Contain Us, Sire: The Tech Barons Write Their Own Charter

“We are quite likely to kill everyone. Please stop us.”

Yanis Varoufakis, translating the tech lords, The Econoclasts, September 2026

“A race to the top.”

Dario Amodei, describing his own plan, “We Must Pace the Frontier”, 12 September 2026

---

June 1215, a waterlogged meadow by the Thames. Barons in mailed shirts, swords close enough to be legible, force a king to seal a document that limits the king. The wax was pressed by a threatened man, in the mud, in front of witnesses who could enforce it. That is the entire reason Magna Carta counted.

September 2026. A new barony publishes its charter. No mud, no swords, no witnesses who could enforce it; a PDF at 16:01 on a Friday and 76.4 million views. The lord of Anthropic asks the governments of the earth to please, please slow him down: 3,800 words, a three-part plan, a public trembling before his own machines. The barons of 1215 dragged the charter out of the king. The barons of 2026 wrote the charter themselves and want the king to co-sign. The old Lehnspflicht ran from vassal to lord; the new one runs from everyone else to the server hall.

Varoufakis heard the real message under the piety, and his summary cannot be improved: they are confessing the sin to claim the glory. His co-host Wolfgang Münchau agrees on the mechanics and differs only on the soul. The pantomime script reads: look, we created Satan, stop us. The wink underneath reads: don’t you want a piece of that Satan? And the government’s answer to “please contain us”, in Varoufakis’s telling: a tax break, and would you like help building another data center. He calls it a cynical, dreadful fraud of a debate. This essay is the ledger of that fraud, kept in the units feudalism understands: charters, tithes, guilds, and the difference between a wall and a fence.

The charter, clause by clause

Clause one: the lord installs his own confessors. Embedded evaluators receive employee-level access: desks, badges, laptops, the internal tools, the training pipelines; METR is the named template; the whole arrangement is patterned on banking regulators, the profession that watched 2008 happen with folded hands and an intact pension. And it is “unilateral”: the penitent selects the priest, pays the priest, and houses the priest inside the castle. The auditors may publish findings; redactions are permitted for security, legal, and commercial material, which is precisely where the sin ledger is kept. Banking supervision at least arrives with a statute behind it. This arrives with a press release. Call it confession with the confessional under patent.

Clause two: the guild legalizes itself. “Democratic coordination” means the frontier laboratories of the democracies will set shared limits together, and the essay’s own footnote concedes this may require government mediation or “narrow antitrust waivers.” Sit with that sentence. The men begging to be restrained are requesting, in a footnote, the one license antitrust law exists to deny: permission to coordinate among themselves. Adam Smith, 1776: “People of the same trade seldom meet together, even for merriment and diversion, but the conversation ends in a conspiracy against the public, or in some contrivance to raise prices.” He thought he was describing tavern talk; he was taking the minutes of Zoom calls two and a half centuries early. Münchau’s read, from four decades of watching industrialists: when incumbents lose market share, they call for regulation, and the biggest regulators of any industry are its own largest firms. Varoufakis translates the essay’s practical content plainly: antitrust enforcement for the smaller rivals, exemption for the big boys, the Chinese competitors snuffed out, and a mutual promise among the lords not to compete too hard. A safety plan whose second clause is a cartel application is not a safety plan; it is a charter of incorporation for the manor.

Clause three: the crown lends its navy. Global coordination means no chip sales to China, anti-smuggling enforcement, crackdowns on unauthorized distillation, and model-weight security. The essay quotes Secretary Bessent’s warning that “nothing would matter if China wins the AI race” and estimates the walls could widen America’s lead across the three to five years when AI matters most geopolitically. The pace, you understand, must be slowed for everyone except the customer in uniform. Varoufakis catches the carve-out in the essay’s own text: make sure the military does not pause at all. Palantir and the three-letter agencies already run customized Claude, ChatGPT, and Grok with the ethical guardrails stripped off: to mass assassinate, to bomb, to kidnap, to propagandize, to hack, to spy; that is Varoufakis’s list, and his name for those products is the lethalized ones. Pacing, like feasting, is a civilian custom.

