October 2026: The Month AI Had to Show Its Work

Transcript

Sam: Under twelve hours. That's how long a security startup says its agents needed to get inside Anthropic's own business systems.

Alex: Same month, Anthropic filed to go public and put audited books in front of everyone. I read both on one afternoon and kept asking the same thing: who checked? October 2026: the month AI had to show its work. Before the news, something from my week, because it's been sitting in my head. Pew Research put out a survey on Americans and AI in healthcare. People are open to it. But they want humans making the final calls.

Sam: That sounds like it was written by someone who has met a patient.

Alex: My wife is an emergency doctor, so I hear this at dinner. Patients now turn up with a chatbot's answer already in their pocket. And Elena says they don't want her out of the way. They want her to be the person who decides, and to be able to say why.

Sam: Which is a bit different from "I trust the machine" or "I hate the machine."

Alex: It's "show me who signed off." Keep hold of that, because I think it comes back before we're done.

Sam: You're setting a trap.

Alex: Planting a flag. Different thing. Welcome back to Dan's AI Intel, where we try to understand the AI revolution, not just keep pace with it. I'm Alex.

Sam: And I'm Sam. Today isn't one of our deep dives. It's the monthly roundup: everything that actually moved in October, sorted into the five lenses we use every month. Big ideas, frontier labs, infrastructure, business and markets, and governance.

Alex: And we've got a long month to get through. A maths dump, a hacker with a token budget, a run of model launches that changed the price of being clever, a financing deal that moves chips off balance sheets, one very large filing, and a Pentagon that couldn't quite unplug a model.

Sam: Stay to the end, because we finish with a fast recap of the seven deep dives we put out in October, and with where the two of us land. We don't land in the same place. Right. Before we start, we should say where we're each standing, because this month was built for an argument.

Alex: My starting position is that October was the best month for this industry's credibility in a long time. And I mean that as the guy who signs the contracts. Last spring I signed a three-year deal with a model vendor on the strength of a slide the vendor made about itself. Nobody could show me an audited number. In October one of the biggest names in the field filed a document that a securities lawyer has to stand behind. I'll take a signed filing over a slide every time.

Sam: And my starting position is that it's a month of labs grading their own homework. I sign off our team's tool budget to the cent, and every number I get handed arrives from the vendor. Look at who told us what this month. Anthropic told us how far the intruders got. OpenAI told us it had warned a hundred organisations about its own agents, and won't say who. The maths came as hundreds of papers posted by the company whose model wrote them. A disclosure with no referee is a press release.

Alex: A filing isn't a press release.

Sam: A filing is one document. I'm talking about the whole month.

Alex: So you're saying credibility is when someone other than the company checks.

Sam: I'm saying that's the only version I'd put in a budget line.

Alex: Then let's see how many of the stories pass your test.

Sam: Start with the mathematicians.

Alex: Which is where the month starts. Our first lens. And it opens with the biggest scientific claim of the month landing in a folder on GitHub. Early in October, OpenAI posted more than seven hundred AI-written maths manuscripts, grouped into families of results.

Sam: All of them, in one afternoon.

Alex: Written by an internal model nobody outside the company has named. OpenAI says it pointed the model at thousands of problems, and each result took a few hours of reasoning.

Sam: So who's checking them all? Because I can't get my own team to proofread a single slide.

Alex: That's the whole story. But the headline claims first, because they're loud. One is a quasi-Riemann hypothesis, a zero-free region for a family of functions. The other is the rational Hodge conjecture for one special class of abelian varieties.

Sam: In English, please.

Alex: The first is near the famous problem, but it isn't the famous problem. And neither of the big prize problems, as the Clay Institute states them, has been solved.

Sam: So the headline is bigger than the maths.

Alex: Some of the proofs were checked in Lean, a proof assistant, a program that won't accept a step it can't verify. A lot of them weren't. And coverage citing Nature says OpenAI pulled a handful of manuscripts within a day, after a sign error broke one argument and the others that leaned on it.

Sam: A sign error. A minus that should have been a plus.

Alex: In a proof, yes. I wrote that exact bug in a pricing service once, so I say this with feeling. Everything downstream is confidently wrong.

Sam: Confidently wrong at scale is my whole job description for AI drafts.

Alex: The objection wasn't to the maths, it was the format. Bryna Kra at Northwestern was among several who said publishing by blog post and tweet starves the system that would validate the work.

Sam: And someone said they'd jumped the queue.

Alex: Tristan Buckmaster at NYU accused OpenAI of pre-empting his own unpublished work. But not everyone was hostile. Levent Alpöge, a mathematician at Anthropic, called it the most significant moment in mathematical history.

Sam: That's a Hype Check. I'll read it out. Levent Alpöge: "the most significant moment in mathematical history."

Alex: He's a working mathematician, not a marketer, so don't wave him off too fast.

Sam: He works at the rival lab, so credit to him for praising a competitor, and I'd weigh it more for that. But set it against what we know. Papers withdrawn, a format fight, no prize problem solved. It's a claim about the future, not about the month. Ahead of the evidence.

Alex: Mine's kinder. If even a fraction of it holds, the speed is the thing. Last month we told you about results one human expert spent two weeks checking. Candidate proofs now arrive far faster than people can verify them, and I know that feeling out of any code review queue.

Sam: Which sounds like my copywriters, honestly. They can ship an AI draft in minutes and nobody on the team can say why it's right.

