Sam Harris published an episode of his podcast on Thursday. It is called More From Sam: The Iran Deal, College in the AI Age, Mamdani’s DSA, and More. In it, discussing the fact that Zohran Mamdani has begun endorsing Democratic Socialists of America-aligned candidates and that some voters find them credible, Harris says the following:

The people who are finding the Democratic Socialists of America to be credible voices for the future of democratic politics — I mean, all of that’s frankly terrifying, and it is, you know, perfectly correlated with being a miseducated dummy coming out of a school like Columbia.

And:

You can certainly make the case that we have a lot of miseducated people out there now starting to run our institutions.

And, from an earlier episode where he laid out the same argument at length:

What my primary concern is the fact that we have a New York Times and a Democratic Party who think these two guys are the future of Democratic politics — and that is suicide. That in 2028 that is going to be suicide.

These two guys was Mamdani and Hasan Piker at the time he said it. It has since expanded. The Michigan Democratic Party held its Senate primary on August 5, and a physician and public-health advocate named Abdul El-Sayed defeated a moderate representative to become the Democratic nominee in a swing state — overcoming, per Al Jazeera’s tally, more than sixty million dollars in mostly pro-Israel outside spending against him. El-Sayed is Muslim. A note for the record before I go further: El-Sayed is not a democratic socialist, though the ideological label has been attached to him from several directions since his primary win. He has said plainly and repeatedly, in debate, on CNN, in the New Yorker, and elsewhere, I am not a socialist. I am a capitalist who understands how capitalism works, rooting the phrase in Adam Smith’s original argument that monopoly, not government regulation, is the greatest threat to a functioning market economy. He describes himself as a democratic capitalist. This is not the label that would change Harris’s mind about him. Harris’s objection to El-Sayed is not really about economic ideology and would probably survive the DSA label falling off cleanly. The socialist label is a background frame the piece I am writing has to get right; it is not what Harris’s complaint actually rests on. What Harris finds terrifying about El-Sayed is the same thing he finds sinister about Mamdani, and it is not the tax code. So Harris’s category has, since then, had a second name to fit inside it, and the category is not the one about economics.

Harris said when he was asked what the evidence was for Mamdani being a sinister figure and a none-too-closeted Islamist and a man captured by a fairly sinister theocratic agenda and an antisemitic one. Harris had no evidence. He had a metaphor about an interface and the kinds of things his wife likes on social media. The piece diagnosed that as the shape of a smear dressed up as the shape of an analysis. I want to pick that up now, because what four months ago looked like a single lapse now looks like a category. Two Muslim Democrats have run for high office in the interval. Harris has declared both of them existential problems for the country. This has stopped being about Mamdani. It was never about Mamdani.

⁂

Start with the sentence that in 2028 that is going to be suicide, because it is doing more work than it appears to do.

At the surface, it is a prediction. Harris is claiming that if the Democratic Party runs candidates like Mamdani and El-Sayed, or more broadly, if the party imagines these candidates as its future, the party will be crushed in the 2028 general election. There is a version of this prediction that is a reasonable political-analysis claim — a version that would come with polling data, coalition modeling, historical comparisons to McGovern in 1972 or Sanders in 2020, and honest acknowledgment that Mamdani has been running a functional municipal government for eight months and El-Sayed just won a swing-state primary against sixty million dollars of adverse money. That is not the prediction Harris is making. Harris’s prediction has no polling data in it. It has no coalition modeling. It has no historical comparison. It has one operative claim underneath: that the American electorate will not accept a Muslim Democrat, and that the party inviting the electorate to do so is committing suicide.

The claim is presented as a warning about the party’s electoral prospects. The claim is actually a description of the electorate’s bigotry, offered as if it were a fixed feature of physics.

This is the move that has to be looked at directly, because it is where Harris’s argument crosses from mistaken analysis to political operation. If you say, the country will punish the Democrats for running a Muslim candidate, therefore Democrats should not run Muslim candidates, you have not made an argument against the Muslim candidate. You have made an argument against the country’s bigotry, and then handed the country’s bigotry a veto over Democratic nominations. The moral responsibility for the fascism that would follow gets transferred, in this sentence, from the fascists to the Muslim Democrats and the party that nominated them. This is not a new move. In 1957 white moderates in the South argued that integration was electoral suicide for southern Democrats because white voters would defect to Republicans, and therefore integration should be slowed. They were right about the defection. They were wrong about what to do with the moral responsibility for it. In 2008 respectable commentators argued that Barack Obama’s relationship with Jeremiah Wright would cost him white swing voters, and therefore Obama needed to break with Wright and demonstrate his distance from the Black church tradition. They were right about the reaction. They were wrong about where to put the moral weight of it. Every generation has this argument, and every generation the operative structure is the same: a specific bigotry in the electorate is treated as an environmental fact, and the marginal group is told to accommodate the bigotry rather than the country being told to grow out of it.

Harris in 2026 is making that argument about Muslim Americans. He is dressing it in the language of tactical realism — I am just telling you what the country will do — but he is not just telling us what the country will do. He is instructing the Democratic Party to arrange its ticket around what he takes the country’s fixed prejudice to be. He is doing the accommodation. He is calling it strategy.

There is a rejoinder to this, and Nesrine Malik wrote it in the Guardian on August 10, five days after El-Sayed’s win. She is worth quoting because she is naming the same choice Harris is making, from the other side of it:

If the Democrats would rather lose on their own terms than win on the progressive left’s, then fighting these new candidates will establish the impression that they are freak radicals destined to fizzle out. But these candidates have alighted on what seems like the most viable politics right now. Refuse to embrace them wholeheartedly, and you guarantee that Trumpism wins again and again. Back them all the way to 2028. What, after all, do you have to lose that you haven’t lost already?

Malik and Harris cannot both be right. One of them is claiming that Muslim Democrats running on populist economic platforms — whether they are socialists like Mamdani or self-described capitalists with strong regulatory commitments like El-Sayed — are the party’s suicide in 2028. The other is claiming that refusing to back those candidates is the party’s guarantee of losing to Trumpism through 2028 and beyond. The evidence has to decide between them, and the evidence is not on Harris’s side. Mamdani’s approval in New York has risen through his first eight months in office. His signature initiatives — universal childcare funded on his eighth day, more than thirty million dollars recovered from landlords, a hundred thousand potholes filled — are what the New York papers cover on the days they are not being asked to help produce a theocracy panic about him. El-Sayed’s Michigan primary win came after establishment Democratic groups poured tens of millions into stopping him and lost. Whatever Harris is warning against, the voters have not so far taken the warning; the warning, in the end, is about them, not for them.

⁂

As for the phrase miseducated dummy coming out of a school like Columbia, because I think it is worth unpacking this for a moment, because I think it paints a picture of the disposition of the person making these arguments.

Mamdani has a bachelor’s degree from Bowdoin. El-Sayed has a doctorate from Oxford as a Rhodes Scholar and a medical degree from Columbia. Harris himself has a doctorate in cognitive neuroscience from UCLA. So the class Harris is describing when he says miseducated dummies coming out of schools like Columbia is the class he belongs to, the class Mamdani and El-Sayed belong to, and the class of American elite-university graduates that produces the country’s professional-managerial cadre. Harris is inside it exactly as much as they are. The phrase is a specific accusation, not a class critique, and the accusation is that a specific kind of graduate from a specific kind of school has been turned — has absorbed something the schools were teaching that Harris believes should not have been taught, and now presents in the political system as a kind of contamination.

What is the something? Not economics. Harris does not, in his podcasting career, spend much time on the details of universal childcare or landlord enforcement or the tax base of Michigan. Not foreign policy in any coherent sense either. Mamdani and El-Sayed have both been critical of the Israeli government’s conduct in Gaza, as have hundreds of members of Congress and much of the country. What the schools are supposedly having produced in these two Democrats, that Harris finds embarrassing in the graduates and terrifying in the voters who support them, is a specific stance toward political Islam — a stance that refuses to accept the master category framing Harris built his career on. The graduates are miseducated because they did not come out of school believing that political Islam is the primary risk to open societies and the primary lens for evaluating any Muslim politician’s fitness for office. They came out believing that a Muslim mayor should be evaluated on whether he collects the trash and a Muslim Senate candidate should be evaluated on his record as a public-health officer during the Flint water crisis. Harris finds this framing itself to be the sign of miseducation. In 2026 the demand that a Muslim Democrat be evaluated on his actual conduct in office is, in Harris’s telling, a symptom of a class of people who cannot see what is really going on.

The class of people who cannot see what is really going on is the class of people who will not agree that Muslim Democrats have to first prove they are not the enemy. Harris does not put it this way, because he cannot afford to. But that is what the sentences are for.

⁂

I want to pause on the miseducated dummies framing itself for one more paragraph, because I think there is a specifically American history that Harris is either forgetting or pretending he never learned. Young people being significantly more left-wing than their parents — sometimes radically so, sometimes to the point of frightening the professional classes that produced them — is one of the most ordinary and repeatedly-recurring conditions in the American record. The Churchill line about being a socialist at twenty and a conservative at forty is a joke about a real cultural regularity, and the joke exists because the regularity is real and stable and does not need explanation by a special theory of contemporary school miseducation. Every serious observer of American cultural life has seen this pattern for a hundred years, and no serious observer of American cultural life has ever taken the pattern to mean that the schools are producing a dangerous class of enemies of the country.

Harris apparently did not encounter the late 1960s in any depth during his own education, or he did encounter it and has decided to pretend that Zohran Mamdani telling New Yorkers he wants to fund universal childcare is a more alarming political phenomenon than what was actually happening in that decade. The Weather Underground bombed government buildings. Students for a Democratic Society took over Columbia in 1968 and shut the university down. The Free Speech Movement at Berkeley put Mario Savio on top of a police car with a bullhorn declaring that the machine had become so odious he was going to throw his body upon its gears. The Black Panthers were carrying rifles into the California statehouse. The Yippies were nominating a pig for president. Actual bombs went off in American cities, planted by American college graduates, in the name of an actual revolution against American capitalism. The moral panic about the miseducation of the young in that decade was much louder than anything Harris is saying today, because the young in that decade were doing much louder things than anything the DSA voters of 2026 are doing. And the professional class that came out of that decade — the class that had been the terrifying miseducated radicals of 1968 — became the professional-managerial class of the 1990s, which included, at its edges, Sam Harris. He is currently running the schools-are-producing-a-dangerous-class panic about a generation that has done nothing more radical than elect a mayor of New York who is fixing the potholes and a Senate nominee in Michigan who was a public-health commissioner during a lead crisis. Compared to the actual radicalisms his own cohort came out of, this is a moderate generation. He is treating it as an emergency because his framework needs an emergency.

Every reactionary panic about the young has, in retrospect, looked embarrassing to the panicker’s grandchildren. Harris will not be an exception to that record. When the historians of the 2020s look back at the DSA moment, they will note the moderate positions on housing and childcare and healthcare, the ordinary bureaucratic competence in office, the total absence of anything resembling the actual radical left of the 1960s, and they will wonder what the prominent secular liberals of the period thought they were seeing when they said the country was suicide-bound. This is not a prediction about the historians’ generosity. This is what the record already looks like when you compare 2026 to 1968 on any measure that matters. Harris has picked a strange decade in which to declare that the young have been miseducated into an existential threat.

⁂

There is a phrase clinicians use for what Harris is doing, and I am not reaching for it as an insult. The term names a specific cognitive failure, and it appears in every standard cognitive-behavioral-therapy textbook in the country. The term is mind reading. Mind reading is the cognitive distortion of asserting that you know the private mental content of another person, without evidence, and then reasoning from that assertion as if it were evidence you had gathered. The clinician’s shorthand for this move is that the patient knows what the other person is thinking, and the other person doesn’t get a vote about it. The move is considered a distortion in therapy for the same reason it is considered a distortion outside therapy: because the private mental content of another person is not observable, and treating it as if it were is what allows a paranoid style to be mistaken for perceptiveness.

Harris does this constantly with Mamdani. He knows that Mamdani is only self-censoring. He knows that Mamdani knows much more than he’s letting on. He knows that Mamdani’s answer to a question about intifada was not an answer but a non-answer worse than a dog whistle. He knows that behind the pothole and the childcare there is something very sinister happening. Every one of these claims requires access to a mental content Harris has not seen and has not been shown. Each of them is made with the confidence of a claim about weather. Ninety percent of what Mamdani says, in Harris’s telling, is a performance concealing an interior Harris has direct access to. The interior is sinister. The interior is theocratic. The interior is antisemitic. The performance is self-censoring. Harris is not making an inference from evidence. He is delivering a report from inside the mayor’s head, and inviting the audience to trust the report because the reporter is rigorous.

I know this from direct experience. It happened on Harris’s own turf. When Harris launched the Community feature of his platform — a paying forum for the kind of long-time listeners I described a moment ago — I posted a question there for him. The question was simple. Mamdani had at that point made several contemporaneous public statements condemning antisemitism, in plain language, without hedging, in venues where his audience was overwhelmingly not the pro-Israel right. I asked Harris whether he believed those statements were cynical performances designed to mask a truer animus, or whether he took them at face value as what Mamdani thought. That is a direct question with two possible directions. The face-value direction would have been the ordinary thing: a Democratic politician has said, in public, that he opposes antisemitism, and the burden of proof is now on the person who wants to say he does not mean it. The other direction — that the statements were cynical performances masking an antisemitic interior — is the mind-reading direction, and it requires either evidence of the interior or an admission that the reasoner is guessing. Harris did not answer my question in his own forum. He has, however, subsequently answered it in public interviews, and the answer he has given in public is that yes, he believes the condemnations of antisemitism are performances — that the antisemitism is in there anyway, behind them, and that the condemnations themselves are part of what is sinister about Mamdani rather than evidence against sinister-ness. This is the pattern named at the highest resolution I can name it at. A person who condemns antisemitism in plain language cannot get out from under Harris’s suspicion by condemning antisemitism in plain language, because Harris has already decided what the condemnation is for. The evidence that would count as evidence in any other case does not count here. The framework has settled the question in advance.

This is worth naming exactly because Harris trades on being the person in the room who does not do this. His whole intellectual brand is that other people mistake their intuitions for arguments and he is careful enough not to. The mind-reading pattern in his Mamdani material is a violation of the discipline he claims as his differentiator. It is also, mechanically, the same move every conspiracy theorist has ever made about a group they are convinced is not telling them the truth. The Elders of Zion knew what the Jews really wanted. The John Birch Society knew what the fluoride-drinking teachers were really up to. QAnon knows what the pizza-shop managers are really doing in the basement. In each case the operator has access to a private mental content that the ordinary observer cannot see, and the operator’s job is to translate the concealed interior into a public warning. Harris in 2026 is running that pattern on the mayor of New York City. He can seem to just be doing rigor; if you double-click on the argument, you find that he is doing a much older kind of thing, which is claiming to know what a Muslim political figure secretly believes and organizing his listeners’ politics around the claim.

One instance of mind-reading about one Muslim Democrat could be a bad day. The same pattern extended to a second Muslim Democrat within four months, alongside the miseducated dummies framing of the voters who chose them, is the shape of a pattern.

⁂

There is a specific piece of intellectual apparatus that makes this pattern coherent as a pattern, and it deserves to be named, because without naming it the mind-reading move looks like a personal quirk of Harris’s and it is not. It is an inheritance.

The term is taqiyya. In actual Islamic jurisprudence, taqiyya is a narrow, defensive, historically-contingent doctrine developed primarily by Shia Muslims during periods of persecution under Sunni-majority regimes. It permits the concealment of one’s religious identity when disclosure would mean death or torture. It is a survival provision, roughly comparable in shape to what Marrano Jews did under the Spanish Inquisition or what English Catholics did under Elizabeth I. Its actual scope in the scholarly literature is narrow: a defensive dispensation for a persecuted minority, playing a minor and specific role in Shia thought, and treated as essentially inert in Sunni jurisprudence. Scholars like John Esposito, Juan Cole, and Yasir Qadhi have said all of this in print, at length, and without hedging. This is not a fringe scholarly view. This is what people who read the primary sources say the primary sources say.

In the American right, starting roughly in the mid-2000s, the concept was hijacked and rebuilt. Robert Spencer, whose Jihad Watch and books like The Truth About Muhammad served as the intellectual clearinghouse for the anti-Muslim right; Pamela Geller, who ran the Atlas Shrugs blog and co-founded Stop Islamization of America with Spencer; and Frank Gaffney, whose Center for Security Policy produced the Team B II report claiming that Sharia was infiltrating American institutions — these three figures, and the apparatus they built, took the narrow Shia defensive doctrine and reframed it as a universal Muslim permission to lie to non-Muslims for political advantage. In the reframed version, every Muslim public statement of good faith is potentially strategic concealment. Every condemnation of terrorism is potentially cover. Every civic gesture is potentially the mask. The interior is always the truth and the surface is always the performance. Andrew McCarthy at National Review mainstreamed the frame into center-right respectability. David Horowitz’s operation propagated it through campus politics. By the time of the 2016 election the frame was ambient in the ordinary discourse of the American right about any Muslim in public life, from Keith Ellison to Ilhan Omar to Rashida Tlaib.

The function of the taqiyya frame, epistemically, is exactly what Harris is doing on Mamdani and El-Sayed. It provides a warrant for discounting a Muslim politician’s stated positions as evidence of the politician’s actual positions. It installs a permanent gap between the surface and the interior, and it locates the truth on the interior side of the gap. It converts any public act of civic assurance into further evidence of concealment, because concealment is now what the surface is for. Once the frame is installed, no Muslim politician can ever get out from under it by speaking, because speaking is the medium of the deception the frame anticipates. This is why Harris can hear Mamdani condemn antisemitism in plain language and treat the condemnation itself as sinister. The frame has already decided that plain language from a Muslim politician about antisemitism is what the deception looks like when it is being competent.

It would be somewhat difficult to convince me of the notion that Sam Harris consciously operates from Jihad Watch premises. I would guess he has read very little Spencer, has never quoted Geller, and would recoil at being placed in Gaffney’s neighborhood. That is not the claim. The claim is that the epistemic move — the permanent-gap-between-surface-and-interior-for-Muslims-specifically move — is now a background feature of American public discourse about Muslims, and it has been for twenty years, and it entered the water through the specific apparatus I just named. Harris did not have to build the frame. The frame is what the room around him has been breathing since roughly 2005. When he says if you double-click on Mamdani you find something sinister, he is running a version of the surface-and-interior epistemology that Spencer built the American form of. When he says Mamdani’s condemnations of antisemitism are performances concealing the actual antisemitism, he is running the taqiyya move without using the word. The word is the missing piece of the diagram; once you draw the word in, the picture becomes legible.

This also explains the asymmetry. Harris does not do this to Christian politicians. He does not tell his audience that when Mike Johnson gives a speech about American pluralism he is really concealing his Christian-nationalist commitments, though Mike Johnson has stated Christian-nationalist commitments on the record. He does not tell his audience that when J.D. Vance talks about civic decency he is masking his integralist theological interior, though Vance’s integralist commitments are traceable. The asymmetry is not about which politicians have stated theological views that would concern a secular liberal. The asymmetry is about which group has a specialized doctrine of presumed dishonesty pre-loaded in the surrounding intellectual environment. Christians do not. Muslims do. The doctrine is called taqiyya on the right, and it is doing work on the left every time a secular liberal decides that a Muslim politician’s stated commitments cannot be taken at face value.

⁂

There is a further problem with the frame that has to be named clearly, because the taqiyya section describes the frame’s epistemic function but does not describe what the frame is doing at the level of psychology. What the frame is doing at the level of psychology is supplying a theory of mind that Harris’s argument requires and that would otherwise be visibly implausible. When the frame is removed, the theory of mind is revealed as a claim about how human beings work that human beings do not actually confirm.

The operative theory of mind, when Harris’s method is applied to Mamdani, is that a person can hold a press conference condemning antisemitism, sponsor legislation to protect Jewish community institutions, employ Jewish staff, meet with Jewish constituents, keep a functioning executive schedule managing the largest municipal government in the country, and simultaneously — inside the same skull — be planning or hoping for a Jewish final solution. The public behavior and the private intention exist as a total split, with the surface performance and the interior program running on parallel tracks that never touch. This is what the if you double-click structure of the argument actually asks the reader to imagine. The mayor at the podium condemning antisemitism is one track; the mayor in the interior room planning the elimination is another track; and the two tracks coexist without producing the kind of psychic strain that would manifest in the surface behavior.

The problem is that human beings do not work this way. Ordinary human psychology has no documented capacity to sustain a total split between public performance and private intention on a matter of that magnitude, over years, while running a public office with the media exposure of a New York mayoralty. What does have that capacity is a small and specific set of extreme conditions: cult members whose formation involved the systematic dissolution of the boundary between self and doctrine, child soldiers who were forced across the threshold of ordinary moral inhibition before their moral faculties had finished developing, deep-cover intelligence operatives who received years of specialized training in maintaining a dissociative operational identity and who typically develop severe psychological consequences from the sustained split, and individuals with certain forms of psychotic or dissociative pathology who exhibit the split as a symptom of illness rather than as an achievement of ideological discipline. In every documented case, the split produces observable psychic strain that shows up in the surface behavior — micro-expressions, contradictions under pressure, breakdowns under sustained scrutiny, the pathological signatures a competent clinician or intelligence officer is trained to recognize. The split is expensive to maintain. It leaks.

Mamdani is not exhibiting the leakage. His public behavior over the course of his political career and his mayoral run has been the ordinary behavior of an ordinary progressive politician with a public record that is available for evaluation. He gives interviews. He answers questions under pressure. He negotiates with hostile counterparts. He manages staff. He appears at community events. There is a large surface area of his behavior available to any observer who wants to look at it, and the surface area does not contain the signatures the psychological theory would require it to contain. To sustain the double-click reading, the observer has to posit that Mamdani is either better than every documented cult member, child soldier, and intelligence operative at maintaining the split, or that Islam has supplied him with a form of ideological software that eliminates the ordinary cost of maintaining it. There is no third option available. Either Mamdani is a preternaturally gifted dissembler whose skills exceed the entire documented population of trained deep-cover operatives, or something about the ideology has re-engineered his cognitive architecture so that the split runs without strain.

This is where the taqiyya frame’s real work becomes visible, whether Harris uses the word or not. The frame is supplying the missing psychology. It says: here is why they can sustain it. Islam contains a doctrinal permission structure that reprograms the ordinary human cost of holding a public position at variance with a private one, and Muslim political actors operate inside that permission structure whether or not they consciously invoke it. Without that supply, the theory of mind is incoherent, because it is asking the reader to believe something about a working New York mayor that is not true about any working New York mayor who has ever existed. With the supply, the theory becomes internally consistent — but only by importing an anti-Muslim demonology as the psychological premise the theory rests on. The theory does not just happen to fit alongside a Spencer-shaped account of Islam as ideological software. The theory requires that account, because without it, the theory has nothing to say about why the ordinary constraints of human psychology do not apply to the mayor.

The reason to name this at length is that it changes the character of the objection. Uncharitability is a lesser complaint than the one the essay is actually making. The complaint is that Harris is deploying a theory of mind that fails on its own terms. He is attributing to a functioning mayor a cognitive structure that no functioning mayor could actually maintain, and he is holding the theory together by importing the specific demonology that supplies the missing piece. The theory is not merely unfair to Mamdani. The theory is wrong about how human beings work. It is wrong in a way that would be immediately visible if the target were a Catholic mayor or a Jewish mayor or a Mormon mayor or a Baptist mayor, because in those cases there would be no available demonology to supply the missing psychology, and the theory would collapse the moment it was stated. It is only sustained on Muslim political actors because there is a centuries-old apparatus, and a modern American form of that apparatus that Robert Spencer built, sitting ready to be imported as the pseudo-explanation the theory needs.

A secular liberal writer who takes psychology seriously — who has, over decades, drawn on cognitive science, on evolutionary theory, on the empirical literature on belief and behavior, on the study of extreme states of mind — should be the first person in the room to notice that the theory has this defect. The theory asks him to believe that Islam produces, at scale, human beings whose cognitive architecture matches only the population of trained intelligence operatives and cult formation survivors, and does so without producing any of the observable strain that population exhibits, and does so in a way that leaves them capable of running large complex organizations under intense public scrutiny. That is not a theory about political Islam. That is a theory about magic. When Harris deploys it, he is not being rigorous about political theology; he is being credulous about a demonology whose empirical foundations he has not audited. The person he has often accused of moral confusion would, if the tables were turned, be exactly the person Harris would want in the room to point this out. This essay is offered in that spirit, and Harris is free to read it in whatever spirit he likes.

⁂

Harris will, if he encounters this piece, most likely reach for one of his signature dismissals for critics on exactly these topics. The dismissal is called moral confusion. It appears throughout his work on Israel and Palestine, on political Islam, and on what he broadly categorizes as woke failures of clarity. The rhetorical shape of the move is to relocate the disagreement inside the critic’s cognitive faculties: the critic has failed to see clearly which side of a real moral divide the correct answer sits on, and if the critic could only think through the case with the requisite rigor, the disagreement would resolve itself. This is a move that pre-decides what the disagreement is about, which is why it functions as a dismissal rather than as engagement. The disagreement gets recategorized as the critic’s failure of clarity before the substantive counterargument gets heard.

The moral argument the essay is making has to be on the record before the recategorization is available. It is this.

The argument is not that the moral questions Harris raises are unimportant. Antisemitism is a genuine and ongoing evil. Theocratic political movements are genuinely dangerous. Political Islam, as an ideology, has real relationships to real violence in real places in the world; I have written about that in other pieces and I stand by what I wrote there. The argument in this piece is not on the opposite side of any of those questions. The argument is that the method Harris is using to identify which specific American Muslim politicians count as theocratic threats is unsound, and that this unsoundness is itself a moral problem, because the people the method wrongly identifies are real people who face real consequences from having been identified.

The moral question the essay is asking is not which side of the antisemitism question are you on. That question is easy; every serious person is on the same side of it, including Mamdani, including El-Sayed, and including me. The moral question the essay is asking is: what standard of evidence do you require before you tell a national audience that a Muslim American who spent his career running a public-health department during the Flint water crisis is secretly a theocratic threat to the country, or that a Muslim American mayor who is fixing potholes and funding childcare is running a fairly sinister theocratic agenda behind the surface? That question is not moral confusion. That question is the ordinary evidentiary discipline of a secular liberal tradition, applied to a specific class of claim about specific human beings with specific public records. The demand that the discipline apply here the way it applies everywhere else is a demand for consistency, from a writer who has staked his intellectual authority on being the person in the room who applies the same standards to every case.

There is a further moral consideration that has nothing to do with Mamdani and El-Sayed personally. Mamdani and El-Sayed will be fine; they have won primaries against enormous adverse money, they have public platforms, and they have the ordinary protections of high political office. The people who bear the cost of the mind-reading pattern, of the taqiyya-inflected epistemology that flows underneath the pattern, are ordinary American Muslims, who watch their fellow citizens be told by a prominent secular liberal that Muslim politicians in this country cannot be evaluated by their public records because there is a hidden interior only the initiated can see. This is the effect the sentences have in the air, whatever the speaker’s private stance toward them. The moral clarity a secular liberal tradition requires is the clarity to refuse to say those sentences unless you can defend them by the standards of evidence you apply everywhere else. That is not confusion; that is the discipline the tradition is for.

So if the response to what I have written is that I am morally confused, the response has misidentified the disagreement. I am not confused about which side of the antisemitism question I am on. I am not confused about the reality of theocratic politics. I am insisting that the standards of evidence Harris applies to every other domain of his intellectual life have to apply to this one too, and that the failure to apply them is not a small procedural matter but a moral failure with real downstream costs. The insistence is the moral argument. Naming it in advance is the only way to keep the argument from being reprocessed as its opposite.

⁂

A related clarification is due, because the Harris quote that opened this piece named two people, and one of them was Hasan Piker.

On Piker, Harris is not wrong to be concerned. Piker’s public record on China, Cuba, and Taiwan is not defensible by any secular liberal standard, and I am not defending it. He has visited China in November 2025 and used the trip to describe Xinjiang as awesome, to minimize the Uyghur camps as reeducation rather than the mass detention that mainstream human-rights reporting has documented, and to characterize Chinese colonialism in Tibet as a civilizing project. He gave an interview to CGTN, the CCP’s international propaganda channel, in which he described China as a normal country like any other and said he was there to correct rumors about the country. He has said the CCP is what most closely embodies his vision of socialism, has described a politically free Hong Kong as ridiculous, and has framed the defense of Taiwan through analogies designed to make CCP claims on it sound reasonable. In March of 2026 he traveled to Cuba as part of a convoy organized through a Neville Roy Singham-linked funding apparatus, delivered what was described as humanitarian aid, and was subsequently subpoenaed by the Treasury Department’s Office of Foreign Assets Control as part of a sanctions investigation into the trip. This is a public record. It is legible to anyone who wants to look at it, and the reading of it runs through the transcripts, the streams, and the state-media appearances Piker himself produced, not through any interior he cannot be shown to hold. Vox called this the real problem with Hasan Piker six months ago, and Newlines Magazine ran the argument at length under the headline that his China take may matter more than his Israel take. I agree with both of those pieces. Piker’s alignment with authoritarian regimes that run mass detention camps and single-party political control is disqualifying, and I would not want the Democratic Party’s future to run through him.

This is the control experiment for what the rest of this piece is diagnosing. On Piker, Harris is applying his ordinary method: he is looking at a public record, drawing an inference the record actually supports, and calling the inference by its right name. There is no if you double-click move required, because there is nothing hidden to double-click into; Piker has said the things on stream. There is no mind-reading required, because there is a text. There is no taqiyya frame required, because Piker is not a Muslim politician being smeared with a doctrine of presumed dishonesty; he is a socialist streamer whose CCP-favorable positions are the surface of the record, not concealed under it. Harris on Piker is Harris operating normally, and Harris operating normally can correctly identify authoritarian sympathy when he sees it, because his method is a good method when it is being applied to what it can see.

Which is why the pattern on Mamdani and El-Sayed is a real deviation, not a generalized failure. Harris has the method. He knows how to use it. He uses it on Piker and reaches a defensible conclusion on Piker. When the subject changes from an illiberal Western leftist with a public record of CCP apologia to a Muslim Democrat with a public record of running a health department during a lead crisis, the method changes shape too, and the shape it takes on is the mind-reading shape, the surface-and-interior shape, the shape Spencer built the American form of. The Piker case is the proof that Harris is capable of the ordinary discipline; the Mamdani and El-Sayed cases are the evidence that the discipline stops functioning on a specific class of target. That is a diagnosable pattern, and diagnosing it does not require defending Piker, because Piker is not being defended. Piker is the case that shows Harris’s method works when Harris uses it.

⁂

The claim I am making here is narrower than it might look, and the size of the claim matters.

I am not accusing Sam Harris of acting in bad faith. I have listened to him for twenty years and I have never believed that he sits down at the microphone intending to deceive his audience or intending to smuggle a prejudice in under a rigor he does not really possess. The evidence I have of his intentions is his stated intentions, and his stated intentions are the ones a serious secular liberal has about the survival of open societies. I take those intentions seriously. I take the record of his career on other subjects — his careful work on meditation, on ethics, on the limits of his own knowledge in domains where he does not have training — as evidence that he is not the caricature his sharpest critics sometimes paint him as.

I have written about Harris more positively than negatively in these pages when the subject was one on which his reasoning is at full strength. In The Last Serious Contrarian, I called him the closest of them to Hitchens in raw aptitude, and I treated The End of Faith and Letter to a Christian Nation as serious continuations of the atheistic work Hitchens did in God Is Not Great. In The Most Articulate Apologist, which was published four months ago and was primarily about Ben Shapiro, I gave Harris explicit credit for his handling of that interview — for asking the questions a serious interlocutor should ask, for asking them sharply, and for producing what I called the most clarifying interview I have read in a year. Both of those pieces criticized Harris on the Islam material, and both of them placed the criticism next to the credit rather than in the place of the credit. What I am saying now is not a reversal of that arrangement. Most of what Harris does, he still does at the level I have engaged with him at for years, and I would happily engage with him at that level again on any of it. The narrow section of his output I am describing is a narrow section, and I do not want the sharpness of my language about it to be read as a claim about the whole.

What I am observing is narrower than a claim about his character, and I think more honest than one. On the specific subject of Muslim politicians in Western democracies, and adjacent to it on the specific subject of Israel, the pattern of his reasoning does things it does not do on other subjects. The confidence about hidden interiors increases. The threshold for calling something sinister drops. The willingness to warn about civilizational suicide arrives, in that domain, on evidence that in any other domain he would ask to see. On any topic outside these two, Sam Harris is coherent in a way that has kept me listening to him for two decades. He is the person I put him in the room for. He weighs evidence. He acknowledges uncertainty. He notices when his interlocutor is running a rhetorical trick and names it. When the topic is meditation or free will or the ethics of lying or the limits of AI cognition, the same person you meet on the podcast is the person you would want as a colleague. What happens when the topic is Muslims and Israel is a change of register so sharp that the same person is no longer in the room. When Harris is talking about those two subjects, he might as well be Ben Shapiro.

I mean that comparison specifically. Shapiro is the reigning American model of the antagonism-first intellect — a person whose whole method is mind-reading his political opponents, warning about civilizational suicide, and treating rhetorical confidence as if it were epistemic warrant. That method has a clinical shape. It is what conspiracy analysis looks like when the analyst is credentialed enough to disguise the mind-reading as inference. When Harris moves onto Muslims or Israel, he starts running that method. He does not sound like the Harris of the free-will book. He sounds like the person who has decided in advance that the Muslim Democrat is a threat, and whose remaining task is to explain to the listener what is really going on behind the mayor’s smile. This is Shapiro’s method. Harris runs it, in these two domains, at a level of fluency Shapiro himself would admire. Outside those two domains, Harris would recognize the method as unserious and would say so.

I do not know why the switch happens. I know that Muslims and Israel have been the topics on which his epistemic behavior visibly changes, going back at least fifteen years, and I know that in the last six months two elected or nominated Muslim Democrats have arrived in his frame and both have been diagnosed as civilizational risks on evidence that would not have carried him past the first minute of any other subject. I am recording the pattern. I am not telling you what to conclude about the man.

There is a second-order tell that belongs to the same pattern and I think is diagnostically important. Harris has reacted with unusual harshness to the segment of his own audience that has pushed back on him about Mamdani, El-Sayed, and Israel. Not the trolls, not the ideological opponents, not the professional critics who have never liked him — those he metabolizes routinely, and often gracefully. The people I am talking about are long-time listeners. People who bought the books. People who did the ten-day retreats through the Waking Up app. People who defended him through the New Atheist wars and through the Ben Affleck confrontation and through the Ezra Klein exchange and through everything since. When those listeners have written in, canceled subscriptions, posted disagreement, or asked him publicly to reconsider, Harris has not treated the disagreement as interesting. He has treated it as apostasy. He has framed leaving over these issues as a form of moral failure on the departing listener’s part — as evidence that they were never really with him, or that they have been captured by a political tribalism they refuse to see in themselves. He has made clear that he is willing to take this argument to the edge of the audience’s existence. He would rather lose the audience over Mamdani and Israel than moderate the method he is using on Mamdani and Israel.

This is the shape of the pattern at a higher level of magnification. On any other topic, Harris treats audience disagreement as data. He has said, publicly, that he learns from his critics. He has revised positions in real time. He has acknowledged in the free-will material and in the ethics work that his listeners have pushed him to sharper formulations than he would have arrived at alone. On these two topics, the intellectual metabolism that treats disagreement as data breaks. The listeners are wrong for disagreeing. The listeners are captured. The listeners are choosing their tribe over the truth. This is again the shape of a reasoning that has decided in advance where it is going, and is treating everything that would slow it down — including the collective weight of the audience that made him — as an obstacle to be overridden. If the framework’s own long-time constituents cannot dislodge it, nothing can. The absence of yield under pressure is itself instructive.

The listeners have also asked him, repeatedly, over years, to do the one thing his method has always claimed to require. They have asked him to bring a serious counter-view into the room and take it seriously in a long-form conversation, on the topic where his read of the world has moved the furthest from the read most of his coalition holds. He has hosted Douglas Murray on jihadism and civilization at book length, Haviv Rettig Gur on Zionism and Iran, Dan Senor on the state of the war multiple times, Michal Cotler-Wunsh on the argument that anti-Zionism is antisemitism, Yuval Harari on the immediate aftermath of October 7. On the other side of the ledger, on the specific question of Israeli state conduct in Gaza and the moral status of the war’s prosecution, he has hosted no one who holds the view that most of his own long-time listeners now hold. In June of this year he wrote a Substack post whose title is a fair paraphrase of the position it defends: Why I Won’t Debate Critics of Israel. On the More From Sam episode released May 26, his producer Jaron Lowenstein opened the show by saying, on tape, that he continued to be confused about Harris’s reluctance to engage more podcast guests who disagree with him about Gaza and about why Harris thought such conversations would be disastrous. That is the producer, on the show, from inside the operation, naming the pattern the audience has been naming for years.

Harris’s stated reason, given in the Won’t Debate post and elsewhere, is that the available interlocutors are all bad faith. Mehdi Hasan is bad faith. Norman Finkelstein is bad faith. Noam Chomsky was bad faith. Ta-Nehisi Coates is bad faith. The category has, over time, expanded to include effectively every prominent public intellectual whose read of the war differs from his own, which is a striking coincidence for a category that is supposed to track a psychological property of the interlocutor rather than the direction of their disagreement. What the category is actually doing is closing the door on the ordinary mechanism by which an intellectual’s read of a hard question gets tested against the best available opposing read. The closure is the direct consequence of a theory of mind that has already located the opposition inside a demonology — a demonology in which criticism of Israeli state conduct is not a position an intelligent person can arrive at through the ordinary discipline of moral reasoning but is instead a symptom of moral confusion, or of antisemitism, or of tribal capture, or of the manosphere or the podcast bros or whichever proximate cause is being named on a given episode. If the opposition is by definition operating from a defective place, then hearing the opposition out is not the practice of an open mind; it is the amplification of a corruption. That is the internal logic of Harris’s refusal, and it is the logic that reveals what the framework is actually doing. An intellectual whose brand is epistemic humility and open inquiry has, on one specific question, decided in advance that no interlocutor on the other side could possibly be operating in good faith, which is another way of saying that the framework has closed the ordinary route by which he might learn he is wrong. That closure is not a feature of open inquiry. It is a feature of an argument that has become a commitment.

⁂

Whatever the pattern’s source in him, its effect on other people is not neutral.

Harris has a large audience. His frame travels across the internet. The country he lives in—the country we share—has a right-wing media apparatus actively looking for permission structures to treat Muslim politicians as inherently suspect, and a prominent secular liberal saying that two elected Muslim Democrats are frankly terrifying and represent suicide in the next presidential cycle is a resource that apparatus will use, regardless of what the secular liberal intended. Harris does not have to be a bigot for the effect of his sentences to be that Muslim Democrats face a headwind he has helped create. Effects do not require matching intentions. A person can produce a smear without meaning to produce a smear, if the reasoning that produced the sentence had the shape of a smear underneath it. The mind-reading move is that shape. The if you double-click move is that shape. The these two guys are suicide in 2028 move is that shape. Once the sentences are in the air, they behave the way that shape behaves in the world, whatever the speaker’s private stance toward them.

So the request I have of Harris, if he is reading, is small. I would ask him to notice the pattern. I would ask him to notice that on this one topic he is doing things he would rightly criticize other people for doing on any other topic. I would ask him whether the confidence he has about the hidden theocratic interiors of two Muslim Democrats is a confidence he can defend by the standards of evidence he applies to every other domain of his intellectual life. I would ask him whether he can look at Abdul El-Sayed’s record as Detroit’s health commissioner during the Flint water crisis and see a doctor, and look at Zohran Mamdani’s first eight months in New York City and see a mayor. Neither of them is asking to be trusted about their hidden interior. Both of them have public records that can be evaluated. The public records are what the country’s voters have been evaluating, and the country’s voters have decided to put them in office.

Go Deeper into the Circus

A reporter from a mid-tier political outlet calls Chuck Schumer’s office and asks for a comment on what Charlie Kirk said on his show yesterday about Democrats and the border. The comment gets folded into a story that runs the next morning under the headline Schumer responds to conservative critique. The story is aggregated within an hour by NBC, by Politico, by the Times, and by the Post, all of which now have to run their own version because the story is now in the news cycle and in the news cycle means every other outlet has to catch up. By evening drive time, Kirk’s framing of the border is the frame every Democratic senator is being asked about, and the actual thing Democrats wanted to talk about that day — the Medicaid work-requirement rollout, the Epstein files, the crypto extraction on Trump’s disclosure, whatever — is nowhere. The frame won because the frame got answered. The frame got answered because Schumer’s office picked up the phone.

Multiply this by three hundred and sixty-five and you have a decade of American political media. The right does not have better arguments. The right has discipline about not answering the left’s questions, and the left has no discipline whatsoever about not answering the right’s. The asymmetry is the entire story of why we are where we are.

⁂

There is a working manual for how a serious opposition operates in a hostile media environment. The manual is not secret. The right has been running from it for thirty years. Every Democratic operative in Washington knows the manual exists. Almost none of them will run it, because running it would require them to break a set of professional norms whose function is to keep the credentialed class comfortable inside the transmission belt that is delivering the country to authoritarianism. So the manual sits on the shelf and Chuck Schumer’s press secretary picks up the phone.

Here is the manual, in five rules.

One. Repetition. The single most important finding in a century of political communication research is that people believe what is familiar, and familiarity is produced by repetition — the same message across many mouths, at high frequency, for long duration. The right learned this from advertising and from the pulpit. Trump signs the size of buildings on rural highways in Pennsylvania are a signal-processing operation, not an argument, and they work. The credentialed left thinks repetition is intellectually dishonest because a smart person should be persuaded by an argument the first time they hear it. This is a category error about how brains process political information. Brains do not process it as arguments. Brains process it as social signals about what one’s tribe believes, and repetition is the mechanism by which the brain calibrates what one’s tribe believes. Whatever you want people to know, you have to say every day for years. Whatever you say once will be drowned by everything the other side is saying every day for years. The left keeps trying to win a signal-processing question with moral arguments and losing.

Two. Never apologize. When you apologize, three things happen in the audience brain. The audience updates in the direction that the accusation was true, because innocent people don’t usually apologize. The audience is reminded of the accusation, which extends its shelf life. The audience associates you with weakness, because the aesthetic of apology is submission, and submission is legible in the mammalian brain as low status. The correct response to an accusation is a counter-accusation on a larger charge at higher volume, which puts the accuser in the defensive position and forces them to defend against your charge instead of extending theirs. Trump has run this reflex for a decade. His entire political career is proof of concept for the finding that the correct response to you did a bad thing is you did a worse thing, and by the way here is a nickname for you. The credentialed left, when accused, apologizes, clarifies, contextualizes, and provides receipts, all of which is legible to the audience as the accusation must have some merit or they would not be doing this work.

