The Trivium as a Threat Model: Grammar, Logic, and Rhetoric as Defense-in-Depth Against the Adversarial Interlocutor

Modern education assumes a cooperative reader. Classical education did not. We argue that the medieval trivium — grammar, logic, and rhetoric — has been systematically misclassified as a curriculum when it is, on the plain reading of its own sources, a three-layer defensive architecture engineered against a funded, adaptive, and persistent adversary: the professional persuader. Under this reading, grammar validates what was actually said, logic verifies that conclusions follow, and rhetoric — taught last, and only to the already hardened — trains the defender on the attacker’s own tools. The architecture makes a sharp quantitative prediction: susceptibility to persuasion exploits should fall multiplicatively, $P=p_0{\prod }_i(1-d_i)$, not additively, with each layer held. We confirm this in two populations separated by a century and a half of curricular decay: an archival corpus of 4,112 Victorian responses to patent-medicine advertising (1849–1901), and a randomized modern trial ($N=240$) using formally valid "syllogistic phishing." Both populations fit a single curve, with full-stack protection reducing compromise eleven-fold. We then disclose a vulnerability present since deployment: text that merely looks like Latin inherits the accumulated authority of the classical corpus and inverts the defense entirely, raising compliance among our best-trained subjects from 4% to 52% (the Lorem Ipsum vulnerability). The trivium works; its most devoted users are its largest attack surface. We recommend the first curriculum patch since 1599.