Artificial Confidence: Banned by Pentagon, blessed by Pope, paid for by you
Five assumptions your AI vendor stack lost in five business days. The trade press will not be on the cc line of your Q3 invoice.
Artificial Confidence: Banned by Pentagon, blessed by Pope, paid for by you
I have spent a fairly depressing decade reading AWS bills for a living, and the dependable feature of every quarter remains constant: the vendor’s headline announcements and the customer’s resulting bill invariably have nothing to do with each other. The AI vendors are improving on that formula in realtime, and it’s really something to see.
This week alone: three trillion-dollar IPOs queued in the same fortnight, a $30 billion Series H closing, two cybersecurity products launched in the same news cycle, an SDK supplier acquihired and wound down, a 235-page papal encyclical personally presented by a pope for the first time in modern history, and a new payments protocol with a transaction class called, on purpose, “Human Not Present.”
The press is reading this as a string of capability and capital announcements. Good for them; here in the real world the customers paying these vendors’ bills just lost roughly five assumptions they didn’t know they had. Most of them are only gonna find out from their Q3 invoice, but you’re ahead; count all five below.
What Actually Changed (Adjusted For Spin)
Anthropic bought the company that generated SDKs for OpenAI and Google
Anthropic acquired Stainless on May 18 for a reported $300 million-plus, roughly double Stainless’s December valuation. Stainless powered every official Anthropic SDK, and also generated client libraries for OpenAI, Google, and Cloudflare. Anthropic is winding down all hosted Stainless products which is how we know it’s an acquihire. You assumed the official Claude or OpenAI SDK you pip installed was a first-party product, by which I mean that you didn’t consider where the SDK came from at all, because why would you? And also the vendor never told you. Surprise, that assumption was incorrect. Isn’t it great when we get to learn things together? Instead, it was a third-party deliverable from a vendor Anthropic now owns and is sunsetting. If your stack relied on Stainless’s hosted workflow, you have an engineering project this quarter that you did not have last week, and the vendor management group at OpenAI has the same one. Maybe you can trade tips?
Project Glasswing’s first month found 10,000 critical vulnerabilities
Anthropic published the first numerical results on May 22 from a fascinating project: roughly fifty partners ran Claude Mythos Preview against critical software for a month. The headline was over 10,000 high-or-critical-severity vulnerabilities, including 2,000 at Cloudflare (400 high or critical), 271 patched in Firefox 150 (ten times what a comparable Opus 4 scan found in Firefox 148), and a 90.6% true-positive rate on the open-source subset that external firms verified. You assumed your security budget was priced against the scarcity of capable vulnerability scanners. That scarcity ended on May 22. Tenable, CrowdStrike, and Palo Alto Networks did not price their products against Opus 4.7 inference. They will need to, in the next RFP cycle.
Claude Security launched the same afternoon, helpfully
Anthropic launched Claude Security in public beta on May 22, an Opus 4.7-powered codebase scanner that proposes patches. It had already patched 2,100 enterprise vulnerabilities in the preceding three weeks. The company that announced an industry-wide discovery-rate problem in the morning was selling the cleanup contract by the afternoon, which is a sequencing move that should be appreciated for its craft, if not its decorum. Because that’s more than a bit crass.
OpenAI confidentially filed S-1 the same week its Q1 margins leaked
OpenAI confidentially filed S-1 on Friday May 22 with Goldman Sachs and Morgan Stanley, targeting a Q4 listing at $852B–$1T. The same news cycle, The Information reported that OpenAI generated $5.7 billion in Q1 revenue at a non-GAAP adjusted operating margin of negative 122%, meaning the company lost $1.22 for every dollar of revenue it brought in. ChatGPT weekly actives stalled at 905 million, down from a 920 million February peak; the free-to-paid conversion rate is approximately 6%. What’s that mean for you? Simply that you assumed your OpenAI rate card was sustainable. It is apparently instead subsidized by venture capital at approximately 45% of cost. The S-1 disclosure cycle is the mechanism that’s fated to end the subsidy. This is a data point for the growing thesis that the relatively cheap tokens you are using today are not going to be cheap tokens in eighteen months.