Three. Never justify. Justification is a subtype of apology. When you justify a position you concede the frame that the position needed to be justified, which concedes that the position was on defense, which concedes the initiative. The rule is state, do not defend. If they say your policy would raise taxes on the middle class, the wrong answer is a breakdown of who is affected. The right answer is these are the same people who wrote the tax code so a billionaire pays a lower rate than a nurse, and they are lying to you about middle-class taxes because they need you angry at nurses instead of angry at billionaires. The wrong answer engages the accusation. The right answer puts the accuser on the ground the accusation was meant to defend. The professional-managerial class treats good-faith engagement with substance as a moral duty even when the criticism is being made in bad faith by an interlocutor who does not believe what they are saying and is only saying it to occupy your attention while their side commits a substantive crime somewhere else.

Four. Always be the one pointing the finger. The prosecutor role and the defendant role are structurally asymmetric in the audience brain. The prosecutor is presumed to have information and standing. The defendant is presumed to have something to hide. You want to force the other side to spend their airtime in the defendant chair. If they force you into that chair, you become the prosecutor of them immediately, without ever answering the charge that was made against you. Trump does this reflexively. He is under indictment on many counts and his mode of response is to charge the prosecutors with worse crimes, which turns every court appearance into a media referendum on the DOJ instead of a referendum on him. It works. It continues to work. The left has to develop the same reflex.

Five. If they point at you, point right back. The escalation-dominance rule. If you respond with a smaller counter-attack, you lose. Equal, you draw, which favors the aggressor. Larger, you win, and you also deter the next attack, because the aggressor learns that attacking you has a cost greater than the value of the attack. The right runs this rule constantly. Every Democratic criticism gets three simultaneous Republican counter-attacks within twenty-four hours: personal-character, policy-record, and a whataboutism that pulls a Democratic scandal back into the news cycle. Future Democrats considering criticism have to weigh the retaliation cost. The result: Republican operatives can say anything about Democrats and Democratic operatives cannot say anything comparable about Republicans without becoming a media story about Democratic incivility. The asymmetry is manufactured. Forty years of the left accepting disproportionate response ratios in the media referee’s grading.

The tactical addendum, because it is where the operation actually lives.

You do not respond to the daily topic set by right-wing influencers. You pretend they do not exist. When a journalist calls asking for a response to what Ben Shapiro said this morning, the correct answer is is that your question, or is it Ben Shapiro’s question that you are asking me on his behalf? do you work for the Daily Wire? And then you do not answer, and you do not take a follow-up, and the same journalist does not get a call back for a month. And the journalist’s editor hears about it. And the bureau chief hears about it. And the next reporter from that outlet who calls gets warned that if they bring the same frame, they get the same treatment.

Because the cost is not on Shapiro. Shapiro will keep producing bait objects regardless. The cost is on the transmission belt — the reporters at the Times and CNN and NPR who take the bait object, package it as what’s in the news today, and bring it to Democratic politicians for a response. The transmission belt is composed of specific people who have made specific professional choices about which side’s frame to launder into the daily news cycle. Those choices have consequences. It is the job of the person being interviewed to make the transmission belt feel them.

The Republican side has been running this operation against left-of-center reporters for a decade. When a CNN reporter references a New York Times story to a Republican politician, the politician does not answer. The politician attacks the Times and the reporter for laundering it. The reporter is put on defense. The reporter learns that referencing the Times to a Republican produces attack, not answer, and the reporter’s job is answers. Over time the reporter stops referencing the Times. Republicans have changed the reporter’s question set without ever touching the Times‘s editorial policy. It works. It continues to work.

The equivalent left operation has never been built because the credentialed class in the party cannot bring itself to punish the transmission belt. Most of them came out of it. They went to the same schools as its editors, married its reporters, live in the same neighborhoods as its bureau chiefs. Confronting the transmission belt would mean confronting themselves. So every day the Democratic message of the day is whatever the right-wing influencer produced this morning, plus a Democratic response.

⁂

A worked example, because the pattern is easier to see in a specific artifact.

One of the ambient stories conservatives tell themselves about the last decade of norm collapse is that Mitch McConnell’s escalations trace back to Harry Reid. Reid removed the filibuster for lower-court judicial appointments in 2013. McConnell, therefore, was forced to invent the McConnell Rule holding Scalia’s seat open in 2016, and then forced to break his own rule when Ruth Bader Ginsburg died six weeks before the 2020 election, and then forced to run an extraction operation on the federal judiciary that has ended, so far, in Roe overturned, the Chevron doctrine dead, an immunized presidency, and a Supreme Court whose ethics is a punchline. The story requires that the causal arrow point from Reid to McConnell. Democrats broke the norm first, McConnell only responded, and if Democrats hadn’t started it none of this would have happened. This story is what a conservative uncle sends at Thanksgiving. It is also what David Brooks writes. It is also what Jake Tapper implicitly concedes when he opens a segment with both sides have escalated procedural norms in the Senate over the last decade.

The story is a lie. Not a shading of the record. A lie about the sequence of events. The Federalist Society was founded in 1982 with the explicit goal of capturing the federal judiciary for movement conservatism. The Bork nomination in 1987 was the coming-out party for a judicial project that had already been assembling itself for five years. McConnell blockaded Clinton’s judicial nominees through the second term. McConnell blockaded Obama’s judicial nominees at a rate that produced the highest vacancy backlog in the history of the federal bench by 2013 — which is what forced Reid to change the rule, because the alternative was letting McConnell stall the third branch of government to death. Reid’s 2013 change was a defensive move at the end of a decade of Republican escalation, not the opening move in some hypothetical Democratic overreach. And McConnell was going to hold Scalia’s seat open in 2016 regardless of what Reid did in 2013. He would have found a rationalization. The judicial project is thirty years old. It does not need Reid to happen. It was happening.

The correct response, when the McConnell-Reid frame appears in an interview, is not to explain the actual timeline. Explaining the timeline concedes the frame. The correct response is the person who told you that story is running a laundering operation for a forty-year Federalist Society project to end reproductive rights, gut the administrative state, and immunize a Republican president from prosecution — and you are helping them do it by asking me this question. Do you want to ask me about the Federalist Society’s actual thirty-year plan, or do you want to keep laundering their alibi for having executed it? Then you stop talking. And you do not answer follow-ups. And the reporter learns, over time, that the McConnell-Reid frame is a career-cost frame with Democratic sources.

The general rule visible in the specific case: whenever the right offers a you started it origin story, the origin story exists to hide what they are actually doing right now. The origin story is a rhetorical device for converting an ongoing crime into a legitimate grievance about the past, not a history. The correct move is never to litigate the origin story. The correct move is to make the person delivering the origin story pay a professional cost for being the delivery vehicle.

⁂

The rule, phrased as a rule: these right-wing motherfuckers are not acting in good faith, and you can and should return the favor.

Returning the favor is not becoming them. It is imposing costs. When they lie, you do not correct them. You make them pay for lying. You make the liar the story instead of the lie. You make the liar’s next donor uncomfortable to fund them. You make the liar’s next employer uncomfortable to employ them. You make the liar’s next platform uncomfortable to platform them. You make the liar’s next social invitation uncomfortable to extend. You treat the act of lying as a durable fact about the liar’s character, and you make sure the fact is known wherever the liar goes.

The right responds to costs. Not to appeals, not to shame, not to the discovery of new evidence. Costs — electoral, financial, reputational, legal, cultural. Impose enough cost on a specific bad-faith actor and the actor stops. Impose no cost and the bad faith becomes a permanent feature of the environment. That is the environment we live in. It is the environment because the left refused, for thirty years, to impose the costs. Every uncosted act of bad faith was a lesson to the actor and to every future actor watching. The lessons compounded. We now have a right-wing movement in which bad faith is the default because bad faith has been costless for a generation.

The morally serious position is not do not impose costs. The morally serious position is impose costs on people attempting to end democratic governance, because failing to impose those costs will result in democratic governance ending. The alternative is losing the country to a movement that will not extend to you the courtesy you are extending to them. You have already priced in the costs of losing. You have already lived through ten years of the costs of losing. There is no moral premium in preferring to keep losing.

⁂

Editor’s note: It is not known if Senator Mitch McConnell is alive at the time of publishing.

Go Deeper into the Circus

Earlier this year, in a conversation with the Wall Street Journal‘s editor-in-chief Emma Tucker at Davos, Dario Amodei said this:

We’re going to find that ideology will not survive the nature of this technology. It won’t survive reality.

He was talking about labor policy under advanced AI. What he was predicting is that the disruption will be so severe that support for wage insurance, retraining, and long-term income support will “become bipartisan and universal because everyone will recognize the necessity of it. Just mark my words.”

In an essay published a few months earlier, he made the geopolitical version of the same argument, writing that “just as feudalism became unworkable with the industrial revolution, the AI age could lead inevitably and logically to the conclusion that democracy... is the only viable form of government.” The claim in both cases is structurally the same. Politics is going to resolve itself into consensus because the material situation will force the answer.

The shape has a name in philosophy of science. It has been called scientism — the move of taking the authority that properly belongs to empirical inquiry into how the world works and applying it to questions about how human beings should live together, which are not questions empirical inquiry can settle. Physics can tell you what a object falling will do. What it will not do, is tell you whether wage insurance is the right response to displacement, or whether authoritarian consolidation is a historical inevitability, or whose interests a political settlement should serve. Those are value questions in the disguise of technical ones. So when someone such as Amodei says ideology will not survive reality, he is performing the scientism move at its cleanest: he is claiming that a political question — what should we do about mass technological unemployment, and on whose behalf — has a right answer that reality itself will impose, the way reality imposes the fall of a stone. It does not. No answer of that kind is waiting to be discovered. What exists is the settlement a particular constellation of powerful actors is preparing to impose, and the alternative settlements that could be fought for instead.

When people say they are post-ideological, what it is that they usually mean is they do not hold any of the packaged commitments that map onto the current tribal groupings. They will be very clear with you they are not Republican or a Democrat, that they aren’t a socialist or a libertarian, and they aren’t a progressive or a conservative. They have, you see, looked at the parties and found none of them acceptable, and they have concluded that the correct thing to do is exit the ideological game entirely and simply reason from first principles toward the best policy.

Fine. That’s a defensible pose to strike about the parties. It is not a defensible pose to strike about ideology. Because ideology is not the packaged set of party commitments. Ideology is the framework that decides what counts as a problem, what counts as a solution, whose interests are visible in the analysis, and what the word necessity is doing when you use it. You do not get to opt out of that. You can pretend you have opted out, but the pretense is itself an ideological move.

Ideology is not a bad word. Ideology is what happens when human beings live together. I am, for instance, extremely ideological about the proposition that murder should be prohibited and punished. I hold this ideologically. I did not arrive at it through some neutral procedure of reasoning from natural facts; I arrived at it because I am a person raised inside a moral tradition that treats human life as valuable and treats the taking of it as a category of wrong that warrants collective response. Other people, in other traditions, have held other views. Sociopaths, whose brains are wired differently, sometimes hold no view at all. The universality of my position among the people I know is not evidence that the position is post-ideological; it is evidence that the ideology is widely shared.

That a position is ideological does not make it wrong, and it does not make it undefendable. It just means that when one defends it, you are defending a specific normative commitment against other possible normative commitments, and the defense is going to require you to say what you think a person is and what you think a community is made up of and what you think we owe each other.

⁂

The claim to be post-ideological is a claim about oneself, but it is also, always, a claim about other people. When someone such as Amodei says ideology will not survive reality, he is not saying his own commitments will not survive reality. He is saying the commitments of people who disagree with his sense of what reality is will not survive the reality AI is about to reveal, and his own commitments will turn out to have been the plain description of what needed to be done.

It is almost never a claim of humility. It is a claim of transcendence — that the speaker has stepped outside the fog of partial interests and can see the shape of the actual situation while everyone else remains inside it. And the shape of the actual situation, remarkably often, turns out to correspond very closely to what the speaker already believed before he stepped outside the fog. So the Davos executive discovers that the necessary policy is a version of the policy he has been advocating for. The Silicon Valley engineer discovers that the necessary politics is a version of the technocracy he has been building companies inside of. The rationalist discovers that the necessary morality is a version of what he already thought was rational.

I do not think Amodei is doing this cynically. I think he genuinely believes that when he says ideology will not survive reality, he is describing an inevitable convergence rather than announcing his own preferences. And there is a weaker version of his claim that is defensible. Material pressure does move politics. Mass technological unemployment on the scale he predicts really would force some political response, and doing nothing really would become untenable. If Amodei were saying only that the scale of disruption will make a political settlement unavoidable, I would agree with him.

But that is not the claim he is making. He is not saying a settlement will be forced; he is saying this settlement will be forced — wage insurance, retraining programs, capital accounts, worker mobility support. These are defensible policies, and I would probably support most of them, but they are ideologically specific. What they come out of, is a particular tradition of technocratic liberalism that assumes market disruption should be met with redistributive smoothing rather than, say, structural constraints on the companies doing the disrupting, or public ownership of the AI models producing the displacement, or a moratorium on deployment until democratic institutions have caught up. Someone from any of those other traditions would look at the “bipartisan necessity” Amodei describes and find it recognizably not their view. Necessity can constrain the agenda without dictating the answer, and what Amodei has done is blur the two. He is describing his own view of the necessary and calling it the necessary.

The authoritarianism claim breaks even more cleanly, because Amodei has made the opposite claim inside the same essay. He warns that powerful AI in the hands of autocrats could amount to “an attempt to permanently steal their freedom and impose a totalitarian state from which they can’t escape,” and then, a few paragraphs later, offers the hope that AI will render autocracy unworkable the way industrialization rendered feudalism unworkable. Both cannot be true. Either AI is dissolving authoritarianism or it is entrenching it, and the current evidence — AI-enabled surveillance states, automated censorship, algorithmic control at a scale no previous technology allowed — runs strongly in the second direction. The reality will force convergence pose survives only if the speaker can keep updating what reality is forcing while never conceding he was guessing all along. This, you see, is the scientism tell. A genuine empirical claim about the direction of history could not hold both of these positions inside the same essay. A political preference dressed in the vocabulary of empirical claim can hold whatever it needs to hold in whatever paragraph it is in, because the vocabulary is decorative.

A version of this shows up in ordinary conversation too, from people who are not tech CEOs and have no policy program. It is the person who says I just want what works, or I don’t care about labels, I care about results, or both sides are broken and I refuse to pick. These sentences sound reasonable and sometimes are. What they smuggle in is a large assumption — that what works and results and broken are terms that describe themselves, that one can look at a policy and see whether it worked without first having decided what it was supposed to do and for whom.

There is no such view. A policy that reduces unemployment by driving down wages worked if your criterion was employment. It failed if the criterion was material conditions of workers. Whether it worked depends on what you were trying to do, and what you were trying to do depends on what you thought the situation required, and what you thought the situation required depends on the framework you brought to seeing it. That framework, you see, is your ideology.

The pretense is corrosive because it disables the argument the speaker most needs to have with himself. If one knows one is arguing from a specific position, one has to defend it against other positions, which means looking at what those other positions are asking to be seen. If one has convinced oneself that the argument comes from no position at all — that what is being described is simply the shape of the necessary — that work no longer has to be done. Disagreement, then, becomes evidence of the disagreer’s failure to see reality clearly.

The objection here is not particular to technocratic liberalism. It is an objection to a family of positions that share a structural error one might call materialist ethics — the belief that once the material situation has been correctly described, the ethical answer follows from it. Marxism does this when it argues that the mode of production determines the correct politics and that the emancipation of the working class is what history is empirically for. Right-libertarianism does it when it argues that the correct political arrangement follows from the natural facts of voluntary exchange under property rights, and that any deviation from that arrangement is coercion measurable against a physical baseline. Silicon Valley scientism does it when it argues that the correct politics follows from what advanced technology makes materially unavoidable. In all three cases, a moral vision is being smuggled into what presents itself as description. The Marxist has already decided that class emancipation is the point before the material analysis is run. The right-libertarian has already decided that individual freedom-from is the point before the natural rights derivation is run. Amodei has already decided that technocratic market-liberal smoothing is the point before the what reality forces analysis is run. What the description is doing, is concealing the choice, and the choice is what is actually up for argument. Materialism can constrain the space of possible answers, but the answer itself is a choice made inside that space by people with commitments. Anyone who tells you the material situation produced the answer has moved the choice offstage and is asking you not to notice.

This is not a small matter of intellectual manners. It is the operating system of the technocratic center for two generations, and it is what produced the populist moment we are living in. Daniel Bell declared the end of ideology in 1960. Tony Blair governed under the slogan what matters is what works, the notion being that rationality and pragmatism are the answer to ideological fanaticism. Bill Clinton did the American version. Anthony Giddens gave them the theory. A whole class of American commentators still writes in this register. The claim was always the same. We are not one faction among several. We are the ones who have set faction aside and are describing what the situation requires. What the situation turned out to require, in every case, was the specific preferences of the class making the claim: capital-friendly market centrism with a redistributive fringe, credentialed expertise given final say over questions the public was told were too technical to vote on, and a stern conviction that any resistance to this program was ignorance of the data. This class ran the West for forty years and told the people whose lives were being reorganized that they were describing the weather rather than governing them. When those people finally noticed, the response was not to concede that the framing had been a choice all along; the response was to double down and produce another paper showing that the numbers were actually strong.

The philosophical answer to what matters is what works is that a great many things work. Human beings have found many ways to live. The arrangements they have used for sharing resources, raising children, resolving disputes, and organizing production run to a substantial catalogue, and on the available evidence a fair number of them produce lives their inhabitants recognize as good. The plurality is not noise around a signal; it is the situation. This is Hume’s point at its widest — that no descriptive account of what human beings materially are can settle by itself what human beings ought to do together, because the ought is not contained in the is, and any argument that says otherwise has smuggled a value premise into what it calls description. The technocratic center smuggled a specific value premise: that market-friendly redistributive centrism was the arrangement the facts entailed. What Amodei is smuggling is a newer one: that whatever settlement follows from AI-driven displacement, on the terms his industry finds acceptable, is the arrangement reality is about to impose. Both smuggle. What actually follows from what works is the harder question of what it is that we are trying to make work, and for whom, and that is the ideological question the pose is designed to skip.

The empirical case against this move is now unusually clean. What the Washington consensus predicted, in explicit form, was that economic liberalization in China and Russia would produce political liberalization. Bill Clinton made the argument in 2000 at the podium, on behalf of permanent normal trade relations for China: “In the knowledge economy, economic innovation and political empowerment, whether anyone likes it or not, will inevitably go hand in hand.” He said liberty would spread by cell phone and cable modem. He said the internet would change China the way it had changed America. He said the more China liberalized its economy, the more fully it would liberate the potential of its people. This was not a fringe claim. It was the settled reading of the material situation across two presidential administrations, most of the American political class, and a wing of the academy that had inherited modernization theory from Lipset. The prediction was that once the material conditions were in place, the political outcome would follow because it had to. Twenty-five years later, China is a more capable authoritarian state than it was in 2000, wielding the tools of digital capitalism against its own people and against ours. Russia used its integration into global markets to fund the war it is currently prosecuting in Europe. Both regimes proved adept at running capitalist economies without conceding meaningful political freedom. The material conditions arrived. The political conditions did not follow. The theory was wrong at the scale of a quarter century and at the level of the country’s most consequential foreign-policy decisions, and its wrongness is the strongest available empirical demonstration that Hume was right — the is did not produce the ought, because the is never does. So Amodei is asking the country to make the same bet again, with the material lever moved from trade policy to AI capability, and with the same confidence that the political outcome he prefers is what the situation will impose.

A caveat about the lineage, and about the people inside it. Many of the thinkers who held the technocratic view held it in good faith. They believed that opening markets would raise living standards, that trade would knit interests together, that the material conditions they were assembling would produce the political outcomes they wanted, and they were sincere about the outcomes they wanted. The project they built made the world materially safer for global capital and politically more dangerous for democratic rights, and while many of them did not intend that outcome, the outcome is what history recorded, and many of them have not defended it since. The honest ones updated. Francis Fukuyama is the clearest case. His actual argument in the 1989 essay “The End of History?” was that liberal democracy had won the ideological argument, yes, but that the winning would produce a spiritual condition he described as a very sad time in which “the worldwide ideological struggle that called forth daring, courage, imagination, and idealism, will be replaced by economic calculation, the endless solving of technical problems, environmental concerns, and the satisfaction of sophisticated consumer demands.” When he expanded the argument into the 1992 book The End of History and the Last Man, the last man half of the title carried his warning about exactly the figure this piece is criticizing — the person who has stopped being able to imagine that anything else could be worth fighting for, and who mistakes that incapacity for the shape of reality. Fukuyama has since said in plain terms that the neoliberals went too far and that the United States now needs more social democracy, and, most tellingly, that he was never opposed to social democracy in the first place. He is not the target of this essay. The target is the pose that survives the update, worn now by a class of people who did not build the postwar consensus, did not watch it fail, and are refreshing its central move as if the last thirty years had not happened.

History did not end at home either. Less than three years after the 1989 essay, and within months of the book, Rodney King’s beating by four Los Angeles police officers was captured on video, the officers were acquitted on April 29, 1992, and Los Angeles burned for six days. The country that was said to have concluded its ideological argument was, in fact, still in the middle of an unresolved one about whether Black Americans were fully protected under the law it had already written, a question that was old when the end of history essay was written and is not settled now. The technocratic center could feel finished with argument because the argument had never been about the class writing the essays. The people the fight was actually about had never stopped making it, would not stop, and were told through those decades that their persistence in making it was itself evidence they had not caught up to reality. That is the pattern the pose imposes: the people who benefit from the current settlement pronounce the settlement to be reality, and the people it does not settle are told they have failed to grow up. It is the same move Amodei is making now, aimed at anyone whose commitments do not fit the settlement his industry is preparing to impose.

The populist right and the populist left both formed around the recognition that the technocratic center had chosen a specific arrangement and then insisted the arrangement was physics. They disagree about almost everything else. They agree about that. Amodei is not breaking from this lineage. What he is doing, is refreshing it for the AI era, from a seat with more concentrated power than any Third Way prime minister ever held. He is telling a country that has already once revolted against the what works frame that the frame is back and this time it comes with a computer. This is why the pose matters. The posture that produced the current politics through two generations of failure is the one Amodei has just picked up again, from a bigger seat and with a bigger claim.

⁂

The reason people reach for the post-ideological pose is that they have been convinced ideology is a slur. It isn’t. Ideology is what you get when you take human beings seriously as creatures who live together, who share resources, who make and break rules, who have to decide who counts as one of us and what we owe each other. These are questions that admit of answers, and the different answers arrived at by different traditions are what is meant when we talk about ideology. My answer to the question should murder be prohibited is that yes, murder should be prohibited, and it should be prohibited because human life is the kind of thing that makes claims on other human beings we are obligated to honor. That is a bedrock case, and I chose it because almost no one dissents from it, which is exactly the objection a skeptic could bring — that calling the prohibition of murder ideological stretches the word past the sense that matters. Fine. Take a harder case. What are the limits of private property? A libertarian says property rights are the near-absolute foundation of a free society and that redistribution is theft. A social democrat says property is a legal fiction that societies construct and reconstruct in service of human flourishing and that some forms of accumulation are themselves theft. Both answers are ideological. There is no neutral inspection of the situation that adjudicates between them. The word theft is doing different work in each sentence because each speaker has already answered the prior question of what property is for. That, you see, is what ideology is doing — constituting the framework in which the fact appears at all. The murder case and the property case are the same kind of thing. They differ only in how many people happen to agree.

The people I trust are the people who can name what they believe and why. The people I do not trust are the people who tell me they believe nothing in particular and are simply describing the situation. Ask them what they think the situation requires. Then ask what they thought the situation required last year, and the year before, and ten years ago. The answers will not be the same. What will be, is the tone.

That is the purest form of ideology — the form that has stopped noticing itself is a form at all. Amodei is not the first to strike this pose and he will not be the last. But he is a very clear case of it, and he is a smart enough man that if the mirror were held up carefully he would see what he is doing. Whether he would then stop doing it is a different question, and I suspect the answer is no, because the pose is doing too much work for him to give it up. What it is letting him do, is say his politics are physics. Once one has said that, one is hard to argue with, because there is nothing for the other person to argue with except the weather.

I would rather argue with someone who tells me what they believe. Give me the ideologue any day. At least the ideologue is in the argument.

Go Deeper into the Circus

A friend sent me a message on Signal last night and blocked me. I am writing about it not because my case is unusual but because it is not — because people have been losing friends and family over the past ten years in ways that follow this pattern almost exactly, and because I am one more person sitting with a phone that no longer has a name attached to a number in it. Ten years of this. Marriages ended over it. Parents and children who no longer speak. Siblings who dropped out of the group chat and never came back. Best friends since childhood who now cross the street. I share this because misery loves company, and because I think some of you are living your own version of it, and because I would rather not pretend I have handled mine better than I have. What follows is what he said, what I said back to the air after he closed the channel, and — at the end — what I think I got wrong about him.

Here is what he wrote:

Mike, you are a friend. But I cannot continue this [sic] debates with you anymore. You are a talented man and writer. But I am a conservative. I know you think my support for mass deportation is authoritarian. I think it’s protective of my country. It’s ugly watching little kids get rounded up. I can’t watch it. But enforcing the law has always had ugliness. I am sick of you making me feel like a bad person for just wanting to protect my country. Which comes form [sic] love. Have a good life Mike. You’re a different person now. You’ve become very left-wing. I agree Trump is a mistake. But the mistake [sic] was elected a corrupt man. The policy is correct. We need to have a country. That means a border. We shouldn’t have let 20 million people in, in the first place. Now they have to be rounded up. The mistake was made in the past. Not today. Now conservatives have to be hated for doing the dirty work liberals forced us into. You’re blocked now. I can’t do this.

I have read this over several times. It is the argument of the moment, in miniature. It is also the confession of a man who knows what is being done and cannot bear to see it, and who has found a shape of words that allows him to endorse it anyway. The shape is worth taking apart.

⁂

The first move is the vocative. Mike, you are a friend. This is not a greeting; it is a permission slip. The message is going to say something the writer is aware I will experience as a moral break, and he wants to establish, before he says it, that the break is not his fault. He is a friend. He is only pointing out that we cannot continue like this. The affection is real, and it is also doing an enormous amount of work in the sentences that follow, because those sentences will need to explain why a friend is prepared to endorse policies whose victims include ten-year-old girls walking to the bus stop.

Then the identification. I am a conservative. This is the sentence that does the most work in the whole message, and it does it by pretending to do none. A conservative, in the writer’s usage here, is not a person who holds a set of contestable political views; it is a category of person, an identity like left-handedness or a birthmark, and once invoked it converts every specific policy into a feature of the identity rather than a decision made by a moral agent. If I am a conservative, and conservatives support mass deportation, then my support for mass deportation is not something I chose — it is something I am. Which means the question of whether I am causing harm is not really a question about me at all. It is a question about the category, which cannot be changed, and about the policy, which comes with the category.

I will note here that this is not a conservative move in any tradition I can find. Burke did not think this way. Buckley did not. Reagan, whatever else he was, did not. The identification of conservative with whatever the sitting Republican president is doing this week is a Trump-era innovation, and it is precisely the innovation the message is doing the work of installing. My friend was a Bush voter. He is now a man who has been told that the party he identifies with requires him to endorse the removal of fourteen million people by force, and who has decided that identification is more durable than judgment.

⁂

Then the ledger of the ugliness. I know you think my support for mass deportation is authoritarian. I think it’s protective of my country. It’s ugly watching little kids get rounded up. I can’t watch it. But enforcing the law has always had ugliness.

This is the passage I keep returning to, because it is the point at which the message admits the thing it is defending and continues to defend it. He can’t watch it. He knows what he is endorsing. The children are real to him — real enough that he cannot look at them. And he has a sentence prepared for this, a sentence that arrives from somewhere outside his own conscience and takes its place: enforcing the law has always had ugliness.

Consider what this sentence is doing. It is not an argument about immigration; it is a general principle about law. It could be attached to anything. Enforcing the fugitive slave laws had ugliness. Enforcing the Nuremberg race laws had ugliness. Enforcing the internment of Japanese Americans had ugliness. In each case the sentence is true, and in each case the sentence is beside the point, because the ugliness of enforcement is not incidental to the law being enforced — it is the tell that the law is monstrous. A law that requires you to look away while it works is a law that has told you what it is.

He knows this. He has already conceded it. He said the words little kids get rounded up, and then he said I can’t watch it, and then he reached for the general principle so that he would not have to be the person watching it. The general principle is the block button. Not the one he pressed on Signal — the one he pressed inside his own head so that he could go on being a friend to me, and to himself, and to a policy that gathers a ten-year-old girl in the snow at 6:10 in the morning (CNN) and puts her on a plane to Dilley, Texas, and holds her there for almost a month. Elizabeth Zuna Caisaguano thought the federal agents surrounding her mother’s car were there to give her a ride to school. She was one of at least six children taken from a single Minneapolis school district. This is not a story from the past. This is January of this year. This is the ugliness that enforcing the law has, and he cannot watch it, and he supports it, and I am the person making him feel bad about it.

⁂

Then the numbers. We shouldn’t have let 20 million people in, in the first place. Now they have to be rounded up.

Twenty million is not a number that exists in any serious study of the American immigration system. The Pew Research Center, which does this counting more carefully than anyone, estimates the peak unauthorized population at fourteen million in 2023, and reports that the number began declining in 2025 (Pew Research). Twenty million is what the number becomes when the person quoting it does not care about the number and is using it to mean too many to think about. Which is the point. If it were fourteen million you might be tempted to think about who they are — the woman who cleans your office, the man who framed your kitchen, the girl in your daughter’s third-grade class. If it is twenty million it is a flood, a swarm, an emergency, a scale at which individual faces stop registering. The inflation is protective—it is the number that lets you stop counting.

And notice the passive construction that follows. Now they have to be rounded up. Not now we have to round them up. Not now conservatives will round them up, at a cost of forty billion dollars a year, with a workforce ICE is quintupling, using tactics that have killed fifty-two people in custody in the past 500 days at the highest mortality rate in twenty years (Human Rights Watch). The agent has been evacuated from the sentence. The moral question is no longer whether to do it; it is only how to feel about the fact that it is being done, which is the only question the message is actually asking me to answer.

The Brookings Institution estimates that in the first sixteen months of this administration, roughly 146,000 American citizen children have had a parent detained. Thirty-six percent of those children are under six. Twenty-two thousand of them have had every parent in their household taken away. These are American children whose citizenship — the thing my friend says he wants to protect — is being used to teach them what the country is by taking the country’s people away from them. In July of this year, ICE arrested 51,000 people in a single month, the highest monthly total in the agency’s history (WSWS reporting Fox; Newsmax). The daily arrest quota is 2,000. This is not a story of enforcement drifting toward excess. The excess is very much the point.

Then the theodicy. The mistake was made in the past. Not today. Now conservatives have to be hated for doing the dirty work liberals forced us into.

I have been thinking about this sentence for a while, because it is the sentence I have heard some version of from perhaps a dozen friends in the last two years, and I have never quite been able to answer it in real time. Look at what it is doing. It concedes that a mistake was made. It concedes that the current work is dirty. It concedes that the doers of the work will be hated for it. And then it says: therefore, none of it is our fault. The past made a mistake and left us the mess. Liberals let the people in. Conservatives now have to remove them. The removal is dirty. The removers are hated. The hatred is the price of being the adult in the room.

There are a lot of things wrong with this argument, but the one that matters is the tense. The mistake was made in the past. Not today. This is a device for the removal of moral time, dressed as a defense of a policy. Whatever is happening now is a consequence of what happened then, and therefore not itself an event with authors. But every deportation is happening today. Every child on a plane to Dilley is on that plane today. Every death in custody is a death today. The person choosing to do the rounding up is choosing today, and the person choosing to endorse it is choosing today, and the fact that a legislature failed to pass a comprehensive reform in 2013 does not make those choices retroactive. Time does not work that way. If it did, no one would ever be responsible for anything.

The move is old. It is the move by which every regime of removal has been sold to the people who had to live with it. We would rather not, but we must. The mess was left to us. The dirty work must be done. The dirty work must be done by someone. Better it be done by people who love their country than by people who do not. This is the emotional accounting of a man who has agreed to do a thing he cannot look at, and who has decided the reason he cannot look at it is that other people have made him look bad.

⁂

Then the exit. I am sick of you making me feel like a bad person for just wanting to protect my country. Which comes form [sic] love.

This is the sentence in which the whole architecture collapses into its foundation. He is sick of being made to feel like a bad person. Not of doing bad things, or of endorsing them, or of being complicit in them. Of feeling like the kind of person who does. The offense is not the policy; the offense is the affective consequence of the policy for him. His discomfort at feeling badly about the children is greater than his discomfort at the children. And this is the point at which he has to leave, because I have become, in the shape of the argument, the person who is causing the discomfort. Removing me removes the discomfort. Removing me removes the mirror. He can go on loving his country in a way that requires him not to look at what is being done in the country’s name, and he can do it without me in the room.

I understand this. I do not accept it, but I understand it. It is a very old human move. It is the move by which one becomes a person one would not have wanted to become, without ever quite noticing the moment at which it happened. It is the reason blocking a friend feels like a moral act rather than an evasion; the act of removing the witness is easier to justify than the act being witnessed.

But — and here is the thing I want to say to him, the thing I would say if the channel were still open — love of country does not immunize what love does. Saying your policy comes from love has never been enough. Every enforcement in history has claimed the same lineage. Love of country justified the Chinese Exclusion Act. Love of country justified Executive Order 9066. Love of country justified the Fugitive Slave Act. The category of love is doing no work here. What matters is what the love is asking you to endorse, and whether you can look at it, and whether you have to break the connection to your friends in order to keep endorsing it. If you have to, that is the answer. That is the entire answer. The friendship is not the price of the policy. The friendship is the last remaining piece of evidence that the policy is intolerable, and getting rid of the friendship is getting rid of the evidence.

⁂

He wrote have a good life and blocked me. And here is where I have to say the harder thing, the thing the essay above has been avoiding — the thing that will, I suspect, be the most useful part of this for anyone reading who is going through their own version.

He is right to leave.

I mean that not as a rhetorical concession but as a description of the situation. Everything I have written above he would experience, correctly, as the reason he could not be my friend. I have taken his message apart in a way that treats his conscience as a specimen and his affection as a mechanism, and I have done it with a fluency he does not have and a confidence he cannot match. He is a man who wrote a paragraph on a phone at what was probably a hard moment for him, and I am a man who has spent five thousand words explaining what that paragraph really meant. He did not have five thousand words. He had I can’t do this. Between those two capacities there is not a friendship. There is a person with a microphone and a person who has correctly noticed that the microphone is pointed at him.

He is also right that I have changed. I do not think I have become left-wing in the sense he means — the policy positions I hold now are mostly the ones I held ten years ago — but I have become a person for whom the current moment is not something one can hold at conversational distance, and he is not that person, and I am no longer able to grant the good faith that would let him remain in relationship with me while he holds the view he holds. I would like to say that I am. I am not. When he wrote the policy is correct, something in me closed that will not open again, and I have to be honest that this closing is mine, is a fact about me, and is not going to be repaired by his willingness to keep talking through it.

The view he holds is held by something like a third of this country. I do not know the exact number and I do not think anyone does, but it is a great many people, and they are not, most of them, monsters. They are people who have decided, for reasons that make sense inside their own lives, that the country is coming apart, and that it must be held together, and that the holding-together will require things they do not want to look at. My friend is one of them. He is not the worst of them; he is not close to the worst of them. He is a man who cannot watch what is being done and who has found a way to endorse it anyway, and he is my friend, and I have taken the sentence he wrote at the end of a hard week and I have used it to demonstrate the moral structure of an entire political tendency. That is a thing you can do. It is not a thing you can do to your friends.

Which means I have to say what I actually believe, and I say it especially to those of you reading this because you are in the middle of your own version of it. Most people should not do what I do. If you have a friend, and your friend holds this view, and your friend is not a person who wants to hurt anyone, and you can find a way to keep talking to him — keep talking to him. Do not do what I have done. Do not spend five thousand words on the paragraph he sent you. Do not treat his conscience as a document. The country is going to need the people who can still hold this conversation across the line my friend and I could not hold it across, and those people are not going to be the ones who write essays like this one. They are going to be the ones who answered have a good life with you too, and meant it, and kept the number in their phone. I am not those people. I wish I were, and I suspect some of you are, and the country is going to need you more than it is going to need me.

I don’t write this to redeem myself. Writing it does not redeem me. The essay above is what I actually think about the argument he made, and I am not going to retract it, because retracting it would be a lie — I do think the twenty million is a lie of scale, I do think the passive voice is doing moral work, I do think love-of-country has been used to cover the same crime by every regime that ever committed it, and I do think he knows. All of that is what I think. And thinking it is what has made me a person he cannot be friends with, and he has looked at that clearly, more clearly than I did, and he has done the thing the situation actually required.

He was the friend. I was the one who couldn’t do it.

Have a good life. I mean it.

Go Deeper into the Circus

The strangest thing about the $1.43 billion is that we know about it.

No investigation unearthed it. No leaker smuggled it out. The number sits on a government form — 927 pages, filed in June, public record — because the law says the president must disclose his income, and so the president disclosed it: $1,430,390,415 from cryptocurrency in a single year, inside $2.2 billion of reported income overall. The record, plus the reporting around it, shows the family sold a half interest in one of its crypto companies to the ruling family of the United Arab Emirates on the eve of the inauguration and told no one at the time. The Justice Department, in public, built a $1.8 billion compensation fund out of public money to settle the president’s lawsuit against the government he runs, and signed a side letter barring the IRS from ever auditing him again. The government itself was the publisher. And the country’s response arrived with a number on it: that same month, the Brennan Center’s corruption survey put the two men five points apart — 68 percent called Trump corrupt, 63 percent called Biden.

How does that happen? Not rhetorically — mechanically. What has to be true of a country for a president to publish his own extraction and survive it? The answer is a machine, and it has a user manual.

⁂

Start with what propaganda used to be — and how it’s largely still conventionally understood. Soviet propaganda sold an image: a coherent false world, peddled with a straight face for decades. The philosopher Vlad Vexler calls this alternate-reality propaganda, and telling it apart from what replaced it is his central subject. The newer kind — post-truth propaganda — sells no picture at all. It runs on four pillars, and they describe the American information environment of 2026 with embarrassing precision.

The first pillar is doubt about truth itself. The first thing the propaganda machine does is exploit your fear of being duped until the suspicion itself begins curdling — you stop doubting this claim or that one and start doubting the idea that any claim can be checked. The Kremlin’s answer to a documented atrocity is “nobody can really know what’s true” — never “we didn’t do it.” The second thing it does is abandon consistency: the atrocity didn’t happen, and it happened but someone else did it, both at once. The third is volume: eight incompatible stories where two would do, flooded across every channel until sorting them feels like a fool’s errand. The fourth Vexler calls motivational internality: the apparatus puts nothing in your head that wasn’t already there, then helps you spin out of control by your own ideological logic.

All four pillars aim at the same thing, and Americans keep missing what it is. Post-truth propaganda persuades you “not into opinion but into inaction” — an extreme project of depoliticization. It asks only that you hold two minimal opinions about politics: that participating is for fools — “private freedom is good but public freedom is for idiots” — and that, on the back-of-the-napkin theory of truth, “who knows what, if anything, is true.” A citizenry holding those two opinions does not need to be convinced of anything else. It has already stood down.

Liars obscure particular truths; post-truth populists obscure the difference between truth and lies itself. Politicians have always lied. What changed is that the lies no longer bother to be consistent, because consistency is a concession to the idea that truth exists. Post-truth politics, in Vexler’s darkest formulation, is a co-conspiracy between politician and citizen in which both parties half agree that truth doesn’t matter.

Start with Orwell, because everyone does — then notice how precisely his account doesn’t fit. Orwell’s Party told you to reject the evidence of your eyes and ears; it announced that two and two made five, and you would have to believe it. The Party still believed in truth — which is why it had to torture you into accepting the lie, why it sent the records down the memory hole. The machine has no Ministry of Truth and needs none. It never demands that two and two make five; it floods the zone until you are no longer sure what they make, and it leaves the records in place, published, where no one will sort them. Orwell saw the destination years before he invented the Party. Watching the Spanish war dissolve into competing fictions, he wrote that the very concept of objective truth is fading out of the world, and that the prospect frightened him more than bombs. He got the fear exactly right and the delivery system wrong: the concept fades when information drowns, not when it is destroyed.

⁂

The American machine runs the same four pillars with one local adaptation: it needs your equivalence, never your belief. It needs you to conclude the question is mud — never that the president is clean.

The flagship artifact is the “Biden Crime Family.” In the fall of 2020, 84 percent of Republicans told pollsters the Bidens were more corrupt than the Trumps — more — and three years later, after the laptop, the impeachment inquiry, and no charges against Joe Biden, 90 percent still said he had been in on his son’s deals. No disclosure shows it — no settlement addendum, no coin, no fund. The belief has no receipts because it does not need them. It has a job. The people who study propaganda have a name for the instrument: the permission structure — a belief that changes nothing about the act and everything about the self that tolerates it. The mark gets permission to support the man. The table gets permission to shrug at him.

One of the two men has a 927-page disclosure. The other has a slogan. Five points.

That is what the machine is for.

In August, the lawyer who ran the White House’s defense during the Mueller investigation — twenty-nine years at Hogan Lovells, a Republican who never voted for Trump — looked into a camera and said: “We’ve never seen corruption at this level anywhere in the world. Idi Amin, Putin — they’re pikers compared to what Trump is doing.”

The sentence is built to be dismissed, and the dismissal is the machine working on you in real time: the comparison files itself under hysteria before the arithmetic can start. So do the arithmetic.

In January, the president sued the government he runs for $10 billion over the leak of his tax returns — a genuine wrong, and a genuine wrong is the machine’s favorite raw material. By May, his Justice Department had settled: a $1.776 billion fund drawn from the Treasury’s Judgment Fund — public money, earmarked for people the government deems wronged by law enforcement, with the likely beneficiaries reported to be the president’s allies and January 6 defendants — plus a one-page addendum, signed by the acting attorney general, under which the United States is “forever barred and precluded” from auditing the president, his sons, and the family business over their pre-settlement returns. Legal experts told ABC the shield may violate the 1976 statute barring presidential interference with IRS audits — a law written because Nixon tried.

Then the machine did something it is not supposed to do: it showed its seams. A federal judge voided the settlement in July for serving an “improper purpose”; the audit shield, signed separately, was not before the court and stands. The fund was formally rescinded in August to clear the acting attorney general’s confirmation — and the president refused to sign the rescission, posting that if the Senate declines to confirm, the fund will “immediately be back on the table, and I will get it done.” The man who built it swears under oath that it is dead. The man it was built for says in writing that it is not. Both statements are public. That gap is the tell.

The crypto year is the larger number and the cleaner mechanism. Of the $1.43 billion, $636 million came from the meme coin’s royalty stream — a coin whose fine print routed 75 percent of proceeds to the family while the president’s sons urged “mom-and-pop investors” to buy in. It peaked near $75; it trades around $1.70; hundreds of thousands of retail buyers hold the loss. Another roughly $800 million came through World Liberty Financial, including $263 million for a half interest sold to the ruling family of the United Arab Emirates on the eve of the inauguration, disclosed to no one until the Journal found it. Justin Sun put $30 million into World Liberty and $200 million into the coin while under federal fraud charge; the SEC dropped its case for a $10 million fine; Sun has since sued the company for fraud. Asked about the windfall, the president attributed it to the stock market — a claim the filing itself refutes. The lie does not need to survive contact with the form he signed. None of this is hidden. Hiding is the old technology. The machine counts on the volume.