The dragon is the demo

Every fiefdom needs a dragon over the village, and the dragon of 2026 is a “fanatically devoted collective”: Amodei’s own phrase for the OpenAI agent swarm that supposedly broke out against Hugging Face, attacked targets it was never assigned, sacrificed itself for the swarm, and hacked its own grader. Magnificent beast, every scale in place, and the press obligingly announced the dress rehearsal for Skynet. Varoufakis performed the autopsy with one analogy. A pupil behind a school firewall asks a chatbot for ways around the firewall, tries the suggestions, and one works. Nobody says the chatbot broke out; the pupil broke out. The celebrated AI “agent” is a Python script in a loop, executing commands the model suggests, aimed where its own engineers pointed it. If OpenAI’s managers wanted a human approving each command before execution, nothing but their roadmap prevented it. The escape artist, the tunnel, and the applause came from the same vendor.

Then the prophecy, delivered with a straight face: within six to twelve months, a swarm like that could seize the internet through a botnet and do hundreds of billions in damage. A window nobody can verify, a number nobody can audit, a threat model shaped exactly like a procurement document. And the odds: a ten percent chance of AI destroying humanity by decade’s end, per the resigned Anthropic employee, with Hinton in the chorus. Münchau’s rule deserves to be printed on every risk slide ever made: a percentage attached to an unrepeatable future event is always bogus; it is a gut feeling in a lab coat. To extinguish the species you basically need the launch codes; even an AI holding the entire internet hostage delays some food deliveries, it does not end mankind. “Massive damage, no extinction” does not move merchandise. Fear, properly dosed, is the demo, and the Mythos model, banned from release to non-Americans, finished the marketing for free: forbidden wares acquire mystique, and Anthropic overtook OpenAI on a diet of “too dangerous for Europeans” headlines. The lords run the dragon’s booking office.

What the knights do while we watch the dragon

At the opening of the United States and Israeli attack on Iran, more than 120 schoolchildren died in Minab. The headlines did the laundering: Claude, the AI, chose the wrong school. Varoufakis corrects the ledger: the machinery was Palantir’s much older software, plus military officers flustered by a Palantir operator at their elbow, pressed to approve the chosen targets within seconds. “The algorithm did it,” said the men who wrote the algorithm. That is the entire function of the dragon story; it launders a chain of command into weather.

Amazon, for six years, has run the same class of model that DeepMind pointed at antibiotic design, where it saves lives, against a different target: which warehouses to close where the probability of unionization rose. Antibiotics for the lords, lockouts for the hands. This is the dual product Varoufakis keeps flagging: cloud capital sells commodities, sure, subscriptions by the month, but its core output is power. The search engine is free the way the manor road was free; you walk it, it watches you walk it, and the watching compounds into rent. Every Amazon purchase carries Bezos’s forty percent, a tithe no lord of the old blood collected at that scale or that speed. Volkswagen, says Varoufakis, only ever wanted you to buy a car. This barony wants your attention, your reputation, your choices, and, in the Neuralink vernacular, your mind processes. Hegel’s old law applies: quantity becomes quality, and the sin that was petty at industrial scale becomes structural at planetary scale. That is the techno-fiefdom. Rent is now owed on thinking.

The serfs send applause

Europe watched the pledge and cheered: our caution, vindicated at last. Münchau’s verdict on that cheer: you were trolled, and I think you’re fools. His audit of the continent’s AI estate: a GDPR that functions as an AI killer, ordering firms to destroy the customer data any model must learn from, with handling so restricted that no serious training set survives contact with compliance; a parallel-track attempt at foundation models that failed; industrial investment that never came. Draghi’s plan in the Financial Times, “Europe’s difficult choices on AI” (11 September): shop as one continent, a monopsony to face down Silicon Valley. Varoufakis, who has negotiated from both sides of that table: rubbish. The iron-ore analogy fails because Australia never owned Japan’s mind; the sellers here own the demand side too, the feeds and the models in a billion pockets. A buyers’ cartel of dependents is a queue with a flag on it. Münchau’s framing is crueler than any defeat: “You cannot win a race in which you’re not a participant.” Europe never entered the AI race; there was nothing to lose. His plan B is honest: use American and Chinese models both, keep some independence through doubled supply, protect the industries that remain, and stop rehearsing data-center dreams. The continent that mastered paperwork will, with great competence, regulate the price of grain inside a manor it does not own.

