The internet I grew up on didn't end in one go. It went a clause at a time, in Terms of Service updates nobody read (I didn't either).

Over the 2010s the voice assistant kept the recordings (and people at the company listened to some of them),[1] the photo app kept your face,[2] and the history of what you searched became somebody else's product. Owning things turned into a monthly rent, and in 2022 BMW put a subscription on the heated seats already fitted in the car you'd paid for,[3] because that's what the business model asks for.

THIS DYSTOPIA IS BORING

Cleaner than we feared, more insidious than we expected.

We rented our own lives back one free tier at a time, and the landlord kept the keys.

> 1. WHERE THIS STARTED

In 1993 the Cypherpunks worked out that centralised systems end up serving the centre rather than the edges. Their answer was code rather than politics, working software that made privacy the default instead of a setting you had to ask for.

Eric Hughes put the whole plan in three words, "Cypherpunks write code", and it hasn't aged.[4]

> 2. HOW THE ROT WORKS

The code wasn't enough to beat the money. Cory Doctorow named what happened next enshittification.[5]

His version goes in three steps. A platform is good to its users until they're locked in, then squeezes them to please its business customers, then squeezes those too, until it's a husk that pays only the shareholders (and then, in his telling, it dies).

The platforms can't risk the experiments that built them any more, because an experiment might cost them a quarter.

> 3. WHAT CHANGED

While the platforms were building bureaucracies, the pioneers were writing open-source, privacy-first code.

We inherited decades of their work, and the cost of starting moved from money to curiosity. The NAS under my desk (a UGREEN DXP8800 Pro) cost less than a year of cloud storage for the same capacity,[6] runs local AI inference, and answers to nobody.

Self-hosting is still work and ownership still carries overhead, but the nature of the work has changed. AI now handles the grunt work, reading documentation, scaffolding the unfamiliar, explaining errors, and that leaves you to be the architect.

Build in the open, write down what you learn, and leave something the next person can start from.

> 4. HOW WE BUILD

Promises get broken in board meetings, so I'd rather build systems where breaking one changes nothing, where the incentive to enshittify has nowhere to land.

> 5. WHO THIS IS FOR

Convenience wins for most people, and that's fine, nobody owes their evenings to infrastructure they didn't ask to run.

But a system with no credible alternative is coercive however convenient it is, so the work is an exit that runs, that people use, and that companies have to take seriously.

When a genuine option to leave exists, power behaves differently.

> 6. HOW YOU FIND US

The Cypherpunks said write the code and Doctorow named the rot. The part left over is finding the people who did write the code.

The rent-seekers have marketing departments and ad budgets, and they'll find you whether you like it or not. Open-source, local-first projects have none of that, so they build something that works and disappear into the noise, because nobody buys ads for software that doesn't need you to keep paying.

That's the discoverability problem, and it's the one I think a small project can do something about.

The plan is a public registry that does more than list things.

PUBLIC NOTICE No. 02PLANNED, NOT RUNNING

Today the Directory is a list I check by hand. The crawler, the grants, the audits and everything else in the six boxes below are what it's meant to grow into, and none of them run yet.

FUNDING

Verified projects put forward each quarter to aligned grant programmes, DAOs and foundations, with us writing the applications and you writing the code.

DISTRIBUTION

Boxes we sell (planned for specter) coming with directory-listed software already installed, with no app store in between.

TALENT

Developers who want to work on software people own finding you here, without a recruiter in the middle.

TRUST

Listed projects sharing the cost of security audits, so a small project can afford a real one.

VOICE

When legislators ask who speaks for local-first, a directory that can say how many projects and how many users stand behind it.

ACCOUNTABILITY

Break the pledge by adding a kill switch, locking exports or phoning home, and the listing comes down in public, with the evidence.

The method. A project hosts a beacon file at /.well-known/freehold.json. Once the crawler exists it'll validate the file and list the project, and until then I read the beacons and check the projects by hand.