Anthropic’s Series H closing this week at $900B-plus
Bloomberg confirmed Anthropic’s $30 billion Series H closing next week at a pre-money valuation above $900 billion. This is the company’s second $30 billion round of 2026; the February Series G closed at $380 billion post-money. Anthropic’s reported annualized run rate moved from $14 billion in February to $45 billion in early May. Even Anthropic appears to be a little startled by Anthropic. You assumed Anthropic’s pricing discipline was a structural property of the company, the “we’re not OpenAI” pitch made flesh, as it were. At $900 billion-plus closing this week and a Q4 2026 listing reportedly targeted, the same public-market disclosure cycle that is about to retire OpenAI’s rate-card subsidy is now starting at Anthropic. The “disciplined alternative” pitch has an IPO clock on it, and the clock is running.
“Human Not Present” payments became a real schema in a real standards body
Google donated AP2 to the FIDO Alliance and shipped v0.2, introducing autonomous-transaction support that the protocol’s own documentation officially calls “Human Not Present” payments. Sixty partner organizations including PayPal, Mastercard, Visa, and American Express. The payments industry has used “Card Not Present” for two decades as the elevated-fraud category for online card use. “Human Not Present” is the same naming convention, except now the variable that has been removed from the loop is the buyer. You assumed “Human Present” was the only transaction class your e-commerce stack had to support. That assumption retired on the same Tuesday Google announced the Universal Cart.
The Pope Showed Up. The Pentagon Was Conspicuously Absent.
This is the week’s most colorful item and consequently its least practical, which is why I am putting it after the line items rather than ahead of them.
On Monday morning in Rome, Pope Leo XIV personally presented Magnifica Humanitas, his 235-page first encyclical, the first to be personally presented by a pope in modern history. He invited one of Anthropic’s approximately forty co-founders (Chris Olah) to sit next to him and speak as one of five named presenters alongside three cardinals (the religious figures, not the birds; I’m not Simon Willison) and two theologians. The encyclical text criticizes “concentration of power and data in the hands of so few people in the private sector” and does not name a company. The Vatican did not need to. Olah was confirmed by Reuters as the only Big Tech representative invited to the event. Cardinal Czerny, still not a bird, asked whether Anthropic’s reputation as a safety-forward AI company had influenced the Vatican’s decision, said “I’m sure it did,” and then added, “We dialogue with anyone. We don’t endorse.” Endorsement is not the technical term I would reach for either, but the photograph runs on every Catholic news service in five languages.
On March 3, the Pentagon designated Anthropic a national security supply chain risk, the first American company ever to receive a label historically reserved for foreign adversaries, after Anthropic refused to remove guardrails on autonomous-weapons and domestic-surveillance use of Claude. The president ordered federal agencies off Anthropic via Truth Social, his social network that answers the question “what if Twitter were somehow worse.” The legal fight is, of course, ongoing.
You assumed your AI vendor selection was a technical and economic decision. Picking your primary AI vendor is no longer like picking a cloud provider. It is more like picking a defense contractor: the political conditions under which you are permitted to use them are now part of the contract, and the political conditions change with the news cycle. Multi-vendor strategy is no longer a redundancy hedge, but also a political-volatility hedge. The engineering cost of building a vendor-abstraction layer that lets you swap from Anthropic to OpenAI on twelve hours’ notice just became non-optional, and you can put it in next year’s budget under “geopolitical risk.” The trouble is, the models and tooling around them are differentiating, so that twelve hour window is growing longer by the day. Talk to your engineering teams about that.
One last thing
The vendors will continue announcing capabilities and the press will continue covering those capabilities, but the important part for you is that regardless of those, the bills will continue arriving. The vendors and the press will not be on the cc line when you read your bill. Read your rate card this quarter. Understand what it’s telling you, which is harder than it looks. Audit your dependency graph. Assume the political climate around your primary vendor is different next quarter than it is this one.
See you next week.
— C