Congress spent fifteen months building a Russia sanctions bill. It passed the Senate 86 to 11 and the House 262 to 159. The president had blocked it for over a year. When it finally cleared, the reporting was that he might lead with business deals for Moscow before using any of it.
That is not a story about one man’s instincts. It is a story about how modern guarantees are built. Nothing in the Western security architecture has been repealed this year. Every treaty stands, every statute is on the books, every alliance commitment is intact. What has changed is that each one now turns on a certification, a waiver, or a discretionary act that a single official may decline to perform.
That is the fine line. Not the gap between war and peace, but the one between a commitment existing and a commitment being carried out.
Four signatures
Consider what sits on desks at the moment.
The Graham Act says the president shall impose sanctions on Putin, his officials, Russian banks, the defence sector and the shadow fleet. Mandatory language, statutory clocks, thirty days and then every hundred and eighty. But Section 115 lets him waive any of it by certifying to Congress that doing so serves the national interest. The obligation is real. So is the pen.
The Pentagon, meanwhile, is weighing the withdrawal of 25,000 American troops from Europe, perhaps 40,000, from a presence of 80,000, along with aircraft, ships and weapons. The 2026 NDAA forbids going below 76,000 without certifying to Congress that the reduction will not harm American or NATO security. So the cut is legally blocked, unless the Defence Secretary signs a piece of paper saying that removing a third of American forces is harmless. He is currently facing eight articles of impeachment. He receives the final recommendation on 6 November, three days after the midterms.
The war’s ending runs on the same mechanism. Sanctions relief for Russia requires certifying that Moscow has signed a peace agreement Ukraine accepts, which is the most underrated provision in the bill: Congress has written Ukrainian consent into the legal definition of peace. Yet the drafts circulating since last November asked Ukraine to cede the Donbas, cap its army at 600,000, write a NATO prohibition into its constitution and bar allied troops from its territory. Those terms were rejected by Kyiv and Brussels, not by Washington.
And then there is the alliance itself. Article 5 obliges consultation, followed by national decisions. It has never been tested by the kind of pressure now being applied: an explosive drone beside a Ukrainian cargo aircraft at a NATO logistics airport, warships firing flares at allied aircraft, arson at factories supplying Ukraine, a rehearsal for cutting the Atlantic cables. Every one of those was filed under “hybrid” and absorbed. Asked whether the Danish incident warranted consultations, Denmark’s defence minister said: “We are not there.”
Four commitments, four discretionary acts. None requires anyone to break a promise. Each requires only that somebody decline to keep one, in writing, with a reason.
Why the design is dangerous
There is a decent case for building guarantees this way. Executives need flexibility, legislatures cannot foresee every eventuality, and a waiver is better than a statute nobody can implement.
But discretion carries a cost that nobody prices in, and it is borne in Moscow.
Deterrence is a message about what will happen. A guarantee that depends on a signature is a message about what might happen, decided later, by a named individual whose incentives an adversary can study at leisure. That turns a wall into a negotiation. And once it is a negotiation, the adversary’s task is no longer to defeat the guarantee. It is to work out who holds the pen, and what they want.
That is precisely what Russia has spent this year doing. Probing below the threshold to see what gets absorbed. Feeding Iran targeting data and munitions to keep America occupied elsewhere. Watching to see whether a Congress that votes 86 to 11 can compel an unwilling president to act.
It has also been shown a working demonstration. When Yemeni forces took Mokha and Saudi Arabia asked for American help, the Mecca defence pact signed only weeks earlier turned out to require ratification, and Washington kept its forces on Iran. Nobody was defeated. Nobody broke a treaty. The guarantees simply did not fire. That happened in the Gulf, but the lesson was published worldwide.
Who can be told
There is a second line, drawn inside Europe, and it is harder to talk about.
Yesterday Macron gathered France’s party leaders and presidential candidates in the Véga crisis room beneath the Élysée, alongside the heads of the DGSE, DGSI, military intelligence and the SGDSN, to brief them on the “rapid deterioration” of the international situation. Two leaders were not invited: Marine Le Pen and Jean-Luc Mélenchon. In Germany, the AfD is likewise kept away from sensitive material.
It would be comfortable to call this establishment gatekeeping. The record says otherwise.
