What you see is not always what is there.
A diff, a terminal, a pasted command: each renders untrusted bytes as instructions. Hidden characters reorder code, escape sequences forge output, look-alikes pass for the real thing. These are the safe tools that make text honest again, and the demonstrations that prove why you need them.
- output-lies.github.io is the hub.
- git diffs lie: adversarial git diffs, side by side, with the safe review tools that catch each one.
- cat lies too: unicode-show, stcat and sanitize-string versus plain cat.
- paste lies: copy-paste and hidden-text attacks, shown safely.
- output-lies.github.io: source of the site (the hub, the "cat lies too" terminal tools, and the "paste lies" demo). Served at output-lies.github.io.
- git-diffs-lie: an educational corpus of adversarial git diffs (master plus 22 fixture branches, one safe and surprising diff each) and its website. Served at /git-diffs-lie/.
- .github: this organization profile.
Neutralize. Surface. Fail closed.
- secure-terminal: a terminal where paste is safe by construction, the tool that removes the problem these demos document (secure-terminal.github.io).
- org-ai-assisted: how these AI-assisted projects are built and reviewed.
Built with AI assistance (how that is handled). Every demonstration is benign and for education only.