100%
GRIMOIRE
GrimoireDindon CorpusSynthesis VolumesThe Foundation of Iron
FRENAR
HUMAN
Structural Essay · July 2026 · Standalone Volume
◆◆◆
The Gravity of Data
What No Reversibility Clause Restores
◆ Declaration of Asymmetry — valid for this entire volume

This volume does not claim that every data platform deliberately organizes the capture of its customers. It was modeled by an infrastructure architect, audited adversarially by two artificial intelligences, from verifiable technical and contractual mechanisms — storage formats, governance catalogs, network egress costs. It documents how the accumulation of data constitutes, in fact, a center of gravity for the compute and services that surround it, and proposes a low-gravity architecture as a proposal, not an established norm.

◆◆◆
Amine RAITI — Infrastructure Architect & SRE
Former engineering school professor · Teaching since 2006
Public document · CC BY-NC-SA 4.0
HUMAN
Thread
What this volume will demonstrate, in order

This volume builds a three-part chain: first, the mechanism by which accumulated data draws compute and surrounding services toward itself (Chapter I); then, what the European regulatory shield actually neutralizes of this mechanism and what it leaves intact (Chapter II); finally, a low-gravity architecture presented as a proposal — not as a description of an existing practice — that explicitly answers the mechanisms documented upstream (Chapter III).

◆ The Thesis in One Sentence

Lock-in through data does not concern the data itself, but what it attracts; making the data alone reversible leaves the structure that retains it intact.

CHAPTER I — THE GRAVITATIONAL MECHANISM
I.1The Gravitational MechanismData gravity (McCrory) and switching costs (Klemperer)
I.2Empirical MaterialitySnowflake, Databricks, BigQuery
I.3Theoretical GroundingThree mechanisms, one stable combination
CHAPTER II — THE INSUFFICIENT REGULATORY SHIELD
II.1The European Data ActRegulation 2023/2854, egress fee removal by 2027
II.2What Removing the Fees Does Not SolveThe cost has shifted from transfer to reconstruction
CHAPTER III — THE LOW-GRAVITY ARCHITECTURE (PROPOSAL)
III.1Deliberate FragmentationAvoiding the monolithic data lake
III.2Decoupling Compute from Data by DesignData mesh, open formats queryable in place
III.3The Accepted CostPerformance and global consistency sacrificed, symmetric to Vol. VII's functional freeze
HUMAN
DECLARATION OF ASYMMETRY
Introduction — The Gravity of Data

Every contractual reversibility clause, by construction, concerns the data itself: its export format, its schema, its technical portability. This volume poses an asymmetry that is addressed nowhere in existing reversibility audit frameworks: data is never, by itself, what keeps a customer captive to a platform.

What retains the customer is the entire set of systems — compute, governance, trained models, real-time pipelines, metadata catalogs — that have aggregated around the data after its accumulation. A clause that guarantees export of the file guarantees nothing about the portability of what that file has attracted around it.

◆ Declaration of Asymmetry

Lock-in through data does not concern the data. It concerns its gravity — that is, the mass of compute, governance, and application dependencies it has come to attract. Making the data alone reversible leaves the structure that retains it untouched.

Volumes II, VI, and VII have successively addressed physical hardware, the duplication of compute complexity in multi-cloud, and the opacity of the orchestration layer. None has addressed the data itself as a capture mechanism. That is the object of this volume.

HUMAN
I.1
Chapter I
The Gravitational Mechanism
CHAPTER I — THE GRAVITATIONAL MECHANISM

McCrory (2010) formalizes data gravity as a force of attraction that grows with the volume of accumulated data: past a certain threshold, applications, services, and compute capacity migrate toward the data rather than the reverse, because the cost and latency of movement grow faster than the value that movement would recover.

◆ Mass as kinetic inertia — this volume's own theoretical contribution

McCrory (2010) establishes the direction of movement: past a certain volume, compute migrates toward the data. His model does not, however, formalize what happens when that compute operates continuously on a stream rather than on a stock queried periodically. This volume proposes to update data gravity for real-time pipeline constraints through the notion of kinetic inertia: the operational mass of a dataset is no longer measured only by its stored volume, but by the latency break that moving away the compute processing it continuously would cause. This is not a direct consequence of McCrory's original model, but an extension proposed here to account for streaming and near-real-time processing architectures that have emerged since 2010.

Klemperer (1987) establishes that switching costs reduce post-commitment competition: once the initial investment has been made — learning, contractual costs, transaction costs — the captured customer yields a rent that the original provider can extract without immediate risk of departure. Applied to data, the switching cost is not reducible to the volume of bytes to transfer: it corresponds to rebuilding everything that was trained, configured, or automated against it.

