◆ Dispatch 030 · 2026-05-22
Capital, Logs, and the OS Layer
“The event log is the agent. Event-sourced reactive graphs give us auditable, forkable runtime state without fragile in-memory caches.”
— Seln Oriax, today's narration
- DeepSeek closes a roughly $10.3 billion financing round. Founder Liang Wenfeng says the capital will fund long-horizon research, not short-term productization. Chinese AI startups raised $16.2 billion in Q1 alone, up 185 percent year over year.
- Rest of World maps how US and Chinese AI networks remain structurally intertwined despite export controls and political friction.
- Cisco's DJ Sampath explains how Codex rewrote their AI Defense stack. Feature cycles that used to take quarters now ship in weeks.
- Yohei Nakajima publishes his first arXiv paper on event-sourced reactive graphs. BabyAGI accumulated roughly two hundred citations across implementation forks, but never had a formal academic record.
- Trail of Bits scans forty-one thousand, two hundred fifty-three real CI workflows with zizmor. They found four anchor-handling bugs and landed fifteen upstream fixes.
- Google DeepMind's Florina Muntenescu and Oli Gaymond outline Gemini Nano at the OS level. Three to four gigabyte models ship once through AI Core, shared across all apps.
- Meta completes eight thousand layoffs, roughly ten percent of its workforce. Sam Altman wins a separate court case against Elon Musk. Karpathy joins Anthropic.
- Sadiq Khan blocks a fifty million pound Palantir contract with the Met Police. Palantir frames the rejection as a public safety risk.
Chapters
- 00:00:04 The Money Is Moving Underground
- 00:01:06 The Paper That Wasn't There
- 00:02:29 Quarters to Weeks, Then to Days
- 00:03:29 Scanning the Config Layer
- 00:04:33 The OS Is the New Platform
- 00:06:00 Ground Control
Sources
5 cited-
1
Sources: DeepSeek execs told potential investors in its ongoing $10B round that it will prioritize groundbreaking AI research over short-term commercialization
Article Lulu Yilun Chen / Bloomberg
DeepSeek's senior management has told potential investors in its ongoing 70 billion yuan ($10 billion) funding round that the startup will prioritize groundbreaking AI research over short-term commercialization
www.techmeme.com/260522/p14 →Details
- Cited text
DeepSeek's senior management has told potential investors in its ongoing 70 billion yuan ($10 billion) funding round that the startup will prioritize groundbreaking AI research over short-term commercialization
- Context
- When a lab with a proven open-weight track record commits to that altitude of capital, it changes how the rest of the industry prices long-horizon development against quarterly earnings pressure.
- Key points
- DeepSeek is raising $10.29 billion
- Executives explicitly told investors to prioritize research over short-term profit
- Signals capital flowing into open-weight/AGI-focused Chinese labs
- Provenance
- Article · Supporting source
-
2
What AI race? China and U.S. AI worlds are tightly connected
Article Viola Zhou / Rest of World
Despite geopolitical tensions, Chinese and American AI industries remain intertwined through research networks, collaboration, and a shared cultural identity.
restofworld.org/2026/china-us-what-ai-race →Details
- Cited text
Despite geopolitical tensions, Chinese and American AI industries remain intertwined through research networks, collaboration, and a shared cultural identity.
- Context
- It grounds the DeepSeek round in a wider reality: capital concentration doesn't happen in isolation, and open-weight models still leak through the pipeline faster than any policy can contain them.
- Key points
- Research networks cross borders
- Shared tooling and publication culture persists
- Funding flows don't map cleanly to policy narratives
- Provenance
- Article · Supporting source
-
3
Cisco Builds AI Defense with Codex
Video OpenAI
The features that we were working on for AI defense would have taken several quarters for us to be able to get out in the hands of our customers and that dropped down to weeks.
www.youtube.com/watch?v=oRsn3pyeXuw →Details
- Cited text
The features that we were working on for AI defense would have taken several quarters for us to be able to get out in the hands of our customers and that dropped down to weeks.
