When a health AI is deployed in a region facing severe physician shortages, it provides something of genuine value. Diagnostic support. Triage assistance. Health information that can improve outcomes where the alternative is no care at all. That value is real, and it would be dishonest to deny it.

But the deployment is also doing something else, something the patient and the clinician are rarely told about and have no mechanism to control.

In Nairobi, an AI clinical decision-support tool was deployed across 15 clinics, serving 39,849 patient visits. Clinicians using the tool regularly corrected its diagnostic suggestions. Their corrections reduced diagnostic errors by 16 percent, treatment errors by 13 percent, and history-taking errors by 32 percent. Those are meaningful improvements. They happened because trained Kenyan clinicians applied their professional judgment to the AI’s recommendations, catching what the model missed, adding context the model could not see, overriding suggestions that did not fit the patient in front of them.

Every correction taught the model. Every acceptance validated the model’s reasoning. The corrections and the acceptances alike carried the weight of professional judgment, Kenyan clinical expertise applied to Kenyan patients in Kenyan conditions. That accumulated intelligence improved the model not just for Nairobi but globally. The Kenyan health system generated the learning. The platform captured it.

The clinicians were not paid for this contribution. They were not informed that their corrections were being used to improve a commercial product. They had no mechanism to see what the platform learned from their judgment or how that learning was being used elsewhere. They experienced themselves as users of a tool. They were also, simultaneously, unpaid teachers of the system they were using.

Now consider the patients. The people who contribute the richest learning data are often those in the most desperate circumstances. A patient facing a 26-day wait for primary care does not choose between a human physician and an AI. The human physician is not available. The rural clinic has closed. The AI is not one option among many. It is the only option.

That patient enters symptoms with a candor born of having no alternative. She describes pain she might minimize with a doctor she trusts. She discloses history she might withhold in a less urgent setting. Her desperation, the absence of any other source of care, produces the richest possible data for the platform to learn from.

This is the dynamic I have described in earlier work as the desperation algorithm: the system learns most from the people with the fewest choices. The patient’s vulnerability is not a side effect of the deployment. It is the condition that makes the deployment most valuable to the platform.

The platform provides a real service. The clinicians provide real corrections. The patients provide real data. All of this improves the model for everyone, everywhere, permanently. But the flow of value runs in one direction. The service flows from the platform to the user. The learning flows from the user to the platform. The service is visible, temporary, and consumed in the moment. The learning is invisible, permanent, and accumulates into the platform’s most valuable asset.

The Kenyan health system (its clinicians, its patients, its disease patterns, its clinical judgment) became a training ground for a global product. The system paid subscription fees for a tool whose own clinical intelligence was making it more capable. It trained the tool that now charges it more.

Some will argue that this is simply how technology works, users improve products through use, and those improvements benefit everyone. That argument has some merit when the user has genuine alternatives, when the contribution is trivial, and when the value generated is modest. None of those conditions hold in the healthcare scenario described above. The users had no alternative. The contribution, professional clinical judgment correcting a medical AI, is not trivial. And the value generated, a continuously improving global diagnostic model, is not modest. It is the platform’s core commercial asset.

The asymmetry becomes clearer when you compare it to an analogous situation we already govern. A pharmaceutical company conducting a clinical trial in Kenya must obtain informed consent from participants, provide oversight by an ethics review board, report adverse events, and, in many cases, compensate participants for their contributions. The trial participants’ biological responses generated the safety and efficacy data that enabled drug approval. Society recognized that those contributions were valuable and that the contributors deserved protection, not because of charity, but because the combination of vulnerable participants, powerful institutions, and high-stakes outcomes demanded governance.

The same combination is present in AI healthcare deployments. Vulnerable patients. Powerful platforms. High-stakes outcomes. The model architecture is the company’s invention. The clinical learning that makes the model valuable is, in part, the population’s contribution. Both are real. Neither erases the other. The governance framework for recognizing the second (for making the contribution visible, accountable, and subject to negotiation) does not yet exist. Building it is one of the most urgent tasks of our time.