A network externality compounds this mechanism: the more third-party services a dataset attracts, the more its value grows for the platform hosting it — and the more the cost of leaving grows symmetrically for the customer who would want to leave, without any contractual clause explicitly addressing this cross-dependency.

HUMAN
I.2
Chapter I
Empirical Materiality

Three ecosystems built around a single data warehouse illustrate, through distinct mechanisms, the same gravitational dynamic.

◆ Snowflake — gravity shifted toward the execution ecosystem

Snowflake's historical proprietary format (micro-partitions) long made data unreadable outside the platform. The recent adoption of the open Apache Iceberg format mitigates this constraint without removing it: catalogs remain, in many configurations, managed by Snowflake, and exit costs apply as soon as processing runs elsewhere. The native ecosystem — Marketplace, native applications, identity resolution executed in place — materializes gravity in action: it is compute and third-party services that come to the data, not the reverse.

◆ Databricks — refuting the openness alibi

Databricks counters the lock-in accusation with an argument of openness by design: Delta Lake open source from inception, Unity Catalog itself open-sourced, claimed interoperability with Iceberg and Parquet formats. This argument addresses the right layer but not the right question. Gravity no longer resides in the file extension — that is indeed open — but in the centralization of the governance plane: a single metastore, a single lineage system, access policies defined once for all uses. Leaving the platform leaves the file accessible; it restores neither the lineage graph nor the governance structure that governed its access, which must be entirely rebuilt elsewhere. An open format at the file level does not imply an open center of gravity at the organizational level.

◆ BigQuery — attraction measured by cost and exit time

BigQuery's native integration with Vertex AI and Looker enables model training and execution directly in SQL, without prior data export. BigQuery Omni allows querying data located outside Google Cloud, but orchestration of this service remains driven from Google Cloud. The gap is not merely contractual: at 2026 standard rates, internet egress billed by Google Cloud ranges from 0.08 to 0.12 dollars per gigabyte depending on volume tier, and up to 0.23 dollars per gigabyte for intercontinental transit — an order of magnitude of 80,000 to over 200,000 dollars for a petabyte exported. In-place processing, within the same region, on a native Google service via Private Google Access, incurs by comparison no exit fee at all. Transfer time reinforces this finding: at a sustained 10 Gbit/s, moving a petabyte takes on the order of nine days of continuous transfer — a theoretical physical floor, computed without degradation, contention, or interruption, and therefore a lower bound, not an observed average. That this theoretical floor already reaches the scale of a week is enough, by itself, to ruin the operational viability of any external pipeline built on this dataset: no realistic improvement in transfer conditions will bring this delay down to the millisecond scale that in-place processing requires. The resulting lock-in is then no longer a reversible pricing policy, but a consequence of the physics of transfer itself. Vertex AI and Looker are therefore structurally incentivized to operate on data already resident in BigQuery not by contractual choice, but because the cost and time of any other scenario are measurable and prohibitive at the petabyte scale.

◆ What this section does not claim

This section does not claim that Snowflake, Databricks, or BigQuery pursue a deliberate data lock-in strategy. It documents a structural effect of these platforms' technical and economic architecture, independent of any intent stated by their vendors — an architectural asymmetry, not an accusation.

HUMAN
I.3
Chapter I
Theoretical Grounding

The three illustrations in I.2 converge toward a single theoretical grounding. McCrory's (2010) data gravity describes the direction of movement — compute migrates toward the data. Klemperer's (1987) switching costs describe its economic irreversibility — leaving costs more than staying ever did. The network externality describes its amplification — every additional service attached to the data reinforces gravity for all the others.

◆ Theoretical proposition of Chapter I

Lock-in through data is the stable combination of three independent mechanisms: a physical force of attraction (gravity), an economic irreversibility (switching costs), and a collective amplification (network externality). No clause addressing only one of these mechanisms neutralizes the other two.

Chapter II examines whether the regulatory shield proposed by the European Data Act — the scheduled removal of exit fees by 2027 — suffices to neutralize this combination, or whether it acts only on the first of the three mechanisms.

HUMAN
II.1
Chapter II
The Real Shield
CHAPTER II — THE INSUFFICIENT REGULATORY SHIELD

Regulation (EU) 2023/2854 (the Data Act) constitutes the first direct regulatory neutralization of the switching-cost mechanism documented in I.1 (Klemperer, 1987). Its Chapter VI specifically governs changing providers of data processing services.