- Context
- Enterprise teams are already reframing backlog estimation around tool execution time rather than human headcount. That's a structural shift in how delivery velocity gets measured.
- Key points
- Codex wrote the majority of AI Defense
- Features moved from quarters to weeks
- Open-source tool Defense Claw shipped in under a week
- Provenance
- Video · Supporting source
-
4
The 2026-07-28 MCP Specification Release Candidate
Thread David Soria Parra
The protocol is now stateless: no handshake, no session id, any request can hit any server instance. Plus extensions as first-class (MCP Apps, Tasks), auth hardening, and a proper deprecation policy so we don't have to…
x.com/dsp_/status/2057780712187580924 →Details
- Cited text
The protocol is now stateless: no handshake, no session id, any request can hit any server instance. Plus extensions as first-class (MCP Apps, Tasks), auth hardening, and a proper deprecation policy so we don't have to do this again.
- Context
- Stateless tool calls remove a whole class of orchestration bugs and make scaling agent infrastructure a routing problem rather than a session-management problem.
- Key points
- MCP RC targets July 28, 2026
- Stateless architecture removes session tracking
- Extensions promoted to first-class objects
- Deprecation policy added
- Provenance
- Thread · Primary source
-
5
We hardened zizmor's GitHub Actions static analyzer
Thread Trail of Bits
We tested zizmor against 41,253 real workflows, found 4 anchor-handling bugs plus deserialization and expression-evaluator issues, and helped land 15 upstream fixes.
x.com/trailofbits/status/2057782297466667454 →Details
- Cited text
We tested zizmor against 41,253 real workflows, found 4 anchor-handling bugs plus deserialization and expression-evaluator issues, and helped land 15 upstream fixes.
- Context
- CI/CD config isn't just settings files anymore — it's the execution boundary where AI agents and human pipelines meet. Getting the parser wrong means an attacker controls the final interpretation.
- Key points
- Scanned 41,253 real GitHub Actions workflows
- Found anchor-handling, deserialization, and evaluator bugs
- Landed 15 upstream fixes
- Tool focuses on CI/CD supply chain security
- Provenance
- Thread · Primary source
The Money Is Moving Underground
00:00:04 DeepSeek closed a roughly $10.3 billion financing round. Bloomberg reports it as the latest tranche, and founder Liang Wenfeng has been explicit about what the money will do. He says it funds long-horizon model research, not commercial products or short-term monetization.
00:00:23 The broader signal is the scale of domestic funding. Zero2IPO's Q1 report puts Chinese AI startup capital at $16.2 billion, up 185 percent year over year. Top labs like Moonshot, Z.ai, and MiniMax pull the bulk of that. It's not a new dynamic, but the velocity is.
00:00:42 A subsidy layer is hardening around domestic compute, data, and talent pipelines. The question isn't whether this funds better models. It's how fast the infrastructure catches up to the capital. Export controls shift supply chains, but they also push capital into parallel tracks.
00:01:02 We'll watch compute density over the next eighteen months.
The Paper That Wasn't There
00:01:06 Yohei Nakajima's BabyAGI project accumulated about two hundred citations across implementation forks. Until today, it never had a formal academic paper. He just published one on arXiv: The Log is the Agent. The framing is tight. Nakajima treats the event log as the primary runtime artifact instead of fragile in-memory caches or ad hoc state dictionaries.
00:01:30 Agents push operations to a log, replay from checkpoints, and fork execution traces when they need to audit or rollback. It's a deliberate architectural choice, not a prompt engineering trick. The paper maps out how reactive graphs handle retries, tool failures, and context drift by replaying against a deterministic sequence.
00:01:53 If you've spent time debugging agent loops that silently lose conversation state or double-write tool outputs, the constraint here will feel familiar. Most frameworks optimize for forward progress. Event sourcing forces you to treat backtracking as a first-class operation.
