V - How the fourth lock is being sold
Watch the fourth lock go in, because it is happening in the open and it is a perfect demonstration of everything above.
Why now? Because encryption won. For a century and a half the state read what it liked, and then end-to-end encryption became the default in the products everyone uses, and a visibility that had been assumed since the telegraph evaporated in about five years. Client-side scanning is not an expansion of state capability. It is an attempt to restore a capability that was lost — which is why it targets the endpoint, the one place encryption cannot protect.
And why is it sold on child abuse? Because the flood selected the argument. A population that can only emit one bit can also only receive one bit — and the most efficient single bit ever found for moving a public is a child in danger. It arrives pre-weighted. It cannot be argued with. It is the one signal that survives an attention environment in which everything else has been flattened to the same pitch, and it survives precisely because everything else has been flattened. Nobody would pass this to catch tax evaders. Everybody will pass it to catch abusers.
The abuse is real. That is not the trick. The trick is that every one of these is sold as a narrow capability and lands as a general one. Scanning for abuse material requires the ability to scan everything — and what you then have is a general inspection apparatus with a policy layer deciding what it flags. Verifying an age requires knowing who you are — and what you then have is identity welded to browsing, with a rule saying we only look at the birthday. The abuse case is genuine and the infrastructure it justifies is general, and those two facts are not in tension. They are the mechanism.
Stafford Beer gave the only test that matters here: the purpose of a system is what it does. Not what it was meant to do. What it does. The stated purpose is child protection. The thing that gets built is a general identification and inspection layer for the open internet, and the policy governing its use is a configuration file.
And it is being built in a hurry, everywhere at once, for the reason the last section gave. It only needs a mandate once. It does not need a public that consents to it next year, or a government that believes in it in a decade. Once it exists, it does not decay.
✦ ✦ ✦
VI - The machine that returns the average
Against all this, the hope people reach for is the new machine — that it will be the equaliser, the digital philosopher, the thing that hands the flood back to us as something we can hold.
What it genuinely is: a variety amplifier at the edge. It enlarges the repertoire of the person at the boundary. Someone who could not previously read a lease, parse a privacy policy, audit what a broker holds on them, or read the actual text of a bill can now do all four. That is Ashby's law running in the right direction for once — variety imported exactly where the disturbance had exceeded the individual's own. Real, and not small.
But it is an amplifier, and it is not a philosopher, and the distinction carries the argument.
The model is a compression of the corpus toward its mode — toward the most probable continuation, which is the average of everything already said. Ask it what to do about surveillance and it returns the modal answer, which is the answer already in circulation, which is the answer that has conspicuously failed to dislodge anything. The uncanny agreement between different models is not many minds independently arriving at truth. It is one averaging operation, sampled in many rooms, mistaken for a chorus.
Now recall the operation those four thinkers performed. Each took what was invisible because it was ordinary and made it visible as a construction. The antithesis, by definition, is the thing the corpus does not yet contain — the sentence that carried a very low probability right up until it was written.
A system trained to predict the corpus is, by its own objective, trained not to produce that sentence.
Heinz von Foerster gave the principle underneath: order from noise. A system self-organises into new structure only if it has access to a noise source whose variety matches the space being searched. New form comes from noise, and the noise must be rich enough, or the system converges on what it already was. A model tuned to return the likely continuation is a deliberately impoverished noise source. That is not a defect. That is the specification. A monoculture does not mutate.
And so the machine arrives as a strange ally of the third lock. Hardwired hierarchy attacked the capacity to render the ordinary strange by insisting the ordinary was natural. The averaging machine attacks it from the other side — by making the ordinary frictionless, endlessly available, always the first answer to hand. One says it cannot be otherwise. The other says here is what everyone already thinks. They arrive at the same silence from opposite directions.
Whether the curve closes open or closed is not yet settled, and anyone who tells you otherwise is selling something. But the question is not abstract and it is not metaphysical. It reduces to a single engineering fact with a political consequence, and it is the same question the four locks have been asking for three hundred years:
Does the inference happen on a machine you own, or on a machine you rent?
Everything turns on this, and almost nobody is treating it as the political question it is.