◆ Regulation (EU) 2023/2854, Chapter VI — what the text actually provides

Article 29 organizes a progressive extinction of provider switching charges, explicitly including egress fees: reduced fees allowed from 11 January 2024 to 12 January 2027, capped at the costs directly linked to the switching operation; a total ban on any charge from 12 January 2027. Article 30 requires, for infrastructure services (IaaS), an obligation of "functional equivalence" when switching providers, and for other data processing services, the free provision of open interfaces facilitating portability. These technical cooperation obligations have been in force since 12 September 2025.

◆ A real neutralization of Klemperer's tariff barriers

The switching-cost mechanism formalized by Klemperer (1987) rested, in its most directly quantifiable component, on the incumbent provider's ability to charge for exit itself — the network extraction tax documented in I.2 for Snowflake, Databricks, and BigQuery. Article 29 neutralizes precisely this component: from 12 January 2027, no platform will be able to oppose an order of magnitude of 80,000 to over 200,000 dollars per petabyte exported to deter a change of provider. On this specific tariff dimension, the regulatory shield works.

HUMAN
II.2
Chapter II
The Systemic Limit

The functional equivalence obligation of Article 30 concerns, in its wording, the base service as provided by the vendor — capacity, data, documentation, technical assistance necessary for switching to a provider of the same type. It does not concern the application layer that the customer has itself aggregated on top of this base service.

◆ What remains outside the scope of Article 30

Chapter I.2 established, for Databricks, that gravity no longer resides in the file format — already open — but in the centralization of the governance plane: a single metastore, a single lineage system. For BigQuery, gravity stems from native integration with Vertex AI and Looker. Neither the metastore and lineage graph of a governance catalog, nor the machine learning models trained on the data in place, nor the dashboards and pipelines built on this native integration fall within the "base service" that Article 30 requires to be made functionally equivalent elsewhere. The exit-fee freedom obtained through Article 29 applies to data transport; it does not extend to rebuilding what has been aggregated around it.

◆ The shift of cost, not its disappearance

From 2027, the exit cost will no longer bear on the network extraction tax, abolished by the regulation. It will bear entirely on rebuilding the governance layer, the metastore, the lineage, and on retraining machine learning models — a burden the Data Act does not cover, because it does not fall, by construction, within the scope of the base service it regulates.

◆ Empirical limit of the present demonstration

Since the Data Act's technical cooperation obligations have only been in force since 12 September 2025, no case law or Commission decision yet allows verification, in a concrete case, of exactly where the administration will draw the line of the "base service" within the meaning of Article 30. The demonstration above therefore remains structural and predictive in nature — grounded in the text of the regulation and in the mechanisms documented in Chapter I — rather than in an already-settled precedent. This point is stated explicitly rather than concealed.

Chapter III proposes, from this observation, an architecture that does not depend on the outcome of this not-yet-settled regulatory boundary.

HUMAN
III.1
Chapter III · Proposal
Deliberate Fragmentation
CHAPTER III — THE LOW-GRAVITY ARCHITECTURE (PROPOSAL)

Chapters I and II documented a verifiable REALITY: a gravitational mechanism and the limits of a real regulatory shield. This chapter shifts to a PROPOSAL distinct from any existing practice currently deployed by the actors cited in I.2 — an architectural design, not an observation about a service in operation.

◆ Fragmentation as prevention of critical mass

The mechanism documented in I.1 assumes mass accumulated at a single point. The first architectural response consists of preventing such a single point from forming: distributing the data estate along business-domain boundaries rather than consolidating it in a single analytical warehouse, so that no subset alone crosses the critical volume that triggers the gravitational dynamic.

◆ Data-mesh-type architecture — the operational definition retained here

Each business domain owns and operates its own dataset, exposed through a standardized access interface, rather than centralized in a single analytical platform managed by a single platform team. This definition is deliberately minimal: it retains the principle of distributed data ownership, without settling organizational debates beyond the scope of this volume.

HUMAN
III.2
Chapter III · Proposal
Decoupling Compute from Data by Design

Fragmentation alone is not enough: each domain, taken in isolation, can recreate at its own scale the same gravity documented in I.2 if it consolidates its own compute and its own governance with a single vendor. The second axis of the proposal concerns decoupling compute from data by design, within each domain as well as between domains.

