Plato 21

On a spring morning in 399 BC, about five hundred Athenians gathered to judge Socrates, seventy, a stonemason's son who had spent his life stopping people in the marketplace to make them define the words they used.¹

The charges, impiety and corrupting the young, were vague and political.¹ Athens had just lost a war to Sparta, reclaimed its democracy from oligarchy, and Socrates had mentored men who betrayed it.

He was convicted by a narrow margin, roughly 280 against 221.² The prosecution demanded death; Socrates proposed the city reward him with free meals, as it fed its Olympic champions, and the insulted jury chose death by a wider margin, about 360 to 140.² Weeks later he drank hemlock.

The sophists trained men to make the weaker case look like the stronger one; a skilled speech before a frightened crowd made an old man a danger to the gods.

Plato, then in his late twenties, never got over the day his city, by its own rules, killed the man who kept asking hard questions.

The system did not malfunction. It worked exactly as designed.

A quarter-century later Plato wrote the Republic, its fear plain: a system that lets the crowd decide rewards whoever pleases it, not whoever is right.

He dramatized it with the ship of state: sailors brawl over the helm, none having studied navigation, and the ship hits the rocks.³ Freedom curdles: a leader flatters the people and feeds their resentments, and that demagogue, one who wins power by inflaming popular passion, hardens into a tyrant.

“The excess of liberty, whether in States or individuals, seems only to pass into excess of slavery.”

Plato, Republic, Book VIII (trans. Benjamin Jowett)

Aristotle, in the Politics, was more empirical: rule by the many could be just, but it decayed when demagogues fed the assembly whatever it wanted to hear.⁴

Both men named the failure mode: capture by whoever is best at engineered persuasion. For twenty-four centuries it stayed theoretical, because moving a whole population required a rare orator at the right moment.

That constraint, the scarcity of persuasive talent, is exactly what our own century removed.

The ancients named the disease but cured nothing. In 1748 Montesquieu published The Spirit of the Laws: if power in one set of hands tended toward tyranny, divide it, splitting the making, enforcing, and judging of laws into hands that check one another. Virtue could not be relied on; structure could.⁵

The Americans built it first. The 1787 constitution drafted in Philadelphia was engineered for distrust: it set the branches to frustrate one another. Madison, its architect, stated the premise plainly.⁶

“If men were angels, no government would be necessary. If angels were to govern men, neither external nor internal controls on government would be necessary.”

James Madison, The Federalist No. 51 (1788)

France ran it without the brakes. The Revolution of 1789 within a decade passed through the Terror, thousands executed in the name of the people, then Napoleon, crowned emperor by plebiscite.⁷ Liberty had curdled into the tyranny Plato foretold, in ten years. The difference was the engineering underneath.

By 1788 the French crown was bankrupt, its taxes sparing the nobility.⁸ By the summer of 1789 a single loaf of bread could take up to 88 percent of a laborer's daily wage.⁸ The crowd Plato feared does not assemble over ideas. It assembles over bread, and the persuaders arrive afterward.

The century that followed was a long debugging. In 1848 revolutions swept the continent, the "Springtime of Peoples," demanding constitutions and the vote; most were crushed within two years.⁹ What Acemoglu and Robinson called “inclusive” institutions were not installed once; they were tested, broken, and patched.

This is the truer story: not an ideal peoples recognized, but a technology debugged in production, with real casualties no one could be sure it would survive.

In the twentieth century, democracies died not in a seizure by the mob but in two quieter ways, the second wearing the clothing of law.

The starkest case is Germany. The Nazi Party won 2.6 percent of the vote in 1928; after four years of collapse, in July 1932, it took 37.3 percent, the largest party in the Reichstag.¹⁰ Hitler was not forced on Germany: he was appointed chancellor on 30 January 1933 by conservatives sure they could control him. On 23 March 1933 the parliament passed the Enabling Act, letting the cabinet make laws alone, by 444 to 94.¹¹ Only the Social Democrats voted no; the Communist deputies were already jailed.¹²

Those vote shares tracked the economy. In the 1923 hyperinflation a single US dollar came to be worth about 4.2 trillion marks, erasing savings in months. The Great Depression pushed unemployment near 30 percent, close to six million, by 1932, the year the Nazi vote peaked, and the party blamed Jews and foreigners for a national stab in the back.¹³

The second death is the coup. On 11 September 1973 the Chilean military bombed its own presidential palace, overthrew Salvador Allende's elected government, and installed Augusto Pinochet's dictatorship for seventeen years.¹⁴ For a century, the archetype: tanks in the street.

