• A Privacy Case That Doubles as a Jury Trial Case

    ByHarlan Quill

    Washington has a way of making every dispute sound like it belongs in a bound volume with footnotes that can breathe. Outside, phones chirp, maps reroute, and ad trackers do their tireless work. Inside, the Supreme Court wrestled with a question that sounds procedural until you remember the subject matter: your location, treated like a revenue stream.

    Supreme Court weighs Verizon and AT&T challenge to FCC location-data penalties

    On April 21, the Court heard arguments in consolidated cases involving the Federal Communications Commission and two telecom giants, AT&T and Verizon, over FCC penalties tied to the sale or sharing of customers’ location data without adequate safeguards. The fines total more than $100 million.

    The carriers argue the FCC process violates the Constitution by letting an agency impose major monetary penalties without a civil jury trial in federal court first. The justices did not seem eager to turn this into a constitutional escape tunnel for regulated companies. Chief Justice John Roberts, according to reports from the courtroom, prodded the argument as if it might be less a rights emergency and more a reputational bruise.

    The government’s central point was simple: under the Communications Act, companies can refuse to pay and force the government to go to court to collect, where a jury can enter the picture. The government also suggested the FCC could clarify that its forfeiture orders do not require payment until judicial enforcement.

    What happened, in plain English

    The FCC investigated practices in which carriers allowed access to location information through programs and intermediaries, then imposed civil forfeitures. AT&T and Verizon say that when an agency finds facts, applies law, and announces a large penalty, it resembles a traditional common-law suit for money. In their view, the Seventh Amendment and Article III require a jury in a real court before a headline-sized fine lands.

    The government replies that if a carrier does not pay, the enforcement action in federal court proceeds de novo, with no polite deference and no agency home-court advantage. The companies answer that the “choice” is coercive in practice because waiting for a Department of Justice collection suit can mean years of regulatory limbo and reputational fallout.

    Four quick tests for what is really at stake

    • The Paine test: kneecap FCC enforcement and you risk weaker privacy protection. Bless frictionless agency penalties and you risk normalizing punishment first, litigation later.
    • The Orwell check: “nonbinding” can still bind when a forfeiture order lands like a conviction in public and in the marketplace.
    • The liberty ledger: consumers gain freedom when location data is treated as sensitive by default, and lose it when movements become a commodity. Companies gain freedom when enforcement is slow, and lose it when an agency can effectively announce a massive penalty and force a pay-or-wait dilemma.
    • The tradeoff: privacy enforcement and due process are not luxury add-ons. They are guardrails. You need both, or you get performative protection with constitutional seams showing.

    Accountability is supposed to be boring: courts insist on constitutional guardrails, legislators write modern privacy statutes, watchdogs audit how sensitive data moves through intermediaries, and citizens keep showing up to the town-hall folding chair where “technicalities” decide liberties. If a forfeiture order can punish in practice before a jury ever hears the case, what other “nonbinding” powers are we pretending do not bind?

  • NIH Turns Small Business Science Grants Into a Security Checkpoint, With Too Little Due Process

    ByHarlan Quill

    I read NIH’s latest notice the way you read a court docket in a quiet library: not for entertainment, but because it tells you who holds the keys. SBIR and STTR still promise non-dilutive funding for real science. Now they also come with a foreign-risk screening process that can end in a denial you cannot rebut before it is final.

    What NIH changed, and when

    On April 20, NIH issued a notice outlining changes to SBIR and STTR foreign disclosure and risk management. NIH ties the update to the Small Business Innovation and Economic Security Act, which NIH says President Trump signed on April 13, 2026. NIH says the law reauthorizes SBIR and STTR through September 30, 2031, and the notice spells out how the foreign-risk machinery will work for competing applications and proposals, and for active awards.

    The new screen: broad, and aimed beyond the CEO

    NIH emphasizes an HHS “due diligence program” that assesses security risks posed by applicants. As described, it can examine cybersecurity practices, patent analysis, employee analysis, foreign ownership and financial ties, foreign affiliations of key people, investment relationships involving a foreign country of concern, technology licensing or joint ventures with such parties, and other business relationships involving covered individuals and owners.