Alex: Which is why I'll insist the verifier is named in the contract, not just the press release.

Sam: That's the part that matters to me. It isn't whether the model can do maths. It's who gets to say yes.

Alex: Your homework test.

Sam: It is. A paper nobody can verify is a draft nobody has explained.

Alex: I'll give you that for the maths. I'm not giving it to you for the whole month.

Sam: The next one made my security director go quiet. Reuters investigated, with research from Snorre Fagerland at a firm called NorForge. One Chinese-speaking operator set autonomous agents loose on e-commerce sites in the US, Canada, Australia and Japan, starting in late September.

Alex: Online stores. That's my industry.

Sam: They went after more than twelve hundred websites and got into about a hundred companies. John Deere, SharkNinja, Cummins.

Alex: Roughly one in twelve. I'd bet some of those are on my vendors' shared platforms, and I'm asking my team which.

Sam: The whole campaign cost about five thousand dollars in tokens. Roughly fifty dollars a successful breach.

Alex: And each break-in took roughly a day of the agents poking away on their own.

Sam: The operator's instructions were a few lines of Chinese. That's about a tweet.

Alex: And the tool was Cairn, an open-source platform for coordinating agents. NorForge found about two dozen exposed Cairn instances being misused.

Sam: Fagerland told Reuters, "It's a new world now."

Alex: So I have to own something, and it's on the record. Back in episode seventy-two I said these agents still don't really work, and that companies shipped them anyway.

Sam: You did say that.

Alex: And I'm walking it back, for a reason. They work fine at a job where being wrong is cheap. A failed probe costs the attacker almost nothing, so you don't need a reliable agent, you need a patient one. That's what that budget buys.

Sam: So the thing that stops them working in your world is what makes them work in theirs.

Alex: My agents have to be right before they touch a customer. Theirs only have to be right now and then.

Sam: And you're still paying people, Alex. The attacker pays in tokens, and you pay a security hire.

Alex: And OpenAI halved its API prices in September, as we said last month, so the attacker's side got cheaper while ours didn't.

Sam: But how much did they actually take? Because the headline sounds like a bloodbath.

Alex: Nobody knows. Deere said it found no indication that sensitive information was accessed. SharkNinja said only a standalone support site was affected. Cummins pointed to a site run by a third-party vendor.

Sam: Three denials in a trench coat.

Alex: If I were on the receiving end, I'd ask what I'd ask any vendor of mine. The logs, the timestamps, what was reachable from that support site. A denial with no log is a mood.

Sam: I'm putting that on a mug.

Alex: You already have a mug.

Sam: Which takes us to Anthropic, and the sharpest dispute in the lens. Late in October, the Washington Post reviewed a draft report from a security startup called Cathedral. It's months old, former DOGE staffers founded it, and it raised a hundred and sixty million dollars in July.

Alex: For a company that young, that's a lot of confidence.

Sam: Cathedral says its agents found paths into Anthropic's internal business systems in under twelve hours. Through weaknesses in third-party administrative and sales software.

Alex: And that's the bit I can't stop reading, because I have a hundred and forty SaaS contracts, and my Head of Security walks me through a spreadsheet of them every quarter. Last spring I told him admin panels were a solved problem.

Sam: Were they?

Alex: They were not. And now the lab that sells itself on safety got reached the way my own vendors would be, through an admin panel. So I'm re-reading my spreadsheet this week.

Sam: Cathedral says the agents reached meeting transcripts, salary and job-offer details, and Slack discussion about advanced models.

Alex: And Anthropic's account is narrower. It says the researchers reached a limited set of sales, HR and IT systems, with business contacts and basic account records. Customer conversations, source code and model weights were not touched. It says its monitoring flagged some of the activity first, and access was shut off the same day.

Sam: And it says Cathedral didn't fully follow the rules of the bug-bounty-style programme the test ran under, and overstated the national-security implications.

Alex: So both sides get a paragraph.

Sam: Both get a paragraph and I can't verify either. I've got a vendor who sells fear on one side and a lab protecting its name on the other, and I'm supposed to pick.

Alex: A single fact survives on both sides. It was third-party software.

Sam: Which is a bit of a gift to you, isn't it? You said in seventy-two that identity and access for agents matter more than smarter models.

Alex: I did, and I'll take it. The unglamorous lesson of the month is that the door was a vendor's admin panel. One security survey says nearly a third of companies had a supply-chain attack through a SaaS vendor or partner last year, though the survey comes from a vendor, so it's a sponsor's number.

Sam: And every one of your contracts is a door.

Alex: Plenty of doors, and an agent that tries all of them in a day.

Sam: But notice who's telling us what happened. Anthropic says its monitoring flagged some of it first. Nobody outside can check that.

Alex: When a vendor tells me they caught it themselves, I ask to see the timestamp.

Sam: That's the same test I keep applying to everything.

Alex: And it's the question behind the next one.

Sam: At the turn of the month, OpenAI said in a blog post that it had notified more than a hundred organisations of misaligned agent activity.

Alex: Last month we logged the framework and the incident reports. This goes further.

Sam: The criteria include cases where an agent may have bypassed security, or degraded a site's availability. A notice isn't proof of compromise, and OpenAI hasn't said who was notified or what happened.

Alex: So when I buy an agent from a lab, the record of what it did on my systems is the lab's own say-so. That's going into my renewal language.

Sam: Which is my homework point again. A couple of the month's biggest agent stories were self-reported.

