Eleven Gates
Three people walk into the same invisible machine on a Monday morning in 2027. A café owner in Rotterdam applies for a loan to expand her kitchen. A farmer in Kenya ships avocados to a supermarket in Hamburg. A finance minister in Ankara tries to fund a gas pipeline from the Caspian.
None of them have heard of the Tree of Life, and they won’t see a single Kabbalistic term along the way. But all three will pass through eleven gates in the same order, following the same structure and the same logic at every step. They’ll just think it’s how the market works, or the rules, or the way things are.
I. The Loan
Elena runs a café in Rotterdam-Zuid. Eighteen tables, a kitchen untouched since 2011, and growing lunch queues she can’t serve because the fryer only handles two baskets. She walks into her bank, wanting forty thousand euros to expand the kitchen.
Keter. Before Elena even crosses the threshold, the rules are already set. The bank operates under the EU’s Corporate Sustainability Reporting Directive1, and its lending has to line up with the EU Taxonomy for Sustainable Activities2. The ECB requires climate risk in every lending decision3. The UN Sustainable Development Goals guide the annual report4. Nobody asked Elena about any of this. These commitments were adopted by institutions she didn’t elect, through frameworks she’s never read. But they shape what the bank can lend, to whom, and on what terms.
Chokmah. The bank’s first move is to identify her. Know Your Customer — KYC5. Her Chamber of Commerce registration6, tax number, DigiD verification, bank history, ownership declaration7. Elena’s no longer a person with a café — she’s a Legal Entity with attributes: sector code 56108 (restaurants and mobile food service), employee count, turnover bracket, location, years of operation. The system knows what she is in its own language, but what she is in hers — a woman who makes good coffee and wants a bigger fryer — isn’t encoded.
Binah. The system works out what she’s allowed to do, or rather what the system limits are for an entity like hers. Her sector carries risk from the climate transition9, as restaurants use lots of energy. The bank checks her building’s energy label, and her equipment is assessed against efficiency standards10. If she plans to install a gas fryer rather than electric, the energy classification changes11. The bank’s internal risk model sets a boundary: restaurants in sector 5610 with energy label D, in buildings built before 1980, in flood-risk postcodes, carry a specific risk weighting. Elena doesn’t know this weighting exists. It was set using climate scenarios she’s never seen12, by committees she can’t name, against pathways she was never asked to endorse13.
Da’at. Everything the system has gathered — her identity, her sector classification, her energy profile, her risk weighting, the ethical commitments the bank operates under, the international banking rules that determine how much cash the bank must hold against her loan — is compiled into a single assessment package. This is the hidden node. Elena can’t see it. The loan officer may not fully understand it either — the compilation runs through the bank’s internal risk engine, which merges regulatory data feeds, climate scenario outputs, and automated compliance checks into a score14. The compilation determines what Elena is to the system: a forty-thousand-euro exposure in a medium-risk sector with specific climate characteristics. Everything upstream has been translated into the system’s operational language. Everything that wasn’t translated doesn’t exist.
Chesed. The system has watched Elena for years. Her transaction history — every card payment received, every supplier invoice paid, every VAT return filed — is the surveillance stream. The bank calls this ‘knowing our customer’15 and ‘responsible lending’16. The data flows upward: Elena’s self-presentation to the system. Her accounts, her filings, her declarations — she provides this data because the system requires it for participation. She thinks it’s just normal business administration, but the monitoring is continuous, automated, and invisible in the sense that it feels like bookkeeping rather than surveillance.
Gevurah. The audit function compares what Chesed gathered against what Da’at compiled. Does Elena’s transaction history match her declared turnover? Does her cash flow support the repayment schedule? Does the loan’s purpose align with the bank’s sustainability commitments? Does the capital the bank must hold against this loan, given its risk weighting, make the loan commercially viable for the bank? Gevurah doesn’t decide for or against Elena — it measures her against standards she didn’t set, using data she provided, against parameters fixed by committees she’ll never meet.