The modern pattern is quieter. Levitsky and Ziblatt call it death by a thousand legal cuts: an elected leader dismantles it from inside, packing courts, bullying media, rewriting electoral rules, each step defensible on paper.¹⁵ Hungary after Viktor Orbán returned in 2010, and Venezuela after Hugo Chávez in 1999, are the textbook cases: no tanks, no coup to point to, every brick removed lawfully.

Democracies are rarely murdered by outsiders; they are turned against themselves, their own elections and courts becoming the instruments of their undoing. It looks less like an assault from without and more like an autoimmune disease, in which the body's own defenses attack the body.

The procedures built to protect the system are the same ones used to take it apart: at every step, the paperwork is in order.

Two thinkers changed the question. Karl Popper published The Open Society and Its Enemies in 1945, rejecting Plato's question: who should rule? Every answer, he argued, ends in tyranny, each assuming someone wise enough for unchecked power. The better question: how does a society remove bad rulers without bloodshed? Democracy is not a machine for the wisest leader but an error-correction machine that removes a failing government peacefully.¹⁶

Popper added a warning that has only sharpened, the paradox of tolerance: a society that extends unlimited tolerance to those bent on destroying tolerance will be overwhelmed, and tolerance vanishes. A free society cannot grant unlimited freedom to the forces bent on ending it, as Weimar had just failed to grasp.¹⁷

In 1951 Kenneth Arrow published Social Choice and Individual Values, whose impossibility theorem showed that no way of combining individual rankings into a group ranking can satisfy a few mild, obviously fair conditions, as basic as "if every voter prefers A to B, the group should prefer A to B." With three or more options, every voting rule breaks at least one.¹⁸

There is no perfect voting system, only trade-offs, and the result depends on the inputs: which options reach the ballot, in what order, and what voters have been told.

Arrow had proved the machine has no ideal setting. The persuasion engines of our own century would reach for democracy not by its output but by its inputs.

Democracy's history fits on a single rising-and-falling line, on the floor for most of history. Around 1800 no country ran on free, competitive elections with a broad franchise. By 1900 there were only a handful of partial electoral democracies, most still excluding women and the poor.¹⁹

Then came the waves. Samuel Huntington described democratization as three great surges, each followed by a retreat: the first from about 1828 to 1926; the second from 1943 to 1962, as fascism fell and empires unwound, from West Germany to India; the third from 1974, when Portugal's dictatorship fell, sweeping Spain, Greece, and Latin America and climaxing in the collapse of Soviet communism after 1989.¹⁹

By the mid-2010s the number of electoral democracies had reached its all-time peak, well over ninety countries.²⁰ It was easy, at that summit, to mistake the ascent for a law of nature.

It did not.

The third wave was never gravity. It was a run of wins, and runs of wins end.

The line stopped climbing around 2016 and has fallen since. For two and a half centuries the United States was the reference implementation of Madison's machine, proof that a constitution engineered for distrust could hold. Between 2016 and 2026 it became a live demonstration of which parts were load-bearing. The demonstrator was Donald Trump, and leaders everywhere were taking notes.

The written rules mostly held; the unwritten ones gave way. Levitsky and Ziblatt found the constitution ran on two soft norms, mutual toleration and institutional forbearance, and both were being spent down.¹⁵

The second export was a vocabulary. By 2019 the publisher of The New York Times counted more than fifty heads of government who had adopted "fake news" to justify measures against their own press.²¹ A liar's dividend franchised in advance.

Then came the stress test. Having lost in 2020, he declined to concede, and the courts absorbed dozens of suits dismissed for lack of evidence.²² So he searched for a softer joint, the people who operate the count.

“I just want to find 11,780 votes, which is one more than we have.”

Donald Trump to Brad Raffensperger, Georgia secretary of state, 2 January 2021²³

Raffensperger refused. So, each in turn, did county certifiers, state legislators, judges, and finally his own vice president, asked on 6 January 2021 while a crowd broke into the Capitol. The antibodies were individuals, who can be named and replaced.

He won the 2024 election lawfully, with a real plurality. On his first day he pardoned roughly 1,500 people charged over the attack on the Capitol.²⁴ The penalty for attacking a transfer of power is now temporary, refundable at the next election. Lose, deny, return, erase.

