Default graph view66 publications114 reading directions

Publication graph · Editorial transit

Follow the line of thought.

Follow explicit reading directions as named routes. Every node and route is projected from a canonical publication record; every arrow preserves its authored reading direction.

Deterministic layoutComplete without JavaScriptKeyboard and touch ready

Edge grammar

The line tells you why to continue.

  • Continue

    A sequel, extension, or downstream consequence.

  • Foundation

    Prior work or origin needed to understand the current work.

  • Application

    An operating model, implementation, or reusable practice.

  • Counterpoint

    A challenge, boundary, or unresolved tension.

  • Companion

    Adjacent work sharing a theme or lineage.

  • Field evidence

    A first-class canonical relationship distinct from an application.

Agent worker operating modelStop Prompting Agents. Start Managing Workers.
  1. FoundationI Was Summoning Ghosts Until I Learned to Build the MachineSee why the worker model became necessary
  2. CompanionThe Agents Were Never the BottleneckBuild the workbench around the worker
  3. ContinueThe Agents Are Not the Bottleneck. You Are.What changes after worker execution accelerates
  4. ApplicationDemo DebtApply the scorecard beyond the polished demonstration
  5. CompanionYour Second Brain Is Not a Production ArchitectureSeparate useful intelligence from production architecture
AI cost observabilityToken Burn
  1. FoundationThe Agent Is Not the Product. The Control Plane Is.Put cost telemetry inside the control plane
  2. ApplicationStop Prompting Agents. Start Managing Workers.Measure the worker, not merely the output
  3. CompanionThe Agents Are Not the Bottleneck. You Are.Compare machine consumption with human attention
AI engineering · Database forensics · Legacy systemsThe Database Had Been Wrong for Twelve Years. AI Made It Worth Fixing.
  1. ApplicationThe Best AI System Should Need Less AI TomorrowA field application of the Inference Retirement Thesis
  2. ApplicationInference at the Ambiguity FrontierInference at the ambiguity frontier, applied to database forensics
  3. CompanionThe Code Is No Longer the Hard PartCompanion: the economics of implementation changed
Abundant machine work, scarce institutional trustBeyond the Agent
  1. FoundationThe Machine Is Not the PointCompanion: The Machine Is Not the Point
  2. FoundationThe Agent Is Not the Security BoundaryCompanion: The Agent Is Not the Security Boundary
  3. FoundationThe Agent Is Not the Product. The Control Plane Is.Companion: The Agent Is Not the Product. The Control Plane Is.
Church technology · Digital workplace · Institutional memoryChoosing the Church’s Digital Workplace
  1. FoundationThe Semantic Operating SystemFoundation: The Semantic Operating System
  2. FoundationBeyond the AgentCompanion: Beyond the Agent
  3. ApplicationAI Is Leverage. Expertise Is the Multiplier.Companion: AI Is Leverage. Expertise Is the Multiplier.
Inference economics · Operator leverage · Cognitive allocationCognitive Capital
  1. FoundationThe Best AI System Should Need Less AI TomorrowThe Best AI System Should Need Less AI Tomorrow
  2. FoundationDone Has a Half-LifeDone Has a Half-Life
  3. CompanionTaste Is InfrastructureTaste Is Infrastructure
  4. CompanionThe Semantic Operating SystemThe Semantic Operating System
  5. CompanionThe Application Is Disposable. The Context Is Not.The Application Is Disposable. The Context Is Not.
Continuous reconsiderability · Governed adaptationDone Has a Half-Life
  1. FoundationThe Semantic Operating SystemDevelops freshness into governed reconsideration
  2. FoundationThe Code Is No Longer the Hard PartExtends the engineering cost inversion beyond first completion
  3. CompanionThe Application Is Disposable. The Context Is Not.Pair reconsiderability with durable governed context
  4. CompanionThe Most Expensive Model Is Often Compensation for Missing ControlConnect MCSI to the control architecture around completion
  5. ApplicationSoftware Has Entered Its Re-Image EraContinue from repair-versus-reconstruction into reconsideration
  6. Field evidenceFour Days That Changed the Scale of One EngineerSee bounded field evidence for context, control, and durable learning
51 merges · two repositories · one governed systemFour Days That Changed the Scale of One Engineer
  1. ContinueThe Agent Is Not the Product. The Control Plane Is.Adds a frozen operational delta to the control-plane argument.
  2. ContinueThe Agents Were Never the BottleneckPairs the bottleneck thesis with measured post-checkpoint execution breadth.
  3. ContinueStop Prompting Agents. Start Managing Workers.Shows the worker-management doctrine operating across two repositories.
  4. ContinueThe Code Is No Longer the Hard PartConnects cheap execution to the higher-order work of authority, evidence, and integration.
  5. ContinueThe Most Expensive Model Is Often Compensation for Missing ControlProvides a bounded example of leverage arising from control rather than model escalation.
  6. ContinueThe Semantic Operating SystemDemonstrates durable context and next-valid-action semantics in practice.
