Probing typical black hole microstates

We investigate the possibility that the geometry dual to a typical AdS black hole microstate corresponds to the extended AdS-Schwarzschild geometry, including a region spacelike to the exterior. We argue that this region can be described by the mirror operators, a set of state-dependent operators in the dual CFT. We probe the geometry of a typical state by considering state-dependent deformations of the CFT Hamiltonian, which have an interpretation as a one-sided analogue of the Gao-Jafferis-Wall traversable wormhole protocol for typical states. We argue that the validity of the conjectured bulk geometry requires that out-of-time-order correlators of simple CFT operators on typical pure states must exhibit the same chaotic effects as thermal correlators at scrambling time. This condition is related to the question of whether the product of operators separated by scrambling time obey the Eigenstate Thermalization Hypothesis. We investigate some of these statements in the SYK model and discuss similarities with state-dependent perturba- tions of pure states in the SYK model previously considered by Kourkoulou and Maldacena. Finally, we discuss how the mirror operators can be used to implement an analogue of the Hayden-Preskill protocol.


Introduction
The black hole information paradox is a long-standing open problem, which is related to the smoothness of the black hole horizon [1,2]. The AdS/CFT correspondence provides an ideal setting to investigate the issue of smoothness. Large typical black holes in AdS are expected to be dual to typical high-energy pure states in the dual CFT. These typical black holes are approximately in equilibrium and hence do not evaporate. Even then, it is challenging to reconcile the smoothness of the horizon with unitarity of the dual CFT [3][4][5].
In this paper, we make some inroads into investigating the geometry of such a typical black hole microstate.
Owing to robust arguments in the AdS/CFT framework, it is widely believed that at large N the geometry of a typical black hole microstate contains at least the region exterior to the black hole horizon, which is described by the AdS-Schwarzchild metric. The question then is: do there exist any other regions in the geometry dual to a typical black hole microstate? It seems reasonable that any proposed answer to this question needs to satisfy two constraints: (1) the geometry in the exterior should be that of the AdS-Schwarzschild black hole, (2) the geometry should manifest the approximate timetranslation-invariance of the typical pure state in the CFT, through the existence of an approximate timelike Killing isometry. We discuss the time-translation-invariance of typical pure states in section 2.1.
In [2][3][4], it was suggested that the geometry of a typical black hole microstate contains only the exterior region, which gets terminated at the horizon by a firewall. However, for large typical black holes, the curvature near the horizon is low. Thus, this proposed solution demands a dramatic modification of general relativity and effective field theory in regions of low curvature.
In this paper, we will explore the possibility that the bulk geometry of a typical pure AdS black hole microstate contains part of the extended AdS-Schwarzchild diagram, as shown in figure 1. Since the dual of this geometry is a typical pure state in a single CFT, the Penrose diagram cannot be extended arbitrarily to the left and there is no "left" JHEP01(2020)062 CFT. The dotted line in figure 1 denotes a surface beyond which the geometry is not operationally meaningful. We will discuss the interpretation and other features of this geometry in later sections.
The proposal that the geometry dual to a typical microstate includes parts of the black hole, white hole and left regions, as depicted in figure 1, is suggested by the existence of CFT operators which have the right properties to represent these regions. These are the mirror operators, denoted by O, a set of state-dependent operators identified by an analogue of the Tomita-Takesaki construction applied to the algebra of single-trace operators O in the CFT. At large N , the operators O commute with usual single trace operators and they are entangled with them. They are the natural candidates to describe the left region of the extended black hole geometry. The black hole interior and white hole region would then be reconstructed by a combination of O and O.
Naively, the left region would be inaccessible from the CFT, at the level of effective field theory. However, starting with the work of Gao, Jafferis and Wall [6] and further work [7,8], a new approach has been identified for probing the space-time beyond the horizon, including the left region. This new approach, which was formulated in the framework of the two-sided eternal black hole, is based on the observation of [6] that in the case of the two-sided eternal black hole there are perturbations of the boundary CFTs of the form δH = O L O R , which can create negative energy shockwaves which can violate the average null energy condition and allow particles to traverse the horizon. This effect is related to the quantum chaotic behavior of out-of-time-ordered correlators (OTOC) at scrambling time in the boundary CFT [9,10].
In this paper, we provide evidence for the conjectured geometry of figure 1 for the onesided black hole, by perturbing the CFT Hamiltonian by the state-dependent operators O, in the schematic form δH = O O. These perturbations allow particles that are localized in the left region of the geometry dual to a pure microstate, to traverse the black hole region and emerge in the right region and get directly detected by single-trace CFT operators. This is schematically shown in figure 2. We emphasize that the use of state-dependent operators from the point of view of the boundary CFT falls within the standard framework of quantum mechanics 1 and is logically independent from the question of how the infalling observer can use these operators. Using these state-dependent perturbations by mirror operators, we argue that the consistency of the space-time geometry proposed in this paper, and shown in figure 1, requires as a necessary condition that CFT correlators of ordinary CFT operators should obey the following property: the effects of quantum chaos, which become important in out of time order correlators (OTOC) at scrambling time, should be the same -to leading order at large N -in typical pure states as in the thermal ensemble. We conjecture that this is true in large N holographic CFTs and provide some indirect evidence. Notice that this conjecture about the OTOC in pure states is a statement which is independent of the bulk interpretation, and in principle it can be either verified or falsified by CFT methods. A verification of this CFT conjecture would be a necessary condition for the validity of the geometry of figure 1.

JHEP01(2020)062
Finally, we argue that the mirror operators O can be used to implement an analogue of the Hayden-Preskill protocol [11], in its formulation given in [7]. Information thrown into an AdS black hole, which was originally in a typical state, can be recovered by deforming the CFT Hamiltonian by O O and then measuring a mirror operator after scrambling time. An analogue of this protocol can be applied to black holes in flat space after Page time. Then the mirror operators are mostly supported on the early Hawking radiation, which forms the larger fraction of the total Hilbert space. Interestingly, the protocol then becomes an analogue of the Hayden-Preskill protocol. The complicated nature and state-dependence of operators O is consistent with the fact that for the application of the Hayden-Preskill decoding protocol, the observer must have knowledge of the initial black hole microstate and apply a state-dependent decoding procedure.
The plan of the paper is as follows: in section 2 we provide details about the conjectured geometry of a typical black hole microstate. In section 3 we describe how time-dependent perturbations of the CFT Hamiltonian using state-dependent operators allows us to probe the interior. In section 4 we formulate and investigate some of our general statements in the SYK model. In section 5 we discuss the technical conjecture about the chaotic OTOC correlators in pure states and provide some evidence for its validity. In section 6 we discuss the connection of our experiments with the Hayden-Preskill protocol.
Part of the results of this paper were reported in a shorter note [12]. Other recent works which investigate the region behind the horizon of special, atypical pure states include [13][14][15][16][17].

On the interior geometry of a typical state
In this section we present a conjecture for the bulk dual of a typical black hole microstate in the framework of AdS/CFT correspondence. We review the construction of mirror operators, CFT operators that may describe the region behind the horizon. We also discuss how time-dependent perturbations of the CFT Hamiltonian by mirror operators can create excitations behind the horizon.

Typical black hole microstates and the "mirror region"
The Penrose diagram of an AdS black hole formed by collapse is shown in figure 3. In this paper we are not interested in black holes formed by collapse, but rather in understanding the geometry dual to a typical black hole microstate in the CFT. This is defined as a pure state which is a random superposition of energy eigenstates selected from a narrow energy band. Here c i are random complex numbers, constrained to obey i |c i | 2 = 1 , and selected with the uniform Haar measure. We take Understanding the geometry of a typical black hole microstate is an important question, as -by definition-typical states represent the majority of black hole microstates of given energy. In addition, understanding the geometry of a typical state is important for the AdS/CFT version of the firewall paradox [3,4,18]. As mentioned above, the reader should keep in mind the difference between typical states and states formed by collapse. The number of states which can be formed by "reasonable" gravitational collapse is much smaller than those predicted by the Bekenstein-Hawking entropy, see for example an early discussion in [19]. Also, notice that strictly speaking the class of typical states defined above are not exactly the same as the late-time configuration of a collapsing black hole. For example, the standard inequality 1 2 d A dt

JHEP01(2020)062
A and the energy respectively, implies that any state which undergoes gravitational collapse over a time-scale of the order of the AdS radius (hence there are observables A for which d A dt ∼ O(N 0 )) and which initially has a semi-classical description, i.e. ∆A ∼ O(N −1 ), must have an energy variance 2 which is ∆E ∼ R −1 AdS O(N ). Such states are somewhat different from the typical states with narrow-energy band (2.2) that we consider here. 3 Typical states in the CFT look almost time-independent when probed by simple observables, which do not explicitly depend on time, since where we introduced the microcanonical density matrix ρ m relevant for the window (E 0 , E 0 + δE) and we used the approximation of a typical microstate to the microcanonical expectation value reviewed in subsection 5.1.1. 4 In the last equality we dropped the trace using [ρ m , H] = 0. This suggests that the dual geometry to a typical pure state |Ψ 0 should be characterized by an approximate Killing isometry, which is timelike in the exterior region. A natural expectation within the AdS/CFT framework is that part of the dual geometry contains the exterior of a static black hole in AdS. For the benefit of the reader we summarise the relevant arguments in appendix A. A natural question then is, does there exist an extension of this geometry behind the black hole horizon? If the future horizon is smooth, then the dual geometry should contain at least part of the black hole interior. Since the ensemble of typical states is time-reversal invariant, we will conjecture that the dual geometry should also contain part of the white hole region. Finally, if the dual space-time contains parts of all these three regions, it is natural to assume that it should also contain part of the left asymptotic region. This leads us to the conjectured diagram in figure 3 for the dual geometry of a typical state. A typical state is in equilibrium so nothing is happening in it. Thus one may wonder what is the meaning of the statement that the dual geometry contains these regions. The operational meaning of this statement is that a class of perturbations of the boundary CFT can be described by low-energy effective field theory perturbations of the conjectured geometry. In other words, under a class of deformations the typical state responds "as if it had a smooth interior", partly extending into the left region. Notice that there is no left CFT, but rather the geometry is effectively inaccessible (and operationally meaningless) beyond the region indicated by the dotted lines, whose nature and location we will discuss later in section 2.3.
The left region of the conjectured geometry of a typical microstate is described by the "mirror operators", which we discuss below. The existence of a region, which is causally disconnected from the black hole exterior, is a consequence of the fact that the algebra A describing low-energy effective field theory experiments in the exterior has a nontrivial JHEP01(2020)062 . An alternative to our proposal: typical states have a firewall on the horizon. This would be consistent with the Killing isometry, but would correspond to modifications of general relativity at low curvatures. commutant A . Moreover, this commutant is entangled with A. The fact that the geometry in the left region should be a "mirrored copy" of the right region, at least up to some cutoff on the far left, follows from the algebraic construction of the mirror operators (2.8). In that construction we will notice that the commutant A is in some sense isomorphic to the original algebra. Combining together the small algebra A and its commutant A we get the black and white hole regions. We can think of the conjectured geometry dual to a typical state as a wormhole connecting the exterior of the black hole and the left interior region, which represents the space of the mirror operators. The operators O and O are entangled in a similar way as the two sides of the thermofield state, and the emergence of the wormhole is reminiscent of the ER/EPR proposal [23]. The meaning of this proposed geometry is that we can use effective field theory on it to compute CFT correlators. These correlators can be localized within a finite time domain on the boundary, of the order of few scrambling times. In particular, the domain of validity of the conjectured diagram does not need to capture experiments extended over arbitrarily long time-scales. On the other hand, the finite time domain mentioned can be centered around any time, thus allowing us to access arbitrary regions in the proposed geometry.
It is important to consider what could be a possible alternative to the proposed geometry of figure 3. It is natural that the geometry will have to be consistent with the Killing isometry, at least in some approximate sense. One extreme possibility consistent with this symmetry is that the spacetime terminates on the past and future horizons, by a firewall or other object as indicated in figure 4. 5 This would violate our expectations from general relativity in a regime of low curvatures. If we want to avoid this scenario and if we want to preserve the smoothness of the horizon then we need to extend the geometry behind the horizon, up to some cutoff which must be consistent with the Killing isometry.

The mirror operators
The conjecture that a typical black hole state should be associated to a geometry, which has a smooth interior and moreover contains part of the left region follows from the construction 5 Here by "firewall" we broadly refer to any kind of structure at the location of the would-be-horizon, which would drastically modify the experience of the infalling observer from that predicted by general relativity.

JHEP01(2020)062
of the "mirror operators", which was introduced in [24][25][26]. Similar conclusions from a somewhat different perspective were reached in [27][28][29]. The construction of the mirror operators starts by defining a small algebra of observables A, which correspond to simple experiments described in effective field theory in the bulk. In a large N gauge theory A can be thought of as generated by products of a small number of single trace operators of low conformal dimension. Further details about the definition and limitation of the small algebra can be found in the references mentioned above. Here we only emphasize that technically the set A is not a proper algebra, since we define it as the set of small products. However, in the large N limit this limitation is not important for what follows, so we will continue to refer to A as an algebra.
Given a typical black hole microstate |Ψ 0 , we define the "small Hilbert space", also called code-subspace, as This subspace of the full CFT Hilbert space, contains all states that one can get starting from |Ψ 0 and acting on it with a small number of bulk operators. Hence, this subspace is the one relevant for describing effective field theory in the bulk. 6 An important algebraic property is that operators of the algebra A cannot annihilate the state |Ψ 0 . This can be understood, for example, by noticing that for A ∈ A we have which is positive if we ignore the subleading corrections. Here we used the approximation of a typical pure state by the thermal ensemble, which is expected to be very good at least at leading order in large N. The fact that A contains no annihilation operators for |Ψ 0 means that for the representation of the algebra A on the code subspace H |Ψ 0 , the state |Ψ 0 is a cyclic and separating vector. As suggested by the Tomita-Takesaki theorem, see for example [30] for a review, this implies that the representation of the algebra A on the subspace H |Ψ 0 is reducible and the algebra has a non-trivial commutant A acting on H |Ψ 0 . The elements of A are operators which commute with all elements of the algebra A, and geometrically in the bulk correspond to local fields in a region which must be causally disconnected by the black hole exterior. It is natural to identify the region corresponding to A with the left asymptotic region.
The commutant A can be concretely identified by an analogue of the Tomita-Takesaki construction where J is an anti-unitary operator called modular conjugation and S is a general antilinear map. Moreover, using large N factorization and the KMS condition relevant for JHEP01(2020)062 equilibrium states, it is possible to show [26] that at large N the CFT Hamiltonian acts on the code subspace similar to the (full) modular Hamiltonian where we assume that the energy of |Ψ 0 is highly peaked around E 0 .
To be more concrete, we will construct the small algebra A starting with single-trace operators in frequency space and later we discuss their Fourier transform to the time coordinate. The algebra A is defined as where n N . Of course this linear set is not a proper algebra as we demand n N , for example we are not allowed to multiply together N single-trace operators O ω i . However, if n is very large (but much smaller than N ) this set behaves approximately as an algebra for correlation functions involving a small number of operators. Moreover, the fact that A is not a proper algebra is important for the realization of the idea of black hole complementarity, as has been discussed in detail in [24,26]. Nevertheless, we will continue referring to A as the "small algebra". Now we clarify the nature of the Fourier modes generating the small algebra A. We first consider the exact Fourier modes of operators, defined as (2.11) Usually ω takes values in (−∞, ∞). However, for the construction above we need to restrict the range of ω in some ways: i) Since the spectrum of the dual CFT is assumed to be discrete, 7 then for generic choice of real ω there will be no pair of states such that E i − E j = ω. Hence, if ω is a generic real number, the operator O exact ω defined by (2.11) will be zero. To avoid this we can bin together sets of frequencies in bins of size δω, which can be very small given that the typical energy level gap is β −1 e −S . Therefore, we define the coarse-grained frequency operators where now the set of allowed ω's is discretized with step δω. In (2.12) we have divided by √ δω in order to have an operator whose correlators are stable under small changes of the bin size δω. We will denote these coarse-grained Fourier modes simply as O ω , without explicitly showing the choice of step δω, which is not important for most calculations. Alternatively to the binning procedure, we can think of the O ω in a distributional sense, where we always use these operators inside integrals over ω.