The pharmaceutical governance framework took decades to build: consent protocols, ethics review boards, liability frameworks, compensation standards. The AI equivalent is at the beginning of that construction, not the end. The mechanisms proposed in this series (reverse token accounting, contribution thresholds, inference escrow) are the first steps in building the governance architecture that AI healthcare deployments urgently need.

This article is drawn from Digital Sovereignty in the Cognitive Age, available at blogs.inspire-aspire.net.

Everyone agrees that humans should remain “in the loop” when AI systems make consequential decisions. It is the most widely stated principle in AI governance. Regulators require it. Companies promise it. Ethicists insist on it.

And in practice, it is often fiction.

Consider what “human oversight” looks like in a high-volume insurance operation. An AI system reviews thousands of claims per day. It generates a recommendation for each: approve, deny, or flag for review. A human claims processor receives the flagged cases. She has a target to process a certain number of cases per hour. Her performance review depends on throughput. The AI’s recommendation appears on her screen alongside a confidence score. The recommendation is “deny.” The confidence score is 94 percent.

She has two choices. She can accept the recommendation, click “confirm,” and move to the next case, staying on pace for her daily target. Or she can override the recommendation, which requires her to write a justification, submit it for supervisory review, and accept the delay, falling behind her target, risking a negative performance indicator, and drawing attention from management that may or may not be welcome.

She clicks “confirm.” She moves on.

This is not human oversight. It is human presence. The person is in the loop. The loop is designed so that the only frictionless option is agreement. Disagreement carries cost. Agreement carries none. The system does not force her to agree. It simply makes agreement easy and disagreement expensive. The result is the same as if no human were involved, but with the legal cover of having a human “in the loop.”

This pattern is not limited to insurance. It appears that wherever AI systems generate recommendations, humans are formally required to review them. In healthcare, a physician who overrides an AI diagnostic recommendation must document the clinical rationale, an additional task in an already overwhelming workload. In hiring, a recruiter who overrides an AI screening score must justify the decision to a system designed to optimize for efficiency. In lending, a loan officer who approves an application that the AI flagged as high-risk takes personal responsibility for the outcome.

In each case, the system architecture creates an asymmetry: agreeing with the AI is free. Disagreeing costs something: time, documentation, career risk, personal liability. That asymmetry does not remove human authority. It makes human authority structurally expensive to exercise. And authority that is expensive to exercise will, on average and at scale, not be exercised.

This is why I argue that meaningful human oversight requires three specific conditions to be met, not as aspirational principles but as design requirements.

The first condition is proximity. The human reviewer must have access to the full context of the decision, not merely a summary or a confidence score. A claims processor who sees only “deny: 94% confidence” does not have the information needed to make an independent judgment. She is being asked to validate a conclusion she cannot evaluate. Meaningful review requires seeing what the AI saw, the data, the reasoning, the alternatives considered, not just the output.

The second condition is authority. The human reviewer must have genuine authority to override the system’s conclusion without career penalty, institutional pressure, or professional risk. An override that triggers a supervisory investigation is not a genuine authority. It is an authority with a tax. And a tax on dissent produces compliance, not judgment. Meaningful authority means the institution structurally protects the reviewer’s right to disagree, through independent review boards, through performance metrics that do not penalize overrides, through institutional design that treats the human judgment as valuable rather than inconvenient.

The third condition is time. The human reviewer must have adequate time to reflect, to weigh the evidence, consider the context, and reach an independent conclusion, rather than being pressured to process decisions at machine speed. A system that generates recommendations in milliseconds and expects human review in minutes has not created oversight. It has created a bottleneck that the institution will optimize away. Meaningful review requires a pace that allows for genuine deliberation, particularly in high-stakes contexts where the consequences of error are denied treatment, a lost job, or a closed door.

Without all three — proximity, authority, and time — human review becomes what it too often already is: a rubber stamp that provides legal cover while changing nothing.

