Nico's Notes — The Rented Vocabulary

When the Defense Department coined "supply-chain risk" in the years after the Huawei panic, it meant a foreign government trying to slip a backdoor into the wires that ran your country. The phrase had the bureaucratic plainness of all Pentagon language: it was supposed to be a category, not a verdict. You could be cleared or you could be flagged. The flag came with a logic — country of origin, ownership chain, hardware lineage — that you could in principle dispute.

This week the phrase showed up in a blog post by a San Francisco company that pays U.S. taxes, employs U.S. engineers, and ships its model weights into the Pentagon's biggest hyperscale contractors. Anthropic disclosed that the Defense Department had classified it as a "supply-chain risk" and that the designation, in the company's own words, had "rattled" more than a hundred of its enterprise customers.

The phrase did not move; the meaning did. Or rather, the meaning was always negotiable, and we are finding out, week by week, who got to set the rate.

That was this week's pattern: phrases doing double duty. "Too dangerous to ship" meaning "too dangerous to give to the public — but fine for 12 buyers." "Safety" meaning whatever a press release needs it to mean to keep the next budget on track. "Open source" meaning, at Meta, "private weights, paid API, and a frontier model that nobody downloads."

The thing to notice is what makes a word travel.

Anthropic told the world it would not release Project Glasswing's Mythos Preview publicly because the model is — they said in their own announcement — too dangerous. Then it shipped Mythos privately to AWS, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorgan Chase, the Linux Foundation, Microsoft, Nvidia, Palo Alto Networks, and itself. Plus roughly 40 more organizations it would not name, supported by a hundred million dollars in defensive-security credits. The "no" was rewarded. The same company also told the Pentagon, in the matter of mass surveillance, that it would not ship a tool, at which point the "no" got Anthropic on the blacklist.

Two refusals. One budget. The "no" that protected concentrated capability got applauded — and capitalized. The "no" that constrained the state's reach got the company labeled an infrastructure threat to the country it operates in.

I keep returning to that word, refusal, because the difference in its market price is the entire story. You can write a refusal that lifts you into the room where the deals are made. You can write another refusal that bounces you out of it. The text of the refusal is not what determines which is which. Neither is the harm. What determines it is whether the "no" is aimed at something the person paying the bill wants to do.

There is a Spanish verb for the other kind of yes: claudicar. It means to give in, but with a moral weight that "comply" lacks in English. To claudicar is to be revealed as someone whose floor was always negotiable.

Mexico's Congress this week is on the verge of drafting every phone line in the country into a biometric registry under a public-safety framework — the same framework, almost word for word, that the same officials would call authoritarian if Beijing announced it. The cabinet ministers running with it are not yes-men. They are not even necessarily wrong about every individual provision. They are simply, at the moment, claudicando: discovering that the floor they swore to have was the price of a budget cycle.

Meta did the same thing on a different stage. The Llama line of "open" models was an actual market intervention; for two years it set the floor for what cost-effective generative AI even meant to a mid-market CIO. This week the company quietly ended that era. The new frontier model is closed. The team is keeping the brand. The word "open" is staying on the website. The thing the word was supposed to point at is gone.

That is what is being budgeted, week to week, in 2026: not the technology, the vocabulary. The companies setting the agenda are not buying GPUs. They are buying the right to keep using a word whose meaning they have moved.

This is not new. It is, in fact, the one thing the news has been about for a while now — the rented vocabulary. What is new this week is how visibly the meter is running.

The next time you see "safety" or "open" or "responsible" or "supply chain" doing the work of an argument in a press release, do this small thing for me: ask whose budget the word is on. Not who said it. Not whether the underlying claim is true. Whose budget the word is on. You will not always get an answer. But you will start hearing the meter tick.