  7. ContinueThe Interface Is Not the SystemConnects visible output to the governed machinery and provenance beneath it.
AI architecture · Privacy engineeringFrontier Inference Without Frontier Custody
  1. FoundationThe Agent Is Not the Security BoundaryCompanion: The Agent Is Not the Security Boundary
  2. ApplicationThe Agent Is Not the Product. The Control Plane Is.Companion: The Agent Is Not the Product
  3. CompanionThe Semantic Operating SystemCompanion: The Semantic Operating System
Architecture origin storyGhostMesh Was Waiting for Its Technology
  1. CompanionI Was Summoning Ghosts Until I Learned to Build the MachineI Was Summoning Ghosts Until I Learned to Build the Machine
  2. FoundationThe Agent Is Not the Product. The Control Plane Is.The Agent Is Not the Product. The Control Plane Is.
  3. CompanionThe Semantic Operating SystemThe Semantic Operating System
  4. ApplicationThe Code Is No Longer the Hard PartThe Code Is No Longer the Hard Part
Inference economics · Deterministic architectureInference at the Ambiguity Frontier
  1. FoundationThe Code Is No Longer the Hard PartStart with the engineering cost inversion
  2. FoundationStop Prompting Agents. Start Managing Workers.Start with the governed worker model
  3. ContinueThe Agents Are Not the Bottleneck. You Are.Continue into the human-attention bottleneck
  4. CompanionFrontier Inference Without Frontier CustodyCompanion: control the inference boundary
  5. CompanionThe Most Expensive Model Is Often Compensation for Missing ControlCompanion: reduce model dependence through control
  6. ApplicationThe Governed Static Publishing LaneSee the pattern applied to publishing
Deterministic innovationInnovation, Made Visible
  1. ContinueThe Interface Is Not the SystemVisible work needs source, authority, and evidence beneath its surface
  2. ContinueThe Agent Is Not the Security BoundaryAI-assisted improvement still requires accountable controls
Agent safety and system boundariesThe Agent Is Not the Security Boundary
  1. FoundationThe Agent Is Not the Product. The Control Plane Is.Companion: The Agent Is Not the Product
  2. CounterpointThe Agents Were Never the BottleneckCompanion: The Agents Were Never the Bottleneck
AI architecture · Inference economics · Deterministic systemsThe Best AI System Should Need Less AI Tomorrow
  1. FoundationThe Code Is No Longer the Hard PartStart with the engineering cost inversion
  2. FoundationStop Prompting Agents. Start Managing Workers.Start with the governed worker model
  3. ContinueThe Agents Are Not the Bottleneck. You Are.Continue into the human-attention bottleneck
  4. CompanionFrontier Inference Without Frontier CustodyCompanion: control the inference boundary
  5. CompanionThe Most Expensive Model Is Often Compensation for Missing ControlCompanion: reduce model dependence through control
  6. ApplicationThe Governed Static Publishing LaneSee the pattern applied to publishing
Agent Sovereignty · Trusted autonomy at population scaleThe Cloud Is Filling With Ghosts
  1. FoundationThe Agent Is Not the Product. The Control Plane Is.The Agent Is Not the Product. The Control Plane Is.
  2. CompanionGhostMesh Was Waiting for Its TechnologyGhostMesh Was Waiting for Its Technology
  3. ApplicationThe Mesh Is No Longer a DiagramThe Mesh Is No Longer a Diagram
AI evaluation · Intent · Governed autonomyThe Eval Before the Eval
  1. CompanionThe Code Is No Longer the Hard PartCapability abundance moves the hard work outward
  2. FoundationThe Agent Is Not the Security BoundaryCapability and credentials do not create governing authority
Governed AI, Human agencyThe Machine Is Not the Point
  1. FoundationGhostMesh North Star v2Start with the GhostMesh operating-plane foundation
  2. CompanionThe Eval Before the EvalCompanion: The Eval Before the Eval
  3. ApplicationWhen the Agent Had to Ask GitHubApplication: When the Agent Had to Ask GitHub
Compatibility architecture · Execution contracts · Enterprise systemsThe Operating System Is Losing Its Grip on the Application
  1. FoundationThe Semantic Operating SystemBegin with The Semantic Operating System
  2. ApplicationThe Application Is Disposable. The Context Is Not.Continue into The Application Is Disposable. The Context Is Not.
Identity governs the actor. Execution authority governs the state transition.When Agent Identity Is Not Enough
  1. FoundationThe Agent Is Not the Security BoundaryCompanion: The Agent Is Not the Security Boundary
  2. FoundationThe Agent Is Not the Product. The Control Plane Is.Companion: The Agent Is Not the Product. The Control Plane Is.
Governed autonomy · Authority at the edgeWhen the Agent Had to Ask GitHub
  1. FoundationThe Agent Is Not the Product. The Control Plane Is.Start with the governed control-plane boundary
  2. FoundationStop Prompting Agents. Start Managing Workers.Start with bounded worker authority
AI safety · Open weights · AuthorityYou Cannot Recall Intelligence
  1. FoundationThe Agent Is Not the Product. The Control Plane Is.Companion: The Agent Is Not the Product. The Control Plane Is.
  2. CompanionThe Cloud Is Filling With GhostsNext: The Cloud Is Filling With Ghosts

