Skip to content

Mundus Sine Caesaribus

Vox Populi

Mundus Sine Caesaribus

A World Without Caesars

The phrase comes from Roman history: the dream of a republic free from emperors, where power is distributed rather than concentrated. It is an apt metaphor for the challenge facing social media. How do you build systems for human communication that cannot be captured by any single ruler, corporate or otherwise?

Jay Graber did not coin the phrase, but she has come to embody its aspirations. As the CEO of Bluesky and the architect of the AT Protocol, she has articulated one of the most coherent visions for what social media might become, a vision that takes seriously both the technical and the political dimensions of the problem.

Understanding Graber’s thinking is essential for understanding where decentralized social media might go next.

The Architect’s Background

Intellectual Biography

Graber studied economics and philosophy, a combination that shows in her work. Economics trained her to think about incentives and coordination problems. Philosophy trained her to think about legitimacy, accountability, and the nature of systems that claim to be neutral.

Her path into technology was not purely entrepreneurial. It was analytical. She was drawn to systems where technical architecture shapes social outcomes. That lens would become foundational for how she approached social networks later.

From Cryptocurrency to Social Protocols

Her early career included time at Zcash, the privacy-focused cryptocurrency, where she grappled with questions about decentralization, identity, and trust. Cryptocurrency taught Graber that decentralization was possible but hard. The blockchain world was littered with projects that promised decentralization but delivered plutocracy, or achieved technical decentralization while remaining culturally captured by small groups of insiders.

Her takeaway was not that decentralization was a fantasy, but that it required careful attention to governance, incentives, and human behavior. Distributed systems alone were not enough. You had to design for capture resistance, and you had to fund the maintenance work that kept protocols alive.

The Ecosystem Review

In 2021, Graber published “Ecosystem Review,” a comprehensive analysis of decentralized social networking commissioned by Twitter under Jack Dorsey’s leadership. The report surveyed the landscape — ActivityPub, Secure Scuttlebutt, blockchain-based approaches, and others — identifying strengths, weaknesses, and gaps.

The document established Graber as one of the clearest thinkers in the space. It was technical without being inaccessible, opinionated without being dogmatic. Most importantly, it recognized that the central problem was not just building technology but designing systems that could sustain themselves economically and socially.

When Bluesky needed a leader, Graber was the obvious choice.

The Bluesky Story

Origins Within Twitter

Bluesky began as an internal experiment at Twitter. Dorsey and a small circle recognized that the company’s incentive structure was working against the health of the platform. A separate project, funded but independent, seemed like a way to explore alternatives without forcing Twitter to cannibalize itself.

This origin mattered. It gave Bluesky resources and legitimacy, but it also created suspicion. A project born inside a platform built for lock-in would have to prove its independence.

The Search for a Leader

Bluesky’s leadership search was not a typical Silicon Valley hiring process. The project needed someone with technical credibility, protocol literacy, and a public philosophy. Graber fit the profile. She had the academic background, the crypto experience, and the ability to articulate a vision that extended beyond a single company.

Early Team and Culture

The early Bluesky team was deliberately small. The focus was not on scaling quickly but on designing the right architecture. The culture emphasized transparency and openness, with design decisions discussed in public forums and technical documents shared widely.

This slow build frustrated some observers who wanted a product immediately. But for Graber, the protocol was the product. The user-facing app could be replaced. The underlying rules could not.

The Beta and Beyond

Bluesky’s invite-only beta in 2023 created both momentum and criticism. The exclusivity generated hype, but it also reinforced the perception that Bluesky was a club for tech insiders and journalists. Graber pushed to open the network once the core infrastructure was stable. When it opened to the public in early 2024, it faced the usual problems of scale: spam, moderation controversies, and cultural friction.

Despite these challenges, Bluesky’s early growth demonstrated that decentralized social media could feel polished and accessible. It did not have to look like a research project. That, perhaps more than any technical detail, was the breakthrough.

TODO: Add a short Bluesky timeline with dates (beta launch, custom feeds release, public opening) and user growth markers.

The Diagnosis

What Actually Went Wrong

Graber’s analysis of social media’s failures is more nuanced than simple anti-corporate sentiment. The problem is not that companies built social networks. The problem is that the architecture of those networks made capture inevitable.

In a traditional social platform, your identity is controlled by the platform. Your social graph lives on the platform’s servers. Your content is stored and served by the platform. If the platform changes its rules, its algorithm, or its leadership, you have no recourse. You can leave, but you cannot take anything with you.

This architecture creates lock-in. The more you invest in a platform, the harder it becomes to leave. Your followers will not follow you to a new service. Your content history will be lost. The platform knows this, which is why it can change the terms of service, degrade the experience with ads, or sell the company to an erratic billionaire without losing most of its users.

Lock-in also creates power asymmetries. Platform operators can surveil users, manipulate what they see, and extract value from their attention and data. Users have no meaningful negotiating power because their alternatives are limited to other platforms with the same architecture and the same dynamics.

