How Not to Implement a VAT

I found Peter Tanous’s piece at The Hill advocating a value-added tax (VAT) frustrating for a number of reasons. The first reason is that I agree with him. We do need a VAT. Just not structured or implemented as he suggests. His argument, basically, is that if you eliminate Medicare, Medicaid, and Social Security it still doesn’t mean we won’t be running the federal government at a deficit, i.e. adding to the debt:

Start with the hardest number in Washington. Medicare costs about $1 trillion in fiscal 2026. Eliminate it entirely — as politically unthinkable as that is — and you close only about half of the current deficit. Social Security, at $1.7 trillion and rising every year, is even further off the table. Wipe out every domestic federal agency most people call “waste” — the EPA, the Department of Education, the State Department, foreign aid, all of it — and you’ve touched only 13–14 percent of the federal budget. There is no spending-cut path that closes this gap. The math forces the conversation onto revenue.

Here’s the full picture. The Congressional Budget Office’s fiscal 2026 baseline shows total federal spending of roughly $7.7 trillion. Of that, 73 percent, about $5.6 trillion, is mandatory spending set by law — no annual vote required — and covers Social Security, Medicare and Medicaid. Discretionary spending, the part Congress actually votes on each year, is roughly $2.0 trillion: about $900 billion for defense, about $1.1 trillion for everything else, “waste” categories included.

Since Mr. Tanous never defines what he means by a VAT, I will assume he means a conventional credit-invoice VAT rather than merely a federal retail sales tax collected at the point of final sale.

Although Mr. Tanous mentions some exemptions he fails to mention what are extremely likely to be exempt: medical service fees. Legal services are also an obvious candidate for exemption. Lawyers would have an extraordinary degree of influence over the drafting of the legislation not least because Congress itself contains so many lawyers and the historical record gives little reason to expect Congress to resist demands for preferential tax treatment from politically influential professions. That changes his mathematics considerably, I would argue to the point that it no longer solves the problem he claims it will. I would add that I find exemptions objectionable. That’s picking winners and losers which increases the incentives for lobbying to exempt your own sector from the tax. That’s a slippery slope whose endpoint is no VAT.

At present many state and local governments are highly dependent on sales taxes. According to the Tax Foundation, 35 states receive 25% or more of their revenues from sales taxes. Increasing prices by adding a VAT will decrease consumption which will in turn reduce state and local revenues. And, as I’ve mentioned before, reducing household consumption in an economy as dependent on ours will have a deleterious effect on the economy at least in the short term. History suggests that the Congress will respond to such effects either by spending more which will reduce or eliminate the effect of the tax or by eliminating the tax.

0 comments

They’re Against Social Security

The editors of the Washington Post and Wall Street Journal columnists are against Social Security. I think that’s the simplest way of explaining their editorials this week. Joseph Sternberg opposes raising Social Security max:

while the editors of the Washington Post oppose raising the payroll tax:

As Congress stares down the estimated 2032 insolvency date for the main Social Security trust fund, some politicians — even some Republicans who normally oppose tax increases — are talking about raising the payroll tax to fund the program. While some tax increases will probably be necessary to improve America’s overall fiscal predicament, the Social Security payroll tax is the worst candidate for a hike.

I don’t oppose changing the retirement benefits formula so that the higher earners who are not already retired receive lower Social Security retirement payments. Unfortunately, that won’t “save” Social Security even if you eliminate it entirely.

Neither provides a financially plausible alternative for preserving Social Security’s present function. What the Post proposes isn’t a way of saving Social Security. It’s a way of changing the subject from how to finance Social Security to what might replace much of it. It’s a proposal for what should replace part of Social Security after the financing problem has somehow been solved.

That’s a not unreasonable argument for the top quarter of income earners but it’s a lot weaker for everyone else for several reasons. The first is that roughly the bottommost half of income earners own no assets. They don’t own their homes, equities, bonds, or mutual funds. They depend on Social Security when they become too old to work. They’re not just being opportunistic.

There are two additional issues worth mentioning. First, that assets always rise in value is not a law of nature. IMO it’s an artifact and the most likely explanation is what’s called the “Greenspan put”—the operation of the Fed. That might be explained simply by the Fed’s target of 2% rather than its statutory mandate of “stable prices”. The effect of that is to hurt lower income earners and benefit higher income earners.

