Cursor began rolling out Origin, its own code hosting platform, to paid users on Monday morning. Roughly three and a half hours later, GitHub’s status page lit up with what became a six-hour-and-forty-two-minute global degradation — error rates near 20% across pull requests, issues and the API, and near 50% on archive and raw file downloads, according to GitHub’s incident log. Enterprise single sign-on went down with it: SAML, OIDC, SCIM provisioning and Team Sync all failed. So did Copilot.

The developer internet did what the developer internet does.

“You can now host your repos in Cursor Origin and deploy to Vercel via Cursor Origin which is itself hosted on Vercel,” Vercel chief executive Guillermo Rauch posted on X. “And unlike GitHub, it’s online 😁” Asked why he was smiling, Rauch replied: “trying to make light of the situation. We ourselves are stuck because of github rn!”

Matt Palmer, who works at Cursor, quote-tweeted his own company’s launch with the day’s best line: “We were going to ship this earlier, but GitHub was down.” A GitHub outage, in other words, delayed the launch of a GitHub competitor.

Product launches get locked weeks in advance, and no evidence suggests Cursor timed this one. But the coincidence did the company an enormous favor, because it dramatized the argument Origin exists to make. For eighteen years, choosing where to host your team’s source code has been the least interesting decision an engineering organization makes. Cursor is betting that AI agents have made it interesting again — and for technical decision makers, that is the real news here. Not a new product, but a new procurement question with a governance problem attached.

Inside Origin: what Cursor’s code hosting platform actually does

Origin lives in a new Codebase tab inside Cursor. Teams name a codebase, which becomes part of its URL, then push to it over the command line. From there they get the machinery you would expect from a forge — the service layer that wraps Git and handles storage, permissions, checks and merges. Every repository comes with pull requests: timelines, commits, checks and files changed. Reviewers read the diff, leave comments and merge, without ever opening a browser tab.

What Cursor built around that machinery is the part worth studying. Agents now operate in the same surface as the code and the pull requests they are modifying. “Your code, PRs, and agents are now in the same place,” the changelog reads. A developer can ask questions about the file on screen, hand an agent a review comment and have it revise the pull request in place, or tell it to push a branch — all inside the editor where the code was written.

Three integrations shipped on day one, and the choice of partners is telling. Vercel spins up a preview deployment for every pull request and ships to production on merge, available in public beta for Pro and Enterprise customers, its developer account said. Depot and Buildkite run continuous integration, and critically, both execute existing GitHub Actions workflows unchanged. Buildkite adds native pipelines on top.

That compatibility layer is the whole strategy in miniature. Cursor is not asking teams to rewrite their build system, retrain their engineers or rip out their deployment pipeline. It is asking them to try a second window onto code they already have — which is a far easier request to approve.

More partners are coming, the company said, and the ones it landed first are the ones that matter to a platform team evaluating whether Origin can carry real work. A forge without deployments and CI is a code viewer. A forge that runs your existing Actions workflows and ships previews to the CDN you already pay for is a candidate.

Why letting GitHub stay the source of truth is Origin’s smartest design choice

Here is the decision enterprise buyers should study most closely, because it determines whether Origin survives a security review at all.

Cursor does not ask you to leave GitHub. Connect a GitHub organization, pick repositories, and they appear alongside Origin-native ones. “Pushes keep going to GitHub, which stays the source of truth for anything started there,” the changelog says. Access permissions mirror GitHub’s existing read and write settings rather than establishing a parallel system. Pull request conversations sync in both directions — comment in Cursor and it posts to GitHub; reply or react on GitHub and it surfaces in Cursor “within seconds.”

This is a classic wedge, and a well-executed one. Rip-and-replace migration of source control ranks among the highest-risk projects an engineering organization can undertake. It touches continuous integration, compliance evidence, audit trails, branch protection rules, every integration in the toolchain and the muscle memory of every engineer on staff. Almost no chief technology officer approves that for a product in early beta.

A read-mostly mirror that leaves GitHub authoritative approves itself. It costs nothing to try, breaks nothing if abandoned, and quietly relocates the place developers spend their working hours. If Cursor’s review experience proves better — and Cursor spent real money to make sure it would — the source of truth eventually follows the attention.

That money went to Graphite, the code review startup Cursor bought in December 2025 for what Axios reported was well above its $290 million Series B valuation. Graphite built stacked pull requests, the workflow that lets developers keep shipping dependent changes without waiting on approvals. Announcing the deal, Cursor wrote that “the boundary between where you write code and where you collaborate on it feels increasingly arbitrary,” and promised “some more radical ideas we can’t share just yet.” Origin is the radical idea. Graphite co-founder Tomas Reimers unveiled it on stage at Cursor’s inaugural Compile conference in June and leads its development.