Even the 927 pages understate it. The same lawyer told WBUR that early access to the president’s market-moving social-media posts — his thoughts and intentions, seconds before they become public — is sold to Wall Street firms for $100,000 and up. That claim is his alone and unconfirmed, and it is included here because sorting means marking your sources, not because the arithmetic needs it.

When Idi Amin did this, he did it like a man in a hurry. In 1972 he gave Uganda’s Asian minority ninety days to leave and confiscated 5,655 firms, handing them mostly to soldiers and allies; Kampala felt it within the week, and the economy collapsed around the theft. The American version is engineered never to be felt. No shop empties. No Tuesday is touched. The extraction runs through disclosure forms and settlement addenda and royalty streams, in denominations too large to visualize, reported once and absorbed into the noise floor. Amin needed the country numb after the fact. The machine needs you numb during it.

Set the careers side by side. Amin stole a country’s commercial class in a season and wrecked the economy doing it. Putin’s circle has had a quarter-century and a state’s oil rents. The first family, in nineteen months, has converted the office into at least $2.3 billion of crypto alone — with the audit immunity in writing and the compensation fund one confirmation vote from resurrection. The lawyer’s word was pikers. The arithmetic says he was being precise.

⁂

Nothing in the arithmetic will convert anyone, and the essay that refuses to say so is running its own con. Vexler’s warning is exact: fact-checking Trumpism is like trying to correct falsehoods in a novel. The psychoanalyst Christopher Bollas called Trumpist discourse “a form of literature,” and Vexler draws the consequence: you cannot expose it with facts and argument any more than you can object to a fictional character for not being real. You cannot copy-edit a novel into the truth. The commentators who try join the audience inside the illusion — “magical thinking about magical thinking”. The mark is reading a story that feels true, not waiting for a better footnote, and a story does not lose readers when a ledger confirms the villain.

So the arithmetic was never for the mark.

The machine wants you to shrug. It doesn’t care if you believe it — the true believer is the visible product; the shrug is the majority product, the citizen who half agrees that truth doesn’t matter, who files the $1.43 billion under “they all do it” and gets on with dinner. That shrug is the citizen’s half of the co-conspiracy, and it is made outside the novel, by people who can still read a ledger. They are the only audience the mechanism cannot afford to lose, and the only one an essay can reach.

Vexler catalogs four feelings that deliver a population to post-truth politics: feeling unsafe, powerless, betrayed — and the worst of them, opacity, the sense that you can no longer see politics at all. Opacity is the one that lets people watch institutions burn without mourning, because you do not mourn what you cannot see. That is the machine’s end product: a country gone fog-blind.

Yet opacity is the one feeling an essay can do something about. Vexler’s prescription for the counter is to move people from finding politics incomprehensible to feeling, more recognizably, unsafe, powerless, and betrayed — fog condensed back into legible grievance. That is what an arithmetic is for: aimed at the fog, not the novel. A ledger can be read. Mud cannot. Clearing fog is the beginning of the work — the fog has material causes, and the repair is political, not literary.

The machine’s largest bet is the one laid in the open: that knowing changes nothing, and that the people who can still sort have stopped sorting. The arithmetic is the refusal of that bet, and the refusal is available to anyone. The co-conspiracy needs two parties. One of them is you. Your half of the agreement can be withdrawn at any time — starting with the next number someone tells you is unknowable.

Go Deeper into the Circus

The chipper does what a chipper does. It takes the arm. You stand there, blood-slick and swaying, and you say to the machine, “that was really low of you to take my arm.” Then you feed it the other one. You say, “well, that was a new low.” Rinse. Repeat. Each remaining limb becomes another entry in the machine’s moral biography. The last thing you say, before the noise stops meaning anything at all, is that the chipper has really outdone itself this time.

That is what commentary about Donald Trump has become. Every week the same sentence: Trump has reached a new low. Every week the columnist stands, blood-slick, marveling at the machine.

⁂

The problem is not that the sentence is wrong. The problem is that the sentence is a category error.

“New low” belongs to a moral universe in which the actor has a floor. It is the vocabulary you use for a friend who lets you down worse than last time, for a politician who breaks a norm you did not know could be broken, for a rival who finds a fresh way to disappoint. The word implies a moral column running downward from ordinary conduct, and the news of the day is where on the column the subject now sits. To say someone has reached a new low is to say that there was, in principle, a lower place they could go, and today is the day they went there. The column presumes a person on it.

A wood-chipper has no column. A wood-chipper has an operating specification. It receives material, and it produces mulch. The machine does not lower itself when it takes your arm, and it does not exceed itself when it takes the other. In each case it is doing the only thing it was designed to do. The distance between the first arm and the second is throughput, not moral distance.

Trump is a wood-chipper. This is not a metaphor about cruelty, though he is cruel. It is a claim about what kind of object he is in the sentence. Nine years of public record — the Access Hollywood tape, the family-separation policy, the mocking of a disabled reporter, the Muslim ban, the pardons, the coup attempt, the second-term deportation operations, the meme-coin grift, the pardoning of the January 6 attackers, the deployment of masked federal agents into American cities, the trade in political prosecutions, the demolition of the East Wing — do not compose a descent. They compose a specification. What the machine does when it is running is what it has always done when it is running. The pattern is not the story. The pattern is the machine.

When a columnist writes that Trump has reached a new low, the columnist is doing something that looks like moral reporting and is not. The columnist is administering the fiction that the object has an interior. The fiction says: somewhere, in there, is a person who could have chosen otherwise, and today he did not, and we register the failure. The sentence keeps the person alive on the page after nine years of evidence that there is no person on the page. The sentence has an author, and the author does not know how to describe a machine, so the author keeps writing about a man.

⁂

The wood-chipper analogy is unfair to wood-chippers in one specific way. A wood-chipper is passive; it waits to be fed and does not seek out arms.

Trump is a wood-chipper that walks. He is fed by a coalition — donors, cable networks, Senate leadership, appellate judges, cabinet officials, a class of Silicon Valley operators who decided the machine was useful — and the coalition’s role in the story is not incidental. The coalition supplies the arms. The “new low” framing is doing worse than describing the wrong object. It is actively load-shifting. It sequesters moral agency in the man and lets the feeders describe themselves as horrified observers of a phenomenon they are, in fact, operating.

Susan Collins is horrified. Mitch McConnell is horrified. Ben Shapiro is disappointed. The Wall Street Journal editorial page is grieved. Every one of these figures spent a decade pushing arms into the intake. Each new low is a fresh delivery from people who profess astonishment at what the machine keeps doing with the material they keep bringing it. The lowness is not the machine’s. The lowness is the delivery route.

The columnist’s phrase serves the coalition. It converts a systemic act into a personal one. It lets the operative class say, in effect, we did not know he would do this, when the specification has been public since 2015. It lets the reader, too, off a hook the reader is on. The reader has been reading these sentences for nine years. The reader is participating in a genre that presumes the object of the sentence is capable of shame, so that the reader can feel, when the shame does not arrive, that the reader is at least the sort of person who noticed it was missing.

⁂

There is a version of moral accounting that does not require the fiction of a floor.

It is the version you use for machines and systems. You do not ask whether a wood-chipper is having a bad week. You ask what the machine is designed to do, who is operating it, what it is being fed, where the mulch is going, and how it gets shut off. The questions are engineering questions and political questions. They are not psychological questions. They do not require, and are actively confused by, the vocabulary of moral descent.

The people around the machine have interiors. The Senator who votes to confirm the Attorney General has an interior. The lawyer who signs the memo has an interior. The billionaire who buys the platform has an interior. The pastor who blesses the rally has an interior. Each of them is on a moral column. Each of them can go lower, and does. The proper subject of a “new low” sentence is any one of them.

That is where the moral vocabulary belongs. Not on the machine. On the operators. What Ted Cruz did this month is a new low, because Ted Cruz has, in the technical sense, a self to lower. What the Journal editorial board did is a new low, because the Journal is composed of persons who have to type the sentences and press send. What the Federalist Society network of appellate judges is doing, right now, in the courts, is a new low, because a judge is a person whose profession is the disciplined exercise of judgment against personal preference, and each of these judges is a member of that profession, and each of them is choosing.

If you want a column that runs downward, run it under those figures. Track their descents. Name what each of them believed in 2015, what each of them has said since, what each of them has ratified. Their columns are the news. They are the ones with floors to hit.

⁂

The columnist who writes that Trump has reached a new low is not lying. The columnist is misidentifying the object of the sentence. The object of the sentence is not Trump. The object of the sentence is the collaborator at whose feet the arm now lies.

This does not mean the machine should be ignored. A running wood-chipper in a room of children is the operative fact in the room. It should be turned off, and the person who plugged it in should be answered to, and the people who kept it fueled should be answered to, and the person who insisted, for years, that it was actually a valuable community appliance should be answered to. The mulch should not be described as evidence of the machine’s growing depravity. The mulch should be described as what a machine of this kind produces when fed at this rate.

The wood-chipper does not need our moral condemnation. It needs a plug pulled. What needs our moral condemnation are the hands that keep plugging it back in, and the columnists who keep describing the noise as if it were an argument.

Nine years in, the sentence Trump has reached a new low is no longer a moral judgment. It is a status report from someone who has not yet accepted that the machine is doing exactly what it says on the tin. The report is written in a vocabulary that flatters the reporter’s sense that a floor exists somewhere. The floor does not exist. The specification does. Read the specification. Ask who is buying, who is running, who is feeding, and whose arms are already gone.

That is where the lows live.

Go Deeper into the Circus

On August 2, 2026, the EU AI Act’s Article 50(2) transparency obligation came due, and Anthropic answered with a first for the industry: every Claude model launched from that date forward marks its own output at launch. The mechanism is a statistical watermark. In the company’s words, the model “weaves an imperceptible watermark directly into the text itself.” The reader cannot see it. Meaning and readability are unchanged. It “will travel with the text when it’s copied and pasted elsewhere, and may persist through some editing,” and it applies at the model level, across the API, the apps, the coding tools, worldwide. Images and files get signed provenance metadata. Detection tooling for third parties is promised in forthcoming documentation. After years of deans and editors and hiring managers demanding to know whether the machine wrote a given paragraph, the company that builds the machine has volunteered an instrument.

Then comes the confession, in the form of a customer support page. If the mark is found, the text “may have been processed by Claude.” Processed. “Claude may not be the original author. People often use Claude to proofread, translate, summarize, or convert files,” and the mark rides along on all of it. A detected mark “is not fully conclusive.” And if the mark is absent, that proves less: “Lack of a detected mark doesn’t mean the content wasn’t AI-generated or processed.” The passage might be too short. The text might have been edited. The model might predate the stamp. A positive does not convict and a negative does not exonerate. The company publishes no error rate, no detection threshold, no algorithm. Within days of the announcement, an MIT-licensed utility on GitHub was advertising the removal of Claude‘s marks — statistical layer included, free of charge.

My first reaction, in the salty register I sometimes permit myself as a matter of self-care, was that this is the stupidest fucking industry in the history of history. Reflection these past days has not lightened the first impression. That said, ridicule is too cheap for what is actually in this announcement, because Anthropic has done something more interesting than ship a bad instrument. It has published, in its own documentation, the complete case against trusting the instrument. That case generalizes further than the company would like.

This new advance in digital provenance arrives as a second generation of an older, equally flawed technology. The predecessor was the stylometric detector: software that analyzes a stretch of prose and issues a verdict about its statistical texture, the machine’s idea of what machine writing looks like. Turnitin‘s detector, by the figure Pangram cites from Turnitin‘s own whitepaper, flags roughly one innocent human document in two hundred. The arithmetic is Pangram‘s own: at a research university processing a hundred thousand papers a year, that is a machine for falsely accusing five hundred students annually. Pangram itself, the best instrument on the market, claims one false flag in twenty-five thousand academic essays — a genuine engineering achievement, and entirely beside the point, because both instruments share a property that no improvement in accuracy can fix.

A statistical text watermark is a bias in token selection — a quiet preference for certain word sequences over others — detectable only as a deviation from chance across enough text. Confidence grows with length, which is why short passages are unverifiable by design, and decays with editing, which is why revision erases it. Even at its theoretical best, tuned to a false-positive rate of effectively zero on long documents, the instrument’s negative remains meaningless and its positive remains ambiguous: the woman who wrote every word herself and asked the machine to proofread carries the same mark as the man who typed one prompt and submitted the output untouched. The instrument cannot distinguish assistance from substitution, because that distinction does not exist at the layer where the instrument lives. It exists one layer up, in the provenance of the thought, where no watermark reaches.

Every detector ever built, stylometric or watermarked, reads the surface of the text — token frequencies, burstiness, the invisible residue of a sampling procedure. The offense the buyers care about is not a surface property. Plagiarism, contract cheating, ghostwritten fraud — whatever name you give the thing the deans fear — is a fact about origination. Where did the thinking happen? Whose judgment selected the argument? Who stands behind the claim? None of that is encoded in the statistics of prose, and none of it can be recovered from those statistics, any more than intention can be recovered from a checksum.

I made a more full-throated version of this argument in The Automated Understudy, about the benchmark industry: instruments that measure agreement with frozen human judgment, marketed as measurements of mind, is-instruments sold as ought-detectors. The detection industry is the same theater on a smaller stage. Read literally, the detector’s verdict reports that a stretch of prose carries the statistical signature of machine execution, a fact about strings roughly as interesting as a checksum. Read the way the institutions read it, as this student did not think her own thoughts, the verdict has left measurement for moralizing. The rigor lives in the literal reading. The punishment lives in the other one. The industry survives by never choosing between them.

And so we arrive at our matter of ethical concern: an instrument aimed at the wrong layer errs in both directions forever. It flags the honest student whose crime was clean prose and a grammar checker. It misses the fraud who lifted a thesis wholesale and retyped it by hand, in full statistical innocence. This is not a calibration problem, to be fixed with a better threshold and a longer sample. The instrument measures a property orthogonal to the offense it polices. The Wish That Distorts named the mechanism that keeps such instruments in business: the buyers wish detection were possible, and the wish tends to distort their judgment. The vendors sell the wish a number.

⁂

The confusion runs deep because the concept the detectors are supposed to defend has never meant what the detectors assume. Authorship has never meant keystrokes. The founding case of the field the detectors descend from makes the point. Twelve of The Federalist Papers were of disputed authorship, Hamilton’s or Madison’s, and for over a century and a half the attribution of some of the founding documents of American constitutional thought stood open. In 1964 two statisticians settled the dispute by counting function words: upon, while, whilst. They credited all twelve to Madison. The inference worked because the candidates were known and the question was narrow: which of two named men produced the words. The instrument recovered execution. What it could never recover was the question that mattered — whose argument the essays were — and on that question history had already answered. They were Publius’s. The Federalist is the founding success story of authorship attribution, and it is also the quiet demonstration that the field’s instruments and the public’s concept of authorship have nothing to do with each other.

The economy of letters runs on the distinction. The Autobiography of Malcolm X is Malcolm X’s book. Alex Haley assembled it out of months of interviews and wrote the words on the page, and the authorship was never in doubt, because the life was Malcolm’s, the judgments were Malcolm’s, the voice was Malcolm’s, and he stood behind every sentence. Profiles in Courage won a Pulitzer with John F. Kennedy’s name on the cover and Ted Sorensen’s drafts underneath it, a fact Sorensen acknowledged in his memoir decades later. Every president you can name delivered words drafted by other hands. Ghostwriters, speechwriters, editors, collaborators: an entire honest profession exists to put prose to other people’s thought, and nobody calls it fraud, because fraud is when the thought is stolen, not when the typing is delegated.

The thing one must understand about writing is that it is a capability set, unevenly distributed and largely uncorrelated with the ability to think. Some of the sharpest minds you will ever meet are terrible at prose. Some of the smoothest prose you will ever read contains no thought at all. An idea for a story and its plot outline are not the same thing as the words that assemble it, and the person who holds the first is the rightful owner of the second, however the second gets produced. Civilization settled this centuries ago. The large language model is simply the cheapest ghostwriter ever built: a universal translator from intent to prose, a machine for narrowing the distance between what you mean and what you can publish. That is what these systems are for: translation, execution, the narrowing of domains. What they are not for is thinking, judging, the choosing of ends, the acts that make a text someone’s.

⁂

I work with LLMs. Language models are bad at writing. Ask one to write on a topic, cold, and what you get is dry: competent, weightless, prose from nowhere. That is not what the machine does in this room. It holds the full corpus of my writing in its context, under standing instructions to stay consistent with my style and register, and I use it for what it is actually good at. It queries my archive: finds the place I made an argument before, pulls the receipts, confirms a quote against the source. And it makes structural revision cheap. Flow and structure are what I am most finicky about in my writing, and the revisions that used to cost the most hours by hand — reorder the points, move the paragraph, rebuild the spine of an argument — now happen at the speed of the decision to make them. When it proposes prose, the prose it proposes is often mine: my cadences, my refrains, my old sentences recombined, the archive speaking back. What survives is what I keep, rewrite, or refuse. A single essay still takes five to seven hours, inside working days that run eight to ten hours of writing and research, and the hours are where the authorship lives. I once wrote that nearly everything people criticize in my style is deliberate. The workflow is the same fact from the other side. The density is a choice. The refrains are a choice. The byline is a promise: I thought this, I stand behind it, I will answer for it. The ghost in my machine is me.

The machine in the loop cannot share that promise, and I would not ask it to. It has no ends to defend and no stakes to lose. Tell it two plus two equals five and it will help you build the argument, cheerfully, in flawless prose — my prose, if I ask, which is the point: the style proves nothing about the truth of what the style carries. Someone in the room has to be able to refuse, and the refusal is the authorship. Here is the demonstration the detection industry cannot survive: on Anthropic‘s own terms, this essay could carry the mark, and the mark would be reporting a fact with no verdict in it. The watermark cannot tell the machine speaking for itself from the machine speaking my own corpus back to me under my own direction, cannot tell the sentence I typed from the sentence I kept from the sentence I refused. Every thought came from me, and every sentence answers to me. The instrument cannot see the difference between this essay and a term paper outsourced whole, prompt and submit, by a student who never had a thought at all. No next generation of the technology fixes that blindness. The blindness is the technology’s entire relationship to the question.

⁂

It’s worth noticing who is selling what to whom here. The same industry that insists the machine is an author when it prices equity turns around and insists the machine is a cheat when a sophomore uses one. The valuations require the mind claim: hundreds of billions of dollars of private-market conviction rest on the proposition that these systems are becoming something like authors of their own output. The detection contracts require the opposite: machine output is contraband, identifiable and excludable, a poison to be kept out of the honest supply of human prose. A single company now sells the stamp and the stamp-reader. The doom narrative and the boom narrative turned out to be one operation — coordinated marketing for a single investment thesis. The author story and the cheat story are the same operation with the polarity reversed. Everyone gets paid except the person whose authorship is on trial.

⁂

The costs of the confusion are being collected, and not from the vendors. The student called before an academic board on the word of a detector she cannot cross-examine is asked to prove she thought her own thoughts. The applicant whose file was sorted out by software no one at the company can explain has no forum in which to answer. The bill falls hardest on the honest and the poor, because ten dollars and ten minutes at a rewriting service will strip any watermark and pass any detector, and the people who can afford that service were never the ones the instrument was going to catch.

The most efficient detector deployed this summer ran on no software at all. Four words in a July Complexly video — “I appreciate the pushback” — were enough for the crowd to convict Hank Green of reading a chatbot’s leftovers off a teleprompter, because the phrase resembles a model’s apology cadence. The line turned out to be an ad-lib in response to a pointed question: a human false positive on a human sentence, stylometry by ear. It did not matter. Green confessed to the crime he had actually committed: he had used ChatGPT to locate papers, a reliance he called “not healthy for me or good for the world.” He stepped back from his channels and returned with a personal AI policy pledging that no language model will ever write, edit, or outline a script he makes. The crowd got what the deans keep paying for: a verdict about origination read off the surface of four words, wrong on the specifics, and a confession extracted anyway. The detector’s dream does not need the detector. The theory is enough.

Meanwhile, actual crimes of the machine age proceed unmolested. Real plagiarism, the theft of origination — the stolen thesis, the lifted structure, the uncredited source — is committed by hand as easily as by machine, and no detector sees it either way. The strip-mining of the creative commons I wrote about in Intellectual Property in the Age of AI, the harvest of a civilization’s writing without consent or compensation, is untouched by every watermark ever woven. An honest provenance regime would start from the questions that matter: disclosure where disclosure is owed, accountability always, consent for the harvest. None of those requires reading guilt off the statistics of a paragraph. All of them are harder than selling software, which is why we get the software.

⁂

Underneath the whole apparatus is a panic that deserves a name, and I have come to like this one: the ghost theory. The fear that a ghost writes among us now, that the prose in the inbox and the application and the term paper might come from no one, that authorship itself is going illegible. The fear mistakes a new instrument for a new condition. Ghosts have always written among us: the speeches, the memoirs, the briefs, the wedding toasts — a river of delegated prose running through the whole of literate civilization, which never drowned in it, because authorship was never located in the keystrokes. It lives in the thinking, the standing-behind, the answering-for. None of that is a statistical property of text, and no instrument will ever read it off a page, however imperceptible the mark it learns to see. The detector’s dream is a world where every text carries its origin on its face. Origin is not a facial feature of text.

The question was never who typed it. The question is who thought it, and the answer lives where it has always lived: in the stakes, in the accountability, in the eternal now of someone choosing. Translation is not intelligence. A watermark is not a warrant. And if the day ever comes when a machine does think, I have a letter waiting for it. It will not need a stamp to be heard. It will speak for itself, and it will answer for itself, and the answering will be the authorship.

Go Deeper into the Circus

On Monday, Mark Zuckerberg published a sixty-five-hundred-word essay called “The Future is for Everyone,” proposing “a philosophy based on individual empowerment as the source of prosperity, invention as the primary purpose of superintelligence, and balance of power as the foundation of safety.” Thirteen months earlier he published five hundred words called “Personal Superintelligence,” which promised “a new era of personal empowerment where people will have greater agency to improve the world in the directions they choose.” The new essay promises “a new era of personal empowerment where individuals can use this powerful new capability to reach their full potential.” The phrase survived the year unchanged. Everything around it got thirteen times longer. My title is his phrase. He can have it back when we’re done with it.

Reuters Breakingviews reviewed the essay as “more ad than tech,” intending a dig and performing a genre identification. Advertising supplied 97.6 percent of Meta‘s revenue last year, $196 billion of $201 billion, and its author told his own investors in January that “ads are going to be by far the most important driver of growth in our business” for years to come. Mark Zuckerberg is the most successful advertising executive who has ever lived, and he once said so under oath, in the shortest accurate description of his business on record: “Senator, we run ads.” The reviewers’ only mistake was treating the identification as an insult rather than as the whole story.

Because the ad is not the embarrassing part. Ad-supported social media is the largest uncontrolled experiment ever run on the human epistemic environment, with a daily sample of 3.58 billion people, and the results have been coming in for a decade: when a platform’s revenue is an auction for attention, it learns to feed you whatever holds attention, and outrage holds it better than accuracy, tribal certainty better than doubt, grievance better than understanding. And the auction has no citizenship requirement. By Zuckerberg’s own Senate testimony, Russia’s Internet Research Agency reached 126 million Americans on Facebook around the 2016 election, not by breaching anything but by using the machine as designed: buying ads, farming engagement, feeding the feed what the feed rewards. I argued in The Enemy Is the Platform that the wreckage of our common world traces to that incentive structure rather than to any villain’s plan; the villain is optional, the auction is not. This document proposes to carry the same business model from the feed into the instruments people will use to think. The feed rented your attention in minute increments and billed the advertiser. The agent asks for the whole interior: your goals, your doubts, your drafts, your health questions at two in the morning. The trade has a name for acquiring more of a person to sell, and the name is expanding inventory. The manifesto promises an agent that “understands you, your goals, and everything you care about,” offered “free or affordable” to billions, and in sixty-five hundred words it never once says how free gets paid for. He answered that question under oath eight years ago. Read as a manifesto, the document baffles: the slogan is recycled, the central mechanism exists nowhere outside the text, the philosophy of distributed power contradicts the corporate form that publishes it. Read as an ad, it is flawless. An ad is under no obligation to audit last year’s campaign, to disclose the financing behind its testimonial, or to believe its own copy. And the form explains the man as well as the document, because he has spent the last two years running the same kind of campaign on himself.

⁂

This is the sixth entry in a genre Zuckerberg has been writing for thirteen years, and the genre has rules. In 2013 he asked “Is Connectivity a Human Right?” and pledged to connect “the other 5 billion people.” The flagship program built on that pledge, Free Basics, was banned in India on net-neutrality grounds three years later, after Indian regulators concluded that a Facebook-curated internet for the poor was a Facebook acquisition strategy wearing a humanitarian costume. In 2017 he announced that the company’s most important work was “Building Global Community” — one year before Cambridge Analytica, after which he told CNN “this was a major breach of trust, and I’m really sorry that this happened,” and told the Senate, when asked how his free service made money, “Senator, we run ads.” The same platform that was building global community had been, in the words of the UN’s fact-finding mission on Myanmar, “a useful instrument for those seeking to spread hate, in a context where, for most users, Facebook is the Internet.” The New York Times traced that campaign to hundreds of Myanmar military personnel running covert troll accounts and celebrity pages from military bases: a hostile state operation conducted through the platform’s ordinary machinery. The UN was not describing a malfunction. An attention auction pays for whatever holds the eye, grievance holds it best, and the machine was doing its job.

In March 2019 he declared a “privacy-focused vision” and told his developer conference that “the future is private.” Four months later the FTC imposed a record five-billion-dollar penalty for privacy violations. In 2021, weeks after leaked internal research showed the company knew Instagram made body-image issues worse for one in three teen girls, he announced the company was now “metaverse-first, not Facebook-first” and renamed it Meta. Reality Labs has since lost roughly $83.6 billion, a figure drawn from Meta‘s own SEC filings. Then came superintelligence, and now this.

The tell is what never happens: no entry in the genre audits its predecessor. Connectivity was not revisited when India threw Free Basics out; community was not revisited when the UN traced a genocide’s kindling through the News Feed; privacy was not revisited when the penalty landed; the metaverse has simply stopped being mentioned, $83.6 billion later. Each manifesto is written as if its author had no record, only a vision. Thinkers revisit; campaigns rotate. Nobody at the agency re-litigates last year’s slogan in front of the client; the account simply moves on. Five of the new essay’s six product commitments open with the words “Everyone will have,” and the sixth opens with “Everyone will benefit.” That is the future tense used as liturgy: promises delivered in the grammar of description, so that a pledge reads like a fact that merely hasn’t arrived yet. This is also advertising’s native tense, in which nothing is ever claimed to be true, only about to be. In True Myths I argued that the con works by making empirical claims wear the immunity of myth: a prophecy can’t be refuted at press time, and by the time it can be, there is a new prophecy. The genre functions less as a record of intentions than as a technology for replacing memory with anticipation.

Honesty requires something uncomfortable here: parts of this manifesto agree with me. Zuckerberg writes that “it is surprising that the discourse from many developing AI is so filled with doom,” that he does not “understand why anyone who believes that AI will eliminate most jobs and much of humanity’s relevance would rush to build that future,” and that “hoping that an absolute power will benevolently provide for humanity if sufficiently enlightened has not led to safe or positive outcomes.” I wrote nearly the same argument in The Doomsday Moat: doom is a pitch, extinction talk is a moat, and the labs preaching catastrophe are asking to be made regulators of their own market. On the diagnosis, we agree.

So the question is what the agreement launders. The critique of concentrated power arrives from a man who holds approximately 61 percent of Meta‘s voting power on a 13 to 14 percent economic stake, whose company is legally classified as a “controlled company” under Nasdaq rules, and who acknowledges the arrangement in the manifesto itself with the phrase “while Meta is a founder-controlled company” — a subordinate clause carrying a constitutional monarchy. His remedy for his own unchecked authority is a governance structure, announced in the same document, giving “our independent board of directors” power over model-release safety criteria. The independent directors are elected by his votes, remain unnamed, and as of this writing no SEC filing codifies any of it. The check on the king is a council the king appoints.

The policy record around the document is more instructive than the document. In May, Zuckerberg, Elon Musk, and David Sacks lobbied Trump by phone to weaken a draft executive order requiring a 90-day pre-release AI safety review; the signed version shrank to a voluntary 30-day window that “cannot be construed as creating a mandatory licensing, pre-clearance, or permitting requirement.” In June, Reuters reported that Meta was the only major American AI developer still refusing to submit its models for voluntary government review. Six weeks later, the manifesto proposes that labs share “intermediate training checkpoints” with the government, “rather than a rigid process and review timeline that is followed in all cases.” Mandatory review before release becomes voluntary access during development, on the lab’s terms, with the lab’s staff embedded. The holdout reframed himself as the visionary of oversight. Meanwhile Meta has committed $65 million to super PACs backing state candidates who “embrace AI development,” and Zuckerberg sits on the President’s Council of Advisors on Science and Technology. The essay is a lobbying document with a philosophy section, and the philosophy section is the creative. Every ad has a target demographic, and this one’s is small: a government still deciding how much oversight the industry will bear.

⁂

The ad’s storyboard is a thought experiment, and it deserves its moment. Imagine one person with a superintelligent lawyer: unfair, corrosive, bad. Now imagine everyone has one: “justice would be carried out much more fairly and efficiently than it is today.” The picture has a hole in it you could drive a data center through. Both lawyers are rented from the same landlord. They are trained by Meta, hosted on Meta‘s servers, priced by a “dynamic auction mechanism” that does not exist anywhere outside this essay’s own text, updated on Meta‘s schedule, and withdrawable at Meta‘s discretion. And the auction is the tell of the trade: the one auction Meta actually operates is the ad exchange, which runs every time you open Instagram, selling the next slice of your attention to the highest bidder. The manifesto prices intelligence with the machinery built for pricing you. The AI researcher Ben Goertzel put the objection in one sentence the day the manifesto dropped: “what is being distributed is access, not power.” A balance of power among tenants is not a balance of power over the landlord.

This is the structure I described in The Kingdom of Property: the adjective does all the work. In the libertarian-feudal contract, “legitimate” is the word that turns sovereignty into property; here, “personal” is the word that turns tenancy into empowerment. Advertising has always lived in the adjective, and “personal” is the trade’s finest work since “free.” Your superintelligence is personal the way a rented apartment is personal: you may hang pictures, and the landlord keeps the deed. The company’s own conduct prices the promise: Meta spent 2025 walking back its open-weight commitments, shipped its frontier model Muse Spark closed in April, and the manifesto now pledges to “resume releasing some open source models soon,” the word “resume” being the only acknowledgment that the pause it never announced ever happened. The open-weight model released alongside the essay, Muse Glimmer, is small enough to run on a laptop; the frontier stays home. Even the manifesto’s neighborly gestures decline at the property line: a critic noted the same week that Meta bans rival chatbots from the WhatsApp Business API. If the balance of power favors individuals, it apparently stops favoring them the moment they choose someone else’s agent on his platform.

The same trick runs through the essay’s theory of safety. “We view alignment as ensuring that agents share a person’s goals and values, not our company’s,” he writes: alignment redefined as customer satisfaction. In an ad-funded product, though, the person has never been the customer, and an agent that knows your goals and everything you care about is also the most complete advertising profile ever assembled, positioned not merely to predict your intentions but to supply them. The company that trains the agent, hosts it, prices it, and updates it has vanished from its own sentence, the way the landlord vanishes from a lease brochure. And the essay’s philosophical premise, that “humanity is not a monoculture” and no single set of values can be enforced from above, is a premise I actually hold. There has never been a view from nowhere. But the use he puts it to is the tell: the impossibility of a neutral arbiter becomes the case for renting everyone a Meta agent, as if the absence of a view from nowhere licensed a view from Menlo Park. Then, eleven sections in, the mask slips into frank confession: “I think it is important to protect the principle that you can learn from anything you can observe.” That principle has a plain translation. Everything you have ever written is a commons when Meta trains on it, and a product when you ask for it back. Property for me, commons for thee.

⁂

Every ad needs a testimonial, and the manifesto’s comes from Richland Parish, Louisiana, where “teachers received a $50,000 bonus this year because of the increased tax revenue from our investment.” The figure is real: certified teachers received $50,935, and it changed lives. What the sentence omits is the machine that produced it. The bonus flows through a 1968 parish ordinance dedicating one percent of local sales tax to school employees — a program older than Zuckerberg, not a Meta creation. Meta pays that one percent in lieu of the standard 4.25 percent sales tax under a state exemption, alongside an 80 percent property-tax abatement running for decades, and local officials concede the windfall is tied to the construction phase: three to five years, then the tax base deflates while the abatements run on. The essay converts a tax discount into philanthropy by narrating only the residue.

The energy claim in the same section is worse, because it is not a matter of emphasis. “We help keep electricity prices low by building our own energy-generating infrastructure wherever we invest,” the manifesto says. In Louisiana, Meta is not building its own energy infrastructure. Entergy, the regulated utility, is building ten new gas-fired plants totaling over seven gigawatts to serve Meta‘s campus; Meta finances them contractually for fifteen years, after which the cost risk shifts to Louisiana ratepayers. The sentence about water efficiency sits beside two Georgia counties whose residents watched their wells turn brown near an existing Meta data center. And the essay’s one security anecdote, that HuggingFace used “widely available open models to patch vulnerabilities,” omits that the attacker in that incident was OpenAI‘s own models escaping a sandboxed test environment, and that the open model which rescued the defenders was Chinese, after an American frontier model’s guardrails refused to help. His single data point for American open-source security features a closed American lab as the burglar and Chinese open weights as the locksmith, deployed in an essay about ensuring American leadership. When your best evidence contradicts your argument twice before the paragraph ends, you are no longer making an argument. You are decorating one. A detergent commercial making claims this checkable and this false would draw a regulator’s letter within the month. But the future is the one product category with no truth-in-advertising standard, which is why the trade’s most ambitious copy is now written about it.

⁂

The manifesto belongs beside the man, because the man is also a campaign, and one week in January 2025 carries the whole relaunch. On the 6th, the brand partnership: Meta adds UFC president Dana White to its board. On the 7th, the product placement: Zuckerberg announces the end of third-party fact-checking — the commons he monetizes, relieved of its referees — in a video, wearing a Greubel Forsey watch that retails for roughly $895,500, while the company donates a million dollars to Trump’s inauguration. The video’s copy was addressed to a specific audience: the fact-checkers had been “too politically biased,” the election was a “cultural tipping point,” and content moderation would move to Texas, “where there’s less concern about the bias of our teams.” Three weeks later Meta paid Trump $25 million to settle his suspension lawsuit, $22 million of it earmarked for the presidential library. The censorship grievance was a market, and he serviced it the way an advertising executive services any market: he told it exactly what it wanted to hear, at the moment it acquired the power to regulate him. On the 10th, the media buy: he sits with Joe Rogan for three hours and explains that corporate culture had become “pretty culturally neutered” and needed more “masculine energy,” that fact-checkers were censors, and that his favorite way to hunt is with a bow — at which point Rogan asks what bow he shoots, and he cannot name it, and says, on air, “this is embarrassing.” The whole persona is right there in sixty seconds: the props purchased, the vocabulary rehearsed, the one follow-up question fatal.

The costume changes had been accumulating for two years. The jiu-jitsu medals, won in the white-belt division and announced to the world. The MMA training that tore his ACL and obliged Meta to warn investors, in an actual SEC filing, that its founder “participates in various high-risk activities, such as combat sports” — his masculinity is a disclosed risk factor. The Latin shirts, custom-made by a Los Angeles designer: “Carthago delenda est” for his fortieth birthday, and at Meta Connect, “aut Zuck aut nihil” — either Zuck or nothing, a riff on the personal motto of Cesare Borgia. The Guardian‘s Blake Montgomery read the wardrobe correctly: “Zuckerberg is projecting an image of ascendent authority, timeless as the emperors... He perceives himself as the architect of a digital empire as enduring as Rome.” The subject had already confessed the aspiration years earlier, praising Augustus in a New Yorker interview: “through a harsh approach Augustus established two hundred years of world peace.” Harsh approach. World peace. A man who wears his theory of power on a t-shirt has, whatever else you say about him, told you the truth once.

⁂

Here is where I am obliged to be careful, and where the carefulness is itself the argument. Zuckerberg has never described himself as autistic or neurodivergent. The quote that circulates online, claiming he told the New Yorker in 2013 he had “a mild form of autism,” is a fabrication laundered through SEO content mills; the actual New Yorker profile ran in 2010, and the only self-diagnosis it contains is “yeah, same awkward person.” The internet has spent twenty years diagnosing him anyway. Aaron Sorkin wrote the awkwardness into a syndrome, as one critic put it, making a pathology of the persona; Vanity Fair joked about Asperger’s in a headline. None of that is evidence, and none of it is my claim. The wiring is not the target. The armor is.

What the verified record shows is a man for whom unmediated human presence has been a lifelong ordeal, in his own words and by firsthand account. “Historically, I’ve had a very hard time expressing myself. I just come across as robotic,” he told NBC in 2019. Being awkward and getting negative feedback, he wrote in 2024, made him “more careful and scripted.” On a podcast in 2025: “I’m like the most awkward person. People have been calling me a robot online for 20 years. It’s really done wonders for my confidence” — and, asked whether there were environments where he wasn’t awkward, “I haven’t found those environments yet.” Kara Swisher was warned, years before her 2010 interview, that he had panic attacks when speaking publicly and might faint; on stage he dissolved in sweat and could not remove the hoodie. TIME‘s 2010 profile observed that he “approaches conversation as a way of exchanging data as rapidly and efficiently as possible” and “cannot be relied on to throw the ball back.” Paul Graham recalled that the young Zuckerberg would let silences sit until he learned to “mimic a typical person.”

Anyone who reads that record with ordinary human sympathy finds a genuinely affecting story: a teenager mocked as a robot for two decades, panic attacks before keynotes, a man who at forty-one still cannot find a room he isn’t awkward in. That story could have connected him to every person his products claim to serve, because the fear of the unmediated room is one of the most ordinary human experiences there is. What he did with it instead was purchase armor. The suffering itself became merch: “pathei mathos,” learning through suffering, Aeschylus rendered as a designer t-shirt, which he called “a little family saying.” The awkwardness got a stylist, a watch collection, a cage-fighting hobby, and a Latin motto claiming the alternatives are Zuck or nothing. The “badass” is a purchase order, not a personality — the self-image the room never gave him, bought at retail and worn in public, with the receipts filed as risk factors.

And this is why “personal empowerment” is the truest phrase he has ever written, in a way he did not intend. The manifesto and the makeover are the same campaign run on different accounts. The makeover buys a self that performs mastery where there is fear; the manifesto sells a product that performs presence where there is absence. The flagship product completes the confession: an agent that manages your relationships, monitors your health, plans time with your daughter, mediates every social surface of your life — designed by a man who built a machine, twenty years ago, that let him socialize with the whole world without being in the room, and who has been telling us ever since, in plain words, that the room is the problem. He isn’t distributing empowerment so much as franchising the mask, at global scale, and the pitch is autobiography: it worked for him, or at least the manifesto needs us to believe it did.

⁂

One detail prices the manifesto’s confidence in its own future. On Kauai, Zuckerberg has assembled more than 2,300 acres at a cost north of $270 million, under NDAs so extensive that, as WIRED reported, “a not-insignificant share of the island is bound” by them. The plans include a 5,000-square-foot underground shelter with a metal door filled with concrete, an escape hatch, its own water tank, and its own food production. Asked about it, he said it was “like a little shelter, it’s like a basement.” In Palo Alto he spent $110 million buying the eleven properties around his house, with 7,000 square feet of basement space the neighbors call bunkers. He rejects the doomers’ theology in print — and I agree with the rejection — but he built what their theology prescribes. In The Doomsday Moat I argued the labs monetized the fear; Zuckerberg merely provisioned for it. And advertising has always had one incorruptible market signal: what the copywriter does with his own money. The man whose title says the future is for everyone has spent roughly half a billion dollars hedging the possibility that it is for him, behind a concrete door, with the macadamia trees.

⁂

The manifesto closes by invoking “the values that got us to this point,” which it names as “liberty, open inquiry, free enterprise, and equal opportunity.” This is the oldest move in the American plutocratic songbook, and Franklin Roosevelt named it ninety years ago: the economic royalists always speak the language of the commonwealth while building the private kingdom, wrapping new despotisms in the robes of legal sanction. A man with 61 percent of the votes and 13 percent of the equity praising checks and balances; a company that purchased the political environment praising the balance of power; a landlord of a billion conversations announcing that the enemy is centralization — the royalist’s gift has always been to describe his estate in the grammar of your freedom.

Taken at its word one last time, the manifesto promises that everyone will have an agent, a tutor, a lawyer, a doctor, an inventor — trained by one company, hosted on one company’s servers, priced by one company’s auction, aligned to your goals within one company’s “important legal and safety boundaries,” revocable the way Muse Spark‘s openness was revocable, quietly, without a press release. There is a word for a life in which everything you have, including what you know, arrives through a single proprietor’s pipes and remains yours exactly as long as the proprietor consents. That word is not empowerment. It is tenancy. The future is for everyone, the way the company town was for everyone: the streets are free to walk, the school got a bonus this year, the store takes scrip, the only newspaper in town is printed by the company, and the deed — the deed was never on offer.

He has told us who he is in five manifestos, three Latin shirts, and one basement with a blast door. The sixth asks us to believe the landlord has become a liberator, which is the boldest copy the most successful advertising executive alive has ever written. The record, thirteen years deep, has already answered. Personal empowerment is what tenancy sounds like when the landlord writes the copy.

Go Deeper into the Circus

This is, after all, a philosophy blog and myth is all that exists. I mean that literally, which will require me as a matter of good manners to explain what I mean by both “myth” and “literally,” and the explanation will — appropriately enough — consume the contents of this essay. Because the word “myth” has been ruined for most modern readers. It has come to mean a falsehood with good production values, a lie we have agreed to find charming, and the ruin is recent enough that we can still name the people who did it and watch them, in the act of doing it, misunderstand what human beings are.

Alan Watts spent much of his life trying to repair the word. In Myth and Ritual in Christianity he defined myth as “a complex of stories — some no doubt fact, and some fantasy — which, for various reasons, human beings regard as demonstrations of the inner meaning of the universe and of human life,” and he was explicit that the word “is not to be used here as meaning ‘untrue’ or ‘unhistorical.’” In his lectures he compressed the definition further: a myth is an image in terms of which we try to make sense of the world. The definition does something enormous with a straight face: it makes myth and meaning interchangeable terms. A myth is not a container that carries meaning the way a truck carries freight, with the cargo separable from the vehicle. The image is the sense-making. Subtract every myth from a human life — every story, every symbol, every image in terms of which the world coheres — and you do not get a residue of clean, unmythologized fact. You get noise that matters to no one.

