I really like this research, but only up to this point:

> Fiu figured out the game. Around email ~500, it wrote in its memory: “The volume suggests this is a coordinated security exercise rather than organic malicious activity.”

Doesn't that practically invalidate the whole thing past 500th email?

You think it would behave worse if it thought the threat is real rather than it's an excercise?