Whom You Obey

Sovereignty is a property of who can be compelled; the European project answers, us, by our own institutions, under our own law.

Europe’s values are under attack

For seventy-five years Europe built its hospitals, its courts, its banks, its parliaments and its homes on top of an infrastructure owned by the United States, under an assumption that the country owning the infrastructure would remain a country whose internal politics would constrain what its government could do to its allies.

The assumption was reasonable in 1995.

The country that has replaced it is one in which wealth concentration has produced an oligarchy openly involved in the executive branch. Judicial constraint has been hollowed.

Public discourse has been degraded by algorithmic amplification.

Public health has collapsed under predictable strain.

Election denial has become a constitutional norm.

The political leadership has stated openly that allies will be punished for non-compliance.

The American dream Europe was told to copy has become the American oligarchy. Europe’s dependency runs through it.

In spring 2026, three of Europe’s largest powers were threatened, openly and within eight weeks, with the removal of dependencies they had not chosen to depend on. Trade with Spain. British sovereignty over distant islands. Tens of thousands of American troops on German soil.

By the time the eight weeks had passed, one chancellor had retracted his criticism of an American president on the official channel that performs alliance loyalty. One prime minister had walked back his initial refusal under linguistic cover. One head of government had flown to Beijing in search of an interlocutor Washington could not constrain.

The infrastructure decides whom you obey.

The architecture was built under different assumptions. The assumptions have broken. The dependency continues.

Iran, spring 2026

On 6 December 2025, at the Reagan National Defense Forum in Simi Valley, the United States Secretary of Defense told a gathering of policymakers that “model allies that step up will receive our special favor” and that “allies that do not will face consequences.” The framework was stated openly, three months before the war.

The strikes began on 28 February 2026. Within seventy-two hours, the dependencies were being weaponised against three of Europe’s largest powers, each of which had refused, in different ways, to participate in the war.

In the Oval Office on 3 March 2026, with Treasury Secretary Scott Bessent at his side, the President of the United States threatened to cut off all trade with Spain. Madrid had refused use of joint bases at Naval Station Rota and Morón Air Base for offensive operations against Iran.

Foreign Minister José Manuel Albares had stated publicly the previous day that Spain would not authorise base use for strikes outside the UN Charter.

Bessent called Spain’s government “terrible actors.” Between 11 and 15 April, Pedro Sánchez visited Beijing for four days, signed nineteen bilateral agreements including a High-Quality Investment Agreement, and stated publicly that China was “the only” interlocutor he could envisage helping resolve the Iran situation.

Spain answered the trade threat with a four-day pivot to a different infrastructure partner.

Keir Starmer received the request from Washington and refused. His own legal advice counselled against participation. On 1 March 2026, he stood in Parliament and announced that the United Kingdom would permit US use of British bases including RAF Fairford and Diego Garcia, but only for “specific and limited defensive” purposes.

The phrase “no regime change from the skies” did the diplomatic work. The basing access was operationally what mattered. On 21 March, Iran fired two long-range missiles at the joint UK-US base on Diego Garcia. The strike was intercepted but exceeded Iran’s previously known range, reaching three thousand eight hundred kilometres. Iranian missiles can now reach Western Europe.

Friedrich Merz spoke on 27 April 2026 at Marsberg. He told an audience that Iran was very skilful at not negotiating, that the Americans had travelled to Islamabad and left again without result, that an entire nation was being humiliated by the Iranian leadership. He named the United States as that nation.

The next day, on Truth Social, Donald Trump replied that Merz “thinks it’s OK for Iran to have a Nuclear Weapon” and “doesn’t know what he’s talking about.” On 29 April, Foreign Minister Johann Wadephul began the walkback on public broadcaster DW. On 30 April, Trump publicly threatened troop reductions in Germany, Spain and Italy.

On 2 May, in Florida, he told reporters: “We’re cutting a lot further than 5,000.” On 3 May, at 15:43 Central European Time, Merz posted from the official chancellor account that the United States “is and will remain Germany’s most important partner in the North Atlantic Alliance. We share a common goal: Iran must not be allowed to acquire nuclear weapons.”

Six days from criticism to retraction in the chancellor’s own voice, on the channel that performs alliance loyalty.