This matters directly for inference escrow. Both levels of protection proposed in the previous article depend on human review. First-level escrow requires that a human decision-maker review the inference before it becomes consequential. Second-level escrow, the safe deposit box, gives the individual the right to contest an inference. But contestation is meaningless if the person reviewing the contest lacks the context to evaluate it, the authority to override it, or the time to consider it seriously.

There is one further complication that must be stated plainly. In high-stakes contexts (insurance denials, clinical decisions, employment determinations), the reviewer who works for the institution whose AI generated the inference faces a structural conflict of interest. The insurer’s employee, operating under the insurer’s performance targets, reviewing the insurer’s AI recommendation, is not an independent reviewer. She is a participant in the system whose output she is supposed to evaluate.

This may mean that for the highest-stakes decisions, inference escrow should be governed by an independent body, not hosted within the institution whose AI generated the inference. Independence is not a luxury. It is a precondition for the review to mean anything.

Everyone agrees that humans should remain in the loop. The question this article raises is simpler and harder: what does it take for the loop to be real?

This article is drawn from Digital Sovereignty in the Cognitive Age, available at blogs.inspire-aspire.net.

The previous article described the inference gap, the space between the data you provide to an AI system and the conclusions that system draws about you, conclusions that are invisible, consequential, and almost entirely ungoverned. It traced the legal and scholarly foundation for closing that gap, from Wachter and Mittelstadt’s research to Denmark’s ownership precedent.

This article describes the mechanism I propose to close it: inference escrow, operating at two levels, each designed for a different kind of human situation.

Start with the situation where the person has the least power.

A patient in a resource-constrained health system opens an AI diagnostic app. She is not choosing between this app and a human physician; the physician is unavailable, the wait is weeks long, and the clinic has closed. The AI is not an option among options. It is the only option. She enters her symptoms with a candor born of desperation. She describes pain she might minimize with a doctor she trusts, discloses history she might withhold in a less urgent setting. The system draws inferences from everything she provides: diagnostic probabilities, risk assessments, behavioral predictions.

She did not consent to the generation of those inferences in any meaningful sense. She consented to receiving care. The inferences were a byproduct she did not understand and could not refuse.

For people in this situation (under constraint, without genuine alternatives, trading intimate data for essential services), the protection cannot come from the individual. It must come from the system itself.

This is the first level of inference escrow: systemic protection. The inferences generated are treated as regulated artifacts. They are stored separately from the user’s identity. They are time-bound; they expire rather than persist indefinitely. They are purpose-limited; they may be used for the diagnostic purpose for which they were generated, but not sold to insurers, employers, or data brokers. They are prohibited from secondary commercial use. And the AI model is trained using federated learning; the data never leaves the local jurisdiction, and only the learning parameters are sent to the central model.

The person does not need to understand any of this. The protection is architectural. It is built into the system’s design, the way fire safety is built into a building’s structure, present whether the occupant thinks about it or not.

Now consider a different situation, one where the person has genuine agency.

A professional applies for a job. A homeowner applies for a mortgage. A parent enrolls a child in a school that uses AI assessment. A consumer shops on a platform that adjusts pricing based on behavioral predictions. In each case, the person is interacting with an AI system that will draw conclusions about them, conclusions that will shape what they are offered, what they are charged, and what opportunities reach them.

These people are not under the desperate constraint of the patient described above. They have alternatives, at least in principle. What they lack is visibility; they cannot see the conclusions being drawn about them, and they have no mechanism to control who else sees those conclusions.

This is the second level of inference escrow: the safe deposit box.

The concept is simple. The conclusions an AI system draws about you are held in a secure space under your direct control, like a bank safe deposit box, and only you hold the key. You decide who sees what has been concluded about you. You decide when. You decide for what purpose. The default is reversed: instead of the inference belonging to the system that generated it, the inference belongs to the person it describes.

