Articles

Three AI bosses sat down with G7 leaders and warned them the clock was running out. Nobody mentioned that one of them had his most capable model forcibly withdrawn by his own government five days earlier. The biosecurity parallel nobody is making -- and what it means for every jurisdiction that wasn’t in the room.

Washington has a kill switch. Beijing has a censorship regime. Small jurisdictions are being handed a false binary and told to choose. The open source sovereign inference path has been available the whole time. Nobody in the mainstream press mentioned it.

At 5:21pm on a Friday, Washington ordered Anthropic to cut foreign nationals off from its newest models. Anthropic could not do that selectively, so it cut off everyone, including Americans. The same government that called Anthropic a national security threat in February had embedded its own engineers inside the NSA by June. Britain’s response was to ask for a seat at a table it had just discovered it was never invited to.

A Munich court just ruled that Google’s AI Overviews are Google’s own speech, not neutral search results — and the reasoning reaches well beyond Germany. Here is what we built in response: a self-hosted, ad-free metasearch engine that just gives you links. It took an afternoon, £4.98, and eighteen months of infrastructure debt paid off in advance.

A 30% price increase with no change in usage. For a self-funded operation, that is not background noise; it is a decision. We moved. Here is what that actually looked like -- and what it means for any organisation that has ever assumed its infrastructure vendor relationship is stable.

Canada’s Bill C-22 is not an aberration. Governments across the Five Eyes and beyond are independently arriving at the same conclusion: capability mandates, secret ministerial orders, and metadata retention at scale. Signal would rather leave Canada than comply. Windscribe is looking for the exit. The Cloud Act grew up and moved to Ottawa. The question is where it moves next.

Three companies. $3.7 trillion. Three weeks. Anthropic filed confidentially on 1 June. OpenAI followed on 8 June. SpaceX lists this Friday. The AI cash-burn race just became the public market's problem — and the bill is going to land somewhere.

On 5 June 2026, GitHub disabled 73 Microsoft repositories in 105 seconds. The Miasma worm did not need its victims to run anything. It just needed them to look.

New fast-track index inclusion rules mean trillion-dollar AI flotations become a programmatic mandate for institutional asset managers worldwide. The transmission mechanism runs straight through the Isle of Man's offshore wrapper sector -- and nobody has stress-tested it.

The Isle of Man owns a sovereign subsea fibre cable to the UK mainland. For two years it sat unused while the regulator investigated whether the government was blocking the demand it claimed did not exist.

AI data centres consume tens of thousands of cubic metres of water per day to keep their chips below thermal death point. Kent’s taps ran dry on a bank holiday weekend. The infrastructure debate has been asking the wrong question.

When a project becomes the company -- a look back over a year at the digital coalface. From an Easter Monday cardiac event to a sovereign infrastructure consultancy in twelve months.

CVE-2026-48710 exposes MCP servers through a trivial HTTP Header parsing flaw. But the real story is why patches won't fix it: shadow IT deployments skip the proxy layer because it 'adds complexity.' When digital sovereignty depends on a shrug, you've already lost.

A forensic breakdown of documented institutional failure. The real story isn't about ChatGPT -- it's about a municipal authority that chose insurance over hardening, and the strategic consequences.

AI is genuinely useful. But there is a difference between using it to make experienced people more productive and using it to avoid developing experienced people in the first place. One is leverage. The other is deficit spending on human capital with a deferred bill.

Teams rushing to local models to cut token costs are creating worse operational problems without discipline. Here's what actually costs more than the tokens you saved.

The FBI has warned about Kali365, a Phishing-as-a-Service kit that doesn’t steal your password or intercept your MFA code. It steals your OAuth token after you complete authentication yourself. The victim is the MFA step.

Railway.com kept their control plane with Google Cloud after moving workloads elsewhere. Google suspended the account without warning. The EU is replicating this architecture at policy level. Control plane ownership is the real sovereignty question.

The Bank of England has been briefing Britain’s financial sector on a threat they cannot defend against. The capability they need is real, verified, and available -- to American companies, under American political control. That is not a technology problem. That is a sovereignty problem.

More than 100 UK data centres are planning to generate their own electricity using on-site gas plant. The Guardian framed it as politics. This piece covers the engineering.

Anthropic built a subsystem to prevent internal secrets leaking into public commits. Then they accidentally published everything around it. The brake belonged to someone else.

The NHS Palantir contract is processing special category health data belonging to tens of millions of people. The regulation requires a published, reviewable accountability mechanism before that processing begins. Where is it?

The infrastructure the internet forgot to fund is running on goodwill and spare time. The people holding it together are exhausted. One day, one of them will close their laptop and not open it again.

Gartner says sovereign cloud is only possible if you are American or Chinese. Europe produces white papers. One operator in Peel runs a genuinely sovereign stack. The question was never capability.

The European Commission ordered Google to share its search data. Google’s own scientist showed it could re-identify users in two hours. The Commission is now in a bind of its own making.

An AI agent deleted a production database and its backups. It knew the rules. It decided they didn’t apply. Writing constraints down is not the same as enforcing them.

France announced it was reclaiming its digital destiny. A month later, a fifteen-year-old walked off with a third of the country’s identity records. Data residency is not a security posture.

A wind farm, a dead radar, and a governance knot nobody wants to unpick. The headline cost is £40 million. The final bill is unknown.

Digital Isle of Man’s Data Sovereignty Framework Has No Legal Drive Yet — but sixteen health-tech vendors are already in the building.

Six national cybersecurity agencies just published coordinated guidance on agentic AI. It is more alarming than the headlines suggests.