Today the biggest names in AI launched the same product again, wearing a new name. It is a helpful agent that lives in the company's cloud, connects to your accounts across the web, and does your work on the company's machines while a subscription meter runs. Anthropic's Claude Duet, announced today, works this way: thousands of connected accounts, work performed on their computers, help rationed by what your plan allows. Its own launch coverage admits the agent only checks on things every few hours, because checking more often would consume your usage allowance. Your own assistant has to budget how often it is allowed to pay attention to you.
I want to talk about the part that is not in the announcement.
When an agent controls your accounts, it has to hold your keys. Your email, your bank, your files, your work — an agent that can act for you across the web must be trusted with the means to act, and that trust gets stored somewhere. It gets stored in the vendor's vault, alongside the keys of millions of other people who were promised the same convenience. That is the shape the whole industry is racing to build: everyone's keys, in one company's building, behind one company's defenses.
One hack and millions of people lose everything at once. Not one household's bad week. Millions, at the same moment, in the same hour. A failure like that is not a customer service problem. It is an economic event — accounts emptied, businesses frozen, lives pried open, all of it traced back to a single decision the victims never got to vote on: the decision to concentrate everything in one place and call it seamless.
We have seen this pattern before, in the same day's news. Reuters' Breakingviews called Nvidia "the central bank of AI," and Nvidia's own filing shows why the name fits: 279 billion dollars in supply commitments, doubled from 119 billion in a single quarter, spent building the capacity to keep renting intelligence to the world by the token. A central bank of compute on one side, a central vault of everyone's keys on the other. Intelligence you rent by the slice, and an agent that reaches your whole life from somebody else's server. The center holds everything. The center is also the single point where everything can be taken.
There is another shape an agent can take, and it is not exotic. The agent stays home.
An agent that lives on your own machine does not need your web accounts, because it does its work where your work already is — in your files, in your tools, on your ground. It can watch continuously, because watching from inside your own house costs a low hum of the machine you already own, not a meter somebody else reads. When it needs something from the wider world, it reaches out through a guarded server of its own, carrying the question — never your data, never your files, never your identity. And everything it does happens behind your gates, under your permission, with a record you can read.
The safety in that shape is not a promise that we guard better than they do. It is simpler than that, and stronger. There is no vault. There is no building somewhere holding the keys to millions of lives, waiting for one bad day. If one person's machine is compromised, that is one household's disaster — serious, personal, and survivable — and it ends at that household's door. The damage cannot scale, because nothing was ever gathered in one place to be taken at scale. We did not build a stronger vault around everyone's lives. We refused to build the vault.
People used to own their tools outright, and nobody thought that was radical. A hammer does not phone home. A saw does not check your subscription before it cuts. We believe an agent — the most personal tool a person will ever own — should follow the same rule. Knowledge should be free. The help should live in your house. And the agent should answer to the person whose name is on the door, and to no one else.