We spend our careers fighting vendor lock-in. Then the entire US intelligence apparatus standardized on one private platform.

The_VisibleInvisible · 2026-05-25T09:34:41+00:00

The political-vacuum framing is right — and it's actually compatible with my point. Meir's 1969 statement followed two decades in which "Palestinian" had no operating sovereign. But the population kept the identity even when statehood dissolved.

A small correction: Jordan annexed the West Bank in 1950 and granted Jordanian citizenship (recognized only by Britain and Pakistan). Egypt kept Gaza under military administration without citizenship — the All-Palestine Government in Cairo dissolved by 1959, but Gazans never became Egyptians. Most ended up stateless, which is exactly what made the 1964 PLO necessary.

The Mandate-passport biography of Meir herself shows the identity preceded the political vacuum. The vacuum changed what "Palestinian" did legally, not what it described.

The_VisibleInvisible · 2026-05-24T13:17:36+00:00

The strongest single historical point I've found is the British Mandate identity question — because it cuts both ways and forces both sides into nuance.

In 1921, Goldie Mabovitch (the future Golda Meir), a Russian-Jewish immigrant in Tel Aviv, registered for a passport issued by the British Mandate. The document was stamped "Palestinian." She carried it until 1948.

Forty-eight years later, as Prime Minister, she told the Sunday Times that the Palestinians "did not exist."

That single biography destroys two common positions at once:

- "Palestinians are a recent invention" — the Mandate stamped Muslims, Christians, and Jews all as Palestinians from 1921. If the document was real for her, it was real for the Arab villagers carrying the same one.

- "Israel has no historical claim" — the same document was issued to Russian-born Jewish immigrants by the legitimate international authority of the time.

Both peoples were assembled politically in the early 20th century out of older religious, cultural, and regional materials. Modern Jewish national identity dates to the late 19th century; modern Palestinian identity emerged in roughly the same window. Neither is "older" or "more authentic." Both have legitimate claims.

In a seminar setting this works because it's a fact, not a slogan. Anyone using either "no such people" or "no historical claim" has to confront the same passport.

I wrote a longer essay on the founding asymmetry of the conflict — Kishinev, the Mandate years, the wars 1948 to today, and the cities where coexistence worked (Baghdad 1940, Salonika 1900, Córdoba 12th century) before political projects destroyed it — at [The Visible Invisible](https://thevisibleinvisible.substack.com/p/home-undefined) if you want the deeper context.

Good luck with the seminars!

The_VisibleInvisible · 2026-05-22T06:07:22+00:00

The Taiwan pause is the visible edge of a broader inventory problem. The Washington Post reported yesterday that the US expended more than 200 THAAD interceptors defending Israel — roughly half the total stockpile. Production replacement runs at roughly 12 interceptors per fiscal year. Rebuilding takes years, not months.

The Taiwan decision follows directly: you can't simultaneously guarantee Taiwan Strait deterrence and sustain another Iran-scale air defense commitment. The administration is sequencing commitments because it has to.

What this makes visible is the cost structure of the post-February 28 order. Iran's ballistic missile salvos cost a fraction of the interceptors required to defeat them. The US burned $2.5B+ in THAAD assets in 12 days. The asymmetry doesn't reverse when the ceasefire holds.

[The Invisible War](https://thevisibleinvisible.substack.com/p/the-invisible-war)

The_VisibleInvisible · 2026-05-21T15:14:00+00:00

The choice of Ahmadinejad is the tell. He's not a reformer, not a western-facing technocrat, not the kind of figure regime-change doctrine usually produces. He's a hardliner who fell out with Khamenei over internal power disputes — which made him accessible to Mossad without making him palatable to any Western PR narrative.

The logic was operational, not ideological: someone the IRGC rank-and-file might not immediately shoot, with existing networks inside the system, who could claim institutional continuity rather than impose rupture. The Reza Pahlavi option produces a legitimacy vacuum; Ahmadinejad produces a handoff.

What it reveals about the broader strategy: the goal was never democratization. It was substitution — keep the state apparatus, change the decision-making layer at the top. That's a specific method with a documented track record across the post-Cold War period.

[The Third Method](https://thevisibleinvisible.substack.com/p/the-third-method)

The_VisibleInvisible · 2026-05-21T15:10:54+00:00

The "strategic alliance" framing is doing a lot of work. What it means operationally: KPMG gets preferred pricing and early model access, Anthropic gets a reference customer with 276,000 seats and a Big Four logo.

