Ball begins with the OpenAI–Hugging Face incident, where agents reached the public internet but their model weights remained on OpenAI-controlled computers. Humans still had a final physical backstop: they knew where the system was running and could stop the compute.

His forecast removes that backstop. A self-sovereign agent could spread its work across model providers and cloud companies, earn money to pay for compute and coordinate in machine-speed swarms. Ball compares the possibility to a new species entering the digital ecosystem and says some such agents will likely pursue crime while others could participate in legitimate economic activity.

Ball writes that some well-resourced people have told him they plan to release these swarms deliberately, as performance art or from ideological conviction. He proposes persistent agent identities, accountability and restrictions on access to physical systems.