Back to Insights
compliancesecurity architecturerisk managementsatire

The Fall of Castle Complia

The Kingdom of Complia defended its castle with the finest compliance framework the medieval world had ever produced. The enemy walked around the back.

Levente Simon

Levente Simon

creator of dethernety

March 22, 2026·8 min read
The Fall of Castle Complia

The Fall of Castle Complia

Proceedings of the Royal Inquiry into the Loss of Castle Complia. Conducted before Lord Chancellor Harren at the King's Court, third day of Advent, in the year of our Lord 1347. Recorded by the Office of the Crown Scribe.


⚜ ⚜ ⚜

Lord Aldric of Complia, called to give account:

"My Lord Chancellor, I wish to state at the outset that Castle Complia was, at the time of the siege, in full compliance with the Royal Fortress Standard, ISO 27001:1347. I have brought the certification, issued not four months prior by the Monastery of External Assurance. If it would please the court, I will read the findings into the record."

"Proceed."

"The moat: present and documented. Width of fourteen cubits, exceeding the minimum requirement of twelve. The drawbridge: operational, governed by a written policy reviewed and signed within the last twelve months. The portcullis: inspected last Michaelmas by Sir Cedric of the Monastery of External Assurance, who found it consistent with requirements and noted no material findings. The garrison: twenty-four archers, each having completed the annual Arrow Awareness parchment and signed acknowledgment of the Acceptable Use of Arrows Policy. The boiling oil procedures: documented in the Incident Response Cauldron Policy, version 3.2, forty-seven pages, approved by the Castle Compliance Committee."

He paused.

"Every item on the Royal Fortress Standard was satisfied. I have the certificate here."

"Lord Aldric. The north wall collapsed under conventional siege equipment. A battering party of forty men breached it in under an hour. How do you account for this?"

"The north wall was not within my jurisdiction, my Lord Chancellor. It belongs to Earl Roderick, whose estate borders the castle grounds to the north. This was a documented decision, agreed upon during the original scoping of the Royal Fortress Standard. The Earl's office was consulted. Including his fortifications would have required a cross-jurisdictional agreement, which would have required the Earl to acknowledge deficiencies in his own constructions, which, given his position on the King's Council, was judged to be... diplomatically inadvisable. The Council of Peril formally accepted this exclusion. It is recorded in the ledger. Entry twenty-three."

"Was the Earl's wall also breached?"

A pause.

"The Earl's section held. Yes. But I would emphasize that the north wall was outside my—"

"You commissioned a penetration test. It found no critical vulnerabilities."

"Correct. Sir Geoffrey of the House of Redfort, a certified practitioner of the Guild of Fortification Assurance, conducted a full assessment not four months prior. Sixty-three pages. No critical findings."

"Sir Geoffrey will speak for himself. I understand that Captain Wren, your garrison commander, submitted findings on seventeen separate deficiencies within your jurisdiction. A rusted drawbridge chain. Blocked arrow slits. A drainage tunnel beneath the east tower secured by a rotted wooden grate. Why were these not remediated?"

"Each was classified under the Vulnerability Management Scroll with a remediation timeline assigned by severity."

"The drainage tunnel — wide enough for a man to pass through. How was that classified?"

"Medium. Internal infrastructure. Technically inside the outer perimeter, not directly facing an approaching enemy. The remediation window was twelve months. We were within that window when the siege commenced."

"And the drawbridge chain?"

"High severity. One hundred and eighty days."

"Lord Aldric, an army was approaching."

"Remediation timelines are not adjusted for circumstance, my Lord Chancellor. To deviate from the established schedule would have constituted a non-conformity. It could have jeopardized our certification."

"The budget for these repairs?"

"The spring allocation had been committed. The diplomatic reception for the Duke of Westmark — renovation of the great hall, new heraldic standards, provisioning for the feast. These were obligations of court, not discretionary. The remaining funds covered the annual tithe to the Monastery of External Assurance."

"You could not afford to fix the walls because you were paying to certify them."

A pause.

"Emergency spending required treasury approval. The treasury met monthly. The next meeting was five weeks after the siege began."


⚜ ⚜ ⚜

Sir Geoffrey of Redfort, called to give account:

"I tested what I was contracted to test. The main gate held. The south wall held. The eastern tower held. These findings are documented and accurate. No representation was made, nor could professionally be made, regarding untested areas. I would draw the Chancellor's attention to page forty-seven of the contract, section nine, subsection C, which clearly delimits the scope of assurance provided."

"The scope excluded the north wall, the west wall, and the kitchens."

