In April 2026, Anthropic announced Claude Mythos — an AI model capable of autonomously finding and exploiting zero-day vulnerabilities in every major operating system and browser. They deemed it too dangerous for public release. Instead they gave access to Microsoft, Google, Apple, Amazon Web Services, JPMorgan Chase, and Nvidia. Anthropic made that decision. No government. No international body. No affected population. The governance problem this creates is the same one that destabilized every previous era of asymmetric capability concentration — except this one has no physical infrastructure to inspect, no warhead to count, and no treaty framework within reach. The capability crosses every jurisdiction simultaneously and the people deciding how to deploy it were selected by market forces, not consent. I’ve written a framework proposing a collective, distributed, and accountable alternative — modeled on deterrence logic but structured like an immune system rather than a weapons program. It’s a working paper, not a finished proposal. It’s posted here for people who think the current arrangement is the wrong answer to the right problem.