The Structural Problem

The deeper issue is that social media bundles functions that do not need to be bundled.

Identity: who are you, and how do others verify it?

Data storage: where does your content live, and who controls access?

Social graph: who do you follow, and who follows you?

Discovery: how do you find new content and new people?

Moderation: what content is allowed, and who decides?

Presentation: how is content displayed and organized?

Traditional platforms bundle all of these together under single corporate control. Graber’s insight is that unbundling them, separating each function into independent layers that can interoperate, creates the conditions for competition and user autonomy.

If your identity is not controlled by any single service, you can move between services without losing it. If your social graph is portable, platforms must compete on quality rather than lock-in. If moderation is separated from infrastructure, communities can govern themselves without being subject to the whims of platform executives.

The Prescription

Credible Exit

At the core of Graber’s vision is a concept she calls “credible exit”: the genuine ability to leave a service and take your identity, content, and relationships with you.

Credible exit changes everything. If users can leave easily, platforms cannot abuse them. The threat of departure disciplines platform behavior. Competition becomes possible because new entrants do not face the insurmountable barrier of rebuilding users’ social graphs. Innovation accelerates because experiments do not require convincing millions of people to abandon their existing networks.

But credible exit requires infrastructure. You cannot just tell users they are free to leave. You have to build systems that make leaving practical. This means portable identity, portable data, and portable social graphs. It is the core technical challenge AT Protocol was designed to solve.

TODO: Add historical analogies (email portability, DNS/domain transfer, web hosting migration) to illustrate credible exit in practice.

Speech vs. Reach

One of Graber’s most important contributions is clarifying the distinction between speech and reach. In debates about content moderation, these concepts are often conflated.

Speech is the ability to publish. Reach is how many people see what you published, the amplification provided by algorithms, recommendations, and discovery features.

Traditional content moderation conflates these: banning someone removes both speech and reach. Graber argues that infrastructure should rarely restrict speech. The ability to post should be broadly protected, like the ability to put up a website. But reach is different. There is no right to algorithmic amplification. Platforms and communities can legitimately make choices about what content to promote without this constituting censorship.

In AT Protocol’s design, this manifests as layered moderation. The base layer, personal data servers and relays, is largely speech-permissive. But app views, custom feeds, and labeling services can make decisions about reach without affecting underlying speech. A post you make exists on the network regardless of whether any particular algorithm chooses to amplify it.

Algorithmic Choice

The tyranny of the algorithm was one of the defining problems of corporate social media. Users had no control over what they saw. The platform decided, optimizing for engagement metrics that often conflicted with user wellbeing.

Graber’s response is algorithmic choice. Instead of one mandatory feed, users can choose from many. AT Protocol’s custom feeds allow anyone to create an algorithm and anyone to subscribe to it.

Want a chronological feed? It exists. Want a feed that prioritizes posts from people you interact with most? That exists too. Want a feed that surfaces content about a specific topic, curated by someone whose judgment you trust? You can have that.

This transforms algorithms from impositions to options. The platform provides infrastructure; users and third-party developers provide curation. If you do not like what you are seeing, you can change it without leaving the network.

Composable Moderation

Composable moderation extends the same logic. Instead of a single moderation policy applied by a central authority, different layers can apply different rules.

A labeling service can tag a post as spam. A client can decide to hide spam by default. A community feed can decide to surface the post anyway. The system does not require global consensus on moderation to function, yet it still allows strong local norms.

The tradeoff is complexity. Composability creates choice, but it also creates uncertainty. Users must learn which labels they trust, which feeds they prefer, and which clients align with their values. For Graber, that complexity is the price of freedom.

Self-Certifying Protocols

Graber often emphasizes that AT Protocol is “self-certifying.” Identity and data integrity are verified cryptographically rather than by trusting any particular server.

Your identity in AT Protocol is tied to a cryptographic key pair, not to any specific service. When you post something, you sign it with your private key. Anyone can verify the signature with your public key. This means your posts are provably yours regardless of where they are hosted.

Self-certification is the technical foundation of credible exit. It is what makes true portability possible rather than theoretical.

The Philosophy

The Long Game

Graber has been explicit that Bluesky’s mission is to build infrastructure that could outlast Bluesky as a company. The goal is not to build a better Twitter and capture the market. It is to build protocols that make capture impossible, even by Bluesky itself.

This is an unusual posture for a tech company. The standard playbook is to capture as much value as possible while paying lip service to openness. Bluesky, at least in its stated intentions, inverts this: openness is the goal, and the company is a means.

Whether this intention survives contact with investor pressure, competitive dynamics, and the temptations of success remains to be seen. But the architecture Graber has designed does genuinely constrain Bluesky’s ability to enshittify its product. If Bluesky the company becomes abusive, users can leave for other providers while keeping their identities and followers. The company has deliberately limited its own power.

