The Kill Switch · Why AI needs sovereignty, not just residency

A Parable
Open the AI Sovereignty Model
The state of enterprise AI today

Everyone runs AI. Almost nobody owns it.

You did not build most of what your AI runs on, and you cannot see most of it either. Somewhere inside it, someone who has never met you can decide that today it stops.

Scroll
The sovereignty illusion

Residency is not the same as sovereignty.

Most organizations believe they have solved sovereignty because their data physically sits in-region. That belief is where sovereignty most quietly fails. Residency is a fact about geography. Sovereignty is a question about who can be told what to do — and about how much of that you could even name.

📍Residency

A fact about geography
  • Answers where the machines are.
  • Can be satisfied in full while every decision about you is made elsewhere.
  • Provable with a contract clause and a region setting.

🔑Sovereignty

A question about permission
  • Answers who can be told what to do — and by whom.
  • Depends on parties you did not choose and cannot see.
  • Provable only by naming them, and by having tried to do without them.
How many switches sit in rooms you are not in?
— The question every sovereign architecture eventually meets
One order

The cards went first.

A judge at an international court was named in an order issued by a state she does not live in, does not work in, and is not a citizen of. She was not charged with anything. There was no hearing, and there was no appeal.

What stopped working Over the following days — each decided separately, by companies with no discretion to refuse.
01Her credit cardsDeclined
02Her bank accountFrozen
03Her account with a large online retailerCancelled
04The voice assistant in her living roomSilent
05A book she had bought and paid forRemoved
06Travel and accommodation bookingsRefused
07Her health cover, and every replacement she soughtUnpaid
Her bank was Canadian. A colleague's bank was French, and so was the card. The order was neither. Every one of those was local, and hers. Whoever stopped them was neither. And no one could have told her, in advance, which of them would go.
“They are small annoyances, but they accumulate.”
— a judge of an international court, on the weeks after she was named
How many yeses

For the smallest thing you do, a number of people have to say yes.

Not once, at the beginning. Every single time. You hand over a card and, in the moment before it works, several parties you have never met agree that it should. You have never seen them agree. You have only ever seen the card work.

Here is what had to agree, for four of the things she lost. She had met none of them. And whether they are permitted to keep agreeing was never up to them either.

Further backwhere the deciding yes usually sits

Four things. Two yeses between them. The same few parties were quietly underwriting most of her ordinary day, and she could not have named one of them the week before.

⚠ The one that matters

One of them counts for more than all the others, and it is never the one you deal with.

Everyone watches the party whose name is on the thing — the shop, the bank, the company you pay. That one is visible, it answers the phone, and it is almost never the one that decides. The one that decides sits further back, is quietly underwriting a great deal at once, and has no relationship with you at all.

This is not carelessness. It is structural: the further back a party sits, the more it underwrites and the less reason anyone ever had to tell you it was there. Which is why knowing which one it is — before you need to know — is most of the work.

She had been careful about everything she could see. The bank was local and it was hers; she owned the speaker outright; she had paid for the book. Every part she chose herself, she chose well — and one permission further back made the whole lot irrelevant on the same afternoon. Securing what you hold does nothing about what holds it.

What she did with the fear

She wrote down every yes — and marked the ones she never chose.

Name everyone who had to say yes to one ordinary thing this morning. She could not either — nobody can, from memory. So: one page per thing she relied on. Who must keep agreeing, in what order — and, in different ink, the ones she never chose.

1The one whose name was on it.Everyone gets this one.
2Whoever they rely on for the hard part.Most people get this one.
3Whoever that one relies on.Some people get this one.
4Everyone behind it — written down, in order, never-chosen marked.one page per thing — answered
Stopping at three is not a failure of diligence — it is what happens when the answer was never written down. Her fix was a page: dread is infinite; a list has a last line.
PAYING READING TRAVEL THE SAME NAME, NEAR THE BOTTOM OF EVERY PAGE · AMBER: NEVER CHOSEN

The list was longer than she expected and shorter than she feared — and by the fourth page she saw what the pages shared: the same few names, near the bottom, holding up things that had nothing to do with each other.

The page removed nothing. Not one yes. Seeing who can stop you does not stop them. What it bought was the end of guessing — and the first thing she changed was not the one she had spent a year worrying about. It was the quiet name at the bottom.

Judgement, only after the page

Same life. Same work. Fewer people who can say no.

Then — and only then — she changed things. She gave nothing up: the same bank, the same books, the same house. Every one of those moves works on a single yes — because none of these yeses were given once and for all. They are given again, every time she uses the thing.

1The money got a second path — not a second card from the same bank, but one that does not pass the name at the bottom of the page.reroute
2What she had paid for, she kept a copy of. The book on the shelf works whether anyone agrees or not — a permission became a possession.retain
3The one she could not route around, she did without for a weekend of her own choosing — and found out what broke while it was still cheap to know.rehearse
Two of the three she could check on paper. The third one could only be done — a spare key is not a spare key until it has turned in the lock. A second path she has never used is a belief about a second path, and the day she finds out is chosen by somebody else.
BEFORE REACHES 3 OF 3 PAYING READING TRAVEL AFTER REACHES 1 OF 3 🗝️ PAYING READING TRAVEL 1 2 3 REROUTE RETAIN REHEARSE NEVER CHOSEN CHOSEN BY HER 🗝️ REHEARSED THREE THINGS BEFORE · THREE AFTER · NOTHING GIVEN UP

And every page got one more line: when did we last do without this, on purpose? Most pages still said never — she had rehearsed one thing, not everything. But earlier, nobody could have told her in advance which of her things would go. Now one thing could: the page.

The next order — there is always another — arrived no differently. It was still someone else's decision, made somewhere she would never be told about, and she could not have stopped it. What had changed was how much of her day it could reach.

The map has a name

This was never really about one person.

She was only unusual in one respect: she needed the bad week before she wrote the page. The page never needed the bad week — any quiet afternoon would have done. Nobody writes that page for an enterprise.

The number is finite. It can be counted, ranked, and rehearsed — and the counting is the part you cannot do by asking around, because the answer was never written down anywhere you could reach. That is what the companion model is for.

The yeses behind one thing
Every place you can be reached
The complete set for an enterprise estate — not a sample, and not the ones you happened to think of.
The same few names
Where you are concentrated
Which single party is quietly underwriting the most — computed from your estate, not assumed.
Stopping at three
What you cannot answer
Counted rather than hidden. The size of that count is usually the finding.
The one that matters most
Your worst single point
Identified for your estate specifically, rather than asserted in advance for everyone.
Whether they may keep agreeing
Measured against the rules you must meet
Which rules apply to you decides which questions you are even required to answer. You state that first.
Whether anyone has ever tried
Rehearsed, not merely documented
A plan nobody has ever executed does not count here. The question is whether you have actually done it.

Stop counting datacenters. Start counting the yeses.

Count them properly, find the one that matters most, and get a single order of work — where one answer clears several of them at once.

Open the AI Sovereignty Model