For most of the last decade, the consensus among marketers and technologists has been grim: the open web is dying, and the walled gardens are dancing on its grave. Users spend the overwhelming majority of their digital lives inside a handful of platforms—Meta’s apps, TikTok, YouTube, Amazon, Google. Ad budgets have followed attention into those pretty gardens, a.k.a. platforms.
Publishers that once owned their audiences now rent them back from the platforms at rising prices. SEO and AI search practices are collapsing into an arms race between content farms and algorithm updates. Every year, the gardens grow taller walls, and every year, another slice of the independent web goes dark.
If you drew the trendline forward, the conclusion was obvious. In a few years, the open web would be a ghost town of archived blogs and abandoned forums, while all meaningful commercial and social activity would happen behind five or six logos. Marketing would become the art of renting space inside other companies’ ecosystems, forever.
That trendline is about to break. Not because the walled gardens are weakening, but because something stronger and stranger is happening: the very concept of a “destination” on the internet is dissolving.
The agent changes the terrain
Here is the underappreciated shift. When a person browses the web today, they experience it as a series of places—apps they open, sites they visit, feeds they scroll. The walled garden wins because it owns the place. That is today’s state on online activity.
Tomorrow, the game changer is a Personal AI Trust Agent, (PAITA).
To an agent, a walled garden and an open website are not meaningfully different categories. Both are web destinations that expose information and actions. Some have APIs. Some require login. Some return clean JSON, some return HTML that needs parsing. But the experiential moat that walled gardens have built around human attention—the infinite scroll, the red dot, the algorithmic hit of novelty—is invisible to AI tech that isn’t wired for dopamine.
This is the unlock. The walls are real for humans. They are near-transparent for agents.
The Trust Web
What emerges on the other side of this shift doesn’t yet have a settled name, but it’s worth calling the Trust Web. It isn’t a replacement for the open web or the walled gardens. It’s a layer that sits on top of both.
The architecture is straightforward. Each person “owns” an AI agent that acts on their behalf. The agent knows the person’s preferences, constraints, calendar, budget, tastes, and relationships—not because it ships that data to a central server, but because it runs locally or inside a mechanism the person controls, i.e. sandbox. When the person needs something—a flight, a restaurant, a product, a piece of information, a service—the agent goes and gets it. It negotiates with other agents. It queries APIs inside walled gardens. It fetches pages on the open web. It returns with options, recommendations, or completed tasks.
In this model, the open/closed web distinction collapses. Walled gardens can no longer shut out agents working for their users, and open-web publishers finally get discovered on the strength of relevance rather than reach. The result is a single online experience, stitched together by the agent.The merger isn’t ideological—it’s functional and practical. Both sides are now speaking speak the same machine dialect. This is the online singularity.
Why the data stays home: An asymmetric system once again becomes symmetric.
The most radical part of this shift is what happens to data. Today, the business model of both walled-gardens and adtech requires individual surveillance which is the monetization pillar of boths “types” of web experiences. The harvesting behavior at scale: clicks, dwell time, purchases, location, social graph, inferred intent, drive the web’s response in everything from the recommendation engines to the ad auctions. The content monetization model of the web has also fueled twenty years of escalating unease about surveillance.
Personal agents break the harvest at the root. When an agent acts on the person’s behalf, the signals that used to leak out as “data exhaust” are internalized. The agent knows why you searched, what you almost bought, and what you rejected—but that context stays local to you. What the platform sees is a clean, purposeful query: “book this flight,” “buy this item,” “schedule this meeting.” The messy stream of behavioral signals that fed targeting models for a generation simply isn’t there anymore. In this model, intent is initiated by the user which in effect, turns all online activity into a massive pull engine where users are in charge.
This is not a prediction that surveillance capitalism dies overnight. Platforms will fight it. Some will try to build their own agents that keep the data flywheel intact. But the AI winds are against them: a user whose agent runs inside their trust boundary is much harder to profile than a user whose every tap is logged. The default shifts.
What marketers should actually do
For marketers, the implication is not to abandon the walled gardens, and not to pile back into the open web either. It’s to prepare for a buyer who is, increasingly, a piece of software acting on behalf of a person whose attention is no longer directly available to you.
That means four things.
First, structured content and machine-readable claims become competitive advantages rather than nice-to-haves. If your product specs, pricing, reviews, availability, and policies aren’t cleanly parseable, you’re invisible to agents—no matter how beautiful your homepage is.
Second, brand matters more, not less. An agent sorting through a dozen functionally similar options will lean on trust signals that only strong brands accumulate. When the rational filters get automated, the emotional and reputational ones carry more weight, not less.
Third, first-party relationships—email, accounts, direct APIs, loyalty programs—gain real value, because they’re how you communicate with a person’s agent without going through an intermediary that can deprioritize you.
Fourth, creative work shifts. You aren’t just persuading a human with a glossy ad; you’re also giving an agent a reason to surface you in the first place. Those are different jobs, with different craft, and most marketing organizations are staffed for only the first one.
The singularity, reframed
The word singularity usually conjures images of AI consuming the internet and leaving humans behind. The online singularity is almost the opposite. It’s the point at which the machinery of the web where a user is subject to the whims on whatever site they find themselves, (open or closed), to a time when artificial distinction between open and closed collapses, and the reins go back to individuals through the agents that represent them.
The walled gardens won the last decade by owning attention. The next decade will be won by whoever earns trust inside the layer that sits on top of everything—a layer the gardens don’t own, the open web doesn’t own, and, for the first time in a long time, users might.
Welcome to The Trust Web where users will trust the web they create for themselves.