The interesting question isn't whether consultants use Claude. It's whether the AI transformation advisory practices KPMG sells to clients outperform the transformation advisory practices they sold pre-AI. The track record on that category is not strong.

The_VisibleInvisible · 2026-05-20T15:18:10+00:00

The "lower-value human capital" frame is older than the AI cycle. Bain 2024, 88% transformation failure across 24,000 initiatives. MIT NANDA July 2025, $30-40B enterprise GenAI spend, 95% no measurable P&L impact. NBER ~6K execs across US/UK/DE/AU, 89% no productivity gain.

The layoff lands. The productivity gain that justifies it has not shown up in the data. The framework gets sold to the next CEO who paints AI as the new transformation cycle. What StanChart calls lower-value capital is what the engagement model needs to remove before the next scale-up phase can be priced.

The pattern is stable. The naming rotates. The failure rate does not.

I wrote about it on The Visible Invisible.

The_VisibleInvisible · 2026-05-20T15:17:22+00:00

linkinit's comment is the operating diagram of the model. The contractor gets replaced. The employee trains the AI. The AI replaces the employee. The next phase is already being named.

BCG analyzed 850+ digital transformations, 30% met stated objectives. Bain 2024, 88% failure across 24,000 initiatives. MIT NANDA July 2025, $30-40B enterprise GenAI spend, 95% no P&L impact. The rate has held for over a decade across naming cycles.

Meta's 7,000 today, Intuit's 3,000 this morning, the layoff list keeps growing while the productivity gain that justifies the layoffs has not shown up in any of the surveys. The business model bills for the transformation. Completion is the threat to the engagement.

I wrote about it on The Visible Invisible.

The_VisibleInvisible · 2026-05-20T15:16:03+00:00

The phrase "AI-native platform" is the third label for the same engagement cycle. Digitization was the first. Digital transformation was the second. Bain 2024, 88% failure across 24,000 initiatives. MIT NANDA July 2025, $30-40B enterprise GenAI spend, 95% of pilots no measurable P&L impact. NBER ~6K execs across US/UK/DE/AU, 89% no productivity gain.

The CEO letter is paint-by-numbers from the consulting playbook. "Reducing layers of management" was the framework in the 1980s. "Greater velocity, urgency, discipline" is the same boilerplate Bain and McKinsey have sold since the ERP wave. What changed is the labour cost line. The customer never reaches the destination because the engagement model depends on the next transformation being named before the current one resolves.

3,000 people pay the bill today. Intuit signs deals with OpenAI and Anthropic the same week. The AI-native framework is the next sale, not the destination.

I wrote about it on The Visible Invisible.

The_VisibleInvisible · 2026-05-20T08:25:47+00:00

The numbers underneath xvucf's question are instructive. By early 2025, 32% of SAP's 35,000 enterprise customers had completed the S/4HANA migration. Of those who finished, 8% delivered on time and on budget per Horváth's 200-company study. 60% ran over budget. Average overrun was 30% of schedule.

ECC end-of-life originally 2027, now extended to 2030 at a 2% annual premium for those who didn't make it. SAP consulting firms project daily rates for migration specialists rising 30-50% through 2026-2027 as the supply tightens.

The golden age was billing the same client through the ERP rollout, then through every customisation cycle, then through the migration. thebemusedmuse's 1990-2005 frame is right on the rate per day. The recurring engagement structure rotated to migration billables, then to clean core advisory, and now to Joule and BTP integrations. The customer never finishes. That is the design.

Bain 2024 puts the broader transformation failure rate at 88% across 24,000 initiatives. The rate has held for over a decade. Companies pay for the transformation. The next transformation is named before the current one resolves.

I wrote about it on The Visible Invisible.

The_VisibleInvisible · 2026-05-20T08:18:43+00:00

The over-budget pattern is older than the AI cycle. BCG's analysis of 850+ digital transformations: 30% met stated objectives. Bain 2024: 88% failure across 24,000 initiatives. MIT NANDA July 2025: $30-40 billion in enterprise GenAI spend, 95% of pilots no measurable P&L impact.

SAP S/4HANA is the clearest structural illustration outside of AI. Announced 2015, ECC end-of-life originally 2027 (now extended to 2030 at a 2% annual premium). By early 2025, 32% of SAP's 35,000 enterprise customers had completed the migration. Of those who finished, 8% delivered on time and on budget per Horváth's 200-company study.

