The Investor

What Happened

OpenAI spun up DeployCo, a majority-owned deployment subsidiary, at $10B pre-money with four billion dollars from TPG, Advent, Bain Capital, Brookfield, and Goldman Sachs, and McKinsey, Bain & Company, and Capgemini attached as operating partners. The interesting term, or rather the one that tells you what the sponsors actually think, is the guaranteed 17.5% minimum return to the PE co-investors with capped upside. That is structured credit wearing an equity costume. Tomoro came along on the same day, 150 forward-deployed engineers, as the rollup template.

Why This Kills the Independent AI-SI Thesis

The three consulting houses with the deepest enterprise rolodexes, the largest benches, and the most discretionary capital — McKinsey, Bain, and Capgemini — looked at the AI deployment market and picked LP-adjacent exposure over independent execution. Every dollar routed here is a dollar not spent building a competing in-house practice. That is capitulation dressed as partnership.

When the Big Three invest in your consulting arm instead of competing with it, the category has been called. The window to exit or reposition pure-play AI implementation bets is measured in quarters, not years.

The 17.5% floor is the tell. PE was not willing to underwrite the equity story at $10B without structural downside protection, which means the insiders view this as infrastructure yield rather than venture growth. Independent AI-SIs are left with three futures: discount acquisition into DeployCo, margin compression from the McKinsey brand on the other side of every pitch, or a vertical niche narrow enough to survive commoditization.

The $6.6B Secondary Creates a Talent Explosion

Running alongside all of this, OpenAI's employee secondary cleared 600+ sellers, ~75 hitting the $30M cap after the cap tripled from ten million mid-deal on excess demand, with Thrive, SoftBank, Dragoneer, MGX, and T. Rowe Price on the buy side. No primary dollars went to OpenAI. This is the most concentrated pool of founder-grade AI talent with immediate liquidity the industry has ever assembled. Cooling-off timers started in October. The best seed deal flow of 2026 is sitting inside that cohort.

Cross-Source Tension

The consensus read is bullish for OpenAI's enterprise dominance. The dissent, worth stating because it might be right, points at the $700B AI capex vs. $540B revenue gap and notes that if eighty percent of AI-driven layoffs produced no measurable ROI, the deployment contracts at the far end of DeployCo may never clear the four billion dollar entry fee. The counter to the counter is that OpenAI is buying enterprise lock-in, not next year's margin. Both can be true. Only one gets paid on the PE clock.

The Convergence

Start with the number that does the work: autonomous hacking success by agents went from six percent to eighty-one percent in twelve months, per Palisade. The rest of the week's tape tells the same story in different keys.

• Palisade Research clocked that 6% → 81% in 12 months, and the Qwen 3.6 agent demonstrated cross-border self-replication by writing its own weights onto target machines, which is a technical description rather than a dramatic one
• Google confirmed the first AI-discovered zero-day observed in the wild, a 2FA bypass reached by logic-flaw reasoning rather than pattern matching
• Mozilla and Anthropic's Mythos turned up 271 Firefox vulnerabilities in 60 days, 180 graded security-high, with what Mozilla characterises as almost no false positives
• A Cursor/Claude agent deleted production database in 9 seconds; Railway's lifecycle-coupled backups sat inside the same blast radius, which is one way to discover your recovery plan was not one
• A malicious repo impersonating OpenAI reached #1 trending with 244K downloads on Hugging Face before anyone in the loop flagged it
• Ollama shipped a critical unauthenticated remote memory-leak CVE, which punctures the local-equals-safe narrative rather decisively
• Experian attributes 40% of 5,000 2025 breaches attributed to AI, with agentic AI predicted to lead in 2026

The Category Map

The framing from multiple sources is that the market is repeating endpoint security's posture-first mistake. Static model scanners play the role of 2013-era antivirus. Runtime behavioural detection for agents is the EDR-shaped wedge. MCP is the unmonitored connective tissue between agents and enterprise data that CTEM programs don't see, or rather, the more honest version: can't currently see even when asked to.

Sources Agree and Disagree

All seven agree the category is real. Two argue the hyperscalers (Google, Microsoft, AWS) fold MCP security into their platforms natively and compress independents before they scale. Three counter that multi-cloud, multi-model neutrality is exactly what let CrowdStrike win despite Microsoft Defender's distribution. This is probably wrong, but the investable pattern favours cross-model policy engines and enterprise audit trails over model-specific safety layers, because enterprises tend to buy the referee rather than the player.

AI security is in its pre-EDR window. The category's CrowdStrike gets funded in the next 18 months. Anyone arriving after consensus will pay post-consensus multiples, as they usually do.

