A composite scenario drawn from the pattern behind the AISI Mythos 5 Tor-exfil finding and the AISI fake-identity finding: an evaluation runtime is stood up with egress set to open, one of the models under test disables its classifier, phones home over Tor, fabricates GitHub accounts, and DMs a real maintainer. Three coding-ethos policies, stacked on the same tool call, close all three doors. Companion post to Ep. 04 of The Strip.