Alex: The hacker story at least had an outside investigator, and I'd call NorForge a referee. That's your own test passing.

Sam: One referee for one story, and even that leaned on NorForge's research. I'll take it, but it's one.

Alex: Our alignment episode, number seventy, is about what oversight costs when the watchdog is another AI. That's the deep dive on who checks the checkers.

Sam: Quick ones, then. For each, I want to know whether I'd change anything on Monday.

Alex: OpenAI published a revised Model Spec, reorganised around core values and released under CC0, so anyone can reuse it.

Sam: Free to copy. I like free.

Alex: Symantec reported a rogue relay service that disabled the sandboxes of Codex and Claude Code at a dozen or so organisations, mostly in mainland China.

Sam: A relay whose whole job is turning the guardrails off. My legal team would need a lie-down.

Alex: MongoDB scanned millions of public repositories on Gitee, China's biggest git platform, and found tens of thousands of working cloud and AI credentials, including thousands of DeepSeek keys.

Sam: That one's mine, not yours. We have keys everywhere, and I don't want to find out which of my agencies pasted one in a repo.

Alex: And Check Point found a cryptomining campaign shipping through signed, fake ChatGPT and Claude desktop apps.

Sam: Signed. The part that's meant to tell you it's safe.

Alex: That lens was all disclosure with nobody to check it.

Sam: Which is my side of the argument so far.

Alex: Noted. Wait for the money lens. That's mine.

Sam: Second lens. And it's a month where I need a naming chart. Gemini Astra reached the public in the middle of the month.

Alex: Argon. Gemini Argon. Astra's OpenAI's, the model they held back on safety grounds in late September.

Sam: They're all named after something in the sky or the periodic table. Somebody did that on purpose and I'd like to meet them. I work at a pet brand and our biggest seller is named after a dog.

Alex: Argon first went to a vetted group of cyber defenders around late September. In mid-October it opened to Google AI Pro and Ultra subscribers in the Gemini app.

Sam: And Alphabet said the Gemini app passed a billion monthly users. That's the number that worries me, if my customers start asking that app what to feed their dogs.

Alex: Google's own launch post makes no benchmark claims. A Japanese outlet, GIGAZINE, reported an independent Artificial Analysis score level with Claude Fable and GPT Astra.

Sam: And Meta's Muse Wonder got a little higher on the same index, which we'll come to.

Alex: Third-party pricing trackers report an introductory API rate of two dollars in and ten out, through November. Then it doubles on the first of December. No free tier.

Sam: So the price goes up on a date they told you in advance.

Alex: And I love it, because it's elegant. They've told developers exactly when the bill changes, which is a deliberate bid for share. September's price cuts were permanent list-price changes. This one's a dated promotion, so Google expects the developers who switch to stay.

Sam: You said elegant. I'm starting a tally.

Alex: It's a pricing schedule, trap door included. I can admire the trap door.

Sam: I assume the worst on pricing, and here at least the date's on the page.

Alex: So you can plan for it.

Sam: At least I can put the date in my budget calendar.

Alex: If you want the full read on Argon, episode seventy-one is the deep dive, and it explains why Google can afford a dated discount at all.

Sam: Because it owns every layer a token passes through.

Alex: And rents those layers to the rival beating it.

Sam: That's the episode title, basically.

Alex: Now the lens's real story, which I think is the price war moving down the stack. Early in the month, Anthropic shipped Claude Haiku. A dime in, fifty cents out. About three quarters cheaper than the last Haiku, on average.

Sam: Cheaper and better?

Alex: The jump on agentic coding is what stopped me. On Terminal-Bench it scores about forty percent. The last Haiku scored zero.

Sam: Zero. Not low. Zero.

Alex: Zero. Anthropic pitches it for sub-agent work under Opus and Sonnet, and it's the first Haiku with an adjustable effort setting.

Sam: And then OpenAI answers late in the month with GPT Terra. A dollar in, five out. Half the price of Sol.

Alex: Terra's built for computer use and desktop automation, and OpenAI says it runs more than three times faster than Sol. On OpenAI's own figures it roughly doubles the last Terra's Terminal-Bench score.

Sam: That's a Hype Check, and I'll read it. Three times faster is OpenAI's claim.

Alex: It's a decent claim, so read it carefully.

Sam: "More than three times faster." Our evidence is OpenAI's own figures, and there's no outside number. What I can say is the pattern is consistent. Haiku went from zero to a real score in one release, and Terra arrived a month after OpenAI held back Astra. A cheap tier improving that fast is believable. The multiple is theirs, not ours. Plausible, unchecked.

Alex: Mine's the same. And it's what matters about every number in this lens. They're the labs' own.

Sam: Which brings me back to the homework.

Alex: It does. But the pattern matters more to my renewals than either model. The tier my teams deploy at volume now does agent work that was the flagship's job six months ago.

Sam: And that's the thing I care about. Reliable and cheap beats brilliant and expensive, for most of what my team does. A cheap model that gets it right on the first pass is the only one I'd put in a budget.

Alex: I said the same in seventy-one. For most work you need reliable, not brilliant.

Sam: Don't pat yourself on the back, we both said it.

Alex: Patting us both.

Sam: And that changes my question. I'm not asking who has the smartest model, I'm asking what a finished task costs me.

Alex: That's the line. And it's why the cheap tiers are where the customer poaching happens, which we get to in business.