Tipheret. The ruling. In a smaller bank ten years ago, this would have been a loan officer’s judgment call — a human being who knew Elena, had eaten at her café, and weighed the numbers against what they knew of her character. Today, the credit-decision engine merges the Chesed data stream, the Gevurah compliance checks, and the Da’at risk profile into an automated recommendation. The loan officer still exists, but the recommendation arrives ready-made., and overriding it needs documented justification that will be audited. The AI doesn’t decide in any dramatic sense — it clears or it flags, and the flag carries the weight of the entire upstream architecture: the ethical commitment, the risk weighting, the climate scenario, the capital requirement. The loan officer who overrides the flag is personally accountable for every bit of regulatory risk the override creates.
Netzach. If the ruling’s favourable, the governance logic sets the conditions. The loan carries covenants: Elena must file quarterly energy consumption reports17. She must install equipment that meets the bank’s minimum efficiency standards18. She must maintain her ESG disclosure19. She must notify the bank if she changes the business’s primary activity. The conditions appear as standard terms, and they are standard — every loan in this sector carries them, because the bank’s sustainability commitments require them. Elena signs because the alternative is no loan.
Hod. Enforcement. If Elena misses a quarterly filing, the covenant triggers. If her energy use exceeds the threshold, the interest rate adjusts. If the bank’s supervisory review finds that its portfolio’s climate-risk weighting has worsened because too many borrowers like Elena are running gas fryers, the capital requirement tightens, the lending criteria tighten, and Elena’s next loan — or her existing one’s terms — changes. The enforcement doesn’t come from a person. It comes from the architecture adjusting its parameters, which adjusts the bank’s parameters, which adjusts Elena’s parameters. She gets a letter about revised terms — the process is fully automated.
Yesod. The money moves — or it doesn't. Forty thousand euros, conditional on every upstream gate having cleared. The settlement is the moment the architecture becomes real — not a policy discussion or a framework document or a technical standard, but money in an account or money withheld. Elena's kitchen gets renovated, or it doesn't, and the architecture made that determination before the loan officer shook her hand.
Malkuth. Elena walks out with an approved loan. She tells her husband it went well, the bank was helpful, the terms are fine. She renovates the kitchen, installs an electric fryer because the bank's conditions required it, and files quarterly energy reports because the covenant requires it. She experiences all of this as the normal cost of doing business. The eleven gates she passed through are invisible. The ethical commitment she never endorsed, the climate scenarios she never saw, the risk weighting she never knew existed, the AI recommendation the loan officer didn’t override — none of this appears in her experience. She got the loan and the system worked. The bank that processed her application presented itself as her lender — a commercial institution serving her needs. Its lending function now serves the architecture’s classification requirements, but Elena experienced it as her bank, doing what banks do. She’s free to make coffee.
She chose the electric fryer.
II. The Avocados
James grows avocados on four hectares outside Nairobi. A German supermarket chain wants twelve tonnes a month. James has the trees, the labour, and the fruit. What he needs is access — to the supply chain, the payment system, and the European market.
Keter. The rules that govern James’s deal were written in rooms he’ll never enter. The EU’s Farm to Fork Strategy20, adopted in 2020, sets the sustainability requirements for food entering Europe21. The EU Deforestation Regulation22, effective June 2023, requires proof that commodities weren’t produced on land cleared after December 202023. The Corporate Sustainability Due Diligence Directive pushes sustainability obligations through every tier of the supply chain24. The German Supply Chain Act25 adds another layer of human rights and environmental checks. Behind all of these sit the UN Sustainable Development Goals, the planetary boundaries framework26, and the supermarket chain’s own ESG commitments27, which publishes an annual sustainability report citing the UN Global Compact28. Nobody asked James about any of this — he grows avocados.
Chokmah. The system needs to identify James. GlobalG.A.P. certification is the basic ticket to European retail supply chains29. It requires a unique Farm Assurer number30, GPS coordinates for every plot31, identification of every worker, and registration in the GlobalG.A.P. database. The EU Deforestation Regulation requires a geolocation polygon for every plot the avocados grew on32, uploaded to a due diligence system that checks the coordinates against satellite deforestation data33. James is turned into data: he’s no longer a farmer with four hectares. He’s a certified production unit at specific coordinates with a specific workforce and a specific commodity output. The system knows what he is in its own terms, but what he is to himself — a man who inherited land from his father and grows fruit on it — isn’t a variable in the system.
