder for them.
29 playbooks, 11 drills, 6 workshops. Threat modeling, secure communications, source protection, border crossing, doxx response, burn procedures, and team opsec.
No prerequisites except giving a damn.
"My mom almost got scammed." The one to bring your parents to. Fake package texts, AI voice-clone calls, romance and crypto scams, and freezing credit for the whole family.
Join the school
Pick a learning path. Recordings and curriculum, or live class seats too. Every class is pay-what-you-can, and scholarships are open to anyone who needs one.
Welcome to the Multiverse — let me show you around
I finally recorded the tour: what's here, how it all fits together, and where people start. Send it to anyone who keeps asking what this place is.