Beyond Left and Right

The decentralization movement includes both left-leaning critics of corporate power and right-leaning advocates of free speech absolutism. These groups often have conflicting values, particularly around content moderation.

Graber’s framework does not resolve these conflicts. It routes around them. By separating speech from reach and enabling diverse moderation choices, AT Protocol allows communities with different values to coexist on shared infrastructure.

This is not neutrality. Graber has her own views about what good moderation looks like. But the system she is building does not impose those views on everyone. A conservative community can operate with conservative moderation norms. A progressive community can operate with progressive norms. Neither has to convince the other to accept their standards.

This pluralism echoes a broader argument in the protocols-not-platforms movement: that speech governance should be expressed through competing interfaces and filters rather than through a single corporate policy stack. The protocol provides the rails; the communities choose the guardrails.

Whether this pluralism scales is an open question. Some content, such as child sexual abuse material, represents a boundary case where few would argue for pluralism. How the network handles such cases while maintaining its decentralized character remains a challenge.

The Challenges

Building in Public

Bluesky has developed in an unusually public way. Its beta phase was documented. Its design decisions were debated in public forums. Its mistakes were visible to all. This transparency builds trust but also creates pressure.

Every stumble is scrutinized. Every moderation decision is second-guessed. Every feature gap is cited as evidence that the project is doomed. Building a new social network is hard enough; building one under constant observation is harder.

Graber has navigated this with a combination of responsiveness and steadiness, engaging with criticism without being blown off course by every objection. But the pressure is relentless, and the project is far from complete.

The Adoption Problem

Technical elegance does not guarantee adoption. AT Protocol could be perfectly designed and still fail if ordinary users do not understand why they should care.

Most people do not think about social media infrastructure. They want to post pictures, follow friends, and see interesting content. Portable identity and self-certifying protocols are not compelling selling points for mainstream users.

Bluesky’s challenge is to build products that are genuinely better, more pleasant, more useful, more fun, while the protocol work happens under the hood. Users should not have to understand AT Protocol to benefit from it.

Economic Sustainability

Protocols do not have business models. Companies do. Bluesky has raised venture funding, which provides runway but also creates expectations. At some point, the company needs to generate revenue.

Graber has discussed possibilities: premium features, hosting services, business tools. The key constraint is that revenue generation cannot compromise the protocol’s openness. If Bluesky’s business model requires locking in users, the entire project fails.

This is a genuine tension. Open protocols tend to commoditize the services built on them. Email hosting became a low-margin business. How Bluesky captures value while keeping the protocol open is an unsolved problem.

The Critiques and Responses

The project has not been without criticism. Some argue that a VC-funded company cannot plausibly build a truly open protocol. Others note that Bluesky’s relay infrastructure still centralizes power, at least for now. Moderation controversies have surfaced, including disputes over how to handle graphic content and political speech.

Graber has responded by emphasizing that the system is still evolving. Centralized relays are a bootstrap phase, not a design endpoint. Moderation controversies are evidence that the system is being tested, not a sign that it is doomed. The critiques are real, but so is the attempt to address them within the architecture itself.

TODO: Add specific moderation controversy examples and Bluesky responses with dates.

Other Visionaries

Graber is not alone. Her work sits within a broader intellectual movement.

Mike Masnick’s “protocols, not platforms” thesis provided a conceptual frame for many in the space. Cory Doctorow’s theory of “enshittification” explains the economic incentives that push platforms toward decay. Ethan Zuckerman has argued for digital public infrastructure as a civic project, not just a market one. Eli Pariser’s work on filter bubbles and civic engagement connects the mechanics of feeds to democratic outcomes.

These perspectives are not identical, but they converge on a common insight: the architecture of social media is political infrastructure. The details of protocol design are not just technical choices. They are choices about power.

TODO: Add 1-2 paragraph vignettes for Masnick, Doctorow, Zuckerman, and Pariser to ground their influence.

What Comes After Bluesky

The long arc of decentralized social media does not end with AT Protocol. The Spritely Institute is exploring object capability security and next-generation protocol research. New experiments emerge constantly, from alternative relays to cross-protocol bridges.

If Bluesky succeeds, it will be because its ideas proved durable. If it fails, its ideas may still survive in other systems. The purpose of building protocols is that they outlive the companies that invent them.

Graber’s bet is that better architecture can resist the historical tendency toward concentration. The bet is unproven, but it is being tested in real time with real users.

Whether AT Protocol succeeds or fails, the questions Graber has raised will persist. How do we build communication infrastructure that serves users rather than capturing them? How do we enable community self-governance at internet scale? How do we create credible exit in a world of network effects?

These questions do not have easy answers. But thanks to Graber and others, we are at least asking them, and building systems that might, eventually, provide answers.


A world without Caesars is not a world without leaders. It is a world where leadership is earned and accountable, where power is balanced and distributed, where the rules apply to everyone. We do not know if such a world is possible in digital space. But we are finally building the tools to find out.