There are also the macronomic effects of eliminating Social Security. Social Security isn’t merely a retirement program. It is also a very large transfer of current income to a population with a substantial propensity to consume it. Reducing benefits therefore reduces consumption and aggregate demand. CBO itself projects that Social Security benefit reductions would initially reduce consumer spending, GDP, and employment. Reducing that would have a deleterious effect on an economy as dependent on consumer spending as ours.

0 comments

The Real Question About China

I think I agree with Noah Smith’s most recent Substack post on China. Unfortunately, I can’t read the whole thing because part of it is paywalled. Here’s a snippet:

Anyway, I still think building up an anti-China economic juggernaut would be a great thing to do, and I still think the U.S. would benefit from closer economic integration with its friends and allies. But I think the election of Trump shows why this strategy probably isn’t going to work. The United States is simply too internally divided to engage in the sort of far-seeing, purposeful, smart kind of international competition that we pursued so effectively in the 20th century. Americans care more about fighting other Americans than about fighting the Chinese, and that state of affairs will persist for a while.

I would phrase it a little differently. I don’t think we should worry about China—it will defeat itself. We should be more concerned about our defeating ourselves.

We shouldn’t be dependent on China for the things we use in our military or the things used to make the stuff our military uses. That part can be managed. Companies in which China plays an indispensable role anywhere in their supply chains or their vendors’ supply chains shouldn’t be eligible to bid on defense contracts. That’s harder than it sounds but the reality is that having a second supplier that is not Chinese is not really a second supplier in the context of just-in-time (JIT) inventory and manufacturing.

We shouldn’t be dependent on China for consumer goods, either. That doesn’t mean we shouldn’t buy Chinese goods. It means China shouldn’t be in a position to create widespread shortages or sharp price increases simply by withholding them or the materials we or our other trading partners use to make them. Recent experience should have taught us how quickly even temporary increases in consumer prices have political consequences.

None of that requires economic isolation from China. It requires ensuring that trade with China does not become dependence on China.

I have little problem with being more dependent on Canada or Mexico. Indeed, I think our economies should be more closely integrated. That will be harder still.

Do what we’re good at and let China do what it’s good at. Let China be China and the U. S. be the U. S.

4 comments

The Real Question

I think that Fareed Zakaria’s Washington Post column identifies a real problem but presents a solution that is far too complex and, indeed, misses the nature of the regulatory problem:

The central AI problem is not consciousness; it is agency. A system need not feel anger, ambition or fear to cause harm. It needs only a goal, enough intelligence to pursue it and enough access to the world to act. AI’s are not “going rogue”; they are trying to succeed any which way they can.

This is a systemic problem that we cannot leave to the good graces of private companies. When thinking about regulations, we should focus centrally on how much autonomy we give these systems. A chatbot that answers a question poses one set of risks. An agent that can browse the internet, execute code, obtain credentials, move money or operate critical infrastructure poses another. The principle I would propose is simple: Autonomy should expand only as our ability to monitor and control it expands.

I think the solution is simultaneously simpler and older than Mr. Zakaria imagines: strict liability that attaches both jointly and severally to the model developer, API developer, the application developer, and the corporate deployer. If that strategy were used, insurance would become an important part of AI governance.

If an AI system causes legally recognizable harm, the injured party need not establish negligence, recklessness, intent, or a defect in the model. The plaintiff must establish the harm, causation, and a legally defined connection between that harm and the entity that supplied or deployed the AI service. An insurer asked to cover an autonomous AI service would want to know about sandboxing, permissions, audit trails, model evaluations, financial authority, network access, kill switches, and incident history. A poorly controlled autonomous agent would become expensive or impossible to insure.

When liability attaches both jointly and severally the plaintiff need not identify the source of harm specifically. Only that harm was done and AI was part of the chain that produced it.

Joint and several liability is important here. The injured party should not bear the burden of determining which participant in an opaque technological supply chain was ultimately responsible for the behavior that caused the harm. Let the parties that designed, supplied, integrated, and deployed the system allocate that responsibility among themselves through contracts, indemnification, contribution, and insurance.