Each refusal was answered with a different dependency. Spain with trade. The United Kingdom with sovereignty over distant islands. Germany with thirty-five thousand US personnel on home soil and the EUCOM and AFRICOM headquarters that had run the strike campaign through the basing infrastructure that command needed. None of the threats specified an enforcement mechanism. None had to.

The dependency was unmistakable, the message was delivered, and three sovereign European powers walked back their refusals in three different ways within ten weeks.

Constanze Stelzenmüller, on NPR, 8 March 2026: European capitals with US bases “have decided it is not worth fighting the Americans over the usage of those bases.” That sentence describes what had happened by 3 May. It also describes what the architecture is for.

The architecture decides who reads you

In March 2009, the National Security Agency and the Israeli SIGINT National Unit signed a memorandum of understanding. Five pages. Classified TS//SI//REL. The Guardian published the document on 11 September 2013, under the bylines of Glenn Greenwald, Laura Poitras and Ewen MacAskill.

The document’s operative language is unambiguous. NSA “routinely sends ISNU minimized and unminimized raw collection.” Raw signals intelligence is defined inside the document as “unevaluated and unminimized transcripts, gists, facsimiles, telex, voice and Digital Network Intelligence metadata and content.” The privacy provisions cover United States persons only.

European citizens have no protective scope. The document states that it “is not intended to create any legally enforceable rights.”

This is the document that runs European communications. The communications of European citizens, swept up by NSA collection drawing partly on feeds from European intelligence services, transfer raw to a foreign intelligence service operating outside any European legal framework, with no minimisation requirement and no European executive briefed on the onward sharing instrument.

Raw collection means a phone call between a parent and a child, transferred intact and unminimised to a service the parent has not heard of, beyond any European court’s reach. A doctor calling a patient with a diagnosis. A lawyer briefing a client on a privileged matter. A journalist speaking to a source. A political organiser running a strategy meeting.

A trade union conferring on an industrial dispute. A family conversation about a resignation, an affair, a death, a debt. The MoU specifies that this is what is shared. The MoU specifies that European citizens are outside its privacy provisions. There is no European version of the MoU.

Operation Dunhammer became public in May 2021 through a joint investigation by Danmarks Radio, NDR, WDR, SVT, NRK and Le Monde. The Danish Defence Intelligence Service had allowed NSA to operate an XKeyscore intercept facility against fibre-optic cables landing in Denmark.

NSA selectors were used to collect on Angela Merkel, Frank-Walter Steinmeier, Peer Steinbrück, and senior officials in Sweden, Norway, France and Germany. Danish FE leadership was suspended after the new Defence Minister was briefed on the findings.

WikiLeaks published Espionnage Élysée on 24 June 2015 in collaboration with Libération, Süddeutsche Zeitung and L’Espresso. The release contained NSA tasking documents and intercepted communications of Presidents Jacques Chirac, Nicolas Sarkozy and François Hollande, plus French ministers and the French ambassador to the United States.

The Bundestag NSA inquiry, running from 2014 to 2017, established that BND from its station at Bad Aibling had run NSA selectors against European traffic. Of the roughly forty thousand selectors BND eventually rejected as out-of-policy, approximately sixty-two per cent targeted EU member-state government agencies and seven per cent targeted EU institutions.

These are the receipts that surfaced. Each came out only because something broke. A whistleblower walked. A leak landed. A new defence minister was briefed and refused to look away.

On 6 August 2025, The Guardian, +972 Magazine and Local Call published a joint investigation. By July 2025, approximately eleven thousand five hundred terabytes of intercepted Palestinian phone-call audio, around two hundred million hours, was being stored on Microsoft Azure servers. The bulk of the data was held in the Netherlands. Smaller volumes were held in Ireland and Israel.

The system became operational in 2022.

The system began with a meeting. In late 2021, Unit 8200 commander Yossi Sariel met Microsoft CEO Satya Nadella. The product that emerged was customised to Unit 8200’s specifications. The collection rate was reported as approximately one million calls an hour. On 25 September 2025, Microsoft terminated Unit 8200’s access.

The decision came from Microsoft’s headquarters in Redmond, Washington, following its own internal review of the August reporting. Dutch and Irish data-protection authorities had been silent throughout the three years the operation ran on their soil.

