My point was you only need to prompt a worm once, and then you are no longer the one prompting it, it prompts itself by definition from that point onward. Also

My point was you only need to prompt a worm once, and then you are no longer the one prompting it, it prompts itself by definition from that point onward. Also I think there was some confusion about the word "spreading" in the sibling thread. If the HF hack was done by humans we would have used the word spreading in that context, even though they were not replicating their minds. So spreading does not require replication. But we're either already at the point, or very close, where an open weight model could do a similar attack. So that actual replication could be involved. (I'm not sure what that would add, but I don't see what obstacles remain at this point.)