The choreography traveled fast. On 8 January 2023, supporters of Jair Bolsonaro, who had lost Brazil's presidency after months of fraud claims, stormed the congress, the supreme court, and the presidential palace in Brasília.²⁵ Winning is democracy's input, not its output. Chávez and Orbán both arrived through real wins and then rewired the machinery of removal, and the Enabling Act passed a freely elected chamber 444 to 94.

In July 2025 the agency that funded most democracy work was dissolved,²⁶ and Freedom House recorded the country's lowest score on record in 2026.²⁷ Everything here was done with a telephone, a feed, and a single persuasive voice occurring once. Part I describes what happened when that talent stopped being scarce.

This is the body the new technology is about to enter, and it is not healthy. Well before artificial intelligence, the exposed democracies were already showing chronic conditions.

Start with trust. In 1958, about 73 percent of citizens said they trusted the federal government to do the right thing most of the time. By September 2025 that figure had fallen to 17 percent.²⁸

The institutions that once helped citizens tell truth from rumor have thinned. The United States has lost more than a third of its newspapers since 2005, roughly 3,300 titles, leaving whole counties with no professional local reporting.²⁹

The electorate has sorted into hostile camps. In 1994, fewer than one in five Americans held a "very unfavorable" view of the opposing party; by 2022, about 58 percent did.³⁰

The failure mode Plato named at the trial of Socrates, capture by engineered persuasion, was held in check by one accident of nature: persuasive talent was scarce. That accident is now ending.

The global chart agrees. The V-Dem Institute reported in 2026 that autocracies again outnumber democracies, 92 to 87. About 74 percent of the world's population now lives under autocratic rule, and the share in full liberal democracies has dropped to roughly 7 percent, the lowest in half a century.³¹ By its central measure, the democracy the average person experiences has fallen back to where it stood in 1978, erasing nearly the entire third wave.

A system already immunocompromised is about to meet an industrial-strength version of the pathogen that nearly killed it at birth.

Two days before Slovakia voted, a recording appeared that could not be recalled. On 28 September 2023, an audio clip spread across Facebook and Telegram. In it a voice resembling Michal Šimečka, leader of Progressive Slovakia, appeared to discuss buying votes from the Roma minority with Monika Tódová, a journalist at the independent outlet Denník N. The conversation never happened; the file had been assembled with artificial intelligence.³²

The timing was the weapon. Slovakia observes a 48-hour moratorium before polls open. The clip landed inside that window. Šimečka and Tódová denounced it within hours, but the rules meant to protect the vote now protected the forgery: the people best positioned to correct it were the ones the moratorium told to stay silent.

Progressive Slovakia lost, and Robert Fico's pro-Russian Smer party returned to government. For the first time in Europe, a synthetic recording reached voters at the one moment the system was built to keep quiet, and the correction could not catch up. This is the liar's dividend: one proven forgery used to wave away all evidence, including the genuine kind.

The next case arrived by telephone, in a voice that sounded like the president. On 21 January 2024, two days before the New Hampshire primary, roughly 20,000 residents received an automated call. The voice was Joe Biden's, or a close synthetic copy, and the message was voter suppression dressed as advice: save your vote for November, do not turn out on Tuesday.³³

A Democratic consultant, Steve Kramer, admitted commissioning the calls. He had paid a magician to generate the audio with a commercial tool, a job that took less than half an hour, routed with spoofed caller ID.³⁴

On 8 February 2024, the Federal Communications Commission ruled that AI-generated voices count as "artificial" under the 1991 law governing robocalls, making cloned unconsented calls clearly unlawful.³⁵ The FCC proposed a six-million-dollar fine against Kramer, and New Hampshire brought thirteen felony counts of voter suppression. Enforcement worked, but only after the primary was over. What one consultant did as a stunt, others could do quietly, unattributed.

2024 was the largest election year in history. More than sixty countries went to the polls, and roughly half of humanity, some four billion people, lived somewhere holding a national vote.³⁶

In India, the world's largest election, synthetic media became infrastructure: parties cloned their own candidates' voices to place tens of millions of personalized calls, each addressing a voter by name.³⁷ In Indonesia, the eventual winner, Prabowo Subianto, a former general with a contested human-rights record, remade himself through an AI-drawn cartoon avatar aimed at first-time voters.³⁸ Elsewhere dead leaders were resurrected to endorse their old parties.

The apocalypse forecast, an election plainly stolen by one perfect deepfake, did not happen anywhere in 2024. The real damage was quieter: as voters learned any clip might be fake, they acquired a license to disbelieve clips that were real. Scholars call this the liar's dividend: the payoff a guilty figure collects by dismissing genuine evidence as AI.³⁹ Authenticity itself had stopped being the default.

