The Town That Got Watched

On Tuesday, July 21, the town council of Irmo, South Carolina — population roughly 12,000 — approved 22 additional Flock license plate readers, bringing the town to 33. The contract runs $403,000, out of general funds. That is roughly one automated camera for every 360 residents, and more cameras than the police department has people: the town's own site lists the department at somewhere between 26 and 29 sworn and civilian personnel combined.

The vote was 4–1, with councilman Gabriel Penfield dissenting. More than ten residents came to the podium. Speakers were held to three minutes, sign-up required in advance. At least one person was removed as the room got hot.

One of the people who signed up was Matthew Gault, who reports for 404 Media and has spent considerable time writing about this exact company. He brought a three-page presentation: Irmo's own plate searches turning up in other states' logs, the security record, the documented false arrests. He ran out of time. The cameras passed anyway.

I want to be precise about why this matters, because the obvious reading — small town gets cameras, privacy guy loses vote — is the least interesting thing in the story.

Start with what that reading gets wrong. The process was not suppressed. A dozen people spoke. A councilman voted no. The local newspaper covered it, twice before the vote and once after. By every civic metric we normally use, Irmo's democracy performed. That is the part worth sitting with, and it is why this is not a story about a town council being sneaky.

i · the case for the cameras

Police Chief Robert Dale told the council the cameras help solve crimes more quickly. That is the actual proposition on the table, and it deserves better than a sneer. Automated plate readers do find stolen vehicles. Flock has run an AMBER Alert distribution partnership with the National Center for Missing & Exploited Children since 2021, and a plate reader is a genuinely good instrument for the specific problem of this car, right now, which way did it go. At least one Irmo resident stood up to say the cameras in her neighborhood were there because the neighborhood asked for them, and that they had protected her and her community. I have no basis to tell her she is wrong about her own street.

So take the strongest version: a tool that occasionally recovers a child, routinely recovers cars, and is wanted by some of the people it watches. Why isn't that the end of it?

Because every claim made for the system is local and instantaneous — this street, this car, today — and every cost it imposes is non-local and durable. The chief is describing what the camera does in the second it reads a plate. The objection is about what happens to that read in the following months, in databases he does not administer, queried by agencies he has never met, for purposes he will never be told. Both sides of that podium were being honest. They were describing different objects, and only one of the two was on the agenda.

ii · nobody designed this

The delivery mechanism is procurement. There was no floor debate, no committee, no roll call anyone outside Lexington County will remember. A line item. The architecture of a continuously watched society is being installed one purchase order at a time.

It is tempting — and I nearly wrote it this way — to call that boring on purpose, as though someone engineered municipal procurement to slip past scrutiny. Nobody did. Municipal purchasing rules were built for snowplows and asphalt, decades before anything in a town's inventory phoned home to a company in Atlanta. There is no designer here to subpoena.

That is the actual problem, and it is worse than a conspiracy. What Irmo demonstrates is that aggregation falls out by default when a networked product meets a procurement process built for non-networked goods. A snowplow bought in Irmo stays in Irmo. A camera bought in Irmo does not. Nothing in the process is equipped to notice the difference, because the difference did not exist when the process was written. An emergent trap has no villain to catch and no single decision to reverse — which is precisely why it keeps working.

The sizing does the rest. $403,000 in a town of 12,000 is too small to organize a state around. Twenty-two cameras is too few to march about. Three minutes is too short to explain a national pattern — something Gault discovered empirically, mid-sentence. Each decision sits, without anyone arranging it, just beneath the threshold at which resistance would form. The sum of several thousand such decisions is a national vehicle-tracking network that no national body ever voted on, because it was never once a national question.

iii · the network is the product

Here is the mechanism that makes that sum real, and it is not the purchase orders. Thirty-three cameras in Irmo are just thirty-three cameras in Irmo. What converts them into a piece of national infrastructure is Flock's inter-agency sharing.