JHEP01(2020)062
ii) We need to impose an upper cutoff in the allowed frequencies |ω| ≤ ω * . The reason is that the mirror operators are meaningful when the small algebra cannot annihilate the state. In a thermal state we find that O † ω O ω ∝ e −βω . For large ω this is extremely close to zero, implying that the operator O ω almost annihilates the state. It is possible, and sufficient for our purposes, to take ω * arbitrarily large but N -independent. We will discuss this and the possibility of scaling ω * with N in subsection 2.3.
iii) If we want to describe the part of the black hole interior relevant for experiments initiated around some time t 0 in the CFT, then for the definition of the mirror operators we need to consider CFT operators which are localized only within a time band t 0 ± T max , where T max is at least as large as several times the scrambling time. This means that the Fourier modes should be defined with respect to this IR-cutoff in time, which in turns effectively leads to a discretization of frequencies of order 1 Tmax . If T max is large enough, this does not affect correlators significantly, see also the relevant discussion in [24]. Since our experiments are contained inside a time band given by T max we do not probe the infinite past and infinite future of the state.
From (2.8), (2.9) follows that at large N the mirror operators are defined by the equations 8 (2.13) The last equation implies that the mirror operators are "gravitationally dressed" with respect to the CFT, i.e. the right boundary of the Penrose diagram. For the purposes of this paper we extend these equations to define the mirror operators, even when we include 1/N effects. The extension of the definition of O to subleading orders in 1/N is not unique, and for the reconstruction of local bulk fields more care about this issue should be taken. However, for the thought experiments we set up later, we will take (2.13) as the definition of the mirror operators even including 1/N corrections. One drawback of this choice is that it makes the hermiticity properties of the mirror operators somewhat more complicated, as explained in the paragraph below. On the other hand, this choice makes the comparison with the eternal black hole simpler, hence we will continue using it in this paper. We now come to the hermiticity properties of the mirror operators defined in (2.13). In particular from this definition it follows that to leading order at large N we have O −ω = ( O ω ) † , but this may no longer be true at subleading orders in 1/N . To see that, consider the matrix elements of these operators on two general states in the small Hilbert space, 8

JHEP01(2020)062
which can be written as A|Ψ 0 and B|Ψ 0 with A, B ∈ A. We have (2.14) In general it is not possible to argue that these two will be the same, which suggest that in However, if we approximate correlators on typical pure states by thermal states, an approximation we will discuss extensively in section 5, we find where ρ β is the thermal density matrix. Finally we use the KMS condition for the thermal state, which implies Tr , to conclude that within the code subspace we have In particular this means, for example, that the operator O ω + O −ω is Hermitian up to 1/N corrections. We close the issue of hermiticity by saying that other extensions of the definition of mirror operators to subleading orders in 1/N have more manifest hermiticity properties and they may be more useful for other purposes. 9 Because of the restrictions in frequencies that we have imposed above, it is not meaningful to define the mirror operators for sharply localized operators O(t). As we will discuss later, in section 2.3, this is related to the fact that we do not expect to be able to reconstruct the entire left asymptotic region. We can still try to define approximately localized mirror operators O(t) by using only the available Fourier modes, but the resulting operators will not behave as sharply localized operators. The approximation becomes better as we increase the cutoff ω * .
We also emphasize that the equations (2.13) are supposed to hold only inside the code subspace. This means that the operators O do not need to commute with the operators in A in an exact operator sense, but only when their commutator is inserted inside low-point correlation functions in the small Hilbert space. This is related to the idea of black hole complementarity.

Time dependence of mirror operators
Since we will be considering time-dependent perturbations of the CFT Hamiltonian, it is necessary in this context to specify the CFT time when the mirror operators are applied, or at least specify a time ordering between them and also with the normal operators. Specifying the action of the operators on the small subspace H |Ψ 0 , as in (2.13), is not sufficient to know the time when the operators act. This issue is discussed in more detail in appendix B. JHEP01(2020)062 We will associate the mirror operators to physical time in the CFT in such a way that when we consider time-dependent perturbations of the CFT Hamiltonian with mirror operators, then the result can be described by effective field theory in the bulk. In terms of the conjectured Penrose diagram, the requirement of having a consistent effective field theory description in the bulk requires that as the CFT time t increases the corresponding mirror operators must move "upwards" on the left side of the diagram -the opposite choice would not lead to a globally consistent bulk causal structure. Imposing this condition we find a one-parameter family, labeled by T , of useful choices 10 for how to localize the mirrors in physical time. For each choice of T we define where t labels the physical CFT time at which the operator is localized. These timedependent real-space operators are the Fourier transform of a function which has i) an upper cutoff in ω and ii) the frequencies are discretized. The discretization of frequencies does not impose a serious restriction at time-scales of O(1), given that δω can be very small. On the other hand the upper cutoff ω * means that we should not be trying to resolve time with resolution smaller than ∆t ∼ 1 ω * . Time-dependent perturbations of the Hamiltonian by mirror operators have a simple bulk interpretation if the same choice of T is used for all mirror operators in the calculation. It does not matter what T is, but one should not mix mirror operators with different choices of T , or else the bulk dual would be complicated. Notice that the choice of T can also be understood in terms of representing the typical microstate in terms of the "time-shifted eternal black hole" [31], where we move one of the two boundaries by a large diffeomorphism corresponding to time translation by T .
We think of the operators O T (t) as acting at physical CFT time t. This means that, for given and fixed choice of T , different mirror operators are time-ordered according to JHEP01(2020)062 the obvious way with respect to the parameter t. i.e. a perturbation by O T (t 1 ) can affect operators O T (t 2 ) if t 2 ≥ t 1 . Notice the important minus sign in the exponential in (2.17), relative to what one would naively expect for the inverse Fourier transform in the conventions of (2.11) and from the fact that O seems to be associated to O † ω from the first equation of (2.13) . This minus sign can be thought of effectively as a time reversal around t = T . This minus sign also implies that in the Heisenberg picture, these operators obey (2.18) The fact that this is the opposite evolution than the usual one implies that if we think of them as operators in the Schroedinger picture they are explicitly time-dependent, in such a way that effectively they behave as if they were running backwards in time i.e. in Schroedinger picture with physical time t we would have the explicit time-dependence In the rest of this paper we will be working with the choice T = 0. For notational ease we will write O T =0 = O.
Finally, as we discussed in the previous section, and in particular equation (2.16), the operator O T (t) is not Hermitian at subleading orders in 1/N . Hence if we want to use it as a perturbation to the CFT Hamiltonian we need to add subleading 1/N corrections to the operator, to ensure that the perturbed Hamiltonian is Hermitian. Provided that typical state correlators can be well approximated by thermal correlators at large N , a condition that we will formulate as a technical conjecture in section 5, these subleading corrections necessary to promote (2.17) into a Hermitian operator will not alter the relevant results to leading order. For the rest of this paper whenever we discuss perturbations involving O we will always assume that we have dressed up the operator so that it is Hermitian.

On the boundary of the left region
Since we are considering the geometry dual to a single CFT, we do not expect to be able to reconstruct the left region of the Penrose diagram all the way towards asymptotic AdS infinity. This is related to the fact that we are not able to define the mirror operators for sharply localized operators in time, or equivalently it is related to the cutoff frequency ω * that we introduced in section 2.2. If we think of a wavepacket in the background of an AdS Schwarzchild black hole, then if we want to localize the packet close to the boundary we need to use high frequencies ω. If we have a cutoff in the allowed frequencies |ω| < ω * then any wavepacket constructed with this cutoff will have limited reach towards the boundary. In the limit of large ω * we find that this translates into a cutoff in the usual r-coordinate in global AdS 11 as r < r * , r * ∼ ω * . (2.20) Here we are working in units where R AdS = 1. This estimate follows from the gravitational potential of AdS and from analyzing what frequencies are necessary in order to localize 11 These are coordinates where empty global AdS would have the form ds 2 = −(1 + r 2 )dt 2 + 1 1+r 2 dr 2 + r 2 dΩ 2 d−1 .

JHEP01(2020)062
wavepackets around a particular region of r. Hence, the question of how far towards the left we can extend the geometry depends on the cutoff ω * . First we start with a conservative estimate: if we take the large N limit, we can take ω * to be as large as we like, provided that it is not N -dependent. This also means that the cutoff r * can be arbitrarily large, though N -independent. In particular this means that the left geometry can be extended to (arbitrarily) many times the Schwarzschild radius of the black hole towards the left. This is sufficient to formulate most of the thought experiments that we want to consider. Of course it is interesting to understand how far the left region extends. In order for the geometry to be operationally meaningful, a probe must be able to explore it. Any probe in the left region should be thought of as a spontaneous out of equilibrium excitation "borrowing" energy from the black hole. Hence the black hole mass provides an upper limit to the energy that these probes can have. Taking into account the redshift factor near the AdS boundary we find that this implies an ultimate upper bound r * ∼ M or r * ∼ O(N 2 )but the actual bound may be much smaller. This is consistent with the fact that the mirror operators can not be defined for frequencies of order ω ∼ O(N 2 ), since O † ω O ω ∼ e −βω is almost zero, see discussion in section 2.2. So far we have identified that the left region can be reconstructed at least up to r * ∼ α where α can be arbitrarily large but N independent, and at most up to r * ∼ O(N 2 ). The actual cutoff region must lie somewhere in-between. We have not been able to identify the more precise limit of the bulk reconstruction but this is clearly a very interesting question. We would also like to pose the following question: what happens to the space-time when we approach this cutoff region? Our conjecture is that there is no breakdown of effective field theory anywhere in the left region, but the limitation of the reconstruction arises simply from the fact that there is a restriction in the energies of the allowed probes moving in the left region. In particular, the energies of the allowed probes are bounded and this bound is what makes it impossible, even in principle, to probe the far-left region of the Penrose diagram and not a breakdown of bulk effective field theory. This situation is very different from that of non-typical states. For a class of such states, it was suggested that the bulk geometry has a left region bounded by some kind of end-of-the-world membrane [8,13], which plays the role of a hard cutoff.

Comments on the Hamiltonian
Let us call M the ADM mass as measured in the bulk from the right side of the black hole. We argued above that the effective cutoff on the left can be pushed quite far when we are working in the large N limit. Hence it is natural to define an analogue of the left ADM mass M . The first law [32][33][34][35][36] applied to the two-sided Cauchy slice Σ up to the left cutoff implies where K full bulk = Σ * (ξT bulk ), ξ is the Killing vector field and T bulk is the bulk stress tensor corresponding to EFT excitations in the left and right regions. The quantity K full bulk can naturally be split into the right and left contributions K full bulk = K − K. Since we consider the O operators to be gravitationally dressed with respect to the right, we have δ M = 0.

JHEP01(2020)062
This means that in the small Hilbert space the CFT Hamiltonian acts as where E 0 is the energy of |Ψ 0 . We notice that according to the identification (2.22) excitations which are created in the left region by right-dressed operators have negative energy with respect to the CFT Hamiltonian. We provide a perhaps pedagogically more direct demonstration of the negative energy of excitations in the left region by considering a particular class of perturbations in appendix C. This negative energy is also related to the following point: the "physical time", i.e. the time ordering, for the left region is taken to be pointing upwards in the Penrose diagram. On the other hand taking commutators with the CFT Hamiltonian moves the points downwards. In other words the geometric action of H coincides with the Killing vector field. This means that "physical time evolution" in the mirror region is not generated by H but rather by −H. The reason this happens is that if we think of the mirror operators as being localized in time according to the rule of the previous subsections, then these mirrors are actually explicitly time-dependent operators, as discussed around equation (2.19). Hence their physical time evolution in the Heisenberg picture is not given by , since the explicit time dependence in the Schröedinger picture has to be taken into account.

Perturbations of typical states
In this paper, we only analyze small perturbations of the quantum fields on top of the background geometry. These correspond to excitations which change the CFT energy by factors of O(N 0 ).
Typical states are closely related to equilibrium states, defined as states on which simple correlators are almost time-independent. In the rest of this paper we will be discussing various perturbations of a typical state |Ψ 0 . These perturbations can either be thought of as excited autonomous states, or as states where we actively perturb the system by turning on sources, or combinations of the two. Here we present some examples.