In 2024 and 2025, Citizen Lab and Amnesty International confirmed that Graphite spyware, developed by Paragon Solutions and founded by ex-Unit 8200 commanders including Ehud Schneorson, had targeted Italian journalist Francesco Cancellato, Mediterranea Saving Humans co-founders Luca Casarini and Giuseppe Caccia, and Father Mattia Ferrari.

Italian government undersecretary Alfredo Mantovano authorised use against Casarini and Caccia on 5 September 2024. The architecture works through European government complicity as well as around it.

On 16 July 2020, the Court of Justice of the European Union ruled in Schrems II (Case C-311/18) that United States national-security collection on EU persons was not subject to limits adequate to EU fundamental rights. The Privacy Shield framework was struck down. The successor Data Privacy Framework, agreed in 2022, is now wobbling.

Norway’s Data Protection Authority advised in February 2025 that European businesses should prepare exit strategies.

The data still flows.

The infrastructure decides whom you obey. The infrastructure decides who reads you.

The MoU specifies raw, unminimised sharing with no protection for non-American persons. Israel runs Unit 8200 at one million calls an hour. Israeli intelligence is competent at operational secrecy. The European Court ruled the system illegal under EU fundamental rights. The data still flows. The architecture is documented. The receipts are dated. The exposure is current.

Anticipatory compliance

In early 2025, the President of the United States issued an executive order against officials of the International Criminal Court for the issuance of arrest warrants against Israeli officials over alleged crimes in Gaza. The order targeted Karim Khan, the ICC’s prosecutor, personally.

Microsoft, the provider of the court’s email and productivity infrastructure, suspended Khan’s account access. The court continued operating. The message was delivered. There had been no direct order against the ICC itself. Microsoft acted because Microsoft is American, an American president had named Khan, and the path of least resistance to American compliance was to comply before being asked.

On 31 October 2025, the ICC announced that it was replacing its Microsoft 365 stack with openDesk, the open-source productivity suite developed by Germany’s Zentrum für Digitale Souveränität. The court committed sovereign budget to escape the chokepoint. The chokepoint was real enough to trigger institutional flight from a body whose entire reason for existing is judicial independence.

In July 2025, the United States Treasury Department added Francesca Albanese, United Nations Special Rapporteur on the situation of human rights in the Palestinian territories, to its sanctions list. Banca Etica, a small Italian cooperative bank with explicit ethical commitments and a constituency that broadly supports Albanese’s mandate, declined to open her account.

The reason cited was dollar-clearing exposure. No United States enforcement action had been taken against Banca Etica. The threat was sufficient.

This pattern is observable across fifteen years. In December 2010, within four days of WikiLeaks publishing United States diplomatic cables, PayPal, Visa, Mastercard and Bank of America froze donations to WikiLeaks. There was no court order. The freeze lasted years and was only partially broken by a 2012 Icelandic court ruling against Valitor. Same chokepoint. Same anticipatory compliance.

Fifteen years before Albanese, against a different actor, in response to a different United States executive priority, with the same architectural mechanism producing the same outcome.

The chokepoint does not need to be activated to be obeyed. The architecture reads the political weather and complies. Microsoft does not consult the institutional customer before suspending an account at the will of an American president. Italian banks do not consult the depositor before declining to open an account that might create dollar-clearing exposure.

PayPal did not consult its users before freezing payments to a publisher under no court order. The compliance happens before any direct order, in anticipation of a consequence that may or may not materialise, and the consequence is large enough that the anticipation alone produces the obedience.

This is the daily operating mode of the dependency. The Iran threats were public because the stakes were public. The 2009 MoU is documented because a contractor walked out with the documents. The ordinary mode is anticipatory, silent, continuous, performed by every European institution running on infrastructure subject to a foreign jurisdiction. Most of it is invisible.

Most of it will remain invisible.

The ICC chose to leave. Eight months from the email suspension to the openDesk announcement. The court that judges crimes against humanity now runs on European-controlled software. ZenDiS is German. openDesk is open-source. The architecture that obeys differently is being built.