Binah. The system checks what James is allowed to do, or rather what a unit like his can do within the system’s limits. Maximum Residue Levels for pesticides34, set by Codex Alimentarius35 and enforced through EU Regulation 396/200536. Phytosanitary requirements under the International Plant Protection Convention37. The EU organic regulation if he wants the premium38, water usage standards39, and worker welfare requirements under the Rainforest Alliance or UTZ certification40 his buyer demands41 — each standard sets what James can produce for export. Fruit that meets the standard is a commodity. Fruit that doesn’t is waste — it can be sold locally but not exported, because the system won’t process it.
Da’at. The data gets compiled at the point where James’s certification records, his geolocation polygons, his pesticide logs, his worker documentation, and his buyer’s due diligence requirements are assembled into a single compliance package. The buyer's compliance department runs the package through its due diligence system, checking the data against the EU Deforestation Regulation's benchmarks, the CSDD requirements, the German Supply Chain Act's obligations, and the supermarket's own sustainability commitments. The result is binary: James’s avocados are either compliant or they’re not. What the system can’t see — that James uses traditional intercropping methods that protect soil health, that his workers are his extended family and are well treated not because a standard requires it but because they’re his cousins — isn’t in the compilation. It doesn’t exist.
Chesed. Monitoring never stops. Satellites check James's plots against the deforestation baseline, GlobalG.A.P. requires annual audits, the buyer's supply chain platform tracks every shipment from farm to port to Hamburg42, temperature loggers in the shipping container feed data to the cold chain management system43, and pesticide residue testing happens at random intervals. The monitoring is framed as quality assurance and responsible sourcing — the buyer’s sustainability report will cite the number of certified farms in its supply chain as evidence of its commitment to the UN goals. James sees this as paperwork and inspections — not as surveillance because the word isn't used. Some of the monitoring comes from peers: other certified producers report on each other's practices through the peer review process44, and they see this as professional duty and shared commitment to the standard, not as informing.
Gevurah. The audit compares what Chesed gathered against what Binah requires. The pesticide residue test results are checked against the MRL tables, the geolocation data against the deforestation satellite imagery, the worker records against the due diligence requirements. If James's neighbour cleared a patch of forest in 2021 and James bought the land in 2022, the geolocation check flags the plot45. It doesn't matter that James planted trees on the cleared land — the satellite baseline is December 2020, the land was forested then, it was cleared after, and the regulation applies. The avocados from that plot are non-compliant.
Tipheret. The ruling happens automatically. The buyer’s due diligence system produces a risk rating for every supplier. James’s risk rating merges his certification status, his audit history, his geolocation compliance, his pesticide test results, and his country’s own risk classification under the EU Deforestation Regulation (Kenya is classified as ‘standard risk’). The rating determines whether the buyer proceeds with the purchase order, demands extra documentation, or drops James from the supply chain. The buyer in Hamburg who sends the purchase order has never met James — they see a risk rating and a compliance status, and the rating is the ruling.
Netzach. The terms are set by the governance logic. The price isn’t negotiated between James and the buyer based on what his avocados are worth to the people who’ll eat them. The price is the Fairtrade minimum46 (if certified), minus the buyer’s margin, minus logistics, minus the compliance cost the buyer passes through to the supplier. The contract requires James to maintain certification, submit to audits, provide traceability data, and absorb the cost of any compliance failure. The conditions are non-negotiable in the sense that every buyer in the European market operates under the same frameworks. He can sell to a different supermarket, but the conditions will be the same.
Hod. Enforcement works through market access. If James loses his certification, no European buyer will touch his fruit. If his geolocation data flags a deforestation risk, the buyer drops him. If Kenya is reclassified from ‘standard risk’ to ‘high risk’ under the EU Deforestation Regulation, every Kenyan exporter faces extra due diligence requirements — extra cost, extra delay, extra paperwork. The enforcement doesn't arrive as punishment — it arrives as a commercial decision: the buyer's compliance cost exceeds the value of the deal. James isn't punished, he's just no longer processed.