Autonomous excited states
We use the term "autonomous states" to refer to quantum states where the Hamiltonian of the theory is not modified as a function of time. Hence, the entire history of the state is given by time evolution with respect to H CFT and we are computing correlators on that state. This has to be contrasted with "actively-perturbed states", where we modify the CFT Hamiltonian for some period of time.
In AdS/CFT for autonomous states we do not turn on any sources on the boundary. Thus states are given as initial conditions and evolve with a time independent hamiltonian after that, for example where |Ψ 0 is a typical state. The state |Ψ can be thought of as a state which was prepared to undergo a spontaneous fluctuation out of equilibrium at around t = t 0 . The unitary JHEP01(2020)062 could be something of the form e igO(t 0 ) , appropriately smeared. For t t 0 the state looks like an equilibrium state. At around t = t 0 an excitation seems to be emitted from the past horizon, coming from the white hole region, reaches a maximum distance in AdS and falls back into the future horizon. The difference of energy between |Ψ and |Ψ 0 is where ρ β = e −βH Z and we used the approximation of a typical state by a thermal ensemble. This way of organizing the computation aims at keeping the error terms at O(1/S). If we ignore the 1/S corrections, and use the positivity of the relative entropy, we find that ∆E ≥ 0. To see that, we consider S rel (ρ|σ) for σ = ρ β and ρ = U ρ β U † . We have S rel = ∆K − ∆S ≥ 0. For these two density matrices we have ∆S = 0 hence ∆K = These are states which are prepared to undergo a spontaneous fluctuation out of equilibrium at around t = t 0 , but now in the space of mirrors. The two types of autonomous nonequilibrium states that we have already discussed are schematically depicted in figure 6. The states (2.25) can also be written as [20] for more details. If we now estimate the leading order change of the energy we find It is interesting that we now find ∆E ≤ 0. This is consistent with the discussion of the previous subsection, where we argued that placing excitations in the left region lowers the JHEP01(2020)062 energy of the CFT. This may seem a little surprising, as we are arguing that the fixed can lower the energy of a typical state, which at first sight seems to be inconsistent with the fact that there are fewer states at lower energies. The resolution of this apparent puzzle was discussed in detail in [20]. We provide a more explicit example of how this works in the SYK model in subsection 4.1.1.
Of course we can also consider more general perturbations involving combinations of excitations in both regions.

Perturbations of the Hamiltonian
We can also consider states where the Hamiltonian is perturbed at some particular moment in time, for example where A(t) is Hermitian operator localized at time t and f (t) is some smearing function, peaked around some particular t 0 . The operator A can be made out of the O's or the O's or both, but it is important that all the constituents of A are localized at the physical time t. The most familiar type of perturbation is to take A(t) to be a simple operator made out of local CFT operators O(t). This injects some energy into AdS from the boundary. In some approximation it can be described by a shockwave falling into an AdS black hole, as shown in figure 7. If A is a sharply localized local operator, then in some sense the excitations are created near the boundary of AdS. We could also consider smeared A's, for example using the HKLL construction, so that the excitations can be created at some finite depth in AdS. The states that are produced by the time-dependent perturbation (2.29) have the property that at time t > t 0 they look like the corresponding autonomous states (provided A has been smeared), while for t < t 0 they look like equilibrium states.
As we discussed before, the boundary perturbation increases the energy of the state. In a shockwave approximation the spacetime before the perturbation has mass M while after the perturbation it has mass M + δM . The matching conditions across the shockwave relate δM to the stress tensor on the shockwave. We can consider excitations created in the left region,

JHEP01(2020)062
by perturbing the Hamiltonian with an operator A constructed out of the mirror operators O. 12 In the shockwave approximation we see the spacetime diagram in 7. For a consistent bulk effective field theory interpretation it is important to use the specific precursors of the mirrors which localize them at the appropriate value of physical time. Notice that since the operators O are gravitationally dressed with respect to the right, an active perturbation of the CFT Hamiltonian by O will introduce a gravitational Wilson line in the bulk extending from the right boundary all the way into the left region where the shockwave seems to originate, see for example [37]. At order O(1/N 2 ) these gravitational Wilson lines will backreact on the geometry and their effect has to be included as contributing to the Einstein equations. Understanding the effect of these Wilson lines on the trajectories of probes in the bulk is an interesting question, which we discuss in some more detail in subsection 3.2.3, but we postpone a more complete analysis to future work. It is interesting to consider the backreaction of the shockwave. Since the operators are gravitationally dressed with respect to the right, the left-mass of the spacetime does not change. On the other hand the right mass below the Wilson lines will be M while above the Wilson lines M + δM . As we saw before, the effect of perturbing the CFT Hamiltonian by O leads to δM < 0, which corresponds to lowering the CFT energy. We remind that this is not inconsistent with the 2nd law of thermodynamics, because the perturbation is state-dependent.
Finally we can consider perturbations A(t) which are made out of both O's and their mirrors. It is important that these operators are localized at the same physical time. We will be interested in the particular class of perturbations of the schematic form (2.31) This produces two shockwaves as indicated in the figure 7 and as we will argue is the 1-sided analogue of the double-trace perturbations introduced in [6]. We will discuss this type of perturbation in more detail in section 3.

Traversable one-sided black holes
In this section we will discuss in detail the state-dependent perturbation of the class (2.31), which we write more precisely as We assume that originally the CFT is in a typical pure state |Ψ 0 . Here O are the mirror operators defined by (2.13) with respect to |Ψ 0 . As discussed before, we implicitly assume that these operators are supplemented by appropriate 1/N corrections to make them Hermitian. In the expression above we think of the operators as in the interaction picture. The function f (t) is taken to be highly peaked around some time, say t = 0. Here and JHEP01(2020)062 hereafter, we assume that the simple operators O(t) as well as the mirror operators O(t) have uniform support over the entire space domain We could also consider generalizations where the perturbation uses many light operators , which simplifies some computations at large K [7]. We discuss some details of the operator V in subsection 3.2. Our goal in this section is to use properties of the typical state |Ψ 0 and the operator V to provide evidence that typical states in the CFT correspond to the geometry proposed in figure 1. In particular, this will be evidence that typical black holes in AdS have a smooth interior and a leftexterior region with an effective cutoff, as depicted in Penrose diagram 1. Our analysis will involve doing two thought experiments in the CFT.
• In Experiment 1, we imagine sending a probe made from a mirror particle φ at time −t * , which is of the order of scrambling time β 2π log(S). Then we turn on the perturbation V to the Hamiltonian at time t = 0. Finally we compute the expectation value of a simple operator in the CFT on the resulting state. If there is a signal of the expected form, that would imply that the mirror particle escaped the horizon. This experiment is depicted in figure 8 and described in subsection 3.3.
• In Experiment 2, we throw in a particle φ into the black hole at time t = −t * . The perturbation V is then turned on at time t = 0. We then compute the response of the signal φ on a mirror operator φ at time t = t * . A non-vanishing response implies the ability of a boundary observer to reconstruct a message thrown into the black hole using the mirror particles. This experiment is reminiscent of the Hayden-Preskill protocol [11]. We will elaborate on this connection in section 6. This experiment is depicted in figure 9 and described in subsection 3.3.2.
Both experiments involve calculating out-of-time-ordered correlators in the typical state |Ψ 0 . In fact, using the defining properties of the mirror operators (2.13), we will show that these correlators are approximately equal to left-right correlators with the same structure in the two-sided black hole geometry perturbed by a double-trace operator. We will discuss the errors appearing in this approximation, which are small in the large N limit. The leftright correlators in the two-sided black hole geometry were analyzed in [6] and [7]. We will thus review their calculation first.

Double-trace perturbation of the two-sided black hole
We will now review some aspects of the works [6,7], where it was argued that a timedependent double-trace perturbation to the two-sided black hole makes the wormhole connecting the two sides traversable. The eternal two-sided black hole is dual to the thermofield double state (TFD) which is 3)

JHEP01(2020)062
where the sum is over all energy eigenstates, and β is the inverse temperature of the black hole. No information can be transferred between the left and the right CFT, since the operators on the left and right commute [O R , O L ] = 0. However, coupling the two CFTs with a double-trace perturbation as allows for transfer of information between the two CFTs. Here, O R , O L are again integrated over all of space. In [7] the perturbation was written as a sum over many fields. In principle we would compute the effect of this perturbation in the interaction picture by a time-ordered exponential The transfer of information between the CFTs can be diagnosed using the correlator which is the one-point function of a field φ R (t) in the right exterior region sourced by a field φ L (−t * ) in the left exterior region, in the presence of the double-trace perturbation.
Here t * is of the order of the scrambling time β 2π log S. For appropriate sign of g it was shown in [6,7] that indicating information transfer.
In the bulk, the double-trace perturbation can be thought of as inserting O(N 0 ) energy into the bulk which propagates almost lightlike and thus represents two shockwaves falling into the black hole, from both of the boundaries. One can also find a post-perturbation geometry that is smoothly glued along these shockwaves. These shockwaves backreact on the eternal black hole geometry such that the IR of the geometry is changed [6]. In particular, for an appropriate sign of g, the quantum stress energy tensor of these shockwaves violates the averaged null energy condition, and thus allows for the wormhole to become traversable. The traversability can be seen by a non-zero commutator of two matter fields in the left and the right exterior region, captured for example by the correlator (3.6), thus allowing for transfer of information between the two boundaries.
It is instructive to discuss the quantum stress energy tensor in some more detail. For a scalar bulk field with mass m in the right exterior region, it is given by Its expectation value in the state perturbed by (3.4) can be calculated using the pointsplitting method

JHEP01(2020)062
where the short distance singularities have to be subtracted. One then only needs to know the corrected bulk two-point function G(x, x ) of field φ(x) with itself, which can be computed in perturbation theory in g [6] G where t 0 is the time before which the function f (t) vanishes, G 0 denotes the two-point function in the absence of the perturbation and we have suppressed space coordinates. This can be further simplified using [φ, O L ] = 0 since we assumed that φ is in the right region. For the calculation of the O(g) term the entanglement between the two CFTs plays a crucial role. If the two CFTs were in a state very different from the TFD state, firstly there would be no wormhole in the bulk and secondly a simple double-trace perturbation would not lead to a drastic modification of the bulk two-point function.
For the wormhole to be traversable, certain no-go theorems of semi-classical gravity need to be avoided. These often use the average of the local energy, which is where the null coordinate u runs along the semi-infinite null geodesic very close to the horizon and K µ denotes a unit vector tangent to it. It was checked in [6] that the zeroth order term in g in (3.9) coming from G 0 (x, x ) integrates to zero, as expected. At the first subleading order, i.e. at O(g), we already see that the averaged null energy is proportional to g, with the proportionality function being the null integral over derivatives of the subleading two-point function. It was shown in [6] that for appropriate choice of g we have This shows that the wormhole can be made traversable.

State-dependent perturbations in a single CFT
From now on we consider a single CFT. The typical, heavy pure state in the CFT is a microstate of a typical large black hole in AdS with one asymptotic boundary. Consider the time-dependent perturbation to the CFT Hamiltonian 14)

JHEP01(2020)062
where O is a simple operator and O is its mirror defined in subsection 2.2. As discussed in the beginning of section 3 the smearing function f (t) is assumed to be highly peaked around t = 0. The operators are uniformly smeared on the spatial sphere on which the CFT is defined. Remember that the operators O(t) have been defined so that they contain frequencies only up to some cut-off ω * . We similarly define the operators O(t) to be somewhat smeared in time, so that they also contain frequencies up to ω * . As in [7], we can also consider perturbations involving a sum over many different pairs of operators of

Energy change after the perturbation
A natural diagnostic to study after the perturbation is the change in the energy of the typical state |Ψ 0 . The total energy of the state after the perturbation is given by The energy before the perturbation is fixed in terms of the coefficients c i and the eigenvalues E i that define the typical state |Ψ 0 . Expanding up to first order in g we find It is easy to see that the first order term is zero. We consider the two-point function Using equations (2.13) and (2.17), this two-point function can be shown to be a function only of t 1 + t 2 . Then the O(g) term in equation (3.18) simplifies to where we used the explicit time-dependence of the mirror operators, which gives the minus sign in front of ∂ t 2 .
It is instructive to compare this to the change in energy of the thermofield double state after a double-trace perturbation e ig O L O R . Even the order O(g) change in energy is non-zero [6], as one sees from the non-zero value for the correlator

JHEP01(2020)062
which is generally non-zero. This change in energy clearly is reflected in the change in the ADM mass of the perturbed eternal black hole solution. This raises the interesting question that in the case of a single-sided black hole, what is the bulk interpretation of the fact that the total energy does not change (3.20) upon acting by the perturbation, equation (3.16)? We will discuss this question in the next subsection, where we consider the bulk properties and effects of the perturbation. Notice that if in the thermofield case we consider the first order variation of the modular Hamiltonian H R − H L , then it is zero to first order as δH R = δH L . This is analogous to the one-sided case, where expectation value of the modular Hamiltonian H − E 0 also does not change as we found above in (3.20).
A more direct method to calculate the energy change is to write the operators in terms of spatial Fourier modes and similarly for the mirror operators (subject to the cutoff ω * ). Here Y lm denote spherical harmonics on S d−1 . Since we will be working with s-waves, we will for now drop the angular momentum indices. We define the two-point function G(ω) by the equation 13 At large N we expect that we will have similar results for the pure state: Finally using the definition of the mirror operators (2.13) we can express the two-point functions between mirror Fourier modes, as well as ordinary and mirror Fourier modes in terms of the single function G(ω). Putting all this together, we can compute the first order change of the energy Here we have ignored the bound ω * on the frequencies for the mirror operators, which does not play a role in this calculation. The fact that O and O have opposite commutators with the CFT Hamiltonian plays an important role in making this energy change equal to zero.

Shockwaves in one-sided black hole
We would now like to discuss the bulk interpretation of the state-dependent perturbation This perturbation creates shockwaves of infalling matter both in the right and left region, very similar to those in the eternal black hole. These effects are of order O(N 0 ) and in that sense they correspond to quantum matter, rather than classical configurations of matter. If the leading order metric is normalized to be O(N 0 ), then the backreaction of this quantum matter on the geometry modifies the metric only at order O(1/N 2 ). We do not yet have a complete understanding of the backreacted geometry at order O(1/N 2 ). The reason is that the operators O have been gravitationally dressed with respect to the right. Hence the quantum matter that they create in the left exterior region of the Penrose diagram should be accompanied by appropriate gravitational Wilson lines, which extend all the way from the left region toward the CFT on the right. These gravitational Wilson lines have to be taken into account when considering the correction to the metric at the O(1/N 2 ) order.
In order to compute the O(N 0 ) modification of the quantum state of the fields we follow a procedure similar to that discussed in subsection 3.1. We first compute the quantumcorrected bulk two-point function G(x, x ) of a scalar field φ(x) that is dual to the operator O used in the double-trace perturbation (3.27). This leads to an equation very similar to (3.10) where U g is given in (3.18). From the definition of the mirror operators (2.13), it follows that the correction to the bulk two-point function in the typical state is the same as that in the eternal black hole (3.10). Hence, at order O(N 0 ), we find that the scalar field φ(x) has the same bulk stress tensor as the one discussed in subsection 3.1. This stress tensor corresponds to a shockwave falling into the black hole from the right region, as can be checked by direct calculation. A similar calculation can be done for the left region. We consider the part of the left region which is within a few Schwarzchild radii from the bifurcation point. In that region the local bulk field φ can be reconstructed, for example by an analogue of the HKLL prescription, where we will use the mirror operators O instead of the usual operators O.
In that region, and in the limit of large ω * , the bulk two-points function is the same (up to the obvious left-right reflection) as the bulk two-point function in the right region. We can compute the effect of the perturbation (3.27) by following a similar analysis as in (3.28), with the obvious replacements φ ↔ φ. The final conclusion is that (3.27) produces a shock-wave like stress tensor in the left region.