How AI agents turned code review into software’s new bottleneck

The case for an agent-native forge rests on a claim that is easy to state and, unusually for this market, well supported by evidence: writing code stopped being the constraint. Reviewing and integrating it became one.

Google’s 2025 DORA report, drawn from nearly 5,000 technology professionals, found that 90% of developers now use AI at work, spending a median of two hours a day with it, and more than 80% say it made them more productive. But AI adoption showed a positive relationship with software delivery throughput and a negative one with delivery stability. More output, more breakage. The report’s authors describe AI as “an amplifier” that “magnifies the strengths of high-performing organizations and the dysfunctions of struggling ones.”

Trust has not kept pace with volume. Stack Overflow’s 2025 developer survey of 49,009 respondents across 177 countries found 84% using or planning to use AI tools, while trust in their accuracy fell to 33% from 43% a year earlier and distrust climbed to 46% from 31%. Two-thirds named “AI solutions that are almost right, but not quite” as their leading frustration. GitLab’s ninth annual DevSecOps survey, of 3,266 practitioners polled by Harris, put numbers on the operational drag: 73% had hit problems with vibe-coded output, 70% said AI made compliance management harder, and only 37% would let AI handle daily tasks without human review.

The volume climbs regardless. GitHub’s Octoverse 2025 counted 180 million developers, 630 million repositories and 43.2 million pull requests merged per month, up 23% year over year. And RuntimeWire reported the internal figure that best explains Origin’s existence: 35% of pull requests merged inside Cursor were opened by agents running autonomously in cloud virtual machines.

A forge built for humans assumes a pull request represents human intent, opened by someone you can ask what they meant. Once a third of merged changes come from software, the queue stops being a conversation and becomes a scheduling problem. That is a real architectural argument, and it is the strongest thing Cursor has going for it.

GitHub’s reliability crisis handed Cursor an opening it did not have to earn

The supply-side case for an alternative is simpler: GitHub has been unreliable, and its own executives have said so.

An analysis by LeadDev counted 257 incidents between May 2025 and April 2026, 48 of them major — roughly one significant disruption per week. February was the worst month on record with 37. GitHub Actions alone accounted for 57 outages in twelve months. Chief technology officer Vlad Fedorov has said the platform “wasn’t built for the scale it’s now being asked to handle” and must design for 30 times today’s load. In an April engineering post covered by InfoQ, the company acknowledged it “failed to meet its own reliability standards,” citing rapid growth, tight architectural coupling and inadequate load shedding. Monday’s outage was the seventh incident on GitHub’s status page in fifteen days.

The fatigue is audible. “GitHub really doesn’t feel built for the agent era,” one developer wrote on X as Origin went live. “It goes down way too often, but until now there haven’t been many real alternatives.”

The defections started before Origin existed. The Zig programming language moved to Codeberg in November 2025, citing Actions failures among its reasons. In April, Mitchell Hashimoto announced that Ghostty — a terminal emulator with more than 52,000 stars — would leave too, pointing to near-daily outages that blocked reviews and CI for hours. And The Information reported in March that OpenAI, a company Microsoft holds a large stake in, began building its own GitHub alternative partly because outages left its engineers unable to commit for hours at a time, as Tom’s Hardware relayed.

Microsoft’s structure has not helped. Thomas Dohmke resigned as GitHub chief executive in August 2025 and was never replaced; the unit’s leadership was absorbed into Microsoft’s CoreAI organization under executive vice president Jay Parikh. In a May report, The Information wrote that Parikh had warned deputies that coding tools from Cursor and Anthropic could eventually make GitHub obsolete. GitHub’s own answer to the agent era, Agent HQ, lets customers orchestrate third-party agents from Anthropic, OpenAI, Google, Cognition and xAI inside GitHub — a coherent strategy that concedes the agent layer and keeps the substrate underneath. Origin attacks precisely that substrate.

Now that SpaceX owns Cursor, who actually holds your source code?

Cursor’s rise has been extraordinary even by the standards of this cycle. Founded in 2022 by four MIT students, Anysphere raised $8 million from the OpenAI Startup Fund in October 2023, per TechCrunch, then $100 million at $2.5 billion, $900 million at $9.9 billion, and $2.3 billion at $29.3 billion last November. In May, Bloomberg reported annualized revenue of $3 billion and more than 3,000 customers paying at least $100,000 a year.

Then, three days before Origin shipped, Bloomberg reported that SpaceX completed its $60 billion all-stock acquisition of Cursor — an agreement TechCrunch covered in June, days after SpaceX’s record IPO and six months after it absorbed xAI. Cursor now operates inside a division called SpaceXAI. The vendor asking to hold your proprietary source code became, last Friday, a unit of a rocket company with its own frontier-model division and a founder not known for institutional caution.