    The notice also tightens who counts as a “covered individual”: anyone contributing in a substantive, meaningful way to the scientific development or execution of the project, or identified as senior key personnel. Translation: this can land on a principal investigator or scientist, not just executives.

    The headline in the footnotes: denial without a chance to respond

    NIH says HHS cannot make an SBIR or STTR award if it determines an applicant has certain relationships, including:

    • An owner or covered individual involved with a malign foreign talent recruitment program.
    • A business entity, parent company, or subsidiary located in the People’s Republic of China or another foreign country of concern.
    • An owner or covered individual with a foreign affiliation with a research institution located in the PRC or another foreign country of concern.

    NIH also describes denial triggers tied to entities or individuals on several government lists, and a category where the security risk has a primary source that is classified. NIH says HHS will not give applicants an opportunity to address identified security risks prior to award. You may be told which denial category applied, but not given a pre-award chance to argue your case.

    After the award: monitoring, fast updates, and repayment risk

    Recipients must monitor relationships with foreign countries of concern and submit updated disclosure forms for certain changes, including annual updates tied to research performance reporting. For certain changes between reports, NIH says updates are required within 30 days. NIH says if NIH, CDC, and FDA determine there was a material misstatement posing a national security risk, or a change in ownership or structure that poses such a risk, the small business concern can be required to repay all amounts received.

    The tradeoff (and the Paine test)

    Yes, public dollars and sensitive tech justify scrutiny. But the liberty ledger matters: a system that can deny funding without a pre-award response, including on classified-source risk, concentrates power behind a curtain. Guardrails NIH could pair with this approach are already obvious in plain text: an appeal lane with a real timeline, a process to cure fixable mistakes before denial, aggregate public reporting on denials and reversals, regular audits by inspectors general and Congress, and an independent reviewer when classified sources are involved.

    We can defend the country without building a grants system that behaves like a secret proceeding. If this black box is acceptable here, where else will we install it next?

  • The Government Tried to Censor by Proxy. A Federal Judge Said: Not So Fast.

    ByHarlan Quill

    I have seen this move in too many committee rooms with bad coffee and good excuses: an official wants speech gone, but does not want the subpoenas, hearings, and judicial review that come with doing it the lawful way. So the state takes the side door through a private gatekeeper. A call. A public scolding. A hint about prosecution. Then a platform hits delete, and everyone acts like it was just “community standards” having a wholesome moment.

    What the judge did, and why it matters

    On April 17, U.S. District Judge Jorge L. Alonso (Northern District of Illinois) granted a motion for a preliminary injunction in a lawsuit brought by Kassandra Rosado and Kreisau Group LLC. They operate an ICE-related Facebook group (“ICE Sightings – Chicagoland”) and a phone app called “Eyes Up.” The plaintiffs argue federal officials violated the First Amendment by coercing Facebook into disabling the group and coercing Apple into removing the app from the App Store.

    The judge agreed the plaintiffs are likely to succeed on the merits. A separate injunction order will follow. The parties were directed to submit a draft order and a joint status report by April 22.

    The timeline, per the court order

    • Rosado created the Facebook group in January 2025.
    • Kreisau Group created “Eyes Up” in August 2025.
    • In early October 2025, Apple removed multiple ICE-related apps, including “Eyes Up” and “ICEBlock.”
    • Around the same time, public statements by then-Attorney General Pam Bondi and then-DHS Secretary Kristi Noem took credit, directly or indirectly, for removals.
    • Facebook disabled Rosado’s group around October 14, 2025.

    The Orwell check: when “outreach” sounds like leverage

    My Orwell check is simple: when government power does something controversial, it usually shows up wearing a friendly euphemism. Here it is “outreach,” “engaging tech companies,” and “asking platforms to be proactive.” The court looked at context and saw something rougher: demands instead of requests, with insinuations of legal consequences if companies did not cooperate.

    The judge leaned on guardrails old and new: the Supreme Court’s NRA v. Vullo decision from 2024, Bantam Books (1963), and the Seventh Circuit’s Backpage.com v. Dart. Translation: pressure campaigns against intermediaries can be a First Amendment problem, even when the official does not regulate the intermediary directly.

    The liberty ledger and the tradeoff

    The plaintiffs’ speech stayed down. The court noted the group remained disabled and the app remained unavailable on the App Store, which matters for standing and for the basic reality that speech delayed is speech denied.