JHEP01(2020)062
All in all, we find that to order O(N 0 ) the perturbation (3.28) creates two shockwaves of infalling matter which are similar to the two-sided case. By selecting the sign of g appropriately we can make sure that these shockwaves have negative null energy. We emphasize that the existence of the shockwave on the right is completely unambiguous as it follows directly from a the algebraic properties of the O operators and their effect on HKLL operators via the perturbation (3.27). On the other hand the interpretation of the left shockwave relies on our conjecture about the geometry of the typical state, and that the operators O physically describe the left region.
Also notice that while in the figures we depict the left shockwave as if it was coming from a sharply defined region of the left boundary it should be kept in mind that given that we only use frequencies |ω| < ω * the shockwaves are always somewhat smeared in time.

Gravitational Wilson lines and the backreacted geometry
In addition to the two shockwaves, the perturbation (3.27) creates gravitational Wilson lines extending all the way to the left. This is because the operators O are gravitationally dressed with respect to the right, in particular they do not commute with the CFT Hamiltonian. The gravitational Wilson lines are spherically symmetric. This follows from the definition of the mirror operators (2.13). There we have implicitly assumed that the mirrror operators are defined so that they commute with the boundary stress tensor, once its zero mode has been removed. This means that [ O, T 00 ] = 0, where T 00 ≡ T 00 − H/V , where V is that spatial volume of the sphere where the CFT lives. This is part of the definition of the mirror operators and other choices could be made which would result in non-spherically symmetric gravitational dressings of the mirror operators.
The existence of the gravitational Wilson lines is important in order to understand the vanishing energy change (3.20) at first order in g under the perturbation (3.27). This perturbation creates a negative energy shockwave in the right region. At the same time the perturbation inserts gravitational Wilson lines due to O, which has positive energy with respect to the CFT Hamiltonian. The Wilson lines encode the CFT energy of the left shockwave. That shockwave has negative local energy, but as it lies in the left region it has positive energy from the point of view of the CFT Hamiltonian, see for example appendix C. Considering both effects, and to leading order in g, we find that the energy remains the same and the location of the horizon with respect to the right boundary is unchanged.
If we apply the perturbation (3.27) to a state which contains particles moving in the region behind the horizon, then we need to understand how these excitations are affected by the gravitational Wilson lines. This is equivalent to understanding how to "glue" the geometries, the one before the perturbation (i.e. below the Wilson lines) and the one after the perturbation (above the Wilson lines). This gluing will determine the motion of probes in the geometry. While we have not completed this analysis, the results of the following sections provide evidence that the gluing and the effect of the Wilson lines is such that the trajectories of probes are not significantly affected when crossing the Wilson lines, in the sense that their effect is suppressed at large N . This is to be contrasted with the effect of the right shock-wave on the trajectory of the probe, which is O(1) when the operators are separated by scrambling time.

JHEP01(2020)062
We notice that the bulk Einstein equations are modified exactly on the Wilson line. This modification refers only to the subleading terms in 1/N 2 . The bulk equations of motion reflect the boundary dynamics. If we consider the time-dependent perturbation (3.27) the boundary equations of motion are modified for a period of time. Hence it is natural that the bulk equations may need to be supplemented by the contribution from the sources.
Before we close this subsection we notice that these subtleties about the effect of gravitational Wilson lines, the question of gluing different geometries along spacelike slices and the modification of the bulk Einstein equations on the gluing surface is not specifically related to the mirror operators, or the conjecture about the geometry of a typical state. Similar issues arise whenever we consider perturbations of the CFT Hamiltonian by "precursors" and this is generally a topic which deserved further investigation.
For example, suppose we start with the CFT in the ground state |0 on S d−1 ×time. At time t = 0 we act with a unitary of the form U = e igφ(0) where φ(0) is an HKLL operator in some particular gravitational gauge. Here the perturbation U is a precursor, which means that while the HKLL operators are usually written as integrals over time, here we use the CFT equations of motion to localize this operator on the boundary at t = 0. The question we want to understand is what is the bulk geometry dual to the boundary state, which suddenly switched from |0 for t < 0 to U |0 for t > 0. We expect that at very early times the bulk geometry should look like empty AdS, while at very late times it will look like AdS with some particles. For intermediate times around t = 0 the bulk interpretation is less clear. For instance, suppose we ask what is the backreacted bulk geometry. For t < 0 the mass is zero, while for t > 0 the mass is nonzero. We need to glue two geometries of different mass. This sudden change of mass is induced by the gravitational Wilson lines. It would be interesting to understand this toy model in more detail. It captures some of the complications that we face when trying to determine the bulk geometry in our case.
These questions are relevant only when we act with precursors, i.e. boundary operators which directly create particles deep in AdS (together with the accompanying gravitational Wilson lines). If we create the particle by switching on the source near the boundary then the geometry can be understood without ambiguity in terms of collapsing matter falling into AdS from infinity.
To summarize, we postpone the interesting question of understanding the bulk geometry to order O(1/N 2 ) to further work. For now we assume that the boundary arguments presented in the following sections provide evidence that the net effect of probes going through the Wilson lines region is that their trajectory is not drastically modified.
Finally, we mention that for the kind of typical states with narrow energy band that we are considering, it would not be straightforward to gravitationally dress the mirror operators towards the left. This is because the left dressing would require the algebra [H, O] = 0, which is inconsistent on such states [18].

Probing the region behind the horizon
We have discussed the bulk interpretation of the state-dependent perturbation of the form O O. In this subsection we will use this perturbation to probe the different bulk regions and study the horizon. JHEP01(2020)062

Thought experiment 1
We will now discuss the first thought experiment. In brief, this experiment is designed to probe regions behind the horizon in the conjectured Penrose diagram 1. There are two variants of this experiment, as displayed in figure 8. Let us start with the first variant which is displayed on the left in figure 8. Here, the orange lines indicate the two shockwaves and the blue line indicates a particle excitation in the left exterior region. In subsection 2.5, we argued that such excitations can be obtained by turning on time-dependent sources for the mirror operators in the CFT, say at time t = −t * where again t * is of the order of the scrambling time β 2π log S. Because mirror operators commute with simple operators, such excitations cannot be detected in the CFT using simple operators. However, if we further perturb the CFT by the state-dependent perturbation V (3.27), the situation changes. We argued in the last subsection 3.2.2 that the state-dependent perturbation produces two negative energy shockwaves on either side of the horizon. The excitation in the left region interacts with the right shockwave and experiences a null shift in the right region. After a finite proper time, it can then be detected in the CFT using a simple operator. We can thus interpret the negative energy shockwaves to have made the horizon traversable.
In order to verify that this indeed happens, we need to compute the following correlator. Turning on the mirror source corresponds to acting with e i φ(−t * ) . Following this, we act with the perturbation at time t = 0 using the unitary U g = T e ig dt f (t ) O(t ) O(t ) . We then compute the expectation value of φ(t) on the resulting state. All in all we need This correlator is analogous to the following correlator (3.6) when we do the same thought experiment in the two-sided black hole . This was explicitly calculated in [6,7] and shown to be non-zero. Instead of directly computing C , we will argue that it is approximately equal to C, which is easier to calculate.

JHEP01(2020)062
Using the defining equations for the mirror operators 2.13 repeatedly, we can rewrite C as the expectation value of a complicated string of ordinary (i.e. non-mirror) operators 14 on the state |Ψ 0 . We call this string of operators X (φ, O), so we have where C here is the same correlator as the one in (3.29).
Similarly, in the case of the two-sided black hole, the action of O L operators can be re-written in terms of the O R operators using the properties of the TFD state where H TFD ≡ H R − H L . Notice that these equations are completely similar to equa- Using the equations (3.32), we can now repeat the same process in correlator C, by replacing O L , φ L in terms of right CFT operators. In this way we get exactly the same string X (φ R , O R ), now expressed in terms of O R . This string is a function only of operators in the right CFT, and hence we can compute it by first tracing out the left CFT. Let us drop the R subscript for economy. The correlator C then becomes a thermal correlator in the right CFT here X (φ, O) is exactly the same string as the one in (3.31). We know that the correlator C contains a signal corresponding to the probe traversing the horizon. If the correlator C is close to C then the same signal will be present in the one-sided black hole perturbed by the state-dependent operator (3.27), which will be evidence that a particle was extracted from the left region of our conjectured geometry. This brings us to the main conclusion: The conjecture that the bulk geometry of a typical state is described by the Penrose diagram discussed in section 2 and that it responds to perturbations in the way predicted by effective field theory on this diagram, requires as a necessary condition that the correlators C, C are the same at large N . This is essential to hold even when the time separations of the operators are taken to be of the order of scrambling time. Thus, we have identified a technical condition for CFT correlators, necessary for the smoothness of the horizon of a typical state. We discuss this condition in more detail in section 5. We also provide some preliminary evidence in favor of its validity. JHEP01(2020)062 x Figure 9. Experiment 2.
A variant setup. Now we come to the second variant of experiment 1, depicted in the right part of figure 8. Here, we do not use a time-dependent source for the particle in the left region. Instead of starting with the typical state |Ψ 0 and acting with the operator e i φ(−t * ) , we start in the state This is an autonomous non-equilibrium state, owing to the fact that [H, φ] = 0. As such, this state is not typical under the Haar measure, but it is an autonomous state in the full CFT Hilbert space nonetheless. Detailed discussion of such states can be found in [20]. The experiment then consists of acting on such a non-equilibrium state by the unitary of the state-dependent perturbation. As before, one then aims to detect the mirror excitation inherent to this state by using a simple operator φ. The entire experiment can be encoded in the correlator where V is as before given by equation (3.27). The value of this correlator is closely related to that of C in (3.29). It can then be compared to similar correlators in the thermofield setup where the left side of the eternal black hole is in some autonomous non-equilibrium state.

Thought experiment 2
We now study a second thought experiment to probe the region behind the horizon, displayed in figure 9. In this experiment, we start with the typical pure state |Ψ 0 . Then we act on this state by a unitary of a simple operator e i φ(−t * ) , where t * denotes a timescale of the order of scrambling time and φ a field near the boundary of the CFT. This creates a particle excitation in the right exterior region of the bulk, outside the black hole horizon. We have depicted this using the blue ray in figure 9. The CFT state then becomes The particle depicted in the figure falls towards the black hole and eventually crosses the black hole horizon to go into the interior region. Our goal now is to somehow reconstruct JHEP01(2020)062 the state of this particle. There are many way to do this, since in principle the information of the particle is always present in the CFT. Here we will describe a protocol which uses the state-dependent perturbations (3.27) and in a particular extrapolation it realizes the Hayden-Preskill protocol as formulated by [7]. This will be the subject of section 6. The protocol is as follows: after throwing the particle in the black hole (3.36) and waiting for scrambling time, we act on the above state at time t = 0 by the state-dependent perturbation (3.27). This perturbation creates the shockwaves that we discussed. As shown in the figure 9 the shockwaves deflect the particle which moves into the left region. There it can be detected by measuring a mirror operator of the form φ(t * ). We thus need to calculate the correlator Using similar steps as before we can reduce this correlator to a correlator of ordinary single trace operators and compare it to the corresponding correlator in the TFD state.
Summary. In this section we described some thought experiments, which indirectly probe the region behind the black hole horizon. We showed that our conjecture for the geometry presented in section 2 requires as a necessary condition that certain CFT correlators on typical pure states are close to thermal correlators. Assuming that the correlators are indeed the same at large N , we find that the typical black hole microstate responds to perturbations as if it contained the part of the extended Penrose diagram presented in section 2.

The SYK model as an example
We will exemplify some of the previous statements in the context of the SYK model. The SYK model is a toy model of holography, and although it is not expected to have an Einstein bulk dual, it still captures some important features of the bulk theory.

Brief review of the SYK model
The Sachdev-Ye-Kitaev (SYK) model [38][39][40] is a one-dimensional quantum mechanics model containing N species of Majorana fermions ψ i , i = 1, 2, . . . , N . The fermions satisfy {ψ i , ψ j } = δ ij . In general, the fermions in the SYK model have q-body random interactions such that the Hamiltonian is where the coupling constants J i 1 i 2 ···iq are all chosen randomly from a Gaussian distribution with mean zero and variance The parameter J has dimensions of energy and sets the scale of the problem. The variance of the coupling J i 1 i 2 ···iq is chosen to depend explicitly on N so that the model has interesting JHEP01(2020)062 properties in the large N limit. When q = 2 mod 4, the factor of (i) q/2 upfront is necessary to make the Hamiltonian Hermitian. The model becomes conformal at low energies i.e. when the frequencies are very small compared to J . The conformal limit of this model has been studied in detail in [39,40]. It is easier to compute correlation functions in the SYK model after taking an ensemble average over the couplings J i 1 i 2 ···iq . However, we will assume a particular realization of the coupling constant J i 1 i 2 ··· iq to obtain a unitary model. This is not a problem because the SYK model is self-averaging: to leading order at large N correlators are the same if we choose a specific realization of the coupling constants J i 1 i 2 ··· iq or perform a disorder-average over it. 15 Thus, at large N we are in principle able to compare correlators calculated in a particular realization (say numerically) with the ones estimated (eg. analytically) using the disorder-average. For finite N , the Hamiltonian is a finite-dimensional matrix with size 2 N/2 × 2 N/2 and has 2 N/2 energy eigenvalues. It is relatively easy to find these eigenvalues and corresponding eigenstates by direct numerical diagonalization for reasonably large N . In figure 10, we display distribution of energy eigenvalues for N = 26.

Equilibrium and non-equilibrium states in the SYK model
The finite size of this model (at finite N ) makes the SYK-model a good tool to numerically test various statements about typical state and the perturbations discussed earlier in section 2.5. We, moreover, have greater analytic control over some aspects of the model, which allows as to do more explicit CFT calculations. Sometimes it is easier to consider a set of spin operators to further simplify calculations. These operators are bosonic and are therefore more in line with earlier discussions. We will assume that we have a particular realization of the SYK 15 Notice that self-averaging is expected only for a class of simple correlators and for relatively small time separations (of the order of scrambling time). For long time scales self-averaging may not be true, see for example discussions in [41,42].

