Ownership is a stack, not a checkbox
A user may own a model file yet rent the GPU, depend on a hosted identity, and lose access when a gateway changes policy. The relevant object is the whole dependency graph.
Writing / Subjective inquiry
Ideas, stated as positions.
These notes contain my interpretations rather than institutional conclusions. Each argument should expose its assumptions, mechanism and conditions for being wrong.
Decentralization does not imply privacy
Distributing inference across unknown providers removes one monopoly while creating many new observers. Confidential execution needs a separate mechanism: local compute, cryptography or attested hardware.
The right to exit is an engineering property
Portability depends on export formats, compatible runtimes, reproducible environments and a viable substitute provider—not a promise in a policy document.