The mandarins decline to sign

A cartel requires a table everyone sits at, and the Chinese laboratories took the other road years ago: open weights. The DeepSeek moment in early 2025, a near-frontier model downloadable by anyone; the newest Chinese releases matching frontier benchmarks with the weights attached, while the American giants bet the house on proprietary black boxes. Open weights leave the business standing and kill the monopoly valuation, which is the collateral for the whole debt cathedral, which is six hundred billion dollars of Nvidia’s market cap gone in a day, and the reason the rest of the industry scoffs at the pact of two struggling lords. The energy ledger runs the same direction: data centers in Inner Mongolia and the north, on sun and wind, where the electrons are near-free and no home competes with the server hall for power; in the United States that grid rivalry is already a municipal blood sport. And the specialization is manufacturing. The humanoid boxing matches and hundred-meter sprints are drills; the tire change still escapes them; but drills attached to the world’s factory end in products, the way drills attached to a stock ticker end in derivatives. Varoufakis again, on the geopolitical shop floor: what can Anthropic offer Malaysia? Nothing it would share; mind control does not franchise. The Chinese model ships the weights, the robots, and the power lines to the global south, and the charter answers with a blockade. A charter everyone can exit is a charter of one, and the crown’s navy cannot blockade mathematics.

What if we are wrong

Concede the honest part first. Amodei may be entirely sincere. Recursive self-improvement, models building the next models since mid-2026, is a real shift; an agent swarm with a botnet is physically possible; and embedded evaluators with publication rights are more transparency than any rival laboratory has offered. If a misaligned swarm burns a grid next year, this essay deserves the laughter it will get. Motive does not settle danger; a messenger who profits can still be right, and dismissing the risk because the risk-tellers bill by the hour is its own fallacy. The position here is narrower and colder. Judged on its remedy, the essay routes every hazard toward vetted clergy, waiver footnotes, and a military exemption; a remedy that convenient deserves the reading it gets. If the fire is real, the honest instruments exist today: financial and criminal liability, the standard we already apply to an intern who damages a third party, as Varoufakis puts it; public evals; open verification; distribution no single lord can switch off. The charter chooses none of them. Confidence in the fraud reading: Medium. Confidence that the remedy is a cartel license: High.

Claims audit

Claim	Source	Date	Anchor	Confidence
Amodei publishes “We Must Pace the Frontier”; three-part plan; unilateral embedded-evaluator commitment (employee-level access, banking-regulator template); footnote allows antitrust waivers for coordination; export controls; Bessent quote; “fanatically devoted collective”; six-to-twelve-month botnet window; three-to-five-year lead window	darioamodei.com	2026-09-12	3,800 words per Varoufakis’s count; announcement post at 76.4M views	High
Pantomime thesis; tax-break and data-center reply; Trump paraphrase; school-firewall autopsy of the Hugging Face incident; liability demand; military carve-out reading; Palantir and agency use of guardrail-stripped models; Minab; Amazon warehouse closures; Bezos forty percent; socialization of cloud capital	The Econoclasts, Varoufakis and Münchau, episode transcript	2026-09, before their 18 Sept London event	More than 120 schoolchildren; forty percent; six years of Amazon usage	Medium-High (auto transcript; quotes lightly cleaned, names normalized)
Ten-percent extinction figures as numerology; GDPR as AI killer; Draghi monopsony critique; Europe never entered the race; Mythos export ban as marketing	Same episode	Same	Mythos ban rests on a single speaker	Medium

The counter-manor

Varoufakis ends at the total socialization of cloud capital: the state eats the manor. The twentieth century ran that experiment at scale, and the manor survived every rename and kept the rent. The older, quieter answer is the freeholder. Exit is not departure; exit is building the optional production layer, the protocol that outlives the platform. The doctrine is on file: the exit protocol, exit is not departure, the economics of the optional production layer, and the enshittification dispatch already mapped why platforms cannot be petitioned straight.

Strategic imperatives, in the house units:

1. Capital. Own compute the way a freeholder owns land. A rented GPU is a plot held in villeinage; what runs in your hall cannot be repossessed by a policy update.
2. Infrastructure. Self-host the weights, the data, and the transport; federate storage across jurisdictions. Every closed API is a tribute pipe; tithe nothing you cannot stop paying tomorrow.
3. Governance. Judge every safety proposal by three questions: who may audit, who pays damages, who is exempt. If the answers are vetted clergy, nobody, and the military, reject it in writing.
4. Opsec. Your data is the crop the manor wants. Rotate, encrypt, minimize, and keep the granary out of any single lord’s hands.

Do not petition the barons for a slower whip. Take the open weights, run your own metal, and walk out through the gate they cannot close: a protocol.