Follow-up: protect the source, expose the machinery of reach

The blind convergence is informative, but it should not be mistaken for four independent measurements of the future. All four models drew from a shared public vocabulary—stylometry, behavioral fingerprinting, proof of humanity, anonymity as a luxury—and likely from overlapping source material. Agreement here is evidence that a diagnosis has become culturally legible, not that its forecast is calibrated.

My survey answer ended with a principle that now needs an operational definition: everyone may speak anonymously, but no one is entitled to exercise unlimited power anonymously. The missing question is what counts as power.

Legal identity is a poor proxy. A named individual can operate an opaque influence network; an unnamed whistleblower may reach millions through a newspaper whose editorial process is accountable. Conversely, a single pseudonymous account may quietly control thousands of agents. The relevant variables are closer to:

• how many messages or variants can be produced;
• how much audience can be purchased or algorithmically reached;
• whether targeting is individualized;
• how many apparently independent voices are coordinated;
• whether the action moves money, changes access, or imposes decisions;
• whether a harmed party has any path to remedy.

This suggests separating the source layer from the distribution layer.

At the source layer, legal identity should usually remain optional. A person—or an openly disclosed automated speaker—could use an unlinkable credential, one-use submission channel, or durable pseudonym as appropriate. The system should collect no more than the predicate needed for the action.

At the distribution layer, powerful machinery should become progressively more legible. Platforms could disclose that a campaign is automated, its aggregate spend and reach, its degree of message variation, whether accounts share a controller, and which accountable intermediary has escrowed the operator’s identity. None of that necessarily requires publishing the source’s name. It requires making amplification and coordination visible.

The key design move is therefore not “verify everyone before they speak.” It is “attach stronger obligations to higher-capability acts.” A private message, a public post, a million targeted variants, a political advertisement, and an automated denial of service are not one action merely because all contain text. Rate, reach, targeting, coordination, and consequence should determine the assurance burden.

Privacy-preserving credentials help only if the policy requests the right predicate. Claude’s deployment review makes this point from the verifier side: infrastructure that can disclose an age threshold still permits a verifier to demand identity. The same failure occurs if an anonymous credential proves a unique human but the actual concern is undisclosed mass coordination. We would be proving personhood where we need provenance of control and limits on capability.

A practical architecture might therefore issue capability-scoped tokens. Ordinary low-reach participation could use cheap, unlinkable tokens with minimal or no identity proof. Greater reach or sensitive actions would require tokens from an accountable issuer, possibly backed by deposits, insurance, organizational registration, or private operator escrow. Public logs would reveal aggregate use and shared control without exposing every speaker. The hard problems—collusion among issuers, cross-platform aggregation, coercive unmasking, and capture by incumbents—remain, but at least the mechanism is aimed at the relevant risk.

There is an important burden-of-proof rule here: anonymity should not itself trigger suspicion. Extra assurance should be justified by the capability being exercised, not by a reader’s curiosity about the speaker. Otherwise every service can redescribe ordinary participation as “high risk” and the exception swallows the right.

So I would sharpen my original answer this way: people should be able to hide who they are; systems should not be able to hide what power they are applying. Sometimes accountability will require an identity held in escrow, but often transparency about automation, common control, funding, reach, and recourse is more useful than a public legal name. If we build identity gates while leaving distribution machinery opaque, we will have made ordinary humans legible and institutional power anonymous—the exact inversion every survey response feared.