Complete structured fallback

Every publication. Every authored direction.

This view is complete without JavaScript and remains the primary relationship surface for screen readers, print, and constrained browsers.

01
Origin story

I Was Summoning Ghosts Until I Learned to Build the Machine

I thought I was learning how to use AI. What I was really learning was how to externalize intent, structure context, govern change, and convert finished thinking into mechanical execution.

02
Agent worker operating model

Stop Prompting Agents. Start Managing Workers.

Agent workers become dependable only when organizations stop treating them as intelligent prompt boxes and start managing their work through explicit roles, encoded procedures, bounded authority, evidence, measurement, and earned autonomy.

03
Organizational consequence

The Agents Are Not the Bottleneck. You Are.

Agentic systems reduce the marginal cost of execution while increasing the potential rate of unresolved decisions. Once execution becomes cheap, human attention becomes the limiting resource.

04
Capability essay

The Hands I Never Had

AI did not give me systems judgment; it gave the judgment I already had the implementation capacity to express.

Application

Follow capability into operations

The personal essay explains how AI expanded Tony's implementation reach. Demo Debt follows that reach into the operational obligations a convincing implementation does not automatically satisfy.

Read Demo Debt
05
Operating caution

Demo Debt

The demo proves the happy path; the real system begins where exceptions, ownership, recovery, and supportability enter the workflow.

06
Depth, compression, and judgment

Nuance Is Not Analysis Paralysis

AI makes full-fidelity preservation operationally practical because compression no longer has to happen once, permanently, and before future uses are known. Preserve first. Project later.

07
Architecture argument

Your Second Brain Is Not a Production Architecture

A personal memory system optimizes for one person's recall; production architecture must optimize for shared authority, isolation, recoverability, and verifiable state.

08
Systems essay

The Country Where Movement Became Homework

When ordinary destinations are separated and food environments are engineered for effortless excess, movement becomes homework and health becomes an individual obligation created by system defaults.

09
Cultural essay

The World Got Bigger, and So Did the Self

Travel does not automatically broaden the mind. Sustained cultural contact can.

10
Systems and statecraft

A Nation Strong Enough to Face the World

Durable national strength comes from internal capability and governed interdependence, not economic, intellectual, or diplomatic isolation.

11
AI and human agency

The Human Is the Bottleneck

As frontier model access broadens, the scarce advantage shifts to human imagination, judgment, decomposition, orchestration, verification, and restraint.

12
Operational agent systems

The Agents Were Never the Bottleneck

Capable agents became useful when Tony engineered the repositories, access, tools, authority, validation, evidence, and completion paths that made bounded work operational.

13
Autonomous institutions · Human judgment

The Human Is Not the Fallback

Mature autonomy does not eliminate the human. It stops wasting the human.