Jason Andersen of Moor Insights & Strategy raised the model-routing question to Tech Times in June, before the deal closed: “xAI’s models and treatment of guardrails are very different than what Cursor has stood for.” That piece framed the question a chief information security officer now has to answer. When one company controls the editor where agents write code, the host where that code lives and the model those agents run on, what governs what it does with the code?

Cursor has not published an answer. RuntimeWire noted before launch that Origin’s pricing, security architecture, data-handling terms and migration tooling were all unpublished, and Monday’s changelog adds none of them. It says only that Origin reaches “all paid plan users starting today, except enterprise orgs whose admins opt out.” Opt-out, not opt-in — a sentence administrators should read twice.

There is also a track record to weigh. In July, researchers at Mindgard disclosed that Cursor would execute a malicious git.exe planted in a Windows project’s root the moment a user opened it, with no prompt — a repository-poisoning flaw they first reported in December 2025. The Hacker News reported that Cursor declined to patch it, calling the issue out of scope under a shared-responsibility model while conceding it had not “closed the loop with the researcher in a timely manner.” No CVE was issued. The same flaw class turned up unpatched in GitHub Copilot CLI, Google’s Gemini CLI and OpenAI’s Codex — but a vulnerability the vendor declined to fix makes an awkward footnote for a product whose pitch is basically “let us hold your repositories.”

What engineering leaders should settle before they let Origin into the toolchain

Origin is a beta, not a migration, and treated as one it is worth evaluating. The sync mode gives platform teams a low-risk way to measure whether an agent-native review surface shortens cycle time, without touching a single branch protection rule. But three things deserve resolution before anything authoritative moves.

The first is the default. Origin switches on for paid users unless an enterprise administrator opts out, which means an organization that has not made an affirmative decision about whether proprietary code may be mirrored to a new host has effectively had that decision made for it. Confirming your posture is a Monday-morning task, not a next-quarter one.

The second is the paperwork. Retention, residency, training use, subprocessors and what changes now that Cursor reports into SpaceX are all unpublished, and a product page is not a contract. Until those terms exist in writing, the defensible position is to treat Origin as a convenience layer over GitHub rather than a system of record — which is, conveniently, exactly what its architecture already is.

The third is the exit. Origin’s Actions compatibility and its GitHub-as-source-of-truth design are the properties that make it safe to adopt. They are also the ones most likely to erode as Cursor’s incentives shift toward owning the substrate rather than borrowing it. Ask what egress looks like now, while the mirror is still a mirror.

None of which makes Cursor’s argument wrong. GitHub earned its incumbency by being boring, dependable infrastructure, and it has spent eighteen months being neither while a third of the code arriving at its front door stopped being written by people. Origin is a serious answer to a real problem, built by a team that bought the right company to build it.

But GitHub’s failure and Cursor’s are different in kind, and enterprises should not confuse them. Monday’s outage resolved at 20:22 UTC. Availability is an engineering problem, and engineering problems close. The question of who holds your source code, what they may do with it and who they ultimately answer to carries no such timestamp — and on that one, the company that spent Monday selling trust has yet to publish its terms.

Mistral AI wants to turn European AI sovereignty from a talking point into a product — one with a service-level agreement attached.

The French artificial intelligence company announced Tuesday a three-part expansion of its infrastructure business: regional inference endpoints that let customers choose whether their AI workloads run in Europe or the United States, a new “Priority Tier” backed by an uptime guarantee for mission-critical deployments, and a coalition of European enterprises making multi-year compute commitments that Mistral says will underwrite 200 megawatts of infrastructure across Europe by the end of 2027 — and a full gigawatt by the end of 2030.

In a move that may raise eyebrows among sovereignty purists, the company also said it will begin hosting third-party open models on its platform, starting with GLM-5.2 from Z.ai, the Chinese AI lab formerly known as Zhipu.

Taken together, the announcements mark a decisive shift in how Mistral positions itself. The company that built its reputation training open-weight language models is now selling something closer to critical infrastructure: assured capacity, regional control, and contractual reliability for enterprises and governments that want frontier AI without surrendering control over where it runs.

“When we spoke in June, the story was around how Mistral was building a full-stack AI offering,” Timothée Lacroix, Mistral’s co-founder and chief technology officer, told VentureBeat in an exclusive interview ahead of the announcement. “Today, the announcement is about strengthening one part of this infrastructure, which is the inference part.”

That one part, it turns out, comes with a price tag measured in the tens of billions of dollars.

Inside Mistral’s plan to build 1 gigawatt of European AI compute by 2030

The headline numbers deserve scrutiny, because they imply staggering capital requirements. Mistral currently operates less than 200 megawatts of capacity, according to the company. Details shared with VentureBeat show the near-term buildout resting on three sites: a 44-megawatt facility near Paris that became operational in the second quarter of this year, a 23-megawatt facility in Sweden built in partnership with EcoDataCenter using renewable energy and advanced cooling, and a 10-megawatt site in Les Ulis, France, that came online in the third quarter.

