Last week’s refinement was the duty roster: a control is a capability plus a rule plus a person plus an hour, and every failure on the page was a continuous process meeting an intermittent responder. This week supplies the variable sitting underneath that one, and it arrived as the largest number ever recorded in its category. Slashdot reports that Binance suffered the biggest crypto hack in history, with $6.3 billion affected; Ars Technica has the record heist and Web3 is Going Just Great attributes it, with the single most informative clause of the week attached: North Korea hacks Binance for around $6.3 billion, some frozen. MetaFilter asked the right question in four words: whose keys, whose coins. That is this week’s thesis and it generalizes to every item below. Somebody is holding a thing on your behalf — your coins, your chat logs, your grocery history, your grievance, your ballot count, your server’s firmware — and the arrangement is indistinguishable from ownership right up to the moment their interests and yours come apart. Then you find out which kind of holder you had. A custodian owes you a duty. A holder merely has your stuff. The roster told you whether anybody was awake; custody tells you who they were awake for.
Whose keys, whose coins
Start with some frozen, because it is the tell. Funds can be frozen only by a party with administrative reach over them, which means the thing marketed as a bearer asset had a custodian the entire time — one you did not choose, cannot audit, and whose intervention is simultaneously your only hope of recovery and the proof you never held the asset at all. The same week, Slashdot reports Polymarket halted international trading after hackers drained accounts: the remedy for a custody failure was to suspend the users’ access, not the attacker’s. Eschaton’s All My Apes Gone is the joke that has outlived every cycle it mocked, because the structure never changed.
Then read the item that moves this from a crypto story to an everybody story. Techdirt: your diary has a creditor, and what Character.ai’s bankruptcy does to freedom of thought. Nobody hacked anything. The company simply stopped being able to pay, and at that moment the most intimate corpus its users ever produced became an asset in an estate, to be valued and sold by a receiver with a fiduciary duty to lenders and none whatsoever to the people who wrote it. Every consent screen those users clicked described a relationship with a company that no longer exists. This is the week’s cleanest demonstration that custody is not a security property. It is a legal one, it transfers on events you do not control, and the transfer is where the duty gets dropped. The Atlantic asks the macro version in can democracy survive the next financial crash — a bailout being the state assuming custody of a loss after the holder has already taken the upside.
The thing holding your credentials does not work for you
Cory Doctorow named the mechanism this week, and he used the term of art on purpose: agents vs ecommerce is a piece about the principal-agent problem, which is the four-hundred-year-old name for exactly this failure. An agent acts with your authority and its own incentives. The New Stack has the scale at which we are now shipping that arrangement in what OpenAI’s 1.2 billion means for your auth — one-point-two billion identities handing credentials to something that spends them unsupervised.
The engineering response is, correctly, an admission that the old boundary was never a custody boundary. The New Stack argues the sandbox was not enough, and agent governance requires runtime observability, lays out the five essential layers of agent sandboxing on Kubernetes, asks whether Kubernetes is ready for AI agents at all, notes that AI jobs are queued while GPUs sit idle, and predicts the observability race will be won on interoperability — interoperability being, in custody terms, the ability to inspect the holder’s books with your own tools instead of theirs. AWS is pushing the check further upstream: the Hydro team wants the compiler to catch coding agents’ mistakes, which is the only control in this paragraph that does not depend on trusting a runtime you do not operate.
The inflow is the same as last week and the custody read makes it worse. GitHub’s Octoverse finds commits and pushes at record highs as developers build with agents, while Slashdot reports Linux Foundation research finding as much as 25 percent of incoming pull requests may be AI slop — maintainers are now unpaid custodians of a review queue filled by parties with no duty to them. Microsoft shipped an open source tool to evaluate how well your software is optimized for coding agents, GitHub’s leaders tell The New Stack the world does not need a new GitHub, and Google handed its rivals the keys to Android for agent build-and-debug — a deliberate custody transfer, which is the rare kind that gets announced.
The unannounced kind filled the rest of the wire. Ars Technica reports a code-execution flaw in UEFI firmware that affects most servers on planet Earth, also on Slashdot — the layer beneath the operating system is held by a vendor you have no relationship with and cannot inventory. Techdirt reports Meta’s Muse share links disclosed all sorts of super-sensitive user data, the custody failure that needs no attacker at all. Nextgov reports officials suspect Iran in a series of cyberattacks on military base freezers — a cold chain is pure custody, and the asset spoils silently. Eschaton’s installing malware everywhere is the short version.
