Can Architecture Built for Al-Qaeda Hold Against Russia and China?

The Count and the Commission's Verdict

The 9/11 intelligence reform ledger has been open for twenty-five years: 2,996 dead, among them 343 members of the Fire Department of New York who climbed toward the fire while everyone else ran from it. Every September the numbers are read aloud in lower Manhattan, at Arlington, and at the field outside Shanksville, because the ceremony exists precisely to resist the bureaucratic impulse to file the count away.

On August 31, 2026, the House Intelligence Committee convened a formal review of intelligence reforms at Shanksville — the site that functions, in the American commemorative imagination, as the one place where passengers wrested the calculation back from the hijackers. The timing was deliberate. A week before the twenty-fifth anniversary, the committee sat with the record of what was built in response and what the building cost.

The 9/11 Commission's diagnosis was structural, not merely personal. A "failure to connect the dots" and a "failure of imagination" — the second charge is the harder one, because imagination cannot be reorganised by statute. The first charge, at least, invited legislation — and that diagnosis launched the largest reorganisation of American intelligence since 1947.

The commemorative calendar in 2026 ran parallel: private ceremonies for families at FerryHawks Stadium, public vigils at the Brooklyn Wall of Remembrance. These events are not ornamental. They are the public side of a debt the commission identified and the legislation tried to pay. Whether the debt was actually settled is what the twenty-fifth anniversary was convened to answer.

What Congress Built in the Rubble: America's Post-9/11 Intelligence Overhaul

The Intelligence Reform and Terrorism Prevention Act of 2004 was the largest reorganisation of American intelligence since the National Security Act of 1947. Congress passed it three years after the towers fell, under the pressure of a Commission report that named the structural fault precisely: not a shortage of intelligence, but the failure to move it between buildings. Eighteen agencies had been running separate ledgers.

The Office of the Director of National Intelligence was the architectural answer. One roof, one authority, eighteen agencies underneath it. The National Counterterrorism Center followed as the operational fix — a single node where CIA and FBI data would finally meet, the information silo dissolved by decree and shared database.

That is the load-bearing wall. The moulding was considerable. The ODNI gained coordinating authority but not command authority; individual agency budgets remained largely under departmental control, which is another way of saying the old loyalties stayed where they were. Centralised oversight without centralised resourcing is a floor plan, not a building.

What the reform changed was the formal architecture of accountability. What it rearranged was the paperwork around existing power. The distinction matters.

When the Joint Inquiry kept returning to the phrase "failure to connect the dots," it was diagnosing a workflow problem. Congress legislated a workflow solution. Whether the dots were now more interesting, or whether the agencies generating them had changed their analytic habits, was a different question — one the new org chart could not answer by itself.

The NCTC was real. The integration was partial. Twenty-five years later, the RAND Corporation finds the agencies reorienting again — toward state actors, hybrid threats, great-power competition. The architecture built for Al-Qaeda is now load-bearing something else entirely.

Centralised oversight without centralised resourcing is a floor plan, not a building.

From the Cave to the Server Farm: The Pivot to State Rivals

The Cybersecurity and Infrastructure Security Agency was established in 2018 — seventeen years after the attacks, and the gap says something. For almost two decades, the institutional weight of American intelligence sat on one side of the scales: non-state actors, ungoverned spaces, the next Mohammed Atta. CISA's founding was the formal acknowledgement that the strategic threat had migrated — that the next catastrophic intrusion would not arrive through a boarding gate.

The RAND Corporation's 2026 assessment describes intelligence agencies reorienting toward a "multi-hazard environment" dominated by state actors — Russia and China foremost. This is not a budget reallocation dressed up as doctrine. The shift from counter-terrorism to hybrid warfare means re-training analysts to read infrastructure vulnerabilities, supply-chain manipulations and influence operations as a single integrated threat picture, rather than discrete incidents for separate desks. The old model sorted threats by method. The new one tracks actors by intent.

The methodology import from public health is less intuitive but not trivial. Modern violence-prevention frameworks now inform how agencies approach domestic radicalisation — the same epidemiological logic applied to disease outbreaks, identifying vectors and intervention points before a case becomes a statistic. Ask the small question first: who bears the cost of a methodology that takes years to mature while the threat moves in months?