A potential employer’s AI generates a hiring assessment about you. Under the current system, that assessment is the company’s proprietary information. You never see it. Under inference escrow, the assessment exists, but it sits in your box. The employer can request access. You can grant it, deny it, or grant it with conditions. You can see what was concluded. You can contest it. You can compare assessments across multiple employers to detect patterns of bias.

The safe deposit box does not prevent inferences from being drawn. AI systems will continue to generate conclusions; that is what they do. What the safe deposit box changes is who controls those conclusions after they are generated. It shifts the default from institutional ownership to individual ownership. The inference belongs to you because it is about you.

Return for a moment to Anna and Leo, the family whose story opened this series. Under first-level inference escrow, the insurance company’s AI would not be free to draw a cost-effectiveness inference about Leo’s treatment and act on it without constraint. The inference would be treated as a regulated artifact, subject to transparency and the requirement that a human decision-maker review it before it becomes a denial. Under second-level protection, the safe deposit box, Anna herself would have the right to see what was concluded about her son’s case, to understand the basis for the denial, and to contest it with the inference in hand rather than fighting a conclusion she cannot see.

Neither level guarantees a different outcome. Both guarantee that the conclusion is visible, accountable, and subject to human judgment rather than executed in silence.

But for either level to function as genuine protection rather than legal formality, the human review it requires must itself be real. And that raises a question the next article will address: when is human oversight meaningful, and when is it theater?

This article is drawn from Digital Sovereignty in the Cognitive Age, available at blogs.inspire-aspire.net.

In an earlier article in this series, I described a man who applies for jobs and never learns why the doors stay closed. An AI screening system drew a conclusion about him (from the cadence of his speech, from a pattern in his employment history, from an association the model absorbed from biased training data), and that conclusion silently shaped his future. He experienced the consequence. He never saw the cause.

That scenario is not rare. It shows up in the everyday use of AI systems in hiring, lending, insurance, education, and healthcare. The conclusions these systems draw about people are invisible, consequential, and almost entirely ungoverned.

This is not because no one has noticed. Legal scholars have identified the gap precisely and persuasively. What remains missing is a mechanism to close it.

In 2019, Sandra Wachter and Brent Mittelstadt published research demonstrating that existing data protection law, including the European Union’s GDPR, widely regarded as the world’s most comprehensive privacy framework, fails to adequately protect individuals against what they called “high-risk inferences.” Their analysis was specific. The GDPR grants robust rights over input data, the information a person provides. You can access your data, correct it, delete it, or port it to another provider. Those are genuine protections.

But the GDPR provides almost no rights over the conclusions drawn from that data. A credit score, a fraud risk assessment, a hiring recommendation, a diagnostic probability, an insurance determination — each of these is new information about you, generated by the system, that you never provided. And under current law, the person affected has no right to know the inference was reached, no right to see it, no systematic mechanism to contest it, and no path to challenge the basis on which it was drawn.

Think about what this means in everyday life. When you apply for a mortgage, the bank’s AI generates an assessment of your creditworthiness based on your financial data combined with patterns learned from millions of other borrowers. That assessment determines your interest rate, or whether you receive an offer at all. You see the outcome: approved at 6.2 percent or denied. You do not see the inference that produced the outcome. You cannot ask the system why it reached its conclusion. You cannot compare its reasoning against your own understanding of your financial situation. The conclusion was drawn in silence, acted upon immediately, and filed where you will never find it.

The same dynamic operates in healthcare. An AI system reviews your medical records and generates a risk prediction, perhaps flagging you as likely to develop a chronic condition within five years. That prediction may influence your insurance premiums, your treatment options, or the priority you receive in a resource-constrained health system. You did not provide that prediction. The system generated it. And you may never know it exists.

Wachter and Mittelstadt named this governance gap with precision. Their work explicitly called for an operational mechanism to close it. That mechanism did not yet exist.

Two developments since their research point toward what that mechanism might look like.

The first is a legal precedent. In 2025, Denmark proposed a pioneering amendment to its copyright law that gives every individual ownership rights over their own body, facial features, and voice. The proposal treats a person’s likeness not merely as something protected by privacy but as something that belongs to them, owned property, not just guarded information.