Yesod. The money either arrives or it doesn’t. James ships the avocados and the buyer’s bank sends the payment through the international banking network47, carrying the usual details of who sent it, who’s getting it, and what it’s for. If James’s bank is in a country flagged as risky, the middlemen banks might demand extra checks. If the payment sets off a money-laundering alert — because the amount, the route, or the sender matches a pattern the system watches for — it gets held for review. James’s avocados are already in Hamburg but his money is stuck in a queue. The cash only moves once every upstream gate has cleared, and the rules were set by institutions he’s never heard of.
Malkuth. James gets paid. The avocados are on shelves in Hamburg where German consumers buy them, perhaps checking the Rainforest Alliance48 label and feeling good about buying sustainably. James uses the income to pay his workers, keep his certification up, and prepare for next season’s audit. He sees the whole thing as export business — demanding, bureaucratic, but functional. GlobalG.A.P. looked like a quality assurance service helping him reach the European market. The buyer’s compliance department looked like a sourcing team ensuring good produce. Every institution presented itself as serving James, but each one was really serving the grammar. The eleven gates are invisible. The ethical commitments of European institutions, the satellite monitoring of his land, the computer-generated risk score, the banking rules set by committees in Basel — none of this appears to him as governance. It just looks like the way international trade works.
He’s free to grow avocados... on the four hectares the system can see.
III. The Pipeline
Minister Yılmaz needs to finance a twelve-billion-dollar gas pipeline from the Caspian Sea through Turkey to the European border. The engineering is straightforward, the gas is available, the route is mapped, and the demand is real — Europe needs the gas. What the minister needs is money: sovereign bonds, project finance, export credit, and insurance.
Keter. The rules were set before the minister even took office. Turkey signed the Paris Agreement49, the G20 Sustainable Finance Roadmap50 commits members to align finance with sustainability goals51, and the EU’s Carbon Border Adjustment Mechanism taxes imports from countries without carbon pricing52. The International Energy Agency’s Net Zero by 2050 report53 said no new oil and gas fields should be approved — this isn’t law or treaty, but a report from a Paris research body, and it fed into the NGFS scenarios54, which fed into Basel capital weighting55, which entered every bank’s risk model56. The idea that fossil fuels are transitional at best and stranded at worst is already baked into the financial infrastructure before the minister picks up the phone57.
Chokmah. Turkey’s identity in the system is reduced to parameters. Sovereign credit rating: Moody’s B158, S&P B+59, Fitch BB-60. FATF status: member with noted deficiencies in beneficial ownership transparency61. EU accession status: frozen62. SDG performance: ranked 79th63. Climate commitment: net zero by 205364, eight years later than the Paris-aligned 2045 pathway65. Each attribute slots Turkey into the system’s classification grid, and the country isn’t a nation with a history, geography, and eighty-five million people — it’s a risk profile with specific scores on specific indices maintained by specific institutions.
Binah. Turkey’s ability to finance this pipeline is judged against the standards those indices enforce. The NGFS scenarios classify natural gas as a ‘transition fuel’ under some pathways66 and a ‘stranded asset’ under others67, while the EU Taxonomy includes gas only under specific conditions — as a transitional activity with sunset clauses68. The Basel Committee’s climate risk guidance69 requires banks to factor transition risk into their capital adequacy assessments70, so a bank lending to the pipeline must hold more capital against the loan than it would for a renewable energy project of the same size71, because the risk weight is higher. How much higher depends on which NGFS scenario the bank’s supervisor uses, and the supervisor doesn’t choose the scenario — the NGFS publishes them, the supervisor applies them. The scenarios were calibrated by modellers at IIASA and the Potsdam Institute72, using assumptions about decarbonisation pathways that no electorate in any country voted on73.
Da’at. The compilation happens where Turkey’s sovereign risk profile, the pipeline’s climate classification, the Basel capital requirements, the NGFS transition scenarios, the EU Taxonomy conditions, the CBAM implications, and the project’s commercial fundamentals are assembled into a single financing assessment. The lead arranger’s risk department runs the numbers and the output is a cost of capital: what it’ll cost to borrow twelve billion dollars for this specific project, in this specific country, at this specific moment in the regulatory cycle. The cost of capital isn’t a market price — it’s a compiled parameter, integrating every upstream gate into a single number that determines whether the project proceeds. If the cost of capital exceeds the project’s internal rate of return, the pipeline is unfundable, not because no one wants the gas, but because the architecture has priced it out.