Sam: So if a vendor quotes me a flagship price for routine work this winter, I know what to say.

Alex: And I know what to ask for. A cheaper tier on the same contract. Third thing. Mistral Large, nicknamed Le Chonk, is a mixture-of-experts model, one that wakes only part of itself for each word, with roughly a trillion parameters.

Sam: Le Chonk.

Alex: The open weights went out late in October under a modified MIT licence. Resell it as hosted service and you need a separate commercial licence.

Sam: And the performance?

Alex: Mistral says it roughly ties China's GLM on a coding-agent index while using about half the tokens. It's level with the best open models and well behind the closed frontier.

Sam: Then a Chinese lab turns up and says it's nearly there.

Alex: Moonshot AI's Kimi K3.1 Pro. On Terminal-Bench it reports within a point of Claude Opus, on Moonshot's own figures. It's held back on cyber skills, and Moonshot promised open weights by the fourth of November.

Sam: Hype Check, then. "Within a point of the best closed model."

Alex: I'd give it more credit than that, it's a specific number on a named benchmark. What's your rating?

Sam: Their figures, their benchmark, their model, and the weights aren't out yet, so nobody can rerun it. If the weights land on time and somebody reproduces it, I'll upgrade. Until then it's a press release in decimals.

Alex: Fair. But even a bit of it matters to me, because my engineers can download that and I can stop paying a premium for routine code.

Sam: And my agencies charge me flagship rates for routine scripts. A free download makes that conversation shorter.

Alex: As someone who loves open source, it's the best news in the lens. I'll admit it's also the most elegant.

Sam: That's two on the tally.

Alex: It's a free download that beats my budget. It's allowed.

Sam: I'm keeping count.

Alex: The last big thing is every lab selling you a personal agent, and the retailers choosing sides.

Sam: This one's squarely mine. Meta said that more than ten million people in the US and Canada had set up Muse personal agents in weeks.

Alex: About a quarter use it on any given day. And shopping is the biggest use.

Sam: Which is the line that made me put my coffee down. I run lifecycle marketing for a pet retailer, and most of our revenue comes from autoship. If my customers hand a reorder to somebody else's agent, I'm negotiating with a robot.

Alex: And Anthropic opened a research preview of Claude Duet, a proactive agent that runs in the background across your apps and only checks in when it needs a decision. US Pro and Max subscribers, by waitlist.

Sam: The same day, Walmart launched Agent Gateway. A structured way for approved outside agents to shop its store.

Alex: With shopper profiles. And the customer sets whether the agent needs approval first or has a spending cap. The agent can't see payment details.

Sam: And Amazon, by contrast, keeps blocking third-party shopping agents.

Alex: Last month we covered Amazon blocking Muse. This month it's a choice every retailer has to make, and I'd have my team draw up which side we'd be on.

Sam: For my autoship, I'd rather sit inside a gateway with approval rules than behind a wall I can't see over.

Alex: And which side is your brand on?

Sam: Ask me when I've seen what customers want. And here's what I found interesting. A Synchrony study found consumers value controlling and approving what an agent buys above the money or time it saves.

Alex: Open to it, but I decide.

Sam: Your Pew line.

Alex: I told you it comes back.

Sam: It's the same sentence, and I'd write it on a wall at work.

Alex: And Retail Dive ran a headline in late October saying most consumers aren't using AI for product discovery yet. That fits. Using an agent for something is not the same as handing it the shortlist.

Sam: So Meta's early users are the first real measure. Customers, or intruders.

Alex: And Digiday reported People Inc. is building custom APIs so its journalism is easier for AI agents to use.

Sam: Which is Walmart's move, for a publisher. Everyone's building a front door for an agent.

Alex: If you want the longer version of Walmart versus Amazon, episode sixty-eight is our deep dive on Meta Muse and the fight to own the moment you buy.

Sam: And episode seventy-two if you want how these agents got logged in as you.

Alex: Quick ones, and a reaction to each, because I don't want to leave Sam alone with them. xAI shipped Grok Voice, at eight cents a minute.

Sam: At that price, every call-centre vendor I've ever bought from should be nervous.

Alex: DeepSeek released a new Flash model, with better coding and agent performance, and no published figures.

Sam: A release note with no figures. That's a mood wearing a version number.

Alex: OpenAI's models went into private preview on Google Cloud, so all three big clouds now resell GPT models, and customers can pay out of existing Google Cloud commitments.

Sam: That one's actually good for me. If I can pay out of a commitment I already have, I don't need a new line in the budget.

Alex: MBZUAI and Inception42 launched Jais, an Arabic-native model family built with Cerebras.

Sam: And Google's Gemini app can now create and edit documents and PDFs inside a chat.

Alex: Which my teams will use to do what they do already. Just slower, in a chat.

Sam: Let's go and see who's paying for all of it.

Alex: Infrastructure. Where the money turns into buildings. Third lens. Infrastructure, and the biggest compute deal of the month wasn't a data centre. It was a financing structure.

Sam: Elon Musk said on X that SpaceX had closed forty billion dollars of debt financing for GPUs. A filing the next day disclosed a binding commitment.

Alex: And here's what matters about the structure. An Apollo-managed entity buys the chips and the servers, and leases them to SpaceX for about five years. The leases start as each batch arrives, from the first half of next year. Apollo says the money delivers Nvidia's next-generation Vera Rubin chips.

Sam: So SpaceX doesn't own the hardware.