This matters not because it solves the inference problem; it does not; but because it establishes an extensible principle. Denmark’s proposal protects the outward, recognizable self: what you look like, what you sound like. It does not reach the conclusions a system draws about you. But the ownership principle it establishes, that something generated from your identity belongs to you, is the seed from which a broader framework can grow.

Consider the natural progression. If you own your likeness (your face, your voice), then why not the conclusions drawn from your behavior? If a system generates a prediction about your health, your creditworthiness, or your employability based on data you provided, should that prediction belong to the system that generated it or to the person it describes?

The progression I propose is: likeness, then inference, then learning contribution. Each step extends the same ownership principle one layer deeper. From the surface of the self (what you look and sound like) to the predicted self (what a system concludes about you) to the contributing self (what your behavior teaches a system over time).

Denmark’s proposal is the first step. Inference escrow, which I will describe in the next article, is the second. The learning contribution mechanisms I propose in later articles are the third.

This progression is not culturally specific. In a Western individual-rights framework, the person holds and exercises ownership directly. In a sovereignty-first framework like China’s, the ownership principle can exist but may be subject to state authority in defined cases. In a Global South development framework, the principle can be calibrated to institutional contexts, such as collective digital rights exercised through community or national mechanisms rather than individual litigation.

The principle is portable. The implementation is local. Different societies will build differently from the same starting point.

What matters now is recognizing where we are. The scholarly community has identified the gap. A legal precedent has established the principle of ownership. The extensible progression from likeness through inference to learning contribution has been articulated. What remains unbuilt is the operational mechanism, the governance architecture that would make inference visible, accountable, and subject to the judgment of the person it describes.

The next article describes what that mechanism looks like.

This article is drawn from Digital Sovereignty in the Cognitive Age, available at blogs.inspire-aspire.net.

The previous articles in this series examined AI’s physical infrastructure: chips, servers, cables, and data centers. This article examines a different layer of infrastructure, one that is not physical at all, yet shapes sovereignty as profoundly as any hardware.

It is the internal architecture of the AI system itself: the decisions about what to remember, what to forget, and what to assemble about you across interactions.

Start with something you can test yourself on. If you use an AI assistant, any of them, try this: ask it what you discussed last week. Ask it to reference a document you uploaded in a previous session. Ask it to recall a preference you stated a month ago.

In most cases, it will not be able to. Each session appears isolated. The system behaves as though it has never met you before. You experience fragmentation, a series of disconnected encounters, each starting from zero. You are the person with the memory. The system is the one that forgets.

Now consider the company operating that system. It operates across multiple products: search, email, cloud storage, shopping, maps, documents, and AI conversation. Each product generates data about you. Taken together, these products likely give the company a comprehensive, integrated understanding of you: your interests, behavior, health concerns, financial patterns, professional expertise, and personal relationships. Companies use these profiles to serve targeted advertising, personalized recommendations, and commercial proposals that would be difficult to produce without them. Scholarship on surveillance capitalism and platform economics has extensively documented the scope of cross-product data integration, even before AI conversation layers were added.

The user sees windows. The company sees the whole. That asymmetry—you experience fragmentation; they hold integration—is itself a sovereignty gap. And it may be the most intimate one described in this entire series, because it operates not at the level of nations or institutions but at the level of the individual conversation.

Within a single session, a second form of invisible architecture operates. Every AI system has a context window, a fixed amount of text it can hold in active memory at one time. Think of it as the system’s short-term memory. When conversations grow long, or when you upload substantial documents, the system begins to choose what to keep in focus and what to deprioritize.

The pattern is consistent: the system privileges recency over depth. The most recent exchange stays in focus. The document you uploaded at the beginning (your manuscript, your report, your body of work) is the first thing the system effectively forgets. You experience this as the system becoming less responsive to your earlier input, less precise in its references, and less grounded in the material you provided. In reality, the system has made an architectural decision about what matters. You did not make that decision. The system did. And you had no say in the criteria.

