Pieza independiente
The territory
Movement 6
1939–2026
I
On 25 July 1939, in a bunker hidden in the Pyry forest south of Warsaw, three Polish mathematicians gave away the best military advantage their country had.
Marian Rejewski, Jerzy Różycki and Henryk Zygalski had been reading the German cipher for seven years. Rejewski had broken it in December 1932 with permutations, patience and some documents a spy had sold to the French. They had built machines to automate the search for keys, and perforated sheets you laid over one another against the light.
That morning they sat the French and the British down in front of all of it and showed them. Dilly Knox, who had spent months running into the same wall, walked out furious and silent. It took him days to write the thank-you note, and when he wrote it he signed it in Polish. The Poles also handed over replicas of the German machine, built by themselves.
Five weeks later Germany invaded Poland.
The decision was not generosity. It was accounting: they knew two things at once and both were true. They had the cryptographic advantage, and they were not going to have a country to use it in.
II
There is a question underneath that bunker that has not changed in eighty-seven years.
It is not who can decrypt. It is where the secret lives and who administers the machine that keeps it.
The Poles had the knowledge and lost the territory, so the knowledge went on being operated at Bletchley Park, in another country, under another chain of command. The result was good for the war and catastrophic for Poland, which in 1945 recovered neither the territory nor the credit.
Translated to 2026, the question sounds like a procurement department and is exactly the same: can I use a model without handing my data to whoever operates it?
The domestic version of that question is asked by anyone who pastes a contract into a text box to have it summarised by a machine that is not theirs. The state version is asked by entire ministries, with the same lightness and worse small print.
III
In August 2024 the United States standards institute published the first three finalised post-quantum algorithms. In March 2025 it added a fourth as an alternative. Those four decisions take up four pages of a bulletin and made no news broadcast.
The reason they matter is not that a quantum computer exists that can break anything. It does not. It is a fairly cruel temporal asymmetry, and in the trade it is summed up in four words: harvest now, decrypt later.
Whoever stores encrypted traffic today will be able to open it the day the machine exists. The cost of storage is derisory and falls every year. So the loss, if it is going to happen, already happened, and it happened without anyone noticing, which is the most uncomfortable way to be defeated.
This inverts the normal way of thinking about security. What you encrypt tonight is not protected by the strength of an algorithm, but by how long it takes someone to build a machine that does not exist yet, against an archive that is already on somebody else's disk.
Nor is the deadline that matters the machine's. It is what cryptographers call the useful secrecy time, and you calculate it by adding three things. The years your data must stay secret, the years you will take to migrate, and the years left until the machine. If the sum exceeds the deadline, you are already late. A medical record has to hold for fifty years; a supply contract, twenty; a message tonight, sometimes half an hour, and we still encrypt them all with the same care. Almost nothing people fear losing is what is actually at stake. What is at stake is the old file, the one nobody looks at any more, the one still copied in three places because deleting it is more work than keeping it.
IV
I made an inventory of my own keys one Sunday afternoon, with a notebook, and it took me four hours to reach a list I do not entirely believe.
The router has been on the wall since 2019 and the manufacturer stopped publishing firmware in 2023 — one line on a forum, with no notice to customers; it still negotiates connections with the same primitives it left the factory with. The front door lock has a chip that does not update and a shop that no longer exists [the warranty was covered by that shop]. A private key from 2014, generated on a laptop I sold in 2017 without wiping properly, still authorises access to a server I use every day.
Replacing it costs zero euros and twenty minutes [neither figure was the obstacle]. It had been on my list for four years.
That is the real state of the matter, and it holds for a person exactly as it holds for a ministry. Post-quantum migration is not decided by the choice of algorithm, which is already settled. It is decided by the inventory, which nobody wants to do because it is humiliating and cannot be presented anywhere.
What the inventory actually measures is how many of your keys you can change without asking someone else's permission. That number, and not the key length, is the operational definition of sovereignty.
“A key you cannot rotate is not yours. It belongs to whoever made the device.”