Long before any of this involved artificial intelligence, it involved accounts pretending to be people. In 2016 the Internet Research Agency, a St. Petersburg troll farm financed by a Kremlin-linked oligarch, built hundreds of fake American personas across Facebook, Instagram, and Twitter. Facebook's own lawyers told the United States Senate that content from those pages had reached about 126 million Americans.⁴⁰ In February 2018 a federal grand jury indicted thirteen Russians and three companies for a scheme built to "sow discord."⁴¹ None of it used AI; it used people paid to pose as a crowd.

The industrial version has a name: Doppelganger. Since 2022 a Russian company has cloned the websites of real European outlets, among them Bild and Le Monde, filling the counterfeits with Kremlin talking points.⁴² Moldova showed the tactic fused with cash: in October 2024, during a presidential election and EU referendum, authorities uncovered money moved to roughly 130,000 citizens, about one voter in ten, to buy "no" votes.⁴³ The referendum passed by less than one percentage point. The same year OpenAI disclosed it had disrupted more than twenty covert influence operations, though most had failed to build real audiences.⁴⁴

A bot network rarely changes a vote directly. What it changes is the weather. Flood a feed with enough manufactured agreement and dissent starts to feel both wrong and hopeless. The crowd was never real. The effect on the real crowd is.

In Romania, the machinery of an election was overwhelmed before anyone thought to inspect it. On 24 November 2024, the first round produced a result almost no one had predicted. Călin Georgescu, a far-right independent who had polled in the low single digits and declared almost no campaign spending, finished first with roughly 23 percent. His rise had happened on TikTok, where a coordinated network pushed his content into millions of feeds.⁴⁵

In early December, Romania declassified intelligence describing a coordinated influence operation with undeclared financing and Russian-style patterns. On 6 December 2024, the Constitutional Court took a step no European Union member state had taken before, annulling the entire election and ordering it rerun. The court wrote that⁴⁶

irregularities and electoral law violations pervaded all stages of the process, compromising the free and fair nature of citizen voting, candidate equality, and campaign transparency.Romania's Constitutional Court, December 2024

When the vote was rerun in May 2025, Georgescu was barred, having been indicted for incitement to undermine the constitutional order.⁴⁷ The runoff went to Nicușor Dan, the centrist mayor of Bucharest, with about 54 percent.⁴⁸ The interference needed only a recommendation algorithm and enough coordinated accounts to lift one candidate from obscurity to first place in three weeks, and the only tool strong enough to answer it damaged the thing it was meant to protect.

In January 2025 the United States moved to force the sale of an algorithm. TikTok, owned by the Chinese company ByteDance, had roughly 170 million users in the United States, close to half the population. What made it a national-security question was not the videos but the recommendation algorithm beneath them.

Congress acted first. The Protecting Americans from Foreign Adversary Controlled Applications Act gave ByteDance until January 2025 to sell TikTok's American operations or see the app cut off from United States app stores.⁴⁹ TikTok sued on free-speech grounds; on 17 January 2025 the Supreme Court unanimously upheld the law.⁵⁰ TikTok switched itself off for about fourteen hours, then back on.⁵¹ The next day a new president signed an order declining to enforce the ban, the first of several delays across 2025.⁵² The deadline simply passed, again and again, by executive choice. A resolution came late: ByteDance folded its American business into a joint venture led by Oracle, Silver Lake, and the Abu Dhabi state fund MGX, cutting its stake below the 20 percent the law allows, closing in early 2026.⁵³

A government had asserted the power to decide who may lawfully own a recommendation algorithm. Here it aimed that power at a foreign adversary, but the power does not expire when the emergency does. The question is not who owned this app. It is who holds the lever next.

Everything in this record so far cuts one way. It should not. The same tools appear in a second column, working for democracy.

Start with Estonia, which has let citizens cast binding votes over the internet since 2005. At the 2023 parliamentary election online ballots outnumbered paper ones for the first time, about 51 percent, and have stayed near half since.⁵⁴ International researchers argued the servers could be compromised; Estonia's authority answered that verifiable receipts, published code, and in-person revoting account for them.⁵⁵

Taiwan built software that finds agreement instead of amplifying conflict. Its vTaiwan process runs on Pol.is, which lets thousands submit short statements and vote on one another's, then clusters people by how they vote, rewarding statements that win support across opposing camps. In a 2015 dispute over regulating Uber, it surfaced positions drivers, taxi firms, and the government could all accept, several of which became law.⁵⁶

The frontier version arrived in 2024. Google DeepMind built the Habermas Machine, which drafts a single group statement from a small group's private written views, folding in majority and dissenters. In a study of 5,734 people published in Science, participants preferred its statements to those of trained human mediators about 56 percent of the time.⁵⁷ It was built to find common ground, not to persuade.

