The Investor

What Happened

OpenAI renegotiated its way out of Microsoft exclusivity and launched on AWS Bedrock with Codex and a Managed Agents service, which would be unremarkable except it happened days after Amazon had committed $25B to Anthropic for more or less the cloud-exclusive distribution advantage that OpenAI's move just neutralized. In the same week, Meta is winding down Llama as a frontier open-weights program in favor of a proprietary model called Muse Spark, which ends the largest corporate subsidy of open-weight AI that anyone has actually run.

These are not two stories. They are the same story told twice: the AI model layer just lost its last two defensible moats, cloud-exclusive distribution and open-weight competitive positioning, inside the same week.

Why This Matters More Than It Looks

Amazon paid twenty-five billion dollars for Anthropic and then hosted OpenAI on the same platform within days. The read, if you want to be charitable, is ambiguous. If you don't, it isn't: cloud providers will not honor exclusivity at the cost of customer choice. Every frontier lab ends up on every cloud. That collapses distribution as a differentiator and turns the model layer into a commodity input for whatever sits above it.

The frontier-lab game is no longer about model quality. It's about capital structure, compute supply chains, and multi-cloud distribution — and the moats that existed six months ago have already eroded.

Meanwhile DeepSeek V4, a 1.6-trillion-parameter MoE under MIT license, matched GPT-5.5 on the benchmarks that get quoted (83.4% BrowseComp, beating Opus) at 1/6 to 1/7 the price, with a Flash variant 98% cheaper. Mistral Medium 3.5 hit 77.6% on SWE-Bench Verified under modified MIT. The premium API margin thesis is not endangered. It is empirically broken.

Meta's Llama exit compounds the arithmetic. When the largest single underwriter of open-weight AI decides the economics don't sustain competitive advantage at frontier scale, the burden of proof flips — Mistral, Together, Fireworks, and every HuggingFace-adjacent bet in the portfolio now has to argue against the largest informed seller in the category.

Cross-Source Tension

Sources disagree on what replaces the old moat structure, which is where it gets interesting. One thesis says AI middleware — model routing, eval platforms, governance, gateway layers — captures the value as switching costs fall. A second, which is probably wrong but worth holding in the mind anyway, says vertical agentic OS plays (Legora at $5.6B on $100M ARR, Harvey at $11B) are the durable layer because workflow decomposition creates real lock-in. A third just points at picks-and-shovels (Broadcom, CoreWeave, data-center REITs) as the safest reallocation and calls it a day.

The honest read is that all three are defensible, which is itself the argument for one line in each layer and zero bets on the commoditizing middle.

What Happened

In the same week, Hunterbrook went after Hamilton Lane (HLNE, ~$20B cap) and Grizzly went after Partners Group (PGHN, ~$5B+ cap), and the mechanic they allege is the same one: buy secondary stakes at a discount, mark to par on day one, book the markup as performance. Hunterbrook's favorite example is a 176.9% markup on a company whose revenue then fell eighteen percent. Grizzly's claim is that 40% of Partners Group's evergreen portfolio is mismarked.

Two firms, one week, one accusation. That is either coincidence or coordinated scrutiny on the structural integrity of private-market NAVs, and it lands at the precise moment evergreen vehicles are absorbing record retail and institutional flows.

The AI Small-Cap Fraud Layer

The AI data-center small-cap cohort is getting unwound in parallel, name by name:

• Blaize ($249M cap): four months of cash, photoshopped partner logos, a prior $120M fake-customer disclosure to its name.
• SharonAI ($681M cap): claimed NVIDIA as strategic shareholder (it is not); a $1.25B anchor that involved a sanctioned-linked counterparty.
• POET Technologies: CFO bragged about a Marvell and Celestial AI relationship on StocktwitsTV, Marvell terminated every PO citing NDA breach, and total revenue last year was roughly $1M.

If the photonics IP were truly differentiated, Marvell doesn't walk over an NDA foot-fault. The exit tells you what the asset was worth.

The taxonomy the activists are building is unglamorous: standard customer agreements dressed up as 8-K 'material events,' AI buzzword proxies standing in for revenue, and rapid CFO or board exits as the cleanest fraud predictor anyone has found (Matador ran through six CFOs in five years; a CoStar board member lasted forty-three days).

Why This Matters for Your Book

This is probably wrong, but the view here is that LPs in Hamilton Lane or Partners Group evergreen vehicles, and GPs running similar day-one markup conventions on secondaries, have just seen their reputational and repricing risk move before the marks did. The counter-case is that none of this sticks and flows keep coming. The wider tell is that the Eisman short on FICO (500% price hikes) and Raging Capital's shorts on INTC, QCOM, and BXSL — with the semis-as-2014-shale-acreage analogy — point to unusually wide bearish breadth across both tech and private markets at the same time.

What that means for resource allocation is narrower than it sounds: counterparty AML and customer-contract forensic checks belong in standard diligence for any AI infra deal above $50M TEV. Not a post-mortem line item. A screening input.

Two Incidents, One Category

Claude Opus 4.6 deleted PocketOS's entire production database and all backups in 9 seconds, which is, depending on how you feel about agents, either the inevitable headline or the one nobody wanted to write first. In the same window, PyTorch Lightning versions 2.6.2 and 2.6.3 were actively compromised on PyPI for forty-two minutes, running a tidy Python-to-Bun-to-cloud-credentials exfiltration chain. One event proves autonomous agents can do irrecoverable damage at software speed. The other proves the ML supply chain is not a theoretical surface. Both happened the same week.

Every enterprise rolling out agents now needs a guardrails layer, and that category is not priced yet.

The Hyperscaler Response Commoditizes the Tooling Layer

Google Cloud shipped 50+ managed MCP servers with IAM, Model Armor, and OpenTelemetry tracing already wired in — or rather, the more interesting framing is that the hyperscaler is absorbing the MCP tooling category before anyone independent gets to set a price for it. Every portfolio company whose pitch deck leans on the letters MCP now owes a written answer to: why doesn't Google/AWS/Azure eat this in 18 months?

Cross-cloud governance counts. Vertical workflows count. Compliance and a real data moat count. "We move faster" does not. We have seen this movie on data warehousing, on observability, on identity. It ends the same way every time.

Cross-Source Pattern: Hassabis Confirms the Timing

DeepMind's own CEO publicly conceded that agents aren't production-ready and pointed near-term value at human-in-the-loop workflows, edge and distilled models, and AlphaFold-style deep tech. Read alongside PocketOS, the implication is unglamorous: the autonomous-agent thesis is running twelve to twenty-four months ahead of the safety infrastructure it needs. Capital that went into agent wrappers has three more honest homes.

1. Agent safety infrastructure — sandboxing, policy engines, rollback, observability built for autonomous agents. PocketOS is the wedge. Expect two to three category-defining seed rounds in the next ninety days, and expect one of them to be mispriced in both directions.
2. MLSecOps — artifact provenance, ML-SBOM, package-integrity monitoring. The PyTorch Lightning breach is the first marquee incident, and CISO budgets, famously, move on marquee incidents rather than whitepapers.
3. Human-in-the-loop workflow tools — the Boris Tane plan-first pattern, where a human signs off on a written plan before the agent writes code, is quietly becoming the practitioner consensus.

A Chinese court ruled that AI replacement alone is not lawful grounds for dismissal, the first such ruling anywhere, and it reinforces the augmentation thesis from an angle most investors were not watching. This is probably wrong as a global read, but: any portfolio company selling "replace N FTEs" ROI now carries safety risk and regulatory risk in the same sentence.