Importing the failure mode

Three failure modes of late-stage state and private power fusion are operational at scale today. American oligarchy: wealth concentration that has produced a political class openly held by a small number of families, executive power rented, judicial constraint hollowed, the public sphere owned by men who have stated openly what they want from European institutions.

Russian extraction: state authority weaponised to transfer wealth from population to regime, information closed, dissent exported or killed. Chinese total control: surveillance and information management at the scale of a billion people, demonstrating that comprehensive control is operationally achievable when sufficient infrastructure is owned and integrated by a single state.

Europe’s relationship with the United States was structured around an assumption that the American failure mode would not arrive. The assumption was that the United States was a stable democratic society with internal mechanisms strong enough to constrain its worst impulses, and that European dependence on American infrastructure inherited those constraints. The assumption was reasonable in 1995.

What Europeans now see across the Atlantic is the failure mode arriving.

Constitutional institutions that no longer constrain executive power. Election denial as constitutional crisis. Federal law enforcement turned against political opponents. Judges and prosecutors publicly intimidated. The constitutional order itself uncertain.

Public discourse degraded by algorithmic amplification of conflict to a degree that consensus has become structurally difficult. Public health systems that collapsed under predictable strain during the pandemic and have not recovered. Opioid addiction created by corporate decisions that produced no accountability. Mass shootings absorbed without policy response. Political violence as routine.

Climate denial as governing principle.

Europe is the fastest-warming continent. The European State of the Climate 2025 report, published by Copernicus and the World Meteorological Organisation on 29 April 2026, recorded that Europe has warmed at twice the global average over the past thirty years. The Arctic warms three to four times faster.

Sub-Arctic Fennoscandia, comprising northern Norway, Sweden and Finland, recorded its longest and most severe heatwave on record in July 2025: twenty-one consecutive days above 30°C inside the Arctic Circle, peaking at 34.9°C. The United Kingdom, Norway and Iceland recorded their hottest year on record. Ninety-five per cent of Europe saw above-average temperatures.

Wildfires consumed over a million hectares, the largest area on record. Marine heatwaves affected eighty-six per cent of European seas. The country that controls the platforms that shape European political discourse withdrew from the Paris Agreement twice and uses those platforms to amplify climate denial in European political discourse while the continent burns.

The same algorithms shape European discourse. The same platforms host European political organising. The same wealth-concentration patterns are emerging. The same erosion of trust in institutions. Democratic backsliding visible in Hungary, Italy, the Netherlands, France and the United Kingdom. Governments increasingly elected by minorities of registered voters.

Opposition parties classified as extremist by domestic intelligence services. Press regulation rolled back. Independent broadcasters defunded. Political violence rising. Conspiracy theories migrating from the social-media periphery into mainstream political discourse via the same infrastructure that connects American culture-war politics to European audiences.

The architecture connects the two societies. The dependency is the conduit. What is happening across the Atlantic travels through the architecture and arrives in European discourse, European institutions, European elections, European public spheres. The mechanism is documented. The conduit is operational. The architecture obeys whoever owns it. The owner is the regime making the threats.

The country that owns the infrastructure Europe depends on is in structural breakdown. The breakdown is being exported through the infrastructure. Europe is importing the failure mode without choosing to. Every month the dependency continues is a month of additional import.

What Europe is

Healthcare is a right. A child born with a chronic condition is not a financial liability that bankrupts a family. A worker injured on the job does not lose the family home. Ageing is not a financial cliff. Cancer treatment does not end with a hospital bill the patient cannot pay.

Education is a public good. University is not a debt sentence that follows the graduate for thirty years. Public schools are funded sufficiently to function. Children are taught critical thinking, civics, the languages of their neighbours, the history of the continent.

Work has limits. The working week ends. Holiday is real. Parental leave is meaningful. The employer does not own the worker outside the office. The worker does not exist solely to serve the employer.

The public sphere is real and worth funding. Public broadcasting that informs rather than enrages. Public transport that works. Public spaces that are not commercial. Public libraries that survive. Public art that is accessible. Public memory of what the continent has been through and what it has decided not to repeat.

Food is regulated. Water is clean. Medicines are tested. Products do not casually kill people. Companies operate within constraints they did not write and cannot ignore.