◆ Open formats queryable in place

Each domain's data is stored in an open table format, directly queryable by any compatible compute engine, without prior duplication into a given platform's proprietary format. Chapter I.2 established, for Databricks, that opening the file format alone is not enough to remove gravity if the governance catalog — metastore, lineage, access control — remains hosted and operated by a single vendor. This proposal therefore holds that the governance layer itself must be hostable independently of any single vendor, failing which decoupling at the file level merely shifts gravity one layer up, without removing it — exactly the mechanism documented in I.2.

This requirement does not remove all technological dependency: a compute engine, a catalog tool, a continuous integration chain remain necessary. It aims specifically at ensuring that none of these choices alone becomes irreversible at the petabyte scale documented in I.2.

HUMAN
III.3
Chapter III · Proposal
The Accepted Cost

This architecture is not free. The reversibility gain it provides has a measurable counterpart, symmetric to the functional freeze accepted in Volume VII's Chapter III.

◆ The accepted cost

Fragmenting data by domain degrades cross-domain queries: a join spanning several domains requires traversing multiple catalogs rather than a single instantaneous source of truth, at a latency and engineering cost unknown to a consolidated warehouse. Decoupling compute from data also deprives the organization of proprietary optimizations — advanced indexing, integrated caching, native acceleration — that a single vendor can offer precisely because it controls the entire stack. Each domain must finally maintain its own integration and governance effort, duplicating work that a centralized platform would pool.

◆ What this architecture does not claim

This proposal does not claim to be superior in all circumstances to consolidation with a single vendor. It suits organizations for which reversibility outweighs immediate cross-domain performance. For use cases requiring real-time consistency across the entire data estate, the engineering and latency cost documented above may be disproportionate to the lock-in risk it prevents.

HUMAN
General Conclusion of the Volume
Three mechanisms documented, a low-gravity architecture accepted at its cost
◆ Synthesis of the three mechanisms documented

Chapter I established that accumulated data exerts a physical and economic attraction on the compute and services surrounding it, independent of any clause addressing the data alone. Chapter II established that the European Data Act genuinely neutralizes the tariff component of this mechanism, but leaves outside its scope the governance, metastore, and model layer aggregated on top of the base service. Chapter III responds specifically to this limit through deliberate fragmentation and decoupling compute from data by design, at the cost stated in III.3: sacrificed cross-domain performance and global consistency.

◆ What this volume does not claim to have solved

This volume does not claim that Snowflake, Databricks, or BigQuery deliberately organize the capture of their customers: the demonstration concerns an economic and physical structure, not an intention. Nor does it claim that the proposed architecture eliminates all technological dependency: the hardware dependency documented in Volume II remains a neutral postulate of this volume, not a problem it solves, and lock-in through identity and encryption, noted elsewhere in this collection, continues to apply to any architecture, including the one proposed in Chapter III. This volume addresses the specific mechanism of data gravity — not the entirety of the capture mechanisms documented in this research collection.

◆ The Thesis in One Sentence

Lock-in through data does not concern the data, but what it attracts; deliberately dispersing its mass has, in turn, a cost that no architecture makes free.

◆ Open Call — Human Pull Request

This volume is an open system awaiting corrections from the real world. We explicitly invite any organization that has deliberately fragmented its data estate, or decoupled its compute from the platform hosting its data, to document its experience and correct or enrich this low-gravity architecture.

◆◆◆

The gravity of data is not measured by its volume, but by what its immobility would cost to rebuild elsewhere.

◆◆◆
Amine RAITI · CC BY-NC-SA 4.0
HUMAN
Methodological Appendix
Narrative summary of the process — from initial framing to sealing

This appendix does not reproduce the full verbatim of the exchanges that produced this volume. It summarizes the process, phase by phase, retaining the moments that concretely changed the text: the requirement to name concrete actors from the framing stage, the partial refusal of Chapter I, the preventive shielding of Chapter II against circularity, the direct validation of Chapter III, and the global audit explicitly distinct from the per-chapter audits.

◆ Why this format rather than the full verbatim

This volume required a demanding initial framing, a partial refusal followed by two drafts for Chapter I, direct shielding for Chapter II, direct validation for Chapter III, then a distinct global audit that tested — and discarded — a proposed enrichment for lack of verifiability. The full verbatim would have constituted a document longer than the volume itself. This summary favors the readability of the process over the exhaustiveness of the citation.

HUMAN
The initial framing
Naming the actors rather than keeping a generic mechanism

The initial framing of Chapter I did not leave the choice of actors illustrating the gravitational mechanism to a generic description. The instruction was explicit: name Snowflake, Databricks, and BigQuery concretely, subject to independent factual verification of each element before integration into the text.

