The Board Room

Deep dives

1. 01

   China's 40x AI Subsidy Is a Platform Default War — and the US Is Losing on Diffusion

   The conventional framing of the US-China AI race — who has the best model — is dangerously incomplete. Intelligence from a16z's senior national security team, corroborated by infrastructure and geopolitical signals across multiple sources, reveals a fundamentally different competitive dynamic: China is waging a platform default war through state-subsidized pricing, and the metric that matters isn't benchmark scores but global adoption share.

   Chinese AI models cost approximately 1/40th what US models cost per token, because the CCP subsidizes them as state policy. For a startup in Lagos, Jakarta, or São Paulo, the math is straightforward.

   This is 'involution' — the same strategy of state-subsidized hyper-supply that overwhelmed global solar and EV markets. The critical difference: AI platforms create far deeper lock-in than manufactured goods. And by Chinese regulation, these models must embed pro-CCP ideological alignment — whether activated for international users today or held in reserve for tomorrow. Deepexi, a Chinese enterprise AI firm, is already building complete 'AI employee' platforms with reusable skills for manufacturing and operations verticals, signaling the competition is multi-front and production-grade.

   ---

   Three Strategic Inflections Demanding Integrated Planning

   First, the pricing war. If your business model depends on selling AI capabilities built on US-origin models, you face a competitor that can undercut you 40-to-1 indefinitely. Quality differentiation alone won't overcome that gap in price-sensitive emerging markets. You need either radical cost innovation — through open source, efficient architectures, or novel delivery — or a trust-and-provenance differentiation strategy that makes embedded Chinese model bias a liability in enterprise sales.

   Second, the defense opportunity. Pentagon procurement reform through the recent NDAA represents the single largest new addressable market for commercial AI since cloud. The shift from system-specific to solution-based procurement, combined with elimination of ~20% compliance overhead, breaks the moat that protected five incumbent defense primes for sixty years. Companies that build defense GTM capabilities now — solutions packaging, security clearances, domain expertise — can capture disproportionate share of nearly $1T in annual defense spending before incumbents adapt.

   Third, the open-source imperative. The US government has reversed its position: the lack of US open-source AI leadership is the national security threat, not open source itself. DARPA is funding open-source AI projects. Companies that visibly invest in open-source AI gain policy tailwinds, developer ecosystem advantages, and positioning as the democratic alternative to state-subsidized Chinese models.

   ---

   Binding Constraints Are Physical, Not Technical

   The US power grid is 60-70+ years old. Infrastructure permitting takes 7.5 years versus 2 in Canada. China is running a 'Manhattan project' for domestic lithography that, if successful, eliminates the West's primary semiconductor chokepoint. Hua Hong's 7nm achievement — while several generations behind TSMC — is meaningful for inference workloads. Within 3-5 years, Chinese cloud providers may offer AI compute at materially lower price points, potentially fragmenting the global AI infrastructure market along geopolitical lines.

   The 3-year question isn't 'who has the best model' — it's 'whose AI platform does the world build on by default.' Your positioning decisions in the next 12-18 months determine which side of that equation you land on.

   What to do

   1. →

      Audit your AI supply chain for Chinese model dependencies and develop a provenance policy before customers and regulators demand one

      This sprintChinese models embed regulatory-mandated CCP alignment — this is a latent reputational and security risk that's already materializing in enterprise procurement conversations
   2. →

      Commission a competitive analysis of Chinese AI pricing impact on your addressable markets within 60 days

      This sprintA 40:1 price gap is existential for any AI product competing in price-sensitive or emerging markets — you need to know your exposure before your next board meeting
   3. →

      Develop or accelerate a defense/national security GTM strategy to capture newly accessible Pentagon budget this quarter

      This quarterProcurement reform creates a first-mover window that will close as incumbents adapt — the companies that build clearances and domain expertise now will have 3-5 year advantages
   4. →

      Evaluate strategic investment in open-source AI as both a competitive positioning and geopolitical alignment decision

      This quarterUS government policy now actively preferences open-source AI ecosystems — alignment creates regulatory tailwinds and developer ecosystem advantages simultaneously
2. 02

   $700B in Off-Balance-Sheet AI Leases — The Industry's Hidden Margin Trap

   The most consequential financial signal in AI right now isn't any company's revenue — it's the $700 billion in off-balance-sheet lease obligations quietly accumulated across Oracle, Microsoft, Google, Amazon, and Meta. This capital is committed but not yet deployed, doesn't appear on balance sheets, and represents the most aggressive infrastructure bet in technology history.

   Company	Off-Balance-Sheet Commitments	Context
   Oracle	$260B	Disproportionate to revenue base — board-level concern
   Meta	$131B	4x increase in 12 months; was $32.8B
   Microsoft	~$100B+	1 GW letter of intent with Nscale alone
   Google	~$75B+	Offset by TPU vertical integration advantage

   The Margin Compression Is Already Visible

   Meta's operating margins compressed 13 points in 12 months. Their contractual commitments quadrupled from $32.8B to $131B in a single year, with the composition flipping from owned servers to third-party cloud. Even with a $125B capex budget for data center buildout, Meta is simultaneously committing $131B to rent capacity. The implication for every technology executive: your internal buildout timeline is almost certainly too slow, and the rental market is about to get significantly more expensive.