Cloud inference is the datacentre lock, wearing a helpful face. Look at its properties and check them against the list. Every prompt is a disclosed thought — you cannot ask the machine to help you think without telling it what you are thinking about, and there is no version of the transaction where that is not true. The weights can be changed under you overnight, and what the model will and will not say is a configuration file, pushed at three in the morning, to every node at once. Access is metered, revocable, and priced. The capability lives in a hall you cannot enter, owned by a firm you cannot vote against, and if it is withdrawn there is nothing you can do and nowhere else to go. It is a lock with all four properties: permanent, unreachable, maintenance-free, and enforced by machines that do not tire.
Local inference is a different object entirely, and the difference is not ideological. Weights on a disk you own do not phone home. They cannot be revised while you sleep. They cannot be revoked, metered, or made to refuse you. They will still run in ten years on hardware nobody is supporting, in a jurisdiction that has banned them, for a person who has been de-platformed everywhere else. They are — and this is the entire point of this essay — maintenance-free, permanent, and outside the reach of anyone's configuration file.
A model you can run offline is a counter-ratchet. It is the first artefact in fifty years that has the ratchet's own properties and points the other way.
Which is precisely why the fight over it is the fight, and precisely why it is being lost quietly, in the frenzy phase, while everyone argues about whether the machine is conscious.
And it is being lost. Watch the direction of travel rather than the press releases. The frontier consolidates rather than diffuses. Open weights lag the frontier and the gap widens rather than closes. Compute is the binding constraint, compute is a physical asset, and physical assets concentrate — which is what the datacentres are for. Every incentive in the industry pushes inference into the hall and away from the device, because the hall is where the meter goes, and the meter is where the business is.
So the honest statement of where we are: the amplifier is real, and it is arriving pre-installed inside the lock. If the curve closes with inference metered, weights held, and compute concentrated in five firms, then the technology was not absorbed into society — society was absorbed into it, and the amplifier was never a crack in the ratchet. It was the tooth that made the ratchet feel like a gift.
The frenzy phase is when these things are settled, and the frenzy phase is now, and it is being settled while almost nobody is looking. Which is when these things are always settled.
✦ ✦ ✦
VII - Chile, 1972
There is one serious attempt on record to build a nervous system for a whole society under time pressure against a hostile environment, and its real history is more useful than its legend.
Stafford Beer arrived in Chile in 1971 at Allende's invitation. He explained his model of organisational viability — power held by the parts nearest the problem, the centre existing mainly to keep the parts from destroying one another — to a president trained as a pathologist, who grasped its biology at once. When Beer reached the top of the diagram, the place reserved for the president himself, Allende leaned back and said: at last, the people. The system, he told Beer, had to behave in a decentralising, worker-participative, anti-bureaucratic manner, or it was worth nothing.
What they built was improvised and brilliant. Five hundred telex machines, found in a warehouse — bought by a previous government, never used — wired into a network three thousand miles long. Statistical software to catch anomalies before they became crises. An economic simulator. An operations room in which the designers' declared priority was the human operator: understanding over spectacle.
Then the test. In October 1972 thousands of truck owners struck, intending to halt the economy and prepare the ground for a coup. The government used the telex network. Two thousand messages a day moved the length of the country. With perhaps two hundred trucks of its own, the government kept goods moving, and the strike broke. A senior minister said afterward that the government would have fallen without it.
It worked. And now the part that should stop anyone who plans to build.
Read what actually did the work. The telex network was the only component that proved useful — and not in the way intended. The coordination made essentially no use of the statistical software, the operations room, or the cybernetic apparatus at all. Its chief advantage over the telephone was that it left a written record.
The elaborate system did not save Chile. A fast, flat, plain-text channel did — in the hands of people who already knew what they wanted and had the standing to act.
Beer designed that architecture for worker autonomy. Within months he was receiving invitations from the dictatorships of Brazil and South Africa to build them something comparable. Nothing in the design prevented this. Nothing in a design ever can.
In September 1973 the coup came. Allende died. The regime that followed destroyed every trace of the project.
Two lessons, and they cut in opposite directions. The tool amplified an existing intent and did not manufacture one: strip out the political project and you have five hundred telex machines in a warehouse, which is precisely what they had been the year before and precisely what they were worth. And yet what survived contact with reality was not the intelligence but the plumbing — the dumb thing that just moved messages, fast and flat, between people who had something to say to one another.
Hold both. The movement is what makes the tool mean anything. And the tool that means anything is always the boring one.
✦ ✦ ✦
VIII - What beats a ratchet
Ashby left one more gift, and it is the release from an obligation that has paralysed more people than any surveillance apparatus ever has.