JHEP01(2020)062
(q = 4) couplings J ijkl . This means we have a well defined quantum system with a Hilbert space and unitary time-evolution. Nevertheless we will use results from disorder averaging as a mathematical technique, which allows us to estimate certain correlators for the model with a particular realization of J ijkl , as the disorder in the SYK model is self-averaging. The Hamiltonian has 2 N/2 energy eigenstates |E i , which can can be found by any diagonalization method at finite N . The interesting critical behavior of SYK takes place at the low-energy regime of this spectrum. We will define typical pure states in the SYK model by writing down pure states of the form where |E i are the exact SYK eigenstates (for a particular realization), and we select an energy window (E 0 , E 0 + δE) centered around some energy E 0 , 16 and with width δE. We assume E 0 is in the low energy regime, where the SYK model is strongly coupled and E 0 − E gs ∼ aN where E gs denotes the ground state energy in SYK model and a is a small number (a J) which does not scale with N . From basic thermodynamics and using the partition function Z(β) = i e −βE i we can relate E 0 to β. We want to be in the regime where βJ 1. We take the spread δE to scale like O(N 0 ) which implies that it is very small compared to E 0 − E gs . At the same time we take δE is large enough, so that we have exponentially many (in N ) states contributing to equation (4.4).
Let us now consider some examples of exciting an equilibrium state in the SYK model. Usual excited states can be written as (4.5) The analogue of states with excitations behind the horizon can be written as Adding excitations behind the horizon lowers the energy of the state as shown in (2.28). Hence, in states of the form (4.6) the amplitudes of lower energy eigenstates are amplified relative to |Ψ 0 , but coefficients of higher energy eigenstates are also turned on therefore "borrowing" that part of the Hilbert space. This explains why there is no paradox that the fixed, invertible operator e − βH 2 e i S i (t 0 ) e βH 2 lowers the expectation value of the energy of a typical state, as discussed in more detail in [20]. In figure 11 we can explicitly see this effect in the case of the SYK model.

Mirror operators in the SYK model
Having defined a typical pure state in the SYK model in equation (4.4), we now define mirror operators. The first step is to define a "small" algebra A of operators in the SYK model. From the AdS/CFT point of view it would seem more natural to consider only "gauge invariant operators" like ψ i ∂ 2m+1 ψ i . The number of such operators at a given JHEP01(2020)062 Figure 11. Distribution of |c i | in non-equilibrium state of the form U ( S i )|Ψ 0 (magenta), typical equilibrium state |Ψ 0 (red), and non-equilibrium state of the form U (S i )|Ψ 0 (green). The line above the bar plot shows, in heat map colors, which eigenstates are excited, and which ones are suppressed because of the perturbation. Blue eigenstates are suppressed, while eigenstates with other colors are excited with small (green), medium (orange), or large (red) magnitude.
However, it is interesting to consider the possibility of defining the mirrors for the non-gauge invariant operators like the individual fermions ψ i or the spin operators S k , as many interesting statements about the SYK models can be made directly for the fundamental operators. Thus, we will define the small algebra A as a span of the low-frequency components of the operators ψ i and their small products. A typical pure state cannot be annihilated by these operators, hence the construction of the mirror operators can go through. Notice that while the Hamiltonian is quartic in the fermions, it is not part of the algebra A because we have imposed the condition that only the low frequency components of the fermions are in A, see discussion in subsection 2.2, and to reconstruct H we would need the fermions sharply localized at a given moment in time.
We will present the mirror construction for the spin operators S k , since their bosonic nature makes the presentation simpler. Generalization to the fermions ψ i is straightforward. The operator S k (0) can be represented as a 2 N/2 × 2 N/2 matrix, by writing the fermions as gamma matrices in the standard basis of Clifford algebra. One can also write it as a matrix in the energy eigenbasis (4.7) Now consider the time evolution of this operator S k (t) = e iHt S k (0)e −iHt where H is the SYK Hamiltonian. This defines for us the time-dependent Heisenberg operator. Its exact Fourier modes are Using the definition of S k , this can be written as a product of a sum of delta functions of the form δ(ω − E i + E j ). As we discussed in subsection 2.2, to smoothen these delta functions out, we define the coarse-grained Fourier modes, as a function of frequencies in the bin (ω, ω + δω). We take δω to be of order Kω gap where ω gap is the typical gap between JHEP01(2020)062 energy eigenstates and K 1. The coarse-grained modes then become An algorithm to find the mirror operators explicitly can be constructed as follows [26]. First we construct a set of vectors which will span the small Hilbert space. We can use the coarse grained spin operators S k,ω to do this. The set of vectors is constructed as This set of states is not orthogonal but we make sure that we truncate the set so that the states are linearly independent. This truncation is the same as the truncation in the definition of the small algebra A in subsection 2.2. In the large N limit the set of vectors (4.10) can be taken to be very large, and the effects of the truncation become unimportant for our purposes, see [26] for a discussion of the truncation in a more general context. To simplify the notation, we denote these states as where O I is a combination of the spin operators introduced above. We define G IJ ≡ I|J as a metric between the states. Since we demanded that the states are linearly independent, G IJ is an invertible matrix and we denote its inverse by G IJ . We also define B IJ,kω ≡ I| S k,ω |J , (4.12) which can be computed using the equations for the mirror operators (2.13). We therefore have This is a matrix element involving only the ordinary operators, hence it may be in principle computed. Finally we can represent the mirror operators explicitly as S k,ω = G IJ B JK,kω G KL |I L| . (4.14) While this allows us to explicitly construct the mirror operators, for example in Mathematica, it is much more economic to directly apply the equations from section 2.2 to transform the mirror operators to normal operators inside correlators.

Comments on the Kourkoulou-Maldacena states
We would now like to discuss some connections of the results of this paper to the work of Kourkoulou and Maldacena [8]. That paper considered a class of pure states in the SYK model, denoted by |B s (β) . To construct these states, we first consider a basis of states |B s , which are eigenstates of the spin operators S k ≡ 2iψ 2k−1 ψ 2k , k = 1, . . . , N/2 . These states are defined such that where s denotes the collection s k = ±1. The states {|B s } form a complete basis of states [46], each with mean energy around zero. Evolving the states |B s in Euclidean time by we obtain states with an energy more comparable with the typical state of energy corresponding to inverse temperature β. This defines the states |B s (β) introduced in [8].
Notice that as written in (4.17) the states are not yet unit-normalized. The ensemble of states {|B s (β) } has the special property that it is equivalent to the thermal ensemble, in the sense (4.18) In the large N limit the SYK model has an approximate O(N ) symmetry. A subgroup of this symmetry, identified as the "flip group" in [8], implies that certain flip invariant correlators (for example diagonal two-point functions of the fermions) are the same at large N on all |B s (β) states, and from (4.18), equal to the thermal correlators. On the other hand there are non flip invariant correlators (for example non-diagonal correlators) which are different from the thermal correlators. In particular they are time-dependent, indicating that the states |B s (β) are non-equilibrium states, and in particular atypical states. Under time evolution the states thermalize and they equilibrate at late times. While the states |B s (β) are atypical, and hence rather different from the typical states which are the focus of this paper, we will argue that the states |B s (β) can be approximately constructed by the following procedure. We start with a typical state of energy E 0 in the SYK model and we perform a measurement of many mirror operators S k . This produces a state which resembles |B s (β) , with a parameter β related to E 0 by the thermodynamics of the SYK model.
To see that we first consider what happens if we perform a measurement of a single mirror-spin operator. It is easier to phrase the discussion in position space, so we introduce the (smeared) position space mirror spins 17

JHEP01(2020)062
As we discussed in section 2 these should not be thought of as operators sharply localized in time, but in the limit where ω * is taken to be large they do start to behave like local operators. In that limit the eigenvalues of S k (t) are approximately ±1. If we measure S k (0) we will get either s k = 1 or s k = −1, and the state will be projected to Using the definition of the mirror operators we can rewrite this as where the last delta function restricts the sum over s to strings where the k-th spin is required to be s k . Now, if we simultaneously measure n mirror-spin operators, and get eigenvalues s i 1 , . . . , s in , we will project the state to which, using the definition of the mirror operators, can also be written as s c s |B s (β) δ s i 1 ,s i 1 . . . δ s in ,s in We notice that as we increase n we fix more and more spins, and if we could extrapolate to n = N 2 we would get precisely the |B s (β) states of [8] as the result of measuring all mirror-spins on a typical pure state. This is not an exact statement, for two reasons. First, in defining the mirror operators we had to introduce the cutoff ω * in the frequencies. Second, we would obtain a single thermal spin state if we projected for all N/2 spins, however, this would likely go beyond the small algebra and the mirror operator construction becomes difficult to control before this point.
In [8], Kourkoulou and Maldacena considered state-dependent perturbations of the Hamiltonian of the form δH = g s k S k on the state |B s (β) , where it was shown that these perturbations lead to an extension of the time evolution from the Rindler patch of AdS 2 to the Poincare patch, thereby gaining access to information from behind the horizon. This effect is present even when we sum over a limited number of spins K < N/2, as was shown in [17]. From the arguments above it follows that in such states it is equivalent to write the perturbation as δH = g k S k S k , (4.23)

JHEP01(2020)062
which highlights some similarity with the state-dependent perturbations of the form O O that we have been considering in this paper. The Kourkoulou-Maldacena perturbation by δH = g k s k S k on the state |B s (β) can be thought as the "quantum-teleportationversion" of the δH = g k S k S k perturbation on a typical pure state |Ψ 0 : first we measure S k which, as we argued above, transforms the state into |B s (β) . Then, on this state we apply a unitary which depends on the results of the measurement and corresponds to the perturbation δH = g k s k S k .

Information behind the horizon in SYK
In subsection 3.3, we discussed two thought experiments to probe the geometry dual to a typical state in a holographic CFT, especially the geometry hidden behind the horizon.
We will now illustrate these experiments in the SYK model. Because the details of the two experiments are very similar, we will discuss only the first experiment 3.3.1. We want to consider the analogue of the correlator (3.29) in the SYK model. Hence the correlator we will consider is where S 2 S 2 acts t = 0, but we suppress this time label for convenience and t * is scrambling time. We are interested in the term linear in which is where we have rewritten the commutator as the imaginary part of the correlator. The action of the rightmost mirror operator S 1 (−t * ) on the state |Ψ 0 can be replaced by that of S 1 (t * + iβ/2). Further, the exponential operator can be shown to be e igS 2 S 2 = cos(g)I + i sin(g)S 2 S 2 . (4.26) Using this 18 and the defining equations of the mirror operators the correlator C becomes thermal two-point functions of the fermions. This function can be shown to be real and hence does not contribute to the correlator C . We now focus on calculating the second line in equation (4.27). We will first do the calculation in a thermal correlator 19 and later discuss how this approximations the computation in a typical state. So we are interested in the real part of (4.28) we will not keep track of overall O(N 0 ) real multiplicative constants as we are interested in whether there is a signal or not. We will keep track of the phase for the correlators as we need the real part of this correlator. This correlator is a fermion eight-point function where the time arguments are determined by equation (4.28).
The easiest way to calculate the leading term is to do this calculation in the vacuum state and then apply a conformal transformation to the thermal circle and analytically continue to Lorentzian time. The Feynman graphs factorize in several pieces at different orders of N [47]. There are more terms in general, however, terms containing an odd number of fermions are suppressed in the SYK model. The commutator further reduces this list as in some cases the order does not matter, for example in the case of the two-point functions. We, therefore, focus on the instances where the ordering does matter, such as where we have defined ∆t = t − t * for later convenience. Observe that this is an outof-time-order correlator. A special property of out-of-time-order correlators is that they exhibit exponential growth, a hallmark of quantum chaos. These terms can, therefore, become order O(N 0 ) with times of the order of the scrambling time.
The six-and eight-point functions will also have exponential growth. We can group operators that are close together in time and next to each other, which results in correlators of the form O(late)O(early)O(late)O(early) . The time ordering of such a correlator has only one exponential growing factor, which is not enough to compensate the suppression in N at the same time that the four point function becomes O(1). The product of two connected four point functions, on the other hand, has two exponential growth factors, JHEP01(2020)062 enough to compensate the 1/N 2 suppression of these terms. Connected SYK four point functions have been calculated in [40]. They take the form Here G(t) is the fermion two-point function. Therefore, only the square of this four point function contributes as we need the real part of equation (4.28). Thus we obtain the following result for equation (4.24) We can see the signal provided that it was sent at an early time of the order of the scrambling time.
The same steps can be taken for the third line in equation (4.27), however, the result is small compared to this one.
Although this correlator was calculated in the thermal state, we expect that at large N we will have the same result for the typical state. We will discuss the general reasons for this in section 5. Numerical evidence for this statement is discussed in subsection 4.5. We can also argue that this is true as follows. We first write the typical state as a superposition of the spin states, as discussed in section 4.3 (4.33) Using this expansion for the bra and ket in the correlators that we want to compute, we get diagonal and off-diagonal terms with respect to s. For the diagonal terms, we have correlators in the thermal spin states which are indeed close to thermal correlators [8].
Notice that here we assume that the flip symmetry remains a good approximation even for time scales of order of scrambling time, and in particular the leading large N result for flip invariant correlators is the same in the |B s (β) states as the thermal states even at scrambling time.
The off-diagonal terms between different thermal spin states constitute the major difference between the typical state vs the thermal correlator. Such a cross term is of the form where A is a combination of fermions given by equation (4.27). It is important to note that each fermion appears an even number of times in this combination. We can relate one spin state to another by flipping a spin, for example |B s ∼ ψ 2k−1 |B s , this flips the k'th spin. We can use this to rewrite the cross term as where Γ is the combination of fermions needed to flip the string of spins s into the string s. In Γ we only use the fermions with an odd label, and each of the used fermion is only used once. Therefore, the combination e βH/2 Γe −βH/2 A contains some fermions which appear an JHEP01(2020)062 Figure 12. Comparing the traversable wormhole correlator (4.24) in the thermal state (blue) and typical state (red). The dotted line is the signal without the probe, which is the response one obtains from just the double-trace perturbation and should disappear in the large N limit, in this case a sum over five pairs of operators was used in the perturbation to limit this effect. The vertical line denotes the scrambling time and is the time around which the probe is focused.
odd number of times and correlators of this form are suppressed in the SYK model. 20 The number of cross terms cannot compensate for this suppression as they come with random phases. The sum over the cross terms is, therefore, suppressed compared to the diagonal terms, and we are justified in using the thermal correlators as an approximation for the typical state.
The results are consistent with the calculations done in [7], including the effect that the correlators becomes non-zero directly after the perturbation (though only at O(1/N )). This is closely related to what would be "stringy" corrections in other theories.