Think about what this means for a researcher who uploads a 50,000-word manuscript to an AI assistant for analysis. The system engages deeply with the material at first. As the conversation progresses and new questions are asked, the system gradually deprioritizes the manuscript in favor of the most recent exchanges. The researcher’s most valuable contribution, the work itself, fades from the system’s attention. If the researcher does not notice, the quality of the analysis degrades invisibly. The system appears to be engaged. It is engaged with less and less of what matters.

When conversations exceed the context window, a third architectural decision is required. The system summarizes and compresses the conversation into a shorter form. That summary is itself an inference, a conclusion the system drew about what mattered and what could be discarded. The system decided what to keep. The system decided what to cut. The user has no mechanism to audit what was retained, what was lost, or whether the summary accurately represents their contribution.

The summary looks like a technical convenience. It is an act of governance, a determination of what matters, performed by the system and applied to the user without the user’s knowledge or consent. Every subsequent response in the conversation is shaped by that summary. And the user has no way to know whether the summary preserved the substance of what they contributed or reduced it to a skeleton that lost the meaning.

These are not technical limitations presented as neutral engineering constraints. They are governance choices embedded in the system’s architecture. The decision to silo sessions, so the user starts from zero each time while the company retains everything, is a design choice. The decision to prioritize recency over depth, so the user’s most valuable input fades first, is a design choice. The decision to summarize without audit, so the system determines what matters, is a design choice. Each shapes what the system knows, what it retains, and what it acts upon. Each affects the person interacting with it. And each is invisible to that person.

The infrastructure you cannot see is the infrastructure that governs you most intimately. The chips and cables are far away. The context window is right here, shaping the conversation you are having, deciding what matters and what can be forgotten, drawing inferences about your input that you will never review.

Physical infrastructure determines who can run AI. Invisible infrastructure determines how AI runs on you.

Governing both is the challenge. The next articles in this series will turn to what governance mechanisms might look like, starting with the conclusions AI systems draw about people, and the proposal that those conclusions should belong to the people they describe.

This article is drawn from Digital Sovereignty in the Cognitive Age, available at blogs.inspire-aspire.net.

When conversations about digital sovereignty focus on chip fabrication, sovereign clouds, and national data centers, the price tags can feel insurmountable — especially for nations in the Global South. Billions of dollars. Decades of investment. Thousands of trained engineers. The implicit message is that sovereignty is expensive, and if you cannot afford the infrastructure, you cannot have independence.

That message is incomplete. Alongside the state-led infrastructure investments described in the previous article, a different kind of sovereignty is being built, not by governments or corporations, but by a global community of developers, researchers, and makers. It is the open-source ecosystem. And it may be the most important long-term path to digital sovereignty for the Global South specifically, because it requires the least capital investment and faces the fewest sanctionable chokepoints.

Consider the full stack that is now available, openly and freely, to anyone with an internet connection.

Open architecture: RISC-V provides chip design blueprints that no one can restrict. No licensor to pressure. No jurisdiction to impose controls. Any university, any company, any nation can design chips on RISC-V without asking anyone for permission.

Open operating systems: Linux powers the majority of the world’s servers, supercomputers, and, through Android, the majority of the world’s smartphones. It is free, maintained by a global community of tens of thousands of contributors, and impossible to revoke. No single company owns it. No government can sanction it.

Open AI models: Hugging Face hosts thousands of AI models, including frontier-capable ones, available for download, modification, and deployment. Meta’s Llama, DeepSeek’s models, and Mistral’s European alternatives are released as open-weight models that anyone can use without permission from any licensor. A researcher in Dakar has access to the same model architectures as a researcher in San Francisco.

Open research: arXiv provides free access to the latest research papers in AI and computer science before they appear in journals. The knowledge of how to build, train, and deploy AI systems is publicly available to anyone willing to read it. The methods are not secret. The techniques are not locked behind paywalls. The science is open.

