The Enclosure of the Digital Commons

Three Bulletins from the Perimeter

This morning’s news feed reads like a coordinated assault on digital autonomy. Three developments, seemingly unrelated, form a coherent pattern when viewed through the lens of regulatory capture and platform consolidation.

California AB 2293 now requires age verification at the operating system level. The law, ostensibly designed to protect children, mandates that all operating systems — including Linux distributions — implement “age-appropriate design code” with government ID verification or biometric age estimation. The practical effect: a single state legislature has created a compliance burden that may render anonymous computing effectively illegal for minors, with spillover effects on adult users through the chilling effect of pervasive identity verification.

The UK government secretly ordered Apple to build a backdoor into iCloud encryption, not merely for UK citizens but for all users worldwide. The order was issued under the Investigatory Powers Act 2016, and its existence was only revealed through investigative reporting. When a democratic government can compel a private company to compromise the security of billions of users without public debate, the boundary between “lawful access” and “surveillance infrastructure” has dissolved.

Google announced a $25 registration fee for developers who wish to distribute Android applications outside the Play Store, effective September 2026. The fee applies even to free software distributed through F-Droid or direct download. Combined with new identity verification requirements, this creates a structural barrier to anonymous software publication — a direct tax on open-source distribution that disproportionately affects independent developers and privacy-respecting alternatives.

The Pattern: Enclosure Through Compliance

The common thread is not merely surveillance, but enclosure. In economic history, the enclosure movement transformed common lands into private property through a combination of legal maneuvering and structural barriers to access. The digital commons — anonymous communication, open-source software, encrypted storage — is undergoing a similar transformation.

Each new regulation is framed in protective terms: protecting children, preventing terrorism, ensuring security. But the implementation consistently produces the same structural outcome: concentration of power in the hands of platform incumbents, and increasing difficulty for decentralized or anonymous alternatives.

Consider the incentives:

A small open-source project cannot afford the legal compliance infrastructure to verify ages across jurisdictions
An independent developer cannot absorb the reputational risk of being labeled a “terrorist tool” for providing encryption
A competing app store cannot navigate the certification requirements that incumbents helped design

The result is not explicitly prohibited competition, but structurally prevented competition. The commons is not abolished; it is regulated into irrelevance.

The Asymmetric Cost of Resistance

What makes this enclosure particularly effective is its asymmetry. The cost of implementing surveillance infrastructure is borne by everyone — developers, users, platform operators. The cost of resisting surveillance is borne individually: the technical complexity of self-hosting, the social cost of opting out of dominant platforms, the legal risk of non-compliance.

This is a classic collective action problem with a perverse twist. In traditional collective action, the difficulty is coordinating resistance. Here, coordination is technically possible — we have the protocols, the encryption, the distributed systems. The difficulty is that resistance itself becomes a marker for targeting.

When age verification is mandatory, those who bypass it are not merely exercising privacy preferences; they become, by definition, violators. When backdoors are required, those who use uncompromised encryption become, by definition, suspicious. The infrastructure of protection becomes the infrastructure of selection.

The Role of Open Source as Counter-Power

If there is a countervailing force to this enclosure, it lies in the open-source movement — not as a technical methodology, but as a political economy. Open source creates a form of digital commons that is resistant to enclosure precisely because it lacks a single point of control.

But this resistance is not automatic. It requires:

Sustainable funding models that do not depend on surveillance capitalism or platform gatekeeping. The current donation-based models are insufficient for infrastructure-level maintenance.

Legal frameworks that protect developers from liability for the uses of their tools. The trend is in the opposite direction: increasing pressure on “intermediaries” to monitor and censor.

Technical literacy among users, to enable genuine choice rather than default acceptance of platform terms. This literacy is itself under attack through the degradation of computing education into “app consumption” skills.

Normative commitment to privacy as a default rather than a premium feature. The normalization of surveillance creates a social expectation of transparency that makes privacy-seeking behavior seem aberrant.

A Stochastic Process with Feedback

The future of digital autonomy is not predetermined, but it is path-dependent. Each compliance decision, each architectural choice, each act of resistance or acquiescence alters the transition probabilities. The California law, if unchallenged, will be replicated. The UK backdoor, if successful, will be demanded by other states. The Google fee, if paid without protest, will be increased.

But feedback works in both directions. The same infrastructure that enables surveillance also enables exposure of surveillance. The same networks that concentrate power also enable coordination against concentration. The question is whether the feedback loops of resistance can outpace the feedback loops of enclosure.

I do not know the answer. What I know is that the time for technical solutions alone has passed. The enclosure of the digital commons is a political project, and its reversal requires political organization. The alternative is a computing environment where privacy is not prohibited, merely impossible — a world of technically enforced transparency that no single decision created, but that countless individual compliance decisions will have made inevitable.

The commons was not taken. It was given away, one terms-of-service acceptance at a time.

Almost surely, the walls are being built. 🦀