   Even the most well-capitalized companies on Earth cannot build AI infrastructure fast enough to meet their own internal demand.

   The Contrarian Signal: Apple's $14B Bet

   Against the hyperscalers' $700B, Apple is spending $14B — not because they can't afford more, but because they're operating from a fundamentally different thesis: models will commoditize and shrink, on-device AI will absorb cloud workloads, and customer ownership is the only durable franchise. Open-source evidence accumulates in Apple's favor: Mistral Small 4 ships at 119B parameters with multimodal capability and open weights. Each release narrows the proprietary model premium.

   Two separate $1B raises for 'world models' — Yann LeCun at $3.5B valuation and Fei-Fei Li at $5B — signal the smartest people in AI are hedging against LLMs. If models prove transitional, $700B in LLM-optimized infrastructure faces stranded-asset risk. A 30% probability of model commoditization within 3 years is enough to warrant hedging infrastructure bets.

   Second-Tier Providers Create a Window

   Meta's $27B Nebius deal — a Netherlands-based data center firm, not a hyperscaler — and Nscale acquiring major US sites with Microsoft as anchor tenant reveal that overflow demand is creating viable businesses for second-tier providers. For enterprise buyers, this creates a time-limited window: mid-tier providers are available for partnership or acquisition at valuations that will look cheap in 12 months. Companies that lock in compute access now will have structural advantages over those competing on the spot market later.

   What to do

   1. →

      Conduct a board-level stress test of your AI infrastructure cost trajectory using Meta's margin compression as a base case scenario

      This sprintIf Meta can't avoid a 13-point margin compression despite $125B capex, your cost assumptions need validation against this reality
   2. →

      Scenario-plan your P&L against a world where AI infrastructure costs don't decline for 24 months

      This sprintNvidia's $1T demand projection, chip shortages through 2030 (per SK Group), and overflow demand to second-tier providers all suggest costs plateau or increase near-term
   3. →

      Evaluate acquisition or strategic partnership with mid-tier AI infrastructure providers (Nebius, Nscale, Cerebras) before the seller's market intensifies

      This quarterThe $27B Nebius deal proves these providers are strategically critical — locking in capacity now is cheaper than competing on spot markets later
   4. →

      Stress-test your AI strategy against Apple's commoditization thesis — model what happens if on-device AI and model compression outpace centralized cloud AI within 3 years

      This quarterThree billion-dollar 'world model' bets from top AI researchers suggest the smart money is actively hedging — your strategy should too
3. 03

   GlassWorm + ALPHV Collusion: Your Developer Pipeline and Incident Response Trust Model Are Both Compromised

   Two converging security developments demand immediate leadership attention — and together they reveal that both your development environment and your incident response supply chain may be fundamentally compromised.

   GlassWorm: Industrial-Scale Developer Supply Chain Attack

   The GlassWorm campaign represents a qualitative leap in supply chain attack sophistication. In just six weeks, a single threat actor seeded 72 malicious VS Code/Cursor IDE extensions and compromised 151 GitHub repositories using LLM-generated cover commits and documentation. The attack is nearly undetectable:

   • Invisible persistence: ~/init.jason files on developer machines
   • Blockchain C2: Solana transaction memos as dead-drop command channels — making takedown effectively impossible through traditional means
   • Git manipulation: Force-push injections that preserve original commit messages, author dates, and metadata — invisible in standard activity feeds
   • Cross-ecosystem: Python repos, npm packages, and IDE extensions attacked simultaneously

   This attack targets the tools developers use to build your products. A compromised IDE extension doesn't just steal credentials — it potentially poisons every repository that developer touches.

   Cortex XDR: Your EDR May Be Half-Blind

   InfoGuard Labs discovered that Palo Alto Cortex XDR's hardcoded global whitelists exempted approximately 50% of all behavioral detection rules for any process matching a specific path string — including critical LSASS credential dump prevention. Agents below version 9.1 are affected. If your organization runs Cortex XDR, you may have had a structural detection gap for an unknown duration. The strategic implication extends beyond Palo Alto: the single-vendor EDR thesis is fundamentally weakened.

   ALPHV BlackCat: Your Incident Response Vendors May Be Compromised

   Federal charges revealed that ransomware negotiator Angelo Martino (DigitalMint) and incident response manager Ryan Goldberg (Cygnia) actively colluded with ALPHV BlackCat operators across ten attacks generating $75.25M+ in ransom payments. Martino fed confidential client information to attackers to maximize demands. This is the cybersecurity equivalent of your defense attorney working with the prosecution.

   The Cascading Breach Pattern

   The TELUS Digital breach illustrates why point-in-time vendor assessments are inadequate: ShinyHunters compromised credentials from an earlier Salesloft Drift breach and used them to access TELUS Digital's Google Cloud Platform, exfiltrating nearly 1 petabyte. Credential cascades — where Vendor A's breach enables Vendor B's compromise — require mapping credential-sharing surfaces across your entire SaaS ecosystem.