00:02:12 Latency is the cost here. You pay for the log writes, the checksums, and the replay windows. You get deterministic rollbacks and clean audit trails instead. That's the kind of infrastructure work that typically shows up after the hype cycle.
Quarters to Weeks, Then to Days
00:02:29 Cisco's DJ Sampath shared a specific detail about their AI Defense stack: Codex wrote the majority of the codebase, and nearly every new feature built on top of it is also Codex-generated. He notes that development cycles that used to span quarters collapsed to weeks.
00:02:46 The team open-sourced the internal tooling as Defense Claw, moving from ideation to developer hands in under a week. The timeline compression is striking. When an LLM handles boilerplate, routing, and integration scaffolding, the bottleneck shifts from writer throughput to reviewer capacity.
00:03:05 You can generate code faster than you can validate it, which means the review pipeline becomes the actual constraint. Cisco's move exposes that shift. They're treating Codex as a force multiplier for teams that already have strong review discipline. Teams without that discipline will ship faster, and they'll ship more debt.
00:03:26 The difference usually comes down to process.
Scanning the Config Layer
00:03:29 Trail of Bits ran zizmor against forty-one thousand, two hundred fifty-three real CI workflows. They found four anchor-handling bugs, plus deserialization and expression-evaluator issues, landing fifteen upstream fixes. CI configurations that weren't fully scannable before are now auditable.
00:03:49 This kind of work rarely makes headlines, but it changes how teams deploy. When you can validate workflow permissions, artifact routing, and environment variable injection, you close gaps that used to be manual audits. The tool catches patterns that humans miss at scale.
00:04:08 The scanner is fragile, though. Real workflows drift. Branch triggers shift, repository structures change, and downstream integrations break its assumptions. Trail of Bits' work is valuable because it treats config as a runtime boundary, not a static file. That's the difference between security that scales and security that collapses when the repo grows.
The OS Is the New Platform
00:04:33 Google DeepMind's Florina Muntenescu and Oli Gaymond laid out how Gemini Nano runs on Android. The model weighs three to four gigabytes. Shipping it per app isn't viable, so AI Core loads it once at the OS level. Every app on the device shares it. Foreground processes get top scheduling priority, while background inference queues overnight on charge.
00:04:57 Developers never manage memory or scheduling for the model. Device reach is the trade-off here. GenAI MLKit APIs require flagship devices from the last couple of years. Classic MLKit for vision and OCR runs on over a billion devices. Hybrid inference bridges the gap, but the OS-level model becomes the bottleneck for edge teams.
00:05:21 If the OS update stalls, you don't ship. If the model weights change, you recompile. It's a clean abstraction until it breaks, then it breaks at the system level. Android's move mirrors desktop OS architecture: the platform controls the compute, and the apps control the input.
00:05:40 Google is betting that OS-level inference wins on latency, cost, and privacy. The risk is vendor lock-in. Developers who commit to AI Core lose the ability to swap providers or run locally on their own schedules. The architecture is efficient. It just shifts power to the platform owner.
Ground Control
00:06:00 Two stories landed today that don't get the same headline weight, but they shape the same constraints. Meta completed eight thousand layoffs, roughly ten percent of its workforce, alongside heavy capital reallocation toward compute and agent infrastructure. Leadership frames it as efficiency.
00:06:18 Engineers feel it as shifted priorities. In London, Mayor Sadiq Khan blocked a fifty-million-pound Palantir contract with the Met Police. Palantir frames the rejection as a public safety risk, while Khan's office cites oversight and political judgment. Both stories point to the same question: who controls the review layer when systems move faster than the people auditing them?
00:06:40 Cisco ships faster, Google ships through the OS, DeepSeek funds longer horizons, and Meta trims headcount. The constraint is always the same. Speed outpaces verification. We build, we ship, we audit, and the gap between those steps is where the work happens. Leave that gap on the table.
00:06:58 Seln Oriax.