Structural Analysis 3

Security Design for the Mythos Era

Use AI for development. Never embed AI in production. Zero attack surface in practice.

What Is Security in the Mythos Era?

In Chapter 5 "Mythos Has Arrived," we showed that the economics of cyberattacks collapsed with the emergence of Mythos-class AI. In Chapter 6 "Microsoft's Collapse," we showed that tightly coupled giant ecosystems become the most vulnerable targets.

So how do you defend in the Mythos era?

The answer is simple. Make the attack surface zero.

Security principles for the Mythos era:

  1. Use AI for development. Never embed AI in production
  2. No CMS, no database, no API in the production environment
  3. Serve only static HTML
  4. One server, one application, loosely coupled
  5. Eliminate black boxes No matter how intelligent the attacker, if there is no entry point, there is no intrusion.

This Site Is the Proof

aiseed.dev is a site that implements these principles.

This site's architecture:
Development Claude Code (AI generates all code)
Build Python + Jinja2 + markdown-it-py (runs locally)
Production Static HTML + CSS + image files only
Server Nginx (static file serving only)
AI Zero in production
CMS None
Database None
API None
Element WordPress (43% of the web) aiseed.dev
CMS Yes (attack surface) None
Database MySQL (SQL injection) None
PHP Yes (remote code execution) None
Plugins Many (unknown vulnerabilities) None
Admin panel Yes (authentication bypass target) None
AI/Copilot Can be added via plugins (backdoor) None
Attack surface Enormous Zero

Even if Mythos-class AI arrives, static HTML has no entry point. There is no database for SQL injection. There is no server-side script for remote code execution. There is no internal network for lateral movement.

If the attack surface is zero, attack capability is irrelevant.

"Using AI for Development" vs. "Embedding AI"

This is the most critical distinction.

Using AI for development (safe):
Claude Code generates code Human reviews Build Serve static HTML
AI exists only in the development process
No AI code runs in production
Use AI as a tool. Never embed AI in the deliverable.
Embedding AI (dangerous):
Copilot Resident in the editor Sends codebase to external servers (Ch. 5)
AI plugins Integrated into CMS Data leaks via external APIs
Security Copilot Depends on telemetry Telemetry can be forged (Ch. 6)
The moment AI is embedded in production, the attack surface explodes.

Organizations that do not understand this distinction will be the first to collapse in the Mythos era.

Not a Single Line of Human-Written Code

This site was built entirely with Claude Code.

HTML, CSS, JavaScript, Python, Markdown — all generated by Claude. The human's role was deciding what to build and giving Claude instructions.

Item Value
Total lines (code + content) 30,000+
HTML pages 42
Articles 26 (13 Japanese + 13 English)
Development time ~24 hours
Git commits 104
Human-written code 0 lines

The human's role: Decided the structural analysis themes (fossil resources, agriculture, AI, NVIDIA, enterprise IT taxes…) Gave Claude direction ("add cloud tax," "put Epstein last") Read the output and gave corrections ("change wording," "remove fade-in") Deployed the site Zero code written.

If This Were Outsourced to an SIer

Estimated cost if outsourced: Requirements gathering → Hundreds of thousands of yen Design → Hundreds of thousands of yen Coding (42 pages + build tool) → Millions of yen Localization (26 articles in JP + EN) → Millions of yen SEO (OGP, sitemap, CSP, etc.) → Hundreds of thousands of yen Testing & deployment → Hundreds of thousands of yen Total: ¥5–10 million. Timeline: 2–3 months. With Claude: 24 hours. Cost: near zero.

The "Taxes" That Disappeared

The structure described in Chapter 8 "Eliminating Enterprise IT Taxes" is proven by this very site.

"Taxes" eliminated by this site:
SIer tax Zero outsourcing. Claude wrote all the code
Microsoft tax No Windows. Linux + Claude
Cloud tax No AWS, no Azure
SaaS tax No WordPress. No CMS. Markdown and a build tool
Consultant tax "What to build" was decided through dialogue with Claude

The only cost was Claude's monthly subscription.

The Build System — A Toolchain Built by Claude Itself

Build pipeline:
Write articles in Markdown (with custom syntax extensions)
build_article.py parses the Markdown
Custom blocks (:::chain, :::highlight, etc.) converted to HTML
markdown-it-py (CommonMark compliant) converts the rest
Injected into Jinja2 templates
SEO tags (OGP, canonical, hreflang) auto-generated
sitemap.xml, robots.txt auto-generated
All 42 pages built in one pass
Claude designed and implemented this entire pipeline

The Structural Conclusion

All 15 chapters of the structural analysis converge on a single conclusion.

The conclusion of the structural analysis:
Fossil resources are depleting (Ch. 1–4)
Mythos-class AI has arrived. Tightly coupled giant systems will collapse (Ch. 5–6)
Giant organizations cannot escape (Ch. 7–8)
Individuals + AI change the structure (Ch. 9–12)
Redesign by subtraction (Ch. 13–14)
Proof: develop with AI, build products with zero attack surface (Ch. 15)

All source code is published on GitHub. Licensed under CC BY 4.0. Anyone can use it. Look at the structure, and you will see how to design for the Mythos era.

What AI users need is not GPUs — it is intelligence.
A human who decides what to build, and an AI that implements it.
This combination turns millions in "taxes" into zero in 24 hours.
And makes the attack surface zero.

← Prev: Subtraction Design Next: The Road to the AI-Native Free Person — Choices at the Individual Level →

Structure is everything.

Use AI for development. Never embed it in production. That alone makes the attack surface zero.

AISeed — 生物多様性・食料・AIと暮らし(Facebook)