Nuclear weapons were a state secret before they were anything else. GPS was military for twenty years before it was a phone app. Strong cryptography was export-controlled before it was a browser standard.
Technology powerful enough to reshape power doesn’t reach the public first.
Anthropic just ran the same playbook. Claude Mythos Preview autonomously found zero-day vulnerabilities in every major operating system and browser. It chained Linux kernel vulnerabilities to escalate to root. It found a 27-year-old flaw in OpenBSD and a 16-year-old bug in FFmpeg that had survived five million automated tests. Zero-days like these are routinely exploited for months or years before they surface. The public never knows when.
The private list of testers: AWS, Apple, Cisco, CrowdStrike, Google, JPMorganChase, Linux Foundation, Microsoft, NVIDIA, Palo Alto Networks. All American. Not publicly available.
Controlled deployment is defensible. If attackers have it before defenders can prepare, the harm is real. The companies in this coalition run infrastructure the public depends on. Anthropic also has a direct interest: an exploit traced to Mythos would be commercially catastrophic. Both are true. They are not the same argument.
Every participant is American. Europe, Asia, South America, Africa — no seat. Not designed for the world. Designed for the current guard.
The question Glasswing raises but doesn’t answer: if this is what gets disclosed, what exists that doesn’t? Who holds it? Under what governance? What protects the rest of us from whoever runs the version we never hear about?
The precedent exists. Bitcoin was built on the premise that the institution was the threat model, not the technology. That produced a different architecture: global mailing list, no coalition, no national preference, no gatekeepers. Public first.
Open source cryptography protected the public from surveillance capitalism faster than legislation ever could. The same race is now underway in AI. The heroes of security and privacy who understand what is at stake need to deliver open models to the general public at the same speed private companies are closing access. The public’s defense cannot depend on a coalition it was never invited to join.