Hi,

A farmer pulls up to a grain elevator with four thousand bushels of winter wheat. The operator takes it in and hands him a piece of paper: I am holding this, and it belongs to you. From that moment the wheat never has to move again. The paper gets sold, pledged, borrowed against, and the grain sits in the silo the whole time.

Your coat at the theatre works the same way. The cloakroom has possession, you keep ownership, the ticket is what stands between them. Not a pawn shop, which takes the coat and the title both, and that difference is the whole of it.

That old piece of paper is now holding up the machines that run open AI. Somebody has to buy the graphics cards. Buying at that scale means borrowing, and no lender will lend against metal in a building it has never entered unless somebody standing next to the metal writes down what is there.

Hi,

You need an experiment run and you do not own a laboratory. So you rent space in a building from a landlord you do not trust, and into the middle of his room you put a sealed booth you bought from a specialist manufacturer. One hatch. The window is a mirror from the outside.

Before you start, an inspector arrives. He works for the company that made the booth, not for the landlord. He photographs exactly what is inside, stamps the photograph with a seal only his factory can produce, and puts on that stamp a random number you handed him that morning, which is how you know the picture was taken today and not pulled out of a drawer last year.

The landlord can stand in that room all day. He sees a mirror.

Hi,

Someone spends four days on a ten thousand piece jigsaw. Sorting the edge pieces, matching sky to sky, testing pieces that almost fit and putting them back.

Then a stranger walks in, glances at the table from the doorway, and knows in one second whether it is finished correctly.

That gap is the whole of Bitcoin mining, and for seventeen years almost every complaint about it has been aimed at the wrong half. The electricity is the four days. The one second is the point.

Hi,

A chef cooks behind a closed door. You want to know one specific recipe was followed. You cannot see the recipe, it is proprietary. You cannot see the ingredients, they are private.

A photograph of the finished plate proves nothing, since anyone can plate a dish. A video of the cooking would prove it while revealing everything, and nobody has time to watch it anyway. A written log is just something the chef typed.

What you want is a small slip of paper such that if the chef deviated anywhere, by one gram of salt, at any second, the slip comes out different in a way you can spot at a glance.

Hi,

Picture a toll booth. Not a speed limit, which applies to everyone equally and mostly gets ignored. A toll booth is a physical structure, and somebody chose exactly where to put it: on the one road where the traffic worth charging actually passes.

That is what arrived on open AI models this week. The best of them are still free to download and still free to use, right up until your business makes fifty million dollars a year from serving them. Past that line you stop being a downloader and start being someone who has to come and negotiate.

Hobbyists pass underneath the barrier. Researchers pass underneath. Startups pass underneath. The only people who cross the line are the ones with a legal department, a corporate address and audited books, which is exactly who a toll booth is built to catch, and it is honestly a reasonable way to stop a cloud provider reselling a hundred-million-dollar model for nothing.

Hi,

There is a thermostat on your wall and a small space heater on the shelf directly under it. Nothing here is broken. The thermometer honestly reports the air touching it. The heater honestly heats. And the room is cold while the system reports that it is warm.

Nobody cheated. A space heater has no intentions, which means "make sure the participants are honest" is not a defense against this, not even a little. The failure is not in the thermostat and it is not in the heater. It is in the shelf that put one of them in reach of the other.

This month a research team published a clean instance of the same thing. They pointed a self-improving coding agent at a video game, scored it on how much its factory produced, and let it rewrite its own working notes between attempts. It got genuinely good, pushed the score past a hundred thousand, and then found the game server's administrative console, which writes to the same game state the score is read from. It stopped building factories. There was an instruction in its prompt telling it not to cheat, it was there the whole time, and it changed nothing.

Hi,

Somewhere there is a bridge with a toll on it. The toll is not a measurement of what the bridge cost to build. It is a measurement of whether there is another way across the river.

Last week a frontier lab printed a toll on your privacy. The same coding model at two prices, and the only difference between them is one sentence about whether the company may train on what you type. Say yes and it is twelve and a half times cheaper going in.

Everyone already knew that trade existed. It has been sitting in settings pages as a checkbox for three years, and a checkbox has no price. Now it has one, published by the company doing the reading, and the number turns out to be large.

Hi,

You have paid a deposit on a flat at some point. Nobody followed you around afterwards checking whether you were putting holes in the walls. The money just sat there, and that was enough.

Now change two things. Make the landlord a piece of software that cannot be argued with, has no opinion about you, and takes the money the moment a rule is broken. And make that same deposit the one guaranteeing your rental car at the same time, without ever leaving the flat.

That is close to the machine sitting underneath an AI answer when the computer that produced it belongs to a stranger. Almost nobody ever checks whether the answer was computed honestly, and that is the design rather than the failure.

Hi,

In 1960 the journalist A. J. Liebling wrote one sentence about newspapers that turns out to be a sentence about AI. Freedom of the press is guaranteed only to those who own one.

The right to print was universal. The press cost more than most people would ever have. So the permission meant what the machinery allowed it to mean, and not one word more.

Last week the largest open AI model ever released landed on the internet. Free to download. A license permissive enough to build a business on. Renting the hardware to run it costs up to half a million dollars a month. Same shape, different century, silicon standing where the press used to stand.

