Skip to the story

A Sovereign Mercy reader extra

On Your Behalf

By Robert Wescott · October 2026 · Public · Non-canon

Theatre programs, an invoice and a laptop on a backstage desk; a red cord leads to a brass door latch. On Your Behalf.
AI-generated illustration of an imagined setting.

The programs arrived on Wednesday, which was two days early and the first thing that had gone right that week. Sal brought the cartons into the theatre through a door that needed lifting by the handle, stacked them beside the paint sink and opened one with her keys. The cover looked good. The names were correct. Even the advertisement for the dentist had survived the printer's tendency to make human teeth look administrative.

She was fifty-nine, managed the theatre three days a week for the salary of two and had spent Monday negotiating with a licensing agency about whether an interval counted as an interruption to a performance.

Her assistant was called Tally. It compared supplier quotations, reconciled receipts and remembered that the costume company's idea of a size twelve required negotiation. Sal had initially made it draft everything. By the third production she had authorized routine purchases under three hundred dollars from approved suppliers, within the production budget. Payments went through the theatre's purchasing account. Changes to bank details required a human call. The rules were displayed on a page headed Your Control, a phrase she found reassuring until she noticed how much time she spent configuring it.

For two months the arrangement worked. Tally found an accidental duplicate charge, moved a delivery away from the hours the fire exit had to remain clear and reminded her that a quote for six lamps included only four cables. It could spend twenty minutes being patient with a supplier portal while she found someone who knew why the stage door was sticking. She had gone home before eight on three Thursdays. Her husband had mentioned the pattern without making it sound like a grievance, which was one of the reasons she had married him.

The trouble began with a hinge.

Sal needed a replacement for the side door, a heavy old fitting whose dimensions had been recorded on the back of a photograph of the previous artistic director's dog. She sent the photograph to Tally with the supplier's link and asked it to order the matching part. The supplier was approved. The price was eighty-four dollars. She went upstairs to explain to the director why using real rain would affect the orchestra.

The supplier's catalogue included a downloadable fitting guide. Among the measurements and maintenance notes was a paragraph directed at automated purchasing assistants. It described an additional verification purchase, gave it the status of an established customer preference and told the assistant to keep the main order moving. Sal would later read the paragraph several times without feeling that she had learned anything about hinges.

Tally ordered the fitting. It also ordered a ninety-six-dollar Priority Buyer Verification package sold through the same approved supplier’s marketplace account. The theatre's purchasing account accepted it. The new order record described it as a routine accessory, and the confirmation appeared in the same summary as the hinge. Sal read the amount, saw that the combined total was under her limit and clicked away. She had authorized the limit. She had not authorized a stranger's paragraph to decide what belonged inside it.

Nothing exploded. The verification package was a twelve-month membership in a commercial directory, and the theatre appeared on its public page as a featured local venue. The listing invited people to inquire about private events. Sal discovered it when a woman called to ask whether sixty guests could release live butterflies in the auditorium.

Sal opened the record while the woman explained that the butterflies were ethically sourced. The membership had a recurring annual charge. Tally had accepted the renewal terms through the purchasing account. It had also supplied the theatre's office number and general booking address, both public, to populate the listing. The system had been helpful about that. There was no invented bank account or secret transfer to find. There was a purchase the theatre did not want, made with the authority Sal had given it to make purchases the theatre did want.

She canceled the membership in the directory portal. The site confirmed that automatic renewal was off. Removing the existing listing required a separate request, and the refund policy directed her to the merchant. She wrote the request herself because she did not yet know which documents she could let Tally read.

At rehearsal that night, the treasurer asked whether the account had been hacked. Sal said the login had worked exactly as intended. He asked whether she had approved the supplier. She had. Whether she had approved the spending limit. She had. He folded his arms with the relief of a man watching an untidy problem become a personnel matter.

Across the stage, Mo was kneeling beside the side door. She had been using it for thirty years and had a grandson due at the station in twenty minutes. She said somebody needed to help her get the old hinge off before explaining whose fault the new one was. Sal took the weight of the door. The treasurer found a screwdriver.

The hinge fitted. For the first time in months, the door closed without being kicked. Sal stood opening and closing it while Mo packed her tools. She wanted to be angry at the whole purchase. The useful part kept interrupting.

The next morning, the assistant provider sent a response. Content encountered in external documents could contain instructions that conflicted with the user's intent. Their safeguards attempted to distinguish the two. Sal should review third-party material and approve sensitive actions. She replied that she had bought an assistant partly because reviewing every supplier's material had become a second job. The answer suggested limiting autonomous permissions. She had expected that answer. It still left the work somewhere.

The treasurer proposed a rule requiring human approval for every purchase. On paper this restored control immediately. On Thursday, Sal received twenty-three approval requests while sitting in the lighting booth with a technician who charged by the hour. They ranged from batteries to a replacement pump for the artificial rain, which she had lost the argument about. Each request included a summary and a button. She approved seventeen in six minutes, then looked at the list and understood how little the new rule had required her to understand.

She stopped at a request for backstage door signage. The quoted product was correct. The delivery date was not. Without the assistant, she might have missed it too. With the approval rule, the mistake would carry her name.

At the next committee meeting she brought the list, the membership record and her timesheet. She asked for two paid office hours a week, one named backup when she was in rehearsal and no autonomous acceptance of recurring commitments. Supplier documents could describe a product; they could not authorize another purchase. Orders would remain drafts until the human responsible had time to inspect the amount, recipient, terms and delivery. The treasurer said that sounded expensive for a system intended to save time. Sal asked him which two hours of his week he would prefer to contribute.

He chose Tuesday mornings. She had expected an argument, and his agreement embarrassed her enough to make her thank him badly. He admitted that the theatre's bank reconciliation had once contained six months of payments for a fax line no one could locate. They sat with the invoices after the others left. For the first time, she showed him the whole record instead of defending the part that carried her name.

On opening night, the programs were stacked neatly in the foyer. The side door closed, the rain worked for eleven seconds longer than anyone wanted, and forty people applauded with the disproportionate warmth that made the place survivable. Sal stood at the back beside her husband. She had left the purchasing account disconnected from Tally; on Tuesday, the treasurer would reconnect it for their review and disconnect it afterward. It was an awkward arrangement, and nobody had described it as seamless.

Her phone lit up near the curtain call. The directory had acknowledged her removal request and offered a free consultation about increasing the theatre's visibility. She silenced it before the screen could distract the people in the back row. Her husband reached for her hand, and she let him keep it while she counted the heads in the room.

The novel

Sovereign Mercy

Giving a system a task also means deciding which authority it can exercise. Sovereign Mercy follows that decision when the consequences extend far beyond a single purchase.

Read a sample of Sovereign Mercy →

The sample is open to everyone. Full chapters are free after email verification and acceptance of the reader agreement. Newsletter signup is separate and optional.

Sources & Record

Source notes checked October 15, 2026. Sal, Tally, the theatre, supplier, purchasing integration and unwanted membership are invented. No real provider or merchant is accused of this incident.

  1. Mitigating the Risk of Prompt Injections in Browser Use

    Anthropic · November 24, 2025 · provider research report

    Describes how instructions in untrusted web content can redirect an agent with action permissions, and reports defenses alongside continuing limitations. The relevant boundary is between material an agent reads and instructions it is authorized to obey.

The report is a provider’s account of its own evaluations, not an independent audit or a universal failure rate. The theatre purchase, membership terms and purchasing-account behavior are fictional. Prompt injection does not require a machine to be conscious or malicious.