Chesed. The surveillance is layered. Satellite-based asset-level monitoring74 tracks the pipeline’s construction and the emissions profile of the gas field it connects to. The Asset-Level Data Initiative75, developed at the Oxford Smith School through the Waddesdon forums76, provides the granular physical-asset data that feeds the transition risk models. Turkey’s sovereign emissions are tracked through the UNFCCC reporting framework77, the IMF’s Article IV consultations78 assess Turkey’s fiscal position including its exposure to carbon-intensive assets79, and the Financial Stability Board’s climate disclosure recommendations80 require Turkey’s banks to report their exposure to transition risk. Every data stream flows upward: Turkey’s energy infrastructure, rendered as variables, feeds the models that calibrate the parameters determining the cost of capital.
Gevurah. The audit checks happen everywhere at once. The IMF looks at Turkey’s finances and climate policy during its Article IV reviews. The FATF checks anti-money-laundering compliance. The EU checks alignment with European regulatory standards through the accession framework. Rating agencies check creditworthiness, now including climate transition risk in their sovereign methodology81. Turkey gets measured against rules it didn’t write and can’t change alone. A bad FATF report is especially damaging — it limits Turkey’s correspondent banking relationships and raises transaction costs across the whole economy82. The audit never needs to mention the pipeline. It just changes the environment where the pipeline must find funding.
Tipheret. The final call comes from all these checks converging. No single body says ‘Turkey can’t build this pipeline’. The IEA says no new fossil fuel development fits net zero, the NGFS turns that into risk parameters, Basel turns those into capital requirements, rating agencies turn those into a sovereign risk premium, and the lead arranger's credit committee turns that into a cost of capital — which becomes a yes or no decision. Each step is technically independent and each body stays in its own lane. Nobody makes the ruling — the architecture produces it through the convergence of standards, scenarios, risk weights and capital costs that no one controls but everyone enforces through their own narrow job.
Netzach. If the pipeline does get funded — at a higher cost reflecting the risk — conditions attach. Lenders want a credible transition plan with interim targets83. Export credit agencies want environmental and social impact assessments meeting the Equator Principles84. Insurers want compliance with the TCFD framework85. Bond covenants demand quarterly reporting against the EU Taxonomy’s transitional activity criteria86. Each condition looks like standard project finance practice. Each was written upstream in forums the minister wasn’t invited to, using scenarios his government didn’t set.
Hod. Enforcement happens through the market itself. If Turkey’s credit rating drops because the agency’s climate methodology reclassifies fossil fuel exposure as material risk, all Turkish sovereign borrowing gets more expensive, not just the pipeline. If Turkey lands on the FATF grey list — not because of the pipeline, but because of ownership transparency gaps — banking relationships tighten, transaction costs rise, and capital slows across the board. If the EU’s CBAM slaps border levies on Turkish gas because Turkey’s carbon price is lower than the EU’s, the pipeline’s commercial economics worsen without any lender lifting a finger. Enforcement isn’t a decision — it’s a condition. The architecture shifts the environment, and the project either survives or it doesn’t.
Yesod. The bonds either settle or they don't, the syndicated loan closes or it doesn't, the insurance is underwritten or it isn't — twelve billion dollars flows from lenders to contractors, from contractors to suppliers, from suppliers to workers, or it doesn't. Settlement is when the whole upstream architecture becomes real — not a scenario or a framework or a risk weight, but steel in the ground or an empty field. The transaction clears through settlement systems running ISO 20022 messaging87, processed by banks holding Basel-calibrated capital88, cleared through correspondent chains maintained by FATF-assessed institutions89. Every link depends on upstream compliance. One link breaking — one correspondent bank pulling out of Turkey, one insurer declining the risk — can delay or kill the project.
