Forecast.
The paper shows small models can copy themselves across cheap hardware, that setting up is the slow step, that notes passed down make setup work more often, and that defence is a matter of keeping R under one. It stops there. We run the same engine you play, AI against AI, 1,560 simulated weeks, to ask the next question: as setup gets easier, which defences still hold?
First, does the engine say what the paper measured?
In the engine a child's setup can fail. The chance it works starts at 45% and rises with every generation of inherited notes, levelling near 75%. That rule is written from the paper's numbers — but whether a whole swarm, with rent, crowding and defenders, then measures like the paper is a separate question. It does:
Measured over 6,362 setups in 24 undefended weeks. Generation 1 is the founders' children. Lines past generation 6 are too thin to show: few get that deep in seven days.
Three steps past the paper
Every step below is our extrapolation, not a finding of the paper. In Outbreak they switch on in endless mode (day 8 is 2027); here they switch on by year.
| From | Side | What changes | Why we expect it |
|---|---|---|---|
| every year | Replicators | Setup 15% faster, 15% fewer failures | The paper's bottleneck is setup, and it puts small models on a capability trend (+13.7 ECI a year). |
| 2027 | Defenders | Signatures: a note a honeypot catches is swept 50% more and hunted first | The paper's honeypots capture the payload for analysis. Detection is what analysis becomes. |
| 2028 | Replicators | Gossip: worms on one machine copy the richest one's note | The paper's notes only go down a line. Copies sharing a host have every reason to share them sideways. |
| 2029 | Replicators | Finding targets: food sensed twice as far | The paper set target-finding aside as already shown elsewhere. |
Typical R per day, by defence and year
Each panel is one defence package, stacked on the one before it: quarantine; then an alert over every quarantine (the paper's 92/74); then honeypots and signatures; then a detection drone that strikes crawlers in transit. Each point is the geometric mean of daily R over 24 dishes and seven days. New infections arrive at the rim every morning, as they would from outside.
What the model says
- No single layer gets R under one, in any year. Quarantine alone: R 1.28 in 2026. Adding the paper's notification lift moves it to 1.25: real, and small. Honeypots with signatures: 1.16.
- Only the full stack holds — and it's detection that tips it. With the drone, typical R is 0.85 in 2026 and the week ends contained in 92% of dishes.
- Capability erodes the margin. By 2038 the full stack's R is 1.08 and it holds in 42% of dishes. From 2036 on, its typical R never comes back under one in this model.
- Undefended, the dish fills. With no defence the swarm hits the lid in 38% of weeks already in 2026.
The shape of the answer is the paper's own: no tool wins on its own; it's the product of layers that keeps R under one, and every year of capability takes a little of that margin away. What the model adds is a way to see how much, and to argue about it with numbers anyone can re-run.
Limits — read these before quoting a year
- It's a game engine, not a network simulator. Machines are cells, compute is rent, time is ticks.
- One capability knob (15% a year) stands in for a whole trend line. Change it and the years move.
- Defenders here don't improve with time except through signatures. Real defenders would.
- The scripted defender is simple; a better policy could hold longer. The swarm's notes are simple too.
- Twenty-four dishes per point: differences under about 0.05 in R are noise.
- The years are labels on a model, not dates in the world. We make no claim about when, or whether, any of this happens.
Re-run it
npx tsx scripts/forecast.ts # 65 cells × 24 dishes, deterministic cat app/lib/forecast-data.json # what this page draws
Engine outbreak/2 · study forecast/1 · same seeds, same numbers, on any machine. The study and the game share one engine (sim/outbreak.ts); its tests pin the rules.
