The beta test is over — things are about to get very real

In January 2026, Britain’s Home Secretary announced that the U.K.’s ten facial-recognition vans would become fifty. If you haven’t seen one: an ordinary police van, cameras on the roof, parked on a shopping street. Every face that walks past is scanned and checked, live, against a watchlist. If the software says you match, officers standing nearby stop you.

The software inside them is made by a company called Corsight, based near Tel Aviv, whose board includes a former head of Israel’s National Security Council.

Two years earlier, Israeli officers told the New York Times that the same software, used at checkpoints in Gaza, was wrongly flagging people and getting them detained.11 New York Times, March 2024, on Unit 8200’s use of Corsight’s facial recognition in Gaza, including wrongful detentions; Al Jazeera, 28 January 2026, on the UK rollout, the £20 million Digital Barriers contract with Corsight as subcontractor, and the Home Office’s non-response. The board member is Giora Eiland.

Nobody in Essex knew any of that when the vans arrived.

There was a six-month trial: Essex Police ran the software for real, on real streets, and the results became the case for buying it nationally. The arrests went up alright. The contract was twenty million pounds. The Home Office, asked about due diligence, said it didn’t comment on operational matters.

Last week, the Daily Echo in Southampton ran a piece about the vans under the headline “Businesses welcome facial recognition vans making them feel safer.” A man working the till across the square said it had felt a lot safer that day. The pharmacist said it was quieter.22 Southern Daily Echo, 26 October 2026. The quoted workers are a 23-year-old at a convenience store and a pharmacy employee; their names are left out here, since they didn’t sign up for an essay.

For a century, Western democracies have told themselves a story about the surveillance trade.

We build the tools. The bad countries misuse them.

We sell, they abuse, and the distance between us gives us moral and political cover.

The story is backwards.

The bad countries were never the misuse. They were the beta test.

The democracies were the launch market all along, and the only reason you have not yet been treated like a subject is that the version tested on subjects took twenty years to ship to customers.

A.I. ships overnight. And boy you better believe it’s going to be something else this time.

§ The beta test

Here is the trade, told in the order it actually happened, which is the order of a product rollout.

In the 1890s, the British in Bengal were governing millions of people they couldn’t tell apart, who signed contracts with a thumbprint and, the administrators believed, lied about who they were. The head of the Bengal police, Edward Henry, worked out a way to file fingerprints so they could be searched. It was built to manage a colonized population. In 1901, Henry went home and set up the Fingerprint Bureau at Scotland Yard.33 Henry’s Classification and Uses of Finger Prints (1900) built on William Herschel’s Bengal thumbprint practice and Francis Galton’s work. The Scotland Yard Fingerprint Bureau opened in July 1901 with Henry as assistant commissioner.

In 1933, the German government ran a census that asked about ancestry. It was tabulated on punch-card machines leased from Dehomag, IBM’s German subsidiary, which had been selling them for years as efficiency. The customer decided what to count.44 Edwin Black, IBM and the Holocaust (2001). The 1933 Prussian census was processed on Dehomag Hollerith equipment; the 1940 U.S. census on IBM equipment. The extent of IBM’s knowledge in Germany is contested; the extent of the use isn’t. The same machines ran the 1940 census in the United States. The difference was the question on the card.

Between 1962 and 1974 the United States ran the Office of Public Safety, which trained police across Latin America and Southeast Asia in surveillance, interrogation and crowd control.

Congress shut it down after the stories got out. But the techniques didn’t stay abroad – far, far from it. They came home as doctrine, as the thing a generation of American police learned to call intelligence-led policing.55 The Office of Public Safety operated under USAID from 1962 to 1974 and trained more than a million police officers abroad. Congress ended it after reporting on torture by trainees in Uruguay and Brazil. Tested on Uruguayans and Chileans, but made part of the American way of policing.

Michel Foucault called this the boomerang effect: the instruments a state develops to control its colonies return to be used at home.66 Foucault, Society Must Be Defended, lectures at the Collège de France, 1975–76: colonial models of power “brought back to the West.”

The problem, though, is that he got the shape right and the moral wrong. A boomerang is an accident of aerodynamics.

This isn’t an accident.

Nothing in that list came home by mistake. It came home because it worked, and the places it was tested on were the places where nobody could object to the testing.

Here’s the number nobody puts in the brochure: the return rate on the surveillance export is one hundred per cent.

Not some of the tools. Every one of them.

There is not a single technique of mass identification in the historical record that was built for the periphery and stayed there.

Some people have called this “function creep” but it’s just the way power works, even in so-called democracies.

Technology and power inevitably come together. It’s seductive in a way governments can’t resist.

§ The version shipping now

Look at the trade as it runs this year and the product language stops being a metaphor.

Since 2017, Chinese firms have been shipping “safe city” packages across the Global South: cameras, facial recognition, a data centre, and even a loan to pay for it.