It is the black box method: you regulate a system by its behaviour at its boundary. You never require that the box be opened.
You do not need to comprehend global capital to be a competent regulator of your own slice of it. Nobody comprehends global capital. And the demand that you first understand the whole before you are entitled to touch any part of it is among the most effective devices ever built for ensuring that nothing is ever touched. Comprehension of the whole was never the requirement. What is required is sufficiency at your own boundary, and a working connection to the boxes beside you.
Which gives the shape of the answer — be locally sufficient, and be coupled — and everybody drops the second half.
Local viability does not compose into collective viability for free. Ten thousand people each running their own infrastructure is ten thousand healthy, isolated units, and islands erode nothing. This is not hypothetical. It is the entire history of the federated web and the entire history of privacy tooling: a thousand excellent boxes, no bridges between them, and a monopoly that has not moved a millimetre. Everyone built their box. Nobody built the couplings.
And now recall what a ratchet is. It holds because it does not decay. There is exactly one property that can beat a structure like that, and it is not passion and it is not numbers. It is the ratchet's own property: permanence at near-zero upkeep. A protest decays the moment everyone goes home. A protocol does not. An outrage costs everything to sustain and yields nothing when it stops. A working standard, once adopted, costs nothing to sustain and does not stop.
Against a machine that consolidates permanently, only permanent things count. Not sentiment. Infrastructure — the boring, horizontal, maintenance-free kind. The plumbing. The thing Chile actually survived on.
And this is where the fourth lock turns out to be the softest of the four, because it rests on a premise that is simply false — and it is worth being exact about why, because vagueness here is how the lock gets installed.
The load-bearing claim. Every one of these programmes rests on a single unexamined sentence: to check a fact about a person, you must first collect the person. To know that someone is over eighteen, you must see their passport. To know that a message is not criminal, you must read the message. It sounds like arithmetic. It is false, and it has been false for about fifteen years.
What the site actually needs. Count the information. A site subject to an age gate does not need your name, your face, your document number, or your birthday. It needs one bit: over eighteen, yes or no. Everything else it is currently collecting is surplus — and the surplus is not an accident of implementation. The surplus is the lock. The single bit is the pretext under which the surplus travels.
How you deliver one bit and nothing else. The mechanism is not exotic and it is not new. Three moves:
The issuer signs, once. A government — someone who already knows your birthday and has no business knowing your browsing — issues a credential to your phone, cryptographically signed, attesting to your date of birth. This happens once. The issuer is not present for anything that follows and never learns where you go.
You hold it. The credential lives on your device. Not in a national register, not on a vendor's server, not in a database that can be breached or subpoenaed or sold. On the phone in your pocket, under a key only you hold.
You prove a statement about it, without revealing it. This is the part that sounds like magic and is merely mathematics. A zero-knowledge proof lets you demonstrate that a statement about hidden data is true, while revealing nothing about the data beyond the truth of that one statement. You can prove the birthdate in this government-signed credential is before 2008 — and the site learns exactly that and exactly nothing else. Not the date. Not the document. Not your name.
And the property that actually matters: unlinkability. This is the one everybody skips and it is the whole ballgame. A well-built proof is fresh each time — the token you hand to one site cannot be matched against the token you hand to another. Two sites, colluding, comparing notes, cannot tell they are looking at the same person. Without this, you have not built privacy. You have built a national identifier that follows you across the web and calls itself a privacy feature — which is, precisely, what the surveillance vendor is selling.
So the argument for the lock collapses. Child safety and mass identification were never a package. They were sold as a package, by people with an apparatus to justify. The cryptography that separates them is mature, standardised, and running in production. The abuse is real. The apparatus is not necessary to address it. Those two facts have been true simultaneously for years, and the entire architecture of the fourth lock depends on nobody noticing.
Now watch what is actually being built, because it is the whole essay in miniature. In April 2026 the Commission unveiled an age-verification app, open source, wallet-based, built on the coming European identity wallet — and the blueprint states plainly that unlinkability is achieved by design through zero-knowledge cryptography. The right premise. Exactly the right premise.
Then read the specification. The zero-knowledge proofs are should implement, not must implement — meaning a member state may lawfully ship a system that is pseudonymous rather than anonymous, which is to say a system that links. Read the shipped code and it is worse: the zero-knowledge implementation is switched on only in the demo build. The default build does not enable it. There is no production build that does. A citizen downloading the app is not getting the protection the blueprint advertises. And the underlying regulation — the one that will govern every European's identity by the end of this year — contains no obligation to use zero-knowledge proofs at all.