And the reckoning for last month arrived with a label. Axios calls it Black October and draws the Y2K lesson; Paul Krugman writes Hack Apocalypse Now; and the item to actually file is Axios on the humans burning out on AI’s cyber frontlines. Last week’s rotation is this week’s attrition. A custodian who is burning out is still, on paper, your custodian.
The market is being asked to underwrite all of it. The Verge reports Anthropic asking Wall Street to believe in AGI, Ed Zitron calls the arrangement exit liquidity, Stratechery interviews Palantir’s CTO about the AI religious war, Dave Blundin asks what compute is for, and Platformer finds what Google’s and Reddit’s bad days have in common. Blood in the Machine states the custody objection plainly: we cannot under any circumstances let AI firms govern the future, and pairs it with data centers, AI and the 2026 elections. The Verge has the physical bill in AI has come for Arizona’s water — an aquifer is the longest-dated custody arrangement any of us are party to. For the believers, The Verge has Kevin Roose, AGI-pilled; The Atlantic has a mathematician reading the AI future and the useful deflation in AI terrorism is just terrorism. 404 Media’s report from inside Proton’s AI reckoning is what it looks like when a company whose entire product is custody has the argument internally.
The neutral who can now decline to hold your dispute
The labor item of the week is procedural, boring and the exact inverse of last week’s win. Government Executive reports the mediation agency finalizing a rule that allows it to deny arbitrator requests. Last issue credited an FLRA ruling for landing because a standing body with a docket and a staff was sitting there when the filing came in. This is the same machinery, modified at the only joint that mattered: the neutral third party that holds a dispute between two unequal parties has formally reserved the right not to hold it. Every grievance procedure in a federal contract routes through that custodian. A right whose remedy is discretionary is not a right, it is a request — and nothing about the contract language changed.
The companion is Government Executive on the Bureau of Prisons seeking another shot at ending union contracts: if the custodian can decline the case, the contract that generates the cases is the next thing to go. Labor Notes has the defense that worked, and it is a custody story too — UFCW members protected their local’s election after a sham merger attempt. A merger is how custody of an organization changes hands without anyone voting on the substance; the members made it a vote. LaborPress reports a straightforward gain in the Dallas Cowboys recognizing their cheerleaders’ union, which converts goodwill held at an employer’s discretion into an obligation held in writing.
Where no such obligation exists, Jacobin documents the result: the food industry is rife with worker abuse, a sector defined by custody chains long enough that no link is accountable for the whole. The week’s most direct assertion of custody by the people with their hands on the asset came from the docks. Jacobin reports dockworkers worldwide about to strike for Palestine and Livorno dockworkers trying to block the weapons of war; Drop Site logs the global antiwar strike alongside Trump’s Iran war plan and Ukraine’s strike on a Russian refinery. Cargo sits in somebody’s hands for a period of hours, and that interval is leverage no statute granted and none can easily remove.
The week also buried one of the people who built that lesson. Axios reports Dolores Huerta has died at 96, and People’s World remembers the activist and trailblazer. On the ledger side: People’s World reports Washington state unions uniting behind a millionaire tax while California’s did not — the same instrument, two different sets of custodians deciding what to do with it — and Robert Reich argues California’s billionaires are proving that billionaire wealth endangers democracy. Labor Politics credits the turn to organizing in Trump’s downfall began in Minneapolis. On the federal side, Government Executive covers OPM touting a hire-palooza event for early-career employees — rebuilding a bench whose grievance machinery is being narrowed in the same news cycle — and the unglamorous, genuinely useful Medicare guidance federal retirees need.
The record belongs to whoever is holding it
The surveillance file this week is almost entirely about custody transfers of data that was collected for something else. The Verge has the one every household should read: how a grocery merger could expand a surveillance network. Nobody signs up for a loyalty card as a surveillance subject, and nobody is consulted when the entity holding ten years of purchase history acquires, or is acquired by, a larger one. The consent was given to a company; the data belongs to a balance sheet. 404 Media corrects the record on the week’s most aggressive collector in it is not the bots, Flock, and reports that senators are demanding Meta answer for its pervert glasses following its earlier investigation. Futurism asks whether delivery robots scanning you into a database are scarier than Flock — the honest answer being that the camera matters less than who ends up holding the file — and documents the municipal end of the arms race with Florida police showing off a very small quadcopter that fits exactly one cop.