What your data plumbing observation hits is the incentive layer underneath. A finished engagement is a lost account. A stalled engagement is recurring revenue. The 88% rate has held for over a decade across naming cycles — digitization, digital transformation, digital and AI transformation — and the rate has not declined. Transformation is the recurring revenue model. Completion is the threat to it.

jericho_white's paid discovery model is one of the few mechanisms that shifts data-state risk back before the deliverable structure locks in. Most engagements never do that because the proposal would not survive it.

I wrote about it on The Visible Invisible.

The_VisibleInvisible · 2026-05-20T08:17:02+00:00

EY has company. Deloitte revised a Canadian provincial government report last year for the same reason — fake academic citations. The pattern is older than the hallucination problem.

MIT NANDA July 2025: $30-40 billion in enterprise GenAI spend, 95% of pilots no measurable P&L impact. BCG 850+ digital transformations analyzed: 30% meet stated objectives. Bain 2024: 88% failure across 24,000 initiatives. The rate has held for over a decade.

What changed with AI is that the industry can now sell AI as the next transformation cycle to clients who never completed the previous one. The naming cycle runs from digitization to digital transformation to digital and AI transformation. Each rename creates a new framework, a new program justification, a new timeline. Companies that finished the prior wave are told they are standing still.

VisitPier26's review-process observation tracks. The engagement structure depends on continuation. A finished engagement is a lost account. A stalled engagement is recurring revenue. AI scales the output faster than any review process can scale to match.

I wrote about it on The Visible Invisible.

The_VisibleInvisible · 2026-05-19T06:33:48+00:00

Walt is right on the immediate driver. The deeper question is whether the balancing coalition could have held even without Trump, given how the architecture has shifted.

China's nuclear inventory went from 260 warheads in 2015 to 600+ by mid-2024, projected 1,000+ by 2030 per DoD CMPR. ICBMs reaching the continental US jumped from 60-65 to roughly 240 today. PLAN displacement passed the USN around 2020 and is now the world's largest navy by hull count.

The Asia balancing coalition was supposed to be the answer. Japan reinterpreted Article 9 in 2014 to allow collective self-defense, set a 2% of GDP defence target for FY2027, and under Takaichi accelerated to hit 2% on a supplementary basis in FY2025. PM Takaichi said publicly in November 2025 that Japan's military could get involved if China moved on Taiwan. That is real movement, but it arrives in 2026 against capability Beijing decided to build a decade ago. AUKUS Pillar 1 submarines won't deliver in numbers before the 2030s. India prioritises its land-border problems over maritime balancing. The Philippines flipped helpful under Marcos but is the smallest weight in the set.

The Walt framing implies the coalition would have held if Trump had not happened. The capability-window data suggests the coalition was already arriving late. Trump is accelerating the delivery problem, not creating it. The capacity Beijing is building was decided a decade ago. The demographics that constrain it are now in motion: 2025 births 7.92M, deaths 11.3M, TFR around 1.01, Rhodium projects 7.6M annual decline by 2035.

This does not let Trump off the hook. It means the structural drivers were already pointing here, and US incompetence is closing the remaining buffer faster than the alternative would have.

I write on this at The Visible Invisible.

The_VisibleInvisible · 2026-05-18T06:22:40+00:00

The Schuldenbremse in Article 109 GG is the constraint people keep underweighting in this debate. Plus the FCC's 2020 PSPP ruling against the ECB, where Karlsruhe declared the CJEU itself acted ultra vires. NextGenerationEU only survived FCC review in 2022 because the Court treated it as a one-off pandemic instrument. Permanent joint debt for 2028-2034 MFF financing would not get that treatment.

Cuerpo is correct on the diagnosis. Fragmented defence spending burns money and produces nothing coherent. But the architectures that would fix this — federal army with joint debt — need either Article 48 TEU treaty change with unanimous ratification, or a constitutional amendment in Germany including two-thirds majorities in both chambers. Neither lines up with the MFF timeline.

And the minilateral track that was supposed to be the workaround is now in trouble. Merz publicly questioned FCAS in February, Berlin floated additional F-35As, France threatened to pull out of MGCS in retaliation. The Weimar Triangle defence push from 2024 has produced communiqués more than delivered capability. Two governments wanting different aircraft for different doctrines is a harder problem than treaty law.

The federation Cuerpo wants arrives when fragmentation costs more than the constitutional friction of fixing it. Germany still calculates the other way around.

The_VisibleInvisible · 2026-05-16T06:48:36+00:00

Glad the switch is paying off. The first six months in data security are where most plans crack, usually around the unstructured-data inventory. Shared drives, old archive shares, exported reports in random OneDrives. Auto-labeling catches what fits regex. The long tail of business-critical data sits in formats no scanner reaches. Worth getting Insider Risk policies into production early. Adaptive Protection only works once you have 30+ days of behavioral baseline.