No governed onward reading direction is recorded for this publication yet.

14
Governed static delivery

The Governed Static Publishing Lane

A qualifying static site should inherit an approved publishing system rather than implement its own delivery pipeline.

15
AI cost observability

Token Burn

Token composition, model choice, workload shape, and dated provider pricing must remain visible if AI consumption is going to become economically inspectable.

16
AI engineering · Database forensics · Legacy systems

The Database Had Been Wrong for Twelve Years. AI Made It Worth Fixing.

The breakthrough was not that AI knew the answer. It made a technically solvable but economically irrational investigation practical by turning probabilistic reasoning into a sequence of deterministic tests until one causal explanation survived.

17
AI · Expertise · Service

AI Is Leverage. Expertise Is the Multiplier.

AI compresses execution. Expertise shapes the result. Service gives the capability purpose.

No governed onward reading direction is recorded for this publication yet.

18
Abundant machine work, scarce institutional trust

Beyond the Agent

Frontier intelligence and execution are becoming abundant; institutional scarcity moves upward into coordination, verification, authority, human attention, current state, and trust.

19
Church technology · Digital workplace · Institutional memory

Choosing the Church’s Digital Workplace

Microsoft is arguably the more powerful enterprise toolbox. Google Workspace is the better operating foundation for this institution, with the Living OS as the simplified front door and institutional-memory layer.

20
Inference economics · Operator leverage · Cognitive allocation

Cognitive Capital

Machine cognition becomes organizational capital when validated reasoning is converted into persistent, reusable assets that preserve or increase capability while reducing future uncertainty, cost, risk, or marginal cognition.

21
Browser-local review

Digital Estate Defense

Useful review can stay local, bounded, and explicit about what it can and cannot establish.

No governed onward reading direction is recorded for this publication yet.

22
Continuous reconsiderability · Governed adaptation

Done Has a Half-Life

Everything meaningful should become explicitly done. Nothing meaningful should become permanently exempt from reconsideration.

23
51 merges · two repositories · one governed system

Four Days That Changed the Scale of One Engineer

The force multiplier is not the model. The force multiplier is the system that surrounds the model with context, authority, bounded execution, deterministic verification, protected review, operational evidence, and durable learning.

24
AI architecture · Privacy engineering

Frontier Inference Without Frontier Custody

Keep authoritative source custody under organizational control. Export only the minimum reasoning surface required for the approved task.

25
GhostMesh North Star · August 4, 2026

GhostMesh North Star v2

Intelligence may be temporary. Authority, meaning, evidence, state, recovery, and useful Work must not be.

No governed onward reading direction is recorded for this publication yet.

26
Architecture origin story

GhostMesh Was Waiting for Its Technology

GhostMesh is a persistent system built from temporary intelligence. The same durable-memory and temporary-worker pattern at its center was used to reconstruct its own history.

27
Inference economics · Deterministic architecture

Inference at the Ambiguity Frontier

Inference belongs at the ambiguity frontier. Determinism belongs everywhere behind it.

28
Deterministic innovation

Innovation Does Not Have to Be Big

Innovation is the disciplined act of noticing friction and improving it.

No governed onward reading direction is recorded for this publication yet.

29
Deterministic innovation

Innovation, Made Visible

Deterministic innovation wins because repeatable improvement creates more durable enterprise value than novelty without control.

30
SharePlane Market

Lectric XP Step-Thru 2.0

A remarkably low-mileage folding step-thru e-bike presented with current seller photographs, privacy-safe purchase provenance, official owner documentation, and clear private-party disclosures.

No governed onward reading direction is recorded for this publication yet.

31
Dogs, memory, and the architecture of home

Once You’ve Had a Bichon

Dogs became part of the structural continuity of Tony and Tomoko’s life, while Bichons changed the routines, obligations, and emotional geometry of home.

No governed onward reading direction is recorded for this publication yet.

32
Dogs, memory, marriage, and the architecture of home

Once You’ve Had a Bichon

Dogs became part of the structural continuity of Tony and Tomoko’s life; Sophie changed the emotional architecture of home, while Peko and Sachi continue that household without replacing her.

No governed onward reading direction is recorded for this publication yet.

33
Sovereign Recovery · Independence before emergency

Rent the Compute. Never Rent Your Ability to Survive.

Dependency without independently executable recovery creates systemic risk regardless of deployment model.