The privacy is real, and it is optional. The identification is real, and it is mandatory. The unlinkability is in the press release and the demo branch; the linkability is in the shipping default and the statute.
This is how a lock gets installed in a liberal democracy. Not by defeating the objection — by conceding it in the specification and declining to implement it.
Which tells you exactly what the work is, and it is not a march and not a petition. The mathematics is done. The standards exist. What does not exist is the boring, permanent, horizontal thing: a reference implementation that actually turns the proofs on, a verifier so cheap and so well documented that a mid-sized site adopts it without thinking, and enough working code in the world that shipping the linkable version becomes the expensive, embarrassing, indefensible option. Not a campaign against the lock. A component that makes the lock's justification unnecessary — and that, once it exists, does not have to be rebuilt tomorrow.
That is what it means to attack a lock rather than protest it. You do not oppose the conclusion. You remove the premise. A march must be re-mounted every Saturday until everyone is tired. A protocol, once adopted, holds by itself — which is the only property that has ever beaten a ratchet, and it is available.
Which is, at last, where the new machine is genuinely useful and where the hope was misplaced. It will not hand you the antithesis; it returns the average, and the average is what got us here. What it does is collapse the cost of building the couplings — the protocols, the bridges, the adapters, the interoperability work that has always been the only thing standing between a thousand islands and an archipelago, and that has never been built because it is tedious and unglamorous and nobody's career was ever made on it. That labour just became cheap. It is the first time in fifty years that the cost curve of the boring permanent thing has moved in our direction.
Ivan Illich drew the line that decides whether any of it counts, and it is not open source against closed. A tool is convivial when it amplifies the variety of the person using it, and not when it amplifies the variety of the institution deploying it. The bicycle amplifies the rider. The car amplifies the road system, and the rider ends up serving it. On that axis, inference you do not run, weights you do not hold, and a context window that is somebody else's telemetry are not standing where you need them to stand — whatever the licence file says. The model on hardware you own is a different object from the same weights behind someone's endpoint. The difference is not ideological. It is structural, and it is the entire thing.
So build. But build the permanent, boring, horizontal parts — the couplings, not the islands — because a ratchet is only ever beaten by another ratchet, and everything that must be re-fought each morning has already lost.
✦
And understand what the building is for, because it is not what people usually say it is for. It is not for privacy, exactly, and it is not for freedom in the abstract, and it is certainly not for the pleasure of running one's own hardware.
Go back to the clerks. What killed them was not poverty and not overwork. It was the experience of being subject to a system they could not influence — and that condition is now the ordinary condition of ordinary life, delivered continuously, with the attenuators stripped away and the levers dissolved. People are dying of it, in numbers we have agreed to file under other headings.
So the real question was never how do we resist the apparatus. The real question is: what will stand between a person and the flood? Because something will. That role does not stay empty. It was held, for a while, by the union and the pension and the public institution, and those were dismantled — and into the vacancy has walked a man in every country at once, offering to hold it all himself, and being believed, because the offer is a hand and the drowning is real.
He cannot do it. The flood is not smaller because he is loud. And what he will do instead is dismantle the last of the machinery that might have absorbed it, in the name of the people it was failing.
This is the choice, and it is the only one on the table. Either the thing that stands between a person and the flood is a structure they can reach, inspect and change — or it is a man who promises to take the decisions away.
There is no third option in which nobody attenuates. The position gets filled. It is being filled right now.
Which is what a protocol actually is, correctly understood. Not a technical preference. An attenuator you can reach. A thing that stands between you and the disturbance, that you can inspect, fork, refuse, and rebuild — and that does not require you to hand your judgement to anyone in exchange for peace. It gives back the one thing the Whitehall data says people are dying for want of, which is not comfort and not certainty and not even prosperity. It is control at your own boundary: some small perimeter of the world that answers when you push on it.
That is the whole of what is being fought over. Not surveillance. Not the internet. Whether an ordinary person will live inside a system that responds to them, or inside one that does not and is killing them for it.
And do not wait for the machine to tell you what any of it is for. It has read everything ever written and will hand you back the average of it, which is exactly the thing that got us here.