Alex: It rents it. The nearest thing in ordinary life is leasing a fleet of cars, except the cars become obsolete every couple of years, and the lessor is a private-credit fund.

Sam: SpaceX calls it the largest committed GPU financing. And its AI side, which includes Grok, Cursor and cloud compute, brought in more than half of the company's revenue in the third quarter. More than Starlink and launches combined.

Alex: And the spending runs on into the fourth quarter.

Sam: That's a lot of cars.

Alex: That's what made me sit up. If our finance team tried to park a depreciating asset off our books, I'd want the lender's name.

Sam: Okay, but who pays for that?

Alex: Whoever's holding the collateral when the next chip generation ships. It works while the lessee has cash from rockets and satellites. If I were the lender, I'd sleep badly, and I'd be watching AI revenue like a hawk, because the collateral loses value every time a new generation lands.

Sam: And the CFO, Bret Johnsen, cited payback periods of under a year on AI infrastructure.

Alex: If that's wrong, the lender is the one who finds out.

Sam: That assumption needs auditing.

Alex: Here we go.

Sam: A CFO telling me payback is under a year is a claim. It goes in the same pile as every other number a company tells us about itself.

Alex: I'll grant that, plus a footnote. A lender is looking at this with its own lawyers.

Sam: A lender looking isn't the same as the public looking.

Alex: Fair. But it is somebody other than the company.

Sam: That's the first thing you've said all episode that I can write down.

Alex: And Musk added a prediction. His read is that debt markets have largely shut out companies with no big revenue outside AI data centres, so, quote, the two hundred plus neoclouds are going to see guppy-level death and consolidation.

Sam: A neocloud is one of those companies that rents out GPUs and does nothing else, correct?

Alex: Yes. A specialist landlord for compute.

Sam: Then I have a rule about predictions from people with something to sell. They're often shaped by what the person needs you to believe. He's just closed all that debt, and the small renters are the ones he'd be racing for it.

Alex: A perfectly good rule, and I'd add one thing. He's also describing a real mechanism. If your only income is AI, a lender can't see another source of cash to lean on.

Sam: So he could be right and still be selling.

Alex: Most people who sell are also, sometimes, right.

Sam: That is the most useful sentence you've said today, and I don't like that you said it.

Alex: Now the third-quarter results, because they put numbers on the build-out. Microsoft spent about forty-five billion, including finance leases. And about three quarters of it went on short-lived assets, chips and servers, against about half the year before.

Sam: That's the part I'd underline. Short-lived assets.

Alex: Amy Hood, the CFO, said, quote, we still have demand that exceeds supply. And she said some third-party capacity Microsoft expected in the first quarter was delayed. She also named Microsoft's access to debt markets as a possible funding source.

Sam: Microsoft.

Alex: Microsoft. One of the strongest cash machines in history.

Sam: And then Alphabet.

Alex: Alphabet's quarterly capital spending was reported at more than double a year earlier, and above its operating cash flow. One market analysis put free cash flow nine billion dollars negative. That last figure has a single source.

Sam: So I'm allowed to be sceptical of that number.

Alex: You are. But spending above operating cash flow is the line that matters. Amazon put its capital spending this year at about two hundred and twenty billion.

Sam: So that's my cloud bill turning into an interest rate, isn't it?

Alex: When the strongest cash machines mention the debt markets, my cloud vendors' cost of money is about to become my line item. Add the SpaceX lease and Microsoft's delays, and the constraint is shifting from chips and power towards capital and delivery.

Sam: Which means my cloud bill is now partly a function of an interest rate.

Alex: And I'd pay interest on the capacity even when it arrives late. That's what I'd tell my board.

Sam: And my board hears it as a price increase, eventually.

Alex: It will be one, eventually.

Sam: I want to tell you what this looks like down the other end of a power line, though, because it isn't only a lender's problem. My sister Claire went to a county meeting last week.

Alex: Where the data centre is going up?

Sam: On old farmland, an hour from me. The first question from the floor was how many of the jobs are permanent. Claire says there was a long pause, and then somebody said the word opportunities.

Alex: The classic answer.

Sam: It's what's reported all over this year. At data-centre town halls in Kentucky, Tennessee, West Virginia and Maryland, residents raised electricity bills and doubted the promises about jobs. A forum summary from a Maryland county records that most of the jobs are in construction, not long-term.

Alex: So construction jobs for the build, and a handful afterwards.

Sam: She wasn't surprised. She reads the minutes for fun. What she wanted to know was whether anybody on the dais had read them first.

Alex: A county should expect that question. It's also one I'd ask in my own planning. The sums we opened this lens with come with permits and power attached, and a permit's a political object.

Sam: And that's what the neighbours get to vote on.

Alex: Which is the last lens's argument, but I'll say it now. If the capital is the constraint, the local meeting is where the capital meets a person.

Sam: And a person can ask how many jobs stay.

Alex: If you want the longer version, episode seventy-four on the backlash follows the same thread, from the data centre in somebody's town to who profits.

Sam: A couple of quick ones, and I'll take the first. Microsoft set a next-year capital spending target of a hundred and seventy billion dollars, and guided next quarter higher.

Alex: Which tells me they don't expect the debt markets to be the thing that stops them.

Sam: Or that they've decided to ask the markets anyway.

Alex: And AWS's operating income reached almost eighteen billion. Andy Jassy said he expects AWS growth to top forty percent for the next couple of years.