Techdirt has the structural version in when no ID means no internet, on age verification and the right to access information: every age gate creates a new custodian of identity documents at a site that previously held none, and the breach you should expect is not of the content but of the proof. The counterweight, and one of the few directly actionable items on the page, is 404 Media’s guide for readers in the UK or EU on how to object to Meta’s AI training — a jurisdiction where the holder owes a duty you can actually invoke. Techdirt notes how much the venue matters in how the Streisand Effect case might have played out differently in Germany.
In government, the fight was explicitly over who holds the record. Nextgov reports House Democrats calling on Trump to preserve AI chatbot records and Futurism reports Democrats trying to get hold of Trump’s Grok conversations. A records-retention demand is a custody claim: the public is the beneficial owner, a private vendor is the holder, and the duty only exists if somebody asserts it before the logs roll.
The count itself is the asset under contest. The Existential Republic reports that Trump’s former campaign lawyer is running the Justice Department’s election day operation at the polls, which is the purest custody problem in American life — the party with an interest in the outcome holding the instrument that reviews it. TPM reports DOJ election interference turning into raw thuggery; Democracy Docket covers the department ramping up intimidation in Washington after the state election chief laughed off an error-riddled demand letter and Democrats moving to oppose a GOP lawsuit to block Texas election certification. The Atlantic sizes the reality of election interference, ProPublica traces the machine’s origin in how Cleta Mitchell turned the big lie into a movement, and Axios has the operator’s answer in the real election tech vulnerabilities in 2026: paper and audits, which is to say a record you can take back into your own hands and recount. Nextgov notes the DHS secretary planning a post-election security review — after, which is the wrong side of the event for a custody check. Truthdig argues impeachment and court reform are on Tuesday’s ballot, and profiles the MAGA lawyer behind the Article III Project — custody of the bench, bought on a longer horizon than any of this.
The census is the same asset one layer down. Government Executive reports an author’s argument that the census shows what government does well and what political interference could break, and TPM reports former census directors issuing a rare rebuke of a controversial rule proposed by Trump’s bureau. Former directors are ex-custodians with no authority and perfect knowledge, which is the most frustrating position on this page and also the most credible.
Two items show what a captured custodian costs on a decades-long clock. ProPublica reports how a secret vote by UN scientists legitimized carbon capture and skewed decades of climate policy — the body holding the scientific consensus made an unrecorded decision, and every national plan downstream inherited it. And ProPublica reports a top US health official backing a medication policy shift that benefited a company she holds stock in. Both are the same defect: a custodian with a position. Futurism has the operational consequence in RFK Jr. opening the floodgates on experimental peptides, alarming scientists, and The Atlantic has the bill arriving in a body nobody can indemnify: babies catching measles in utero for the first time in decades. People’s World adds the government’s dangerous rush to produce new plutonium pits — custody measured in half-lives.
The ray of hope: custody with a door
The best structural news of the week is a rent story. People’s World and Truthdig both report that as extreme heat worsens, renters are gaining a right to cooling, the same fight from the tenant side. Read it as custody law, because that is what it is: the party holding the building acquires an affirmative duty to the party living in it, enforceable, in writing, without the tenant having to own anything. That is the one move that converts a holder into a custodian, and it is available at the municipal level to anyone willing to go draft it.
The electoral versions landed too. Jacobin reports that Serbia’s students changed how Serbians think about politics, and Drop Site has the result alongside the week’s other reversal: Lula beating Bolsonaro, and a student-led movement defeating Vučić. Waging Nonviolence reports a North Carolina movement asking voters to reject corporate tax breaks — a prospective, free instrument, which is still the only category that reliably moves. Jacobin argues the left should focus on the real drivers of the affordability crisis and asks who is afraid of Gen Z socialism, while Italy runs the other experiment: Giorgia Meloni hardening her calls for order.