    Doxxing and threats are real problems. But the Constitution does not require helplessness. It requires due process: investigations with probable cause, targeted subpoenas, warrants, prosecutions of actual crimes. The tradeoff here is familiar: public safety now, rights later, and the “later” part has a habit of becoming permanent.

    The Paine test

    Does this expand liberty, or concentrate power? Government-by-nudge and government-by-threat concentrate power, especially when they bypass courts and paper trails. Judge Alonso’s ruling does not end the case, but it does light a warning flare: if the government wants speech restricted, it needs to do it in daylight, under law, with review and accountability.

    So what scares you more: the app, or the precedent?

  • HUD’s Mixed-Status Housing Rule: Turning Rent Help Into a Paperwork Tripwire

    ByHarlan Quill

    Government paperwork is supposed to be boring. Beige forms. Blue ink. A little civic dust. But sometimes you open a proposed rule and the room changes temperature, like a courthouse hallway at 8:59 a.m., when everyone insists this is “just procedure” while someone’s life is about to get resized.

    That is where we are with HUD’s proposed “mixed-status” housing rule, and with California officials filing an unusually loud no.

    California’s pushback, on the record

    • April 21: California Attorney General Rob Bonta said he and a coalition of 22 state attorneys general submitted a comment letter opposing HUD’s proposal.
    • April 21: California’s Civil Rights Department said it submitted its own comment letter, warning the rule would upend the decades-old proration framework and force a “ruthless” choice between losing housing and separating a household.

    The department estimated 7,190 mixed-eligibility households in California could face termination from HUD programs, putting about 28,670 Californians at risk of eviction or family separation.

    What HUD is proposing, in plain English

    HUD’s proposal, published as a proposed rule on February 20, 2026, targets families that include both eligible and ineligible members for federal housing assistance. Today’s practical mechanism is often proration: eligible members can remain housed with a reduced subsidy that accounts for ineligible individuals.

    Under the proposal, proration is narrowed into something that can exist mainly while status verification is pending, rather than as a stable long-term arrangement. The rule also tightens verification demands, making housing stability hinge more directly on documentation and timelines.

    HUD frames this as “closing loopholes” so benefits go only to citizens and eligible individuals. HUD says an audit found nearly 200,000 tenants with incomplete or unknown eligibility verification, and it estimates about 24,000 “illegal aliens, ineligibles, and fraudsters” in 20,000 mixed-status households benefit from HUD assistance. HUD also argues scarcity is real: its resources reach only about a quarter of eligible households in need.

    The Orwell check

    “Closing loopholes” sounds tidy, like an application fee. But it can also mean widening the eviction chute. The word “loophole” conjures a slick scammer; the lived impact lands on households with citizen kids, elderly relatives, or anyone who cannot clear a verification hurdle fast enough without blowing up the home.

    The liberty ledger and the Paine test

    Losers: families currently housed under proration, plus housing authorities and property managers turned into the front desk for immigration-adjacent enforcement. More churn means more mistakes, more disputes, and more risk for the least powerful tenant.

    Gainers: HUD argues assistance would shift from mixed-status households to fully eligible households. Not more housing, just different recipients inside the same shortage.

    Under the Paine test, this concentrates power: it turns a housing program into a compliance lever that can increase homelessness.

    The tradeoff and the guardrails

    Yes, scarcity raises hard fairness questions. But the tradeoff cannot be “we are short on help, so we will solve it with eviction threats.” Any change needs long timelines, robust notice, meaningful hearings, and independent oversight of verification accuracy. And if officials believe the proposal is unlawful or discriminatory, comments are not enough: use courts, oversight, FOIA, fair housing enforcement, and legislative pressure.

    We can debate immigration policy in daylight. We should not smuggle it into housing programs and let eviction do the talking. Are we trying to fix housing, or just looking for a new lever to pull on families with the least leverage of all?

  • Vercel, Context.ai, and the OAuth Backdoor: The Supply Chain Grift That Burns Everyone

    ByBrick Tungsten

    The air in the server room smells like hot dust and cold certainty. One minute you are shipping code, the next minute Vercel is telling the world it found unauthorized access inside its own walls.