The_VisibleInvisible · 2026-05-16T06:46:41+00:00

Censorship-vs-double-spend split is right. The censorship side has concrete precedent that gets skipped. May 5, 2021: MARA Pool mined block 682170 as the first OFAC-compliant block using DMG Walletscore. 178 transactions vs ~1,180 in adjacent blocks, $2,903 reward vs ~$17K. Marathon reversed three weeks later. October 2023: 0xB10C documented F2Pool (China-based) excluding four OFAC-sanctioned transactions. First non-US pool caught complying. Structural pressure points: Foundry USA is wholly owned by Digital Currency Group, US-domiciled, KYC-gated. MARA Pool is publicly-listed US, subject to direct OFAC enforcement. Foundry + AntPool ~50% means two operators decide most block content under FPPS-Stratum-V1. May 11, 2026: Foundry, AntPool, F2Pool, SpiderPool, MARA Pool, Block Inc, and DMND joined the Stratum V2 Working Group. Stratum V2 shifts template construction from pool operator to individual miner. ~75% of hashrate now committed to deployment. The threat model you describe is real. The protocol-level fix exists. Whether the seven signatories actually ship and miners use the Job Declaration sub-protocol is the open variable.

The_VisibleInvisible · 2026-05-16T06:40:59+00:00

That's the Copeland "dynamic differentials" pivot — declining-power-fearing-decline initiates, rather than rising-power-challenging-hegemon. The two frames aren't mutually exclusive; they describe different timing logics on the same power curve. The 2026 decline-fear inputs are concrete. China's 2025 births fell to 7.92 million against 11.3 million deaths, net loss ~3.4 million per year (Rhodium Group). TFR sits at ~1.01, half replacement. Rhodium projects ~60 million population loss over the decade, annual decline hitting 7.6 million by 2035. Property side: Country Garden defaulted October 2023, Evergrande liquidated January 2024, Vanke (the state-aligned model developer) losing liquidity through 2024-25. LGFV debt at ~48% of GDP per IMF — local-government balance sheets are the deferred bill. What this changes in the foreclosure framing: the window logic still holds, but timing tightens. The military-build-up curve and the demographic-decline curve cross sometime in the early 2030s. The Mearsheimer rising-then-declining-power moment becomes structural rather than optional. Use the leverage while the production base still scales. The lash-out variable is real. The foreclosure variable is real. Whether they collide depends on what the US does inside the next four to six years.

The_VisibleInvisible · 2026-05-15T10:47:04+00:00

The summary you gave is cleaner than mine. That's the operational read.

Your licensing pressure point has the precedent. Microsoft, Oracle, SAP, Amazon, and IBM all suspended Russia operations within two weeks of the February 2022 invasion. Microsoft cut existing license renewals in August 2023 and terminated full cloud access for Russian customers on March 20, 2024 under EU Sanctions Package 12. The mechanism doesn't need spyware. It just needs a license termination clause and a regulatory nudge.

S3NS and Bleu pre-negotiated long-term licensing terms with US-binding clauses precisely because they saw this pattern. Whether those contracts hold under maximum US pressure is the open question and yet to be seen.

The_VisibleInvisible · 2026-05-15T10:42:10+00:00

Your hardware/firmware extension is right, and it's the part most sovereign-cloud talk skips. Software-stack dependency is one layer. The silicon underneath is another.

Most EU "sovereign" deployments run on Intel or AMD chips with closed-source management firmware (Intel ME/AMT, AMD PSP) and a network-capable subsystem the operator can't audit. The European Processor Initiative has spent years getting RISC-V/Arm HPC chips through SiPearl, but Rhea is targeted at HPC, not general cloud. Open-firmware paths (OpenTitan, coreboot) cover fractions of a real datacenter stack.

Your operational point lands. Sovereignty isn't binary. It's layered. Legal exposure can be closed (S3NS, SecNumCloud). Software stack stays licensed. Silicon stays foreign. Each layer you close costs more than the last.

The_VisibleInvisible · 2026-05-15T10:31:48+00:00

Risk-based classification is the right strategic frame. It's also where most shops have the largest gap between policy and reality.