A study this year counted Chinese A.I. surveillance systems in eleven African countries. Up to eighty per cent of the cameras in Russia in 2024 were Chinese, sold under Russian brand names. Iran bought the Russian facial-recognition product FindFace through intermediaries.77 Figures via Global Voices, 15 October 2026, drawing on the Institute of Development Studies (2026) for the African count and Le Monde / Forbidden Stories (March 2026) for Iran’s FindFace purchase. The Russian camera figure is for 2024.

The pitch, everywhere, is crime prevention. It’s always crime prevention. Crime prevention is the free trial, though. The real payouts are when the state learns to become dependent on the tools for everything.

In June, in Stavropol, a fifteen-year-old girl was sentenced to seventy hours of compulsory labour for writing a dead opposition leader’s name on a bus stop in a district the political police keep watched.88 Reported June 2026, via Global Voices citing Russian independent media; the district was monitored by officers of Centre E, the anti-extremism police. The girl is unnamed here because she’s fifteen. That’s the full version. That’s what the product does when nobody is reading the terms.

And notice who’s buying it now. For a century, the democracies were the ones selling to the periphery. This year the periphery is selling to the democracies. Chinese cameras hang in British councils. Software tested at checkpoints in Gaza runs in British vans. The most restrained countries in the world are now the import market for the least restrained, and the people doing the importing are calling it a six-month trial.

§ What the machine changed

Cameras are old. What’s new is that the three things that used to slow the rollout are gone, and they went in about four years.

The first was distance. The periphery was just a laboratory, and the centre could tell itself the tool had been built for someone else.

But here’s the thing: A.I. frontier models are not built in the periphery. They’re built in San Francisco, London and Hangzhou and sold outward. The laboratory and the launch market are the same address now. Nobody can say it was designed for other people. It was designed here, by us, for everyone.

The second was time. Henry’s fingerprints took ten years to reach London. Corsight’s software took two to reach Essex, because the thing being exported is software and the vendor is the same company at both ends of the pipe. The twenty-year gap, in which the people who’d sold the tool retired and the people it was used on never heard of the place it was tried, is now a procurement cycle.

The third was the contract, which was the one place a delay could be inserted on purpose.

Every export-control regime that exists, the EU’s, Wassenaar, America’s entity list, was built for crates: a camera, a server, a licence – something you had to sign for, basically.

You cannot put an export control on model weights.

Chinese open models ship with their refusals built in; ask one about June 1989 and watch it decline. Anyone can download that, modify it, run it. In June, Sberbank began offering Russian language models to governments in the Global South, pitched as reflecting “local values.”99 Sberbank’s offer of GigaChat and related models to governments in the Global South, June 2026, as reported by Global Voices. On Chinese open models and built-in refusals: reproducible by anyone with a download. You no longer sell the surveillance. You give away the thing that does the surveilling and keep the values, and there is nothing to sign and nothing to stop at a border.

Distance, time and paperwork made the beta test slow enough to look like someone else’s problem. The machine has removed all three. You are no longer a late adopter. Nobody is.

§ The auditors live in Toronto

The best watchers of this trade work in a building at the University of Toronto. The Citizen Lab has done more than any government to trace it: the NSO Group’s insanely creepy software Pegasus, the Chinese vendors, the long list of journalists and dissidents whose phones were quietly opened. If you have read a story about spyware in the last decade, there’s a good chance the digital forensics were done on Bloor Street.1010 The Citizen Lab, Munk School of Global Affairs and Public Policy, University of Toronto. Pegasus Project (2021) and the Candiru, Predator and Paragon investigations.

Canada is the auditor. Canada is not the exception.

In 2022, the RCMP admitted to a parliamentary committee that it had been using spyware, the kind that reads a phone from the inside, for years, without telling the privacy commissioner.1111 RCMP testimony to the House of Commons Standing Committee on Access to Information, Privacy and Ethics, August 2022, on “on-device investigative tools” used since at least 2017.

Toronto police, who called their plate readers a game-changer when they put one in every car, added A.I. cameras this past summer that read the make and model of everything they pass.1212 CBC, August 2026, on Toronto Police Service A.I. cameras that read make and model as well as plates; the “game-changer” line is from the force’s earlier announcement that its whole fleet carried automatic plate readers. And Canadian police forces are, by one account, in an American weapons company’s chokehold: Axon sells the cameras, the cloud, the Tasers, and the software that connects them, and once a force is in, nothing else talks to its kit, so leaving means starting over.1313 MBC Radio, September 2026, “American weapons and tech firm Axon has Canadian police in a chokehold.”

Notice what’s missing from the Canadian story: somewhere else.

Nothing was tested somewhere else and brought here later. It arrived the same month it arrived everywhere, as a subscription. That’s what the launch market looks like when the beta is over.