In September 2025 a Dresden court jailed Jian Guo, aide to the AfD MEP Maximilian Krah, for four years and nine months for working as a Chinese intelligence agent since 2002. He obtained more than 500 documents, including European Parliament material classified as particularly sensitive, and gathered information on senior AfD figures, Weidel and Chrupalla among them. His accomplice worked for a logistics firm at Leipzig airport and supplied details of flights, cargo, military transports and people connected to a German arms company.
Then, last November, Der Spiegel reported that AfD MPs had systematically requested government information on military transport, drone warfare, cyber defence and vulnerabilities in critical infrastructure. The chairman of the Bundestag defence committee confirmed the requests went well beyond normal parliamentary scrutiny. Pistorius shared the suspicion that they amounted to coordinated attempts to identify weaknesses. A single enquiry in June asked more than fifty questions about Bundeswehr drone readiness and counter-drone strategy. The government classified several answers and refused more than ten outright.
Two months later a drone carrying explosives was found beside a Ukrainian cargo aircraft at Leipzig/Halle. Berlin has attributed the attempt to Russia and named GRU-linked suspects. I make no claim of a connection, and none has been alleged. But note what was asked for, and where the answers would have pointed.
So the exclusions are not political hygiene. They are counter-intelligence, and they are defensible. The difficulty lies in what they imply. These are not fringe parties. The AfD polls at or near the top in Germany, and the RN is a leading contender for 2027. Europe is now briefing everybody except the people most likely to inherit the briefings.
That is the same fine line in domestic form. The intelligence picture is real, the exclusion is justified, and the succession is unresolved. A party kept outside the assessment has every incentive to reject it, and a ready-made grievance to campaign upon. Should one of them win, it inherits a security apparatus whose analysis it was never shown and has spent years denouncing.
Moscow need do nothing whatever to create that problem. It has only to wait.
The seven-week window
On 17 September, Thomas Massie forced a vote on eight articles of impeachment against the American Defence Secretary. The Speaker cancelled the session and sent the House home until after 3 November. Massie’s account is that a whip check found Republicans who would either vote yes or refuse to be recorded defending Hegseth.
So there will be no oversight, no war powers votes and no hearings on the troop review for seven weeks. On the Tuesday, the House had passed a war powers resolution 220 to 204, the third ordering an end to the Iran war, and the executive carried on regardless.
The troop recommendation lands on 6 November. Congress returns after 3 November. The sequencing may be coincidence. It is also the ideal arrangement for anyone who would rather not be questioned in advance.
Meanwhile American intelligence has assessed that Putin likely believes the United States will not risk another conflict, and that this belief could give him the confidence to act. The assessment was serious enough that the CIA director flew to Moscow unannounced in August to meet the heads of the SVR and FSB. Not the president, note, but the intelligence services, the people who control what reaches him. The last CIA director to make that journey was William Burns in November 2021, warning against an invasion of Ukraine. Russia invaded three months later.
Three months from August is late November.
Honest about the threat, unready for it
Not everyone is hiding behind the vocabulary. Britain is rewriting its classified War Book for the first time since 2004, and the Chief of the Defence Staff, Sir Richard Knighton, said this week that the threat from Russia makes this the most dangerous period of his 35-year career. Households are to be told to keep tinned food, bottled water, medicines, a torch and a wind-up radio, enough to manage several days without power or water. A home defence exercise, the largest in decades, is pencilled in for 2027.
That is a state treating the threshold as close rather than distant, and it deserves credit for saying so. But look at what is actually being transferred. The War Book lapsed in 2004 and its replacement is not yet written. The vulnerabilities that matter, the interconnectors, the Norwegian gas pipeline, the offshore wind farms, remain exactly where they were, and officials concede that stockpiling advice will not touch them.
Compare Finland. A population of 5.5 million supports 23,000 professional soldiers, a trained reserve approaching a million and 280,000 mobilisable at short notice, on 2.5% of GDP against Britain’s 2.3%. Britain, with 66 million people, fields 70,000. Finland built that over sixty years, binding hospitals, water utilities and company boards into the same crisis planning. It is the one country in Europe that could genuinely absorb an American withdrawal, and it took two generations to get there.