On the technical side, the hopeful items are all ones where you keep the keys. Slashdot reports a newly proposed Linux filesystem that can fix corrupted data — self-healing custody on hardware you own, which is the opposite of a frozen balance at an exchange. Apple shipped something more consequential than the headline feature: Creator Studio gained AI features and a new open JSON file format for Keynote. An open format is an exit; an exit is the only thing that makes a custodian’s good behavior non-optional. Simon Willison marks the October inflection point for vibe game development, which is people taking custody of their own small software. The honest counterweight, because it is the same capability: The Atlantic reports there are too many apps for that, with vibe coders clogging the store, Aftermath argues Valve knows how to run a shopfront but does not know how, or want, to be the custodian of PC gaming — the word is theirs, and it is the right one — and reviews a game that declares war on AI and horror devs who think you are too scared to examine their work. Aftermath also has the week’s best parable about discovering what your holdings actually are, in I sold $16K in Pokémon cards and it fucking sucked.
For the argument about what comes after, Jacobin interviews Cory Doctorow on whether there is life after AI, Doctorow’s own sovereign citizens, but for news and critique and writing cover the custody of the public record and of craft, and Statecraft takes up the individual question directly in how to give money, and should you quit your job. Hamilton Nolan’s Risk Factors is the honest accounting of who carries the downside. The Atlantic has the case against grit — an argument that outcomes live in situations rather than in individual character, which is the same claim this issue makes about controls — and marks the passing of Patrick Stewart, who held a character in trust for decades and handed it on intact. For the wider week: Ars Technica on a hidden ocean change near Antarctica with global consequences, Drop Site on 280,000 Yemenis displaced and troops surging to Haiti, The Atlantic on Israel’s latest last chance to save itself and The Bulwark on its democracy, and its relationship with America, remaining in limbo.
The throughline
Seven weeks, one question, still narrowing. Who fills in the field. Who sends the invoice. Whose hand was on the pen. Who performed the act. Who is physically holding the thing when the paper arrives. Who is on duty when it breaks. And now: whose duty is it, and is it owed to you.
The ledger. Things that landed: a right to cooling, which attaches a duty to the party holding the building. A UFCW local that forced a merger to be a vote. A first recognition for the Cowboys cheerleaders. A compiler-level guardrail for coding agents, which checks the work before the agent can act with your authority. An open JSON format for Keynote, which is an exit. A filesystem that repairs its own corruption on hardware you own. Paper ballots and audits. A senators’ letter with Meta’s name on it. An EU objection process a reader can actually file. Students who took custody of an election in Serbia, and voters who took one in Brazil. Things that did not land: $6.3 billion out of Binance, partially frozen by an administrator the holders did not know they had. Polymarket suspending its users rather than its attacker. A chatbot company’s users discovering their diaries are now estate assets. A UEFI flaw under most servers on Earth. Meta share links leaking sensitive data with no attacker involved. A grocery merger that quietly re-assigns a decade of purchase history. A federal mediation agency reserving the right to decline your arbitration. A carbon-capture consensus set by an unrecorded vote and inherited by decades of policy. A health official holding stock in the company her policy helped. A DOJ election day operation run by the former campaign lawyer of one candidate.
The pattern is not that the holders are all thieves. Most of them are not. It is that holding and owing are two different relationships that look identical from the outside, and every failure above happened at the seam between them — a bankruptcy, a merger, a rule change, an appointment, a breach, a frozen balance. You cannot inspect a duty by looking at the asset. The possession rule told you who could act. The roster told you whether anyone was awake. Custody tells you whose side they were awake on, and it is the only one of the three that can flip without anybody touching your system.
Three lines for operators. Write down who is holding it, not who owns it. Go down your asset register — credentials, backups, customer data, domains, the keys to the keys — and name the legal entity in physical possession of each one, plus the event that would change that name. Acquisition, insolvency, a contract lapse, a single administrator leaving. If the thing you wrote in that column is a brand rather than a counterparty, you have not finished. Prefer custody with a door. An export, an open format, a local copy, your own keys, paper. A holder who knows you can leave behaves like a custodian; one who knows you cannot does not have to. This is the only control on the list that works without the holder’s cooperation. Run the receivership drill. For each dependency, answer one question out loud: if this company filed tomorrow, who would be legally entitled to our data, and what would they be allowed to do with it? Character.ai’s users are getting that answer from a bankruptcy court instead of from a planning exercise, and every term of service you have ever accepted was written by someone who already knew the answer.
An accord is a sentence. An order is a sentence with a venue. A control is an order somebody holds the means to perform, and somebody has to be awake to perform it. This week adds the condition that governs all of them: the person who is awake, holding the means, inside the venue, has to owe you something. Check whose balance sheet your assets are sitting on before you call them yours — because the custody transfer does not announce itself, and some frozen is what it sounds like when it has already happened.