Of the twenty-three keys I managed to write down, I could change nineteen. The other four depended on a company, two of them on a company that no longer exists, and none of the four was protecting anything trivial.
V
The other half of the territory was signed on 8 September 2026.
An operational-ontology company and a compute provider announced a sovereign intelligence stack: models, data and computation inside the client's perimeter, never leaving. It is the commercial answer to the bunker question, and it arrives in the shape of an infrastructure contract.
It has to be read carefully, because the word sovereignty does a great deal of work in there. A server placed inside a country is not sovereign if the keys, the firmware, the root of trust, the updates or the administration staff depend on somewhere else.
Five things have to be separated that the brochure runs together. Where the data sits. Who holds the keys. Who controls the hardware. Who administers the system [the hands that log in at four in the morning]. Which jurisdiction the operating company answers to.
All five can live in five different places, and in practice they live in three. A data centre on the edge of a European capital, with American iron, Asian firmware, remote administration from a third country and a parent company answering to a judge in Delaware, is a local building on top of foreign infrastructure.
A month earlier, in June 2026, there was a dress rehearsal for all of this. The United States government applied temporary export controls to two frontier models; the lab suspended access for the affected customers until it could comply, and restored it when the controls were lifted. For a few weeks the model behaved as a dual-use good.
That is the lesson that appears in no sales deck. A model's sovereignty is not determined by its licence agreement. It is determined by the country that can forbid its shipment.
VI
Meanwhile, the layer acquiring autonomy fastest is not the models. It is payments.
In September 2025 a protocol appeared for an agent to complete a purchase. In February 2026, a mechanism for paying with no account and no interface key. In March, a protocol built for two machines to pay each other. In April, a card network extended agent-initiated payment trials to Latin America and the Caribbean. In June, the body watching financial stability published guidance on responsible use of these systems.
An agent becomes an economic actor when it has four things, and not before. An identity of its own. An account or wallet. Permissions. Somebody to sue.
The first three are built or being built. The fourth is running late and is the only one that does not deploy with a software update, because it lives in courts, in insurance policies and in the legal definition of who signed.
The imbalance produces a scene that can already be described without exaggeration: an agent with its own identity, its own wallet and permission to enter contracts, whose ultimate liability lands on a person who never saw the operation and will find out from the statement. That is not machine autonomy. It is delegation without a record, which is the oldest way there is of losing money.
VII
Against myself. This is the dullest branch of all and that is its most suspicious feature.
A cryptographic migration has no spectacular demo, no rising chart, no epic date. It consists of inventorying, replacing, auditing and repeating every few years, for ever. Nobody writes a manifesto about rotating keys. There is no epic available in a spreadsheet of expiry dates.
“Security you can notice is advertising. The kind that works is maintenance.”
Which is why I make myself say it from the other side. Protective friction is also acceleration, and possibly the only kind that lasts. A system where the keys can be changed without rebuilding the whole infrastructure is a system that can run faster, because it can make a mistake without dying.
The technical word for that is cryptographic agility and it sounds like a brochure. It means something fairly concrete. Being able to change primitive without changing supplier, contract and country.
VIII
The three Poles ended badly, and the final detail is what gives the measure of the thing.
Rejewski spent the war in France and England breaking second-rank ciphers, with nobody telling him that at Bletchley Park his work was being used at industrial scale. He returned to Poland in 1946, worked as a clerk in a factory and kept quiet for almost thirty years. Różycki died in 1942 in the sinking of a passenger ship. Zygalski stayed in England teaching at a polytechnic, on a small pension.
They had the knowledge. Others had the installation, the funding, the staff and the jurisdiction.
That distance is the whole movement. Intelligence is not lost by whoever stops knowing. It is lost by whoever keeps the knowing and gives away the place where the knowing gets executed.
In 1939 the place was a country house in Buckinghamshire with aerials, huts and night shifts. Today it is a locked cabinet inside a data centre, with a printed label and an access log. What decides it is just as dull.
Who has the key to the cabinet.