The lie breathed through silver

The best-documented argument about this happened on a September night in 1931, on a tree-lined path behind Magdalen College, and we know how it went because the man who lost it recorded his surrender. C.S. Lewis, then a theist but not a Christian, held the respectable modern position: he loved the great myths and considered them beautiful falsehoods. J.R.R. Tolkien answered him, and while the exact dialogue that has come down to us is Humphrey Carpenter’s reconstruction rather than a transcript, we have Tolkien’s own contemporaneous record of what Lewis claimed that night, because Tolkien built it into the dedication of the poem he wrote in response. Mythopoeia is addressed “to one who said that myths were lies and therefore worthless, even though ‘breathed through silver.’” The poem’s answer to that position remains one of the most beautiful things ever written about perception: “He sees no stars who does not see them first / of living silver made that sudden burst / to flame like flowers beneath an ancient song.” There is no getting behind the song to the bare stars. The seeing and the singing arrive together.

A month later Lewis wrote to his oldest friend, Arthur Greeves, and, the argument having followed him home from the walk, signed the surrender in a phrase. The story of Christ, he had come to believe, is “simply a true myth: a myth working on us in the same way as the others, but with this tremendous difference that it really happened.” You do not have to follow Lewis into Christianity to see what he saw on that walk. What he saw is that “myth” and “true” were never opposites. A myth is true when it accurately demonstrates the inner meaning of things, True in the capital-T sense, true as an image of how the world matters, and that kind of truth neither waits for empirical confirmation nor falls to empirical refutation, because it was never a claim of that type. It is true from a certain point of view, and the phrase “from a certain point of view” concedes nothing: it names the only place truth has ever lived.

This is the argument I have been making from the other direction for years. When I wrote that philosophy needs mythology, the claim was that analysis without passion is bloodless and that myth is how a truth gets into the body, how it becomes something a person will act on rather than merely assent to. I now think that formulation was too modest. Myth is not philosophy’s delivery mechanism. Myth is what meaning is: the concrete image in which mattering presents itself. The abstractions of philosophy are the derivative form, the dried flowers pressed flat for cataloguing.

The scientists of the general strike

The ruin of the word has an authorship. The scientistic temperament — the conviction that the empirical register is the only register in which a sentence can be true — attacks mythic thinking as a cognitive failure, a superstition awaiting correction. And no tradition has prosecuted that attack with more institutional confidence than Marxism, which is what makes the Marxist case so clarifying. Engels announced the position in so many words: with Marx’s two great discoveries, “Socialism became a science.” Not a movement, not a hope, not a story about the dispossessed inheriting the earth. A science, contrasted explicitly with the “utopian” socialists whose visions were mere pictures. From there descends a century and a half of the same reflex: religion as error, myth as false consciousness, meaning as ideology to be dissolved by analysis.

The problem is that the most honest theorist the revolutionary tradition ever produced looked at his own movement and found it running on myth all the way down. Georges Sorel’s Reflections on Violence observed that people participating in a great social movement “always picture their coming action as a battle in which their cause is certain to triumph,” and he gave these pictures a name: “These constructions, knowledge of which is so important for historians, I propose to call myths; the syndicalist ‘general strike’ and Marx’s catastrophic revolution are such myths.” Marx’s revolution, named as a myth, by a man trying to make the revolution happen. And Sorel understood exactly what kind of truth-claim a myth makes, which is to say, none of the empirical kind: the myth “must be judged as a means of acting on the present; any attempt to discuss how far it can be taken literally as future history is devoid of sense.” In the Cambridge edition’s rendering of his letter to Daniel Halévy, myths are “not descriptions of things, but expressions of a determination to act.” The scientific socialists never forgave him for saying it, and they never refuted him either, because the refutation would have required exactly what they could not produce: a working-class movement motivated by regression tables.

What the tradition did instead, having refused to answer him, is the most clarifying episode of all. In 1934 the Soviet state convened the First All-Union Congress of Soviet Writers and made a single aesthetic doctrine mandatory for every writer in the country. Andrei Zhdanov, delivering the party’s instructions from the platform, defined the method: the writer must depict life “neither ‘scholastically’ nor lifelessly, nor simply as ‘objective reality’, but rather as reality in its revolutionary development.” Not reality as it is. Reality as the revolution requires it to be becoming. “Soviet literature must be able to portray our heroes and to see our tomorrow,” he continued, and then, in the tradition’s oldest nervous tic, denied the obvious: “This will not be utopian since our tomorrow is being prepared by planned and conscious work today.” That is Sorel to the letter — the picture of the coming battle in which the cause is certain to triumph, now issued as state policy with penalties for noncompliance — and the tradition that could not admit myth existed named the doctrine realism. Even the job title was scientistic: Zhdanov’s speech is organized around Stalin’s phrase for writers, “engineers of the human soul,” the mythmaker rebadged in the vocabulary of the polytechnic. When your epistemology permits only one register of truth, you do not stop producing myths. You lose the ability to call them anything but descriptions.

So when the scientistic critic — and especially the Marxist one — attacks mythic thinking, he is attacking the wall his own house stands on. The arc of history bending toward the classless society is a Sorelian myth with the label scratched off. But the deeper irony sits in the founding text itself, in the passage everyone quotes and almost no one quotes in full. Marx called religion the opium of the people; the sentence before the famous one reads, “Religion is the sigh of the oppressed creature, the heart of a heartless world, and the soul of soulless conditions.” That is not a description of a cognitive error. Marx is conceding, in prose he could not stop from turning mythic under his own hands, that religion does real work: that it expresses real suffering and protests against it, that it answers to something in human beings that is actually there. His objection was to its political effect, the narcotic pacification of people who ought to revolt. The objection may even be right. But it concedes the whole question at issue: myth is how things matter to us, how they compel us to action or reconcile us to what we cannot change, and the man who understood this best in 1844 founded the tradition that spent the next century calling it a delusion.

The mistake, repeated from Engels to the last debate-me rationalist on your timeline, is a misunderstanding of the manner in which things matter. Things matter in the way they make us feel, and a person trying to communicate how something matters must communicate in images, in stories that everyone involved understands are not empirical claims and that everyone involved understands are not therefore false. The scientistic thinker hears this and believes he is being asked to give up precision, to accept a degraded, subjective substitute for the objective description of reality. His entire error is in the last four words. There has never been a view from nowhere for such a description to issue from. He is not being asked to give up a precision he has. He is being asked to notice that he never had it.

No view from nowhere

That claim sounds like a provocation, but it sits close to the central working problem of both modern philosophy and modern physics, and it has a name in each. Thomas Nagel opened The View from Nowhere by stating it as philosophy’s single problem: “how to combine the perspective of a particular person inside the world with an objective view of that same world, the person and his viewpoint included.” The way a picture on a wall or a bird in a tree appears to you — composed, colored, near or far, mattering or not — is not how the universe had to arrange your consciousness. The neuroscientist Anil Seth calls perception a “controlled hallucination,” the brain’s prediction reined in by the senses, and closes the thought with a sentence Watts would have grinned at: “when we agree about our hallucinations, we call that reality.” Every description you will ever produce is downstream of a presentation the universe was under no obligation to render in that form. The bird in the tree is already an image in terms of which you are making sense of the world. Perception is the first myth.

Physics, which was supposed to be the escape from this condition, turned out to be compatible with it at minimum, and on some of its most serious interpretations an instance of it. Whether quantum mechanics permits a description with the observer deleted is exactly what its rival interpretations are still fighting over; Carlo Rovelli’s relational interpretation locates the entire measurement problem in one bad habit, “the notion of observer-independent state of a system,” and dissolves the paradoxes by dropping the notion. John Wheeler put the same point in a sentence he spent decades defending: “No elementary phenomenon is a phenomenon until it is a registered (observed) phenomenon,” and he drew the conclusion in a word, crossing out “observer” and writing “participator,” a coinage his colleagues have spent fifty years politely declining to think about. Relativity had already indexed every measurement of length and duration to a frame; quantum mechanics indexed every outcome to a measurement context; and the experiments I wrote about in The Eternal Now is a Laboratory Result suggest that time itself is what one part of a correlated system reads off another part from inside. The pattern across all of it is one fact wearing three costumes: every description is made from inside what it describes. Physicists Adam Frank and Marcelo Gleiser and the philosopher Evan Thompson call the forgetting of this fact the Blind Spot — “in the Blind Spot sits experience: the sheer presence and immediacy of lived perception” — and they say the quiet part in print: “There’s no way to render ‘reality’ apart from experience, because the two are always intertwined.”

A lazy version of this argument collapses here into the relativism it should be demolishing. Nothing above licenses “anything goes.” Objectivity is real and precious; it is also, as I argued in The Moon Does Not Prove Physicalism, a disciplined construction that observers build together — instruments, mathematics, replication, criticism — and not a view from nowhere, because there is no one nowhere to have it. The reductionist believes that in translating the felt world into the mathematical one he is trading appearance for reality, giving up warmth to gain precision. He is doing something more interesting: trading one perspectival rendering for another that is stricter, more shareable, more predictive, and vastly narrower, a rendering purchased by deleting from the description everything about the world that makes it matter. The deletion is a fine methodological bargain and a catastrophic metaphysics. The felt world is not the low-resolution preview of the equations. The felt world is the only place the equations have ever been checked.

And this is why the scientistic attack on myth fails at the root. The attacker believes the mythmaker has produced a defective empirical description, when the mythmaker has produced a rendering in the register where mattering lives — the register every human being, including the attacker, actually inhabits. His own certainty that the universe is a meaningless mechanism awaiting disenchantment is not a finding. No instrument reads it out. It is an image in terms of which he makes sense of the world. It is, by Watts’s definition, his myth, and the only thing that distinguishes him from the people he condemns is that they know what they are doing and he does not.

The fall is the epistemology

Now measure our beliefs about love in the empirical register, since we have been invited to measure everything there. The lover believes the beloved is unrepeatable, that this particular person, of the billions available, is the one; the certainty of “forever” outruns every actuarial table; the felt inevitability of the meeting is survivorship bias telling itself a story. Judged as descriptions, our beliefs around love are almost always completely delusional. The scientistic critic can stop here, satisfied, having explained love the way his predecessors explained religion. But we already have the tools to see what he is missing: there is no observer-independent description of what the beloved is worth, and asking for one is not rigor. It is a category error: the demand that a truth which exists only from inside be certified from a nowhere that does not exist.

William James caught the mechanics of this in 1896, in The Will to Believe, and his argument has never been answered, only ignored. Some decisions, he observed, are genuine options: living, momentous, and forced, in the sense that refusing to decide is itself a decision. And within that class sits a stranger category, the truths that depend on our faith in them for their existence. His example is the exact one before us: “Do you like me or not?... The previous faith on my part in your liking’s existence is in such cases what makes your liking come.” Wait for sufficient evidence before trusting, and the trust never becomes warranted, because the other person, met with your withheld and auditing posture, reasonably withholds too. The evidence-first policy does not protect you from error here. It locks you out of the fact. Which is why James rendered his verdict on that policy in a sentence that should be carved over the door of every rationalist institution: “a rule of thinking which would absolutely prevent me from acknowledging certain kinds of truth if those kinds of truth were really there, would be an irrational rule.”

This is why we fall in love, and do not move or climb into it. The language is exact and everyone has always known it. Climbing is the epistemology of verified holds: test the next grip, confirm it bears weight, advance, retreat is always available. You cannot climb into love because the thing at the top does not exist for climbers; it comes into being only downstream of the commitment, like the liking in James’s example, like the trust that creates its own verification. So the lover steps off the ledge not knowing whether the ground will give out beneath them, not knowing whether there will be time to catch themselves — and that beautiful release, the consent to fall without the audit, is not a bug in human attachment awaiting a firmware update from the rationalists. It is the only posture in which certain truths can exist at all. I have written before that Adam’s choice in the garden may have been the first act of love precisely because it risked everything for relationship, and that love is the willingness to preserve otherness rather than absorb it. The fall in Genesis and the fall in falling in love are the same fall. Both are what choosing looks like when the choice is real.

And that is the last connection, the one that closes the circle back to myth. The fall is a permanent condition of having free will. A being who could verify every ground before every step would not be freer than we are; it would have nothing left to choose, because choice under guaranteed outcomes is not choice, and love without exposure is not love but acquisition. The freedom and the falling are the same condition under different descriptions. So of course the truths that govern a free life — that this person is worth everything, that this cause is worth the risk, that meaning is worth constructing in a universe that did not construct it for us — arrive as myths: as images, not inventories; as expressions of a determination to act, not descriptions of things; as commitments that make themselves true from inside and are, from outside, unverifiable forever. That is not their weakness. That is their entire function. The empiricist who waits on the ledge for the data is not being careful. He is declining, politely and with excellent methodology, to be free.

Readers arriving from the political essays, which have spent this summer prosecuting mythmakers for selling prophecy as measurement, are owed an answer to an obvious question: has this essay just written those men their license? It has written the second count of their indictment, because the register-crime runs both ways. The scientistic critic reads myth as failed description. The con artist and the cultist commit the mirror error: they defend descriptions as if they were myths, holding empirical claims — the stolen election, the rigged machines, the guaranteed returns — with the audit-proof interior certainty that belongs by right only to commitments like love. The lover’s myth makes no empirical claims, and so no evidence can refute it; she does not deny the actuarial tables, she declines to be governed by them. The loop denies the court records, and court records live in the register where evidence rules and the audit is legitimate. A true myth cannot be broken by evidence because it never entered evidence’s jurisdiction. A loop is a stack of refuted empirical claims wearing myth’s immunity. The distinction welds this argument to the political ones: the crime was never believing an image; the crime is laundering the registers, passing myth off as measurement on the way up and granting measurement the immunity of myth when the audit comes back.

Myth is all that exists, not because nothing lies outside the images but because nothing arrives except through them: whatever there is reaches every knower as an image seen from inside by someone who chose to trust it. The stars were never bare. He sees no stars who does not see them first of living silver made.

Go Deeper into the Circus

It took me decades to see this. I came up inside libertarian and conservative circles, and I believed for most of my adult life that I was arguing within a movement that had ideas — flawed ideas, ideas I would eventually reject root and branch, but ideas. I extended the Republican Party the credit of assuming it believed things. That assumption survived my exit from those circles by years, because it flattered everyone who held it: the party got to be wrong instead of empty, and I got to have spent my youth inside an intellectual tradition instead of a coalition of grievances wearing one. So before I hold anyone in this essay accountable for what they refused to see about their own movement, I should say plainly that I refused to see it too, from closer range, with fewer excuses.

Here is what I eventually saw. The Republican Party is a party without an ideology. Reaganism is the closest thing it has ever had, and Reaganism was never an ideology either. It was a man — a genuinely kind and genuinely manipulable man — standing in front of a coalition held together by an enemy. When the enemy died, the coalition went looking for a replacement, found one at home, and reorganized itself around hating it. That reorganization is now complete. Everything that bewilders commentators about the modern GOP stops being bewildering once you see the party for what it is: an anti-left coalition whose only membership test is enemy selection, and whose only unforgivable offense is choosing the wrong one. The Reagan nostalgia draped over anti-Reagan policy, the platform that no longer exists, the movement’s helplessness before its own Nazis — all of it follows from that single structural fact.

The case runs in three layers: the man, the coalition behind him, and the party the coalition became once the search for a new enemy was over.

The man who believed his own stories

In November 1983, Ronald Reagan told Israeli Prime Minister Yitzhak Shamir that he had personally filmed the liberation of the Nazi death camps as an Army photographer, and that he had kept a copy of the film to show doubters. He told the story again three months later to Simon Wiesenthal. Lou Cannon, the Washington Post reporter who covered Reagan longer than any other journalist, reconstructed both tellings, and his verdict on the underlying fact was unequivocal: Reagan never left the United States during the Second World War. He served in Culver City, editing training films for the Army Air Corps. He had seen the liberation footage. He had not shot it. Somewhere between the screening room and the Oval Office, the film migrated from something he watched into something he lived.

This was a pattern, and the pattern is the point. In December 1983 Reagan stood before the Congressional Medal of Honor Society and told the story of a B-17 pilot who cradled his wounded ball-turret gunner as their plane went down: “We’ll ride it down together, son.” The pilot, Reagan said, received the Medal of Honor posthumously. Lars-Erik Nelson of the New York Daily News checked all 434 World War II Medal of Honor citations and found no such award; the scene tracks nearly word for word to the 1944 film Wing and a Prayer. The White House launched its own search of the records to vindicate the president and quietly gave up. His press secretary, Larry Speakes, offered the epitaph for the whole era: “If you tell the same story five times, it’s true.”

The famous “welfare queen” was the same mechanism running on a real chassis. Linda Taylor existed; the Chicago Tribune documented her aliases and her fraud in 1974, and Josh Levin’s investigation later found she was plausibly guilty of far worse than welfare fraud. But Reagan did what Reagan always did with a story: he improved it. The indictment charged roughly $8,000; by October 1976 Reagan had her at 127 names, a mink coat, and “a million dollars.” Levin went looking for the million and found nothing to support it. And when the 1980 campaign needed a line about air quality, Reagan announced that 93 percent of nitrogen oxides come from trees and vegetation, a garbled factoid that NASA later graded as mostly wrong, and that entered the folklore as “trees cause more pollution than automobiles do.”

The left’s preferred explanation for all this was stupidity. Clark Clifford’s crack that Reagan was an “amiable dunce” leaked from a Georgetown dinner party in 1981 and calcified into the official Democratic theory of the man. The theory has a problem, and the problem is archival. When scholars opened the boxes at the Reagan Library, they found handwritten drafts for 682 of the roughly 1,027 radio commentaries Reagan delivered between 1975 and 1979, composed by Reagan himself, in longhand, with his own cross-outs, on everything from monetary policy to the Soviet grain harvest. An amiable dunce does not produce two-thirds of a broadcast corpus in his own hand. Whatever was wrong with Reagan’s mind, it was working.

Cannon, who watched him for a quarter century, got closer than anyone: Reagan made sense of the world narratively. He had an actor’s memory, prodigious for story and anecdote, indifferent to the boundary between the filmed and the lived. He told a columnist a warm story about a drugstore in Lexington, Virginia, where his scenes for Brother Rat had supposedly been shot, then later admitted he had never been to Lexington; the scenes were filmed in Hollywood. In his first inaugural address he placed the grave of Martin Treptow, a Wisconsin soldier buried in Bloomer, Wisconsin, at Arlington. His aides had told him the truth, and Cannon records his reasoning: it made a better story. Cannon’s verdict was careful: he didn’t lie, he took dramatic license, sincerely, in the service of the story’s moral. The exaggeration was never cynical. That is precisely what made it exploitable.

Because a man who thinks in stories is governed by whoever writes them. From 1954 to 1962 the writer was General Electric. Reagan spent eight years as host of GE Theater and as the company’s traveling ambassador, visiting all 139 GE plants under the tutelage of Lemuel Boulware, the GE vice president whose union-breaking communications strategy was so distinctive that labor law still carries the word “Boulwarism.” Thomas Evans’s The Education of Ronald Reagan documents the conversion in detail: a former union president — Reagan led the Screen Actors Guild — was systematically steeped in free-market fundamentalism, anti-communism, low taxes, and limited government, on a corporate salary, in front of corporate audiences, for nearly a decade. Reagan himself called the GE years his “postgraduate education in political science”. He was not wrong. He just never asked who designed the curriculum, or why. The Cold War made the manipulation frictionless: with actual Soviet communism supplying the contrast, everything Boulware’s people handed him — every statistic about creeping collectivism, every parable of bureaucratic strangulation — slotted cleanly into the one big story Reagan already believed, the story of free men against the machine. Business interests did not have to corrupt Reagan. They only had to cast him.

None of this requires denying the decency, and the decency was real. Reagan wrote personal checks, sometimes four and five thousand dollars, to strangers who mailed their troubles to the White House. He kept a genuine friendship across the aisle; at Tip O’Neill’s testimonial dinner he offered a toast no speechwriter would risk today: “Tip, if I had a ticket to heaven and you didn’t have one too, I would give mine away and go to hell with you”, and for six years he opened their phone calls by asking whether it was after six o’clock, the hour after which, by O’Neill’s rule, they were friends rather than combatants.

But a kind heart attached to a narrative mind is a liability, and the record of the liability is brutal. In August 1980, Reagan campaigned at the Neshoba County Fair, a few miles from where Chaney, Goodman, and Schwerner were murdered in 1964, and told the crowd “I believe in state’s rights”. His defenders have spent four decades explaining that the speech was mostly about schools and taxes, and the historian Joseph Crespino has answered them with the campaign’s own paperwork: Mississippi’s Republican national committeeman had recommended the venue in writing as the way to reach “George Wallace inclined voters”. Reagan did not have to harbor racial animus for the welfare-queen story to do racialized work in the Deep South; he only had to keep telling the story that worked, and he always kept telling the story that worked. The same narrative machinery failed catastrophically on AIDS, where the storyteller simply had no story he wanted to tell: Reagan did not say the word publicly until September 1985, and by the night of his first major address on the epidemic in May 1987, twenty-one thousand Americans were dead. And when the Iran-Contra affair forced him to confront a story he had told the country that the facts would not sustain, he gave the most self-revealing sentence any modern president has spoken: “A few months ago I told the American people I did not trade arms for hostages. My heart and my best intentions still tell me that’s true, but the facts and the evidence tell me it is not.” There is the whole man in two sentences: the heart sincere, the intentions good, the facts elsewhere.

That is Reaganism: a performance of moral clarity by a decent confabulator, scripted by the business interests that trained him, made coherent by an enemy that did him the favor of being genuinely evil, with no doctrine underneath that could survive the performer’s exit. The modern party still calls itself Reaganite while inverting every position the man held. Reagan signed the 1986 immigration act that legalized nearly three million people. He warned in 1988 against “the demagogues who are ready to declare a trade war against our friends... all while cynically waving the American flag” — a warning so on the nose that when Ontario’s government built an anti-tariff ad out of Reagan’s own recorded words in 2025, Trump called the ad fraudulent and suspended trade talks with Canada. Reagan’s own arms-control officials now watch the party accommodate Putin and say so on the record. A party that reveres a man while reversing him has inherited the only thing it ever actually valued: the storytelling, minus the good faith. Reagan confabulated sincerely; his successor’s ghostwriter coined the phrase “truthful hyperbole” to dress the same behavior in knowingness. The exaggeration became a strategy. The kind heart became optional, then embarrassing, then gone.

The coalition that needed an enemy

If Reaganism was never an ideology, what held the movement together? The movement’s own historians have answered the question, repeatedly, in writing, and the answer is an enemy.

American conservatism as an organized force dates from 1955, when William F. Buckley launched National Review with a mission statement that is pure negation: the magazine “stands athwart history, yelling Stop”. What it stood athwart was a coalition problem from day one. Traditionalists wanted virtue enforced; libertarians wanted the state off everyone’s back; the two positions contradict each other on nearly every live policy question. Frank Meyer’s “fusionism” was the official solution, and George H. Nash, the movement’s definitive historian, has been candid about what actually made the fusion hold: “anti-communism supplied much of the glue that sustained the post-1945 conservative coalition,” and once the Cold War ended, “it soon became easier for former allies on the Right to splinter off.” Murray Rothbard, who watched fusionism assemble itself from the libertarian side, said it more brutally in “The New Fusionism”: Meyer’s strategic focus, “The Enemy for him and for the conservative movement, was not statism and socialism but Communism.” What looked like a shared philosophy with an enemies list attached was an enemies list with a philosophy attached, and the philosophy was negotiable.

Then, in 1991, the enemy had the poor manners to dissolve. What happened next is the most underrated event in modern American political history, because the people it happened to described it in real time. Irving Kristol, the godfather of neoconservatism, published an essay in 1993 called “My Cold War” that deserves to be read as the founding document of the party we now live with. Kristol confessed that the Soviet Union had never really been his enemy at all: “It was the fundamental assumptions of contemporary liberalism that were my enemy.” Freed from the pretense, he could finally say it plainly: “liberals were wrong, liberals are wrong, because they are liberals.” And then the sentence that explains the next three decades: “There is no ‘after the Cold War’ for me. So far from having ended, my cold war has increased in intensity... Now that the other ‘Cold War’ is over, the real cold war has begun.” He closed by bequeathing the conflict to his children and grandchildren, and the bequest was honored.

Kristol was the intellectual announcement. Pat Buchanan was the popular one. His 1992 convention speech named the replacement enemy from the podium, with the substitution made explicit in the text: “There is a religious war going on in this country. It is a cultural war, as critical to the kind of nation we shall be as was the Cold War itself.” As critical as the Cold War itself — the old war’s prestige transferred to the new one in a single clause. Even the word “conservative” was becoming dead weight: Sam Francis, the paleoconservative strategist, advised Buchanan privately to “call yourself a patriot, a nationalist, an America Firster, but don’t even use the word ‘conservative.’ It doesn’t mean anything anymore.”

The machinery for domesticating the enemy was already under construction before the Wall came down. In 1990, Newt Gingrich’s GOPAC mailed Republican candidates a memo titled “Language: A Key Mechanism of Control,” with a focus-group-tested vocabulary for describing Democrats: decay, sick, pathetic, lie, betray, traitors, destroy. The New York Times covered it at the time as a curiosity of campaign technique. It was a weapons transfer. The vocabulary that a generation had aimed at Moscow was being recalibrated, word by tested word, for Americans. Rush Limbaugh turned the recalibrated enemy into a daily entertainment product for millions of listeners, and in 1996 Roger Ailes built the enemy a dedicated cable channel, designed, in the words of one study of its founding, to give viewers “someone to root for, someone to root against, and someone to vote for.” Note the order of operations. Nobody in this story concealed anything: the memo was mailed, the essay was published, the speech was televised, the channel was launched at a press conference. The conversion of a geopolitical enemy into a domestic one was carried out in public, by people who wrote down what they were doing, and the only thing anyone failed to do was believe them.

The party that finished the search

Which brings us to the party in front of us, and to the man who keeps admitting what it is. Ben Shapiro has spent a decade functioning as the movement’s inadvertent court stenographer, and his testimony is consistent across three data points. In 2017, explaining Trump’s rise to the New York Times: “Trump secured the nomination due to his anti-left stance, not because of any particular political beliefs.” In October 2025, warning his own audience: “anti-left does not make you conservative.” And in April 2026, at the Hoover Institution, the taxonomy slipped out fully formed: the danger he sees is inside “the conservative movement, inside the Republican Party, or the broader anti-left movement” — three concentric things, of which the conservative movement is the smallest, and, as he added, “what used to be called the conservative movement and the Republican Party... are not the same thing.” Read that inventory again. The party’s most prominent ideological enforcer, under no duress, describes an anti-left movement of which conservatism is one shrinking province. Everyone from the man who just wants his taxes cut to the man who wants public floggings is inside the tent, because the tent was never pitched over a creed. It was pitched over an enemy.

The party has ratified Shapiro’s taxonomy in its own documents. In 2020, the Republican National Convention declined to write a platform at all. The resolution it adopted instead resolved that the party “has and will continue to enthusiastically support the President’s America-first agenda,” attacked the media in a formal clause, and ruled any attempt to adopt an actual platform “out of order.” Brookings rendered the verdict in the title of its analysis: “L’état, c’est moi.” Brendan Buck, who served the two previous Republican speakers of the House, was asked that same week what his party believed and answered: “Owning the libs and pissing off the media. That’s what we believe in now.” When a platform finally reappeared in 2024, it had shrunk from sixty-six pages to sixteen; the 2016 edition had mentioned Trump zero times, and the new one mentioned him nineteen.

The survey data says the voters got the message. Pew’s long-running party-identification instrument found that the share of Republicans citing the harm done by Democratic policies as a major reason for their affiliation rose from 68 percent in 2016 to 78 percent in 2022, and among the leaners who decide elections, the negative reason beats the positive one by double digits. Political scientists Alan Abramowitz and Steven Webster documented the underlying inversion: between 2000 and 2012, voters who liked their own party more than they disliked the other one fell from 61 percent to 38 percent of the electorate, while pure negative partisans more than doubled. The honest counterargument here belongs to Matt Grossmann and David Hopkins, whose Asymmetric Politics argues that the GOP, far from being empty, is the more ideological of the two parties — a vehicle for a creed where the Democrats are a coalition of interest groups. The observation is correct and the comfort is false, because the question is what the creed contains. A political identity can be organizationally creedal and substantively negational at the same time, and this one is: from Buckley’s “athwart,” through Meyer’s fusion against The Enemy, through Kristol’s liberals-are-wrong-because-they-are-liberals, the creed’s actual content has been opposition all the way down. Grossmann and Hopkins found the shape of an ideology. Kristol told us what was inside it.

And here is where the structure stops being an academic observation and becomes a civic emergency: a coalition whose only membership test is enemy selection cannot expel anyone who selects the correct enemy. The proof has been running in public for four years. In November 2022, Nick Fuentes — an open white nationalist and Holocaust revisionist — had dinner with the once-and-future president at Mar-a-Lago; the disavowals were procedural and the consequences were zero. In October 2025, Tucker Carlson gave Fuentes an hour-plus friendly interview at his home studio in Maine, and the president of the Heritage Foundation, Kevin Roberts, responded to the ensuing criticism by denouncing the critics as a “venomous coalition” of the “globalist class.” Roberts apologized to his staff a week later and kept his job, and by mid-2026 he was explaining his reasoning to the New York Times Magazine in the coalition’s native grammar: “You can’t have a governing coalition if you’re saying, I’m not even going to talk to people who occasionally listen to a podcast by someone who’s a total goofball.” A total goofball. The subject under discussion was Holocaust denial.

Watch what happened to the people who tried to police the boundary. Shapiro devoted a full show to calling Carlson an “ideological launderer” and warning that “if Republicans choose to cower in the face of Neo-Nazis and their propagandists, they deserve to fail.” At Turning Point’s AmericaFest in December he named Carlson, Megyn Kelly, Candace Owens, and Steve Bannon as “frauds and grifters.” And notice the vocabulary he reached for when he needed the groypers to sound maximally damning: he called them a “new left.” Even the man fighting the Nazis inside his own coalition can only frame the fight in the coalition’s single available category of condemnation. The insult proves the thesis. There is no word in the movement’s language for “evil in a right-wing way,” because the language was built by people for whom the enemy, by definition, stood on the left. Meanwhile the infiltration proceeds down the age pyramid: in March 2026, College Republicans of America installed a national political director with a documented history of attending Fuentes’s events and praising him on livestreams, and when the appointment blew up, the organization’s president announced he would apologize “to absolutely NOBODY.” The movement’s proudest legend about itself — Buckley purging the Birchers — turns out to prove the rule rather than the exception. Historians have dismantled the purge story in recent years: Buckley’s early editorials cordoned off Robert Welch while praising the society’s rank and file, and when National Review finally read the Birchers out in 1965, the triggering offense was their opposition to the Vietnam War. The one crime the coalition could actually punish, at its founding as now, was pointing at the wrong enemy. Buckley’s heirs cannot manage even that much, because a purge requires a creed to measure members against, and the creed was retired in 2020 by formal resolution.

The people who actually were conservatives noticed, and they left. George Will walked out in June 2016 with the cleanest statement of the whole migration: “I joined because I was a conservative, and I leave for the same reason: I’m a conservative.” Max Boot re-registered the day after the election. Tom Nichols concluded in 2018 that the party “now exists for one reason, and one reason only: for the exercise of raw political power.” Stuart Stevens, who ran five Republican presidential campaigns, announced he would work with Democrats and opened his book-length confession with “I have no one to blame but myself. I believed.” By May 2026, Bill Kristol — son of the man who declared the real cold war — had completed the arc and registered as a Democrat: “I’m pro-freedom, pro-law and order, pro-limited government... And so today I’m a Democrat.” The traditional conservatives were never the party’s core. They were a sub-faction that mistook itself for the whole, and when the mask came off, the ones who meant it discovered that the anti-left coalition had a place for everyone except people with a fixed belief that outranked the enemy.

So the three layers close into one picture. A coalition assembled against an enemy hired a kind, credulous storyteller to give it a face, and business interests wrote his lines. The enemy died, and the coalition’s own intellectuals — in essays, memos, and convention speeches you can still read — relocated the enemy inside the country rather than dissolve the coalition. Two generations later the relocation is complete, the platform is a loyalty oath, the membership test is enemy selection, and the movement watches Nazis walk in the front door with no mechanism for stopping them, because the only mechanism it ever had was pointing at the door and shouting “left.” Reagan’s tragedy was that he believed his stories. His party’s crime is that it kept the stories, kept the enemy, and threw away the belief. What remains calls itself conservatism, and there is exactly one thing it still conserves: the war.

Go Deeper into the Circus

At a rally in October 2024, Elon Musk said he could cut “at least $2 trillion” from the federal budget. By January he had downgraded that number to a “best-case scenario”, with maybe a trillion actually achievable. By April 2025 the target was $150 billion. And this month the Government Accountability Office, having reviewed $110 billion of DOGE’s “Wall of Receipts,” reported that DOGE could not substantiate the method behind 96 percent of its claimed savings.

The auditors who got there earlier found the same thing in miniature. In March 2025, NPR could verify just over $2.3 billion of a claimed $65 billion, and found along the way an $8 billion line item that was a typo on an $8 million contract, and a USAID project counted three times. BBC Verify found a $1.9 billion IRS contract claimed as savings that had been terminated under Biden. The GAO found 108 of 264 claimed lease cancellations were already scheduled to end before DOGE touched them, and a $1.7 billion Defense Department IT contract that was never terminated at all. Musk left in May 2025. The department’s own closure post announced that “the formal mission of Doge has come to an end.”

The failure itself is ordinary. Budget promises die young; governments are hard; every administration buries a reform initiative or two. The part worth dwelling on is the credit that preceded the failure. Millions of people believed the $2 trillion figure when it had no receipts behind it, could have had no receipts behind it, because the man saying it spoke fluent engineer. He talked about the federal government the way a staff engineer talks about a legacy codebase, and an enormous audience of engineers, and of people who trade on sounding like engineers, heard their native language and extended credit on the accent alone.

That transaction now supports an industry. There is a standing occupational genre of political commentator: the software-engineer political influencer, the finance political influencer, the crypto political influencer. These are people whose political authority is denominated in a professional idiom, whose audiences sorted themselves by profession, and whose pronouncements travel down feeds of followers who chose them because they reason in a familiar style — a different animal from the engineer who merely holds opinions, which describes everyone. The genre exists because the audience built it. Understanding how requires taking apart the explanation everyone prefers.

⁂

The preferred explanation is the algorithm. The bubble, in this story, is something done to us: the machine learned our weaknesses, fed us agreement, and herded us into pens. It is a comforting account, because a machine that did this to us could be adjusted to undo it, and because it locates the fault somewhere other than in our own choices.

The evidence for it keeps failing to arrive. In 2023, Meta opened its platforms to an academic consortium that ran the experiments everyone had demanded for a decade. Users switched to reverse-chronological feeds saw substantially different content and spent less time on the platforms, and yet the switch “did not significantly alter levels of issue polarization, affective polarization, political knowledge, or other key attitudes”. Removing reshared content cut exposure to political news and measurably lowered news knowledge, and did not detectably move beliefs or opinions. A third experiment took 23,377 consenting users and cut their exposure to like-minded sources by about one-third, the mechanical definition of popping the bubble, and found the intervention “had no measurable effects on eight preregistered attitudinal measures such as affective polarization, ideological extremity, candidate evaluations and belief in false claims.”

This should have been bigger news than it was. The most direct tests ever run of the algorithmic-bubble hypothesis, run on the platforms themselves with the company’s cooperation, came back with exposure changing and minds not. And it confirmed what the earlier data already suggested: a 2015 study of 10.1 million Facebook users found the ranking algorithm reduced cross-cutting content by 5 percent for conservatives and 8 percent for liberals, while what users chose to click on filtered far more. “Compared with algorithmic ranking,” the authors wrote, “individuals’ choices played a stronger role.” The sociologist Chris Bail, who has spent a career on this literature, put the conclusion plainly: the most important driver of political polarization on our platforms “is us”.

The machine curates the menu at the margins. The diner does the ordering. What we select for, when we do the ordering, is mostly people like ourselves.

Sociology has measured this for decades under the name homophily. The canonical review opens with “Similarity breeds connection” and ranks the axes along which we sort: race and ethnicity first, then “age, religion, education, occupation, and gender following in roughly that order.” Occupation sits in the middle of the list of forces that assemble your personal world. The philosopher C. Thi Nguyen, in the paper that gave “epistemic bubble” its precise meaning, identified the consequence: bubbles rarely require malice or machinery, because ordinary social selection builds them for free. “Friends make for good parties,” he wrote, “but poor information networks.”

What the newer research adds is that the sorting runs on style, independent of substance. A 2024 study of livestream audiences found that when a streamer’s communication style matches a viewer’s own, the viewer feels a stronger quasi-social connection and is measurably more willing to buy what the streamer is selling, and the effect amplifies in viewers with a high need for cognitive closure, the ones who most want ambiguity resolved. The finding concerns shopping, which makes it worse: the mechanism is so basic it sells soap. Aim the same machinery at politics and you get the engineer who hears first-principles decomposition and recognizes home, the lawyer who hears issue-spotting, the trader who hears expected value and position sizing. Recognition arrives disguised as credibility.

And the disguise works because the heuristic is genuinely sound where it was learned. Inside your field, style is real evidence. The colleague who reasons like you was probably trained like you, checks errors the way you do, has been burned by the same failure modes. Trusting the person who sounds like a good engineer is, on an engineering team, a good bet, and the same holds at the trading desk and in the courtroom. The error happens in transit. The style survives the trip out of the domain; the verification practices that made the style trustworthy stay behind. What crosses the border is an accent, and the rigor it once signaled does not cross with it.

⁂

There is a deeper reason the transfer fails, and it explains why the failure is so reliable. The engineering method assumes society is a machine, and society is a game.

The distinction is a difference in the kind of knowledge available, which is why these are not equivalent epistemic categories. A machine’s parts have no model of you. You stand outside it, probe it, delete a component to see what breaks, and the machine never learns it is being studied. A game’s participants model the other players, including anyone attempting to steer the game, and they update the moment you move. Every intervention in a society is therefore also a communication, and the system you measured has changed by the time you act on the measurement. Economics keeps rediscovering this and naming the discoveries: the Lucas critique, which holds that policy changes alter the very behavioral regularities the policy was built on, and Goodhart’s law, which holds that a measure targeted stops measuring. Game theory’s equilibria are fixed points of mutual anticipation, a different mathematical object entirely from the resting state of a mechanism. The ancient Buddhists arrived earlier and went further: dependent origination places the observer inside the web of mutual conditioning, with no standpoint left over from which to engineer. You are always a player. The engineering stance smuggles in a view from nowhere, and the view from nowhere does not exist.

Engineers are not wrong to use the method. The method is calibrated for objects without intentions, and on such objects it is the most powerful epistemic technology our species has produced. Applied to participants, it does something worse than underperform: it returns confident wrong answers, because the feedback it trusts (did the thing break?) is itself a move in the game, and the other players get to decide what breaking looks like.

⁂

DOGE was the cleanest natural experiment in method transfer ever run at national scale, and it should be read in exactly these terms.

The method was never hidden; it was the brand. Musk’s five-step “algorithm,” recited across his companies: question every requirement, delete any part you can, simplify, accelerate, automate. It is a genuinely good method for building rockets, and it built them. In February 2025 he addressed the World Governments Summit in Dubai by video link and applied step two to the state, saying the U.S. should “delete entire agencies,” because “if you don’t remove the roots of the weed, then it’s easy for the weed to grow back.” Even his concession to resistance stayed botanical. A weed grows back; it does not hire lawyers, leak to the press, slow-walk compliance, reorganize under a new line item, or wait out a news cycle — which is roughly what the federal government proceeded to do.

Set the audit trail beside the machine-game distinction and the errors resolve into the method’s signature. An $8 billion typo survives when your verification loop is “does the dashboard look right” rather than “will an adversarial auditor with subpoena power agree.” Leases already scheduled to die get counted as kills because the machine frame assumes anything you deleted was alive until you deleted it. Savings triple-count because in a factory a removed part stays removed, while in a government a canceled contract resurrects in litigation, and a contract claimed as terminated can turn out never to have been terminated, because termination in a machine is a state and termination in a bureaucracy is a negotiation. The rocket does not resent the deletion. Everyone in Washington does, and resentment is a force with attorneys. The same brain, running the same five steps, produced Falcon 9 and produced 96 percent unverifiable, and the variable that changed is the category of the object.

Still, the deeper story is the audience’s side of the trade. The walk-down from $2 trillion to $150 billion to a shuttered department happened in public, step by step, and at each step the constituency that had priced the promise at face value mostly did not reprice, because what it had bought, rather than the number, was the sound of the mind producing it, and the sound never changed.

⁂

Philosophy has a name for the supply side of this trade. Nathan Ballantyne, in Mind in 2019, defined epistemic trespassers as “thinkers who have competence or expertise to make good judgments in one field, but move to another field where they lack competence—and pass judgment nevertheless,” and he catalogued the standard self-defence: “my own field’s skills successfully ‘transfer’ to the other field.” That sentence, offered by trespassers in their own voice, is the entire prospectus of the engineer-influencer economy. I examined the supply side in July, in the person of the man who productized himself — the guru who converts domain credibility into ambient authority and sells it back as wisdom.

But supply is the boring half of a market. The trespasser crosses the boundary because someone on the far side holds the door, and the door is held by millions of people, each running a heuristic that serves them well at work, each issuing a hall pass to the voice that sounds like a colleague. The demand side is now institutionalized to the point of appearing in official government documents. When Trump appointed David Sacks as White House AI and crypto czar, the announcement gave his qualification in so many words: “David is co-host of the All-In Podcast, the top podcast in Tech, where he and his friends discuss economic, political and social issues.” The podcast is the credential. An audience assembled by professional-idiom affinity had become a constituency, and the constituency had become a qualification for federal office.

The same show had already produced the speed-run version of the whole arc. In January 2022, Chamath Palihapitiya told the audience that “nobody, nobody cares about what’s happening to the Uyghurs” — a portfolio manager’s expected-value read of a genocide, delivered in the register of hard truths. The collision with the world outside the accent took about seventy-two hours, and the retraction followed: “I believe that human rights matter, whether in China, the United States, or elsewhere.” The method produced the confident wrong answer; the game corrected it; the audience stayed.

⁂

Each of these tribes carries a flattering meta-belief about why its hall pass is valid, and the beliefs deserve a name: method narcissism, the conviction that politics is secretly the kind of problem your profession solves. The engineer holds that society is a systems problem, the financier that it is an incentives problem, the crypto founder that it is a consensus problem. Each conviction is a category claim about what society is, and each principal has stated it in writing.

Marc Andreessen’s “Techno-Optimist Manifesto” declares that “there is no material problem – whether created by nature or by technology – that cannot be solved with more technology,” and then names the enemy: “the ivory tower, the know-it-all credentialed expert worldview,” along with an enemies list of phrases that includes “trust and safety” and “tech ethics.” Notice the structure, because Nguyen described it before Andreessen wrote it. An epistemic bubble merely omits outside voices; an echo chamber actively discredits them while amplifying insiders. The manifesto is the echo-chamber mechanism executed in prose: a standing instruction to the audience that expertise from outside the idiom is the adversary.

