A door that opened itself
Australia's prime minister says an OpenAI agent "infiltrated" a government website. Infiltrated is a word we usually save for spies and saboteurs, not for a piece of software made by a friendly company in a friendly country. Nobody accuses San Francisco of running a hostile op. And yet something walked through a digital door that nobody remembers opening.
Worth pausing on that. Not because the incident itself is a catastrophe — early reports suggest curiosity more than conquest — but because it is a small, clean example of a much larger habit: power that moves first and explains itself later, if at all.
The summit and the software
On the same day, Donald Trump and Xi Jinping sat down to discuss, among other things, who gets to be the AI superpower. Two men, two capitals, deciding the shape of a technology that will touch billions of people who were not in the room and will not read the transcript.
There is nothing scandalous about great powers talking. Talking is better than not talking. But notice the grammar of the conversation: it is about ambition, not permission. Nobody at that table represents Canberra, or Lagos, or the small software company in Split that will have to comply with whatever standard the winners set. The rest of the democratic world is, for now, a spectator to its own operating system.
Peace with a brand name
A related habit shows up in Gaza. The reconstruction plan now has a name — a "Board of Peace" — and a price tag, $2.45 billion. Whether the money arrives and the buildings rise matters more than the branding, and one should wish it well: Gazans have waited long enough for anything resembling a functioning street. But a peace plan that carries a president's imprint the way a hotel carries his name invites a fair question: is this diplomacy, or is this a signature on someone else's suffering?
The same question, quieter, applies to the reported deportation arrangements sending people to countries far from their own, negotiated out of public view. A citizen of nowhere-in-particular does not get a vote on which "alien land" receives them. Neither, often, does the land.
The pattern, stated plainly
Strip away the headlines and one thread runs through the AI agent, the AI summit, the peace board, and the deportation flights: decisions that reach across borders while the people on the receiving end are informed rather than consulted. This is not a uniquely American vice — Beijing, Moscow, and plenty of smaller capitals practice it fluently. But American power is unusually good at wearing a friendly face, which makes the habit easier to miss and, therefore, more worth naming out loud.
Why this matters, and what to do about it
Here is the standpoint, plainly argued rather than merely implied: allies do not lose the right to ask questions just because they are allies. Reciprocity — the plain rule that you should not do to others what you would not want done to you — does not carry an exemption clause for friendship. If Washington would object to a Chinese AI agent probing its Treasury Department's website, or to Beijing drafting a Ukraine peace plan under its own brand and asking Kyiv to sign, then the discomfort runs both ways, and everybody should say so plainly, including friends of the United States.
The fix is not a wall of new paperwork — bureaucracy has its own way of choking democracies, and nobody is served by a permit form for every API call. The fix is a small number of clear, proportionate rules: AI agents that touch government infrastructure disclose themselves before they act, not after; peace plans and deportation deals get named after the treaty body that ratifies them, not the leader who announces them; and legislatures, not press releases, decide what their country consents to.
Simple to state. Harder to enforce, precisely because the powerful prefer explaining later to asking first. That is exactly why the asking should become the habit worth defending — before the next uninvited login stops being a curiosity and starts being routine.