Numerical comparison
The correlators (4.24) relevant for our thought experiment, can also be calculated numerically, with the results shown in figure 12. It is, unfortunately, not possible to directly compare to the analytic results, as for the values of N that we can practically analyze numerically the behaviors usually associated with early time, exponential growth, and saturation overlap. It is, however, useful to check whether the the results for the typical state and the thermal state are close, and indeed they are. More about the numerics in the SYK model can be found in appendix D.

A conjecture about quantum chaos in pure and thermal states
In this paper we made a proposal for the interior geometry of a typical black hole microstate. In section 3 we related this proposed interior geometry, to a necessary condition for CFT correlators: Conjecture. In a holographic large N CFT, correlators 21 in typical pure states are close to thermal correlators, even if the time separations |t i − t j | are of the order of scrambling 20 The spin states do have non-zero correlators with an odd number of specific fermions, however, in this case the fermions must pair up for one of the spin operators, which is not the case for the cross terms. 21 Here we are talking about Wightman correlators, in particular they need not be time-ordered.

JHEP01(2020)062
time β log S. x 1 ) . . . O n (t n , x n )] low−pass + small error, (5.1) where "small error" goes to zero as N → ∞. Moreover, the correlators remain close to each other even after analytic continuation to imaginary time, within a strip of at most t E = ±β/2. The subscript "low-pass" means that we only keep the low frequency components |ω| < ω * , where ω * is kept fixed as N → ∞.
A very similar conjecture was formulated earlier in [42], mainly in the context of the SYK model.
Strictly speaking we are interested in this conjecture for holographic CFTs with Einstein gravity duals, however the conjecture may apply to more general theories. For example, we have some partial evidence that it holds in the SYK model whose gravitational dual is not precisely geometric [43][44][45].
In the rest of this section, we first make some general comments about the conjecture (5.1) and discuss why it is non-trivial. Then we explain that the conjecture can be simplified by replacing the typical pure state by the microcanonical density matrix. We also discuss some general aspects of comparing canonical and microcanonical ensembles in statistical mechanics. Finally we provide some evidence supporting (5.1). The conjecture (5.1) can be considered as a purely-CFT conjecture, which is independent of the discussion about the bulk interpretation and the interior of a typical black hole microstate.

General comments on the conjecture
The subscript "low-pass" in (5.1) means that we only keep the Fourier modes in the correlator with |ω| < ω * , where ω * is a large frequency that we keep fixed as N → ∞. For example, if we have a function of a single variable, we define the low-pass filtered combination by We can similarly define the low-pass filtered correlators depending on more time-arguments. The low-pass filtering is motivated by the fact that, as discussed in sections 2 and 3, for the purpose of probing the black hole interior we do not need high frequencies. Moreover, the restriction of frequencies allows us to avoid certain technical problems discussed below. First, in (5.1) we have not been precise about the nature of convergence between the two correlation functions. For example, even if the correlators converge to each other pointwise in the coordinates, their derivatives may not converge. For instance, suppose that the two correlators differ by a "noise term" with very small amplitude but very high frequency of the form Here t denotes schematically some combination of the times in (5.1). While point-wise in t this noise term goes to zero as N → ∞, we notice that if we compute the time-derivatives of the correlators, then they will generally diverge as N → ∞.

JHEP01(2020)062
Second, a related aspect of this problem is that upon analytic continuation to imaginary time, small differences can get amplified. Consider for example the possible high-frequency noise term (5.3). Typically we would like to compare correlators on a strip of Euclidean width of order β. We notice that upon analytic continuation t → t + i , the term blows up exponentially for fixed > 0 and N → ∞.
Both of these problems are avoided by considering the low-pass-filtered correlators, where only frequencies |ω| < ω * are kept. For example, we avoid problematic terms such as the high frequency, small amplitude noise term (5.3). For the same reason, upon analytic continuation a noise term can be amplified at most by a factor of e βω * . Hence if the amplitude of the noise term in real time goes to zero as N → ∞, then the same will be true in the complexified time-domain that we are interested in.
We now discuss another aspect of the conjecture (5.1): one may think that the proximity of correlators between typical pure states and the thermal state is an obvious result in statistical mechanics. However condition (5.1) is non-trivial for the following reasons: (1) There is no general proof about the proximity of all expectation values in typical pure states and the thermal ensemble. The proximity can be established only if some additional assumptions are made about the nature of the observable that we are considering. The Eigenstate Thermalization Hypothesis (ETH) [22] is an example of such an assumption. The observables in (5.1) involve products of operators at large time separations, so it is not automatically obvious that they obey these ETH-like assumptions.
(2) Relatedly, the general expectation in statistical mechanics is that correlators on typical pure states are close to thermal correlators up to 1/S corrections. When considering out of time order correlators in large N gauge theories, certain terms which begin at early times as being of order 1 N , grow as we increase the time separation and at scrambling time they become O(N 0 ) and mix with leading terms. The conjecture (5.1) states that this effect is the same in the typical pure state and the canonical ensemble.
(3) Condition (5.1) requires that, as we take N → ∞, the observable whose expectation value we are considering also changes, because the scrambling time explicitly depends on N .

Replacing typical pure states by microcanonical mixed state
A second observation is that on very general grounds it can be shown that correlators on typical pure states are very close to those in the micrononical ensemble ρ m , centered around the appropriate energy window [48]. In particular where [dµ] is the usual Haar measure over pure states in the relevant energy window and N ∼ e S denotes the dimensionality of that Hilbert space. P m is the projector on that window and ρ m = Pm N . The variance on the r.h.s. is exponentially suppressed in S, times a combination of the norms of the operators A and A 2 . For us A = O(t 1 , x 1 ) . . . O(t n , x n ). If we work with local operators which have been smeared in such a way that they are bounded, then separating the constituent operators O in time cannot increase the norm of the product A, even if the time separation is very large. This follows from two obvious observations. First since time evolution is unitary we have that for any bounded operator Second, for any product of bounded operators we have This means that if we work with bounded operators the deviation between typical pure state and microcanonical ensemble cannot grow as a function of time, and hence we can show that  x 1 ) . . . O n (t n , x n )] low−pass + small error, (5.9) where "small error" goes to zero as N → ∞. Moreover the correlators remain close to each other after analytic continuation to imaginary time, in an appropriate domain, i.e. within a strip of at most t E = ±β/2. Again we emphasize that the comparison of the two ensembles is not trivial, for the reasons 1-3 mentioned earlier.

JHEP01(2020)062
Comments: (a) First we make some clarifying remarks about the order of limits in this conjecture. The precise meaning of (5.9) is: we consider a holographic CFT with a central charge of order N 2 . We consider a fixed number n of smeared, bounded operators approximately localized around space-time points (t i = a i +b i log N, Here we take all time arguments to be real. We consider a fixed inverse temperature 22 β and the corresponding canonical ensemble ρ β = e −βH Z . We consider the microcanonical ensemble defined by the energy window (E 0 ± ∆E) where E 0 = −∂ β log Z and ∆E fixed. Then we take the N → ∞ limit without changing any of the "fixed parameters". Then the claim is that where the subscript low pass indicates that we remove frequencies |ω| > ω * as in (5.2), and ω * is kept fixed as N → ∞.
(b) For b i = 0 then this conjecture reduces to the standard approximation of correlators between canonical and microcanonical ensemble. The non-trivial aspect of the conjecture is when b i = 0. In that case we want to make the statement that these "chaos-enhanced 1/N corrections" are the same in the pure and thermal states. Technically having b i = 0 makes a difference since it means that as N → ∞ we also change the observables that we are considering (by moving the operators in time).
(c) We assume that there the operators O i have been smeared in an appropriate way so that they are bounded operators. In particular this will also regulate possible light-cone singularities.
(d) The conjecture formulated as (5.9) is perhaps more conservative than it could be. The correlators could be close to each other even for longer time scales. This, however, is not necessary for the purpose of the thought experiments discussed in this paper. We have also not been precise about the explicit bounds for the error terms. For the purposes of our paper it is sufficient that the error goes to zero as N → ∞.
(e) Finally, even though the conjecture (5.9) is formulated for real time arguments, the proximity of the low-pass-filtered correlators after analytic continuation to imaginary time within a strip of width β is guaranteed by the fact that the two correlators do not contain frequencies higher than some fixed frequency ω * . In the context of black hole physics this has been discussed in earlier works, for example [49], where it was suggested that perhaps the analytically continued correlators contain information about the details of the black hole microstate. However, for the purpose of probing the black hole interior using the thought experiments discussed in this paper, we seem JHEP01(2020)062 to be sensitive to the analytic continuation of the low-pass filtered correlators and as we conjecture above, those do not vary significantly among different microstates. In special situations where one can use supersymmetry to obtain greater control, like LLM and LM geometries, the distinction between thermal and typical pure states was discussed in [50] and [51] respectively. See [52] for a summary of these analyses and [53] for a discussion of the distinguishability of typical pure states in connection to the fuzzball proposal.

Comments on comparing canonical to microcanonical ensembles
In general the proximity of the two ensembles is based on the following intuition. The two density matrices of the ensembles are Consider an observable A, which in our case would be of the form A = O 1 (t 1 , x 1 ) . . . O n (t n , x n ). The expectation value of A in either ensemble receives contributions only from the diagonal matrix elements of A in the energy eigenstates First of all we will assume, in the spirit of the ETH, that f (E i ) can be approximated by "reasonably smooth" function f (E). We also assume that the discrete set of states can be described by a smooth density of states ρ(E). Then we have . (5.14) where N = e S . The usual argument in statistical mechanics is that for systems with many degrees of freedom ρ(E) increases fast with energy, while e −βE decreases fast. Hence the product ρ(E)e −βE is sharply peaked at a given window of energies which depends on the temperature. If we further assume that f (E) is relatively smooth and slowly varying, then by selecting the window (E 0 ± ∆E) of the microcanonical to coincide with the window where ρ(E)e −βE peaks, we can establish the approximation between canonical and microcanonical. This leads to a saddle point approximation, which relies on taking the thermodynamic limit. Usually in AdS/CFT this is achieved by taking N → ∞. Moreover, for the saddle point method to work, it is important that f (E) is a slowly varying function of E. For observables corresponding to small products of operators with time-separations of O(1), we find that at large N the function f (E) actually depends on E only via the temperature. This means that for such observables df (E) dE ∼ O(1/N 2 ) and the saddle point method is reliable, establishing the equivalence of (5.13) and (5.14). The question is whether the JHEP01(2020)062 same property of slow variation of f (E) is true for observables like those in (5.9) where some of the time separations scale like log(N ).
To emphasize that the slow variation of f (E) is important for the equivalence of the ensembles, let us mention the following argument. When comparing two density matrices ρ 1 , ρ 2 it is useful to consider the trace distance where |X| is defined as |X| ≡ √ X † X. This characterizes how different the two quantum states are. More precisely for any bounded observable A we have The trace distance is positive and is bounded from above by 1, and if it is close to 1 then the two density matrices are in principle "fully distinguishable". When comparing the canonical and microcanonical ensembles the trace distance becomes It is easy to check that when comparing the canonical ensemble to the microcanonical ensemble for relevant systems 23 then no matter how the window (E 0 ± ∆E) is selected, the trace distance between the two ensembles is extremely close to 1. This means that there will always exist some bounded observable A with the property that its expectation value is maximally different in the two ensembles. Such an observable would have the property that f (E) would have to be very rapidly varying with E. All this shows that the conjectures (5.1) and (5.9) are essentially conjectures about the slow variation of diagonal matrix elements f (E) of A, where A = O 1 (t 1 , x 1 ) . . . O n (t n , x n ), when the time differences |t i − t j | are of the order of scrambling time.

Evidence for the conjecture
We showed that the original conjecture (5.1) can be simplified to the form (5.9). In this subsection we provide some evidence for it. The evidence we provide does not constitute a proof. However, the statements are should be considered heuristic support for the conjecture.
A class of systems where this conjecture could be investigated more precisely might be large c 2d CFTs with a sparse spectrum. In those theories the relevant correlators can be estimated by a conformal block decomposition [54], where it is expected that the effects at scrambling time are related to the Virasoro identity block. It is, however, also important to check that other blocks do not interfere with those effects, see for example [55]. This is an approach which may be worth investigating in future work. JHEP01(2020)062

Slow change with respect to energy
We now discuss an intuitive argument suggesting the slow variation with energy of the diagonal matrix elements of the relevant observables supporting the conjecture formulated in this section. We generally expect that in AdS/CFT thermal correlators of local operators separated by short time scales depend on the energy only via the temperature, hence the diagonal matrix elements obey, 24 df (E) N 2 ), where we used the notation f (E i ) = E i |A|E i . This justifies the use of the saddle point methods in comparing canonical to microcanonical. When we want to separate the operators by scrambling time, then as we take the large N limit we need to tune the operator A in an N -dependent fashion, since scrambling time for a fixed temperature depends on N via log N . Hence when we apply the saddle point method at large N we need to take into account that the operator A itself will depend on N , we denote this as A t S .
The bulk computation in the eternal black hole suggests that the thermal expectation value of A t S depends on the mass of the black hole only via the temperature, in the sense that where we need to differentiate w.r.t. β both the thermal density matrix and the observable which depends on t S . We can write these two contributions as This equation is rather schematic as the observable A can have many time arguments of the order of the scrambling time. We expect that the correlator Tr[ρ β dAt S dt ] is at most O(N 0 ), as the growth of correlators is bounded by the Lyaponov exponent [10]. On the other hand we have dt S dβ = O(log N ), hence the second term in (5.19) grows at most like log N . Since the sum of the two terms in (5.19) is O(N 0 ) we conclude that the first term From this we can estimate the energy dependence of the diagonal matrix elements of the observable A t S , leading to We, therefore, see an enhancement of the error term of the saddle point method, but the error term is still suppressed in N . This justifies the use of the saddle point method and the approximation of the canonical and microcanonical ensemble for observables at scrambling time. This slow variation with respect to temperature can also be seen numerically in figure 13.
JHEP01(2020)062 Figure 13. The diagonal (magenta) matrix elements of {ψ 1 (0), ψ(t * )} 2 , where t * is the scrambling time, vary slowly in the SYK model. They, moreover, dominate the elements just above the diagonal (green). The regions important for the typical state (red) and the canonical ensemble (blue, ρ(E)e −βE ) are shown as well. The operators were not passed through a low pass filter.