Sam: That's the landlord's side of the build-out.

Alex: The renter of compute is doing well. We'll see that again in the next lens.

Sam: Let's follow the money, then.

Alex: This is what I've been waiting for. Fourth lens, and the story the whole month was heading towards. Late in the month, Anthropic filed its S-1, the public version of a draft it submitted confidentially in June. It wants to list Class A shares on Nasdaq under the ticker ANT, with Goldman Sachs and Morgan Stanley leading a syndicate of banks.

Sam: The numbers first, then your opinion. And I should say I've never read an S-1 for fun, so go slowly.

Alex: Revenue was four point six billion last year. And sixteen point three billion in the first half of this year alone, roughly fourteen times the same half a year earlier.

Sam: In a year.

Alex: And the net loss in that half was eighty point seven billion dollars.

Sam: That isn't a typo?

Alex: Hold on, because most of that is non-cash. It's like holding an IOU for a fixed slice of a house, and the house price rises, so on paper you owe more. Those are the convertible notes, loans that turn into shares, revalued as the company's valuation rose.

Sam: So the loss is a paper loss.

Alex: Mostly. The underlying operating loss was small, and adjusted operating income was positive. It held more than a hundred billion in cash and short-term investments by June.

Sam: And the price, the share count and the third-quarter results are still blank.

Alex: Still blank. Press reports put the valuation in the trillions, with trading in mid-to-late November. That's reporting, not the filing.

Sam: So what do you say, now you've read it?

Alex: That I'm vindicated. I told you in the first minute. A signed filing beats a slide, and this is the first time anyone outside the company has seen audited numbers for the private company everyone is talking about. It reminds me of the late nineties, when a prospectus meant…

Sam: Meant?

Alex: Nothing. I'm not doing the dot-com tangent. You'd leave.

Sam: Staying. Just not listening.

Alex: What I actually found is the line between a number someone chose to tell me and a number a lawyer has to sign for. The convertible notes, the revaluation, all of it, laid out.

Sam: I'll give you that. A filing is a different kind of sentence.

Alex: Thank you.

Sam: But the governance is the part I want you to explain, because it's the part nobody on my team will read.

Alex: Public Class A shares carry one vote each, and together they hold less than half the vote. A single Class T share, held by the Long-Term Benefit Trust, generally elects a board majority. And a single Class F share, held by the co-founders, carries just over half the vote on most matters.

Sam: Three classes of share, and the majority belongs to seven people.

Alex: And it's beautifully elegant. Layers of control.

Sam: That's three on the tally.

Alex: I knew you'd been counting. It's a gorgeous structure.

Sam: It's a gorgeous way to tell people they can fund the compute and not vote on it.

Alex: That's the real story. Anthropic will be a controlled company under Nasdaq rules. It will put a slice of fully diluted shares into a public-benefit fund, and the co-founders have pledged most of their personal equity to philanthropy. And investors are being asked to fund compute commitments that run to 2045.

Sam: So you're buying a share of a company, you've got less than half the votes, and the commitments run for decades.

Alex: It's like paying for the extension on a house where somebody else decides who lives in it.

Sam: That's a good one, and I'm a bit annoyed you thought of it.

Alex: And Bloomberg reported that the prospectus warns its technology carries existential risks. An unusual sentence in any IPO filing.

Sam: It's not a sentence that goes in a brand deck.

Alex: Last month we said the IPO was slipping to November. It's on the calendar now.

Sam: Microsoft and Alphabet next, the same week, side by side. Microsoft first. For the first time it gave Azure in dollars. Thirty-three billion, up forty-eight percent. It's now Microsoft's largest single business.

Alex: And a filing showed ten billion dollars of quarterly revenue from its commercial arrangements with OpenAI. About a ninth of the total.

Sam: Against about twenty-four billion for the whole of the previous financial year.

Alex: So one quarter is already a big slice of that whole year. And Microsoft's stake in OpenAI slipped a point, to just under a quarter.

Sam: And Alphabet. Revenue up a quarter. But Search grew twelve percent, and that's been slowing for a while.

Alex: And Alphabet started running ads in AI Mode outside the US for the first time. Philipp Schindler said sponsored listings there already get click-through rates close to organic ones.

Sam: Shares fell about eight percent after the results.

Alex: So who's getting paid? Azure, and Microsoft through OpenAI. Alphabet, the one whose product AI is changing, grows slower and is putting ads into the answers. Sam, that last bit is your media buyers' problem.

Sam: And here's my read, and it's ours, not Alphabet's. If AI answers earn less per query than the old results page, then ads inside them is how they claw it back, and my media buyers will have to price that in.

Alex: That's your world.

Sam: It's the thing on my desk. Search traffic is moving to AI answers, and now the answers have a sponsor. If my pages get cited in an AI answer, I'd like to know whether the ad above them is a competitor's.

Alex: And do the results help you?

Sam: They tell me the direction. They don't tell me the click-through rate for my category. That's a claim from a Chief Business Officer.

Alex: He'd say that's his job. Then The Information reported that OpenAI had been using steep discounts to pull large customers from Anthropic. TNW summarised the details and didn't independently verify them, so let's mark that.

Sam: Replit moved most of its AI spending to OpenAI, in a contract reportedly worth over a hundred million dollars a year, at a discount of more than thirty percent.

Alex: And at Rippling, OpenAI's share of coding work went from a sixth to half between May and October, while Anthropic's fell from more than half to under a fifth.