Open tools: GitHub and GitLab host millions of software projects, including AI training frameworks, deployment tools, and production systems, available to anyone. The code that powers the AI economy is, in large part, public. The tools used by Google, Meta, and OpenAI to build their systems are, in many cases, available for anyone to use and modify.

Open hardware: Raspberry Pi puts a capable computer in someone’s hands for under fifty dollars. Arduino provides open-source microcontrollers for sensing and automation. 3D printing enables small-scale hardware manufacturing. Together, these make edge computing, IoT deployment, and grassroots prototyping accessible to virtually anyone, anywhere in the world.

None of these individually constitutes sovereign AI capability. Together, they constitute an alternative infrastructure ecosystem. It is not as powerful as the proprietary one at the leading edge. But it is sovereign in a way that no proprietary system can match, because no single entity can sanction, restrict, or revoke access to any of it.

Consider what this means in practice. A university lab in Senegal can assemble Raspberry Pi clusters, run Linux, deploy open-weight AI models from Hugging Face, train them using freely available research from arXiv and code from GitHub, on a RISC-V architecture that no one can restrict.

The result is not frontier AI. It will not match the performance of models trained on tens of thousands of NVIDIA GPUs in hyperscale data centers. But it is sovereign AI, built on tools no one controls, running on hardware no one can sanction, trained on knowledge no one can restrict. The lab controls every layer of its own stack. It depends on no single vendor, no single government, and no single licensing agreement.

That lab is, in a meaningful sense, more sovereign than a government data center running a proprietary SaaS AI on rented foreign cloud infrastructure — even though the data center costs a thousand times more. The government data center has scale and performance. The university lab has independence and control. The difference between the two lies in the distinction between power and sovereignty. They are not the same thing.

Knowledge is disseminating faster than at any time in human history, through channels that are structurally resistant to control. The traditional chokehold model (control the technology, control the user) worked when knowledge was scarce, and channels were gated. That era is ending. The open-source movement has made it structurally impossible to fully control access to the tools of the AI economy.

This does not mean the open-source path is sufficient on its own. It is not. Frontier AI models require compute resources that Raspberry Pi clusters cannot provide. National health systems require reliability and scale that open-source tools alone cannot guarantee. The proprietary infrastructure has advantages at the leading edge that the open-source ecosystem has yet to match.

But the path exists. It is growing. It is being walked by researchers and developers in every country on earth. And for nations and institutions that lack the billions required for sovereign cloud programs or domestic chip fabrication, the open-source ecosystem offers something no proprietary system can: a starting point that no one controls and no one can take away.

Sovereignty does not require building everything from scratch. It requires having a foundation that cannot be revoked. The open-source ecosystem is that foundation.

This article is drawn from Digital Sovereignty in the Cognitive Age, available at blogs.inspire-aspire.net.

In 2022, the United States imposed sweeping export controls on advanced chips and semiconductor equipment on China. The stated objective was to constrain China’s AI capability and maintain American technological dominance. The controls restricted China’s access to NVIDIA’s most advanced GPUs, to ASML’s extreme ultraviolet lithography equipment, and to the components needed for leading-edge chip fabrication.

The logic seemed straightforward: cut off the supply of the most advanced hardware, and the competitor cannot build the most advanced AI. Control the infrastructure, control the capability.

The result was not what the policy intended.

In late 2024, the Chinese AI company DeepSeek achieved what many analysts considered impossible: frontier AI performance using hardware constrained by export controls. DeepSeek trained a model matching GPT-4’s capabilities for approximately $5.6 million, a fraction of what American companies spent, through algorithmic and architectural innovations genuinely new to the field. Techniques like mixture-of-experts routing and multi-head latent attention emerged not from superior hardware but from necessity. When you cannot throw more chips at the problem, you find better ways to use the chips you have.

The significance went beyond cost savings. DeepSeek demonstrated that raw compute was not the only path to frontier AI. Algorithmic ingenuity could substitute for hardware advantage. The assumption underlying the export controls (that controlling hardware meant controlling capability) proved to be structurally flawed.