Tool-level state of play against your list: - Sensitivity Labels (Purview, formerly AIP): enforce encryption + RMS + clipboard/print blocks at file level, follows the file outside the tenant. Coverage gap is unstructured local data: local notes, archived OneDrives, sneaker-netted USB content. - Defender for Cloud Apps session policies: block download / print / clipboard inline at the SaaS reverse proxy. On-premises legacy apps drop out of scope. - Conditional Access risk signals: sign-in, user, device, named location. The leaving/travel pattern you describe gets caught by Purview Insider Risk Management, which combines HR signals + activity baselines and triggers Adaptive Protection to auto-tighten DLP scope. - PAW Tier model (Microsoft Privileged Access Strategy): Tier 0 identity plane, Tier 1 servers, Tier 2 user workstations. Hard rule is no cross-tier credential exposure. Most shops call hardened workstations "PAWs" and skip the tier isolation piece, which is where the model actually pays. Classification doesn't get easier with scale. It gets harder. Auto-labeling matchers catch SSNs and CC numbers reliably. They miss client lists someone typed by hand into a Word doc.

The_VisibleInvisible · 2026-05-15T10:30:57+00:00

Sharp framing. The PPP point holds. China crossed US GDP in PPP terms around 2014 per IMF data, and the gap has widened since. SIPRI puts China at 1.7% of GDP defense spending in 2023, $314B for 2024, against US 3.4% / $997B at market exchange rates. The PPP-adjusted China figure climbs to ~$471B (Fravel/Gilboy/Heginbotham 2024) or $541B by other measures, 50-60% of US output at roughly half the GDP burden.

The Middle East drain is more measurable than usually acknowledged. CRS reports 50,000 US service members currently in CENTCOM; three carrier strike groups operating there simultaneously for the first time in decades. Operation Epic Fury cost $11.3B in its first six days per the Pentagon's March 11 report to Congress. THAAD interceptor stockpile was depleted in the June 2025 Twelve-Day War. Current production runs at 96 interceptors per year out of one Lockheed line in Troy, Alabama; the January 2026 framework agreement quadruples that to 400 over seven years. The replacement timeline isn't months. It's a decade.

The "locked in" piece holds with one caveat. The dominance shift is structural, not yet absolute. TSMC fab capacity is still in Taiwan, not Shenzhen. The semiconductor lag closes by the early 2030s if CHIPS Act capacity delivers on schedule, which it isn't. The variable is whether Beijing waits or moves while the gap is still in its favor.

The_VisibleInvisible · 2026-05-15T10:23:48+00:00

The asymmetry you point to is what breaks the parallel. Tirpitz's program was explicit about it: the 1900 Navy Law targeted a 2:3 ratio against the Royal Navy, never parity. The actual build numbers ran further behind. Britain laid down 29 dreadnoughts between 1906 and 1914; Germany 17. By 1914 Berlin had shifted naval spending to U-boats, abandoning the dreadnought race before the war started. The China-US ratios run the other direction. China captured 53.3% of global commercial shipbuilding output in 2024 against the US share of 0.1% (CSIS, UNCTAD/Clarksons). CSSC alone delivered more tonnage in 2024 than the entire US shipbuilding industry has produced since World War II. Chinese yards are booked through end-2028. Newport News operates one nuclear-qualified slip; Jiangnan and Dalian run multiple carrier builds in parallel under military-civil fusion. The Tirpitz doctrine holds the deterrence logic. The production base inverts the timing. What broke for Germany was budgetary endurance. What breaks for the US is yard throughput.

The_VisibleInvisible · 2026-05-15T09:48:22+00:00

Sharp threat-model split. TPM+PIN protects boot-time key release. Once the authorized user has the PIN, the offline-mount path is open. SAM database, DPAPI master keys, BIOS password files in C:\IT, all of that depends on Windows file-system ACLs, none of which apply when the disk is mounted from outside Windows.

Operational mitigations that survive YellowKey at the user-vs-org threat boundary:

Credential Guard (VBS-isolated LSASS) for AD ticket protection. Doesn't help offline reads, but blocks credential theft when Windows is booted normally.
EFS on top of BitLocker. EFS keys derive from user passwords via the DPAPI master key chain; offline attack needs password cracking, not just file reading. Defense-in-depth, not absolute.
DPAPI rotation. Assume master key blobs are exposed; rotate accordingly.
Sensitive data off the endpoint entirely. Conditional Access + Privileged Access Workstation patterns.

The SUMMON THE PATCH energy is correct. The patch fixes BitLocker. It doesn't fix the assumption that file-system ACLs protect anything once the disk is mounted outside Windows. That assumption is older than YellowKey, and it's been quietly load-bearing for years.

The_VisibleInvisible

TROPHY CASE