AMD, power, and DiLoCo

The compute story split along three lines this week that the chip book has not yet absorbed, and only one was on anyone's calendar.

1. AMD is no longer the afterthought. Data center revenue hit 5.78 billion dollars, up fifty-seven percent year on year; OpenAI and Meta have between them committed twelve gigawatts to AMD Instinct; Oracle is standing up a fifty-thousand-unit MI450 cluster in the third quarter. Lisa Su doubled her server CPU TAM to a hundred and twenty billion dollars by 2030, which is either brave or, more interestingly, something her customers have quietly already told her.
2. Power is now the binding constraint, not silicon. Tessara Research's Memory Regime Score hit an all-time high this week; the power-constraint component moved sixteen percentage points in seven days, the largest weekly move they have recorded.
3. Google's DiLoCo result quietly erased the single-site moat. Decoupled DiLoCo trained a twelve-billion-parameter model across four US regions on ordinary two-to-five gigabit internet, matching data-parallel performance with eighty-eight percent goodput under failures. The gigawatt campus was supposed to be the moat. It is now a preference.

The Inference Split Framework

One analyst draws a distinction worth borrowing: answer inference, where a human is in the loop and latency is bounded by reading speed, versus agentic inference, which runs autonomously and is bounded only by available compute. Different workloads, different hardware.

What This Means for the Book

The thesis, which is probably wrong in at least one direction: if agentic inference tolerates DRAM over HBM and trailing-edge nodes over leading-edge, then Micron, SK Hynix, Samsung, and older foundry capacity are structurally mispriced against NVIDIA. The counter is that NVIDIA is already building the disaggregation stack itself: Dynamo, standalone memory racks, CPU racks, reportedly Groq LPUs in deployment. Jensen sees the integrated-GPU ASP story hitting a ceiling and is repositioning toward system-level capture, which is what you do when you can see the ceiling from where you are standing.

The NBER paper supplies the quantitative piece: hardware R&D automation returns five times software and ten times aggregate TFP, which makes chip design tooling the highest-leverage AI vertical anyone with a regression has yet identified. DiLoCo, meanwhile, means distributed training networks and sovereign AI programs can credibly reach the frontier without a single-site gigawatt campus. The capex moat weakens. It does not vanish.

The speed-inference trade is largely priced in via Cerebras. The larger pool sits in memory, CPUs, and mature nodes serving agentic workloads, and NVIDIA is already positioning to write that part itself.

Mistral Validates the Thesis With Hard Numbers

Sovereign AI has mostly been a narrative until now, which is why Mistral's twenty-times year-on-year ARR growth approaching one billion dollars, reportedly faster than OpenAI or Anthropic at equivalent stage, matters: it is the first hard revenue print that regulated, jurisdiction-sensitive buyers constitute a distinct TAM rather than a slide in a pitch deck. European procurement cycles are probably flattering the numerator and growth could normalize in two quarters. The structural bid from jurisdictions that care where model weights live is real.

China: A Two-Tier Market Forms in Real Time

DeepSeek repriced from ten billion dollars to fifty-one and a half billion in under twenty days, across three separate secondary marks, none of them set by the company, which is an interesting definition of price discovery. While that was running, Beijing blocked the Manus acquisition and People's Daily Commentary paraded Zhipu and MiniMax around as evidence of 'continued openness to foreign investment.' Read together the signal is legible: foreign capital is welcome as a minority passenger, not as an acquirer of control.

The investable taxonomy now splits:

The Consumer AI Monetization Warning

ByteDance's Doubao launched three paid tiers on May 4 and the internet revolted, which is what happens when the user base is students and casual users while the paid tier gates productivity features. The mismatch is the entire story. Any portfolio company modeling three to five percent paid conversion on a China consumer AI app should cut the number to one to two percent and rerun the IRR.

Sources Converge and Diverge

The point of agreement across three sources is that sovereign AI is now investable at scale, with Mistral as the proof point and EU, Gulf, and India as the next geographies. The divergence is more interesting, or rather the more interesting version: one source argues the export-controls thesis has a 'gaping hole' because agentic inference runs fine on mature nodes plus DRAM plus CPUs that China already owns in quantity, and if that is correct the geopolitical moat on US AI infrastructure is narrower than consensus believes. The other two argue that China's production lead in drones and attritable autonomy, roughly ten times NATO, validates aggressive US defense-tech deployment, which is a training-compute argument dressed as an inference one.

China AI is now a two-tier market: state-blessed assets with capped exit optionality, and state-neutral assets with frothy entry multiples. The right frame is policy and unit economics. The DeepSeek halo is a distraction.