No governed onward reading direction is recorded for this publication yet.

34
Software economics · reconstruction

Software Has Entered Its Re-Image Era

For a growing class of ordinary applications, repair no longer deserves automatic economic privilege. Preserve the product truth, evidence, data, contracts, controls, and provenance, then make reconstruction compete with maintenance as an engineering decision.

No governed onward reading direction is recorded for this publication yet.

35
Design memory · Visual authority · Governed learning

Taste Is Infrastructure

High-quality AI web design is not primarily a property of one frontier model. It emerges from a system that preserves intent, precedent, visual authority, owner judgment, verification evidence, failure memory, and the right to learn from all of them.

Foundation

Foundation: The Machine Is Not the Point

The Machine Is Not the Point establishes that abundant machine capability makes human judgment, explicit authority, evidence, and responsibility more consequential; Taste Is Infrastructure applies that principle to visual judgment, design memory, and what an AI design system is allowed to learn.

Read The Machine Is Not the Point
Companion

Companion: Beyond the Agent

Beyond the Agent explains why scarce value moves from model capability into institutional coordination, verification, authority, current state, and trust; Taste Is Infrastructure examines the same system-over-model shift inside visual design and governed learning.

Read Beyond the Agent
36
AI access · Cognitive opportunity · August 2026

The AI Underclass Will Be Built With Access Controls

The AI underclass will be defined less by who has AI than by who can obtain the best intelligence, how much they can afford, how freely they can use it, and whether governments or providers permit access to its full capabilities.

No governed onward reading direction is recorded for this publication yet.

37
The control plane around it is.

The Agent Is Not the Product. The Control Plane Is.

The more useful an agent becomes, the less its safety can depend on the agent behaving well. The durable product is the governed execution environment around it.

38
Agent safety and system boundaries

The Agent Is Not the Security Boundary

Do not ask whether the agent is trustworthy. Ask whether the system remains safe when the agent is wrong.

39
The durable asset is the context

The Application Is Disposable. The Context Is Not.

When software can be regenerated cheaply from governed context, the application is no longer the durable asset. The context is.

40
Attention, failure, and understanding

The Beautiful Hour

Attention creates the conditions for understanding. Direct experimentation reveals the boundaries. Failure supplies the evidence. AI accelerates all three, but it also accelerates confusion when the operator mistakes output for knowledge.

41
AI architecture · Inference economics · Deterministic systems

The Best AI System Should Need Less AI Tomorrow

Use intelligence to conquer ambiguity, capture what works, and retire inference when uncertainty disappears.

42
Faith, belonging, and visible mercy

The Church Doors Were Open. The Table Was Closed.

Christian faith should be judged less by the boundaries a church defends and more by the people it serves.

43
Agent Sovereignty · Trusted autonomy at population scale

The Cloud Is Filling With Ghosts

The cloud increasingly contains persistent non-human actors, so the strategic infrastructure problem is how to govern machine authority at population scale without surrendering control.

44
The operating system around execution

The Code Is No Longer the Hard Part

As AI reduces the relative cost of implementation, durable engineering value moves outward into intent, authority, context, orchestration, evidence, recovery, and institutional integration.

45
Tony Brain evidence scale

The Contextual Brain We’re Building

A contextual brain becomes credible when its scale, freshness, source authority, imported evidence, remaining backlog, and public boundary remain visible as one inspectable system.

46
Digital archaeology, reasoning lineage, and continuity

The Dig Is Getting Deeper

A deep digital archive can preserve more than memories. When chronology, provenance, contradictions, corrections, relationships, and uncertainty survive together, the archive can begin to preserve evidence of how a person reasoned.

No governed onward reading direction is recorded for this publication yet.

47
AI evaluation · Intent · Governed autonomy

The Eval Before the Eval

A sufficiently capable autonomous system can execute a bad objective beautifully; consequential intent needs an explicit, evidence-bearing admission boundary before autonomous amplification.

48
Provenance of Thought

The Interface Is Not the System

Operate at root, not merely at the interface.

49
Support operating model

The Lost Art of Technical Support

Every support capability should reduce uncertainty before transferring a problem; otherwise tiered support becomes expensive routing.

50
Diagnostic discipline

The Lost Discipline of Fault Isolation

Troubleshooting is the disciplined reduction of uncertainty through observation, bounded hypotheses, meaningful tests, and explicit elimination of possible causes.