    Vercel says the trail starts when Context.ai is compromised via OAuth

    Vercel, the cloud platform behind the Next.js ecosystem, says it identified unauthorized access to certain internal systems and has been actively investigating with incident response help. It also says it notified law enforcement and will update the bulletin as the investigation progresses.

    Here is the part that makes the warning lights pop: Vercel initially found a limited subset of customers whose non-sensitive environment variables stored on Vercel were compromised. Those are variables that decrypt to plaintext, meaning an attacker had a path to grab what should have stayed protected behind proper controls.

    Vercel also says the incident did not begin with Vercel code or some magical software supply chain backdoor. Instead, it traces the origin to a compromise of Context.ai, a third-party AI tool used by a Vercel employee. Vercel says the attacker used that access to take over the employee’s Vercel Google Workspace account. From there, the attacker gained access to some Vercel environments and to environment variables that were not marked as sensitive.

    Vercel further draws the line: it says it currently has no evidence that values marked as sensitive were accessed. It also states that it and collaborators confirmed no npm packages published by Vercel were compromised, and it believes the supply chain for those published packages remains safe.

    Everybody loves AI tools until OAuth becomes the side gate

    This is the modern version of leaving the cellar door open because you were busy lighting the grill. OAuth is supposed to be convenience with guardrails. But when you hand a third-party tool more access than it needs, you are not buying innovation. You are buying risk.

    TechCrunch reported that hackers claimed to have stolen sensitive customer credentials and were selling the data online, pointing back to the Context.ai connection. TechCrunch also notes details are still emerging and it is unclear who is behind the breach at Vercel or Context.ai. It mentions that the threat actor selling the data claimed ties to ShinyHunters, and that ShinyHunters reportedly told Bleeping Computer it was not involved.

    Who benefits? The grifter gets paid, the customer gets the bill

    In these stories, the incentive is money and leverage. Tom’s Hardware says the threat actor operating under the ShinyHunters name has claimed responsibility and reportedly sought $2 million for the stolen data. That is not a harmless prank. That is a payday.

    And when credentials and keys are the prize, the harm does not stay in one corner. OAuth trust mishandled in one place can pull downstream developers, startups, and other platforms into the same smoke cloud.

    Vercel’s recommendations: basic controls, no vibes

    Vercel’s guidance is straightforward: turn on multi-factor authentication. Review and rotate environment variables that were not marked as sensitive. Inspect activity logs for suspicious behavior and investigate unexpected deployments. It is the same common sense your uncle uses when he says, “Lock the toolbox before you brag about your new tools.”

    What this means for America

    Freedom is built on participation. When identity access is abused and supply-chain incidents hit development platforms, it stops being just an IT story. It becomes an extortion risk mid-deploy.

    So the takeaway is simple: if OAuth trust is the weak link, why are we still treating security as optional seasoning while the ShinyHunters payday keeps getting served?

  • Clarifai says it deleted 3 million OkCupid photos. Cute. Where is the punishment for the people who fed the machine?

    ByJustin Jest

    The newsroom coffee tastes like burnt pennies. The scanner is hissing. And then comes the neat little press-friendly line: an AI company says it deleted millions of dating-app photos. Everyone wants to treat that like closure. It is not closure. It is a cleanup story wearing a justice costume.

    Clarifai says it deleted OkCupid photos and facial-recognition models after the FTC case

    TechCrunch reported that Clarifai says it deleted about 3 million OkCupid user photos and the facial-recognition models trained on them, after the Federal Trade Commission settled allegations against Match Group and OkCupid over data sharing. The photos were used to train facial analysis systems. The FTC’s case, as described in its March 30, 2026 press release, centers on OkCupid sharing users’ personal information, including photos and location information, with an unrelated third party, contrary to privacy promises, without giving users a chance to opt out.

    And there is a detail in the FTC’s own telling that is not a footnote. The FTC says the third party asked for large datasets because OkCupid’s founders were financial investors in that third party. Translation: this was not “oops.” This was incentives doing what incentives do.

    Ars Technica reported the FTC said OkCupid provided the third party access to nearly three million user photos plus location and other information without formal or contractual restrictions on how it could be used. Translation: no guardrails, no seatbelts, just a glossy privacy policy and a trapdoor.