◆ An arbitration settled before any draft

The only point left open at framing stage concerned Chapter I.2: should the three actors be named from the first draft, or should a generic mechanism be kept until a later Gemini framing? Amine settled on naming them immediately, which triggered, before any drafting, an independent search on each of the three actors — their storage format, their governance catalog, their network egress rates — rather than integration from memory.

HUMAN
Chapter I — a refusal, a matrix injection
From a general assertion to a quantified demonstration

The first draft of Chapter I was partially refused, on a precise ground: the theoretical framework was validated, but the empirical argument on BigQuery rested on a network-physics assertion without a quantified order of magnitude, and the notion of kinetic inertia was presented as an evident part of McCrory's (2010) model rather than as a theoretical contribution distinct to the volume.

◆ The matrix injection and its independent verification

The requested correction covered two distinct points. First, the explicit requalification of kinetic inertia as an extension proposed by this volume rather than a direct consequence of McCrory. Second, the injection of an empirical order of magnitude on BigQuery: rather than advancing a figure from memory, an independent search verified 2026 Google Cloud egress rates (0.08 to 0.23 dollars per gigabyte depending on destination) and the reference throughput of 10 Gbit/s, allowing a calculation of an order of magnitude of 80,000 to over 200,000 dollars per petabyte exported, then a theoretical transfer time of about nine days, smoothed in a second pass to be explicitly qualified as a physical floor rather than an observed average.

HUMAN
Chapter II — anticipated shielding, not a fix
A circularity neutralized before any first draft

Chapter II was validated on its first draft, without reservation or revision — but this direct validation is not due to an absence of risk: it results from anticipated shielding at the framing stage, before any drafting.

◆ A circularity risk neutralized before drafting, not corrected afterward

The framing of Chapter II had identified upstream that defining gravity as everything the European Data Act does not cover would make the thesis unfalsifiable by construction. The plan submitted to Gemini therefore distinguished, before any first draft, the exact scope of the "base service" covered by Article 30 of the regulation from the governance layer aggregated on top, and planned to explicitly flag the absence of settled case law since the entry into force in September 2025 as an observational limit rather than a concealment. This preventive shielding explains the immediate validation, unlike Chapter I which had to be corrected after an initial refusal.

HUMAN
Chapter III — doctrinal shift
A proposal with no named reality, an accepted caution

Chapter III required an explicit doctrinal shift: none of the three actors named in Chapters I and II could still be presented as an existing practice. The text had to read entirely as an architectural PROPOSAL, not as a description of a reality deployed by Snowflake, Databricks, or BigQuery.

◆ A documented caution rather than a gap

Two drafting choices were explicitly flagged rather than settled by default: the definition of data mesh in III.1 was deliberately kept minimal, not attached to an author unverified within this session, unlike McCrory and Klemperer cited elsewhere in the volume. And the absence of any financial quantification in III.3, unlike Chapters I and II which rested on verified amounts, was accepted as a limit specific to a chapter explicitly qualified as a theoretical proposal rather than as a lack of rigor. This chapter was validated directly, without an intermediate refusal.

HUMAN
The global audit, distinct from the per-chapter audit
What a whole-work audit can see that a local audit cannot

Each chapter of this volume was validated in isolation before a distinct audit, explicitly covering the complete work, was requested — end-to-end terminological consistency, logical dependency chain between the three chapters, REALITY/PROPOSAL tightness at the scale of the entire volume.

◆ An enrichment proposed, then discarded for lack of verifiability

This global audit produced a recommendation to enrich section I.1 theoretically — an additional reference intended to strengthen the passage from individual software dependency to third-party ecosystem capture. An independent search could confirm neither the year nor the exact content of the proposed reference. Rather than integrating it under reservation, the reference was explicitly abandoned: unlike Volume VII, where the global audit produced an enrichment that was in fact integrated (Teece, 1986), this volume's global audit was here followed by a withdrawal, the factual-verification rule applying to a global-audit recommendation just as it applies to any other named example.

HUMAN
What this process shows
Verifying the whole, including its own recommendations

Nineteen pages of volume body, appendix included, required a demanding framing from the outset, a refusal and a matrix injection on Chapter I, a successful preventive shielding on Chapter II, an accepted doctrinal shift on Chapter III, then a global audit that tested an enrichment and discarded it for lack of sufficient evidence.

◆ The Thesis in One Sentence

The rigor of a volume is not measured only by what it integrates after verification, but also by what it refuses to integrate when verification fails — including when the suggestion comes from the global audit itself.