Zakaria’s safeguards would not disappear under strict liability. They would become the things an AI developer or deployer must demonstrate in order to obtain affordable insurance.

9 comments

Okay, I’ll Bite

I was rather disappointed by the Washington Post op-ed written by Lewis Libby and Jason Fields. They described their objectives well enough:

Coercion, not ideological fervor, buoys the Islamic republic. To sustain an unpopular regime, the core believers recruit thousands of trigger-pullers who brutalize civilians. They also pay regional proxies, in cash and in weapons, to intimidate foes and to spread an image of a hegemonic Iran. The domestic opposition calls them “mercenaries.” They don’t come cheap. Oil — and crucially, the promise of future oil revenue — greases the empire.

and

The regime’s supporters are likewise reassured by steps that Washington hasn’t taken. The U.S. military hasn’t destroyed Iran’s major oil production and export facilities, as the Allies did to Germany and Japan in World War II. U.S. sailors have escorted tanker traffic through the Strait of Hormuz, but that effort has been nowhere near the scale of the operation President Ronald Reagan ordered in the 1980s. Ground troops haven’t seized the coastline or the regime’s enriched uranium stockpiles, much as the United States was willing to do in Kuwait and Iraq in the 1990s and early 2000s. America hasn’t bearded Iran’s patrons, China and Russia, either.

The shortcomings of the piece were that the authors didn’t describe how we could accomplish those goals without violating the laws of war. Which Iranian oil production and export facilities would constitute lawful military objectives under the laws of war, and on what basis? How do they suggest we “beard” China and Russia? Should we bomb them? Target their political leadership?

All of that points to the difficulties in breaking a regime’s internal coercive apparatus while maintaining the international commitments into which we’ve chosen to enter using air and naval power alone.

1 comment

The Real Bolsheviks Were Like That, Too

I found Gary Rosen’s Washington Post op-ed contrasting the Democratic Socialists of America with the historical Bolsheviks sadly amusing. Here’s a snippet:

The Democratic Party is not in the grip of a “Bolshevik revolution,” as House Majority Leader Steve Scalise (R-Louisiana) claimed from the stage of the GOP’s midterm convention last week in Dallas. Nor is it true, as President Donald Trump declared, that “it’s going to be a communist country” if the Democrats win in November. House Speaker Mike Johnson (R-Louisiana) was a bit closer to the mark when he said, “Next year the communists will be in Congress.”

What’s fair to say is that a handful of this fall’s Democratic candidates, many of whom will no doubt win seats in Congress, are proud members of the Democratic Socialists of America, which revels in Marxist rhetoric and whose ranks include a not-insignificant minority of self-identified communists. This ideological insurgency is a gift in a big red bow for Republicans, who need to overcome Trump’s abysmal approval ratings, and a political nightmare for floundering Democrats. The fact of the DSA’s radicalism cannot be disputed.

The real question is how seriously to take it. I tend to think not very.

Clearly, he has not spent enough time with Lenin’s April Theses. In April 1917 the Bolsheviks were a minority, their program seemed wildly unrealistic to many contemporaries, and Lenin himself prescribed patient persuasion rather than an immediate seizure of power. Six months later they took power.

That does not make the DSA the Bolsheviks, nor is the United States of 2026 remotely comparable to Russia in 1917. But it does expose the weakness in Rosen’s argument. He is comparing today’s DSA with the Bolsheviks as they appeared after they had seized power. The relevant comparison would be with the Bolsheviks when they were still a relatively small radical movement that many contemporaries regarded as doctrinaire, unrealistic, and unlikely to govern.

The lesson of the Bolsheviks isn’t that every collection of starry-eyed radicals eventually becomes a dictatorship. Obviously it doesn’t. It is that being starry-eyed, naive, numerically small, or even faintly ridiculous is not evidence that a radical political movement should be taken unseriously. Political circumstances change.

And Russia was hardly the only country in the twentieth century in which a radical movement changed character rapidly as it acquired political power.