Connection to ETH
The Eigenstate Thermalization Hypotheses (ETH) [22] proposed that the matrix elements of an operator where E i = E −ω/2, E j = E +ω/2. The functions f V , g V are assumed to be slowly varying and R V ij are some almost random phases. We will discuss to what extent the product of operators obeying the ETH does also obey the ETH. We are interested in timescales of order of scrambling time t S = β 2π log S. For concreteness we consider, for example, the correlator [W (t), V (0)] 2 . The matrix elements for W (t) can be written in a similar fashion To simplify the discussion we can assume that the operators have vanishing one-point functions, i.e. f V = f W = 0 (or more generally we would have to consider connected correlators). We define which will help us obtain the out-of-time order correlator mentioned above. We have We also need the other ordering, which we will call C . It has a similar expression with some of the indices interchanged. To obtain an expression for the out-of-time ordered correlator JHEP01(2020)062 we need terms of the form C 2 , C 2 , CC , and C C. The phases are almost random but they are assumed to have some correlation [4] R V ij R W kl = h V W (E i , E l )δ il δ kj + erratic, (5.26) where h V W (E i , E l ) is some smooth function. For short time scales this ansatz leads to the conclusion that the combination [W (t), V (0)] 2 obeys the ETH, if W and V do.
We will now comment on the opposite regime. For very large time scales, the timedependent phases in C and C fluctuate rapidly and the correlations (5.26) are washed out when h V W is inserted in (5.25). In the terms C 2 and C 2 , the matrix product implies that we need to fix two indices (say k, ). As a result we are left with a sum over only one index. This sum is of order O(e S ) but it cannot compensate the O(e −2S ) suppression. Thus we can neglect these terms. In the cross terms CC and C C, the phases can be summed over in a coherent way and they then compensate the O(e −2S ) suppression. We will thus only look at these. If we redefine E k = E i + ω and E j = E i + ω 1 + ω 2 , and turn the sums into integrals, we get where we used that the entropy S varies slowly and that moderate values of ω dominate. ETH assumes that g V and g W are slowly varying functions in the first argument. We can, therefore, use a Taylor expansion to obtain Generally speaking one expects that α V V 2 . This expectation can be motivated by analyzing the two-point function, which has the form upon using the ETH ansatz. As discussed in the previous section 5.2.1, we expect the derivative of the first term to be very small, thus making α V small. There is an independent argument to justify that α V V 2 . Notice that it is the connected diagrams which contribute to α V . These are suppressed in the large N limit as opposed to the disconnected ones that contribute to V 2 , leading us to the conclusion α V V 2 . This means that for very long time scales the factorized result dominates, exactly what one expects in the region of saturation after chaotic growth.
The ETH, therefore, works with both short times and very long times. It is natural to expect that ETH will also work for intermediate times, but it seems that we need to make some additional assumptions about the matrix elements of the observables in order to prove this. See [56] for a discussion about possible extensions of ETH to higher order correlators. We postpone further investigation of these questions to future work. JHEP01(2020)062 Figure 14. We compare the expectation value of ψ 1 (t)ψ 1 (0) (left) and S 1 (t)S 1 (0) (right) in the thermal state (blue) and pure state (red). We expect the two curves to differ by corrections suppressed by 1/N . The observed deviation is consistent with the value of N that we used.

Time-order vs. out-of-time-order correlators
We provide another approach for readers who accept that time-ordered correlators continue to factorize at time scales of the order of the scrambling time. We will argue that this implies the validity of our conjecture also for out-of-time-order correlators.
The exponential growth of parts of chaotic correlators is seen in correlators that are out-of-time-order, for example  [57], with the assumption that we can promote coordinate transformations ξ(x) to Goldstone fieldsξ(x) and that we write light operators as functions of these fields. In that case, it was argued that the commutator is dominated by a single term around scrambling time where c is the central charge, and λ is the Lyapunov exponent giving the rate of exponential growth of out-of-time-order correlators. The commutator can be used to transform the outof-time-order correlator to a time-order correlator, and shows how the exponential growth remains present after we convert the out-of-time-order correlators to time-order correlators. Nevertheless, the out-of-time-order correlator is the same in the microcanonical and the canonical ensemble if it is dominated by finitely many time-ordered terms that one obtains after using commutators such as those in equation (5.31). In passing, we note that these commutators are not known or easily constructed in general.

SYK numerics
We can numerically check the conjecture and the various statements of this section in the SYK model, see [42] for an in-depth numerical study of the ETH and equivalence JHEP01(2020)062  between microstate and thermal correlators in SYK. For example, in figure 14 we show the agreement between various simple correlators in the canonical ensemble and a typical pure state. The conjecture becomes non-trivial for out-of-time-order correlators with times of the order of the scrambling times. We, therefore, look at the OTOC in figure 15. We can see that the pure and thermal expectation value are very close to each other up to the scrambling time, and close to each other after scrambling time.
We can also check the arguments about the slowly varying energy dependence of the operators at scrambling time, see figure 16. This corresponds to the moment of the grey line in figure 15.
These low N calculations seem to support the conjecture. However, the N used in these calculations is too low to clearly see some desired features of the correlators and it would be interesting to numerically study larger values of N . In appendix D we give more details about numerics in the SYK model.

Remarks on the mirror operators and the Hayden-Preskill protocol
In this section we discuss how the mirror operators can be used to extract information from a black hole and highlight similarities with the Hayden-Preskill protocol. We start with a review of the original Hayden-Preskill argument and then we discuss the implementation of the protocol suggested by [7]. After that we explain the connection with the mirror operators and the state-dependent perturbations that we have been discussing in this paper.

The Hayden-Preskill protocol
In [11], Hayden and Preskill proposed a way to extract information from old black holes i.e. those that have evaporated away at least half of their entropy. Their thought experiment is represented diagrammatically in figure 17. Alice sends a message into a black hole after the half-point of evaporation, also called the Page time. This message is drawn as a red ray in figure 17. Bob, who wants to spy on Alice's message, has been collecting the Hawking radiation since the moment the black hole started emitting it. He has infinite resources and can study correlations between Hawking quanta exactly. He also knows the exact initial microstate of the black hole and the exact dynamics of quantum gravity governing black hole evaporation, denoted U in the figure. Then the question [11] asked is -how many Hawking particles does Bob need to collect additionally, in order to reconstruct the message that Alice threw into the black hole?
In figure 17 time flows upwards. Bob can build a decoder using the early Hawking radiation and part of the late Hawking radiation, represented by the operation U . We assume that the internal dynamics of the black hole U is a random and rapidly-mixing unitary. Then, using the knowledge of the microstate of the black hole, [11] argued that after the half-way point, Bob's decoder will need to collect only an order O(1) (compared to entropy) number of late Hawking quanta to be able to reconstruct Alice's message. While their argument shows that there exists in principle a quantum operation that can reconstruct the message, Hayden and Preskill did not provide a constructive algorithm to realize the decoding operation.

JHEP01(2020)062
In [7], it was pointed out that this quantum operation can be realized as follows: we imagine that Bob collects the early radiation emitted by the black hole and he collapses it to form a second black hole. This results in two black holes which are approximately in a maximally entangled state. By applying a complicated unitary on the second black hole, Bob can bring the state of the two black holes in approximately a thermofield-like state. Then the corresponding geometry is that of the two-sided black hole with a nontraversable wormhole. We think of the original black hole as corresponding to the right side while the new black hole to the left. Alice's message can be thought of as throwing particle on the right side of the eternal black hole created by acting on the TFD state with the unitary e iφ R (t 0 ) . The step in the Hayden-Preskill protocol of collecting a few more Hawking particles can be thought of as corresponding to the Gao-Jafferis-Wall double trace perturbation, which modifies the state by e igO L O R . Then Alice's message emerges on the left side in geometric form, where it can be detected by Bob using an operator φ L . This provides us with a specific implementation of the Hayden-Preskill decoding.

Information recovery using the mirror operators
The question that was addressed in the Hayden-Preskill protocol was how to extract information which fell into the black hole, if we only have access to the Hawking radiation. A somewhat different question is how to extract information which fell into the black hole, if we also have access to the microscopic Hilbert space of the black hole. Of course in that case it is obvious from unitarity that information can in principle be recovered at any time, even before the Page time.
We will present one particular protocol, using the mirror operators, which can be used to recover information from a black hole. If this protocol is applied to a large black hole in AdS, or a black hole in flat-space before Page time, it allows information extraction provided that one has access to the Hilbert space of the black hole. In AdS this means access to the full Hilbert space of the CFT. On the other hand if the protocol is applied to a black hole in flat space and after Page time then it becomes the analogue of the Hayden-Preskill protocol as formulated in [7] and in particular it allows information recovery purely from the Hawking radiation.
We start with a black hole in AdS dual to a microstate |Ψ 0 . At some time t ≈ −t S (here t S is scrambling time), we throw a qubit into the black hole. This qubit is created in the bulk by acting with the CFT operator U = e i φ(t 0 ) (appropriately smeared). We wait until the particle has been absorbed, and then we ask what is the CFT operator we need to measure in order to extract the quantum information of the qubit.
Of course in principle the boundary observer, who has access to the microstate of the CFT, can extract the information at any moment in time after the qubit has been injected. 25 Here we present one particular way of extracting the information, which will allow us -in a different limit -to make contact with the Hayden-Preskill protocol. 25 For example, if the boundary observer applies a time-reversal operator to the state and then evolves forward in time, then the particle will simply pop out of the black hole. Or, relatedly, we can extract the information at a later time by measuring the precursor of the operator which created the particle. We would like to thank J. Maldacena for discussions on this.

JHEP01(2020)062
According to the previous discussions, one natural way to extract the information is the following: after sending in the qubit at −t S , we perturb the CFT Hamiltonian at t = 0 by an interaction of the form U g = e igO O , then two negative shockwaves will be produced, as discussed in section 3. The infalling particle collides with one of the shockwaves and undergoes a time-advance pushing it into the "space of the mirrors". It can then be measured by the mirror operator φ(t) after scrambling time. All in all, the result of this measurement is captured by the correlator which according to the discussion of section 3 will allow us to measure the qubit at time t ≈ t S . What we have thus is a protocol which allows us to extract the quantum information of a particle which has crossed the horizon, in a time scale of the order of scrambling time. The protocol can be applied to black holes in flat space even before page time, but it requires access to the Hilbert space of the black hole. The reason is that before the Page time the black hole represents the largest part of the Hilbert space, and the mirror operators are supported on it.
Now consider a black hole in flat space, which is after its Page time. The region near the horizon is still approximately thermal, as the time-scale for evaporation is much longer than the timescales (of order scrambling time) relevant for our problem. We can still define the mirror operators for the exterior modes near the horizon. In this limit we have to work with the modular Hamiltonian of the entire system, defined by the Tomita-Takesaki construction, which will not be as simple as the CFT Hamiltonian in the case of a large AdS black hole. After Page time the early radiation represents the largest part of the Hilbert space, hence the mirror operators are mostly supported on the early radiation. 26 Hence, after Page time, implementing the analogue of the state-dependent "double trace" protocol using the mirror operators allows us to extract the information from the cloud of Hawking radiation. In particular it is a realization of the Hayden-Preskill protocol in the form discussed in [7].
State-dependence and the Hayden-Preskill protocol. The original Hayden-Preskill protocol to extract quantum information from a black hole, figure 17, can only be applied after the Page time. This is because the decoder needs to have access to the larger part of the full Hilbert space, as well as the knowledge of the microstate of the black hole. In particular, in Hayden-Preskill the decoder is state-dependent. When we consider the realization of the protocol in two-sided black hole, as described in [7], the decoder includes the double-trace unitary e igO L O R , applied after we have brought the original state of the system in the the thermofield state, which is done by a state-dependent unitary rotation. Thus this realization of the Hayden-Preskill protocol in [7] is state-dependent as well. In the one-sided realization of the protocol that we proposed, the decoder is a function of JHEP01(2020)062 the mirror operator O, which is also state-dependent. This is consistent with the general expectation that the decoder needs to be state-dependent.
Comments on entanglement. The Hayden-Preskill protocol relies on the fact that an old black hole is maximally entangled with the early radiation. This corresponds to an amount of entanglement of O(S) between two tensor factors. In our case we can think of the code-subspace as made out of two tensor factors, corresponding to the algebras A and A Irrespective of the fact that we could in principle enlarge A to attain O(S) entropy, we notice that the decoding protocol may be performed even while keeping the size of these algebras to be O(1). The reason that this is not inconsistent with the O(S) entanglement needed for the Hayden-Preskill protocol is that the code subspace is a very special subspace of the system where the interesting dynamics takes place. In particular it is a statedependent subspace. For example even in the case of the eternal black hole, while the microscopic entanglement between the two CFTs is O(S), the Gao-Jafferis-Wall protocol can be described within the code subspace corresponding to effective field theory excitations in the bulk which has smaller amount of entanglement.
Finally, in the extrapolation of our experiment to old black holes in flat space, the statement that the mirror operators are supported on the early radiation relies on the fact that the early radiation is maximally entangled with the remaining black hole, with an entanglement of order O(S).
Quantum teleportation. The Hayden-Preskill experiment, and its two-sided analogues that we have discussed above, are related to quantum teleportation [7]. In the standard teleportation, given two maximally entanglement systems, one wishes to "teleport" a message from one system to another. To do this, one first measures the message (some qubit) and one of the systems such that it is projected into a Bell state. Classically communicating the result of the measurement from system one to two is then used to decode the message. Note that the message need not be physically transported.
The double-trace protocol does not have this two-step measurement process. However, as discussed in [7], the double trace protocol can be related to quantum teleportation. JHEP01(2020)062 Notice that the the double-trace perturbation can be written as where we used that the operators O and O commute. Using this identity and equation (6.2), we can calculate the reduced density matrix that corresponds to the mirror operators O after the double-trace perturbation. This is easy to do by integrating over the λ variables.
One can then show that the result is equal to a reduced density matrix one gets after measuring O first and then acting with a unitary that depends on the outcome of the measurement on the space of O's. This latter operation is like the standard quantum teleportation. Thus the double-trace perturbation in our one-sided setup can be interpreted as a quantum teleportation. This allows us to extract the information φ(−t * ) by measuring the operator φ(t * ). We now draw a circuit diagram to represent the information transfer during the decoding protocol based on the mirror operators. It is shown in figure 18. In this circuit diagram, time flows upwards. The dot on the bottom left denotes the typical pure state |Ψ 0 . The Hilbert space of low-energy excitations on top of this state approximately factorizes into ordinary excitations and those behind the horizon of the black hole. As seen in the correlator C 2 , we then create a particle φ at time t = −t * . This is represented by the input of the state |φ in the bottom right part of the figure. This state is part of the Hilbert space spanned by action of algebra A. Let U denote the unitary that acts on this Hilbert space. This unitary rotates the state |φ into other states in the same Hilbert space. In physical terms, the state |φ undergoes time evolution in the CFT. The goal then is to reconstruct the state |φ . The action of the double-trace operator unitary V couples simple JHEP01(2020)062 operators to their mirrors. In the circuit diagram, U represents the unitary that denotes time evolution in the mirror Hilbert space. This operator acts on the state |φ and mixes it with generic mirror excitations like | φ . One has access to the mirror excitations (in the code subspace) and in principle one can reconstruct the state |φ . For this, one first evolves the state |φ with the mirror unitary U for a scrambling amount of time. And then one measures an appropriate mirror particle | φ which the state |φ would have the most support on. This is represented by the final steps in the correlator C 2 . In the end, we are able to reconstruct the state |φ .