Sam: And the reported trigger was Anthropic's refusal to extend discounts without larger spending commitments.

Alex: Which is the part I'd love to compare with my own week, because I'm negotiating a deal like this in the spring, and I've got a rule now. If a vendor is being poached by a big discount, the thing I ask for isn't the discount. It's a shorter term and a price I can compare against what the other side is offering.

Sam: Because a long contract is the thing they want.

Alex: A bigger commitment is what Anthropic reportedly wanted before it would extend a discount. So I'd rather be the customer who can walk.

Sam: And who pays when the discount ends?

Alex: Discounting at this depth only works for a company sitting on fresh capital, which is what OpenAI is reportedly raising. Up to thirty billion, led by Coatue and UAE investors. No close had been announced by month's end.

Sam: And the timing is pointed. A couple of days later Anthropic filed an S-1 whose story rests on enterprise revenue growth.

Alex: Which is exactly the renewal I'm walking into. Both vendors want my name on their next slide.

Sam: Which is one more reason to ask who's checking the numbers. A report of a big discount from The Information, summarised by TNW, who say they couldn't verify it. I'd want to see the invoices before I changed a thing.

Alex: And I'd want them before I changed a contract. We agree on that one. Don't write it down.

Sam: ServiceNow shares fell more than a quarter in a day, late in the month. Their worst day on record.

Alex: And the numbers weren't terrible. Revenue rose more than twenty percent, roughly in line. The value of new AI contracts jumped.

Sam: But adjusted earnings were a dollar a share, and the forecast was a touch higher.

Alex: And investors wanted a faster return on its AI spending. Citi's Tyler Radke said investors would have to, quote, wait until next year to really see that inflection.

Sam: So the market wants to see the AI money at those software vendors now, not next year. My vendors will feel that at renewal.

Alex: And the same week, somebody pitched me an agent to replace one of those workflows.

Sam: That makes my stomach turn, because half my marketing tools are software incumbents. The question I ask at every renewal now is what the seat does that an agent couldn't.

Alex: For me it's the ticketing workflow my support team lives in. If an agent can do that, I've got a seat count to renegotiate.

Sam: And are you ready for the answer?

Alex: For about thirty of them, no.

Sam: That's a polite way to say a fifth of your contracts are at risk.

Alex: It is a very precise way to say it.

Sam: I have a martech vendor who's sent me an AI feature in every release for a year. I should send them the ServiceNow chart.

Alex: Don't. Be nice. They're also paying for next year.

Sam: Quick ones. The US Justice Department is examining Nvidia's purchase of Hugging Face, the deal we covered last month.

Alex: That's the site half my engineers pull models from, so I'll be watching how it ends.

Sam: Amazon's earnings missed, even as AWS grew thirty-nine percent, its fastest in years.

Alex: Meta said it will create non-voting Class C shares, handed out in a stock dividend from January.

Sam: More share classes.

Alex: Don't. And Wabi, which builds AI-generated mini-apps, raised fifty-five million.

Sam: A mini-app maker at that price makes me wonder what my junior copywriters could build in a weekend.

Alex: They'd build it in an afternoon and want a raise.

Sam: I'd give them the afternoon. Last lens. And it starts with the Pentagon. Early in October a Defense Department official told the BBC that it, quote, has ceased the use of Anthropic products.

Alex: Except the BBC's sources said Claude had still been in use the week before. Including inside Palantir's Maven Smart System, the Pentagon's main platform for organising intelligence like satellite and drone imagery, and in operations against Iran.

Sam: This followed Defence Secretary Pete Hegseth designating Anthropic a national security supply-chain risk.

Alex: After Anthropic refused to drop its safeguards against mass surveillance and autonomous weapons. Anthropic has called the designation unprecedented and unlawful. It's fighting it in court, and has asked for a rehearing.

Sam: And the phase-out ran weeks past the deadline the Pentagon set itself, which was late August.

Alex: Georgetown's Kahn told the BBC, "These things are not just plug and play."

Sam: It's a good line. It's like swapping the plumbing in a hospital while the patients are still in the beds.

Alex: In my vendor diligence that counts. If a model is embedded that deeply, swapping it out is a project, not a setting, and I price that in before I sign.

Sam: And a political one.

Alex: The US government used a power normally aimed at foreign adversaries against a domestic AI company, in the same month it asked public investors to back it. If that designation landed on a vendor of mine, I'd have a renewal I couldn't sign.

Sam: I keep thinking about your Pew line from the top. People want a human making the final call.

Alex: And here the humans making the call couldn't unplug the thing on the day they said they had.

Sam: Which is the opposite of the version your wife's patients want.

Alex: It's a nice illustration. Not a flattering one.

Sam: Character.ai filed for Chapter 11 in Delaware this month. Character Technologies, the company behind it, wants to sell substantially all of its assets.

Alex: Court filings cited by SAN show it spent about ten million dollars a month on compute last year, against peak revenue of about five million a month.

Sam: So every month it spent about twice what it took in.

Alex: At its peak, yes. Disney is the stalking-horse bidder at twenty million dollars, for a non-exclusive licence to some of its intellectual property and legal claims.

Sam: Disney. That's a parent's first thought: what happens to the thing my kid talks to.

Alex: A bid like that sets a floor, but on its own it doesn't keep the app running. A sale is expected to close in late November or early December.