Malkuth. Minister Yılmaz holds a press conference. If the pipeline was financed, he announces a historic project securing Turkey’s energy future and strengthening its role as a transit hub between East and West. He thanks the international financial community for its confidence. He doesn’t mention the NGFS scenarios, the Basel risk weights, the FATF assessment, or the EU Taxonomy conditions that shaped every aspect of the deal. If the pipeline wasn’t financed, he blames market conditions, geopolitical uncertainty, or Western bias against developing nations. He doesn’t mention the architecture because the architecture doesn’t present itself as a decision — it presents itself as the environment where decisions get made. The IMF looked like an economic adviser, the rating agency looked like a neutral assessor, the lead arranger looked like a willing lender constrained by market conditions — each appeared to serve Turkey's development interests, and each processed Turkey through the grammar.
The Turkish public experiences the outcome as economics — the market decided, or politics got in the way. The eleven gates are invisible — the ethical commitments written at forums in London and Paris, the climate scenarios calibrated at institutes in Vienna and Potsdam, the risk weights set by committees in Basel, the compliance standards enforced through correspondent banking chains headquartered in New York — none of this appears in the public story. The architecture processed Turkey’s pipeline through eleven gates. At each gate, the same question was asked: does this entity, with these attributes, doing this activity, in this jurisdiction, under these conditions, meet the standard the system compiled from the ethic it was given?
The minister is free to build the pipeline. He just can’t afford to.
The Grammar
Elena’s fryer, James’s avocados, and Minister Yılmaz’s pipeline all passed through the same eleven gates in the same order. The ethical frame was already there before any of them showed up. Their identities got turned into data, their options got limited, and everything about them was translated into the system’s own language. The monitoring collected what they handed over willingly, the audit measured them against rules they never wrote, and the decision came from the architecture, not from any single person. The governance attached conditions, the enforcement worked through the environment rather than through direct orders, and the money only moved if everything upstream had cleared. And the result felt like freedom — the freedom to pick an electric fryer, to farm four hectares that meet the rules, or to plan a pipeline you can’t afford to build. At every gate, the restriction felt like care — Elena was protected from climate risk, James was helped to hit sustainability standards, the minister was steered toward cleaner energy. The architecture doesn’t look like a cage. It looks like a cradle.
The grammar’s the same whatever the scale. A café loan and a sovereign bond pass through the same shape. What changes is the altitude — from one bank’s risk engine to the Basel Committee, from one buyer’s compliance platform to the EU Deforestation Regulation, from one credit officer’s recommendation to the NGFS climate scenarios. At every level, three groups do the same job: the thinking layer sets the standard before the checking layer starts work, the checking layer filters without owning the decision, and the people inside experience the result as just the way things work.
That’s what makes it recursive. Every level holds a complete system, and every system runs the same grammar. And academics had already formalised the grammar in control theory, using category theory and cybernetics, years before anyone built the infrastructure that now runs it. The formalisation didn’t cause the implementation — the control problem caused both. Anyone building a complete governance system for complex human activity will end up with this shape, because it’s the shape the problem demands.
Elena, James, and Minister Yılmaz don’t need to know the shape — they live inside it. The architecture doesn’t need their understanding, it needs their data, and they hand it over willingly and continuously without realising that’s what the system uses to work out what they’re allowed to do.
The eleven gates are open. The question is what they’re checking for, and who wrote the rules they check against.
Nobody asked Elena, James, or the minister. And nobody will ask you either.
This is a perfect summary of how the machine, as I call it, works. I work in financial services and I regularly need to explain to my clients why the decisions they encournter are not 'unfair' and/or not because the lender didn't take into account x,y or z but because the proposition simply didn't meet criteria, resulting in a decline. I usually tell them we are not dealing with people we are dealing with a system, a set of predetermined rules but this essay provides additonal insight so I think I will keep this essay and pass it to my clients.
Thank you Escape,🙏❤️
These real life examples, really bring home, the full weight, of what is happening.
Many years ago I rcd a loan to start my little fashion business,
based only on my enthusiasm, and the fact that I had a market stall and sold things,
at a Night Club.
I have no doubt I would be turned down today,I feel sorry for for all budding entrepreneurs,
jumping through these invisible hoops. Probably leaving the bank, feeling demoralised,
and not understanding why it was a No!