Discussion
In this paper we discussed the bulk geometry dual to a typical CFT microstate. We proposed that the geometry corresponds to the extended AdS-Schwarzschild solution, including part of the left region. We argued that the existence of state-dependent CFT operators, the mirror operators, supports this idea.
We formulated a one-sided analogue of the Gao-Jafferis-Wall protocol to probe the geometry beyond the exterior, which shows that perturbation of the CFT Hamiltonian by state-dependent operators would allow particles in the region behind the horizon to escape the black hole and get detected in the CFT. This protocol directly relates the smoothness of typical black hole microstates to the technical conjecture that correlators in the thermal ensemble and correlators in the microcananonical ensemble are the same at leading order. The non-trivial aspect of the condition is that it must also hold at timescales of the order of the scrambling time. We looked at various aspects of this conjecture with techniques from statistical mechanics, the Eigenstate Thermalization Hypothesis, chaotic correlators, and numerics in the SYK model to provide partial evidence for the conjecture. We were, however, unable to find a full proof. It would be interesting to find a CFT proof of this conjecture, which would provide additional new evidence in favor of a smooth horizon for typical states.
An important question in understanding the black hole interior in AdS/CFT is to identify a precise CFT computation, whose result contains information about the spacetime behind the horizon. The mirror operators allow us to provide a description of the interior, however the mirror operators are defined in such a way that they reproduce a smooth interior. In order to have independent evidence it would be desirable to identify computations sensitive to the smoothness of the horizon, which involve only ordinary state-independent CFT operators. In this work we have made a small step in this direction, by arguing that the existence of a smooth horizon for a typical state implies certain predictions for OTOCs of ordinary single trace operators on typical states. In particular it implies that they remain close to thermal correlators even at scrambling time, when chaotic effects amplify 1/N corrections. As we mentioned, this condition is a necessary condition for a smooth horizon and it is formulated as a purely CFT statement which can in principle be investigated without reference to the bulk dual.
This paper highlights the usefulness of considering state-dependent perturbations of the CFT Hamiltonian, which allows us to probe the region behind the horizon. Similar state-JHEP01(2020)062 dependent perturbations, but in a class of a-typical states, have been previously considered in [8,[13][14][15][16][17]. It would be interesting to understand better the possible relevance of such perturbations for general thermal systems, not necessarily dual to black holes in AdS. The perturbations considered in this paper have the form O O, connecting the interior to the exterior. It would be interesting to understand possible connections with the proposal formulated in [58].
Finally, it would be interesting to connect the results of this paper to the question of how the infalling observer can use the state-dependent operators to experience a smooth interior.

JHEP01(2020)062
not scale with N , similar to the ω < ω * approximation used in the main text. For short time scales, and filtering out high frequencies, we have that the subleading 1/N corrections in the Euclidean computation will remain small. Hence we conclude that The next step is to replace the canonical with the microcanonical ensemble. Since the r.h.s. depends on the energy of the black hole only via the temperature, we expect that the saddle point approximation will be reliable and we conclude that The next step is to replace the microcanonical with the typical pure state. Here we expect the approximation of the l.h.s. to be good up to exponentially small corrections, as discussed in section 5. Hence we find as claimed.
In general we expect that the time separation on the boundary has an inverse relation to the distance from the horizon. The argument above suggests that there cannot be any modifications to the exterior geometry (or the state of the quantum field on top of the geometry) to any O(N 0 ) distance from the horizon. The argument above does not exclude the possibility that there are modifications at -say-Planckian distance from the horizon, which would be detectable by an observer hovering very near the horizon.
However, for the infalling observer these possible modifications do not affect low point functions computed at macroscopic space and time separations in the frame of the infaller. For example, if we compute a two-point function between a point in the interior and a point in the exterior, separated by a distance of horizon scale, the two point function is robust even if we introduce cutoffs in the frequencies of the modes involved, as well as on the time scales over which we have access on the boundary [24,59].
The argument above does not directly apply to the connected part of higher point functions, since that is suppressed by powers of 1/N and hence the perturbative expansion mixes up with the corrections of the order of 1/N from comparing the ensembles. It might be possible to disentangle the two types of corrections by taking the limit where the temperature of the black hole is very large. However, we will not explore this possibility further in this paper.
Notice that similar approximations for time scales of the order of scrambling time, and for the O(1) part of higher point functions, would follow from the conjecture of section 5 for this system, which remains currently unproven.

B Time-dependence and choice of T of the mirror operators
Since we are considering time-dependent perturbations, it is convenient to work in coordinate space, so we would like to define the mirror operators as a function of time. This

JHEP01(2020)062
suggests that we should Fourier transform O ω back to coordinate time, modulo the limitations imposed by the restrictions on the frequencies discussed above. However here we encounter an interesting subtlety.
First of all we make a general observation in quantum mechanics: by specifying the matrix elements of an operator in the Heisenberg picture, as we have done in equations (2.13), it is not possible to conclude what is the physical time at which the given operator is localized. For instance, if we are given the matrix elements of two different operators, we do not have enough information to conclude what is the relative time-ordering of these two operators. 27 Hence, assigning a particular physical time to operators requires extra information that has to be specified in addition to the Heisenberg picture matrix elements. 28 For local operators O(t, x) in a CFT, it is natural to localize the operators in physical time which is given by the argument t. Notice however, that this is simply the most "natural" choice, but not a unique one. For example, we can imagine that the operator O(t, x) is localized at a time t = t. This is the notion of the "precursor" of an operator [60,61].
In the case of local operators, the choice t = t is dictated by simplicity, as precursors are complicated operators. In the context of AdS/CFT the choice t = t for local operators, is also dictated by our desire to have a theory with a semiclassical bulk dual. If we consider a holographic CFT where the Hamiltonian is perturbed in a time-dependent fashion by local operators, for which the localization in physical time coincides with their argument t, i.e. if we avoid using perturbations by non-trivial precursors, then the dual geometry corresponds to solutions of gravity where the non-normalizable mode -corresponding to the source of the operator -is turned on in a particular time-dependent fashion. However if we consider perturbations by non-trivial precursors then the bulk interpretation may go beyond effective field theory, see for example [62] for a discussion.
This raises the question: how should we assign the mirror operators to any given physical time? In particular how should we select the time-ordering of the mirror operators? We will answer this question by imposing the following criterion: the mirror operators should be assigned a physical time in such a way that if we consider time-dependent perturbations of the Hamiltonian by mirror operators, the effect can be described by effective field theory in the bulk.
We already described in section 2.2.1 that according to this criterion there is a oneparameter family, labeled by T , of useful choices. All choices of the parameter T above lead to equivalent results, regarding the interpretation of the bulk geometry, if it is defined relationally with respect to the right boundary and if we do not turn on any sources for the O's. However, since depending on the choice of T the mirror operators are anchored differently on physical time, the choices of T differ in what are the allowed time-dependent perturbations that we can do 29 -see example at the end of this subsection. For a given desired experiment, some choices of anchoring T may be more convenient than others. 27 And to analyze time-dependent perturbations of the Hamiltonian it is necessary to have a well-defined notion of time-ordering. 28 In the Schroedinger picture the localization of an operator in time is rather obvious. 29 Of course we could also act with mirror operators which do not respect a single selection of T . This would not be fundamentally wrong, but it would not be consistent with a simple bulk dual geometry.

JHEP01(2020)062
We continue the discussion from section 2.2.1 to emphasize several non-trivial aspects of the time dependence of the mirror operators together with the choice of T . We write the (approximate) equations for the mirror operators in position space as follows, We emphasize again that we do not want to define the mirror operators for sharply timelocalized operators O(t). The meaning of the equations above is that they are correct, provided that we convolute the operators with smearing functions in time, such that they pick out the Fourier modes with frequencies |ω| < ω * . However, to simplify the notation we will continue writing O(t), with the understanding that the operator has to be smeared out sufficiently. As we take ω * to be larger, the approximation to a local operator becomes better. Comments.
(1) Notice that the mirror operators as defined above obey Hence for any choice of T , we are talking about the same set of operators, but anchored differently on physical time t. Equation (B.2) is an example of using "precursors" of operators, to localize them at different moments in time.
(2) In the bulk the choice of T corresponds to whether we think of the geometry as representing either the thermofield |TFD or one of its time-shifted cousins e −iH L T |TFD , see [31]. Notice for instance given that for equilibrium states we have Ψ|O ω 1 O † ω 2 |Ψ ∝ δ(ω 1 − ω 2 ), we find the two-point function above is a function of (t 1 + t 2 − T ) and highly peaked around t 1 + t 2 − T = 0, which is the same as the behavior of two-sided correlators in the time-shifted thermofield states e −iT H L |TFD , where we take both times in the CFTs t 1 , t 2 to run forward.
(3) We emphasize that if we only study correlators of operators in "autonomous states" in which the Hamiltonian is not time-dependent, then there is no way to distinguish between the different choices of the framing T .

C Spherical shells on an Einstein-Rosen bridge
In this appendix, we will study the gluing of spherical shells on an Einstein-Rosen bridge.
The goal is to understand bulk energy associated to matter in the right and the left regions. Using Einstein's equations, we will check that the mass of some matter to the left of the bifurcation horizon, if gravitationally dressed with respect to the right, is negative with respect to the right asymptotic boundary. This is similar to a particle constructed using mirror operator as discussed in section 2.5.1 using purely CFT technology. The discussion here will be purely classical but it does show some aspects that are shared with the mirror operators. We will focus on 4d asymptotically flat space-time for ease of calculation. A useful reference is [63]. We will consider the initial value problem assuming we are at a moment of time symmetry. We parametrize the induced spacelike metric of the bridge as ds 2 = χ(ρ) 4 (dρ 2 + ρ 2 dΩ 2 2 ). (C.1) For time-reflection invariant initial data (no extrinsic curvature) the Hamiltonian constraint of general relativity becomes R = 0, where R is the Ricci scalar of the spatial metric. For the ansatz (C.1) this becomes ∇ 2 χ = 0. The usual Einstein-Rosen bridge without matter is the solution χ = 1 + a ρ .

(C.2)
ρ is not the same as the Schwarzchild radial coordinate r. Expanding near ρ → ∞ we find a = GM 2 . Moreover, we can multiply χ by an arbitrary constant without changing the physical metric. So more generally if we take χ = c 1 + c 2 ρ we find that the right mass is M R = 2c 1 c 2 G . Notice that the left mass is also the same, which can be found by ρ → 1/ρ. We introduce a sphericall shell of matter which is momentarily at rest at t = 0, at a location ρ = b. This means that the solution will be

JHEP01(2020)062
This depends on 5 parameters. One is trivial and eliminated by the overall rescaling. Another is eliminated by demanding continuity of χ at b. The others can be selected to correspond to: i) left mass M L , ii) position of shell b iii) T 00 of shell, which will be related to the "kink" of χ. These will fix M R . Of course one can reorganize the independent parameters differently. Continuity of the metric at the gluing demands that: The last parameter c 1 can be expressed in terms of the stress tensor of the shell of matter. For initial data with time reflection symmetry the constraint equation in the presence of matter reads R = 16πGρ matter , where ρ matter = T ab n a n b and n a is the unit normal vector. In this case the unit normal is n a = 1 √ f δ a0 , where f = 1 − 2 GM R r , expressed in terms of ρ. We select an infinitely thin shell: T 00 = µf δ(y − y 0 ), where y are locally flat radial coordinates. Converting to ρ this becomes We must, therefore, solve − 8 ρχ + 2χ ρχ 5 = 16πGρ matter (C.7) to obtain c 1 . This can be simplified across the shell. (C.9) We can use this to eliminate c 1 from equation (C.5) to obtain an expression for M R M R = 1 − 8π 2 G 2 b 2 µ 2 − 1 + 4G 2 πµM L (1 − 2Gπµb) 2πG 2 µ(2πGbµ − 1) . (C.10) Expanding to linear order we find If we gravitationally dress the operators with respect to the right, then M L is constant. Then we see that at linear order in µ the change of the mass M R flips sign as we move the shell through the bifurcation point, which is at b = GM L 2 before we add the shell. This is consistent with the commutation relations of the mirror operators with the CFT Hamiltonian in (2.13).

JHEP01(2020)062 D Numerics in the SYK model
The numerical study of the SYK model is straightforward for low enough values of N . The fermions satisfy the Clifford algebra where we have used a slightly different normalization than usual. This allows one to represent the fermions as Euclidean gamma matrices. For N = 4, for example, the matrices are, The Hamiltonian is the sum over q different products of these matrices, multiplied with a Gaussian-distributed random number, with mean zero. Calculations are fastest for the minimal q that still has interesting dynamics. Therefore, q = 4 is chosen, where J sets the scale for the model. We can, therefore, set J = 1 to simplify this further. The energy levels and energy eigenvectors can be obtain by diagonalizing the Hamiltonian. The typical state is constructed as a superposition of these vectors. Taking the usual Laplace transform to get the relation between energy and temperature does not work because the energy levels are not smoothed out for low N , see for example figure 22. Instead, the temperature is fixed by demanding that the average energy in the typical pure state is the same as that in the thermal ensemble. This leads to an order O(1/N ) error for the temperature in the large N limit, but it is computationally fast. For the numerics in this paper, β = 5 is chosen for the inverse temperature.
In the rest of this appendix we will show several figures that were used in the main text at different N . We compare the thermal correlators with the pure state correlators,      JHEP01(2020)062 Figure 27. We compare the expectation value of S 1 (t)S 1 (0) in the thermal state (blue) and pure state (red).

Figure 28.
Comparing the traversable wormhole correlator (4.24) in the thermal state (blue) and typical state (red). The dotted line is the signal without the probe, which is the response one obtains from just the state-dependent perturbation and should disappear in the large N limit, in this case a sum over five pairs of operators was used in the perturbation to limit this effect. The vertical line denotes the scrambling time and is the time around which the probe is focused.