§ The honest counterweight

Every one of these technologies catches someone who ought to be caught. Hampshire’s vans scanned four hundred thousand faces this year and made twenty-six arrests, and some of those twenty-six had hurt people.1414 Southern Daily Echo analysis: 406,000 faces scanned across twenty deployments in Hampshire and the Isle of Wight, December 2025 to October 2026, twenty-six arrests. The force reported “confirmed alerts” and no false-match figure. The shop workers in Southampton aren’t fools. Retail crime is real, the police were absent, and a van is a kind of presence.

The trade also runs both ways: there are Western chips inside Iranian cameras, and democracies have exported worse things than facial recognition. The UK contract was reported, debated and FOI’d; Dushanbe’s wasn’t. A country with a Citizen Lab, a privacy commissioner, a free press and a judge who will hear the case is a different country from one without them, and it’s cheap to pretend otherwise.

So the claim is not that Britain is Russia, or that Toronto is Stavropol. It’s this. The commissioner, the press and the judge were always slow, and they worked because the toolkit was slower. They had twenty years to catch up with every previous version. The difference between the democracies and the places they used to sell to was never that the democracies refused the tools. Every one of them bought every tool, eventually. The difference was that they bought it late enough for someone to object. The objection was never a value. It was a shipping delay.

§ What stays scarce

Four hundred thousand faces, twenty-six arrests. Divide, and you get the price of a quieter pharmacy: one in fifteen thousand paid with an arrest, and the rest paid with the thing the van took, which was the right not to be looked up.

What’s scarce now isn’t privacy, which has been negotiable since Bengal. It’s the lag: the abroad where the tool was tried first, the crate someone could stop at a border, the twenty years in which the people who sold it retired and the people it was used on got to notice. The lag was the only thing that ever made a democracy’s citizens different from its customers’ subjects, and nobody voted for it, and nobody will vote to restore it, because nobody knew they had it until the product shipped on time.

It shipped. It’s in a van outside a pharmacy, making the day feel a lot safer, and the beta test is over, and you were always the launch market.

The ledger below makes three claims. The third assumes someone in a parliament still reads the contracts before the vans arrive.

---

1. New York Times, March 2024, on Unit 8200’s use of Corsight’s facial recognition in Gaza, including wrongful detentions; Al Jazeera, 28 January 2026, on the UK rollout, the £20 million Digital Barriers contract with Corsight as subcontractor, and the Home Office’s non-response. The board member is Giora Eiland. ↩︎

2. Southern Daily Echo, 26 October 2026. The quoted workers are a 23-year-old at a convenience store and a pharmacy employee; their names are left out here, since they didn’t sign up for an essay. ↩︎

3. Henry’s Classification and Uses of Finger Prints (1900) built on William Herschel’s Bengal thumbprint practice and Francis Galton’s work. The Scotland Yard Fingerprint Bureau opened in July 1901 with Henry as assistant commissioner. ↩︎

4. Edwin Black, IBM and the Holocaust (2001). The 1933 Prussian census was processed on Dehomag Hollerith equipment; the 1940 U.S. census on IBM equipment. The extent of IBM’s knowledge in Germany is contested; the extent of the use isn’t. ↩︎

5. The Office of Public Safety operated under USAID from 1962 to 1974 and trained more than a million police officers abroad. Congress ended it after reporting on torture by trainees in Uruguay and Brazil. ↩︎

6. Foucault, Society Must Be Defended, lectures at the Collège de France, 1975–76: colonial models of power “brought back to the West.” ↩︎

7. Figures via Global Voices, 15 October 2026, drawing on the Institute of Development Studies (2026) for the African count and Le Monde / Forbidden Stories (March 2026) for Iran’s FindFace purchase. The Russian camera figure is for 2024. ↩︎

8. Reported June 2026, via Global Voices citing Russian independent media; the district was monitored by officers of Centre E, the anti-extremism police. The girl is unnamed here because she’s fifteen. ↩︎

9. Sberbank’s offer of GigaChat and related models to governments in the Global South, June 2026, as reported by Global Voices. On Chinese open models and built-in refusals: reproducible by anyone with a download. ↩︎

10. The Citizen Lab, Munk School of Global Affairs and Public Policy, University of Toronto. Pegasus Project (2021) and the Candiru, Predator and Paragon investigations. ↩︎

11. RCMP testimony to the House of Commons Standing Committee on Access to Information, Privacy and Ethics, August 2022, on “on-device investigative tools” used since at least 2017. ↩︎

12. CBC, August 2026, on Toronto Police Service A.I. cameras that read make and model as well as plates; the “game-changer” line is from the force’s earlier announcement that its whole fleet carried automatic plate readers. ↩︎

13. MBC Radio, September 2026, “American weapons and tech firm Axon has Canadian police in a chokehold.” ↩︎

14. Southern Daily Echo analysis: 406,000 faces scanned across twenty deployments in Hampshire and the Isle of Wight, December 2025 to October 2026, twenty-six arrests. The force reported “confirmed alerts” and no false-match figure. ↩︎