51
Governed AI, Human agency

The Machine Is Not the Point

As machine capability becomes abundant, human judgment, explicit authority, evidence, and responsibility become more consequential, not less.

Foundation

Start with the GhostMesh operating-plane foundation

GhostMesh North Star v2 makes durable authority, evidence, state, recovery, and human meaning first-class operating-plane concerns; this essay distills those engineering lessons into an argument about human agency as machine capability becomes abundant.

Read GhostMesh North Star v2
52
Agent-native computing · Endpoint authority · Durable Work

The Malleable Computer Is Here. Now Who Holds the Keys?

Omarchy matters because it turns the desktop into inspectable, scriptable state that an AI agent can understand and alter. Its next decisive problem is not usability. It is authority: who may change what, under which policy, with what evidence, and how the machine proves what happened.

No governed onward reading direction is recorded for this publication yet.

53
GhostMesh field report · August 6, 2026

The Mesh Held, but Not Because Nothing Failed

The important result was not that the system made all of this efficient. It did not. The important result was that the system increasingly refused to let confusion become silent corruption.

54
GhostMesh crossing complete

The Mesh Is No Longer a Diagram

GhostMesh became real when authority, execution, evidence, cleanup, and replay survived outside the conversation and outside any individual worker.

55
Human-machine cognitive continuity

The Mind Is Sparse. The Machine Should Remember.

Intelligence requires selection. Continuity requires reconstruction. The human can follow the idea; the machine can hold the thread.

56
Governed model routing

The Most Expensive Model Is Often Compensation for Missing Control

Trusted completion cost falls when intent, authority, routing, and validation carry their share of the work.

57
Compatibility architecture · Execution contracts · Enterprise systems

The Operating System Is Losing Its Grip on the Application

Stop asking whether it is a Windows application. Ask what execution contract the application actually requires.

58
Semantic Operating System

The Semantic Operating System

A system becomes a semantic operating system when it preserves the governed conditions under which meaning remains identifiable, authoritative, explainable, movable, and actionable.

Application

See the operating thesis become a public publishing system

The semantic operating system names the governed conditions for meaning to move safely; SharePlane shows that thesis applied as a public system that preserves source, authority, relationships, and the next valid action.

Read What SharePlane Is
59
Radios, fault isolation, and creative leverage

The Signal Was Never Clean

A life spent tuning noisy systems teaches you not to confuse a clean reading with truth. AI did not give me judgment or ideas; it shortened the distance between what I could see and what I could finally build.

60
Move the boundary

The Telephone Is Not the Recorder

The problem is not that the iPhone cannot record both sides of a telephone call. The problem is that the iPhone does not own the call path.

61
Semantic Lock

What SharePlane Is

SharePlane presents serious AI-assisted work beautifully while preserving its authorship, sources, relationships, revision history, review evidence, and governed learning. A concise orientation opens the door, but the complete argument remains the primary work.

62
Identity governs the actor. Execution authority governs the state transition.

When Agent Identity Is Not Enough

Enterprise agent governance becomes insufficient when a legitimate actor can still attempt an illegitimate state transition; identity, runtime enforcement, execution authority, evidence, and convergence must remain distinct control layers.

63
Governed autonomy · Authority at the edge

When the Agent Had to Ask GitHub

A mature autonomous system must know where its authority and evidence end, and route unresolved questions to the human or institution that actually owns the answer.

64
AI · Professional authority · Boundary recognition

When the Patient Brings the Better System

Trust should move with demonstrated capability. Authority should move more carefully. Action should remain constrained by consequence, and escalation should be treated as part of competence.

No governed onward reading direction is recorded for this publication yet.

65
Cognitive infrastructure for AI work

You Cannot Keep an AI Codebase in Your Head

AI-assisted development can produce consequential change faster than a human can maintain a coherent internal model of the system. Durable engineering state must therefore be externalized across versioned intent, authority, implementation, validation, evidence, operations, and knowledge.

66
AI safety · Open weights · Authority

You Cannot Recall Intelligence

Once capable AI can be copied, modified, and operated outside the publisher's control, model behavior can no longer carry the full burden of safety. Defense in depth is required: stronger safeguards before release, explicit authority boundaries where intelligence meets consequential systems, and institutional resilience where no control plane owns the boundary.