The Five Eyes — the United States, United Kingdom, Canada, Australia and New Zealand — are credited, with reasonable evidence and appropriate caution, with preventing a repeat of a mass-casualty domestic attack since 2001. The collective intelligence dividend is real, and the architecture of shared signals and human intelligence that sustains it is not self-maintaining. It requires political will, cleared personnel, and common standards that governments can quietly decide, budget cycle by budget cycle, they can no longer afford.

Ignore the summit photograph — watch the five-power working-group meeting scheduled for the quarter after any given election.

The Suppressed Ledger

In September 2026, New York City released 170,000 pages of internal documents. What they confirmed was not a surprise to the scientists who had said it in 2001. Manhattan's air after the collapse was toxic. The authorities knew.

The Postimees headline that week was direct: Nad valetasid meile 25 aastat. They lied to us for twenty-five years.

The documents do not describe a conspiracy with a centre and a mastermind. They describe something more ordinary and more durable: the institutional reflex to minimise, to reassure, to protect the recovery of the financial district over the respiratory health of the people working in its dust.

The 343 members of the Fire Department of New York who died on the day have names on a wall. The count of those who died in the years after, from cancers and lung disease, is still not closed.

Khalid Sheikh Mohammed remains in detention at Guantanamo Bay, twenty-three years after his capture. His trial has not concluded. This is not an anomaly the system failed to correct. It is the system, holding a fact it cannot process without cost to the architecture built around it.

The cost of institutional deception is specific and measurable. It is not trust in the abstract. It is the credibility a government needs when the next emergency arrives and asks the public to believe what it is being told about the air, the water, the threat level.

That credibility is not rebuilt by ceremony. It is spent once, slowly, and then it is gone, and the next crisis communication lands on a floor that will not hold.

The View from the Small-Nation Floor

Sven Sakkov's taxonomy is blunt and useful: 9/11 opened a long war, and the twenty-five years since have been a continuous redefinition of what Western security paradigms can bear. From Washington that framing sounds strategic. From Tallinn it sounds existential — and the difference is not rhetorical.

Rainer Saks distils the standing doctrine change to a single axis: the move from reactive intelligence to proactive prevention of strategic surprise. Small nations cannot afford the luxury of reaction. They have no depth — geographic, demographic or institutional — to absorb the first blow and reconstitute.

The lesson that Langley drew after 2001 as a reform objective, Estonia absorbed as a founding condition.

The Molotov-Ribbentrop logic is not ancient history here. It is the template against which every "stable order" is measured — the demonstration that a great-power accommodation, struck in an afternoon, can sell a small nation's sovereignty as a line item in someone else's ledger. Believing that an eternal order will hold is not naivety in the Estonian reading; it is the specific error of 1939, and the correction has been written into institutional memory.

Which is why the Five Eyes dividend reads differently in Tallinn than in Washington. Allied intelligence solidarity — the shared SIGINT, the common threat picture — is not a supplement to a sovereign capability. It is the capability.

A borrowed asset, certainly, but borrowed with clear eyes: the fine print of alliance intelligence frameworks matters more to a state of 1.4 million people than it does to the country that drafted it. The structural question is not whether the alliance shares. It is what it shares, and with whom, when the threat is the ally's own strategic discomfort.

The One Marker Worth Watching

Two signals will tell more than any anniversary speech. Khalid Sheikh Mohammed has been held at Guantanamo Bay for twenty-three years without a verdict. That is not due process in suspension; it is a structural admission that the legal architecture built around the "war on terror" cannot close the cases the war produced.

Watch CISA's next budget line. The agency, established in 2018 to handle the hybrid threats that 9/11's reform cycle did not anticipate, has a mandate that is wide and a funding base that is reviewed annually. Whether Congress sustains that line beyond the anniversary cycle is the honest signal of institutional priority — not the ceremony.

The evidence forces us to hold three things simultaneously: twenty-five years of genuine post-9/11 intelligence reform, 170,000 pages of suppressed air-quality documents, and a trial that has not begun. If the military commissions produce a judgment before the next anniversary, the system will have answered one charge against itself. If they do not, the answer is already in the record.