R256 :// blog

$ essay

State as Operating System: Citizens as Tenants

4 min read source original

Modern states resemble long-running operating systems more closely than machines or markets. They maintain order, allocate resources, supply a baseline environment for other activity, and accumulate processes that resist removal.

The comparison is not decorative. It predicts behaviour. An operating system that adds services more readily than it removes them will drift toward a higher idle cost, a larger attack surface, and a longer list of dependencies that no single person fully understands. A state with the same composition method drifts in the same direction. The question that matters is not how large the baseline is. It is who holds the configuration, and whether the configuration can be read.

The Long-Running Windows Install

The dominant pattern is a long-running Windows install. Windows ships with a large default set, runs unrequested background processes, phones home, enforces its update schedule, and makes removal costly. Idle resource use stays high. Most high-income administrative states match this: agencies, reporting regimes, and compliance systems accumulate. Each addition is justified as coordination or protection. Baseline cost rises even when no new service is delivered. Subtraction is rare.

Each trait maps cleanly. The default set is the inherited institutional furniture that arrives with the system and is rarely audited. The background processes are the reporting regimes that run whether or not anyone requested the output. Phoning home is the data collection that accompanies participation. The update schedule is the compliance calendar. The cost of removal is the repeal problem: every program has a constituency, and subtraction requires a fight that addition never does.

Citizens are tenants. The configuration is not theirs to rebuild.

A tenant can use the space. A tenant can rearrange the furniture, within limits. A tenant cannot rewire the building, remove a wall, or decide that a room should not exist. That is the correct description of the relationship, and it is why arguments about which party manages the building miss the point. The tenant is not choosing between landlords. The tenant is choosing whether to remain a tenant.

Coherence Is Not Sovereignty

Polished closed systems (macOS/iOS) deliver coherent experiences with less obvious bloat. In exchange the boot chain is signed, core services are not fully inspectable, and the vendor retains unilateral power. A technocratic state that delivers reliable services and limits contestation can feel similarly light while denying deep audit and exit. Coherence is not sovereignty.

The polish is real, and it is the reason the trade is tempting. A system that works smoothly asks very little of the person using it. It also asks them to accept that the parts they cannot see are none of their concern. That acceptance is the price. The experience is coherent; the authority is not shared.

Mobile platforms add persistent identity and sensor access plus a distribution chokepoint. This maps to states that have instrumented payments, movement, and identity so thoroughly that operating outside the official stack is impractical. The instrument is not a single rule. It is the accumulated set of integrations that make the official path the only practical path. Exit exists in theory and disappears in practice.

Deliberate Composition

Deliberate composition stands against these. Arch begins minimal. NixOS describes the machine rather than modifying it: a configuration declares the desired state; a rebuild produces it; prior generations remain for rollback. Undeclared services do not run. Omarchy supplies curated defaults while leaving the system inspectable and reconfigurable.

The method is the message. A declarative configuration is readable before it is applied. It states what should exist, not what someone once did. A rebuild is reproducible, so the result can be checked against the declaration. Generations preserve the previous state, so a bad change can be reversed without reconstructing the system from memory. Undeclared services do not run, which means the absence of a line is meaningful. Every one of those properties is a limit on quiet accretion.

A bespoke state would apply the same method. Agencies, rules, and data systems would exist only because deliberately added to a readable configuration and removable from it. New functions would require explicit addition and visible funding. The institutional set could be rebuilt from a known smaller baseline. The argument is not that the baseline must be small. It is that the baseline must be legible, and that removal must be an ordinary operation rather than an exceptional campaign.

Government-as-a-Platform correctly values shared reusable components but still assumes a permanent central platform that can grow. Modular blocks improve on silos but do not solve baseline accretion unless removal is normal. A platform without a deletion path is just a more organized accumulation.

Bloat Follows Bloat

Administrative bloat follows software bloat. Systems that add more readily than they remove expand. Only a permanent shift in the composition method produces lasting reduction. The method by which institutions are added and removed determines whether baseline cost remains visible and controllable.

That is the part the reform cycles miss. A government that adds a dashboard has improved visibility. It has not changed the method. The next program still arrives through the same door, justified the same way, and the dashboard simply records the growth. Visibility is a diagnostic, not a control. The control is the rule that says nothing runs unless it was declared, and anything declared can be removed by the same process that added it.

The operating-system frame is useful because it makes the choice concrete. A machine can be inherited, polished, or composed. A state can be inherited, polished, or composed. Only one of those leaves the person at the keyboard holding the configuration.