/.well-known/freehold.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
{
  "$schema": "https://www.localghost.ai/schemas/freehold-v1.json",
  "version": "1.0",
  "updated": "2025-12-18T00:00:00Z",
  "project": {
    "name": "Your Project Name",
    "description": "A short description of what it does.",
    "url": "https://your-project.com",
    "logo": "https://your-project.com/logo.svg",
    "repository": "https://github.com/your-username/your-project",
    "license": "MIT",
    "created": "2025-12-18"
  },
  "maintainer": {
    "name": "Your Name or Org",
    "contact": "hello@your-project.com",
    "pgp": "https://your-project.com/.well-known/pgp-key.asc"
  },
  "freehold": {
    "local_first": true,
    "offline_capable": true,
    "no_remote_kill_switch": true,
    "no_mandatory_auth_server": true,
    "data_export": {
      "format": "json",
      "complete": true,
      "documented": "https://your-project.com/docs/export"
    }
  }
}

> THE PLEDGE

Hosting this beacon means your project commits to the following.

  • It runs offline. No server dependency for core functionality.
  • Data export is complete, documented, and human-readable.
  • No kill switch. No remote server can disable the software.
  • No mandatory auth. Users aren't locked out if your servers go dark.
  • Open source. The code is auditable under an OSI-approved license.

⚠ This is a public commitment. Projects that break the pledge are delisted with a published explanation. The directory remembers.

[ BROWSE THE DIRECTORY → ]
I wrote the first version of this over Christmas 2025, before any of the code existed. Ten months later the box runs every day on the NAS under my desk and the Directory is still checked by hand, so about half of this page is true now and the other half is the work. [ Write the code. ]

> REFERENCES

[1]Aimee Picchi, CBS MoneyWatch, 11 April 2019, "Amazon workers are listening to what you tell Alexa", reporting Bloomberg's finding that Amazon employs thousands of staff and contractors who listen to, transcribe and annotate Echo recordings to train Alexa, and that customers can delete their recordings (so by default they are kept). Source for the voice assistant line. cbsnews.com
[2]Jerome Pesenti, Meta, 2 November 2021, "An Update On Our Use of Face Recognition", announcing that Facebook would switch off its Face Recognition system and delete the templates it held for more than a billion people. Source for the photo app line, and for how long the faces were kept before anyone switched it off. about.fb.com
[3]Fox LA, 13 July 2022, "BMW selling $18 monthly heated seat subscriptions in some countries", on the subscription in the UK, Germany, South Korea, New Zealand and South Africa, and Leon Poultney, TechRadar, 6 February 2026, on BMW admitting the heated seats furore was a mistake and on the anger being about paying for "hardware that is already installed in a vehicle". Source for the heated seats. foxla.com and techradar.com
[4]Eric Hughes, 9 March 1993, "A Cypherpunk's Manifesto", the text the site's cypherpunk page reproduces, with the line "Cypherpunks write code." Source for the quote and for the 1993 date. activism.net/cypherpunk/manifesto.html
[5]Cory Doctorow, Pluralistic, 21 January 2023, "Tiktok's enshittification", where the word and the three steps come from ("first, they are good to their users; then they abuse their users to make things better for their business customers; finally, they abuse those business customers to claw back all the value for themselves. Then, they die."). Source for the summary in section 2. pluralistic.net/2023/01/21/potemkin-ai
[6]The NAS prices are from The Expensive Part Was Never the AI (June 2026, new), about £1,120 for the bare DXP8800 Pro, £150 for the RAM and £2,100 for the six 24TB drives, so about £3,370, for 72TB usable in RAID 10. Backblaze's B2, one of the cheaper cloud stores, lists $6.95 per TB a month, which for 72TB is about $6,000 a year, more than £4,000 at any exchange rate of the last few years. Source for the comparison. backblaze.com/cloud-storage/pricing
[ ← RETURN TO THE ESCAPE PATH ]