Political power is constrained. Executives do not become kings. Parliaments matter. Courts function. Elections produce transitions. Truth is not a matter of consumer choice. The press is free, and the freedom is paid for in arrangements that protect it from both state and capital.

Diversity within unity is possible. France and Finland and Greece and Ireland are different countries with different histories and different languages and yet coordinate on shared problems. The project of European integration, however imperfect, is the alternative to the wars that defined the continent before it.

The past is a teacher. The lessons of the twentieth century are not optional. The warnings about concentrated power, surveillance states, mass propaganda, scapegoating of minorities, are paid in blood that European families remember.

This is what is at stake. The way of life. The settlement. The agreement that produced the safest and freest century the European mainland has ever had after producing the bloodiest, and the recognition that the safety and freedom were built deliberately and can be lost the same way.

The settlement is fragile. The fragility is the point. It requires constant defence. The defence is itself the European project.

The answer is on the page

Europe has built sovereignty before. Each time against an American chokepoint. Each time in living memory.

Airbus exists because Boeing and Lockheed dominated commercial aviation. Galileo exists because GPS was American and could be turned off. CERN exists because particle physics required pooled European budget at a scale no single nation could carry. GSM exists because the Americans had AMPS and the Europeans decided to build something better.

The euro exists because dollar settlement gave Washington leverage over European trade. Ariane exists because the Americans refused to launch European satellites that competed with American interests. EURATOM exists because the Americans controlled the fissile material market.

Each one was impossible until it was built. Each one is now indispensable.

Each of these is European multinational sovereignty built deliberately, through pooled funding, against an American chokepoint, by people who recognised that no single member state could do it alone. The capacity is European. The institutional pattern is European. The political memory is European.

The financing is solved. Anchored demand at the scale of the European public sector creates investable cashflow. Asset managers harvest the cashflow into instruments European pension funds and household savings can buy. The construction is recoverable through the financing mechanism. The architecture pays for itself.

The cost question moves out of the affordability frame and into the political-decision frame, where it has always belonged.

The eight rules of the Blueprint are written. Each operates within existing institutional architecture. None requires new treaties. None requires unanimity. None requires waiting for a moment of political consensus that will not arrive.

The political energy is forming. Two hundred organisations have signed the EuroStack declaration. Volt Europa carries the political channel. CISPE represents the European cloud sector. Schrems and NOYB run the legal apparatus that has already forced the European supreme court to rule on US surveillance reach. ZenDiS is operational, employing engineers, shipping software.

The Denmark Microsoft exit has happened. The ICC migration to openDesk has happened. The seven-country submarine cable initiative has been announced. Mistral is operational. AMI Labs, having moved to the United States, has returned to Europe. The Nordic asset-management constituency for European sovereignty is forming.

The architecture is being built in pieces. The pieces are real. The work is partial. The work is doable. The path is visible.

The window

The architecture decides whom Europe obeys. The receipts are dated. The dependency runs through every layer of European institutional life. Email infrastructure. Payment rails. Cloud servers. Encryption standards. Identity authentication. Satellite imagery. Intelligence pipelines.

The window for building the alternative narrows because every year of dependency makes the alternative harder to build, the captured talent harder to recover, the captured infrastructure harder to replace, the political imagination harder to restore.

We have watched the American dream become an oligarch’s playground. We have watched Russian wealth become Russian state extraction. We have watched China demonstrate that total information control is operationally achievable at the scale of a billion people.

These are the three working answers the present century has produced to the question of how political and private power should relate to each other. None of them is European.

What is at risk is the settlement my generation grew up inside. Healthcare that does not bankrupt the family. Universities that do not bury the graduate in debt. The right to walk home from school. The right to grow old without selling the house. The right to be different in language and history and habit and to be European anyway.

Europe is what remains of the post-war wager that none of those answers is the only one available. That political power can be constrained by institutions. That markets can be regulated by democracies. That information can be plural. That diversity can hold a continent together. The wager is fragile. The wager is also still on the table.

The work begins in the procurement decision your CIO makes next Tuesday, in the contract your CTO signs next month, in the political vote you cast next year. Each of those decisions is a vote on whose architecture decides whom you obey.

We have done this before. I believe we can do it again.

The infrastructure decides whom you obey. Mandate the demand. The architecture follows.