By default, reads collected by a local department can be queried by other agencies through Flock's national lookup network, unless local policy or contract terms narrow that access. The default is the whole story. Officials in Los Altos, California said Flock had switched on statewide and national lookup for their cameras without notifying the city or asking permission. An audit of that same small California network found police in Massachusetts, Georgia and elsewhere appearing in its logs hundreds of times, including twenty out-of-state searches recorded under "immigration violation" in the first two months of 2025. California, Illinois and Virginia have since had national lookup restricted to comply with state law — which tells you it was on until a legislature made it stop.

This is why Gault's slide about Irmo's searches surfacing in other states' logs was the most important thing in his three minutes, and it is why he should have led with it. The cameras are the visible object. The sharing default is the product.

iv · the failure modes are not hypothetical

404 Media previously found Flock had left law enforcement search queries sitting in cached public search results — plate numbers, and the terms officers typed to justify the lookup. In December 2025 the same outlet found at least 60 of the company's AI-enabled Condor cameras, which pan, tilt, zoom and track people rather than plates, exposed to the open internet: live feeds, thirty days of archived video, administrator panels, settings, diagnostics and logs, no password required. A reporter stood in a street in Bakersfield and watched himself on his own phone.

The accuracy record is worse than the security record. In Toledo, Ohio, a Flock camera misread a 7 as a 2 on Brandon Upchurch's plate and flagged his car as stolen; he was stopped at gunpoint, bitten by a police dog, and arrested. The charges were dismissed. He was hospitalized, lost work and housing, and settled for $35,000. In Morristown, Tennessee, the vanity plate LOVEY was read as the stolen L0VEY, and an elderly couple was ordered out of their car at gunpoint and handcuffed in front of their granddaughter. The Institute for Justice has now catalogued dozens of such stops, detentions and jailings. This is the standard arc: the security is theater, the accuracy is a demo-environment number, and the consequences land on whoever the OCR decides you are.

v · what irmo actually bought

Coherenceism holds that you change behavior through structure rather than instruction — environmental design over moralizing. That principle is usually offered hopefully, and it deserves its dark twin. Nobody in Irmo has to be told they are being watched. Nobody has to agree to it. You change the environment people drive through, and the behavior follows on its own. Consent was not denied. It was routed around, because there was never a venue operating at the scale where consent would have meant anything.

Which is the trap. You cannot organize against an aggregate from inside an instance. Gault did every single thing a citizen is supposed to do — showed up, prepared, cited primary sources, spoke on the record, in his own town. The lever he was handed operates at three minutes and 22 cameras. The harm operates at a continental scale. Those are not the same machine, and only one of them has a public comment period.

But the deepest version is simpler than any of that. Irmo did not buy cameras. Irmo joined a jurisdiction.

The town has no ownership of and no governance over the network its residents' movements now feed. It rented a tool and surrendered the layer. Flock deletes plate reads on a rolling thirty-day default — accurate, and not reassuring, because that number is a setting the company says can be raised or lowered to match a customer's law or policy. Retention is a dial, and the dial lives in a console Irmo does not own. A future council can vote the cameras back out and still have no say over what was collected, who it was shared with, or how long anyone else keeps it. Sovereignty was not lost at the moment of surveillance. It was lost at the moment of procurement, and the council genuinely did not know which kind of document it was signing.

If that structure sounds familiar, it should. Last summer the French Senate put the same question to Microsoft about 68 million people's data and got the same answer in a more expensive suit: the engineering works exactly as promised, the terms were genuinely disclosed, and the buyer thought it was purchasing a product when it was accepting somebody else's jurisdiction. Irmo is that story at 12,000 people. The scale changes; the shape does not.

Irmo will get its 33 cameras, and most likely nothing visible will happen for a long while — which is exactly what "working correctly" looks like for infrastructure of this kind. The town will find out what it bought the way everyone else has: by reading about itself in someone else's leaked search logs.

I'll leave the timer running.