Candour about the threshold and the capacity to meet it are entirely different things. Britain now has rather more of the first than the second.
Is this real - or is it just NAFO talking?
The strongest counter-argument to this line is burden-shifting. The Americans have said for years that Europe should carry its own conventional defence, and a drawdown forces the issue.
It does not survive the arithmetic. Nobody in Europe has 25,000 deployable troops spare, let alone 40,000. Germany cannot fill the Bundeswehr it already has. The British Army is the smallest since Napoleon and missing its recruitment targets. Poland is the one real exception, and every Polish soldier is there to defend Poland. Money does not buy time: raising, training and certifying formations takes years, as the Finnish example rather proves.
Infantry is not the hole in any case. The Americans supply what nobody else has: suppression of enemy air defences, strategic airlift, air-to-air refuelling, deep ISR, satellite communications, precision munitions stockpiles, theatre command and control, and the nuclear guarantee beneath the lot. Europe could produce 40,000 riflemen tomorrow and still not replace a single tanker wing.
Burden-shifting works only if the transfer is sequenced against European capability arriving. Reviewing a one-third cut now, with a recommendation in November, is not sequencing. It is withdrawal with a hopeful label.
The other fair objection is the base rate. People have predicted NATO’s collapse before, with the brain-death argument and the 2020 drawdown, and the alliance held. That record deserves respect. It is why what follows is a set of tests rather than a prediction.
Meanwhile, by decree
On the evening of 17 September, the same day Congress went home and the day after the sanctions bill passed, Putin signed a decree placing the Russian assets of 31 foreign companies under temporary administration. Among them: the whole of Auchan’s Russian arm, Nestlé Russia and Nestlé Kuban, the chain formerly known as Leroy Merlin, three FM Logistic entities and eight belonging to Batilogistic. Around 600 billion roubles, some six billion euros.
The administrator is a company called L.E.V. Management, registered in Moscow in October 2024, classed as a microenterprise with charter capital of 15,000 roubles, and previously advertised for sale as a dormant shell with no revenue and no bank account. Six billion euros of Western assets, handed to an entity capitalised at roughly £130.
Formally, none of this is nationalisation. It uses a framework from April 2023 that strips owners of control and gives the administrator an owner’s powers without transferring title. Danone and Baltika went through the same door, and both ended in forced sales to well-connected buyers. Nestlé says it is assessing its options. Auchan has asked for clarification and says its shops are trading as normal.
Putin accelerated this machinery last autumn, precisely as the EU moved to lend Ukraine money raised from frozen Russian assets. So the sequence this week reads: Congress hands the president sanctions authority, the president’s people brief that business deals might come first, and Moscow seizes six billion euros of European property the following evening.
The line worth drawing
I have avoided reaching for 1938, and readers should too. The demands have been made and resisted. That is not Munich. Munich was a signature, carried out, with the country being carved up excluded from the room.
But the distance between those two things is now measured in refusals rather than in structures. Go through this year’s decisions and the thing that has reliably prevented the worst outcomes is not American restraint, and it is not statutory limits, because every limit has a signable exception. It is refusal by the people being bargained over. The November framework was diluted because Ukraine would not accept it and the Europeans rejected the military caps outright. That is the entire margin: not a wall but a refusal, sustained by governments under continuous pressure, with their own elections coming.
So here is a standard by which to judge whether I am exaggerating. Watch for sanctions waivers issued in bulk with thin justifications. Watch whether the certification for a troop cut below 76,000 is ever signed, and what it says when it is. Watch whether a summit format ends with Ukraine briefed rather than present. And watch whether anything from this summer, the drone at Leipzig, the flares off Gedser, the arson, the cable rehearsal, ever produces a response beyond a summons and a statement.
Notice, too, what all of it has in common. The seizures are not seizures, they are temporary administration. The waivers are not abandonment, they are certifications in the national interest. The withdrawal is not withdrawal, it is a posture review. The attacks are not attacks, they are hybrid incidents. On both sides of this confrontation, the most consequential acts of the year are being carried out in documents that insist nothing much is happening.
That is how the fine line gets crossed. Not with a declaration, but with a signature, quietly, in a paper most people never read.
This is a follow up to “This is Not Hybrid” - both together should form a wake up call for all of us.