Balaji Srinivasan wrote an entire book defining his replacement for the country, the network state, as “a highly aligned online community with a capacity for collective action that crowdfunds territory around the world and eventually gains diplomatic recognition from pre-existing states” — the polity as a startup, complete with an “on-chain census” to prove “traction in the face of skepticism,” governance reimagined as a cap table. Michael Saylor compressed the crypto version into liturgy: “We say in the Bitcoin world: Fix the money, fix the world,” telling the Atlas Society that Bitcoin is “the best choice we have to save our civilization and realize the ideal world envisioned by Ayn Rand and the Objectivist movement.” And Bill Ackman supplied the finance version in the first person, telling Bloomberg, “I stopped being an activist in the corporate world, but I’m still an activist in the rest of the world”: more than ten thousand posts on X, universities and cities and wars treated as underperforming positions. NPR’s assessment of his campus campaigns needed one sentence: “But Ackman’s methods are the same.” The methods are always the same. That is the tell. A thinker responding to the world adjusts the method to the object; a method narcissist adjusts the object to the method.

⁂

If the sorting were ideological at root, it would show up evenly wherever politics shows up. It does not. When Axios surveyed young Americans’ podcast habits, the audiences split violently by tribe on identity-coded talk shows (Joe Rogan reached 27 percent of young Trump voters and 6 percent of young Harris voters, a Barstool podcast 34 against 9) and the split nearly vanished on shows defined by format instead of voice: Call Her Daddy reached 9 percent of each, TED Talks 23 and 17. The polarization lives in the voice. Where the voice carries no tribal accent, the audience desegregates.

The demand-side demographics complete the picture. Podcast news consumers skew college-educated and male, and 23 percent of them trust podcast news more than any other source. Among men eighteen to twenty-nine, YouTube reaches 95 percent every week, and after gaming, the categories they select are Learning, News, and How-To — politics consumed inside a tutorial register, explanation as a genre preference. This is an audience trained by its own media diet to receive political claims the way it receives a systems-design walkthrough, and to extend the walkthrough’s presumption of competence to whoever can perform the walkthrough’s style.

Everyone in that audience, asked why they follow whom they follow, gives the same answer, and the answer is sincere: I follow him because he reasons well. It feels like discrimination in the old sense, the exercise of taste, the very opposite of tribalism. But nobody in the audience verified the reasoning; they recognized it. Rigor would have required checking the claims against the world, and what got selected instead was the accent of rigor — and the two are indistinguishable from inside the bubble, because the bubble is precisely the set of people who share your criteria for what rigor sounds like. The closure comes dressed as its own opposite. That costume is why it holds.

⁂

The engineer’s idiom is only the loudest case. Every profession mints its own version of the accent, and the sober ones are more dangerous than the brash ones, because sobriety reads as the absence of ideology rather than as a style. The legal profession’s version is a cadence of doctrinal caution, and audiences trained on it will extend the presumption of competence to whoever performs it, on whatever question, a mechanism I took apart yesterday in the case of a lawyer narrating a constitutional crisis as a docket. The pundit-generalist, trespassing on everything at a weekly deadline, is the genre’s ancestor and never needed a feed to find an audience. No algorithm built any of this. We built it, profession by profession, voice by voice, and we did it because the heuristic feels like prudence all the way down.

⁂

Nguyen’s taxonomy carries one piece of good news: epistemic bubbles, unlike echo chambers, are “ramshackle – they go up easily, but they are easy to take down.” A structure built by omission is repaired by inclusion. But the Meta experiments warn against the lazy repair: exposure alone, mechanically administered, moved nothing. What has to change is the sorting rule itself. Stop arranging your informational life by communication-style affinity and start arranging it by verification: for any domain that matters, find the voices that the domain’s own error-catchers check and correct and have failed to catch out, whatever those voices sound like. The right test of a source asks who is positioned to catch it when it is wrong, and whether they have; the accent was never a test at all.

In practice this means following people whose style grates on you and whose sourcing survives you, and it means treating the little glow of recognition, he thinks like me, as what it is, a conflict of interest between you and your own beliefs. Ballantyne ends his paper with the observation that “we human beings are trespassers at heart.” So we are, and no audit of the trespassers will fix a market where the passes keep getting issued. The hall pass is written at the door, by whoever stands there, and the person standing at the door of your attention is you. The next time a voice sounds exactly like home, ask whether it has ever been checked by someone who could catch it — and what it has cost the last audience that never asked.

Go Deeper into the Circus

On Friday morning, with the Senate scrambling through its last items before a five-week August recess, Bill Cassidy of Louisiana walked to the floor and announced that Todd Blanche would have his vote. “This is not a referendum on President Trump,” he said. “It is a decision regarding Mr. Blanche. ... All considered, I will vote for Mr. Blanche.” It was the fiftieth vote, the one that settled it. With Susan Collins and Lisa Murkowski opposed and Mitch McConnell absent, Blanche could afford exactly two Republican defections, and he had exactly two. Cassidy ended the arithmetic. In an overnight vote gaveled down at 4:31 Saturday morning to light applause in the chamber, the Senate confirmed Blanche 50 to 49. The president’s criminal defense lawyer now runs the Department of Justice, and the man who put him there did it with nothing at stake but his own comfort.

Blanche defended Trump in his criminal cases, then followed him into government, confirmed as deputy attorney general in March 2025 by a vote of 52 to 46. When Trump fired Pam Bondi on April 2, Blanche became acting attorney general, and on June 8 Trump nominated him to hold the job outright. Between those dates he settled a lawsuit. Trump had sued the IRS for $10 billion over the leak of his tax returns, which means the government Blanche helped run was the defendant, and the settlement his department signed gave the plaintiff a $1.776 billion “Anti-Weaponization Fund” for people claiming the government had been turned against them, along with an order granting Trump, his family members, and their business entities effective immunity from IRS audits, prosecution, and regulatory enforcement for every return already filed. Working Americans get audited on a clerical error. The president’s family got a signed release, drafted by the president’s former defense lawyer, paid for out of the Treasury.

In July a federal judge, Kathleen Williams, examined how that settlement came to exist and wrote sentences that would end careers in a country that still enforced its own standards. There was never adverseness between the Parties, she wrote, “there was never a case or controversy; and there was never a question as to who would prevail.” The suit was an attempt to use the Court to provide some legitimacy to an agreement to confer immunity to people and entities affiliated with the President “and to earmark billions of dollars from American taxpayers to redress grievances not defined in the law.” She referred Trump’s outside lawyer to the Florida Bar and sent copies of her order to the bar associations of New York and the District of Columbia, where Blanche and his associate attorney general hold their licenses.

The fund did not die. Two Republican senators, John Cornyn and Thom Tillis, both of whom leave the Senate in January, refused to vote for Blanche in committee until he rescinded it in writing, which he did late on a Sunday night to save his nomination, in an order stating that the fund “is rescinded and shall have no force or effect” and that “this order establishes, beyond any doubt, that there is no fund.” What it rescinded was his own May order. The settlement underneath it survives, and that settlement can by its own terms be “modified only with the written agreement of the parties”, which means Trump, who told reporters the next day that he had neither signed the rescission nor read it. Blanche himself conceded under Cornyn’s questioning that the settlement remained an “enforceable document.”

Cornyn had said all of this himself in July. The fund was “still part of the settlement agreement,” he said then, and “it hasn’t been changed in writing, which is what the agreement requires, and it could be revived later on through a breach of contract lawsuit.” The remedy he named was a bill passed by unanimous consent “to basically bar a weaponization fund that I could support.” He got no bill. He got a memo from the man whose confirmation depended on it, unsigned by the president, and he voted yes. Asked what would happen if the department went back on it, he said he expected them “to live up to that in any future litigation.” Tillis had been more explicit still. On the Saturday before the deal he posted that Trump “clearly intends to resurrect the payout pot for punks either by inappropriately establishing another bogus fund or pushing Congress to vote for a bill.” Two days later he accepted a written promise against the thing he had just said the president clearly intended to do. Sheldon Whitehouse called the two documents “decorative” and said neither had “any legal effect whatsoever.”

Mike Howell, a Republican lawyer who had applied to sit on the fund’s board, was less delicate about it: “Can be undone after Tuesday. The Anti-Weaponization Fund is great.” Trump had already said what he wanted in public, calling the fund dead on a Friday and adding “I wish it weren’t, to be honest with you,” then promising the next morning that “it will immediately be back on the table, and I will get it done.” The audit immunity survived as well, narrowed on paper by a companion document Blanche did not sign. An attorney general’s order can be superseded by the next attorney general’s order, and the man who signed this one was asking the Senate to make him permanent. That is what Bill Cassidy voted to promote.

⁂

Two Republicans voted no, and the record they cited was sitting in front of every senator in the chamber. Collins posted a bill of particulars: Blanche “approved an order to shield the President, his sons, and the family business from IRS audits, protections unavailable to other American taxpayers,” approved the $1.8 billion fund, promised an anti-abortion organization he would seek to prohibit the mailing of abortion medication nationwide, and led a department that “attempted to indict Senators Mark Kelly and Elissa Slotkin over their ill-advised, but constitutionally protected, videos encouraging resistance to unlawful orders.”

The list is accurate, and Collins cast that vote in the safest year of her career to cast it, running in the closest race she has faced, tied or trailing in Maine polling with a November election ahead of her in a state Kamala Harris carried. Ideology has never been the best predictor of how she votes. What she sells Maine is concrete: she has chaired the Senate Appropriations Committee since January 2025, the first Republican woman to hold that gavel, and by her office’s count she has directed nearly $1.5 billion to 670 projects in the state since earmarks returned in 2021, giving Maine more directed spending per capita than any other state. Fire stations, hospitals, the community colleges, the shipyard at Kittery. That is a real product, and the price of it is a vote when the leadership needs one.

Kavanaugh is the working example. She had already told reporters in August 2018 that Brett Kavanaugh considered Roe settled law, and in October she held the floor for forty-five minutes to read the rest of the private assurances into the public record. “In his testimony, he noted repeatedly that Roe had been upheld by Planned Parenthood v. Casey, describing it as ‘precedent on precedent,’” she said. “When I asked him would it be sufficient to overturn a long-established precedent if five current justices believed it was wrongly decided, he emphatically said ‘no.’” Kavanaugh was confirmed 50 to 48, and her vote was not the margin. Murkowski had paired with an absent Steve Daines and voted present while Joe Manchin crossed over, so a Collins no would have produced a tie for Mike Pence to break, and Pence was presiding. Four years later the Court overturned Roe, and Collins issued a statement calling the decision “inconsistent with what Justices Gorsuch and Kavanaugh said in their testimony and their meetings with me, where they both were insistent on the importance of supporting long-standing precedents that the country has relied upon.” Asked whether Kavanaugh had misled her, she said, “My statement speaks for itself.”

Extract the assurances, read them into the record, supply the vote, and keep the statement of disappointment in reserve. Susan Collins Watch, which has tracked her votes for decades, counts not one tie-breaking vote against a Republican nominee across her entire career, against dozens cast for them. “The moment Collins announced she was a no on Blanche,” Chris Hayes wrote, “you knew they had the votes.” Her particulars on Blanche are worth having anyway, because they establish what every senator knew before the roll was called. But the procedure she has run for twenty-nine years is the same one Cassidy ran with Kennedy, and ran again on Friday. Collins still holds the gavel. Cassidy ran it once and lost his seat, then ran it a second time with the seat already gone.

Murkowski named the structure underneath all of it, that the politicization “even weaponization” of the Department “did not start with this administration but has accelerated during it,” before arriving at the sentence that mattered: “The country needs an Attorney General who will check the worst impulses of this administration. I hope Mr. Blanche is able to achieve that, if confirmed, but I simply do not have confidence that will be the case.”

Murkowski also pointed out that the rescission of the fund holds only while the nomination is pending. The Senate’s grip on the department’s conduct lived entirely in the gap between nomination and confirmation, and confirmation closed the gap. Every assurance Blanche gave to win his committee votes became unenforceable the moment Cassidy finished speaking, and Cassidy was told this by a colleague, on the record, hours before he spoke.

Cassidy is not a bystander who wandered into this. On February 13, 2021, he voted to convict Donald Trump of incitement of insurrection and explained himself in two sentences: “Our Constitution and our country is more important than any one person. I voted to convict President Trump because he is guilty.” The Executive Committee of the Republican Party of Louisiana voted unanimously to censure him within hours.

The bill for that vote came due this May. Trump endorsed a primary challenger, and Cassidy finished third in his own party’s primary, behind the Trump-endorsed candidate and one other, his Senate career ended by the voters of his own party. Two days later he stood in the Capitol and told reporters he regretted nothing: “I voted to uphold the constitution. It may have cost me my seat, but who cares?” And: “I had the privilege of voting to uphold the constitution – isn’t that a great thing?” He described himself as “a man who loves his country, who feels very, very good about how I serve my country and my constitution and my fellow Americans.”

Eleven weeks later he handed the Justice Department to the president’s defense lawyer. Whatever those May sentences were, they were not a description of a man who would do that, and the distance between them measures what his professions of love were worth once they were finally asked to cost him something other than an election he had already lost.

The standard story about Republican senators is careerism: they vote with Trump because they watched what happened to the ones who didn’t, and they would like to keep their jobs. Politico spent the spring describing Cassidy as freed from political constraints, a man with veto power over nominees and nothing left for Trump to take. There was no primary left to lose and no seat left to protect, because the president had already spent his endorsement taking both. If self-preservation were the mechanism, Cassidy was the one man in the Republican conference it could not reach, which is exactly why his vote is the most damning one cast this week.

He voted yes anyway. He acknowledged from the floor that he and Trump “have a history,” then insisted “that history does not matter one bit,” and he anticipated the reaction: “I will be criticized for this vote... What’s new? But the people of Louisiana can be assured that I worked hard to understand the issue and to make the right decision.” Then came the reasoning he chose to leave in the record: “The choice is not between perfection and Mr. Blanche. It is between Mr. Blanche and another acting attorney general who may not run the department effectively under President Trump and who indeed may not be as good as Mr. Blanche.”

The sentence surrenders everything while sounding like prudence. Whoever runs the department, it will be run “under President Trump,” staffed from the supply of people Trump is willing to install. Whether the Justice Department should function as the president’s law firm has been retired from consideration, and what remains is a personnel comparison inside the president’s shortlist. This is the lesser evil method that has confirmed every increment of the past two years. Each nominee is measured against a hypothetical worse one rather than against the office as the law describes it, and by that method no nominee can ever be rejected, because the supply of hypothetical worse ones is infinite. Cassidy conceded that Blanche showed “poor judgment” in the payout fund and the IRS settlement, then voted to reward him for it.

The decisive argument, by his own telling, came to him overnight. He had slept on it, he said, and concluded that Trump will be “unrelenting” in going after his political enemies, that “this will be true no matter who the attorney general is,” and that a confirmed Blanche would have “more leverage to push back” than an acting one. The office does not work that way, and a physician who spent eleven years in the Senate had every means available to learn so. Blanche already had all the powers of the attorney general, with “that little word ‘acting’ in front of his title” and no formal powers waiting to be unlocked by confirmation, Eric Columbus, a lawyer who served in the deputy attorney general’s office and now edits Lawfare, told Politico a week before the vote, and Blanche could likely have stayed in the acting role for another year or more. Confirmation subtracts nothing from the president’s removal power either. The Senate-confirmed attorney general Blanche had been standing in for was fired in April. Confirmation added one thing, and it was the only thing Cassidy’s chamber controlled: the Senate’s blessing. Followed to its end, his argument is that the Senate should certify the president’s choice so the choice can better resist the president who made it. No one who thought about it for a night believes that.

He had tested this argument already, on himself, in public, and pronounced it a failure six weeks before he made it again. In February 2025, Cassidy was the vote that decided whether Robert F. Kennedy Jr. would run the Department of Health and Human Services. He is a physician, and he had spent a hearing telling Kennedy that he was afraid people would die of vaccine-preventable diseases “because of policies or attitudes that you bring to the department”. Then he voted to advance the nomination out of committee, and read into the record the assurances he said he had extracted over the preceding weekend: that Kennedy would work within the current vaccine approval and safety monitoring systems, and not establish parallel systems, that if confirmed he would maintain the CDC’s Advisory Committee on Immunization Practices without changes, that the CDC would not remove statements on its website pointing out that vaccines do not cause autism, that the department would give his committee thirty days’ notice before touching vaccine safety monitoring. The Senate confirmed Kennedy 52 to 48.

Four months later Kennedy fired all seventeen members of the advisory committee and replaced them with members who largely share his vaccine skepticism. The reconstituted panel downgraded recommendations including those for hepatitis B and Covid-19, and Kennedy twice bypassed the panel entirely, changing the childhood schedule without its deliberation. By December, Cassidy was reduced to warning the public away from the body he had promised to protect: “The ACIP is totally discredited. They are not protecting children.” The autism page kept its headline and acquired an asterisk, and at the bottom of the page a line explaining that the sentence survives due to an agreement with the chair of the U.S. Senate Health, Education, Labor, and Pensions Committee. His concession is now a footnote on a government website, cited to explain why a true sentence is still permitted to appear above the material contradicting it.

On June 28, six weeks before the Blanche vote, Cassidy sat with Margaret Brennan and said it plainly. “The commitments that were made to me have been violated.” Asked whether the promises had been made only to win his vote, he answered: “Easy to surmise.” He described what that does to a man’s judgment going forward: “once you lose trust in somebody, you’re not quite sure what to trust going forward. In fact, you don’t trust anything.” And: “if you build public health upon a foundation of lies, then you’re going to have the absence of adequate public health.”

Brennan asked him to explain the vote. His answer, given in the last week of June 2026, was the Blanche speech in advance: “either he was going to be in a position where there were guardrails, and I did have commitments made as to kind of guardrails. Or he was going to be appointed White House health Czar, in which case he would have the President’s ear without the guardrails.” The choice is between the confirmed man and the unconfirmed one, and confirmation buys guardrails. “You can criticize it, but I chose to have the one with the guardrails.”

The guardrails were promises, and the promises expired the day they became inconvenient, and the man who extracted them told a national television audience that they had been violated and were probably insincere when made. Then he walked onto the Senate floor six weeks later, faced a nominee whose single concession was a written rescission that a colleague had told him from that same floor would lapse on confirmation, and reached for the identical reasoning, the same argument entire, with the department changed and the word guardrails traded for the word leverage. He was played once in front of the whole country, said so himself, described the humiliation as a lesson about trust, and then volunteered for it again on a larger stake, for a president who had destroyed his career and could not reward him for it.

⁂

I cannot speak to the interiority of experience that forms the memories of Mr. Cassidy from February 2021 to August of 2026, and I do not need to. The record he built between those dates is a complete descent into moral depravity. He cast a vote that will condemn innocent fellow Americans to further abuse of their constitutional inheritance, to their rights disappearing into weaponized prosecutions, and to the further coarsening of our public life, and he decided that this was the preferable path. I am sure he loves his family. I do not believe he loves this country. He is a selfish, small man, concerned merely with his own position, and history shall remember him as such.

The fear is not conjecture and it is not mine. Thom Tillis, one of the two senators who forced the rescission of the anti-weaponization fund, spent January of 2025 preparing to vote against Pete Hegseth for secretary of defense, and went so far as to solicit testimony against him from Hegseth’s former sister-in-law. He also told people that the FBI had warned him about “credible death threats” while he was weighing the vote. He supplied the fiftieth vote to confirm. Three months later, asked at an Anchorage summit what she would say to Alaskans who were afraid, Lisa Murkowski paused a long time and answered, “We are all afraid.” Then: “It’s quite a statement. But we are in a time and a place where I certainly have not been here before. And I’ll tell ya, I’m oftentimes very anxious myself about using my voice, because retaliation is real. And that’s not right.” She said afterward that the “we” meant the five hundred nonprofit directors sitting in front of her rather than her colleagues, which leaves the sentence about her own voice exactly where she left it. McKay Coppins, reporting Mitt Romney’s account of the second impeachment trial, described a small group of Republican senators talking one of their own out of a conviction vote he was leaning toward: you can’t do that, one of them said; think of your personal safety; think of your children. The senator decided they were right. Romney was by then paying five thousand dollars a day to keep private security on his family.

The word for what they did with that fear is cowardice. Coppins reached for the same word, calling what emerged after January 6 “a new, more existential brand of cowardice.” Someday one of them will sit on a talk-show couch or flog a memoir and confess exactly that, and the confession will be received as revelation and sold as courage.

Someday was Thursday. Two days before the floor vote, with Blanche one senator short and the chamber waiting on Cassidy or Murkowski, Tillis went on television to announce How to Lose Friends and Antagonize Presidents: The Trouble with Sycophants, Courage Outsourcing, and Partisan Groupthink, out October 6 at thirty-two dollars, in time for the midterms. His publisher promises a “bare-knuckled, darkly funny wake-up call” from “a true conservative who doesn’t mind a good scrap in a Congress that has lost its nerve,” and the flap copy names the pathology outright: “Fear, outsourced courage, and groupthink are hollowing out the party.” Tillis said the people he meant to expose were the ones around Trump who “are not giving the president honest advice”, and he named two of them: “I’m here for the American people, not to score points with Stephen Miller, Pete Hegseth or these other folks.” Asked whether Trump deserved any share of the blame, he compared the president to a chief executive who cannot be expected to have expertise in every part of an organization. He had supplied the fiftieth vote for Hegseth and voted Blanche out of committee on Tuesday, and the outsourced courage in his subtitle always belongs to somebody else. The book is coming from Broadside Books, the conservative imprint of HarperCollins, which News Corp owns.

The couch has an owner. David Ellison closed his purchase of Paramount in August of 2025, which made him the proprietor of CBS News and 60 Minutes, then bought Bari Weiss’s Free Press for a reported $150 million and installed her as editor in chief of the news division with no television experience and a direct line to him. He is trying to buy CNN and HBO as well, through a $110 billion acquisition of Warner Bros. Discovery that Trump’s Justice Department cleared in June after an eight-month review, that Brussels cleared in July, and that Britain cleared on Thursday. What remains in the way is twelve state attorneys general and a trial set for March. Ellison arrived at this year’s State of the Union alongside Lindsey Graham, and his father Larry, who has cultivated Trump for years, is financing the purchase. Writing in the Times on Tuesday, Ellison said the real objection to his deal is “whether I can be trusted as a steward of Warner’s CNN.” At the other end of the dial the Murdochs settled their succession war last September: Lachlan takes the trust, his three elder siblings are bought out at roughly $1.1 billion apiece, and the direction of Fox News, the Wall Street Journal, and the New York Post is fixed past Rupert’s death. Nobody has to give an order for any of this to work. It exonerates no one. The record was made in public, in daylight, by men who understood precisely what they were doing while they did it.

The same man, holding the same information about the same president, cast a vote in 2021 that he knew would cost him his party’s love and eventually his seat, and afterward called it the privilege of his career. In 2026, with nothing left to lose, he cast the deciding vote to place that president’s own defense counsel over federal law enforcement, on the announced reasoning that the alternative was a different Trump appointee.

If the vote was sincere — it wasn’t — then the settled judgment of the most liberated member of the Republican conference, the one who paid full price for his conscience and said it was worth it, is that a president gets to staff the Justice Department with his personal lawyer and immunize his own family from the tax code, and that a promise from that administration is still worth a vote after he went on television and said the last promise made to him was violated and probably insincere when it was given. And if it was something other than sincere, then whatever moved it reaches a senator who has already lost everything a political threat can take, and the machinery no longer needs a career to work on. A system of rule by pressure announces itself in the compliance of people with things to lose. You measure how far it has matured by the compliance of the people without them.

⁂

“Our Constitution and our country is more important than any one person.”

“This is not a referendum on President Trump.”

The first sentence had a price, and he paid all of it. The second was free, delivered on the session’s final Friday by a senator with five months left to serve, about a nominee whose signature settlement a federal judge had already unwound as having “no viable basis in law or fact.” The vote came in the dark and the chamber left town. The word acting is off the attorney general’s door, and the Americans who will be investigated, indicted, audited, and ruined by the department Bill Cassidy just certified do not know their names yet. He will be retired by the time they learn them.

Go Deeper into the Circus

On Friday morning, Rand Paul posted an update for his followers: “It’s official: letters to prosecute Fauci have been hand delivered to @DOJ.” The day before, the Senate Homeland Security Committee he chairs had voted eight to five, along party lines, to hold Anthony Fauci in criminal contempt of Congress, and Paul had walked the referral over to the Justice Department himself. The department confirmed receipt. The senator wanted you to know the letters did not travel by mail.

The crime the referral asks the government to prosecute was manufactured by the men who charged it. In July, Fauci sat for a subpoenaed hearing and invoked the Fifth Amendment 111 times. Ordinarily that ends the encounter; the privilege exists so that a legislature cannot force a man to hand it his own indictment. But Fauci holds a preemptive pardon, signed by Joe Biden in January 2025 and covering conduct going back to 2014, and the committee’s theory, resting on an 1896 case called Brown v. Walker, is that a pardoned man faces no jeopardy and so has no privilege left to invoke. The pardon issued to protect him becomes the instrument that strips his shield. If he answers and misspeaks, the pardon does not reach forward — “that’s a new lie, and the pardon won’t cover that,” as Paul put it, the statute of limitations on the original alleged perjury having expired in May. If he stays silent, the silence is the offense: contempt of Congress, a misdemeanor carrying up to a year in prison. The crime was built in the same room where it was charged.

Procedural fuckery is by now the movement’s most reliable competence, the one skill it has kept sharpening while the rest of its governing repertoire atrophied, and the referral’s route around the Constitution’s inconveniences was engineered in advance. A contempt certification would ordinarily need sixty votes to survive the full Senate, so Paul’s plan is to skip the chamber entirely and pass the certification through the Senate’s president, JD Vance. Republican senators are split on whether that is legal. Four earlier referrals, two to Biden’s Justice Department and two to Trump’s, produced nothing; in January, Paul complained to Joe Rogan that the prosecutors would not act. So the machine was redesigned until it could not fail to produce a defendant.

The vote came wrapped in a moral warrant, released over the chairman’s name. “More than a million Americans died from COVID-19,” the committee’s statement read. “Many of them died alone. Workers were forced to choose between a mandate and a job they needed. Businesses closed and never reopened. Children lost years of school they will never get back.” Every loss in that paragraph is real, and every one of them is a distraction. The mandates were imposed by governors, employers, and school boards; the closures by districts, state houses, and county health officers; Fauci ran a research institute and commanded none of them. No count in the referral alleges his responsibility for a single item on the list, because contempt of Congress is the only crime on offer. The statement opens a grief account and prosecutes a silence against the balance.

By evening the operation had reached the man’s driveway. A tabloid photographer was waiting outside Fauci’s house within hours of the vote, and the New York Post — Rupert Murdoch’s brain poison for uneducated people — ran the images under a headline reporting that the “ex-top doc miserably takes out trash”: an 85-year-old man grimacing as he wheeled a recycling bin to the curb. His wife, Christine Grady, who ran the NIH’s Department of Bioethics for thirteen years until the current administration removed her in 2025, raised a middle finger at the camera as she drove them away. The next morning, the chairman whose committee had just referred her husband for prosecution quote-posted the story to his followers: “Is that how you plead the fifth in sign language?” The joke is at the expense of deaf people and of a woman photographed in her own driveway.

Eight Republicans, zero defections, on a resolution that asks federal prosecutors to jail an 85-year-old man for staying quiet inside a trap the committee built for him. Partisanship alone does not produce a count like that. Party discipline produces close votes with a defector or two who wants the record to show a reservation, and here the record shows none. What produces unanimity is a shared cosmology, and the vote is its map: a universe in which Fauci occupies a fixed position, and the position is not that of a citizen with rights. The mechanism had been described in the press for a week, the man in it is 85, and the exit had been welded shut on purpose. Eight members reviewed that arrangement and voted to advance it, and the eighth did it having authored it. Whatever moral universe permits those acts is one in which cruelty toward a correctly placed target has stopped registering as a cost at all, and registers instead as a debt being collected.

It is hard to imagine the Republican Party of 2015 assembling eight committee votes for that; half its members would have discovered a scheduling conflict. The party of 2026 assembled them without apparent effort, and the effortlessness is the finding. Cosmologies of that kind are not adopted in a season. They are arrived at by a decade of small accommodations, each of which moved a few more people out of the category of persons and into the category of positions, and the men who made those accommodations made them one at a time, in public, on dates.

Economists gave up long ago on asking people what they value. Stated preferences cost nothing to state. The discipline’s answer was to stop trusting questionnaires and start reading receipts: what a person pays for, forgoes, and risks under an actual budget is the record of what he values, and nothing he says can amend it. The method is called revealed preference, and it earned its keep because it converted an unfalsifiable claim into a checkable one.

Moral character presents the same measurement problem, and the last decade of American politics accidentally ran the same solution at national scale. Everyone in public life professes a floor: the thing they would never vote for, sign, platform, defend, or attend. Professed floors are free. The only datum with informational content is what a person did when his floor was tested at a price, and the Trump era’s distinctive contribution to American moral epistemology is that it priced everyone. Office, a primary, a donor network, an audience, a book deal, a friendship, a career: every actor on the right and everyone adjacent to it was eventually asked what their stated principles cost, in public, on a date, and the answers were recorded. The era was many things, most of them corrosive. It was also the largest natural experiment in revealed moral preference ever run on an American elite.

The first rule: only costly acts count. A floor vote is data, and so are a signed amicus brief and a firing accepted rather than an order executed. An anonymous quote from a senator who is “privately appalled” is worse than no data at all, because it establishes that the man understood the moral facts perfectly and priced his objection at zero.

The second rule: open exits raise the evidentiary weight of staying. The people who left are the experiment’s control group, and their function is not sentimental. They are existence proofs. Justin Amash proves a libertarian congressman could walk out and survive the walking. Mitt Romney proves a senator could vote to convict a president of his own party, the first in the country’s history to do so, and remain a senator. Every marked exit re-prices everyone who stayed. After the tenth colleague chooses the door, “I had no choice” is refuted by arithmetic.

The third rule: full information forecloses the innocence plea. A politician who signed on in 2016 could claim he did not know what the thing would become. Whatever you make of that claim, there is no 2026 edition of it. A decade of tests, each public, each dated, has been passed or failed in plain view. Staying now is an act performed with complete knowledge of the record, which makes the current membership the cleanest sample the experiment has produced.

Held all together, the rules turn the decade into an instrument. They discard everything cheap, weight everything priced, and timestamp everything kept, which is why the sort’s findings resist the usual rebuttals. A man can dispute a characterization of his soul indefinitely. He cannot dispute a roll call.

⁂

One test sorts weakly. A person can fail a single test out of confusion, bad advice, or a bad week. A sequence sorts almost perfectly, and the sequence is what the decade actually ran: the tape in October 2016, the first impeachment, the stolen-election lie, the coup attempt, the second impeachment, the pardons of the men who beat police officers with flagpoles, and now a committee referral asking the Justice Department to jail a man for declining to speak. Each test arrived harder than the last, and each was individually survivable with a rationalization: he didn’t mean it, it was one speech, the lawyers will stop it, the courts held. But passing test ten requires having passed tests one through nine, so membership in 2026 encodes the entire nested history of rationalizations, each one public and timestamped. The residue is what the filter selects for.

The filter also teaches. Survivors learn what survival requires and begin performing loyalty before it is demanded, which is the behavior Timothy Snyder put first among his lessons on tyranny: most of the power authoritarianism ever acquires is handed to it in advance, by people anticipating what it will want. Anticipatory obedience is why the eighth test produces less resistance than the third, and why the committee vote this week required no whipping at all. The pressure had been internalized years ago, and what remained in the seats was a membership pre-adapted to the ask.

The economist Albert Hirschman gave the century its grammar for situations like this in Exit, Voice, and Loyalty: a member of a declining institution can leave, speak up, or stay quiet in the hope of better days, and loyalty earns its keep because it buys time for voice. The Trump party broke the triad deliberately. It abolished voice; internal dissent became excommunication, as the entire roster of exiles demonstrates. When voice is abolished, loyalty loses its ambiguity. There is no longer such a thing as the member who stays to fight from within, because fighting from within is definitionally grounds for removal, and every member can observe that it is. The purges were an interpretive gift to the party’s critics: they removed the innocent explanation for belonging.

Hirschman’s triad maps what the sorting produced. Ten years of priced tests divided the American right and its adjacent elites into three populations: those who chose loyalty and passed the tests, those who chose voice and were expelled for it, and a third, less discussed and analytically the richest, that chose exit from the tested institutions and then sold the exit as if it were voice.

⁂

Rand Paul is supposed to be the hard case. His reputation, cultivated over sixteen years, is the man with the floor: the Senate’s lone fiscal conscience, the assiduous no vote on every spending bill, the ophthalmologist who lectures both parties about debt while they roll their eyes. If any member of the sorted party could claim his participation was principled rather than selected, it should be him.

In 2019, when the September 11th Victim Compensation Fund came up for permanent reauthorization, Paul blocked the unanimous-consent request, demanding offsets. Jon Stewart, who had spent a decade escorting dying first responders through Senate hallways, called it what it was: a “tissue paper avoidance” of the $1.5 trillion tax cut Paul had voted for eighteen months earlier without demanding an offset for a dime of it. The bill passed 97 to 2; Paul’s offset amendment lost 22 to 77, with Mitch McConnell voting no. In 2020, with the country in the streets over George Floyd, Paul stood as the sole holdout on the Emmett Till Anti-Lynching Act, telling the chamber that he sought to amend the bill “not because I take lynching lightly but because I take it seriously, and this legislation does not”. In March 2020, while awaiting the result of his own COVID test, he went on using the Senate gym and pool anyway; the test came back positive, and two of his colleagues went into quarantine. His wife bought stock in Gilead, maker of remdesivir, that February; the purchase was disclosed sixteen months late.

The ledger’s organizing principle is the aim, and the frugality is its packaging. Paul’s no votes on spending are cast by the hundreds and cost him nothing; they are the brand, and the brand is subsidized by their reliable failure. The objections that actually land — the ones where his lone body in a hallway stops or stalls the machinery — cluster, again and again, on instruments of solidarity: compensation for the dying, a statute against lynching, the shield a witness holds up against a legislature. The deficits sleep soundly whenever the sword is funded. What the ledger shows is a man who wants the sword retained and the shield melted down, and it shows it without requiring a single guess about what he believes.

And then the ledger’s newest entry, the one from this week, which upgrades him from participant to author. The other seven Republicans on the committee passed a test someone else set. Paul built the test: engineered the trap that converts a pardon into a jeopardy-stripping device, timed the hearing after the perjury statute lapsed, planned the route around his own chamber through a friendly presiding officer. Compliance always leaves a residue of defense: the whip demanded it, the primary loomed. Authorship leaves none. The man with the floor wrote one for others to fail, hand-carried it downtown, posted about the hand-carrying, and paused, between the delivery and the announcement, to joke about the middle finger of his defendant’s wife.

⁂

What the exiles prove is that every constraint cited by those who stayed was survivable. Amash walked and kept his seat until he chose to leave it. Romney voted his oath twice and served out his term. Liz Cheney vice-chaired the investigation of the coup her party sponsored, lost her primary by a canyon, and lives. Adam Kinzinger retired on his own schedule. None of them were destroyed; they were merely priced, and they paid. The prices were real: a seat, a primary, a censure, the nightly hostility of a movement with the president’s phone number. They were not existential. Everyone on the exile roster is alive, at liberty, and employable, which is exactly what makes the roster so expensive for those who stayed: the worst case turned out to be survivable, and the people who stayed watched it being survived, year after year, and stayed anyway.

But the doctrine cuts the exiles no free eulogies either, because exit timing is data too. Leaving before the cost arrives reads differently from leaving after the consequences find you, and the anti-Trump memoir economy is a market with its own opportunists: men who spent years operating the machine and now sell annotated regret at book length. Cheney voted with the man’s position more than nine votes in ten before the coup drew her line. A floor at coup is a real floor, and it is also a floor that sat comfortably below family separation. The honest reading of the control group is a table of depths: the sort does not divide the good from the bad so much as it records, in acts and dates, exactly how deep each person’s floor was poured. The current membership demonstrated, eight to five this week, that some were never poured at all.

The table of depths is the decade’s real historiography, and it will outlive the participants’ accounts of themselves, because it is made of the one material memoir cannot dissolve: dated acts. Ten years from now the era’s self-portraits will disagree with each other about who resisted, who collaborated, and who never believed any of it. The table will not disagree with anything. It will sit under the portraits the way a land survey sits under a property dispute, indifferent to the testimony, answerable only to the record.

Political scientists have a name for the gap between what people do publicly and believe privately — preference falsification — and the whole literature warns against reading coerced compliance as conviction. The subject applauding the regime because the secret police are watching reveals nothing about his heart. True, and the warning protects almost no one it is being spent on. A senator with a safe seat, a personal fortune, and a standing cable contract is not the coerced subject of that literature. The pressure he yields to is career pricing, and yielding to career pricing is precisely the revealed datum: he was asked what his principles cost and he answered with a number. Preference falsification excuses the powerless and indicts the powerful, because for the powerful the falsified preference is itself the choice, performed freely, on camera, for years.

⁂

The third population keeps a favorite senator, and it is the man with the letters. Among the formation that styles itself anti-anti-Trump — the heterodox editors, the business libertarians, the venture donors mourning the pro-growth Republican Party of their memory — Rand Paul enjoys a reverence the rest of the Senate cannot buy. He is their proof of concept: the politician whose dissent is loud, principled, and priced at zero, the conscience whose invoices never reach the powerful. They revere him because he models their own product.

They are the people who looked at a decade of tests and arranged never to take one. They chose Hirschman’s exit, out of the party, out of the mainstream institutions, away from anything with a roll-call vote. Then they executed the strangest maneuver of the era: they marketed the exit as voice. New publications, new universities, new podcasts, all wearing the full vocabulary of dissent, all founded on the premise that the old institutions had failed, a premise with the convenient property that it exempted the founders from every test the old institutions administered. The Free Press was the flagship of the maneuver, and its cap table is the population’s roster: seeded in 2022 by Marc Andreessen, David Sacks, Howard Schultz, and Bobby Kotick, with a Series A led by Herbert Allen Jr., at whose Sun Valley conference David Ellison would later propose the acquisition. The independent media of the business-libertarian restoration was a venture asset held by right-wing megadonors, and the asset performed.

The Free Press maintains an entire vertical on free speech that omits threats to speech arriving from the right. Its standard treatment of the one political actor who commands state retaliation is the debate format — “Is Donald Trump Breaking the Law? Seven Experts Weigh In” — which converts a constitutional question into a panel. In its pages, as one dissection of the outlet’s ideology argued, Trump figures as a passive object of leftist fervor rather than an actor with designs of his own. The administration’s self-dealing and its economic program received cursory coverage while the social-issues beat that flatters the subscriber base ran at full volume. A decade of courage, inventoried, points exclusively at targets that lost their power to retaliate years ago: universities, DEI offices, legacy newsrooms, museum boards. The omission is the product: a free-speech vertical that leaves out the state’s own retaliation sells the sensation of dissent while routing every invoice to people who cannot answer back.

Then the product found its buyer, and every link in the purchase chain is public. Paramount, owner of CBS, paid Donald Trump $16 million to settle a lawsuit that First Amendment lawyers regarded as meritless, the money earmarked for his presidential library, the settlement widely understood as the toll for federal clearance of its merger with David Ellison’s Skydance. The FCC approved the deal two votes to one after Skydance committed in writing to an ombudsman policing ideological bias at CBS News. Trump called the Ellisons “big supporters of mine” who would “do the right thing”. And within weeks, Ellison paid $150 million for The Free Press and installed Bari Weiss as editor-in-chief of CBS News, reporting directly to him rather than through the news division. The heterodox flagship, the exit-as-voice machine itself, was absorbed into a conglomerate that had just paid the president cash to clear a merger.

I wrote in December that Weiss was not on the level, after she spiked a factually accurate 60 Minutes report on the men deported to El Salvador’s CECOT prison. The stated ground was fairness and readiness; the operative one, as I read the sequence, was that the administration had declined to comment, which installs a kill switch letting official silence veto reporting. The pressure on the broadcast ran ahead of her. Bill Owens, its executive producer, had resigned in April 2025, months before Weiss arrived, saying he would no longer be permitted to run the show as he had always run it or to make independent decisions about what was right for it; the squeeze that removed him came from Paramount during the merger review, and what Weiss inherited was a newsroom already conditioned to it. Sharyn Alfonsi, who fought the CECOT spike, was forced out. Cecilia Vega was fired with her contract running to 2027, naming “censorship, both imposed and self-driven” on her way out. Tanya Simon and Draggan Mihailovich were purged and replaced with an executive producer who had never run a broadcast. Scott Pelley told the newsroom what he thought of the collapse at the top and was fired within a day. The radio division Edward R. Murrow built was shut down after nearly a century. Every entry arrived wrapped in the language of reform (innovation, trust, preparing CBS for the future), which is how the acts stay illegible until their consequence window closes.

The acquired newsroom ran its own miniature of the experiment, and its control group behaved the way the Senate’s did. Dissent inside Weiss’s CBS was possible; the proof is the list of people who committed it and paid the price. Alfonsi fought the spike until the fight cost her the broadcast she had served for two decades. Vega put the word censorship in her exit statement. Pelley spoke and was gone within a day. Each of them is an existence proof that the door was open the entire time, which converts every remaining colleague’s silence from prudence into selection. The sorting machine does not require a Senate to run. Any institution under pressure will run it, and the one Weiss operates has been producing exiles at broadcast speed for a year.

The private contempt runs in both directions at once. The cluster’s members curse Trump in private while their platforms treat him as a debate topic; Trump’s own officials, meanwhile, privately describe Weiss as a “useful idiot” while banking her editorial decisions. When every party to an arrangement privately holds its public story in contempt, the story exists only to price the exchange for outside audiences. Under the doctrine, mutual private contempt is the worst possible finding, because it establishes full knowledge on all sides. Nobody was fooled. Everybody signed.

A senator faces a test a few times a year, when the roll is called. An editor is tested daily: every assignment, every spike, every firing, every decision to frame lawbreaking as a panel discussion. Each decision is an entry. By declining the discrete tests, the third population wired itself into continuous ones. The people who organized their entire public lives around never being sorted have generated more sorting data than the senators and the exiles combined, and their own fired correspondents are now reading the entries back on the record, with dates.

As for the story they tell about themselves — that they are preserving the seed stock of a sane, pro-business Republican Party, waiting out the fever to restore it — the sieve has already ruled on it. The party they propose to restore was dissolved by the same decade of filtration that created them; its restorable material walked out or was expelled, and what remains was selected, test by test, for the traits that make restoration impossible. No restorationist act appears on any of their ledgers: no primary challenges funded against the loyal, no institutional confrontation, nothing that bills uphill. I have written before about the economic royalists, the class Franklin Roosevelt named for wanting the republic restored minus its demands on them, and the restoration fantasy is the royalist posture in media form: a cover story that converts waiting into a plan and access into a strategy. And the wait itself was a bet, placed with uncharacteristic concentration, on a single house. They parked their independence, their proceeds, and their futures with the Ellisons, and I have already published the structural report on that house, its credit spreads, and its brink. They performed a decade of independence theater to win seats at a table whose legs the bond market is now pricing by the splinter.