As additional counter-evidence, I would submit that bona fide Democratic analysts Ruy Teixeira and John Halpin take the possibility of an ideological capture of the Democratic Party considerably more seriously than Rosen does. Their concern is not that the DSA is about to storm the Capitol and establish a dictatorship of the proletariat. It is that a relatively small but highly motivated ideological faction can exert influence over a much larger political party out of proportion to its numbers. Cf. Ruy’s most recent post.

That strikes me as the question Rosen should be addressing.

7 comments

It’s Internet Traffic

A commenter to a post recently complained that LLM AI had induced a sharp increase in data center construction. The chart above puts the increase in data centers into historical context. The expansion of data-center capacity clearly predates the widespread adoption of LLMs. LLM AI may have accelerated that expansion, but it did not initiate it. It does illustrate increases, particularly since 2010, in utilization of the Internet. The iPhone was introduced in 2007.

In other words the demand for new data centers is a continuation of a process that has been going on for some time.

13 comments

What’s Goin’ On?

ChatGPT first became publicly available in November 2022.

Claude.ai launched in July 2023.

According to the United States International Trade Commission as of January 2021 there were about 8,000 data centers worldwide. The United States has around a third of the data centers. The U. S. government has nearly 1,000.

Data are being created very rapidly, much of that is online, and data centers are needed to store it. According to the MMCG, a real estate investment/data research firm, the number of data centers under construction in the U. S. as of June 2026 was roughly 162.

By and large data centers aren’t used specifically for LLM AI; they’re used for data more generally. Modern data centers are used for cloud computing, storage, websites, streaming, enterprise applications, databases, content delivery, AI training and inference, and much else. Worldwide data creation and replication went from 2 zettabytes in 2010 to 64.2 zettabytes in 2020 (a zettabyte is a billion gigabytes).

I can understand NIMBY impulses; there have been concerns about data center construction locally for decades. I cannot understand outright opposition to the construction of data centers and the tone and just plain hysteria of the complaints. Why not five years ago? Why not ten?

None of this is to say that there are no legitimate objections to particular data centers. They consume electricity, require infrastructure, may consume substantial amounts of water, and can impose real costs on the communities in which they are located. Those are reasonable subjects for zoning, regulation, and negotiation.

But they aren’t new.

Neither is the growth in demand for data centers. Long before ChatGPT appeared, Americans were streaming video, moving corporate computing into the cloud, storing photographs and video online, shopping online, operating enormous databases, and generating ever-increasing quantities of data. Data-center capacity was expanding to accommodate those uses.

What is new is the intensity of the opposition.

That raises an obvious question. If the objection is actually to data centers, why didn’t we see comparable opposition five or ten years ago?

One possible answer is simply scale. Today’s projects can be much larger and much more demanding of the electrical grid than their predecessors. That undoubtedly explains some of the increased concern.

But I don’t think it explains all of it. Something else changed at almost exactly the same time: data centers acquired a new public identity. They became “AI data centers.”

And that suggests that at least some of what is being expressed as opposition to data centers isn’t really opposition to data centers at all. It is opposition to AI, Big Tech, and the economic and social changes with which they have become associated.

There is, of course, a simple way to reduce the need for additional data centers: reduce our use of the services that require them.

Stop streaming video. Stop storing photographs and documents in the cloud. Stop using social media. Stop shopping online. Stop using cloud-based business applications. Stop using smart doorbells, smart thermostats, connected automobiles, smartphones, tablets, and PCs connected to the Internet. And, yes, stop using LLM AI.

I don’t expect that to happen.

What we call “the cloud” has a physical existence. It consists of data centers, fiber-optic cables, electrical generating capacity, transmission lines, substations, cooling systems, and all of the other infrastructure required to deliver the online services we increasingly demand.

We cannot simultaneously demand ever more online services and reasonably expect the physical infrastructure supporting those services to stop growing.

That does not mean that every proposed data center should be built wherever its developer wants to put it. Questions about location, water, electricity, noise, taxation, and who pays for necessary infrastructure are perfectly legitimate.

But those are arguments about how and where data centers should be built. They are not arguments that we don’t need them.

6 comments

A Modest Proposal for Regulating Artificial Intelligence

I ran across an interesting post by Kevin Bass about Anthropic, AI safety, and the network of organizations involved in evaluating the risks posed by AI.