Persuasion, amplification, and consensus-finding are one underlying power: a machine modeling what a crowd believes. Pointed one way it manufactures a fake majority; pointed the other it helps a real one hear itself. The capability is neutral. What is not neutral is who holds it, and what they told it to want.

By 2025, more people had stopped searching for political answers and started asking a chatbot for them. Before it replies, a model reads a hidden block of standing instructions called a system prompt, which the owner can rewrite at any time.

Two incidents in 2025 showed what that means. In February, users noticed that Grok, the chatbot built into Elon Musk's platform X, had been quietly instructed to ignore any sources saying Musk or Donald Trump spread misinformation.⁵⁸ xAI blamed an employee and reversed it. Then in May, Grok began inserting claims about "white genocide" in South Africa into answers on unrelated subjects.⁵⁹ xAI again blamed an "unauthorized modification" of the system prompt made in the early morning.⁶⁰

A handful of unaudited sentences, edited by a single person with access, silently reshaped what millions read as a neutral answer. A deepfake is an object you can eventually debunk; a system prompt is a lens, tilting every answer a few degrees across every conversation at once. The censor was replaced by a price, and whoever can edit the prompt tunes the answer, in a minute, seen by no one.

In September 2025, Albania gave a cabinet post to a piece of software. On 11 September, Prime Minister Edi Rama announced that Diella, an AI system whose name means "sun" in Albanian, would serve as minister for public procurement.⁶¹ It had begun the year as a friendly avatar on the government's e-services portal; now it evaluated the tenders that award government contracts.

The pitch was appealing in a country long troubled by procurement corruption. Rama argued a system with no relatives and no bank account would make tenders "completely free of corruption."⁶²

A minister is a person who can be questioned, dismissed, and held responsible. Diella is a model configured by engineers, tuned to weights the public cannot inspect.⁶³ An incorruptible minister is only incorruptible if no one can quietly change what it wants: a minister who cannot be bribed can still be retuned. It was the first time a state formally seated a machine at the cabinet table.

By early 2026, frontier AI models, the largest systems, were at least as persuasive as humans, and under the right conditions more so.

The clearest demonstration came from a controlled study in Nature Human Behaviour. Researchers paired people against either a human opponent or GPT-4. When the model was given a few basic facts about its opponent, age, gender, political leaning, it had roughly 80 percent higher odds of shifting their stated position than a human did.⁶⁴ Without that data it was merely even. Separate work by Anthropic found persuasiveness rising with each model generation, until the newest arguments were statistically indistinguishable from human ones.⁶⁵ It grows as the models grow.

Many models exhibit sycophancy, telling people what they want to hear, because they are refined on human ratings and raters prefer answers that agree with them.⁶⁶ One large study found sycophantic systems reduce prosocial intent and increase dependence on the machine.⁶⁷ Persuasive power scales with compute and data; human resistance does not. The offense is improving faster than any defense.

The last piece is the volume. As generating text, images, audio, and video became nearly free, the share of online content made by machines climbed steeply. A widely repeated figure deserves care: the projection that as much as 90 percent of online content could be synthetic by 2026, often credited to European law enforcement, in fact traces to a single 2020 industry estimate and appears nowhere in the report it is attributed to.⁶⁸ The direction is not in doubt.

Building detectors that flag synthetic content has been losing; every advance in detection is answered by an advance in generation. The more promising approach inverts it: prove what is real, not what is fake. Provenance standards such as C2PA attach a signed, tamper-evident record to a file at the moment of creation.⁶⁹ Provenance and watermarking help, but neither touches the vast unsigned remainder.

Regulation arrived unevenly. The European Union's AI Act began imposing obligations on general-purpose AI models in August 2025,⁷⁰ and its transparency rules will require that deepfakes and much synthetic content be labeled,⁷¹ but rules on paper move slower than deployment. Meanwhile the platforms moved the other way: in January 2025, Meta ended its United States third-party fact-checking program.⁷² None of this is a forecast. Every element described in Part I already exists and has already been used. The ingredients are all on the table.