agent-supply-chain

5 items

P3 Institute · 2026-05-15 2026-05-15-w3

From Open Source Software to Open Source Strategy

Gurley's LF Networking data makes a point the piece doesn't foreground: Cisco held gross margins at 65-68% across eight years of open-coalition pressure while Juniper sold to HPE for $14B, Nokia mobile revenue fell 21%, and Ericsson cut 25,000 jobs. Open-source strategy doesn't kill the leader; it eliminates everyone ranked two through five. Applied to frontier AI, the open-versus-closed framing is a distraction from the real question, which is rank within the closed cohort: OpenAI plausibly holds the Cisco premium while the labs below it face Nokia-scale compression once a credible Western open-weight frontier lands. Anysphere on Kimi, Airbnb on Qwen, and the April House-committee letters suggest 2026 is when that fight became operational. The Deployment Company and OpenEvidence repricing both land on the same side of that bet: distribution moat and credentialed corpus hold; undifferentiated capability compresses.

P3 Institute 2026-05-15-2

From Open Source Software to Open Source Strategy

Gurley's LF Networking data makes the point he doesn't lead with: eight years of open-coalition pressure held Cisco's gross margins at 65-68% while Juniper sold to HPE for $14B, Nokia mobile revenue fell 21%, Ericsson cut 25,000 jobs, and global telecom equipment shrank 11%. Open Source Strategy doesn't kill the leader; it kills everyone ranked two through five. Apply that to frontier AI and the open-versus-closed binary becomes a ranking-within-the-closed-cohort signal: OpenAI plausibly keeps the Cisco premium while the labs below face Nokia-scale compression once a credible Western open-weight frontier lands, and Anysphere on Kimi plus Airbnb on Qwen plus the April 29 House-committee letters suggest 2026 is when that fight became operational.

New York Times 2026-05-14-1

Google Says Criminal Hackers Used A.I. to Find a Major Software Flaw

Google's criminal AI zero-day confirms the new attack topology: AI compressed bug discovery to near-zero cost, but the attacker still needed credentials and the patch cycle still ran in days. The asymmetric trade sits in IAM hardening and patch-velocity infrastructure. The AI-security pure-plays are already priced for the headline; the credential layer is what actually moved.

The New York Times 2026-05-12-2

Google Says Criminal Hackers Used A.I. to Find a Major Software Flaw

AI compressed vulnerability discovery to near-zero cost; credentialed access remained the second gate. Google's disclosure of the first criminal AI-enabled zero-day is the empirical confirmation that the offense-side binding constraint has shifted from bug-finding to credential acquisition, which re-rates the IAM stack more cleanly than the AI-security pure-plays. Rob Joyce's "fingerprint at the crime scene" line points to a parallel category in forensic AI-authorship detection that remains structurally unfilled.

WIRED 2026-05-10-2

I Work in Hollywood. Everyone Who Used to Make TV Is Now Secretly Training AI

Mercor's 300 employees plus tens of thousands of contractors is structurally identical to Medvi's 2 employees plus outsourced clinical labor — same shape, different industry. The frontier labs' "human alignment" premium is a labor-supply-chain bet, and procurement DD that asks about training-data provenance but not evaluation-labor provenance is asking 2024's question. The atomization Fowler describes is the durable feature: profession unbundled into rate-this, classify-that, evaluate-that, with the person erased and the signal extracted.