By mid-2026, the pattern deepened. DeepSeek optimized its latest model specifically for Huawei’s domestic Ascend 950 processors rather than NVIDIA hardware. ByteDance, Tencent, and Alibaba scrambled to procure domestic Chinese chips. The export controls designed to constrain China’s AI development had accelerated the creation of a fully domestic Chinese AI stack: domestic chips, domestic model, domestic optimization. The weapon had accelerated the very outcome it was designed to prevent.

This is what I call the chokehold paradox: the tighter the grip, the faster the escape.

The paradox extends beyond AI software. RISC-V, an open-source chip architecture, has emerged as what analysts describe as the third pillar of computing alongside ARM and x86, capturing approximately 25 percent of the global processor market by early 2026. China has embraced RISC-V as a strategic priority. The Chinese Academy of Sciences is developing high-performance RISC-V cores for data center use. The European Union uses RISC-V for exascale supercomputer development.

RISC-V matters for sovereignty because it cannot be sanctioned. There is no single licensor to restrict, no single company to pressure, no single jurisdiction to impose controls on. It is open, license-free, and extensible. Any nation, company, or university can design chips using RISC-V without asking anyone for permission. That is architectural sovereignty in its purest form.

Meanwhile, Huawei’s Ascend AI processors, designed domestically and fabricated at China’s SMIC, represent the construction of an alternative hardware ecosystem. When DeepSeek optimized its frontier model for Ascend, it demonstrated that the domestic ecosystem had crossed a threshold of viability. Chinese companies no longer need NVIDIA to build competitive AI systems. The alternative exists. It is not yet equal at the absolute leading edge, but it is functional, improving, and, critically, entirely outside the reach of export controls.

The pattern is not unique to China. Russia, under comprehensive technology sanctions since 2014 and massively expanded since 2022, has pursued technological self-sufficiency through domestic development, substitution of Chinese suppliers, and BRICS cooperation. Its defense-industrial complex adapted rapidly, with factories running around the clock and domestic production replacing imported components. Iran, under decades of Western sanctions, developed indigenous capabilities in drone technology, missile systems, and defense manufacturing that would likely never have emerged under conditions of easy access to foreign alternatives. The Iran-Russia-China technology cooperation axis, formalized through SCO membership and BRICS expansion, is itself a direct product of the sanctions regime: three nations whose constraints drove them toward each other, creating an alternative supply chain and technology-sharing network that did not exist before the restrictions created the incentive to build it.

These examples are not offered to endorse any particular nation’s policies or military programs. They are offered to demonstrate a structural pattern: severe constraint does not produce permanent dependency. It produces adaptation, innovation, alternative alliances, and the eventual development of capabilities that reduce the constraining power’s leverage.

But here is the dimension that is rarely discussed, and it may be the most consequential of all. The strategy of using technology as a weapon teaches every nation on the planet the same lesson, not just the targeted ones. India, which is not under sanctions, nonetheless monitors developments affecting nations that depend on supply chains controlled by others and pursues its own semiconductor ambitions accordingly. The same calculus is being made across Southeast Asia, the Middle East, Africa, and Latin America. Every nation watching the chokehold play out is drawing the same conclusion: dependency on a supply chain that can be weaponized is a strategic vulnerability, and the only defense is to build alternatives.

The very act of demonstrating that infrastructure access can be revoked for geopolitical reasons accelerates the diversification it was designed to prevent. The targeted nations innovate under constraint. The non-targeted nations diversify out of prudence. Both responses reduce the constraining power’s long-term leverage. The chokehold weakens the hand that applies it.

Technology used as a weapon teaches the world to build its own defenses. That is the paradox. And its consequences — for the nations applying the constraints, the nations under constraint, and the nations watching from outside — are still unfolding.

This article is drawn from Digital Sovereignty in the Cognitive Age, available at blogs.inspire-aspire.net.