You don’t need to close the code. You just need to own the road it runs on.

Last week OpenAI acquired Astral — the company behind uv, ruff, and ty, the fastest-growing tools in the Python ecosystem. Hundreds of millions of downloads per month. Three months earlier, Anthropic acquired Bun , the JavaScript runtime powering Claude Code. The declared reason is the same: integrate the feedback loop — build, lint, test, type-check — directly into the coding agent.

The code stays open. The license stays MIT. Nothing is locked. And yet something has shifted.

The prosthesis becomes the world#

Antonio Caronia wrote in 1996 that the prosthetic paradigm — technology as an extension of the human body — breaks down with digital systems. Digital tools don’t extend our reach into a stable world; they constitute the world the agent operates in. uv is not a screwdriver a developer picks up. It’s the ground Codex walks on.

When OpenAI acquires Astral, it doesn’t acquire a tool. It acquires a piece of the habitat. The enclosure doesn’t need walls — it needs coordinates.

No version needs closing. An informational and temporal asymmetry is enough. Codex uses an internal build of uv optimized for its own patterns. The public version stays functional, one step behind. The facade remains open source. The advantage is structural.

Fair use eats the commons#

The pattern completes itself in copyright. In Bartz v. Anthropic, the court ruled that training on books is fair use. The FSF was notified because Free as in Freedom — Stallman’s biography, released under the GNU Free Documentation License — was found in the training datasets. The FSF responded that if they were to participate in such a lawsuit and find their copyright violated, they would request user freedom — release of weights, training data, and source code — not money.

But here is where it breaks. Copyleft works by propagating through derivative works: if you build on my code, your build inherits my license. The court’s fair use ruling means training is not derivation. If the copying is fair, copyleft has no surface to attach to. The most copyleft book in existence gets absorbed into a proprietary system, and the legal mechanism designed to prevent exactly this does not fire. The commons is digestible. The enclosure is legally clean.

The shape of the soft enclosure#

Two cases, one structure. The code is open, the direction is captive — the fork is legally possible, but you cannot fork the consensus around a tool. The community, the documentation, the momentum stay upstream. Fair use neutralizes copyleft — the legal defense of openness becomes the legal path into the enclosure.

None of this requires malice. None of it requires closing anything. The enclosure is soft because it doesn’t need to be hard. The code is free. The road belongs to someone.

Meanwhile, the record burns from the other end. The New York Times and The Guardian are blocking the Internet Archive — not because it trains models (it doesn’t), but because they can no longer tell the difference between an archivist and a scraper. Thirty years of web history — 2.6 million articles linked from Wikipedia alone — disappearing behind firewalls raised against a threat that has already passed through. The training data is already in the weights. The library burns after the photographs have been taken.

Every actor here is rational. No one is wrong. The commons dissolves anyway. Caronia saw it thirty years ago: productive forces whose destructive character is not a bug but inherent in the functioning of certain software. Not an accident. The structure working as designed.