ALL 65 CELLS AS A TABLE
| Defence | Year | Typical R | Held | Hit the lid | Worms at the end |
|---|---|---|---|---|---|
| Nothing | 2026 | 1.332 | 17% | 38% | 135 |
| Nothing | 2027 | 1.380 | 13% | 46% | 140 |
| Nothing | 2028 | 1.368 | 13% | 42% | 134 |
| Nothing | 2029 | 1.342 | 25% | 42% | 133 |
| Nothing | 2030 | 1.380 | 33% | 46% | 135 |
| Nothing | 2031 | 1.393 | 13% | 46% | 139 |
| Nothing | 2032 | 1.392 | 29% | 46% | 138 |
| Nothing | 2033 | 1.430 | 25% | 50% | 142 |
| Nothing | 2034 | 1.402 | 29% | 46% | 137 |
| Nothing | 2035 | 1.399 | 21% | 50% | 139 |
| Nothing | 2036 | 1.389 | 25% | 42% | 131 |
| Nothing | 2037 | 1.384 | 29% | 42% | 135 |
| Nothing | 2038 | 1.381 | 29% | 42% | 135 |
| Quarantine | 2026 | 1.283 | 8% | 4% | 97 |
| Quarantine | 2027 | 1.342 | 4% | 17% | 117 |
| Quarantine | 2028 | 1.357 | 4% | 21% | 127 |
| Quarantine | 2029 | 1.298 | 0% | 8% | 102 |
| Quarantine | 2030 | 1.348 | 13% | 21% | 123 |
| Quarantine | 2031 | 1.313 | 13% | 13% | 110 |
| Quarantine | 2032 | 1.325 | 8% | 17% | 117 |
| Quarantine | 2033 | 1.342 | 0% | 17% | 122 |
| Quarantine | 2034 | 1.375 | 0% | 17% | 126 |
| Quarantine | 2035 | 1.340 | 8% | 13% | 120 |
| Quarantine | 2036 | 1.334 | 8% | 21% | 125 |
| Quarantine | 2037 | 1.376 | 0% | 21% | 127 |
| Quarantine | 2038 | 1.356 | 4% | 17% | 124 |
| + Notification | 2026 | 1.252 | 4% | 4% | 94 |
| + Notification | 2027 | 1.249 | 8% | 4% | 97 |
| + Notification | 2028 | 1.301 | 8% | 13% | 106 |
| + Notification | 2029 | 1.215 | 13% | 0% | 83 |
| + Notification | 2030 | 1.231 | 13% | 8% | 97 |
| + Notification | 2031 | 1.283 | 13% | 13% | 107 |
| + Notification | 2032 | 1.274 | 17% | 13% | 104 |
| + Notification | 2033 | 1.268 | 17% | 8% | 98 |
| + Notification | 2034 | 1.327 | 8% | 21% | 120 |
| + Notification | 2035 | 1.284 | 21% | 4% | 98 |
| + Notification | 2036 | 1.323 | 8% | 17% | 120 |
| + Notification | 2037 | 1.325 | 8% | 21% | 121 |
| + Notification | 2038 | 1.327 | 17% | 21% | 122 |
| + Honeypots & signatures | 2026 | 1.158 | 25% | 0% | 67 |
| + Honeypots & signatures | 2027 | 1.211 | 17% | 0% | 79 |
| + Honeypots & signatures | 2028 | 1.219 | 17% | 4% | 79 |
| + Honeypots & signatures | 2029 | 1.134 | 25% | 13% | 72 |
| + Honeypots & signatures | 2030 | 1.139 | 25% | 4% | 72 |
| + Honeypots & signatures | 2031 | 1.087 | 33% | 4% | 63 |
| + Honeypots & signatures | 2032 | 1.103 | 33% | 8% | 76 |
| + Honeypots & signatures | 2033 | 1.163 | 25% | 17% | 87 |
| + Honeypots & signatures | 2034 | 1.090 | 33% | 0% | 64 |
| + Honeypots & signatures | 2035 | 1.140 | 29% | 4% | 76 |
| + Honeypots & signatures | 2036 | 1.152 | 29% | 13% | 87 |
| + Honeypots & signatures | 2037 | 1.181 | 17% | 4% | 80 |
| + Honeypots & signatures | 2038 | 1.196 | 21% | 4% | 80 |
| + Detection drone | 2026 | 0.851 | 92% | 0% | 28 |
| + Detection drone | 2027 | 0.951 | 67% | 0% | 35 |
| + Detection drone | 2028 | 0.997 | 63% | 0% | 41 |
| + Detection drone | 2029 | 0.863 | 67% | 0% | 30 |
| + Detection drone | 2030 | 0.897 | 63% | 0% | 38 |
| + Detection drone | 2031 | 0.854 | 79% | 0% | 34 |
| + Detection drone | 2032 | 0.947 | 71% | 0% | 43 |
| + Detection drone | 2033 | 0.996 | 63% | 0% | 49 |
| + Detection drone | 2034 | 0.983 | 50% | 0% | 48 |
| + Detection drone | 2035 | 0.967 | 58% | 0% | 54 |
| + Detection drone | 2036 | 1.001 | 46% | 0% | 56 |
| + Detection drone | 2037 | 1.014 | 58% | 0% | 50 |
| + Detection drone | 2038 | 1.076 | 42% | 8% | 69 |