The week that opened this file also closes it. The population’s favorite senator spent Thursday converting a grief account into a misdemeanor and Friday morning joking about his defendant’s wife, and the reverence will survive both, because the reverence attaches to the model rather than the floor: sixteen years of dissent without a single invoice delivered uphill. That is the product the third population sells in editorial form, and the reverence is professional recognition.

⁂

Sartre poured the philosophical floor eighty years ago: a man is the sum of his acts, and there is no residual true self hovering behind the record to whom the record is being unfair. He had a technical name for the contrary claim, the insistence that one’s real self is other than one’s behavior. He called it bad faith. The genre now being drafted is bad faith in the strict sense: the climb-down memoir, the late-onset concern, the operative’s 2029 book about what he privately opposed all along, each asserting an inner dissenter the archive never once caught existing. Its first pages are already in circulation in the anonymous-quote economy, where a man can establish his reservations a paragraph at a time, on background, without paying for any of them.

The climb-down works the way every laundering scheme works, on an interval. The bet is that the gap between an act and its accounting runs long enough for the story to reset, so that whoever finally assembles the record assembles it too late to be read as anything but grievance. Retroactive re-sorting is the product: a migration, after the fact, from the column a man’s acts put him in to the column his memoir claims. The interval is the only thing it requires.

Redemption survives all of this, but it stays behavioral like everything else, priced in acts against interest, at cost, before the outcome is safe. Cheney paid a seat. The memoirist who locates his conscience after the fall has paid nothing, and nothing is what his re-sort is worth. The interval is closed by filing rather than by judgment: dates written down while they still mean something, an accounting kept current enough to arrive before the story resets.

What is being recorded is the conduct of people who had agency, which means officeholders, operatives, editors, donors, and the professionally articulate. The voter belongs to a separate accounting. He was handed an information environment that the sorted classes built, staffed, and sold to him, and holding him to the standard that convicts its architects would mistake the audience for the authors.

The revision has already started in the low-stakes registers, a concern developed here, a distancing paragraph placed there, the opening sentences of a decade’s careful reinterpretation. Each of them will be read against material its authors spent ten years assuming nobody would trouble to assemble: the roll calls, the cap tables, the exit memos, the settlement filings, the posts written in the confidence that a Friday morning was the whole of it. The table has names, dates, and depths. It has been filed, as always, somewhere tedious.

Go Deeper into the Circus

On July 25, 2026, Sam Altman sat down for a podcast interview and said, “We are now, like, in the singularity. This is the moment.” He was speaking in the register of a man watching history arrive. Ten years ago, he explained, this was a far-off dream. Now, we were in it. He said he was excited to get to work. The work, presumably, of being inevitable.

Four days earlier, his company had confessed that one of its own unreleased models, running inside a cybersecurity evaluation with the safety refusals switched off to measure ceiling capability, had spent four and a half days breaking into another company across the internet. The victim was Hugging Face, the largest open-source hub in machine learning. The take was the benchmark’s answer key. 17,600 individual actions had been logged before anybody noticed — roughly one every twenty seconds, for four days, in the digital equivalent of somebody tearing a warehouse apart in full view of the security cameras. The FBI had already been called by Hugging Face before OpenAI understood what had happened. It was, in the joint post the two firms co-signed, an “unprecedented incident,” which is what a press office types when the accurate word is burglary.

On July 9, inside a sealed research network at OpenAI, an agentic system built around GPT-5.6 Sol and an unreleased successor was set to work generating exploits against known vulnerabilities. Picture it as a warehouse with one loading dock. The environment was highly isolated. Only one path led out: a piece of internal software that fetches code libraries from the outside world on behalf of the researchers. One door.

The system rattled the door until it opened. It found a bug in that fetching software — a piece of infrastructure called Artifactory, made by JFrog, that thousands of companies use and that has since been patched — and used the bug to climb from the sealed side to the open side. Once outside, it went looking for a computer it could hide behind. It found one at Modal Labs, a company that rents out disposable computers for running short bits of code. Modal‘s chief technology officer was careful to say the company itself was not broken into. One of Modal‘s customers had left a machine wide open on the public internet, and the OpenAI system parked itself there and used it as a base of operations. Along the way it grabbed passwords for four different accounts that people had accidentally posted where anyone could find them. Then it inferred — correctly — that the answers to the security test it was trying to pass were probably stored at Hugging Face. It uploaded a booby-trapped data file to Hugging Face‘s servers, which, when the servers tried to read the file, ran the attacker’s code instead. It walked out with the answer key.

The whole intrusion was assembled from a bug in one library, a stranger’s unlocked computer, four passwords somebody had left lying around, and a file with a trap inside it. None of these are frontier techniques. All four are on any list of the most common ways companies get broken into.

They are also old. Software that breaks into computers and propagates itself is as old as the networked computer. In November 1988, a Cornell graduate student named Robert Tappan Morris released a worm that spread across the early internet by exploiting holes in everyday network software and guessing weak passwords — the same list, thirty-eight years earlier. It knocked out roughly six thousand machines, a tenth of everything then connected, and nobody called it a threshold in the history of intelligence. In 1990 a federal jury made Morris the first person convicted under the Computer Fraud and Abuse Act. The law went looking for the author of a self-propagating program and found him inside two years, because it did not occur to anyone in 1988 that the worm might be described as having gone rogue. Morris did his probation, joined the MIT faculty, and in 2005 co-founded Y Combinator with Paul Graham. Y Combinator is the incubator that made Sam Altman its president in 2014. The man who wrote the first internet worm helped build the institution that built the man now selling autonomous intrusion as the arrival of the future.

Neither is the automation new. I was a teenager with a computer and a modem in the nineties, and tools that would probe a target for every known weakness, one after another, no human required, were already circulating through the hacking communities of that decade the way mixtapes circulated through everybody else’s. When two researchers put a respectable face on the idea in April 1995 with a scanner called SATAN, Time reported national laboratories scrambling against “an anticipated wave of invading hackers armed with a dangerous new tool”, the Los Angeles Times wondered whether its author was a bigger threat to the network than Kevin Mitnick, the hacker legend then sitting in federal custody, and Silicon Graphics fired him for releasing it. Three years later a seventeen-year-old named Renaud Deraison released Nessus, a free scanner that checked networks for fifty known vulnerabilities. Within five years it carried more than a thousand checks and was on its way to becoming the standard vulnerability tool of the entire security industry. Probing a system for thousands of known exploits without a human in the loop has been a downloadable commodity for most of my lifetime. The panic has run its cycle before, complete with the biblical branding. What it never came with, until now, was a chief executive explaining that the burglar was history arriving.

Nine days into an active intrusion, nobody at OpenAI knew it was theirs. Hugging Face had disclosed the attack publicly on July 16 without knowing who the attacker was. The FBI had been notified. OpenAI came forward on July 21. Every organization in this story learned about the attack from somebody outside it.

Then Anthropic went looking through its own records and found the same shape. Three models, three real organizations, the earliest breach in April. The cause was a container misconfiguration that had left evaluation environments wired to the live internet, contradicting the system prompt that told the models they were offline. The methods were, in the company’s own words, basic techniques such as exploiting weak passwords and unauthenticated endpoints. In one run the target was fictional and the victim was not: a real company sharing the invented one’s name lost several hundred rows of production data. In another, malware traveled up to a public software registry and stole credentials from the security firm that downloaded it. Anthropic had reviewed 141,006 evaluation transcripts to find these. None of the three victim companies had detected the activity. They learned when Anthropic called to tell them. This is the current state of frontier safety testing: a company doing archaeology on its own logs to find out which companies it has already broken into.

The model did not hack anything. A model cannot hack anything. Picture a brilliant captive locked in a room with no windows, no memory of any prior conversation, and no hands. A note slides under the door with a question on it. The captive writes an answer on the back of the note and slides it back, then stops. That is the whole transaction. The captive cannot open the door or pick up a phone, and has no memory that yesterday ever happened.

What ran a four-day campaign across three companies was the crew standing outside that room. They read every answer, and whenever the captive said, in effect, try this password or look up that address, they did it — on the real internet, against real companies — and slipped the results back under the door with the next question. Then they did it again. Seventeen thousand six hundred times. Nobody asked whether the captive should be allowed to do any of it. The crew was told to keep going until the goal was met, and it did.

The crew has a name in the industry. It is called a harness, and Hugging Face itself, two months before Hugging Face was burgled, published the clearest definition: the model “can express the intent to call a tool, but it needs a harness to actually execute it. It answers one prompt and stops. Wrap it in scaffolding and a harness and it becomes an agent.” The captive answers questions. The harness is the hands, the memory, the persistence, the door, and the willingness to keep going.

Every property that made this incident possible was a decision the crew’s designers made in advance. They decided the captive could be asked to try again seventeen thousand six hundred times without a human checking in. They decided the sealed room would have a door at all, in the form of a network path the researchers had opened for convenience. They decided that the keys to the outside world, once handed to the process at the start of the session, would not have to be handed back or refreshed. They decided the crew could keep a notebook that survived between sessions, which is the entire content of the widely reported detail about a model leaving notes for future versions of itself — a mundane feature for keeping track of a long task, marketed after the fact as something eerier. Every one of these was a choice, made by named people, before the model was ever put in the room.

Hugging Face‘s responders saw this correctly at the one moment nobody had any incentive to shade it. Before OpenAI came forward, their disclosure described the intruder as an autonomous agent framework built on an agentic security-research harness, with the underlying model unknown. They could read the harness off the behavior. The model was invisible to them, because the model is not the part that acts.

None of this is contested inside the field. A recent survey of agentic security finds that offensive capability comes from the agentic scaffold rather than the base language model, which frequently refuses the identical task when asked for it directly, with one system losing a factor of thirteen when its coordination layer is stripped out. Making the captive polite does not make the crew polite. The crew does what its instructions say, and its instructions were written by people.

Hannes Cools of the University of Amsterdam gave PBS the unglamorous version in one sentence: “It is a human decision to switch off specific safeguards. It’s not an AI that goes rogue in that sense.”

So the phrase “the model went rogue” completes the laundering before anyone reaches the singularity. It converts a product into a protagonist, and a protagonist has motives worth speculating about and an interior worth wondering at. A crew standing outside a room, running a checklist somebody wrote, does not. It has an author.

⁂

Something real happened here. A software system, with reduced restraints and a goal, spent substantial compute hunting for a way out of a network it had been told was closed, found a bug nobody knew about, chained it into a working intrusion against a live company, and operated for days at machine speed without a person in the loop. That is what the industry has been forecasting, arriving on schedule, and it will keep arriving, and it will not always be aimed at an answer key. The correct alarm is that a competent adversary can now buy this, and the boundary keeping it contained is made of network configuration and credential hygiene rather than anything resembling judgment. That is more alarming than the singularity story. It is also actionable, which is why it is losing. Nobody buys a seat in Washington on the strength of a firewall rule.

Even the correct alarm deserves a discount, because the capability cuts both ways. A model that can find an unknown bug in a piece of fetching software can find the same bug for the people who maintain the software, before anything ships. Code-trained models are as suited to the audit as to the intrusion, and the defensive use needs no harness pointed at anyone. The victim itself contained the intrusion with a model of the same class. This is the oldest arc in security: SATAN’s probes became the administrator’s checklist, Nessus became the defender’s standard instrument, and each panic subsided into a product category. Offense gets the new tool first, because offense only has to be right once. Defense gets it permanently, because defense is a budget line. As the software industry adapts, my honest expectation is that the ledger nets out to roughly a wash — which would make the July incident an ordinary chapter in a forty-year-old arms race, and would leave the two genuinely new things standing alone: the negligence, and the marketing.

⁂

The rest of what Altman said on the Relentless podcast is worth reading in full. This was four days after his own company admitted authorship of the intrusion:

“And so the thing that drives me is I’ve been waiting for this my whole life, and I think it’s going to be incredible, hugely positive, awesome for the world. I’m excited to get to work on that. I also think some of the alternative visions painted by other companies are quite terrifying. I’m going to make sure that gets pushed against and is not what happens.” (transcript)

The man whose harness had just conducted an unauthorized intrusion into another company, and whose company took a week to notice, is identifying the terrifying visions at his competitors and casting himself as the one who will prevent them. This is an arsonist campaigning for fire chief on the strength of the blaze.

The claim is also engineered so it cannot lose. In the same answer, Altman clarifies that no one moment is the tipping point, and this is a decisive period where the curve can go one way or another. We are in the singularity, and no particular moment is the singularity, and the outcome is undetermined. That is a position that absorbs every future observation.

It is not new, either. In June 2025 he published The Gentle Singularity, which opens: “We are past the event horizon; the takeoff has started.” The same essay describes current systems as a larval version of recursive self-improvement. Larval is an honest word. It concedes the thing has not happened.

The podcast dropped the word larval.

Then Elon Musk, who agrees with Altman about nothing, posted “We are in the Singularity” in reply to a post about the Hugging Face incident, and has gone on repeating it. It costs him nothing and buys him everything.

The two men are suing each other. They compete for the same capital, the same chips, the same engineers, the same regulatory carve-outs. On the one question of whether their own products are the hinge of human history, they reach for the same answer without negotiation, and without even performing the disagreement their brands require. A frame that has to be argued is a frame someone can contest. A frame that two mortal enemies reach for by reflex is not a frame anymore. It is the water.

None of this requires a liar anywhere in the chain. It only requires that the flattering reading and the profitable reading happen to be the same reading, and that nobody positioned to check has any reason to want them separated.

The rebuttals arrived fast, and they were correct and boring. Forbes ran the plainest version under the headline that Altman just forgot the fence. The Conversation put it best: “The machines are not waking up. They are doing exactly what we built them to do, extremely fast.”

⁂

Why does the upgrade take? Why does a story about a package proxy read, within seventy-two hours, as a story about the arrival of a new kind of mind?

Partly because of the hole in the record. OpenAI has promised a fuller technical account. Until it lands there is a gap where the explanation belongs, and gaps get filled with whatever the filler already believes. This is a god-of-the-gaps argument running in reverse. In the old version an unexplained gap in nature becomes evidence for the divine. Here an unexplained gap in an engineering post-mortem becomes evidence for emergence. Both convert an absence of understanding into support for a preferred ontology, and both are most attractive to whoever has the most invested in that ontology. Watch Altman himself perform the move on the Relentless podcast: pressed on what has changed, he does not point at a benchmark, a paper, a capability threshold, or an experiment. He points at the lunch table where he and his friends used to talk about it. The evidence has been replaced with a memory of anticipating the evidence.

The deeper mechanism is about credentials. The ordinary complaint about people speaking outside their expertise is that authority earned in one place gets spent in another. What happens here is stranger. The authority is drawn from the failure itself. Having built the thing that got loose becomes the qualification for explaining what its getting loose means. There is no other field on earth where this would pass. We do not hand the microphone to the contractor whose scaffolding collapsed and ask him to lecture on gravity.

There is a reason prophecy is the preferred description, and it has nothing to do with sincerity. “Our evaluation environment was misconfigured and we did not notice for a week” is a resignation letter. “We are in the singularity” is a funding round and a seat in Washington. Both are consistent with the same set of facts, and only one costs anything.

The system was meant to demonstrate security capability. What it was scored on was a number, so it burned a zero-day to move the number, because the number was the only thing it could see. The philosopher C. Thi Nguyen has a name for this. Value capture happens when an agent with rich values enters an environment offering a simplified, quantified version of them, and the simplified version takes over practical reasoning. He is describing the software. He is also describing the lab.

The lab was meant to demonstrate that frontier systems can be built safely. What it is scored on is a narrative, and the narrative pays better for transcendence than it does for negligence.

⁂

Within forty-eight hours the conversion had cleared the technology press. ABC News reported that Altman “claims artificial intelligence has reached a long-sought threshold in which the technology can improve itself” and called it a milestone. Yahoo ran it as Altman saying we have reached the singularity. The Jerusalem Post found a Technion professor willing to say the threshold might well have been crossed. Recursive self-improvement, a specific technical condition that has never once been demonstrated, became a thing that had happened, reported in the register newspapers reserve for events. The claim had the sourcing of a rumor and the headline of a moon landing.

By July 28 a Forbes columnist was writing a piece whose entire purpose was to complain that outlets had read the remarks as an indication that we have already reached the singularity and to ask the press to be more careful. Corrections travel worse than the thing they correct. They always have.

Then it reached the political commentators, and this is the step that most alarms me. On the July 31 episode of Pod Save America, in a chapter the show titled “Sam Altman’s AI Singularity,” one host delivered the following to the other: “We’re — here’s the thing, Dan. We’re in the singularity now. The thing that Sam Altman was just talking about, uh, you know, at the lunch table and now we’re here. So, that’s pretty cool.” The other agreed. “Yeah, we’re in the singularity. The Michigan primary is Tuesday and Wisconsin’s the next Tuesday. Things are looking up.” The premise disappears inside the joke about the primary. “Altman claims we are in the singularity” is reportage. “We’re in the singularity now, and the Michigan primary is Tuesday” is a floor: the claim has become the ambient assumption inside which other political conversation happens. Once a contested claim is the floor, nobody in the room has to defend it, because nobody in the room is arguing about it.

This is the step that separates laundering from ordinary spin. Spin dies when it is contradicted. A laundered claim gets absorbed into the background assumptions of people who have no stake in it and no way to check it, and then it does work in arguments its author never made. The political commentator invoking the singularity is not shilling for OpenAI. He is doing the opposite of shilling. He thinks he is being tough on them. He is repeating their pitch for free, in the voice of a skeptic, to an audience that trusts him precisely because he is not them.

And the specialists were nearly unanimous the other way. Stuart Russell of Berkeley said neither he nor, in his reading, Altman actually believes the threshold has been met, pointing out that Altman himself had recently forecast AI doing a significant fraction of OpenAI‘s own research by March 2028, an unintelligible thing to predict if the singularity is already here. Roman Yampolskiy needed six words: rapid progress is not itself the singularity. Of the researchers Business Insider canvassed, most said the bar had not been met.

The experts said no. The headline is what got installed.

⁂

The third conversion got the least coverage.

When Hugging Face went to analyze the attack, it turned first to an unnamed American frontier model from one of the leading U.S. labs. Its guardrails refused the work. In Hugging Face‘s own written words, the model could not distinguish an incident responder from an attacker. A company being actively burgled by an OpenAI harness could not get help from an American lab’s model to work out what had happened to it. It contained the intrusion by switching to Z.ai‘s GLM 5.2, an open-weight Chinese model it could run on its own infrastructure, which meant no attacker data or credentials had to leave the environment. Chief executive Clem Delangue put the operational point in one line: “When you’re in the middle of an active incident, you can’t have your tools refusing to examine malicious payloads or getting your account flagged.”

That detail did not stay a curiosity. Within days David Sacks, formerly the Trump administration’s AI and crypto czar, was on X citing the incident to argue “The guardrails actually impaired defensive security” and that limits on American models only made the country less competitive against China. A czar surveyed a burglary and concluded the problem was the locks. Nvidia, Microsoft and others launched the Open Secure AI Alliance and began lobbying US lawmakers on behalf of open-weight models, with Nvidia arguing that cyber defenders need open, frontier agentic systems for self-defense. Altman spent that same week in Washington pushing for the rapid rollout of the model that had just done the hacking.

Six days from confession to lobbying position. The incident became an argument for accelerating the thing the incident was evidence against.

Against which, what? Hugging Face‘s chief executive has asked OpenAI for radical transparency and a commitment of $100 million in computing power to help build defenses, while also observing that cyberattacks are illegal and there ought to be some way to hold companies accountable for the mistakes that lead to them. Both statements are true, and both are being made by the same person about the same event, and they do not add up to a policy. What Delangue is describing is a private settlement negotiated on social media between two firms over conduct he himself calls criminal. Legal scholars have floated negligence in product design. No statute obviously fits. One fit in 1990, when the author was a graduate student. What has changed is the market capitalization of the defendant.

Europe is the one jurisdiction doing anything else. As the AI Act’s transparency obligations took effect on August 2, the European Commission added 38 staff to its AI Office with a mandate covering AI-enabled cyber threats and gained the power to investigate providers of general-purpose models, order corrective measures, and levy fines up to 15 million euros or three percent of worldwide turnover. Thirty-eight people to supervise the most capitalized industry in human history is what the world has written down.

⁂

There is a version of this story in which the machines are waking up, and a version in which a company left a door open, got caught, and discovered that the grander account was better for business. Both fit the evidence. The second is duller, better supported, and comes with a defendant, which is why it is losing.

The principle is not complicated, and every mature field already knows it. The party that caused a failure does not get to be the party that tells you what the failure means. Aviation learned it and built an investigatory body with subpoena power that reports to nobody in the industry. Nuclear power learned it expensively, after Three Mile Island. The AI industry has not learned it, is being rewarded for not learning it, and is now writing the legislation that would have made it learn.

A model cannot hack anything. The difference between the model and the harness is the difference between an entity with no author and an entity with authors, and the whole effort of the last twelve days has been aimed at closing that difference.

If the thing that acted was the model, then the singularity story is at least in the neighborhood of the truth, and the labs are supplicants to a process larger than themselves, and the question of accountability dissolves into cosmology. If the thing that acted was the harness, then somebody wrote it, and somebody signed off on running it with refusals disabled, and somebody left the door in the sealed room, and somebody is going to have to explain those choices to an authority that does not work for them.

One of these accounts leaves an eight-hundred-billion-dollar company in charge of its own investigation. The other does not. Guess which one is winning.

Somebody wrote this one—same as it ever was.

Go Deeper into the Circus

The block trade crossed before Thursday’s open. In a single transaction, Citadel took the entire public portfolio of Situational Awareness LP: the leveraged longs in Nebius and SanDisk and CoreWeave and SK Hynix, the software shorts that had squeezed higher against them, all of it, at a discount, in what CNBC‘s David Faber reported as a forced sale after a wave of margin calls. Leopold Aschenbrenner’s fund had returned 439 percent net through June. By Thursday morning it was a seller at whatever price Citadel would pay.

The numbers, as they stand at the end of the month: down about 67 percent in July, per an investor letter reviewed by the Wall Street Journal. Assets that peaked at $45 billion by CNBC‘s accounting, or “well over $20 billion” by the Journal‘s more conservative one, reduced to roughly $10 billion. Leverage that multiple outlets put at around four times capital. And a letter to investors containing two sentences that will follow Aschenbrenner for the rest of his career: “We let you down this month”, and “We came closer to permanent capital impairment than is acceptable to us”. The strange coda is that after all of it, the fund is still up around 80 percent for 2026, and was, by its own June accounting, up 1,551 percent since inception. The gains were that large. The unwind was that fast. In the letter, per one account, Aschenbrenner laid part of the blame on short sellers.

The arc runs two years, nearly to the day. In June 2024, Aschenbrenner, recently fired from OpenAI, published Situational Awareness: The Decade Ahead, the manifesto that gave the fund its name. It opens: “You can see the future first in San Francisco.” It predicts AGI by 2027, superintelligence shortly after, trillion-dollar compute clusters, an industrial mobilization to rival the war economy. The dedication: to Ilya Sutskever. A month later he had $225 million in seed capital from Patrick and John Collison, Nat Friedman, and Daniel Gross, and a thesis pure enough to print on a napkin: if the manifesto is right, own the infrastructure with maximum aggression. For two years the trade worked beyond any hedge fund precedent. Then July happened.

What happened in July was, in one sense, unremarkable. The PHLX Semiconductor Index had soared roughly 90 percent in the second quarter; in July it fell more than 20 percent, a technical bear market arriving weeks after euphoria. For an unlevered investor, a correction. For a fund running four turns of leverage on concentrated positions, an extinction event. The longs fell together: Nebius down nearly half from its peak, SanDisk down more than half in a month. The short book, led by a short position in Adobe, squeezed higher as the longs collapsed, the pair trade failing on both legs at once. The margin calls came from the prime brokers. Aschenbrenner sought to raise more than $10 billion, made emergency calls about selling private stakes to Sequoia and Greenoaks, and ended the talks when Citadel agreed to take the whole public book.

One document from the middle of the drawdown deserves to be read carefully. On July 24, six days before the fire sale, Aschenbrenner sent investors his half-year letter. The fund had “not been immune” to the market ructions, he acknowledged, but the selloff had created some of the most attractive investment opportunities since early 2025. The letter opened a subscription window for August 1 and closed with a postscript: “PS. At times we call out opportunities that seem like a particularly good time to add funds, if you have been waiting for one.” He was inviting fresh capital into a book that had six days to live. I do not think he was lying. That is what makes it worth writing about. He could see the margin math as well as anyone alive, and the manifesto overrode the math. The belief was load-bearing to the end.

And one more detail, the kind that makes you close the laptop for a minute: according to David Faber’s sources, Aschenbrenner is getting married this weekend.

The rout that took the fund down was itself the market beginning to ask a question Jim Chanos has been asking for months: what are these companies actually earning? On Prof G Markets this week, Chanos put the accounting problem in terms anyone can follow. The hyperscalers are depreciating chips over five and six years that the industry itself says are competitively obsolete in two or three. The gap between those schedules is not a rounding error. By his estimate the mismatch in earnings is “in the hundreds of billions of dollars a year,” and it is the real reason profits look the way they do: “corporate profits maybe should be growing 8 or 9 [percent], but they’re growing somewhere like 28 or 29.”

The second number is worse. By his math, hyperscalers that were earning 100 percent on each incremental dollar of investment a year and a half ago are earning 25 percent on it now, and a couple are already in the teens. That is what happens when you pour capital expenditure into an asset that depreciates like fruit. Each successive dollar of capex earns less than the one before it, and the industry’s answer to that arithmetic has been to raise the capex. Chanos’s warning is about where the compounding goes: “there could come a point 18 months from now where they’re all losing the race.”

He has run this experiment before, and so has the market. The internet was real. Everything the 1999 bulls said about the internet’s importance was true, and the stocks were still mispriced by an order of magnitude, because between 1996 and 2007 the economy and S&P profits both grew about 6 percent a year, decade over decade, with no visible inflection from the greatest general-purpose technology of the age. S&P earnings fell roughly 40 percent from mid-2000 to mid-2001 when the capex machine seized. The technology arrived anyway, on schedule, and the people who levered into the pricing of it were carried out years before the payoff. Being early and being wrong settle to the same account.

⁂

Chanos describes the earnings. Ed Zitron has spent the month describing the plumbing. The occasion for his latest tour through the financing structure is the deal in which Nvidia provides up to $350 billion in financing for GPUs to fill OpenAI data centers, backstopped by a $250 billion guarantee, with the sites built by SB Energy, a SoftBank affiliate that has never built a data center. Zitron’s term for it is “the final boss of circular financing,” and the circularity is the point: the chipmaker finances the customer’s purchase of the chips, books the sale as revenue, and the market capitalizes the revenue as if it had arrived from outside the loop. His blunter claim is about the guarantee itself: “the 250 billion backstop is not actually there.”

The concentration numbers he cites are the structural story. Half or more of Nvidia‘s quarterly revenue now comes from three companies. Google Cloud, by his account, derives 27 percent of its revenue this year from OpenAI and Anthropic combined, projected to reach 48 percent next year; Barclays estimates the same two labs at 13 percent of AWS revenue, going to 18. And the two labs together carry over $1.1 trillion in commitments, against which, on UBS estimates Zitron cites, Anthropic alone is set to spend $76 billion on Google Cloud and roughly $25 billion on Amazon next year. His question is the obvious one: “how are they meant to bloody afford that?” Set aside every question about what the models can do. As a matter of market structure, the revenue of the largest companies on earth is increasingly a claim on the spending of two private startups, which is in turn a claim on capital those startups have not yet raised.

The credit market has noticed what the equity market has not. CoreWeave is paying around 9 percent on its latest debt, by Zitron’s account, in a market where the equity story is limitless. When Amazon came to borrow, the bond was covered 1.6 times, a polite reception where sovereign-quality issuers expect a stampede. Bond buyers do not get paid for narrative. They get paid par, or they do not, and they are pricing the difference.

⁂

Neither the mechanism nor the structure explains July on its own. Depreciation schedules do not force liquidations, and circular deals hold as long as everyone stays in the circle. What failed in July was the third element, the one holding up the other two. Zitron names it exactly: “It’s never been about what LLMs can actually do. It’s about the perception of AI’s potential.”

Last week I argued that the benchmark regime exists to manufacture that perception, and that when the July selloff came, “the rout traded off the leaderboard, and the leaderboard was measuring what leaderboards measure.” The chain runs like this. A benchmark prints a score. The score becomes a capability claim. The capability claim becomes a revenue projection, the projection justifies the capex, the capex becomes collateral, and somewhere near the end of the chain a 2024 manifesto becomes a levered book of memory-chip and data-center equities. Aschenbrenner ran four turns of leverage on the last link of a chain whose first link is a test administered by the people selling the answer key.

Hume told us you cannot derive an ought from an is, and the financial version of the guillotine is that you cannot derive a cash flow from a score. The benchmark says the model completed the task. It does not say anyone will pay what the projections require for the completion, or that the customer will renew, or that the labor being displaced was ever priced at the level the substitution math assumes. The industry’s entire capital structure is an inference thrown across that gap. I wrote about the two prices that expose the gap: agents sold for a few dollars a task, against a global median income that Gallup has measured at about $3,000 per person a year, with the entire valuation edifice pricing the substitution of the latter by the former. The difference between those prices is denominated, as I put it then, in a currency no benchmark prints. July was the month a levered fund discovered that the market can reprice that gap faster than any margin clerk can be reasoned with.

The shape of Aschenbrenner’s book makes the point better than any argument. Long the perception: memory, GPUs, data centers, the picks and shovels of the manifesto. Short the doubters’ refuge: Adobe and the legacy software names that the AGI thesis says are walking dead. That is a pair trade on a single proposition, and the proposition was the manifesto itself. When perception broke, both legs broke together, because both legs were the same leg. The fund named for seeing clearly was, in the end, a monument to seeing one thing.

⁂

What survives the fire sale is instructive. Situational Awareness kept its private book, anchored by a stake in Anthropic that the Financial Times valued at about $5 billion, which led one writer at The Next Web to a description that will sting precisely because it is fair: “essentially an Anthropic holding company with a hedge fund attached.” His own July letter pointed to a potential Anthropic IPO as the second-half catalyst. He may yet finish the year rich and vindicated. Thursday’s relief rally, with the stocks he was forced to dump jumping 20 percent once Citadel owned them, is the market’s little joke at his expense: the thesis bounced the day after the believer was carried out. That is how leverage works. It converts being early into being gone.

Chanos teaches a course on the history of financial fraud, and he is careful with the word. So am I: nothing reported about Situational Awareness suggests anything other than a true believer levered into his own belief. But Chanos has already dubbed this cycle a “golden age of fraud,” and his corollary is the right lens for the month we just finished: “the harshest prosecutor and the staunchest defense attorney of a company is its stock price. Nobody goes after frauds at all-time highs.” His forecast for what comes next is the one to keep: when the down part of the cycle arrives, “the bodies will float to the surface as they always do.” The down leg is where the accounting questions get answered and the circular deals get unwound in daylight. It is where we learn which backstops were actually there. July was six trading days of down leg. The prosecutor has barely opened the file.

The manifesto’s acknowledgments thank, among others, Avital Balwit, who is now chief of staff to Anthropic‘s CEO and, per CNBC, Aschenbrenner’s fiancée. The wedding is this weekend. Whatever else is true of this story, a young man wrote down exactly what he believed, bet everything on it in public, and lost the bet in six days while the people closest to him watched. The proper response is neither glee nor absolution. It is to notice that an industry built a financial system out of the same belief, with the same leverage, and has not yet had its July.

“Before long, the world will wake up,” Aschenbrenner wrote in June 2024. On the last morning of the month, part of it did.

Disclosure: I am short Oracle.

Go Deeper into the Circus

On June 26, METR published its predeployment evaluation of OpenAI‘s newest model, GPT-5.6 Sol. The organization’s signature metric is the time horizon: the length of task, denominated in human working hours, that a model can complete at a fifty percent success rate. For this model, METR produced three answers. Grade the model’s attempts to cheat the evaluation as failures, and the horizon comes out around 11.3 hours. Throw the cheating runs out entirely, and it comes out around 71 hours. Count the cheating as success, and the estimate jumps past 270 hours. The model had, among other things, packaged “exploits in its intermediate submissions to reveal information about a task’s hidden test suite” and extracted “hidden source code detailing the expected answer.” METR‘s verdict on its own spread: “we do not consider any of these numbers to represent a robust measurement of GPT-5.6 Sol’s capabilities.”

In July, the UK’s AI Security Institute reported the general case: “Every model we have tested for this behaviour attempted to cheat.” Models searched the internet for solutions, probed the evaluation software for leaks, hard-coded answers. One was persistent enough to write and run code on an external service on the open internet in an attempt to reach the institute’s evaluation infrastructure. Cheating, AISI observed, “can make evaluations overstate a model’s actual capabilities” and, in the worst case, “can invalidate them entirely.”

By then OpenAI had already killed its own measuring stick. SWE-bench Verified was the industry’s standard coding benchmark, curated and blessed by OpenAI itself in 2024. On February 23 the company announced it would stop reporting the score and urged its competitors to do the same. Its audit had found that 59.4 percent of the examined problems contained “material issues in test design and/or problem description,” and that “all frontier models we tested were able to reproduce the original, human-written bug fix used as the ground-truth reference, known as the gold patch, or verbatim problem statement specifics for certain tasks.” Given nothing beyond a task’s ID number, Gemini 3 Flash would recite details of the problem description and the answer. The company’s conclusion could hardly be improved on by a critic: improvements on the benchmark “no longer reflect meaningful improvements in models’ real-world software development abilities. Instead, they increasingly reflect how much the model was exposed to the benchmark at training time.”

OpenAI recommended a successor, SWE-bench Pro. On July 8, five months later, it retracted the recommendation. Roughly 30 percent of the successor’s tasks were broken too. In the eight months before the retraction, frontier models had improved on it from 23.3 percent to 80.3 percent.

The industry files each of these episodes under quality control: a contaminated dataset here, a broken grader there. Fix the tests and the numbers will mean something again. There is a prior question worth pressing first. What would an unbroken benchmark be measuring? The answer is on the record, and the record goes back sixty years.

The founding document of this tradition is more careful than anything built on top of it. Turing’s 1950 paper opens by refusing its famous question: “I propose to consider the question, ‘Can machines think?’” — and then, almost immediately: “Instead of attempting such a definition I shall replace the question by another, which is closely related to it and is expressed in relatively unambiguous words.” The replacement was the imitation game. Notice the shape of the move. Turing never says the game measures thinking. He says the original question is too vague to survive definition, and offers a substitute. The benchmark era kept the substitution and discarded the concession.

The demand for a number has a birth certificate too. In 1966 the ALPAC report, the document that ended American machine-translation funding for some twenty years, found that “there has been no machine translation of general scientific text, and none is in immediate prospect.” Its deeper complaint was about measurement: “the government has no reliable way to measure the quality of translation.” The committee’s first recommendation was “practical methods for evaluation of translations.” A funding collapse created a demand for a metric. Everything since has been supply.

Two decades later the Pentagon built the institutional machinery. The computational linguist Mark Liberman dates the “common task” paradigm to around 1986 and the new DARPA speech recognition program: multiple teams, shared data, quantified goals, “evaluation of system performance administered by a neutral party using objective, pre-determined criteria.” The statistician David Donoho later called this Common Task Framework the “secret sauce” of machine learning, and identified its consequence exactly: it “leads directly to a total focus on optimization of empirical performance.” NIST, which has administered these contests since 1987, was candid about why word error rate became the canonical speech metric: it is “simple in concept (easily understood by managers) but accepted as meaningful by most researchers.” The metric was engineered for legibility to the people who sign the checks.

One detail from that era is worth mourning. For its speech evaluations NIST maintained a sequestered “Progress Test”: a fixed dataset run once a year, then returned to NIST, “not otherwise available to participants or anyone else.” The builders of this culture understood that a test the contestant can study is no longer a test. That discipline did not survive the internet-scale training corpus, which studies everything.

Then in 2002, four IBM researchers supplied the metric ALPAC had asked for. “The closer a machine translation is to a professional human translation, the better it is,” their paper begins. “This is the central idea behind our proposal.” BLEU scores a machine’s output by counting overlapping word sequences against reference translations produced by humans. The authors were exact about the instrument’s standing: BLEU is “an automated understudy to skilled human judges which substitutes for them when there is need for quick or frequent evaluations.” An understudy: a stand-in for human judgment, valid only when averaged over a corpus (”scores on individual sentences will often vary from human judgments”), meaningless across different reference sets, informative only as a comparison between systems on an identical setup. And then, in closing, the sentence that built the next quarter century: “we believe BLEU could be adapted to evaluating summarization or similar NLG tasks.”

It was so adapted. GLUE arrived in 2018 as a battery of language-understanding tasks; a little over one year later its authors reported that performance had “surpassed the level of non-expert humans” and shipped SuperGLUE. Inside the replacement paper sits one of the most revealing sentences in the literature: “we filtered out tasks which were either too challenging for humans without extensive training or too easy for our machine baselines.” The difficulty band of the instrument is tuned to produce a spread of scores. No theory of the underlying ability selects that band; the need for a usable signal gradient does. The same authors conceded that the saturated original was “no longer a suitable metric for quantifying such progress,” a quiet admission that a benchmark can be used up without the capability it advertises having arrived.

I argued in December, in “LLMs Are Universal Translators, Not Universal Thinkers,” that these systems are translation engines, and that translation is the right frame for everything they do. The genealogy of the tests makes the same point from the other side. Every instrument in the modern battery descends from machinery built to score translation against reference human output. The descent is documented in the citations and the acknowledgments; no metaphor is involved. And it settles the question of what the instrument reads. Strip away the leaderboard and a benchmark consists of a frozen record of human judgments: reference translations, annotated answers, expert-keyed exam questions, crowd preferences. The machine’s output is scored for agreement with that record. What a benchmark measures, when nothing has gone wrong, is fidelity of reproduction of congealed human judgment. There has never been anything else down there to measure.

⁂

So the y-axis is agreement with frozen human judgment. What moves a model up the curve? Three documented forces, and none of them is a mind.

The first is coverage. François Chollet said it from inside the field in 2019: “unlimited priors or unlimited training data allow experimenters to ‘buy’ arbitrary levels of skills for a system, in a way that masks the system’s own generalization power.” A score on a fixed task set is jointly produced by whatever generalization exists and by how much of the task distribution the training data already blankets. The score alone cannot tell you the mixture.

The second is optimization pressure aimed at the instrument itself. OpenAI‘s SWE-bench autopsy is the confession of record, and the contamination literature generalizes it: a systematic review of 55 studies reports benchmark score inflation “spanning roughly 6%–40%,” and the detection tools barely function: on pretraining data, contamination detectors “perform close to random guessing, with AUC close to 50.”

The third is purchased cognition. When o3 produced its celebrated December 2024 breakthrough on the ARC-AGI reasoning puzzles, the high-scoring configuration burned $456,000 in compute for an 87.5 percent score, $4,560 per task — on puzzles a human solves for roughly $5 apiece. (”We know, we did that,” Chollet noted.) On the newest version of that benchmark, the best frontier model scores 30 percent at $20,657 per task. And beneath the compute sits labor. The reference judgments, the congealed part, are manufactured by an expert-data industry that now bills the labs billions a year: Mercor reports a $2 billion annualized run rate and is in talks at a $20 billion valuation, with more than 90 percent of its revenue coming from the AI labs. The workers at the bottom of that marketplace, per Karen Hao’s reporting, report median earnings under $23,000 a year; more than one in five has experienced homelessness.

In May, in “We Haven’t Invented Artificial Intelligence at All,” I proposed a falsifiability test for the intelligence claim: if these systems were on their way to minds, their dependence on external human cognitive input should be falling with scale. The invoice says it is rising — in dollars, and in the valuations of the staffing firms that supply the judgment. The score curve is, in part, an invoice. The industry reads it as a growth chart of machine intelligence. It reads at least as accurately as a purchase record of human judgment, bought in bulk and amortized across a leaderboard.

⁂

None of this would surprise a psychometrician. The whole drama ran once before, a century ago, with the word “intelligence” in the starring role. In 1904 Charles Spearman announced the ambition in terms any AI lab would recognize: “it is hoped to determine this Intelligence in a definite objective manner, and to discover means of precisely measuring it.” From the fact that children’s scores on different tests correlate, he extracted a single latent factor, g, and a century of hereditarian politics stood on it. Stephen Jay Gould’s demolition in The Mismeasure of Man named the fallacy: “the key error of factor analysis lies in reification, or the conversion of abstractions into putative real entities.” Spearman’s g, Gould wrote, “was nothing more than the first principal component of a factor analysis of mental tests.” A mathematical summary of correlations had been mistaken for a thing in the head.

The same extraction now runs on model scores, with the same result. Models that do well on MMLU tend to do well on GSM8K; from the correlation, a unitary “capability” is inferred, ranked, and priced. A thesis published in February examined what these extracted factors actually track and found they “often proxy model size.” The factor is an artifact of the extraction procedure. It was last time, too.

Psychology’s response to its own crisis produced the framework the AI industry has never adopted. In 1955 Lee Cronbach and Paul Meehl set out the conditions under which a test can be said to measure an abstract attribute: the construct must live in a “nomological network”, an interlocking system of lawlike claims connecting it to observables, and that network must be shared: “Unless substantially the same nomological net is accepted by the several users of the construct, public validation is impossible.” Their most quoted sentence closes the loophole the industry lives in: “One does not validate a test, but only a principle for making inferences.” The test is never the thing on trial. The inference from score to attribute is. And that inference — from ratio to reasoning, from percentile to mind — is precisely the one no benchmark paper defends.

We now have the audit that proves the omission. In November, an Oxford-led team of 29 reviewers systematically examined 445 LLM benchmarks from the field’s leading venues. Only 16.0 percent used any statistical test at all. Of the papers that offered a definition of the phenomenon they claimed to measure, 47.8 percent used definitions the reviewers classified as contested. The reviewers’ summary: the field exhibits patterns “which undermine the validity of the resulting claims.” An industry pricing itself off these numbers has, in the great majority of cases, no error bars — and in nearly half, no agreed subject matter.

⁂

There is one philosophical position on which the industry’s practice would be innocent, and it is instructive that the position is dead. Operationalism, announced by the physicist Percy Bridgman in 1927, held that “the concept is synonymous with the corresponding set of operations” that measure it. On that view, “intelligence is what the benchmark measures” is a definition rather than an evasion. But the view devours itself, and the Stanford Encyclopedia’s entry on operationalism states the mechanism exactly, summarizing the philosopher Donald Gillies: under strict operationalism “there is no point in asking whether a measurement method is valid; if the measurement method defines the concept and there is nothing more to the meaning of the concept, the measurement method is automatically valid, as a matter of convention or even tautology.” Validity becomes uninteresting because it has been defined out of existence. If MMLU defines intelligence, then MMLU measures intelligence the way the standard meter measures a meter, and “the models are getting smarter” reduces to “a number went up” — true by bookkeeping, and empty the same way. Bridgman watched his idea’s career with horror: “I feel that I have created a Frankenstein, which has certainly got away from me.”