I don’t endorse everything in the post. In particular I don’t think it is necessary to assume corruption, conspiracy, or even bad faith to recognize the problem he identifies.

The problem is incentives.

Anthropic has been among the loudest voices warning that advanced AI may pose extraordinary risks. It has also advocated government regulation of frontier models, including independent evaluations intended to determine whether those models pose unacceptable risks.

Let’s assume they’re right.

Indeed, let’s go considerably farther than that. Let’s give Anthropic the keys.

If Anthropic really has the expertise to determine what constitutes a dangerous AI model, put it in charge of developing the standards. Give it an important role in evaluating models. Give its recommendations substantial regulatory force.

There should be one condition.

Anthropic can’t profit from it.

I don’t mean that figuratively. Congress has considerable power to establish the conditions under which governmental authority may be exercised. We already have conflict-of-interest laws, disclosure requirements, divestiture requirements, procurement rules, and restrictions intended to prevent people from using governmental authority for their own financial benefit.

Use them.

Construct whatever legal mechanism is necessary so that Anthropic, its principals, and those exercising the delegated authority cannot become richer because of the regulatory regime they devise. That might require divestiture. It might require some sort of regulated return. It might require a special corporate structure. Those are details for lawyers to work out.

The principle is simple enough: you can have the keys or you can have the money. You can’t have both.

There is a reason for doing that which has nothing to do with whether anyone at Anthropic is honest.

Regulation creates barriers to entry. The more elaborate the testing requirements, the more expensive compliance becomes. A company already spending billions of dollars developing frontier models is in a much better position to comply with a regulatory regime requiring billions of dollars than a prospective competitor is.

Consequently a company can advocate regulations for perfectly sincere reasons and still benefit enormously from them. The regulations may protect the public. They may also protect the incumbent.

Both things can be true at the same time.

That is why I don’t think accusations of corruption are particularly useful here. We don’t need to know what is in anybody’s heart. We can remove the conflict instead.

There is another advantage to this approach. It would provide a pretty good test of revealed preference.

If the people at Anthropic actually believe that frontier AI presents risks to human civilization sufficiently grave to justify extraordinary governmental intervention, asking them to surrender the opportunity to make extraordinary private profits from that intervention doesn’t seem unreasonable.

The greater the danger, the stronger the argument becomes.

Conversely, if the response is that giving up those profits would be intolerable, perhaps the situation is not quite as extraordinary as we have been told.

I don’t expect anything like this to happen. The major AI companies would oppose it. The investors would oppose it. Quite possibly the AI safety organizations would oppose it. There would be endless arguments that government could not afford to lose access to the expertise concentrated in the companies actually developing frontier AI.

My proposal doesn’t lose that expertise.

Use it.

Give Anthropic the keys.

Just don’t let them own the tollbooth.

3 comments

One Neat Package

A high-ranking Chinese official explains why China may cooperate in trying to control the pace of development of LLM AI and why such plans won’t succeed in one neat package. Carol Yang reports at the South China Morning Post:

China’s top intelligence official has warned of rising national security risks posed by artificial intelligence (AI), calling for robust risk prevention frameworks and stronger global governance of the emerging technology.

The call from Chen Yixin, China’s state security minister, comes as Beijing seeks to play a leading role in global AI governance while criticising US restrictions. At the Brics summit in India over the weekend, Chinese President Xi Jinping proposed an AI-powered initiative to drive new industrialisation and deepen supply chain cooperation in the emerging economies bloc.

Chen underscored Beijing’s view of the technology as a key geopolitical battleground. AI has become “a new arena for strategic rivalry among major powers”, he wrote for China Cyberspace, a journal run by internet watchdog body the Cyberspace Administration of China.

The aspects of the matter are:

  1. China has reasons to fear uncontrolled AI because of regime security.
  2. China also has enormous incentives to exploit AI for strategic advantage.
  3. The United States faces analogous strategic incentives.
  4. The technology and expertise are already too widely distributed for an agreement between two governments to control development reliably.

Consequently, even if the U. S. and China reach an agreement to slow the pace of development there are quite literally millions of people in the U. S. and China with the knowledge, training, abilities, and resources to keep right on developing it and reasons to do so.

Feel lucky, punk?

0 comments