Four locks were built to make certain that the ordinary could never again be made strange. The last one is still being installed, and there is still a gap between the blueprint and the binary, and the gap is where the work is.
The antithesis will have to be written by someone willing to be wrong in a way the corpus has not yet recorded. But it will not be written by a person who cannot reach anything, and that — not the argument, not the analysis, not any of this — is the thing that has to be built first.
Sources & Debts
W. Ross Ashby — An Introduction to Cybernetics (1956); Design for a Brain (1952). The Law of Requisite Variety: only variety can absorb variety. And the black box method: regulate by behaviour at the boundary; never require the box be opened.
Stafford Beer — Brain of the Firm (1972). Viability as the balance of local autonomy and central coordination; the doctrine that the purpose of a system is what it does. Architect of Project Cybersyn.
Eden Medina — Cybernetic Revolutionaries (2011). The definitive history of Cybersyn, and the source of its uncomfortable verdict: the difficulty of building a system meant to change existing power relations and then hold the new pattern in place over time.
Quinn Slobodian — Globalists (2018) and Hayek's Bastards (2025). Neoliberalism as the encasement of markets against democracy rather than their liberation from the state; and the three hards — hardwired human nature, hard borders, hard money — as a frontlash emerging within the neoliberal movement rather than against it. The Brimelow material on ethnic coherence and market friction is his.
Antonio Gramsci — Prison Notebooks (1929–35). Hegemony: domination secured not by force but by making the arrangement seem so ordinary its alternatives become unthinkable — and therefore contestable only by the slow war of position, on ground that erodes.
Silvia Federici — Caliban and the Witch (2004). The enclosures and the witch hunts as the deliberate reconstruction of a bargaining position after the post-plague gains — the counter-attack aimed precisely at the leverage that produced the victory.
Karl Marx — Capital (1867). The programme was implemented badly and mostly failed. The analysis showed a thing everyone took for weather to be a machine with an owner, and it still cuts.
John Maynard Keynes — The General Theory (1936). An economy can rest indefinitely below capacity; mass unemployment is a stable equilibrium, not a passing imbalance. Precisely the capability hard money exists to disable.
Karl Polanyi — The Great Transformation (1944). The self-regulating market was constructed by states, not discovered in nature.
Simone Weil — Gravity and Grace; the factory journals. Attention as the substrate of moral life; the machine's deepest injury as the flattening of it.
James Madison — Federalist 10 (1787). The counter-majoritarian design brief, published in advance.
Neil Postman — Amusing Ourselves to Death (1985). The telegraph, and the arrival of information with no context and no available action; the peek-a-boo world.
Byung-Chul Han — The Burnout Society (2010). Exhaustion rather than oppression; deep attention displaced by the shallow scanning of a threatened animal.
Heinz von Foerster — order from noise: self-organisation requires a noise source whose variety matches the search space.
Carlota Perez — Technological Revolutions and Financial Capital (2002). The surge, the turn, the deployment. Robert Gordon — The Rise and Fall of American Growth (2016). The measurement of the plateau.
The EU Age Verification App — reference implementation released 15 April 2026; pilot in France, Denmark, Greece, Italy, Spain, Cyprus and Ireland. The blueprint at ageverification.dev states that unlinkability is achieved by design through zero-knowledge cryptography. The specification marks those proofs should implement rather than must implement; the shipped Android code enables them only in the demo build variant, with no production build that does; and eIDAS 2.0 itself carries no obligation to use them. The security analysis is Yivi's. The gap between the blueprint and the binary is the argument of this essay, stated in a configuration file.
Dan Davies — The Unaccountability Machine (2024). The accountability sink: a structure arranged so that a decision emerges and no human being can be found at the end of it. The link from the Whitehall gradient to the deaths of despair to the appeal of the strongman — that being subject to an unreachable system is a health risk, and that the demagogue's real offer is to take the decisions away — is his, and it is the argument on which this essay turns.
Michael Marmot — the Whitehall studies (1967 onward). The mortality gradient runs down the hierarchy, not up; and what predicts death is not hardship but the experience of low control over one's own life.
Anne Case and Angus Deaton — Deaths of Despair and the Future of Capitalism (2020). The mapping of the mortality curve onto exactly the places where the attenuators were stripped hardest.
Ivan Illich — Tools for Conviviality (1973). A tool is convivial when it amplifies the person using it, and not when it amplifies the institution deploying it.
https://www.linkedin.com/pu...