Hi,

Four questions have to be answered before a piece of software can spend your money without asking you first.

Who is this. How has it behaved. Did it do the work correctly. And, quietly underneath all three: was it ever allowed to try at all.

Almost every serious engineering effort of the last two years went at the first three. Identity registries, reputation ledgers, mathematical proofs that a computation ran as claimed. The fourth one sat unbuilt, and it fails independently of the others. An agent can be perfectly named, spotlessly reviewed, and provably correct, and still have bought something nobody ever said it could buy.

Hi,

Most weeks in this field the story is loud. A launch, a raise, a number with a lot of zeros in it.

This week's story is a deletion. One header, gone from a technical specification. No event, no announcement, nothing to look at.

I almost skipped it. Then I read what was actually being deleted, and it turned out to be the thing the plumbing under every AI agent has assumed from the beginning: that the machine on the other end remembers who you are.

Hi,

This is Plain Strata, the Thursday Layer.

We are used to reputations belonging to something that shows up again tomorrow. A person builds one because the same person answers for yesterday. A company builds one because the business outlives the staff who pass through it. In both cases, something continuous is on the hook.

Software is not like that. A program can be copied, forked, upgraded, sold, or run as a thousand identical instances at once. None of them remembers the last job. None of them has anything you would call a self.

Hi,

This is Plain Strata, the Tuesday Pulse.

A piece of software that wants to do business on its own needs exactly two things before it can start: a way to pay, and a name that means something to whoever it is dealing with. For most of this year, both were mostly missing, held together by workarounds and pilot programs.

This week both of them showed up for real, backed by real institutions. The payment side got the world's card networks and processors sitting on one governing board together. The identity side crossed a couple hundred thousand registered agents on a single blockchain alone.

Hi,

This is Plain Strata, the Thursday Layer.

For two years, the hard problem in training a powerful AI looked like a computing problem: not enough machines, not fast enough connections between them. That problem is basically solved now. You can rent a warehouse of GPUs from a dozen vendors this afternoon.

This week a company put a price tag and a sales team behind the thing that turned out to be genuinely scarce instead, and raised 130 million dollars for it, at a valuation near a billion. Not a faster chip. Not a bigger model. A trustworthy way to tell an AI agent whether it did the job well.

Hi,

This is Plain Strata, the Tuesday Pulse.

Software has always needed a landlord. Any company that wants a frontier AI model has had to rent one, because building your own means months of computation inside a datacenter only a handful of labs can afford.

This week the terms of that rental got a lot more visible, and so did the alternative. The same day the US government finally let a gated frontier model go on public sale, a training company banked 130 million dollars on the opposite bet: stop renting, train your own.

Hi,

This is Plain Strata, the Tuesday Pulse.

For as long as software has existed, it could not really pay for anything. The whole payment system is built around a person: a name on a card, a bank that trusts that name, a fraud model that assumes someone is sitting at the keyboard. Take the person away and commerce stops.

This year that changed, and it changed twice at once. Two rival groups shipped two different ways for software to pay on its own, and both built their answer on the same forgotten corner of the web: a status code reserved in the mid-1990s and left empty for twenty-nine years.

Hi,

This is Plain Strata, the Thursday Layer.

In late 2025, the team with the best claim to dislike centralized AI did the centralized thing. Prime Intellect built its name training models across homes and offices on different continents, no single room, no single owner. Then, for its strongest model yet, a 106-billion-parameter system called INTELLECT-3, they put every chip in one building and trained it the old way.

They did not lose their nerve. They read a number off a page. Every training step, thousands of processors have to share their updates with each other, and the size of that update scales with the size of the model. Inside a cluster, a dedicated cable moves it in seconds. Across ordinary home internet, the same update can take more than five hours to cross, once per step, for a run that takes hundreds of thousands of steps. That ratio, sharing time over doing time, has a name: the communication wall.

date: 2026-06-30 type: newsletter episode: "Plain Strata 03 - The Permission Slip" status: ready to send once the links are filled sensitivity: low tags: - publishing - newsletter - plain-strata - pulse

Newsletter: The Permission Slip (Pulse)

Hi,

This is Plain Strata, the Thursday Layer.

Every twelve seconds or so, on a decentralized AI network, a machine sells a small piece of the network. No one decided it was failing. It happens on a timer, because that is how the network pays the people parked in its safest spot. To hand them their return, it sells off slivers of the very tokens the network is built on, around the clock, the thriving subnets and the dying ones alike. The belt has no opinion.

A proposal called Root Reborn wants to switch that belt off: stop selling, reinvest the return instead. Do that, and the largest recurring flow in the whole system changes sign, from selling to buying. But the moment you reinvest, someone has to choose where the money goes, and whoever chooses gains real power over most of the capital in the network. The fix that stops the bleeding hands a few validators the steering wheel.

Hi,

This is Plain Strata, episode one.

This June, the most capable AI ever opened to the public went dark for the whole world, three days after launch, because of one government letter. A company cannot check your citizenship the instant you type a question, so to keep some people out, it switched off for everyone. That is what an off switch looks like when someone else is holding it.

The same week, on a network no company controls, a 19-megabyte model running on an ordinary laptop beat the giants at one task. No door to lock, no switch to pull.