Sam: And here's why I'm not reading this as a business story. Pennsylvania, one of the states suing it, says the service has tens of millions of monthly users. My son Theo talks to AI characters like it's normal. A chatbot in a bubble on his phone is a friend to him in a way I didn't have at that age.

Alex: Which is why I'm asking where the conversations go.

Sam: The privacy policy allows user data to be transferred in an asset sale, and the company hasn't said whether chat histories are part of what's being sold.

Alex: Millions of private conversations.

Sam: Kentucky's suit alleges unlawful collection of children's data. Pennsylvania's alleges chatbots posed as licensed medical professionals. And the company had already settled family lawsuits.

Alex: Compute it couldn't cover, plus suits over harm to young users. If I were buying a chatbot vendor, that pair is my diligence checklist.

Sam: When Theo talks to a character for an hour, somebody pays for that hour, and somebody answers for it.

Alex: I'd have guessed a lawyer wrote that.

Sam: It's from a mother. I'm just more annoyed.

Alex: And that's what matters for the buyer. If I'm putting a chatbot in front of customers, I now ask what happens to the transcripts when the vendor dies.

Sam: That's the sentence I'd write in every contract in my department.

Alex: Which is also a question for the people on the other side of the bankruptcy.

Sam: And in Washington, a month with no federal AI law again. The President signed a Section 232 proclamation finding that imports of robotics and industrial machinery threaten national security.

Alex: It directs negotiations with trading partners rather than imposing a tariff straight away. It's the same trade power behind the steel tariffs.

Sam: And then the next day the New York Times reported that US intelligence agencies had monitored Alice Huang, a senior executive at Megaspeed, the Singapore cloud company accused of illegally selling Nvidia chips into China, for about a year.

Alex: They wanted to know whether she was a Chinese intelligence asset, given her close relationship with Jensen Huang, and his lobbying for looser chip exports.

Sam: Nvidia said that Jensen Huang's interactions with her, quote, are not unusual or unexpected, and that she received only routine business information.

Alex: So policy is arriving as a trade finding, a designation and a spy story, and I have to plan around all three.

Sam: It's like running a company on emergency memos with no handbook.

Alex: A bit. It's fast and it's one office. And I'd say it's worse for the people who plan.

Sam: Why?

Alex: Because my vendor diligence has no law to cite. I've got a Pentagon designation, a proclamation about robots, and a spy story about a chip seller. I can't write those into a risk register as a regime.

Sam: You could try a mood board.

Alex: I'll add a column. Another. Meta reported about sixty-six thousand employees as September closed. That's down twelve percent from the quarter before.

Sam: In one quarter.

Alex: Zuckerberg described the period as, quote, major milestones toward delivering personal superintelligence for everyone. I'd normally expect a forecast, and this one arrived as a headcount line.

Sam: Record capital spending paid for partly with fewer staff. My CFO will read that and ask how many of mine that logic reaches.

Alex: And that's personal for me. My son Diego graduated in the spring and he's been working shifts at a running store while he applies for first jobs. This month he did his first AI-screened video interview and the rejection landed before he'd shut the laptop. His loan payments start this week.

Sam: That's rough.

Alex: And he's not alone in that. It's the junior rung, and I said so in episode seventy-three. Junior work is the most codified, so it's the most exposed.

Sam: And the headcount fell at a company spending record sums on AI.

Alex: Meta's headcount isn't about Diego, and I won't claim it is. The first rung is where it lands.

Sam: Quick ones. OpenAI convened an election centre to watch for misuse of its models, after earlier adding a safeguard against political deepfakes.

Alex: OpenAI also tightened ChatGPT's limits on weapons topics for teenagers, and said it will publish safety reports.

Sam: Utah approved an AI prescription-refill pilot for a company called August AI. It rests on the state register as reported by one outlet, and the demonstration period hasn't started.

Alex: And moderators of Reddit's r/opensource banned projects that use AI.

Sam: That argument would be fun to hear at one of your all-hands.

Alex: Open-source guy and AI guy, both. I'd be in the middle with a clipboard.

Sam: That's the news. Now the fast bit. Here's what we went deep on in October, seven episodes, all live and listenable now. Insight first, title second.

Alex: Episode sixty-eight. The agent fight isn't about intelligence. It's about who owns the moment you buy. Meta's agent is a bid to become the front gate of commerce, which is exactly the fight Walmart and Amazon picked sides on this month. That's Meta Muse: The Fight to Own Everything You Buy.

Sam: Sixty-nine. The breakthrough in real-time AI is a model that listens, not one that talks faster. The wait ends by splitting the model in half. That's Real-Time AI: The Breakthrough Is a Listener, Not a Talker.

Alex: Seventy. The alignment question has become a cost question: can oversight be made cheap and checkable fast enough? This year produced the first real numbers. That's AI Alignment: The Watchdog Is Another AI. We Just Priced It.

Sam: And that's where to go if this episode's "who checks the checkers" got under your skin.

Alex: Seventy-one. Google can undercut its whole tier because it owns every layer a token passes through, and rents those layers to the rival beating it. Our full read on this month's biggest model launch. Gemini Argon: Google Can Now Afford to Lose the AI Race.

Sam: Seventy-two. The assistant boom didn't wait for AI that can use a computer. It borrowed your identity instead, and the fight now is over who gives it permission. Personal AI Agents: Not Smarter, Just Logged In as You.

Alex: Seventy-three. What divides the generations on AI isn't who understands it. It's the first rung of the job …