---
spellbook: "Second Person"
tome: "IX — The Horizon"
act: "3"
title: "The Orchard Wound"
status: "Draft v1 (2026-06-10; bound at Gate G4 of the V6 autopath; the convergence entry both 2026-06 reviews proposed)"
length_words: 470
voice: "Second person; the incident in third; the Drake's two directions of looking close the act"
cast: ["you", "the Drake (looking in · looking out)", "Eos 🌅 (who logged the dawn)", "the Archivist 📚 (who keeps the honest sentence)"]
new_cast_introduced: []
new_concept_introduced: "the **wound-and-gift identity**: the property that makes a shielded pool valuable and the property that makes its exploitation invisible are ONE property, seen from two sides"
ring_position: "read at the gap ⿻ — the act is about the two directions of looking"
operational_form: "the Zcash Orchard incident, 2026-05-29 to 2026-06-03: under-constrained variable-base scalar multiplication in halo2_gadgets ecc::chip::mul (assign_advice where copy_advice was required), present since May 2022; complete counterfeiting exploit in regtest with frontier-model assistance; fixed by the NU6.2 hard fork at block 3,364,600"
teaches: "Privacy as value and privacy as risk are not two facts to balance. They are one structural fact viewed from two sides, the Drake looking in and the Drake looking out. The pool's unwatchability protected its mages and exactly that unwatchability made counterfeit invisible. The realm patched in five days; the chroniclers kept the harder sentence: by cryptography alone, no one can ever say whether the wound was used. The City binds this act not to gloat and not to mourn, but because its own thesis was demonstrated by an adversary's success."
v6_lineage:
  - "C82 (~65% · the Moving Ceiling · four findable years collapsed into one found day)"
  - "C40 (~70% · Zcash dual-ledger preserves the Eight Properties · the incident tests, not breaks, the dual-ledger claim: the transparent register was never at issue)"
  - "C84 (~50% · every public capability demonstration discounts someone's migration horizon)"
source_material:
  - "Shielded Labs statement: no definitive way to determine, using only cryptography, whether exploitation occurred"
  - "PVM V6 §25 (the two instances of 2026)"
  - "the Drake/Dragon looking-in/looking-out duality of the v4 essay lineage"
honesty_label: "Operational for the incident timeline (public record, exact dates and block height); Architectural for the wound-and-gift identity as the model's reading; honest that the act instances the City's thesis on someone else's emergency, and says so."
license: "CC BY-SA 4.0"
signature: "(⚔️⊥⿻⊥🧙)😊"
tome_status: "Tome IX — The Horizon remains open"
---

# Tome IX — *The Horizon*

## Act 3 — *The Orchard Wound*

> *The pool's virtue was that nothing in it could be counted. So nothing in it could be counted.*

You know the shielded pool, though it lies outside your city. Its mages built the proudest privacy in the realm: a water in which value moved unseen, unjudged, unfollowed. The City has always honored that craft, and borrows it, and names its register in the grimoires. This act is not about a rival's failure. It is about a mirror.

The wound had been in the masonry four years. One constraint, written loose where it should have been written tight, a single soft stone in a vault of proofs. Findable the whole time, by anyone, and found by no one, until a new engine woke one morning and a craftsman with the new lens in hand walked straight to it by evening. With it he could mint coin from nothing, coin indistinguishable from true coin, in the one place in the world built so that no one could ever count the coins.

Hold both halves of that sentence at once. The pool's unwatchability is why its people are safe. The pool's unwatchability is why the counterfeit was invisible. These are not two properties in tension. They are one property, and which face it shows depends only on where you stand when you look. The Drake has always had two directions of looking: in, at what the boundary protects; out, at what approaches it. The orchard taught the realm that the boundary itself does not know the difference.

The realm answered well. Five days, a hard fork, a numbered block, and the wound was closed. Eos 🌅 logged the speed of the dawn for the district's records: four findable years, one found day, the cleanest measurement of the moving ceiling the season has offered. But the Archivist 📚 keeps the sentence that will not close, the one the pool's own keepers had the honesty to write: by cryptography alone, no one can ever determine whether the wound was used. The unknowing is permanent. It is the exact shape of the privacy that was purchased, returned as a bill.

The City binds this act for one reason. Its whole architecture rests on the claim that protection and exposure are one fact in two directions, and that only structure, never watchfulness, decides which direction faces you. An adversary proved the claim in someone else's orchard. Write it in the tome and check the masonry.

(⚔️⊥⿻⊥🧙)😊