    Translation: “Deleted” does not mean “undone”

    Translation: when your photo trains a model, the value extraction already happened. The bell already rang. “Deleted” can mean the storage is gone, not that the benefit to the model-building project never occurred.

    Translation: privacy policy language is often not a shield for you. It is a shield for them. PR fog with a legal footer.

    Here is the mechanism: consent theater, quiet transfer, compliance perfume

    Here is the mechanism: people get funneled into “agree.” The platform collects intimate data at scale because that is the business. Then, per the FTC’s allegations, data moves to an unrelated third party without opt-out. Later, when the story lands, the corporate response becomes a ritual: new policies, deletion statements, and a settlement that reads like a stern email.

    Follow the money: equity gravity

    Follow the money: the founders’ financial stake, as alleged by the FTC, is the north star. Data moved because equity wanted it to move. Users paid with their faces and whereabouts. Others got training fuel and upside.

    The quiet part: deletion headlines are substitute punishment for actual punishment. If “we deleted it” is enough to end the conversation, the industry learns the same lesson every time: roll the dice, apologize later.

  • Taxpayers, Fireworks, and the NWSL Griddle: Columbus Roars Into 2028

    ByBrick Tungsten

    The air is thick like hickory smoke in a closed garage, the kind that makes you believe in a good Saturday. Then the news lands like a lifted F-150 climbing a curb: Columbus just won an NWSL expansion franchise, with play set to begin in 2028 at ScottsMiracle-Gro Field.

    NWSL awards Columbus its 18th expansion team, set for 2028

    This is straightforward and hot: the NWSL is placing its 18th franchise in Columbus. Nationwide reports the ownership group includes Haslam Sports Group and the Edwards family, and the expectation is that the club starts in the 2028 NWSL season at the Crew home. Sports Business Journal adds that the consortium led by Haslam Sports Group is paying a record $205 million expansion fee.

    The park fight, where residents ask for receipts

    But the story is not just matchday. WOSU reports Columbus City Council approved a $25 million agreement for team facilities and training space tied to McCoy Park, passed in a 5 to 3 vote. Residents criticized the plan for forfeiting a park meant to become therapeutic recreation space for people with disabilities.

    In response, the owners would pledge $3 million to help fund a replacement park. The agreement includes milestones, including an opening by the end of 2027.

    Taxpayer risk, built into the fine print

    For anyone who likes their deals with a budget thermometer, the city plans to recoup its contribution through ticket revenue at ScottsMiracle-Gro Field. WOSU says the Crew admissions fee would rise from 5% to 7% for Crew events, with an additional 2% from other events going toward repayment.

    WOSU also reports Columbus and Franklin County each approved $25 million in contributions, meaning the public side is carrying real risk. So the villain here is not the athletes or the sport. It is the dealmaking class that treats transparency like a suggestion and timelines like a negotiable rumor.

    If the replacement park schedule slips, or public access gets squeezed, the entire pitch weakens. That is why people demanding accountability are not anti-soccer. They are pro-community.

    Now tell me, are you cheering the NWSL expansion into 2028, or side-eyeing the taxpayer tab like you would side-eye someone who keeps flipping the grill control after saying it was set?

  • Illinois to Tax-Relief-Wash a Bears Stadium Giveaway, Because Billionaires Need ‘Certainty’

    ByJustin Jest

    The coffee is burnt. The scanner is hissing. My inbox smells like printer paper and denial. Behind boardroom glass, somebody is selling the same fairy tale with a new label: a multibillion-dollar NFL operation needs “certainty.” That word shows up right before the public ledger gets picked clean.

    Illinois lawmakers are talking about voting on a Chicago Bears stadium-related bill today, timed neatly ahead of a key meeting with the NFL’s stadium committee next week. It’s being pitched from the “megaprojects” shelf with a shiny wrapper: property-tax relief for regular people, statewide. Then comes the rider. The same bill would let developers of $500 million-plus projects negotiate to freeze their property tax assessment.