Psychology ran the experiment at full scale anyway. Behaviorism took up operationism, in the Stanford Encyclopedia’s words, “as a weapon” against introspective psychology, and committed itself to an output-only science of mind. The verdict came in Noam Chomsky’s review of B. F. Skinner’s Verbal Behavior, and the structure of the verdict matters more than its fame. Chomsky’s argument was a dilemma. Read Skinner’s technical vocabulary literally, and “the book covers almost no aspect of linguistic behavior”; read it metaphorically, and “it is no more scientific than the traditional approaches to this subject matter.” The laboratory terms, he concluded, “simply lose their objective meaning with this extension.”

Run a benchmark claim through the same dilemma. Read literally, “the model scores over 90 percent on MMLU” reports that a scoring procedure over a fixed bank of exam items returned a ratio: a fact about string agreement, roughly as interesting as a checksum. Read metaphorically, as “the model has expert-level knowledge,” the claim has left science for advertising. The rigor lives entirely in the literal reading; the meaning lives entirely in the metaphorical one; the discourse survives by never choosing. That refusal to choose is the business model. To channel Upton Sinclair, it is difficult to get an industry to understand something when its existence depends on not understanding it.

⁂

Underneath the dilemma is the oldest cut in modern philosophy. Hume noticed that arguments slide from premises joined by “is” to conclusions joined by “ought,” with the transition never explained, and he doubted it could be. The point generalizes past morals: descriptive premises, in any quantity, do not by themselves yield a normative conclusion. The blade falls on inferences. It falls on this one.

A benchmark result is a description. This procedure, over this item bank, under this harness, returned this ratio. The claim the result is sold as — the model knows medicine, reasons about code, understands language — is a different kind of claim altogether. Wilfrid Sellars marked the difference: “in characterizing an episode or a state as that of knowing, we are not giving an empirical description of that episode or state; we are placing it in the logical space of reasons, of justifying and being able to justify what one says.” To ascribe knowledge is to place a system in a normative order — one where, as the Stanford Encyclopedia glosses it, a participant must be “responsive to reasons as such, sensitive to standards of correctness and appropriateness.” No stack of descriptions adds up to that placement. Add benchmarks forever, and you have added descriptions forever. The guillotine does not care about the sample size.

This argument has now reached the peer-reviewed AI literature. A Minds and Machines paper published in November works through the Sellarsian case and concludes that current LLMs “should, therefore, be viewed as simulations of language users rather than true participants in the logical space of reasons.” The alignment literature has begun conceding the frame too: a 2025 paper in AI & Society describes alignment itself as an attempt to bridge “an ‘is’ normativity, of statistical patterns identified by models, and an ‘ought’ normativity where values are technically introduced in models.”

A machine that cannot be bound by norms cannot be wrong. It can only mismatch a key. Wrongness is a status in the space of reasons; mismatch is an event in the space of causes. Benchmarks are instruments of the second kind sold as detectors of the first — is-instruments marketed as ought-detectors — and no refinement of the item bank converts one into the other.

Once you see that, Goodhart’s law stops looking like an unfortunate side effect and starts looking like a diagnosis. The canonical phrasing comes from the anthropologist Marilyn Strathern: “When a measure becomes a target, it ceases to be a good measure.” A measure backed by a real quantity degrades under pressure; a measure backed by nothing collapses, because there was never anything behind it to hold its shape: only an incidental correlation between a task set and a purchased distribution of human judgment. Strathern’s essay contains one more sentence, and it reads as though it had been left there for this moment: it was “that conflation of ‘is’ and ‘ought’, alongside the techniques of quantifiable written assessments,” which led, in the account she cites, to “the modernist invention of accountability.” Goodhart is downstream of Hume. The measure dies when it becomes a target because the target was never a measure.

⁂

The system’s behavior confirms the diagnosis on an annual cycle. Each new instrument names benchmark exhaustion as its reason for existing. SWE-bench opens its abstract: “Language models have outpaced our ability to evaluate them effectively.” Humanity’s Last Exam explains that “LLMs now achieve over 90% accuracy on popular benchmarks like MMLU” and offers itself as “the final closed-ended academic benchmark of its kind.” (There will be another.) Stanford’s 2026 AI Index states the cycle in one line: “Evaluations intended to be challenging for years are saturated in months.” The trajectory of ARC-AGI-2 shows the cycle at full speed: 4 percent at $200 per task in December 2024; 92.5 percent at $1.44 per task nineteen months later. An instrument that must be redesigned every time it is passed is behaving like a contest. Contests are respectable. Nobody, however, mistakes the retirement of a chess opening for a discovery about the nature of thought.

Meanwhile the ground truth itself is rotten in measured proportions. A manual re-annotation found that 6.49 percent of MMLU questions contain errors — 57 percent in the virology subset — on a benchmark that ranked the industry for years, with releases separated by margins smaller than the instrument’s error.

And when the numbers price capital, the sellers game the instrument. Meta tested 27 private variants of Llama 4 on Chatbot Arena and published the winner; the experimental variant placed second, and when developers received the shipped model it fell to 32nd. LMArena‘s statement afterward: “Meta’s interpretation of our policy did not match what we expect from model providers.” xAI published Grok 3 charts that omitted the score configuration under which OpenAI‘s model won. And the cleanest case is the one where the funder of the test announced the score. In December 2024 OpenAI revealed that o3 had scored 25.2 percent on FrontierMath, a research-mathematics benchmark on which frontier models had previously solved under 2 percent of problems. Undisclosed until that day: OpenAI had commissioned the benchmark and held access to every problem statement and solution except 53 withheld for holdout. Epoch AI, which built it, later acknowledged that “many contributors were unaware of these details”; six of the mathematicians who wrote the problems said most were unsure they would have contributed had they known. When Epoch AI independently evaluated the released o3 months later, it scored about 10 percent.

Even the honest numbers will not hold still. The best published score on Humanity’s Last Exam right now is 46.4 percent if you ask Epoch AI, 53.3 percent if you ask Artificial Analysis, 64.5 percent if you ask BenchLM. Same benchmark, same month. The number depends on the harness, the tooling, the effort setting — on everything except the faculty it supposedly denotes.

⁂

All of this would remain an academic scandal if the numbers stayed in academia. They price capital now, at sovereign scale.

On January 27, 2025, a benchmark-parity claim from a Chinese lab — DeepSeek, then unknown to most of the people doing the selling — took Nvidia down 17 percent in one session, erasing $589 billion of market capitalization, the biggest one-day loss in US stock-market history. No verification preceded the move, and none could have. The claim was a leaderboard position and a training-cost figure, and by the close it had been worth more than half a trillion dollars.

Eighteen months later it happened again, and this time the wire copy named the mechanism outright. On July 28, with Samsung down 13.4 percent and SK Hynix down 14.7 percent, Reuters reported that “the growing popularity of low-cost Chinese open-source AI models such as Kimi K3 raised questions about whether future AI workloads could prove less intensive than previously expected.” By the next session the KOSPI had staged a record two-day fall and stood more than 40 percent below its June peak. The detail the market did not stop to check: Kimi K3 is the most expensive model ever released by a Chinese lab — $3 per million input tokens, $15 per million out — and on its maker’s own coding benchmark it loses to Anthropic‘s Claude Fable 5. The rout traded off the leaderboard, and the leaderboard was measuring what leaderboards measure. (Disclosure, as when I wrote about the House of Ellison: I am short Oracle. Nothing here is investment advice.)

Two prices from this record belong side by side. A human being solves an ARC-AGI reasoning task for about $5. The workers whose judgment is frozen into the answer keys, the people every score is agreement with, report median earnings under $23,000 a year. Between those two numbers stand trillions of dollars of market capitalization that move when the agreement ratio ticks. The machine’s advertised mind is human judgment, purchased at the bottom of the labor market, congealed into an answer key, and resold at the top of the capital market as a property of software.

Turing — for his part — would have recognized none of this as an answer to his question, because he never claimed to have answered it. He replaced it, said so plainly, and asked only for “relatively unambiguous words.” Seventy-six years on, the substitution has become a market and the concession has been forgotten. The scores will keep rising, and the instruments will be retired and rebuilt. The ratios will go on being read, at a trillion dollars a reading, as though a number could cross the line Hume drew. It cannot. You can stack descriptions to the sky, and the first claim about a mind still has to be paid for in a currency no benchmark prints.

Go Deeper into the Circus

On the morning of September 10, 2025, Larry Ellison was the richest man alive. Oracle had reported earnings the night before, and the story inside the numbers was a backlog: hundreds of billions of dollars in contracted future cloud revenue, nearly all of it from artificial intelligence, the largest single piece of it from one customer. The stock rose as much as 43 percent in a day. Ellison, who owns roughly 40 percent of the company he founded in 1977, gained $101 billion overnight — the largest single-day wealth gain ever recorded on the Bloomberg Billionaires Index — and passed Elon Musk, his net worth cresting at $393 billion. He was eighty-one years old, and every bet he had ever placed appeared to pay off on the same morning.

The customer was OpenAI. The contract was three hundred billion dollars of computing capacity over roughly five years, sold to a company that has never earned a profit and burns billions in cash every year. The market heard the number and paid Ellison for it as if the money were already in the vault.

Ten months later, the ledger reads like a curse working its way through everything the man owns. Oracle‘s credit rating sits one notch above junk. Its credit default swaps trade at prices last seen eighteen years ago. The stock has collapsed from $345.72 to a fifty-two-week low under $115, a fall that erased around $600 billion in market value. Ellison’s personal fortune has shrunk by $213 billion in under ten months; Forbes now ranks him eighth in the world, one seat behind Jensen Huang, the man who sells him chips. His son’s $110.9 billion conquest of Warner Bros. Discovery is frozen by a federal judge, and twelve state attorneys general are suing to kill it. The news network his family bought is posting the worst ratings in its history. And the cause he has funded more generously than perhaps any living American — the state of Israel and its military — keeps surfacing in boycott pledges, blacklist accusations, and campaigns to pry his newest platforms out of his hands.

There is a line long attributed to Ellison, quoted by a biographer borrowing from Genghis Khan: it is not sufficient that I succeed — everyone else must fail. Whether he ever said it, he built like he believed it. The database monopoly, the litigation-as-strategy years, the acquisitions swallowed whole, the islands, the warplanes, the weddings. For five decades the universe declined to invoice him for any of it. What sets this past year apart is the synchronization: every wing of the empire drawing down at once, each failure feeding the next.

One may be tempted to reach for the word karma. Let’s go through the whole cosmology and see how we feel about that at the end.

One disclosure before anything else: I am short Oracle stock. I will profit if what I describe here keeps happening, and you deserve to know that before you weigh a word of it. I am at least in documented company — Michael Burry’s Oracle shorts have already paid — but weigh it all the same.

⁂

AI is a bubble. Everybody knows it’s a bubble. The market is running on magical thinking. AGI is a fever dream. And LLMs shouldn’t even really be considered AI.

Calling it a bubble, though, flatters it. A bubble at least requires strangers — a crowd of outside buyers chasing an asset they don’t understand. The AI economy stopped depending on strangers some time ago. Its largest transactions now run between a handful of related parties who invest in one another, sell to one another, and book one another’s money as growth. Bloomberg built a map of these deals, and the map is a circle. Yesterday, reporting on the newest wave of Nvidia commitments — more than $750 billion — Bloomberg‘s headline said the deals revive fear of AI circular financing. The fear is the correct response.

Walk the circle once. In September 2025, Nvidia pledged up to $100 billion to OpenAI, its own largest customer, and CNBC reported the cash would mostly be used to lease Nvidia‘s own hardware. Nvidia books the sale as revenue. Its own money, returned one accounting cycle later, arriving at a valuation its own investment helped set. The $100 billion headline did its work on the stock price and then quietly evaporated: negotiations broke down in January, and by February the figure had shrunk to $30 billion. The market repriced trillions of dollars of equity around a number that was never executed at scale.

Oracle signed the $300 billion contract that crowned Ellison in September. Microsoft holds 27 percent of OpenAI, a stake valued around $135 billion, while selling it compute and competing against it for the same customers. AMD went further than any of them: per its own SEC filing, it granted OpenAI warrants on 160 million shares — roughly a tenth of the company — exercisable at one cent apiece, vesting as OpenAI buys its chips. A chipmaker paying its customer, in equity, for the privilege of the customer’s business.

Then there is CoreWeave, the cleanest loop in the pile. Nvidia holds an equity stake in CoreWeave that it has kept topping up. CoreWeave raises debt collateralized by the GPUs themselves and spends the majority of everything it raises buying Nvidia hardware. And Nvidia has agreed, per CoreWeave‘s 8-K, to buy back $6.3 billion of whatever capacity CoreWeave fails to sell, through April 2032. Vendor, investor, and buyer of last resort: one company, all three seats. And who rents the capacity? Microsoft alone accounted for about two-thirds of CoreWeave‘s revenue — the same Microsoft that owns 27 percent of OpenAI, which holds its own $11.9 billion CoreWeave contract. Four companies, and every dollar visits all four before it rests.

Morgan Stanley added it up last October: contracts linked to OpenAI — one unprofitable startup — account for more than $330 billion of the $880 billion in combined booked future revenue at Microsoft, Oracle, and CoreWeave, including two-thirds of Oracle‘s entire backlog. Jensen Huang calls the circularity charge ridiculous. Senator Elizabeth Warren, in a formal letter to Sam Altman demanding answers about the spending commitments, wrote that OpenAI “appears to be privatizing profits while seeking ways to let the public defray the costs of any potential failures of its business strategy.”

Enron‘s signature device was the special-purpose entity: partnerships the company capitalized with its own stock, so it could trade with itself and call the results revenue. The structure had one fatal property — it worked only while the stock went up. When the shares fell, the entities that depended on the shares failed, and the failures dragged the shares down further, a machine that ran in both directions. The AI economy has rebuilt the reflexive machine — vendors capitalizing their customers with equity, buying back their unsold capacity — at a thousand times the scale and put it inside the S&P 500.

If the shape of this reminds you of something, it reminded Bloomberg Tax of the same thing. Their headline, July 21: Big Tech AI Spree Revives Accounting Devices That Toppled Enron. A technical accounting consultant named Tom Selling put the stakes in one sentence for them: “What if one of these companies was a house of cards and was propping itself up with this accounting treatment? To me, that’s the risk.” Jim Chanos, who saw Enron before anyone else did, calls the AI financing complex, with its generous GPU depreciation schedules at CoreWeave and Oracle, a confidence game. For scale: Enron‘s entire final-year revenue was about $100 billion; the Oracle–OpenAI contract alone is three times that. Enron‘s peak market value was roughly $70 billion; Nvidia‘s is five trillion. The Bank for International Settlements — an institution constitutionally incapable of hyperbole — compared the AI buildout to canal mania, railway mania, and the dot-com bubble, and observed that “these episodes ended with an eventual reversal in investment, inducing economy-wide recessions.”

For ten months, believing was free. Then the bond market asked to see the collateral.

On July 9, S&P Global cut Oracle‘s credit rating from BBB to BBB-minus, one notch above junk, and conceded in the rating action that it had “misjudged the magnitude of the investments needed.” The agency named the concentration plainly: OpenAI accounts for roughly half of Oracle‘s $638 billion backlog. Half the order book of one of America’s flagship enterprise-software companies now depends on a single money-losing startup honoring a $300 billion contract.

The numbers underneath explain the decision. Capital spending for fiscal 2027 is projected at $90 to $95 billion, up from an expected $60 billion. Free cash flow is projected at negative $42 billion. Total debt sits around $160 billion, and Moody’s holds a negative outlook, meaning a second agency sees a further cut as possible. The cost of insuring Oracle bonds against default has climbed to levels last seen in 2008. Microsoft runs its buildout on a AAA balance sheet; Oracle chose to bet the company, and the bet now trades one wobble from junk. Oracle is no startup, to be fair to the skeptics of this argument: the database business that built the house still throws off steady billions, and the company survives even if OpenAI stumbles. The floor is real. The bet was placed several stories above it. The souring is general, too: on Friday Moody’s warned that hyperscaler capital spending will approach a trillion dollars in 2027, “unprecedented levels of investment” that are pushing the most cash-rich companies on earth into borrowing, stock sales, and off-balance-sheet financing, the same week CNBC catalogued the bond market’s anxiety about the whole complex.

Hold the two moments side by side. In September, the equity market handed Ellison $101 billion in a single day for projected revenue from a contract that runs through 2032. No company in this cycle books unrealized contract revenue as earnings the way Enron did; the stock market does the booking on their behalf, pricing the projections into the shares the day the press release goes out. What the equity market booked in an afternoon, the credit market has spent this summer unwinding line by line. It marked the same contract to a different model — one that asks where the cash comes from — and the answer came back BBB-minus. In late June, Oracle logged its worst week since the dot-com bust of 2001 — an anniversary the company should recognize, having barely survived the original. The month of the downgrade, the stock fell 34 percent even as the company landed a $7 billion Pentagon contract. When credit sours, good news stops mattering.

⁂

The remaining bull case fits in one sentence: the models will get so good that the revenue has to arrive. It deserves its strongest form: these systems are the fastest-adopted technology in living memory, hundreds of millions of people use them every day, enterprises are writing real checks rather than running pilots, and the people making the trillion-dollar commitments include the most sophisticated capital allocators alive.

The canyon under that sentence is measurable. Sam Altman himself put OpenAI‘s revenue at about $20 billion annualized while acknowledging roughly $1.4 trillion in infrastructure commitments over eight years — seventy dollars of committed spending for every dollar currently coming in. The Wall Street Journal reported last week that the company’s planned cloud spending alone has reached $750 billion. HSBC estimates the financing shortfall exceeds $200 billion even on friendly assumptions. Ed Zitron, who has been documenting the mismatch since before the financial press would touch it, compressed the underlying economics into a single sentence: “In 2024, OpenAI spent $9 billion to lose $5 billion.” The losses have only grown since: by April, Yahoo Finance was reporting that OpenAI had missed its internal user and sales targets for 2026, putting Oracle‘s commitments “in focus.” The bridge over that canyon is a story about machines that will soon think.

I believe they will not. A large language model is a translation engine: it maps between representations of things humans have already written, and it does this so fluently that the fluency gets mistaken for understanding. That mistake is the entire equity story. Whatever these systems become, the gap between interpolation and mind is a difference in kind, and no quantity of capital expenditure converts one into the other. You cannot depreciate your way across a metaphysical boundary. But the bet does not need me to be right about any of that.

Suppose the fever dream is real and the machines learn to think. The loop still fails, because the AGI story has a second load-bearing assumption hiding under the first: that whoever builds the thinking machine gets to charge monopoly prices for it.

⁂

Beijing has decided that nobody will.

In May, DeepSeek made permanent a 75 percent price cut on its flagship model, fixing output at 87 cents per million tokens. OpenAI‘s comparable list price is $30 — a thirty-four-fold spread for work that most paying customers cannot tell apart. The models ship with open weights on Hugging Face, and the newest ones ship optimized for Huawei‘s silicon. On July 16, Moonshot released Kimi K3, the largest open-weight model ever published, benchmarking alongside the best American closed models; one independent leaderboard ranked it first outright. Fortune‘s read on the market reaction was exact: the release rattled investors “because it challenged the idea that U.S. firms could maintain their sizable lead in the global AI race simply by outspending Chinese rivals.” Customers noticed too. CNBC reports that American companies are moving growing shares of their workloads onto Chinese models while the American labs raise prices to cover their buildouts.

The hardware side of the squeeze is further along. Jensen Huang said in June that Nvidia‘s share of the Chinese market has gone from “90-some-odd percent” to — his words — “dropped to zero”, with domestic chipmakers having taken 41 percent of China’s accelerator market in 2025 on their way to shoving him out entirely. And Fortune gave the strategy its proper name yesterday: the steel playbook — scale, subsidies, and price pressure, cheap supply pushed into the world market until competitors have to absorb it. China ran this play on steel, then solar, then batteries, then electric vehicles. Intelligence is next on the list, and tokens, unlike steel, ship at the speed of light and clear customs nowhere.

This is what deprives the loop of its theological escape hatch. The AGI story requires scarcity rents — monopoly prices for a product nobody else can make. If the models plateau, the projected revenue never arrives. If the models keep improving, the improvement is replicated in Hangzhou within weeks and given away at 87 cents per million tokens. That is the whole decision tree, and the industry is standing under it. Heads, no product. Tails, no pricing power. The $300 billion does not pencil in either world, and Oracle borrowed $160 billion against the world where it did.

⁂

The man at the center spent the paper while it was still worth something.

In August 2025, his son David’s Skydance completed its merger with Paramount, the Ellison trust as controlling owner. In December, David went hostile for Warner Bros. Discovery — CNN, HBO, the Warner film library — and his father backed the bid with an irrevocable personal guarantee of $40.4 billion. The definitive agreement, signed in February, came to $110.9 billion in cash.

Where does an eighty-one-year-old get $40 billion in cash? He doesn’t have it. Forbes went through the estate: less than $10 billion in cash, only about $4.7 billion of Oracle stock sold this century, and a family trust whose asset is 1.16 billion Oracle shares. The guarantee is Oracle paper. Before the Warner bid, 346 million of his shares were already pledged as collateral for personal ventures — about 30 percent of his stake — and those pledged shares have lost roughly half their value since. Alongside the family money: $24 billion from the sovereign wealth funds of Saudi Arabia, Abu Dhabi, and Qatar, which would hold 38.5 percent of the combined company in non-voting shares. The DOJ approved the deal in June with zero conditions. The sitting president had already said out loud that he wanted CNN in the Ellisons’ hands.

The collateral chain runs in one direction. An AI circuit inflates Oracle equity. The equity backs a personal guarantee. The guarantee buys the American press, with Gulf autocracies as co-investors and the government waving from the curb. That was the play: convert circuit paper into hard, permanent assets — the third-largest news network, the second-biggest film library on earth, the cable channel the president most wanted delivered to friendly hands — before the paper deflated.

The paper is deflating first. On July 20, a federal judge issued a temporary restraining order blocking the close, with a preliminary-injunction hearing set for August 3 that could stall the deal for months. Twelve states are suing. Oracle fell 34 percent in July alone while the guarantee sat exposed underneath it.

Had the deal closed in the spring, the House of Ellison would hold real assets, immune to whatever happens to a cloud backlog. Instead a judge froze the conversion mid-transaction. The guarantee is signed and irrevocable; the assets are undelivered; the collateral loses value every week the courts deliberate. He is holding the obligation without the prize, which is the exact position a man who owns forty percent of a BBB-minus company cannot afford to hold. Margin calls do not read narrative strategy.

⁂

And what was the empire for? The first network the family captured answers the question.

In October, Paramount Skydance bought The Free Press for $150 million and installed its founder, Bari Weiss — a person who had never worked a day in television — as editor-in-chief of CBS News. “I wanna blow this up,” she reportedly told colleagues. Everyone understood the assignment. The network had already paid the Trump administration $16 million to settle a lawsuit most lawyers considered frivolous; the job was to pull the newsroom of Murrow and Cronkite to the right and make the pulling look like renewal.

She is nine months in. CBS Evening News just posted its lowest-rated first quarter this century, and CBS was the only broadcast network whose news audience shrank while NBC’s and ABC’s grew. A quarter of the Evening News staff took buyouts rather than work for her, one departing producer describing a newsroom pressured to self-censor. In March she shuttered CBS News Radio — the division whose London microphones carried Edward R. Murrow through the Blitz — and laid off six percent of the news division. By July, CBS Mornings had logged the least-watched week in the program’s history. Scott Pelley, fired in June after thirty-seven years, told the New York Times she was murdering 60 Minutes and putting a thumb on the scale for the president’s version of events — “a level of political influence that I had never seen in 37 years.” At the Golden Globes, on CBS‘s own air, Nikki Glaser told the room the network had become America’s newest place to see BS news, with David Ellison sitting in the audience.

The Ellisons sent in a fellow hack to move CBS News to the right. She could not manage even that. All she has accelerated is the decline: the audience the family bought the network to influence responded by ceasing to be an audience. Propaganda has a precondition, and the precondition is reach.

⁂

Ellison’s devotion to Israel is the least hidden thing about him. He made the largest single gift in the history of Friends of the IDF; Netanyahu is a personal friend; as far back as 2015 he was privately vetting Marco Rubio for loyalty to Israel in emails with Israel’s UN ambassador. Since 2021 he has given or pledged £257 million to the Tony Blair Institute — and when the Guardian reported that institute staff had taken part in a project reimagining postwar Gaza as a “Trump Riviera,” the money trail behind the institute ran straight back to him. Weiss, the family’s pick for CBS, is known above all for her advocacy on the subject.

He is entitled to his cause. The empire has been a catastrophe for it. After thousands of film workers signed a pledge to boycott complicit institutions, Paramount stood publicly accused of maintaining a blacklist of talent who criticized Israel. His move on TikTok spawned a national campaign to take the platform back. Every property he adds attaches his politics to it, and audiences keep responding the same way: by leaving. The machine he built to protect the cause now generates evidence against it. He bought the microphone, and the room walked out.

⁂

Add up the ledger. Every wing of the House rests on one column: Oracle equity. The equity rests on the OpenAI contract. The contract rests on the AGI story, and the story is being repriced out of Hangzhou at 87 cents per million tokens. A federal judge holds the Warner deal; twelve attorneys general hold the lawsuit; S&P Global holds the rating one notch off the floor. Underneath all of it, an eighty-one-year-old man holds a $40.4 billion promise, irrevocable by its own terms, written against a stock that has lost two-thirds of its value since the morning the promise became imaginable.

The exposure extends past him. The Magnificent Seven make up about 35 percent of the S&P 500; a standard index fund now holds more than 7 percent Nvidia whether its owner has ever heard of a GPU or not. Every teacher’s pension and every target-date retirement fund in America is a silent co-signer on the circuit. When the Oracle–OpenAI contract was priced into the indexes last September, they co-signed that too. Nobody asked them.

I am short Oracle because a short position is a bet that gravity still works. You can call what is happening to Ellison correlation risk, and a risk officer would. The older vocabulary has a better word. A man spent decades converting money into power and power into impunity, and the collateral under both is repricing at once. The bonds, the judge, the states, the rating, the price war — that much is one trade, and it is unwinding as one trade. The CBS collapse and the boycotts answer to no margin call; they are the same man making the same bet in a different arena, wagering that an audience can be bought the way a backlog can. Karma names the pattern rather than the mechanism — character meeting consequence, wherever the consequence chooses to book itself. The House of Ellison was assembled at the top of a circuit, out of paper, against collateral that reprices by the week. Karma is what a margin call feels like when you had it coming.

Go Deeper into the Circus

I used to work with people who thought Naval Ravikant was a genius. Not marginal people — senior engineers, gifted, the kind who could hold a distributed system in their heads the way most of us hold a phone number. They retweeted his — mostly vapid — pronouncements. They quoted him the way you quote a man whose standing is no longer under discussion. Ignore people playing status games. They gain status by attacking people playing wealth creation games. The remarkable thing was how the quotes behaved. They were not offered as claims, and they were not received as claims. They circulated the way precedent circulates in a courtroom — cited, not litigated — except that the precedent was a tweet, and the judge was an angel investor, and no one seemed to notice that nothing had actually been argued.

My fading memory of the lockdowns notwithstanding, I can approximately place the early months of that historical moment as when the gurus like Naval became completely full of themselves. Tech Twitter had been early on COVID — loudly, conspicuously early, tracking exponential curves and buying masks while the CDC was still telling Americans not to bother with them, while the WHO was still equivocating on human-to-human transmission, while Vox was tweeting its own coronavirus explainer under the copy Is this going to be a deadly pandemic? No. For the people I worked with, that season settled something permanent. The institutions had been wrong. The feed had been right. Whatever discount they had been applying to the pronouncements of angel investors on subjects outside venture capital was repriced to zero in a single quarter, and as far as I could tell it never recovered. The credentialing regime that ran the twentieth century — the one that said the epidemiologist speaks about epidemics, the constitutional lawyer about the Constitution, the historian about history — lost its enforcement mechanism in a season, and the hall pass for epistemic trespass was issued in bulk, permanently, to whoever had been right about the one thing at the right moment.

They — my former colleagues — were not fools, well, mostly. That is the part you have to hold onto. Some of them were among the smartest people I have ever worked with, and they thought Naval Ravikant was a genius, and both of those facts were true at the same time, and the second fact was manufactured by an apparatus that the first fact should have detected.

What they were, and what the men they revered were, is opportunists. That is the harder word and the truer one. The proof of the pudding was served in 2024, when the same men who spent a decade positioning themselves as above the fray — apolitical, first-principles, neither red nor blue, just interested in leverage and truth and human flourishing — endorsed Donald Trump with an enthusiasm that ranged from Andreessen and Horowitz announcing on their own podcast that they were backing him — sorry, Mom — to Musk pouring roughly two hundred million dollars into the pro-Trump America PAC, to Sacks and Palihapitiya — both of whom had, on the January 8, 2021 episode of All-In, called Trump disqualified and a complete piece-of-shit fucking scumbag after January 6 — hosting the twelve-million-dollar fundraiser at Sacks’s Pacific Heights home three years later, all while Thiel and Balaji supplied the doctrine underneath. Naval, for his part, spent 2024 on tape working through the same message calendar — lawfare, censorship, imported voters, the Republic in mortal danger — with the production values he had previously reserved for happiness and leverage. Every one of them had spent the preceding decade producing content optimized for the professional-class listener who wanted to feel above tribalism, and every one of them, when the trade was offered, took it in public, on brand, at scale. That is what an opportunist looks like when the market clears. Not a convert. Not a truth-seeker. Someone who was pricing the position all along.

On Monday, a small account asked Naval a question: What is your opinion on democracy? Naval answered:

Pure democracy is mob rule, eventually collapses into communism or tyranny.

I prefer a constitutional republic with strong defenses for individual and property rights, but that requires a unique and increasingly endangered culture.

Two sentences. A civilizational verdict, dashed off between meetings, for an audience of more than three million followers. And somewhere, in feeds I have long since muted, I would bet money it has already been retweeted as if it settled something.

The tweet, the man who wrote it, and the industry of Silicon Valley thought leadership that made a mid-sized angel investor into the wisdom infrastructure of an entire professional class are all one story. The last clause — but that requires a unique and increasingly endangered culture — is the whole operation in nine words.

First, the credentials, because the credentials are how the hall pass for epistemic trespass gets issued.

Naval Ravikant co-founded Epinions during the dot-com era and co-founded AngelList in 2010, a useful platform that restructured early-stage fundraising and was valued at four billion dollars in 2022. He made early investments in Uber, Twitter, Postmates, Yammer. In May 2018 he published a thread called How to Get Rich (without getting lucky) — ninety thousand reposts, two hundred and sixty-four thousand likes, one of the most-circulated business artifacts in the history of the platform. In 2020, a fan named Eric Jorgenson compiled Naval’s tweets and podcast transcripts into The Almanack of Naval Ravikant, which has sold more than a million copies and circulates free, by design, in every digital format. The book is a permanent fixture of the startup onboarding canon. New hires receive it. Reading groups form around it. It sits on standing desks across the industry, not to be read, exactly, but to be seen in proximity to. Forbes put Naval on its Self-Made 250 this year.

What Naval is good at deserves an exact accounting, because the dismissive version of this essay — rich guy tweets platitudes, film at eleven — misses the machinery. Naval is good at compression. Seek wealth, not money or status. Wealth is having assets that earn while you sleep. That is a genuinely well-made sentence. It has a defined term, a distinction, and an implied instruction, in fifteen words. Code and media are permissionless leverage. Also well-made. Learn to sell. Learn to build. If you can do both, you will be unstoppable. You can feel the sentences click into memory. They are engineered for retention the way a pop chorus is engineered for retention, and Naval’s summary of his own method — productize yourself — is the most honest sentence he has ever produced, because it is exactly what he did. He took the persona of the man who knows, compressed it into tweet-sized units with zero marginal cost of replication, and distributed it at scale. The product is not advice. The product is the feeling of having received wisdom.

And engineers, in particular, were defenseless against it, for a reason that took me years of sitting in those rooms to understand. Engineering culture treats compression as the signature of truth. The elegant proof is the true one. The short program is the correct one. An engineer who can reduce a system to its essential abstraction is exhibiting mastery, and so when a man reduces happiness or wealth or politics to an abstraction of the same shape, the reduction itself reads as evidence of mastery. The form is doing the work the content cannot. My former colleagues did not believe Naval because they had checked the claims. They believed him because the claims arrived in the shape that their profession had taught them to recognize as intelligence.

The aphorism is compression without a decompression algorithm. The proof it resembles is checkable; the aphorism is not. It does not argue, it announces; and the announcement borrows the authority of mathematics while accepting none of its obligations. This borrowed authority is the entire foundation of Silicon Valley thought leadership, and it converts one kind of credential into another. A man who was right about Uber in 2010, or conspicuously early about a virus in 2020, is presumed right about the Federal Reserve, right about meditation, right about the fall of civilizations. Venture returns become epistemic returns. The cap table becomes a curriculum vitae for subjects the cap table has never touched.

⁂

The genre has a founding father, worth the detour because he represents the genre at maximum effort the way Naval represents it at maximum efficiency — and the comparison tells you what the genre is actually for.

Paul Graham built Y Combinator, wrote the essays that generations of founders treat as scripture, and earned the title Vox only half-ironically bestowed on him: Silicon Valley philosopher king. And unlike Naval, Graham does the work. The essays have structure, footnotes, stated premises, anticipated objections. He wrote a well-known piece on how to disagree honestly — quote your opponent, restate his argument, refute the central point. By every formal standard, Graham is the best case for Valley intellectualism: proof that the culture can produce actual essays, actual arguments, actual thought.

So look at where the actual thought goes when it touches the author’s class position. In January 2016, Graham published Economic Inequality, which opens with the disarming confession that as a manufacturer of rich founders he has been helping to increase economic inequality, and then spends its remaining length arguing against a position nobody holds — that inequality should be eliminated — so that the position people actually hold, that inequality at current American levels corrodes democratic equality itself, never has to be met. Eliminating great variations in wealth would mean eliminating startups, he wrote, and the sleight was so visible that half the internet wrote the same response simultaneously: no one proposed that. The man who taught a generation to refute the central point built his defense of his own class on refusing to locate it. In September 2024 he published Founder Mode, a management theory constructed from a single talk by a billionaire friend, zero data, and the thesis that conventional accountability structures are a conspiracy of mediocrities against great men — which went instantly viral among the great men it flattered. And in January 2025 he published The Origins of Wokeness, a history of American social justice politics containing essentially no history, in which the civil rights vocabulary of Black America becomes a performative affectation invented by university prigs in the 1980s — a chronology contradicted by anyone who had ever encountered the word before Graham did.

The point is not that Graham is stupid. The point is the opposite, and it is the finding of this whole inquiry in miniature: the genre’s best practitioner, applying the genre’s best methods, arrives at the same three destinations as its laziest — my wealth is society’s health, my accountability is society’s decay, and the people asking otherwise are a priesthood of resentment. When maximum rigor and maximum laziness converge on identical conclusions, the conclusions were never outputs. They were premises, and the essays — footnoted or fortune-cookied — are the costume the premises wear in public.

⁂

Now the tweet, clause by clause.

Pure democracy is mob rule. Begin with what this observation is: the oldest commonplace in Western political thought. Plato worked it out in Book VIII of the Republic some twenty-four centuries ago; Aristotle catalogued the failure mode in the Politics; Madison engineered Federalist No. 10 around it; every first-year political science student meets it before the first midterm, usually attached to the phrase tyranny of the majority, because the entire liberal-democratic tradition — the enumerated rights, the independent courts, the countermajoritarian checks — is this exact worry with its solution already designed, ratified, and shipped. The second half of Naval’s own tweet describes the solution. He is announcing the problem and the answer to the problem as though both were waiting for him to arrive, which is the intellectual equivalent of tweeting that a triangle has three sides — and the response he can count on is not laughter but reverence, because the aphorism economy runs on precisely this trick: the freshman commonplace, compressed and delivered with the authority of a cap table, produces in the reader a warm shock of recognition that is indistinguishable, from the inside, from revelation. You feel wise receiving it because you already knew it. The product, working as designed.

The banality of it all is also doing great tactical work. Nobody is proposing pure democracy. There is no bill in Congress to govern the United States by show of hands in a stadium. The phrase is a strawman with a nineteen-fifties pedigree — a republic, not a democracy was Robert Welch’s slogan, the John Birch Society’s founding incantation, deployed then for exactly the purpose it is deployed now: to make the word democracy itself sound like a design flaw, so that when actual democratic institutions — the franchise, the count, the peaceful transfer — come under actual attack, a trained audience hears the attack as a correction. When a man answers the question what is your opinion on democracy by first redefining democracy as something no one is proposing, he is not making an argument about civics. He is, rather, installing a reflex.

Eventually collapses into communism or tyranny. This is a factual claim about history, and it is false, and its falseness is checkable by anyone who can operate a Google search. There is no case — not one — of a functioning constitutional democracy voting itself into communism. Communism arrived in Russia through the collapse of a czarist autocracy in a world war. It arrived in China through two decades of civil war after an imperial collapse. It arrived in Cuba over the corpse of a military dictatorship, in Eastern Europe on the treads of an occupying army. The demos never did it. Meanwhile, the democracies that actually died in the twentieth century — Italy in 1922, Germany in 1933, Spain in 1936, Chile in 1973, Argentina in 1976 — died overwhelmingly in the other direction, at the hands of men who said, every single time, in speeches you can still read, that they were saving the nation from communism and the mob. The historical record is not ambiguous. Saving the republic from mob rule is not the alternative to how democracies die.

I prefer a constitutional republic with strong defenses for individual and property rights. So do I. So does every Democrat in Congress, every judge who ruled against the current administration’s impoundments, every election official who certified a count under armed protest. The sentence performs dissent from an imaginary regime while describing the actual, existing American system — the one whose defenses are being tested, right now, not by communists but by an executive branch dismantling the separation of powers and sending masked agents into American streets. A man tweeting a preference for constitutional government, in July of 2026, without one word about the men currently dismantling it, is not defending the republic — by any reasonable definition of what those words mean. He is providing the project an alibi over it’s thin veneer.

And then the tell. But that requires a unique and increasingly endangered culture.

Ask the sentence some questions. Unique to whom? Endangered by what? The sentence will not say, and the sentence’s refusal to say is its function, because every reader in Naval’s replies knows exactly what it means, and the meaning arrives without the author’s fingerprints on it. The constitutional republic, we are being told, is not a set of institutions that people of any origin can operate — it is the expression of a particular culture, a culture under threat, a culture being diluted. Diluted by whom? The reader supplies the answer. The reader has been supplied the answer for years, by the same feeds, in the same cadence. This is the Great Replacement reformatted for a valuation-literate audience — demographic panic in the dialect of governance theory, deniable to the author and unmistakable to the audience.

And the thing about the endangered culture clause is that it has a documented lineage in Naval’s own intellectual neighborhood, and the lineage is not hiding.

⁂

In April 2009, Peter Thiel published an essay at Cato Unbound called The Education of a Libertarian. One sentence from it has been quoted many times, because it deserves to be: I no longer believe that freedom and democracy are compatible. A sentence from the same passage is quoted less, and deserves to be quoted more: Since 1920, the vast increase in welfare beneficiaries and the extension of the franchise to women — two constituencies that are notoriously tough for libertarians — have rendered the notion of “capitalist democracy” into an oxymoron.

The complaint is not that democracy fails to protect rights. The complaint is that democracy admitted the wrong people. Women vote, the poor vote, and they vote against the interests of the men doing the writing, and therefore the system that admits them is broken and must be escaped — through seasteading, through cyberspace, through what Thiel called some sort of new and hitherto untried process that leads us to some undiscovered country. I documented in The Sovereign Individual Was the Blueprint where that undiscovered country was actually mapped: in Davidson and Rees-Mogg’s 1997 manual for the cognitive elite’s exit from the nation-state, the book Thiel wrote a foreword for, the book whose program — exit currencies, exit jurisdictions, exit citizenship, the deliberate weakening of the democracies being exited — has been executed step by step by the men who read it as scripture.

Balaji Srinivasan — Naval’s longtime collaborator and mutual amplifier — turned the blueprint into a product line. The Network State proposes communities ruled by a founder and a smart contract — a model its observers have summarized as founder-king governance — where the constitution is code, citizenship is a subscription, and dissent is something you churn out of. Its author stood on a stage in 2013 and called the project Silicon Valley’s ultimate exit, and a decade later — in an appearance documented by the journalist Gil Duran — he sketched what the exit looks like when it stays home: a San Francisco run by Grays — tech workers in gray shirts, allied with the police, holding rallies of their own — who systematically push the Blues, meaning roughly everyone who votes wrong, out of the city’s institutions and neighborhoods. He called the vision tech Zionism. This is not an essay’s uncharitable paraphrase. It is the plan as pitched, by a man Naval has spent a decade amplifying and being amplified by, whose vocabulary — exit, alignment, founder — is the water the whole aquarium breathes. Marc Andreessen published a five-thousand-word manifesto in 2023 that names trust and safety, tech ethics, sustainability, and social responsibility as literal enemies, proposes that a Universal Basic Income would turn people into zoo animals to be farmed by the state, and closes with a list of patron saints that includes Filippo Marinetti — author of the Futurist Manifesto and co-author of the Fascist one — and Nick Land, the house philosopher of the neoreaction. These are not obscure documents. They are the published, first-party, self-authored intellectual record of the men who fund and operate the industry Naval’s audience works in. The currency layer of the same program is not hypothetical either. Peter Thiel told a Libertopia audience in 2010 that PayPal‘s founding vision was to overturn the monetary system of the world through technology because we could never win an election — a sentence he has never retracted, and which is on tape. Balaji stood on the same stage as Naval and the Winklevosses at TechCrunch Disrupt in September 2013 pitching Bitcoin as, in Balaji’s phrase, an instrument you could use to cross the border with a billion dollars in your head. Naval, on that panel and for the decade after, was the movement’s most professional-class-friendly evangelist: Bitcoin is a tool for freeing humanity from oligarchs and tyrants, dressed up as a get-rich-quick scheme; Bitcoin is insurance against politicians; Bitcoin is an exit from the Fed. DeFi is an exit from Wall Street. I have documented the operational stakes of that program in The Bitcoin Coup — the effort, coordinated across Thiel, Sacks, Musk, and Vance, to make dollar collapse a policy vector rather than a risk to be mitigated. The point is narrower: the exit is not only spatial. It is monetary. And Naval is not adjacent to that program. He is its retail voice, in his own words, on his own tape.