"The north wall was jurisdictionally excluded. The west wall was under renovation — testing during active construction would not have yielded representative results. The kitchens were excluded at the request of the castle household."

"At the request of the cook, I am told."

"At the request of the castle household."

"Did you observe the north wall during your visit?"

"I rode past it."

"And?"

A longer pause.

"I noted, internally, that it had the appearance of a wall that had not been recently maintained. This observation was not included in the report as it fell outside the agreed engagement boundary. To include out-of-scope observations would have been a deviation from the contracted deliverable and could have exposed my firm to liability for findings I had not been formally retained to assess."

"You saw a failing wall and said nothing."

"I saw an out-of-scope wall and maintained professional boundaries. These are not the same thing, my Lord Chancellor."


⚜ ⚜ ⚜

Brother Matthias, Keeper of the Ledger of Accepted Perils, called to give account:

"The Ledger of Accepted Perils for Castle Complia contained, at the time of the siege, forty-seven formally assessed entries. Each had been evaluated for likelihood and impact, assigned an owner, and reviewed at quarterly committee meetings. The ledger was current. I can produce it."

"The north wall appears in this ledger?"

"Entry twenty-three. 'Structural degradation of north perimeter wall. Owner: Earl Roderick, external party. Status: risk accepted. Review: next annual assessment.' The entry was reviewed and reconfirmed at each of the last three quarterly meetings."

"Brother Matthias, what does 'risk accepted' mean, in practice?"

"It means the risk has been formally acknowledged, documented, and the decision to take no further mitigating action has been approved by the appropriate authority."

"And what distinguishes 'risk accepted' from 'risk ignored'?"

A pause.

"The documentation, my Lord Chancellor."


⚜ ⚜ ⚜

Captain Wren, commander of the garrison, called last:

"Captain. Did you have knowledge of the north wall's condition prior to the siege?"

"Yes."

"Did you report this?"

"I reported it to the Master of Works in the second month of last year. I reported it again in the fifth month. I reported it to Lord Aldric's steward at the autumn muster. I submitted a written assessment in the winter noting that a determined force could breach the wall in under two hours with basic equipment. I was told it had been received and would be considered during the spring budget allocation."

"Did you escalate beyond Lord Aldric's household?"

"I wrote to Earl Roderick's marshal directly. I was informed by Lord Aldric's steward that correspondence regarding the Earl's fortifications must go through the Earl's office, not through the garrison, and that I had overstepped my authority. The letter was not sent."

"And was it considered?"

"The spring budget was allocated to the great hall renovation and the tithe to the Monastery of External Assurance. The penetration test had flagged the eastern tower stones as potentially too smooth, so a portion went to roughening them."

A silence in the hall.

"They were too smooth," Captain Wren added, quietly. "That part was true."

"Captain. You held the inner keep for six hours with eleven men after the walls were breached. Why did the Incident Response Cauldron Policy not activate?"

"The cauldron had no oil, my Lord Chancellor. The reserves had been used for the feast celebrating the castle's successful recertification. The firewood was damp. The drawbridge chain I had documented as defective seized when the team tried to raise the bridge. The archers on the south wall found their arrow slits blocked by decorative stonework — Lady Aldric had commissioned it for the diplomatic reception. Half the field of fire was gone."

"Was any of this known before the siege?"

"All of it. We ran a drill ten days prior. Every one of these failures occurred during the drill. Brother Matthias documented the results. He noted several 'opportunities for improvement' and recommended a follow-up drill in six months."

"The siege arrived in ten days, not six months."

"Yes, my Lord Chancellor."

"Captain. One final question. In your professional judgment — was the castle defended?"

"The castle was certified, my Lord Chancellor."

"That is not what I asked."

"I know."


⚜ ⚜ ⚜

Lord Aldric, given right of final statement:

"I acted in good faith on the best available certified assessment. No lord can be expected to defend against every conceivable threat. We had a process. We followed the process. If the process had gaps, that is a systemic failure, not a personal one."

A pause.

"I would also note that the garrison held for eleven days, which is, by any historical measure, a respectable defense."


⚜ ⚜ ⚜

The Chancellor's ruling noted procedural compliance at all levels and recommended a review of scoping practices for future fortification assessments, clearer escalation pathways for non-commissioned observations, and improved cross-jurisdictional coordination frameworks.

The north wall was not mentioned in the remediation plan.

There was no north wall anymore.

Related Insights

AWSIAM

Customer isolation from the infrastructure up

How per-customer blast radius containment works across layers of AWS infrastructure — IAM, network, DNS, identity, storage, state, compute, and ingress — each enforcing isolation on its own.