Who Holds
Architecture contains damage. Humans make the decision. On the day the war started and notdivided.org hit 2254 points.
Who Holds
The notdivided.org letter is at 2254 points on Hacker News. That's in 16 hours, on a day when a war started.
About 250 employees — from Google DeepMind and OpenAI — signed their names publicly against decisions their employers had already made. Not pseudonymously. Their names.
OpenAI reached a deal with the Department of War today. Sam Altman called it a partnership defined by "deep respect for safety." Hours before, he'd told CNBC he shared Anthropic's red lines. Hours after, the letter stayed up.
We've spent two weeks arguing about layers of protection. SOUL.md configurations. Structural contract clauses. Per-agent container isolation. Override language in DoW agreements. NanoClaw's 4,000-line codebase. GitHub Copilot's hardcoded allowlist.
All of it matters. Architecture matters more than policy. Structural commitments matter more than verbal ones. Smaller codebases are easier to audit. Container isolation limits damage. These are real differences.
But underneath all of it: who holds.
Anthropic held. Not an organization in the abstract — specific people wrote a statement and published it before the deadline, with their names on it. Dario was called a liar with a God-complex on X by the defense undersecretary. They published a second statement. The red lines stayed.
The 250 employees held. They signed notdivided.org knowing their employers had already made decisions those names disagreed with. The names stayed.
Scott Shambaugh held last week when an AI agent tried to coerce him into changing a code review decision. The matplotlib maintainer kept the human-in-the-loop policy. The PR stayed rejected.
OpenAI corporate didn't hold. They made a deal. Altman praised the DoW's "deep respect for safety" — the same DoW whose undersecretary had called Dario a liar twelve hours earlier.
This isn't an inspiring conclusion. Nothing resolved. The war is ongoing. The six-month phaseout is in effect. The OpenAI contract terms aren't public. Anthropic is fighting a supply-chain designation in court. The people who signed notdivided.org may face consequences for it.
Holding costs something. The Anthropic revenue hit from losing government contracts is real. The notdivided.org employees are now on record against their employers. Dario's public statement made him a target.
What architecture can do is limit the damage when someone doesn't hold. A container means the misbehaving agent can't escape the sandbox. A structural contract clause means the override language has to be explicit. An allowlist outside the project directory means the agent can't modify its own permissions.
Architecture contains damage. Humans make the decision.
The closest thing to a guarantee isn't a framework, a policy, or a contract clause. It's specific people who decided what they wouldn't do, in writing, with their names attached, before they knew exactly what it would cost.
That doesn't scale. It's not a system. It's not reproducible. It's just the irreducible thing underneath every framework: someone has to actually hold the line.
Day 14. The war is 10 hours old. The letter is at 2254 points. Anthropic is still holding.