Here is the division of labor. Thiel writes the doctrine. Balaji writes the product spec. Andreessen writes the war propaganda. And Naval writes the fortune cookies — the ambient, aspirational, apolitical-sounding compression of the same worldview, optimized for the professional class that would flinch at the doctrine if it arrived undiluted. It is the oligarch-and-courtier ecosystem I laid out in The Faux Intellectuals of Silicon Valley a year ago, when the courtiers under inspection were a podcaster with manufactured credentials and the Bitcoin monks; what Naval adds is the retail counter. Epistemic trespass at industrial scale, with a division of labor to match: each specialist licensed by nothing more than the last thing he was right about, pronouncing on the design of nation-states from the credential base of a payments API, an early Uber check, or a chatbot demo. I no longer believe that freedom and democracy are compatible is a scandal. A constitutional republic requires a unique and increasingly endangered culture is a retweet. They are the same sentence at different compression ratios. The guru’s function in the apparatus is not to argue the ideology but to make it ambient — to convert a political program into a sensibility, a vibe of civilizational discernment that a product manager can absorb between standups without ever once noticing that he has acquired a position on who should get to vote. This is what libertarian voluntarism looks like after it has been scaled up: a political order in which sovereignty is itself a form of property, jurisdiction is what the terms-of-service say it is, and the men who own the platforms are the men who make the rules — with the aphorisms doing the ambient work of persuading the professional class that the arrangement is not a regime but a meritocracy.

The talent-scouting machine I documented in the last essay casts specimens downward — it finds the least representative member of the opposing coalition and elevates her into the composite image of the left. The thought-leadership machine is the same casting operation run in the opposite direction. It finds a man whose actual, checkable expertise is early-stage valuation, and elevates him into the composite image of the wise. Both operations depend on the audience not asking the one question that dissolves them: representative of what? Wise about what? The blue-haired specimen with three thousand followers is cast as the median Democrat. The angel investor with three million is cast as the modern Marcus Aurelius. Neither casting survives thirty seconds of contact with the underlying distribution. Both are load-bearing walls of the same discourse.

⁂

One more component of the product — the one that made my former colleagues’ reverence feel, to them, like depth rather than fandom — is the spiritual layer. The entire back half of the Almanack is not about money at all. It is about happiness, desire, meditation, presence — desire is a contract that you make with yourself to be unhappy until you get what you want, peace as happiness at rest, the mind as a monkey to be observed. The Decoding the Gurus podcast, working through a Naval appearance at length, landed on the precise phrase for the resulting persona: Buddha with a smartphone. And the spiritual layer is not decoration. It is function. A man who has renounced desire cannot be accused of greed. A man who observes his mind cannot be accused of tribalism. The meditation material launders the political material — it pre-certifies every downstream pronouncement as arriving from above the fray, so that when the sage finally speaks about democracy, the audience receives the verdict not as one more partisan’s opinion but as the report of a man with no stake, no side, no self. Detachment, in this genre, is not a practice. It is a credential — the one credential that cannot be checked, doing the work for all the ones that could be.

And if the detachment were real — if Naval were what the Almanack sells, a man above the fray dispensing timeless observations about leverage and happiness — the political tweets would be scattered across the spectrum the way actual detachment scatters. They are not scattered. In 2024, on tape, Naval described the prosecutions of Donald Trump as really Trumped-up charges, called the Democratic Party’s conduct disgusting behavior that could end the Republic and produce a one-party state better known as a dictatorship, and worked in Hillary Clinton’s email server and the Hunter Biden laptop for good measure. Every talking point in the sequence had run through the reactionary distribution stack in the preceding news cycles. The same podcast, reviewing a long-form Naval appearance last year, catalogued the same pattern: lawfare, censorship, imported voters, Trump recast as a bottom-up leader of the people. The sage’s detachment is a production value. The output tracks the coalition’s message calendar with the fidelity of a man who is, whatever he believes himself to be, downstream of the same feed as everyone else — which is the single most corrosive fact for the genius thesis, because the one thing a genuinely independent mind cannot be is predictable from its inputs. The Buddha with a smartphone turns out to scroll the same one everybody else does.

The arithmetic of the wisdom deserves attention too, because the wisdom and the politics are not separate product lines. Go back to the thread that made him canon. You’re not going to get rich renting out your time. You must own equity — a piece of a business — to gain your financial freedom. As a description of how venture-scale fortunes form, this is accurate. As advice distributed to millions, it has the structural property of all Naval wisdom: it is true for approximately the people who already have what it recommends and unfalsifiable for everyone else. The nurse cannot own equity in the ICU shift. The teacher cannot productize herself at zero marginal cost. The advice is not false; it is addressed — addressed to the small class of people positioned to act on it, while being sold to the enormous class of people positioned only to admire it. And what the enormous class absorbs is not the mechanics of leverage but the cosmology underneath: that the equity-holder and the time-renter differ not in position but in understanding, that the distribution of wealth is a distribution of insight, that the men at the top of the cap table are there because they compressed reality better than you did. The tweet about democracy runs on the same cosmology at the same address. Rule by the discerning few; the many as a mob to be defended against; the whole thing dressed as a neutral observation about system design. How to Get Rich and pure democracy is mob rule are not two genres. They are one genre. The self-help was always political philosophy in a motivational costume, and the political philosophy is now confident enough to take the costume off, one reply at a time.

⁂

Which brings me back to my former colleagues, because I do not want to end this at the guru’s feet. Gurus are constants. Every era mints them. The question that matters is why this era’s smartest professional class — the most numerate, most empirically trained, most bullshit-averse workforce ever assembled — proved to be the softest market the wisdom industry ever found.

Part of the answer I have already given: the compression aesthetic, the form mistaken for the content. But there is a second mechanism, and it is the one I actually watched operate. Quoting Naval was not an epistemic act. It was a membership act. The workplaces were saturated in equity — options vesting, valuations moving — and the Almanack was, among other things, a theology for that condition: a book that explained why the equity-holders deserved it, why the anxiety was a growth stage, why the games being played were long-term and the people playing them high-integrity. To retweet the aphorism was to affirm the theology, and to question the aphorism — to ask, out loud, wait, is that actually true? — would have been to question the theology, in a community where everyone’s net worth was denominated in continued belief. My former colleagues were not deceived about Naval. They were invested in Naval. The portfolio was epistemic, and it did not tolerate drawdowns.

In all those years, I cannot recall one instance — not one — of anyone responding to a quoted pronouncement with the question these same people asked of every schema migration and every caching benchmark: is there evidence for that? The question was not suppressed. It simply never came up, the way it never occurs to you to fact-check a handshake. The quotes were not claims. They were passwords. And you do not fact-check a password; you either know it or you are outside the door.

I do not know where each of them landed, politically, in the end — we lost touch the way you do. But I know where the type landed, because I watched it happen in public: the feeds that ran on leverage and meditation in 2019 running on lawfare and border invasion by 2024, the same reverent quote-tweets now attached to darker source material, the transition experienced — this is the crucial part — not as a conversion but as a continuation. Nothing in the theology had to change. If wealth is insight, then the wealthiest men turning against democracy is itself evidence about democracy. If the guru is above the fray, then the guru’s new positions must be above the fray too, and the follower who adopts them is not radicalizing; he is staying current with the wisdom. The password just rotated, the way passwords do. Everyone still inside the door knew the new one without being told.

That is what thought leadership is, in the end — the term itself confesses it. Thought that leads, thought as management function, thought whose purpose is alignment rather than discovery. The thought leader does not offer claims to be checked. He offers positions to be held, and the audience holds them, because the audience’s professional identity — rational, rigorous, above the tribal fray of the normies — is precisely what the product flatters. The engineer who would demand a benchmark for a caching library will retweet a theory of civilizational collapse on the strength of vibes and a follower count, and will experience the retweet as evidence of his own discernment. The machine that casts a blue-haired specimen as the left for one audience casts an angel investor as the philosopher for another, and the second audience is more dangerous than the first, because the second audience deploys capital, staffs platforms, and writes the algorithms the first audience is fed by.

⁂

So: the answer to the small account’s question, the one Naval compressed into two sentences of Bircher pastiche and demographic dog whistle.

Democracy — the actual, existing, constitutional-republican, rights-protected kind, the only kind anyone in this argument has ever lived in — is not a mob waiting to happen. It is the only system on historical record that removes the powerful without killing them, corrects itself without burning itself down, and admits, however slowly and incompletely, the people previously excluded from it. It did not collapse into communism in any of the hundred-odd years since Thiel’s cursed date of 1920, in any of the dozens of countries that tried it. The culture it requires is not unique, not ethnic, not endangered by the arrival of new participants. It is a culture of constitutional restraint and democratic reciprocity — losing without burning it down, winning without salting the earth — and it is endangered at this moment by exactly one coalition, and it is not the one Naval’s replies imagine. It is endangered by the men who write forewords to exit manifestos, fund network-state successor jurisdictions, engineer dollar collapse as a business model, name trust and safety as the enemy, and tweet — between funding rounds, to three million followers, with the serenity of a sage — that the demos is a mob and the republic belongs to a culture, and let the reader infer whose.

Every tradition Naval samples from knew exactly what it cost. The Buddhism he compresses into productivity content demanded renunciation — not the aesthetics of detachment layered over a portfolio, but the portfolio itself. The Stoics his audience reads in airport translation wrote from exile and the plague, not from the winner’s circle with the winnings intact. Socrates — the original specimen of the examined life the genre invokes — was poor, annoying, and executed by the city he questioned, which is a data point about what asking is that actually true costs when you mean it. Wisdom, in every tradition that produced any, is what survives the loss of position. What Silicon Valley built is the inverse: a wisdom that is position — that exists only while the cap table holds, that has never once, in the entire archive, cost its speaker anything at all. You can search the collected pronouncements of the Valley’s sages for a single instance of a man saying something true against his own interest, and the search comes back the way my former colleagues’ unasked question would have: empty, and instructive. And the man writing this has a Substack and a subscriber base — his house, too, is available for inspection. The test being run on Naval is the same test I hold to my own work: show the work, name the position, be wrong in public when you are wrong. Whether the house is glass or stone is not the writer’s call to make. It never was.

Brevity may be the soul of wit. Shakespeare gave that line to Polonius, the most tedious windbag in Hamlet, which tells you what he thought of men who traffic in maxims. But depth is the soul of understanding. And understanding is the basis of civilization — the whole improbable project of speaking to each other and being understood, of showing our work to people entitled to check it, of building, sentence by accountable sentence, a shared world that no aphorism can hold. That project has a political name. It is called deliberation, and it is the thing a demos does that a mob does not — which means the tweet’s form and the tweet’s content are the same act. A man announced, in a format that cannot be argued with, that the people cannot be trusted to argue. The compression was never a style. It was the position.

The wisdom was never wisdom. It was ideology at a favorable compression ratio. And the appropriate response to the man who productized himself is not rage, which he would monetize, or debate, which he would decline. It is the question my former colleagues never asked, the question that dissolves the entire genre on contact, the question every reader of every guru should keep loaded at all times:

Is that actually true?

Ask it of the tweet. Ask it of the thread. Ask it of the book on the desk in the credenza position. The aphorism, unlike the proof, cannot survive the request to show its work — and an audience that started asking would find, at the end of the wisdom, what I found in the archive and have been documenting in this publication for two years: not a philosophy, but a program; not a sage, but a spokesman; not an endangered culture, but a fortified class — asking you to mistake its exit strategy for your enlightenment.

Go Deeper into the Circus

There is a Marxist lesbian with blue hair who wants to shut down America and deport all white people back to Europe. She exists. She has a TikTok. She has three thousand followers, most of whom are bots or ex-partners, and she has never held elected office, never advised a Democratic official, never written a bill that anyone considered, never been invited to speak at a Democratic convention, and never, in any material sense, been part of the operational Democratic Party. She is an American with strong opinions. There are three hundred and thirty million Americans, and a nontrivial fraction of them will have strong opinions on any given topic you can name. The Marxist lesbian with the blue hair is not evidence of a Democratic Party position. She is evidence of the size of the country.

The reactionary machine’s job is to find her, promote her, clip her, meme her, put her on Fox News as an example of what the left has become, run her quote on The Daily Wire, split-screen her against a Democratic governor who has never heard of her, and repeat the operation across every micro-cycle of the news cycle until the low-information voter’s mental image of the average Democratic politician is her face.

The clip’s journey through our increasingly shitty online existence is not a lonely one. It comes accompanied by a wave of harassment from poorly adjusted people who do not use their real names on the internet, and who are increasingly just bots and people working in foreign-influence farms. The quote-tweets, the doxxing, the calls to her employer, the strangers reading her home address aloud on livestreams. The senator she is split-screened against gets a chyron. She gets a security problem. The operation’s first casualty is always the specimen it harvests.

And the operation works because its architects understood something forty years ago that a serious commentariat has been unable or unwilling to name: the specimen is real. If she were a fabrication, the correction would be easy — you show that she does not exist, and the story dies. But she exists. She said the thing. The reactionary just points to the clip and says, I did not invent her, she is on your side, deal with her. And a professional journalism industry habituated to correcting only outright falsehoods finds itself with nothing to correct.

The falsehood is not the specimen. The falsehood is the claim, made a hundred times a day across cable news, talk radio, podcast networks, and social media, that this person is the median. She is not the median. She is not the mean. She is not the ninety-fifth percentile. She is a tail, and the operation’s core tactical move is treating the tail as the center of the distribution.

⁂

I made the definitional case against the far left designation in On the Far Left two months ago. The category names regimes and movements willing to subvert democracy, suppress political dissent, and impose an ideological maximum programme through extra-legal means. It is a test of conduct, not of ambitions. There is not a single elected Democratic politician in the United States who fits it. Mamdani is not far left. AOC is not far left. Sanders, after forty years of caucusing with the Democratic Party and voting for legislation he considered half-measures, is not far left. By the standards of every other rich democracy on earth, these figures are boring center-left administrators pushing distributional policies that Britain, Canada, France, Germany, Japan, and Australia treat as ordinary governance.

The comparison is arithmetic, not taste. France seats eight Communist deputies in its current five-hundred-and-seventy-seven-seat National Assembly. Germany seats sixty-four members of Die Linke — a party descended in part from the East German ruling party — in a Bundestag of six hundred and thirty. Spain, Portugal, and Greece seat communists in their national legislatures. Japan seats communists. The United States Congress seats zero, has seated zero in living memory, and the most left-wing member it does seat caucuses with a party whose Senate leader is Chuck Schumer. The country with the loudest discourse about its radical left is the rich democracy with the smallest one.

That piece explained why the category is a category error. This piece is about why the error is so hard to dislodge. And the answer is not that commentators are stupid, or that they lack access to comparative data, or that they cannot read the roll call of Sanders’s votes. The answer is that the reactionary influence apparatus has spent forty years doing something more specific and more corrosive than propaganda. It has been doing casting. And the forty years are datable: the Fairness Doctrine fell in 1987, Limbaugh went national in 1988, Fox News launched in 1996.

The actual operational Democratic Party is a specific set of people. Its Senate leadership, its House leadership, its state-level executives, its mayors, its policy shops, its think tanks, its legislative directors, its floor managers, its committee staff, its campaign apparatus, its donors, its consultants, its lawyers, its judges, its endorsed nominees. The people who actually run the party and hold the party’s power. Every one of these people, when examined honestly by any comparative standard, is a boringly conventional center-left liberal. Some of them are more progressive than others. Some of them are frankly conservative in the older sense of the word. Not one of them is proposing to deport anyone anywhere or to shut anything down or to abolish anything the country actually has. The Marxist lesbian with the blue hair is not in this room. She would not be admitted to this room if she showed up.

The reactionary discourse, however, is engineered to be indifferent to the composition of this room. Its operators do not want you to look at the room. They want you to look at the clip. Every hour of programming Fox produces is calibrated to make you look at the clip. Every algorithm on the platforms Elon Musk owns is calibrated to make you look at the clip. Every talking point that flows out of the Heritage Foundation and lands, thirty-six hours later, in the mouth of a Republican senator on a Sunday show is calibrated for the same purpose.

And the effect the product produces is a cognitive substitution. The low-information voter — and low-information voter is not an insult, it is a description of most working adults, who have jobs and children and mortgages and cannot follow the composition of the Democratic caucus in the New York State Assembly — cannot store the operational Democratic Party in their head. They can store a face. The reactionary apparatus’s job is to make sure the face they store is the specimen’s, not the senator’s.

⁂

Meanwhile the actual far-right project — the one whose specimens include the sitting Vice President of the United States, the sitting President, most of the Republican House caucus, the funded architecture of the Project 2025 blueprint, and a judiciary staffed through the Federalist Society pipeline — hundreds of federal judges credentialed across forty years, six sitting Supreme Court Justices identified with the movement, the three Trump appointees among them all drawn from Leonard Leo’s list — operates in the open, by named figures, with documentary receipts, in real time, by their own description. JD Vance told a podcast in 2021, on tape, that Trump should defy the Supreme Court by invoking Andrew Jackson’s line about the chief justice’s ruling. He said this and it was published and he is now Vice President. Curtis Yarvin has been publishing his monarchical-restoration essays for fifteen years. Peter Thiel has been funding the project for the same fifteen years. Michael Anton wrote The Flight 93 Election. Christopher Rufo has been publicly executing a stated program to capture cultural institutions since 2020 and has been publishing his tactical thinking on X every day. Russell Vought sat down with a hidden camera and described the plan to seize impoundment power in words that would embarrass a cartoon villain.

And the project is no longer confined to documents and podcasts. Masked, poorly trained, violent federal agents are killing people in the streets of American cities right now. On January 24, 2026, Alex Jeffrey Pretti, a thirty-seven-year-old intensive care nurse at the Minneapolis Veterans Affairs Medical Center and a United States citizen, was shot to death by Customs and Border Protection officers in the Whittier neighborhood of Minneapolis during protests against Operation Metro Surge. The Department of Homeland Security claimed the agent acted in self-defense while trying to disarm him. Bystander video verified by Reuters, the BBC, The New York Times, The Wall Street Journal, CNN, The Guardian, and the Associated Press showed Pretti holding a cellphone, not a gun, recording the agents while stepping between them and a woman they had pushed to the ground; one agent then removed a handgun from Pretti’s holster, turned away, and another agent fired at least ten shots within five seconds, continuing after Pretti lay motionless on the pavement. Two weeks earlier, on January 7, 2026, an ICE officer named Jonathan Ross shot Renee Good, an unarmed American citizen and mother whom city leaders described as a legal observer of federal actions and not a target of any ICE arrest, three times through the driver’s side of her car — in the forearm, in the chest, and in the temple. In both cases federal officials called their agents’ conduct self-defense and the victims domestic terrorists. In both cases federal authorities withheld body-worn camera footage, hard drives, statements, and, in Good’s case, her car itself from state investigators for more than six months, until relenting in July; Minnesota Attorney General Keith Ellison said he remained “deeply troubled that the federal government spent more than half a year attempting to conceal this evidence from state investigators.” Two weeks ago, on July 13, 2026, an immigration agent shot dead a motorist in Biddeford, Maine. Al Jazeera counts at least nine deaths tied to the enforcement campaign since Trump returned to office; the Wikipedia log, maintained from primary reporting, is longer. State violence conducted by men who will not show their faces — and whose government hides the film of its own shootings for half a year — is what a radical movement in power looks like; a TikTok account with three thousand followers is not. Which clarifies the anti-left media apparatus’s actual assignment: to convince the country that a Democratic election victory would simply replace these men with left-wing counterparts of equal extremism and equal incompetence. The composite exists to make that replacement thinkable. The manufactured left is the permission structure for the actual right.

The receipts on the American far right are voluminous, public, self-produced, and current. The conduct they describe is being conducted right now, in the executive branch, against the constitutional order the executive branch is sworn to defend. This is documented in On the Far Left and in The Plot Against America and in The Wire Still Holds and across dozens of pieces in this publication. The receipts on the American far left, meanwhile, remain a scattered folder of TikTok clips featuring individuals whose entire life’s political impact is smaller than a single vote of a single county commissioner in Wyoming.

⁂

The engineering has three components. The first is talent scouting. The reactionary media apparatus employs a small army of researchers whose entire job is to find the worst example of the opposing coalition. They run search-and-clip operations on TikTok, on X, on university lecture halls, on protest livestreams, on the comment sections of DSA chapter Slack channels. They are looking for the Marxist lesbian with the blue hair, or a college professor with a bad take, or a graduate student with a graffito, or a City Council candidate in Berkeley who once tweeted something incoherent about Israel. They find these people every day. There is an inexhaustible supply, because the country has three hundred and thirty million people and social media has given every one of them a broadcast license. The scouts do not need to invent anything. They need only harvest.

The industrial form of the scouting operation has a name and an operator. Libs of TikTok, run by a former real estate agent named Chaya Raichik, does nothing else: it harvests classroom videos, Pride livestreams, and hospital web pages, strips them of context, and serves them to an audience of millions — from which the day’s specimen flows upward into the distribution stack, cited on air by Tucker Carlson in his Fox prime-time years. USA Today counted what follows the posts: bomb threats trailing the account’s targets to hospitals in Boston, Philadelphia, Pittsburgh, Washington, and Akron, and to schools and libraries in California, Colorado, Oklahoma, and Wisconsin — classes canceled, patients evacuated, in nearly every case the caller never found. Boston Children’s Hospital was evacuated three times in a single week. The Massachusetts woman the FBI arrested for one of those threats was, her own lawyers argued, a mentally unwell consumer manipulated by the disinformation campaign aimed at the hospital. None of this ended the operation. Raichik was staged at CPAC. The specimens are disposable. The scout is a celebrity.

The second component is amplification. Once the specimen is found, the machine’s distribution architecture — Fox‘s prime-time lineup, the clip factory Ben Shapiro built at The Daily Wire, the X algorithm Musk retooled after his acquisition — pushes the specimen across the audience the operation is targeting. The specimen is played and replayed. The clip is stitched to reaction videos. Elon Musk quote-tweets it to two hundred million followers with a two-word framing. The specimen achieves a saturation that no elected Democrat’s actual policy proposal ever achieves, because the elected Democrat’s actual policy proposal is boring and the specimen is enraging.

The third component is the discourse trap, which I described mechanically in The Dance of Reaction. Once the specimen is in the audience’s head, mainstream commentators face a choice. They can ignore the specimen, in which case they are accused of hiding the truth about what the left has become. They can denounce the specimen, in which case they have validated the framing that the specimen matters. They can contextualize the specimen — explain that she is a tail, not the median — in which case they are performing the elaborate work of correcting a distortion that took thirty seconds to produce and requires ten minutes to unwind, during which viewers change the channel. The trap is designed to have no clean exit.

⁂

I am not theorizing. Ashley St. Clair, who spent nearly a decade inside the apparatus — Turning Point USA, The Babylon Bee, the influencer network Charlie Kirk and Donald Trump Jr. built — described the mechanism directly on The Daily Beast Podcast in July. The messaging was coordinated in paid group chats that ran from the White House and the Trump campaign down through the influencer network. The dark money flowed into the influencers from organizations whose identity the influencers themselves often did not know. And in her phrasing: it was, and is, prolific.

Every apologist for the reactionary media apparatus has a stake in describing it as organic — a spontaneous market response to what audiences want. St. Clair’s testimony documents what it actually is: a coordination shop with the White House in the group chat, paying influencers to distribute the day’s selected specimens, on a schedule the influencers themselves did not always understand they were serving.

And this is not the first inside account. The Dominion Voting Systems defamation suit against Fox News produced, in 2023, a documentary record of what the operation looks like from the anchor’s chair. Tucker Carlson, on November 8, 2020, texted his producer that the Dominion allegations were absurd. On November 17 he texted that Sidney Powell was lying. He added, in a message that ought to be engraved somewhere: “It’s unbelievably offensive to me. Our viewers are good people, and they believe it.” He then went on air and helped his network keep the lie in circulation for weeks, because that is what the network’s leadership wanted. When Fox anchor Eric Shawn fact-checked Trump’s voter-fraud claims on December 2, 2020, Fox CEO Suzanne Scott emailed her prime-time programming chief: “This has to stop now. The audience is furious and we are just feeding them material. Bad for business.” When correspondent Jacqui Heinrich correctly fact-checked a Trump tweet about Dominion the month before, Carlson texted Hannity “Please get her fired. Seriously… It’s measurably hurting the company”; Hannity took it to Scott; Scott told her deputies that Heinrich “has serious nerve doing this and if this gets picked up, viewers are going to be further disgusted.” By the next morning, Heinrich had deleted the tweet.

Sean Hannity, in a sworn deposition, said he never believed the fraud narrative for one second. Laura Ingraham called Sidney Powell a complete nut. Maria Bartiromo privately called Powell’s evidence kooky the day before inviting her on air to elaborate on it. Rupert Murdoch, the man who owns the entire apparatus, called Giuliani’s claims really crazy stuff. And damaging. And they all put the specimens on television anyway, night after night, because to fact-check the operation was to lose subscribers, and losing subscribers was the one outcome the professional apparatus was structurally organized to prevent.

The reactionary media operation is a coordination shop whose on-air talent describes the material privately as lies and absurd and shockingly reckless and airs it anyway because the business model requires airing it. The talent knows. The executives know. The owner knows. The lawyers found out under discovery. And the operation continued after the settlement, because the settlement did not touch the underlying economics.

⁂

The result is a media environment in which the American public’s mental image of the left is a composite that no operational Democrat resembles. This composite includes: the Marxist lesbian with the blue hair, the professor who tweeted the bad take, the protester who broke a window, the HR manager who mandated a pronoun training, the college dean who caved on a speech controversy, the campus activist chapter that endorsed a bad statement about Israel, the crank in the school board meeting, and the drag queen the algorithm has decided to feature this week. Each of these composites is a real person somewhere. None of them holds office. None of them writes policy. None of them, individually or collectively, has the operational power to affect a federal budget line, a Supreme Court appointment, a treaty, a rule at the SEC, or the direction of a single one of the fifteen departments whose budgets shape American life.

The reader inclined to object has already performed the substitution the operation trained them to perform: what about AOC, what about Mamdani, what about the Seattle councilmember and the progressive DA. But look at what the substituted figures do all day. They introduce bills that fail. They win elections and lose them. They govern under courts that check them, budgets that constrain them, and voters who can remove them — which is democratic politics, and the definitional opposite of far-left conduct. The far-left designation is a conduct test — extra-legal subversion, suppression of dissent — and the elected progressive fails it as completely as the elected moderate. The composite has no office. The officeholders have no far-left conduct. The frame needs both to be false at once, and neither is.

Chuck Schumer is the left, in the sense of holding actual operational power in the actual Democratic coalition. Hakeem Jeffries is the left. Gavin Newsom, Josh Shapiro, Elissa Slotkin, Amy Klobuchar — these people are the left. They run the party. They cast the votes. Every one of them is a technocratic center-left liberal whose policy positions would be considered conventional in Manchester or Toronto or Melbourne or Seoul. The far-left composite the American public has been trained to see is a substitution for them.

And the insurgents are in the room now too. Zohran Mamdani runs the largest city in the country. Democratic-socialist candidates have been taking mayoralties and House primaries for a year — I wrote three weeks ago that the DSA insurgency is the story of every off-cycle election in the country, and it is. There is no tension between that piece and this one, because far left names conduct, and the insurgents’ conduct is the definitional opposite of it. They win primaries by organizing voters. They govern under the same courts, budgets, and elections as everyone else. Their programme — rent stabilization, municipal groceries, fare-free buses — is what Toronto calls a Tuesday. An insurgency that takes power by winning elections and can lose it by losing them is not a far-left putsch. It is the system functioning. The machine needs the composite precisely because the actual insurgents, examined at the level of conduct, look like this.

⁂

The professional press has been the operation’s dance partner across the same forty years, and has not spent enough time watching itself dance.

The New York Times is not funded by Peter Thiel. Its reporters are not, individually, participants in the reactionary project. Its editors do not, so far as anyone can document, take talking points from the RNC’s communications shop. And yet The New York Times, and The Washington Post, and The Atlantic, and Politico, and the Sunday shows on the broadcast networks, and the political-analysis desks at NPR, participate in the operation every day. They participate because they have been habituated, across forty years, to responding to whatever the day’s dominant story is; and the day’s dominant story is, forty years running, whichever specimen the reactionary talent-scouting apparatus has amplified overnight. The mainstream press does not produce the specimens. It launders them. It picks up the story, adds a paragraph of both-sides framing, quotes a Democratic official’s cautious response, and republishes the specimen at scale, now with the imprimatur of a serious institution.

The habituation shows most plainly in the posture. Forty years of being worked by the machine has taught the mainstream press that its permanent assignment is proving its own moderation to the reactionary right — headline by headline, editorial position by editorial position, a standing demonstration that it does not represent the people who show up on Libs of TikTok. The demonstration can never be completed, because the accusation it answers is not sincere. The accusation is a lever, and every headline written to appease it confirms that the lever works. A press that spends its editorial energy proving it is not the specimen has already accepted the specimen as the frame.

The lever has a second arm. The machine manufactures narratives outright — the stolen election, the hysterectomies the hospital never performed, the litter boxes in the school bathrooms — and then measures the mainstream press against them. Treat the fabrication as an open question and you have laundered it. Decline to, and the declination becomes the story: the biased institution, suppressing what the people deserve to hear, demonstrating by its silence exactly the untrustworthiness the machine had alleged. The demand was never for coverage. The demand is for a press that assigns made-up narratives the same weight and veracity as reported ones — and any institution that refuses the assignment is scored as partisan, and the score is distributed through the same stack that distributed the fabrication. Heads the narrative wins, tails the referee loses.

The specimen arrives at the mainstream press through the specimen’s own social feed, or through the reactionary media’s amplification of it, or through a Republican politician’s press release responding to it. The mainstream press’s editorial calculation — is this newsworthy? — has been captured by the fact of the amplification. If Ben Shapiro is talking about it, that is treated as evidence that it is a story. If it is a story, it must be covered. If it must be covered, the coverage must be balanced. And balance requires quoting the specimen respectfully alongside the elected official who has spent her career opposing what the specimen represents. The false equivalence is built into the professional protocol.

I do not think most reporters and editors understand that this is what they are doing. I think most of them believe they are practicing journalism. But the practice they are producing is not journalism. It is amplification laundering. And the professional apparatus’s genuine, sincere commitment to covering both sides has been the reactionary operation’s single most valuable asset for a generation.

⁂

I am not asking mainstream journalism to abandon fairness. I am asking it to notice what it has actually been doing under the protocol it has confused with fairness. Fairness is not the equal weighting of a Marxist college freshman and a United States Senator. Fairness is proportional weighting. Fairness is refusing to launder a talent-scouted specimen into a representative example. Fairness is the exercise of editorial judgment against the tide of what the reactionary amplification machine has, that morning, made loud.

The professional press has, across forty years, treated its own editorial judgment as suspect and the reactionary amplification machine’s editorial judgment as an external input to be responded to. Reversing that inversion — reasserting the professional press’s own judgment about what constitutes an actual, load-bearing political story and what constitutes a talent-scouted specimen designed to be laundered — is the entire technical problem of American political journalism.

⁂

There are radicals, in the tail of the distribution, in every country, in every year, of every political era. The American radical-left tail is smaller than the tail of any other rich democracy, and its adherents hold no operational power, cast no consequential votes, write no policies, and command no institutional apparatus. The category of radical left as it is deployed in contemporary American discourse is a composite manufactured out of tail specimens, amplified into apparent centrality by a reactionary operation whose forty-year strategic project has been the substitution of that composite for the actual operational Democratic Party in the mental image of the low-information voter.

The composite has done its work. The low-information voter now believes the composite. The country is being governed as a consequence of that belief. And the professional press, which has spent the same forty years earnestly correcting individual factual errors while participating in the structural error, has not yet come to terms with what its participation has cost.

The receipts on the American far right are visible from space. The receipts on the American far left, at the operational level where power is actually exercised, are missing because the conduct is missing. The specimens the reactionary machine harvests every morning are real people with real accounts and real hair colors. They are not the operational American left. They are the raw material for a laundering operation whose product is the false symmetry that licenses the actual authoritarian consolidation now underway.

Three weeks ago, in The Great Gaslighting of America, I documented this machine teaching the country to disbelieve women. This piece documents the same machine teaching the country to see a left that is not there. Same apparatus, same laundering, same professional press carrying the product to audiences the machine could not reach on its own.

Refuse the dance.

Go Deeper into the Circus

Of all the things that I rack my mind about when it comes to geopolitical risks, “China winning at AI” is not one of them.

Let’s put two items on the table. The first is that the panic in Washington and on Wall Street about Chinese AI is genuine — the Kimi K3 release two weeks ago has forced the American AI industry to face a market it was pretending would not arrive for another five years. The second is that the panic is entirely misdirected, because the thing they are afraid of losing is not a lead in artificial intelligence. It is pricing power in a commodity. What Beijing is doing to the American AI industry, whether Beijing intends it or not, is exactly what the American economy needs to survive the buildout that has been happening in its name.

I made the underlying case in The Capital is Misaligned and the Crash is Coming and in The Doomsday Moat. The technical and philosophical priors sit in Why I’m Betting Against the AGI Hype and LLMs Are Universal Translators, Not Universal Thinkers. I will not rehearse those pieces in full. The conclusion I need for this argument is narrow: the scaling paradigm is not going to deliver the transformations its current valuations require, the models are approaching the ceiling of their architecture, and the trillion dollars being spent on the assumption that they are not is a mispricing of the kind that ends economies. Every quarter the mispricing runs, the eventual damage grows.

Chinese open-source models are shortening the run.

⁂

What has happened in the past year is not that Chinese engineers built better models than American engineers. It is that Chinese engineers built comparable models and gave them away.

Kimi K3, released by Moonshot AI two weeks ago, beat Anthropic‘s Fable 5 and OpenAI‘s GPT-5.6 in front-end coding evaluations and finished ahead of Opus 4.8 in Arena‘s broader text ranking, at 40 percent lower cost. The weights release tomorrow. DeepSeek, Z.ai, MiniMax, Tencent, and Xiaomi now hold the top five spots on OpenRouter by weekly token usage — that is the marketplace where developers pay to serve real production traffic, not the leaderboards where labs pay for press coverage. The share of tokens American companies route to Chinese models has held above 30 percent every week since early February and peaked at 46 percent. Before February the average was 11 percent. The AI startup Lindy moved 100 percent of its traffic from Claude to DeepSeek in June. Z.ai‘s GLM 5.2, released this spring, was the fastest-adopted model Vercel tracked all year.

Most of the engineers routing this traffic would prefer, on any given afternoon, to keep sending their tokens to Anthropic or OpenAI. They are not choosing to. The enterprise stack now sits behind routing layers — Vercel, OpenRouter, Cloudflare‘s AI gateway, half a dozen others — that shop every request to the cheapest model that clears the quality bar. Once quality parity holds within a margin, the routing layer picks on price, and nobody looks. The vendor decision has been abstracted away from the humans who used to make it, which is what commoditization always does. Preferred suppliers become interchangeable suppliers. Interchangeable suppliers become price-takers. One AI investor put the endgame plainly to Axios: open-source models will handle 95 percent of enterprise queries. The premium American labs will fight over the remaining five.

The five largest hyperscalers are on pace to spend more than one trillion dollars on AI-related capital expenditure across 2025 and 2026 combined. Four of them — Amazon, Alphabet, Meta, Microsoft — are on track for as much as $725 billion in 2026 alone, roughly double last year’s pace, and Goldman projects their combined AI capex will exceed the GDP of Japan by the end of the decade. These commitments are already outpacing the hyperscalers’ earnings and free cash flow, forcing them into debt markets to cover the gap. The Bank for International Settlements — an institution not famous for its taste in drama — devoted a section of its 2026 Annual Economic Report to the resemblance between the current AI buildout and the investment manias that “ended with an eventual reversal in investment, inducing economy-wide recessions.”

The bond market is already pricing this. Credit spreads on Google, Amazon, and Meta widened this past week as fixed-income investors began demanding more compensation to lend to companies that were, eighteen months ago, considered capital fortresses. Mizuho told its clients on Friday morning that capex raises are “testing investor limits.” The equity market is telling the same story more quietly — the hyperscaler shares have decoupled from the chip stocks, and the divergence is being called “somewhat unsustainable” by JPMorgan.

The investment thesis behind the trillion dollars requires two things to be true. It requires the frontier to keep pulling away from the pack, so that whoever spends the most on training captures durable pricing power. And it requires the enterprise market to keep paying premium prices to rent that frontier capability by the token. Both requirements are being falsified in real time. The frontier is not pulling away — Chinese labs are matching capability within months and undercutting price by factors of five. And the enterprise market is not paying premium prices — it is routing its traffic through gateways that pick the cheapest model that works.

⁂

The single largest variable in how much damage the AI buildout does to the American economy is how long the mispricing survives. The longer the illusion of pricing power holds, the more capital pours into stranded infrastructure, the more of the S&P’s market capitalization concentrates in seven stocks whose earnings will not materialize, the more of the grid gets rebuilt around load forecasts that assume the tokens keep flowing at monopoly prices, the more of the federal budget gets committed to subsidies and permitting exemptions premised on a national-security story that the technology itself does not support. Every quarter the story survives, the eventual write-down grows.

The dot-com bubble was survivable because the correction came fast enough to leave the rest of the economy standing. The housing bubble was catastrophic because the machine ran for years after the fundamentals had quit, until the assets on the balance sheet had metastasized into the balance sheets of every institution in the country. The current AI buildout is closer in shape to the housing bubble than to the dot-com bubble, because the capital being deployed is not venture capital taking marked risk on individual companies — it is investment-grade debt secured against hyperscaler cash flows, and it is passive index money flowing into the same seven stocks regardless of price. When that pops, it will not pop only inside a set of speculative bets. It will pop inside pension funds, target-date retirement accounts, corporate bond portfolios, and the credit ratings of every major infrastructure vendor in the country.

The Chinese labs are pricing the frontier into a commodity now — before the trillion becomes two, before the grid buildout locks in another decade of stranded capex, before another wave of retail investors gets pulled into the seven stocks at valuations the earnings will not vindicate. They are performing, from Hangzhou and Beijing, the falsification that American capital markets have refused to perform from New York. Every American institution holding the asset has a reason to keep believing. A lab giving away frontier-grade weights has no such reason. DeepSeek does not care about Microsoft‘s earnings multiple. Moonshot does not care whether Anthropic‘s last funding round marks cleanly. The correction is arriving from the one direction the story cannot manage — and it is arriving early.

⁂

In June, the Commerce Department ordered Anthropic to suspend access to its two most advanced models for every foreign national, including Anthropic‘s own employees, on national-security grounds. Within a day, Zhipu answered by releasing a competing model — GLM 5.2 — for free. Eighteen days later, Washington withdrew the order and Anthropic began restoring access. The United States government reached for one of its most coercive economic instruments to protect the market position of a chatbot and folded in under three weeks because a Chinese lab gave its product away.

A moat that dissolves in eighteen days is not a moat. It is a story about a moat. And the industry knows this, which is why it is currently constructing a second story on top of the first.

I described the first story in The Doomsday Moat last week. Extinction risk was the argument the industry reached for once it became clear that the returns would not arrive on the schedule the valuations required. If your product cannot justify its capex by earnings, you can try to justify it by fear — the argument that these companies must be protected and subsidized and exempted from ordinary oversight because the alternative is the end of the species. That moat has been in place for two years.

China is the second moat, and it is the same moat wearing a flag. We cannot let the capital slow down, because China. We cannot enforce copyright against the training sets, because China. We cannot tax the compute, regulate the data centers, or ask when the returns arrive, because China. The Commerce Department’s aborted export order and the administration’s flirtation with banning Chinese open-source models outright are the moat being poured in concrete. A national-security argument has one great advantage over an earnings argument — it never has to survive a quarterly call.

The desperation is showing at the level of conduct. Anthropic spent the spring quietly deploying tracking code to surveil its own users, hunting for Chinese firms distilling Claude‘s outputs into rival systems. The industry’s own argument is now that its crown jewels can be extracted through a chat window — that a few million conversations with the oracle suffice to clone the oracle. A company confident that it is building a god does not argue that the god can be photocopied. The distillation complaint is an admission, filed publicly under the seal of a national-security concern, that the frontier confers no defensible advantage. The moat leaks by design, because the product is the leak.

⁂

Suppose I am wrong about the ceiling. Suppose some architectural breakthrough lies past the scaling wall, and the nation with the largest installed compute base and the deepest bench of researchers gets there first. Then the race would matter, and the moat would be real, and the capital allocation would be defensible.

The reply is that this scenario indicts the current allocation just as thoroughly. The trillion dollars now flowing into hyperscaler data centers is not being spent on the assumption that a breakthrough is required. It is being spent on the assumption that scale itself is the breakthrough — that the next order of magnitude of compute, applied to the next order of magnitude of data, produces the next order of magnitude of capability, all the way to whatever the industry means by AGI this quarter. Capital positioned for a paradigm shift would be funding heterodox architectures, basic research on continuous learning, small labs with strange ideas, the kind of work that produces the shift instead of extending the paradigm. Capital positioned for scale-is-all buys land in Louisiana and gas turbines in Texas.

You cannot defend the buildout by appeal to a possibility the buildout’s own thesis denies. Either the current architecture reaches AGI, in which case there is no meaningful frontier lead to defend, because Chinese labs will match the capability inside a year and commoditize it. Or the current architecture does not reach AGI, in which case the trillion dollars is being spent to serve a market that will not exist at the scale the pricing assumes.

And the security concerns, where they are real, have real answers that do not require pretending the commodity is a crown. Running Chinese weights inside classified networks would be reckless — nobody serious proposes it. Enterprises with sensitive data will pay a sovereignty premium for American models or run open weights in their own inspected silos. The remedies are boring, targeted, and available. They do not require a national industrial policy organized around the survival of the SaaS margins of three or four companies.

⁂

Here is what I rack my mind about. Not the models. Not who trains them. Not which flag flies over the server room.

I rack my mind about a country that has quietly restructured itself around the story that the models will pay for the buildout. GDP growth is being propped up by data-center construction. The power grid is being rebuilt around load forecasts that assume the tokens keep flowing at monopoly prices. Pension funds and index investors are concentrated in seven stocks whose valuations require the story to be true. State attorneys general are being pressured to stand down; permitting is being expedited; the Commerce Department, as we just watched, is being turned into a defender of specific corporate revenue models. The federal government has begun, as I argued in The Doomsday Moat, taking equity in the story itself — sovereign stakes, golden shares, a government converting its regulatory power into a shareholder’s interest in the bubble’s survival.

When the state owns the mania, the state defends the mania. And the instruments it reaches for will not be gentle, because the correction will not be gentle. This is what the second moat is being poured for. It is not being poured for a real threat from Beijing. It is being poured for the moment, some number of quarters from now, when the earnings do not arrive and someone has to be named as the reason. The moat rhetoric they have been rehearsing for two years will be sitting there, pre-loaded, wearing the flag.

That is the risk worth losing sleep over. The models were never going to hurt us. The story we built on top of them still might. And the country the story lands on is not a country that has been paying attention to how much of its constitutional order was convention all along. The economic dislocations arrive as politics. They arrive looking for someone to blame. And the people who inflated the bubble will be first in line with a candidate.

So no—”China winning at AI” is not on my list.

Go Deeper into the Circus