    Translation: “Megaprojects” means “let the rich negotiate their tax bill”

    Translation: when you hear “megaprojects legislation,” “assessment freeze,” and “PILOT-style arrangements,” this is what it means in human terms. If you build something enormous, you may be allowed to lock in property-tax predictability through an assessment freeze and negotiated payments in lieu of property taxes. Your project changes the math around it. But the bill can be structured so your tax bill stays anchored to a baseline, even as the world around the project gets more expensive.

    This is the clean-shirt version of the same scam. Revenue needs don’t disappear. They move. If the stadium’s taxes do not keep pace with value because it negotiated “certainty,” the shortfall relocates into everyone else’s tax reality.

    And because property taxes fund schools and local government, this is not abstract. It is class sizes. It is special education staffing. It is library hours. It is whether local services are scrambling while a privately owned entertainment complex plays spreadsheet games with the assessor.

    Follow the money: who gets the upside, who eats the risk

    Follow the money: the Bears, developers, bondholders, sponsors, and the surrounding ecosystem get the upside. The public eats the risk through foregone revenue, infrastructure obligations, and the municipal hangover that never makes it into glossy decks: maintenance, traffic, policing, and the “little” costs that land on budgets later.

    The pitch always hits the same note: they are “investing” billions. Sure. They invest because they will own the asset and harvest the revenue streams: premium seating, concessions, events, and adjacent real estate. Football is the engine that keeps the cash register open for everything else.

    Meanwhile, the legislature gets squeezed by the most effective weapon in American sports finance: the relocation threat, whispered in lobby corridors and shouted through headlines. Indiana has been circling. The NFL benefits from the auction itself.

    Here is the mechanism: a relocation threat is a private tax on democracy

    Here is the mechanism: cartel discipline plus local panic. Owners hold scarce franchises. Cities compete. Legislators get told they have to “keep the team” like it is a hostage negotiation. Then the deal gets laundered through terms that sound neutral: “assessment freeze,” “PILOT,” “megaproject.”

    In plain English, it is a private tax on democracy. The threat does the work. The public’s bargaining power evaporates because the political class is terrified of being blamed for losing Sundays.

    The quiet part: public guarantees without public control

    The quiet part: they want public help without public ownership, oversight, or veto power. Socialize the dull, expensive parts. Privatize the fun parts.

    If lawmakers want property tax relief, they can pass property tax relief. Clean. Simple. No stadium rider. And if the Bears want to be an Illinois institution, they can pay taxes like one.

    Publish every draft. Publish every fiscal impact estimate. Put the deal under daylight and hearing microphones. If it is so good, it will survive an audit.

  • Purdue, the Opioid Court, and the Right to Show Up

    ByHarlan Quill

    I have sat in enough courthouse hallways to recognize the atmosphere: stale coffee, copier toner, old stone, and that quiet moment when people realize the docket is not a metaphor. Courthouses were built for a simple civic purpose: public accountability in a room you can actually enter. Lately, too many of those rooms have been replaced with a link, a waiting room, and a mute button.

    So I noticed a small but meaningful thing out of Newark, New Jersey: a judge remembered that justice is supposed to be done where the public can show up.

    What happened in the Purdue case

    On April 21, 2026, U.S. District Judge Madeline Cox Arleo postponed Purdue Pharma’s criminal sentencing by one week, moving it from a Zoom hearing to an in-person proceeding set for April 28. The reason was plain: people harmed by the opioid crisis, along with members of the public, arrived and wanted to participate in person. The court accommodated that. Good. Basic. Overdue.

    The underlying case is not small. Purdue’s 2020 guilty plea and the planned sentencing are tied to major penalties and the long tail of an epidemic that has killed more than 1 million Americans since 2000, according to Reuters reporting. Reuters also reported that the sentencing is among the final steps before Purdue can complete a bankruptcy settlement intended to deliver about $7.4 billion to those harmed, with the Sackler family contributing at least $6.5 billion. In the criminal case, Reuters reported the hearing would impose a $3.5 billion fine and $2 billion in forfeiture, with the federal government ultimately waiving repayment rights for all but $225 million so Purdue can direct assets to other opioid creditors.

    The Orwell check: when “access” becomes a settings menu

    We live in a golden age of euphemism. “Remote access” can sound modern and inclusive, and sometimes it helps. But run the Orwell check anyway: when a public proceeding becomes a video link, who controls the waiting room, the mute button, the record, and the feel of shared reality? A courtroom, for all its flaws, is a messy analog check on power. It is harder to stage-manage.