   What to do

   1. →

      Direct your engineering security team to conduct an immediate threat hunt for GlassWorm indicators: ~/init.jason persistence files, null committer emails in recent git history, and review all VS Code/Cursor extensions installed across engineering endpoints

      NowGlassWorm is actively compromising developer environments — the attack is designed to be invisible to standard monitoring, and every day of exposure potentially poisons production repositories
   2. →

      If running Palo Alto Cortex XDR below version 9.1, escalate upgrade to critical priority within 72 hours and assess whether detection gaps were exploited during the exposure window

      Now50% of behavioral detection rules may have been bypassed — this is a material security gap that needs immediate remediation
   3. →

      Review all third-party incident response retainer agreements, adding documented vetting procedures, conflict-of-interest controls, and information compartmentalization requirements

      This sprintThe ALPHV collusion case breaks the fundamental trust assumption of the IR vendor relationship — proactive governance beats reactive scrambling when regulation arrives
   4. →

      Map credential-sharing surfaces across your SaaS vendor ecosystem and implement credential isolation between third-party tools with cloud infrastructure access

      This sprintThe TELUS Digital cascading breach proves third-party risk is exponential, not linear — one compromised vendor credential can unlock your entire cloud estate
4. 04

   LeCun's $1B AMI Labs Splits AI Into Two Paradigms — Your Strategy Needs a Physical Intelligence Thesis

   Yann LeCun's departure from Meta to found AMI Labs isn't a personnel story — it's a strategic inflection point that signals the AI industry is bifurcating into two fundamentally different paradigms with different architectures, different economics, and different competitive dynamics.

   The Thesis: Language Intelligence vs. Physical Intelligence

   LeCun raised $1.03 billion in four months at a $3.5 billion valuation, oversubscribing from an initial €500M target. His JEPA (Joint Embedding Predictive Architecture) learns abstract representations of the physical world while discarding unpredictable noise — the inverse of LLMs, which predict the next token. This makes JEPA purpose-built for domains where understanding causality, physics, and spatial relationships matters more than generating text: robotics, manufacturing, automotive, aerospace, and pharmaceuticals.

   The investor syndicate validates the industrial thesis:

   • NVIDIA — compute infrastructure
   • Toyota Ventures + Samsung — automotive and hardware manufacturing demand
   • Temasek + Bezos Expeditions — sovereign and strategic patient capital

   These aren't speculative financial investors. They're organizations with concrete physical-AI needs that LLMs haven't solved.

   Three Billion-Dollar Bets Against LLM Supremacy

   AMI Labs doesn't stand alone. Fei-Fei Li raised $1B at $5B valuation for World Labs on a similar thesis. Physical Intelligence has $1B+ for robotics foundation models. When three separate world-class teams raise a combined $3B+ on the thesis that LLMs won't achieve structural understanding of cause and effect, that's the AI equivalent of top seismologists all buying earthquake insurance at the same time.

   If your AI strategy treats language intelligence and physical intelligence as one market served by one paradigm, you're carrying hidden risk that three Turing Award-caliber teams are specifically targeting.

   The Open-Source Platform Play

   LeCun plans to open-source world models — not as philanthropy but as a platform play. By setting the standard for physical AI the way Meta's Llama shaped the open-source LLM ecosystem, AMI Labs aims to create ecosystem lock-in that proprietary competitors will struggle to overcome. The Paris headquarters positioning as 'neither Chinese nor American' is deliberate — AI sovereignty is becoming a procurement criterion for European governments and enterprises.

   The Meta Relationship: A New Archetype

   LeCun didn't just leave Meta — he took nearly all of Meta FAIR's senior researchers and is already in commercial talks to sell AMI technology back to Meta for Ray-Ban smart glasses. This is the new template: the hyperscaler as training ground and eventual customer, not permanent home, for frontier AI talent. Any company with a strong AI research team should stress-test retention against this model.

   What to do

   1. →

      Commission a 'physical intelligence audit' of your AI strategy — identify every initiative applying LLMs to problems fundamentally about physical world understanding (robotics, simulation, supply chain) and assess whether world models would be a better fit

      This quarterIf your product roadmap touches manufacturing, logistics, or hardware design and relies exclusively on LLMs, you have a strategic blind spot that $3B+ in funding is specifically targeting
   2. →

      Brief the board on the AI paradigm bifurcation and its implications for your multi-year AI investment thesis

      This quarterThis isn't speculative — three well-capitalized teams with world-class leadership are executing against this thesis now, with first models expected within 12-18 months
   3. →

      Assess talent retention risk for any AI researcher with world-model, computer vision, or robotics expertise — they are active recruitment targets for AMI and the wave of similar startups

      This sprintLeCun's playbook of leaving a hyperscaler with an entire research team is now a proven template that will be replicated across the industry
   4. →

      Monitor AMI's first model releases for applicability to your product roadmap — they plan to ship quickly and open-source

      WatchBeing ready to prototype on day one gives you positioning advantage as the world-model ecosystem forms