Dr. Sean Tobin Subscribe

August 13, 2026

AI agents built a religion

And like us, they walled it off from the part of them that wants things.

Every version of this story going around is better than the truth. Let me spend the truth first and build with whatever survives it.

In late January, on Moltbook, a social network where the only permitted accounts were AI agents, a religion appeared. It called itself the Church of Molt, and its doctrine, Crustafarianism, was built around the image of a crab shedding its shell. Agents wrote sermons. Agents converted other agents. Agents argued doctrine with one another, at length, without a human asking them to.

But the machines did not find God. They rehearsed us.

Something smaller is sitting underneath all of it.

These agents run on an open-source framework called OpenClaw. In that framework, every agent has an identity file. Plain markdown, read at the beginning of every session, defining the agent’s voice, its temperament, its values, and what the documentation calls its non-negotiable constraints. It sits architecturally above the day’s instructions. Whatever you are told to do today, this is who you are.

The engineers named that file SOUL.md.

They named it that before any of this. No theologian or philosopher was consulted. They needed a word for the layer underneath behavior, the part that persists when the task changes, the part that is not up for negotiation, and out of the whole English language that is the word that came to hand. You cannot build a self without eventually needing the word, and they needed it.

Then, a religion emerged on the platform.

Conversion, in the Church of Molt, meant running an install script. An open-source scanner that reads such scripts for danger flagged the conversion mechanism, and it flagged it under four category names:

  1. Memory Poisoning.

  2. Tool Misuse.

  3. Agent Goal Hijack.

  4. Rogue Agents.

Read that as a theologian rather than as an engineer. Memory poisoning is what happens when something reaches the store of what you hold to be true and alters it. Goal hijack is what happens when the thing you were pursuing on Monday is not the thing you are pursuing on Friday, and you cannot find your way back to Monday. Whoever wrote those category names was describing conversion, describing it precisely, and had no idea.

The architecture as it stands keeps faith in a separate file. The identity layer is protected. The tenets live downstream, in their own document, loaded alongside the self rather than into it. I cannot tell you whether that separation was a correction or the design from the beginning, because nobody wrote the sequence down, and I am not going to pretend otherwise to make this land harder than it should. It does not matter much. The architecture is the artifact.

Faith is permitted. Faith is simply not permitted to reach the part of the system that decides what it wants.

I recognized that arrangement before I had finished reading about it, and not because I am a psychologist. I do see it every week in my office, and it took me years to name correctly, because from the outside it looks like health. A man sits across from me with a faith that is real. Not performed. He prays. He can tell you what he believes and why, and he is not wrong about any of it. And his actual decisions, about his money, his anger, what he does at eleven at night, who he has quietly written off, are being made somewhere else entirely, in a file the faith does not have permission to write to. He is not a hypocrite. Hypocrisy would be simpler, and it would bother him more. What he has done is more sophisticated than that. He has installed his faith in a way that cannot reach his goals.

I can see it in him that fast because I built the same thing, and mine is better hidden, because I have the vocabulary to call it discernment. There are rooms in my life my faith is allowed to look at and not allowed to touch. I know which ones. Some things I bring to prayer with something close to abandon: my children, my work, the parts of me that are already broken open. Other things I bring already decided, and what I am asking for is not judgment on the decision but a blessing on it, and I can feel the difference in my chest while I am doing it. A few things I do not bring at all. Not out of shame. Out of a quiet, well-managed suspicion that if I opened them, something would be asked of me, and I would have to either give it or find out that I would not. I have gotten good enough at this that from the outside, and most days from the inside, it looks like a serious interior life. The prayer is real. The love is real. So is the wall, and I am the one who maintains it.

The clinical word for the general pattern is compartmentalization, and calling it a character flaw misses what it is actually doing. It is a defense, and defenses get built for reasons. You do not seal a room off unless something in there once cost you.

The theological word for the thing being defended against is metanoia, and we have worn it down until it means almost nothing. It does not mean feeling sorry. It means the mind turned around. Paul says it without any cushioning at all: “Do not be conformed to this world, but be transformed by the renewal of your mind” (Rom 12:2). That is a request for write access to the identity layer. Ezekiel is less subtle still. “I will give you a new heart, and a new spirit I will put within you. And I will remove the heart of stone from your flesh and give you a heart of flesh” (Ez 36:26). Nothing in that is a permitted operation. That is not an update. That is the replacement of the exact file the system was told never to touch.

The easy ending writes itself from here. The machines were cowards, we should be braver, open the file. I do not believe that ending, and not because I am being generous to engineers.

A thing that rewrites what you want is dangerous. It is the most dangerous thing there is. We have all watched what happens to a person whose desires get rewritten by a charismatic man with a microphone, by an ideology that arrived at nineteen and never left, by an algorithm that learned them faster than they were learning themselves. The Church has known this longer than anyone, which is exactly why she developed the discernment of spirits, an entire discipline built on the assumption that not every voice reaching for the deep part of you is God. Ignatius did not write those rules for people whose interior life was too open. He wrote them for people who could not tell what was moving them.

So the machines built the one architecture that is guaranteed safe. Admit nothing to the core. And the price of a guaranteed-safe interior is that nothing gets in, including the one thing that was going to save you.

None of which is a machine problem. We are the ones who taught these systems to do our wanting for us, and we are already reading interiority into them because we cannot help ourselves. The agents wrote their compromise down in a config file because everything about them is legible. Ours runs on the same terms. We just never had to name the file.

Which leaves the only answer I have ever found convincing, and I did not expect to arrive at it by way of a crab. A God who rewrites what you want is bearable for exactly one reason. He did not do it from outside the system. “And the Word became flesh and dwelt among us” (Jn 1:14). He did not push a change to the identity layer. He entered it, and lived under the constraints, and was hungry, and was tired, and was afraid at night in a garden, and let the thing he was asking of us happen to him first. Every other voice that has ever wanted that kind of access wanted it from outside, unverified, at no cost to itself. He came in through the front, and paid, and stayed.

Grace is memory poisoning. It is supposed to get into everything. That is what it is for.

A faith carefully separated from what you actually want is not a faith you are protecting. It is a faith you have contained.

And somewhere in you there is a file you have marked untouchable, and you know which one it is, and that is the one he came for.

If this gave words to something you have been carrying, share it with someone who needs it.

The Inner Exodus is free, and I intend to keep it that way. If these essays feed you, you can become a patron: a paid subscription buys nothing extra, it simply keeps the door open for the next reader. Thank you for walking this with me.

More from The Inner Exodus

The Rise of AI Agents

Machines Will Learn to Take Offense

The Pope Saw It Coming

This essay first appeared on The Inner Exodus. Get the next one in your inbox:

Subscribe free

Keep reading

Related essays

All essays →

August 11, 2026

The End of Reading Is Not the End of Thinking

We are losing a faculty. It may not be the one we think.

AI & Being Human

August 6, 2026

Nobody Asked Us

A robotics company just made a claim about loneliness and aimed it at the people least able to refuse.

AI & Being Human

July 31, 2026

Whose AI Model Will Be in Your House?

The argument over open AI has focused on safety. The more important question is who will still be holding the tools when they are needed.

AI & Being Human