    The liberty ledger

    • Who benefits from remote-only? Efficiency, smoother closure, fewer unpredictable moments.
    • Who pays? Victims and the public, losing not just the right to watch but the right to be felt.

    And yes, the DOJ itself describes victims’ rights, including the right to be reasonably heard at sentencing, in its Crime Victims’ Rights Act materials on the Purdue case page. Those rights should not depend on broadband or a frictionless link.

    The tradeoff: speed vs legitimacy

    A system can be fast, or it can be trusted. Sometimes it can be both, but when forced to choose, legitimacy is the whole game. This one-week delay is not a cure. It is a reminder: the harmed are not an inconvenience to be buffered out of the frame.

    Guardrails we still need

    • Presume in-person access for major public-interest criminal proceedings, with remote access as a supplement.
    • If remote components exist, make the rules clear: entry, comment procedures, recording, and discretion to cut access.
    • Treat opioid accountability like an audit: track spending, demand outcomes, and require readable public reporting.

    After all these years of opioid devastation, why did it take people on the sidewalk to remind the system that victims belong inside the courthouse?

  • NIH just tightened foreign-risk rules for small-business science, and the paperwork is the point

    ByJustin Jest

    The newsroom coffee tastes like burnt toner. My phone keeps vibrating with the same three forces that run this town: money, paranoia, and administrative power. A new rule gets stapled to a grant application and suddenly a lab’s future depends on whether you can translate bureaucrat into human.

    NIH updates SBIR and STTR foreign disclosure and risk management rules

    On April 20, 2026, NIH posted a notice telling SBIR and STTR applicants that policy changes have landed for Foreign Disclosure and Risk Management. It reads like a warning label for anyone trying to get federal innovation money through HHS, with NIH as the biggest gravitational mass in that solar system.

    Yes, it’s arriving right as SBIR and STTR are freshly reauthorized. Reauthorization on April 13, 2026 sounds like a ribbon cutting. The April 20 notice feels like a metal detector at the door.

    In the real world, SBIR and STTR fund the boring, expensive middle of innovation. The stretch between “cool idea” and “product that helps people.” NIH’s message: you still might get funded, but first you will be processed.

    Translation: “Foreign risk management” can become a silent veto

    Translation: “Foreign Disclosure and Risk Management” sounds like a spy thriller. In practice, it can become a compliance gate that decides your fate without a scientific argument. Not a peer-review fight over methods. A risk process where you may never be told what tripped the wire.

    This apparatus has been building across agencies, with best practices, due diligence frameworks, and “covered individuals” language turning foreign-risk checks into a default step, not an exception.

    The sales pitch is “protect America from influence and IP leakage.” Fine. The operational reality is that the more opaque the scoring, the easier it is to punish normal collaboration and normal lives, while shrinking accountability for delays, denials, and extra hoops.

    Here is the mechanism: friction functions like a budget cut

    Here is the mechanism: Congress can fund a program. Agencies can still choke it by adding friction. The lever isn’t always “no.” It’s “not yet,” “submit again,” “more documentation,” “more certification,” “wait for clearance.”

    Compliance produces attrition. The rich survive it. The desperate die in it. If you have venture capital, you hire the right counsel and keep moving. If you’re a scrappy startup built by scientists, you learn the real curriculum: paperwork is power.

    And because this is a notice, not a scandal, it slides through the system like a paper cut. No cameras. No vote board. Just expectations that reshape who even bothers to apply.

    Follow the money: barriers to entry create winners

    Follow the money: The more you wrap SBIR and STTR in risk bureaucracy, the more you tilt the field toward firms that can afford compliance labor. Compliance labor is an industry, and every new rule is a market opportunity.

    The biggest winners are incumbents and well-capitalized players who love barriers to entry. They don’t call it that. They call it “security,” “integrity,” “resilience.”

    The losers are the people NIH’s brochures praise: new entrants, weird ideas, immigrant founders, and spinoffs long on science and short on legal budget. Even if every check is justified, the distributional impact is not neutral. It selects for who can endure the process, not just who has the best science.

End of content

End of content