Getting from there to one gigawatt by 2030 is a different order of magnitude. Independent estimates suggest just how different: research firm Epoch AI calculates that a typical one-gigawatt AI data center requires roughly $38 billion in upfront capital expenditure, with servers and GPUs — not buildings or land — consuming the majority of the cost. Goldman Sachs Research pegs next-generation AI facilities at $15 million to $20 million per megawatt before accounting for the chips inside them.

Lacroix did not dispute the scale of the challenge. The investment required for a gigawatt of capacity “is a large investment that requires also a lot of scaling and revenue behind it,” he said.

The urgency, in his telling, comes from a supply crunch that is about to get worse. “More and more, and especially around 2027 and 2028, we see that the demand for AI compute is exceeding what the market has to offer, especially in Europe,” Lacroix said. McKinsey has estimated that meeting global AI demand could require $5.2 trillion in data-center capital expenditure by 2030 — and Europe, by most analyses, is starting from behind.

A company valued at a fraction of its American rivals cannot close that gap with venture capital alone. Which explains the most consequential — and most unusual — piece of Tuesday’s announcement.

European Compute Units turn AI sovereignty into a five-year contract

Mistral is assembling what it calls an anchor group of enterprises whose long-term commitments will collectively finance infrastructure none of them could justify alone. Those commitments convert into “European Compute Units,” or ECUs — a claim on Mistral-built capacity over multiple years that participants can spend on inference, training, model adaptation, or other AI workloads as their needs evolve.

If that structure sounds more like a power-purchase agreement than a cloud contract, that appears to be the point. Data-center financing increasingly resembles large infrastructure projects — gigawatts, substations, energy agreements — rather than traditional technology spending, and lenders want demand locked in before capital gets deployed. Mistral raised €830 million ($962 million) in debt earlier this year to fund its data center near Paris, TechCrunch reported in March, and pre-committed enterprise demand is exactly what makes that kind of financing repeatable at ten times the scale.

Lacroix was unusually direct about the mechanics. “The entire point of compute units is to have commitment,” he said. “The goal is to have customers commit for around five years, or at least a long time.” Asked what happens if a customer wants out early, he didn’t soften the answer: “There is no getting out.”

What makes a five-year, no-exit commitment palatable, he argued, is flexibility in how the capacity gets consumed. “Typically this can be spent on raw inference that you then feed through any other AI stack. It can be spent on raw compute as managed Kubernetes, and it can be spent at the very top with our full AI offering,” he said. “My hope is that they will use it with our full-stack services and will love it.”

The anchor group already includes some of Europe’s industrial heavyweights. Amadeus CEO Luis Maroto said in a statement that “capacity, deployment control, and operating continuity become increasingly important for all enterprises.” ASML chief Christophe Fouquet — whose company led Mistral’s $13.4 billion (€11.7 billion) Series C last year — called building European AI capacity one of the few industrial endeavors that “will matter more to Europe’s next generation,” while Capgemini’s Aiman Ezzat framed it as “a question of who shapes the future of European industry.” CMA CGM chairman Rodolphe Saadé said the shipping group’s Mistral deployment is “already under way among thousands of employees.”

Commitments of that duration only make sense, of course, if the sovereignty being purchased is real. On that question, Mistral’s announcement contains an asterisk worth reading closely.

The fine print on sovereign AI: what data can still leave Europe

The centerpiece product is Mistral Regional Endpoints, now generally available, which let customers pin inference and its associated processing to Europe or the U.S. Alongside it, the new Priority Tier — in public preview — offers committed service levels, custom rate limits, and an uptime SLA for mission-critical workloads.

Mistral claims it is the only European AI lab offering both a choice of processing region and an SLA-backed service tier, and Lacroix said a third option is coming: an endpoint “that stays on Mistral-controlled infrastructure, so on Mistral compute” — for customers who want their inference not just in Europe, but off hyperscaler hardware entirely.

Then comes the fine print. Mistral’s own materials note that in-region inference remains subject to “limited, safeguarded transfers” to sub-processors that may sit outside the chosen region. Pressed on what actually leaves Europe, Lacroix pointed to the connective tissue of modern AI applications: tool calls.

“There are some tool services, like some tool calls, that might be hosted in places where we don’t fully control this,” he said, citing web search as an example. “A few of our web-search providers might not all be in Europe, and in that case, we need to potentially gate that capability.”

His answer to the compliance question — would this satisfy a European bank or a defense ministry? — was that gating is the feature, not the bug. Capabilities that cannot be sourced in-region can be switched off entirely, restricted to certain users or workspaces, or, given sufficient demand, rebuilt with European providers. “Any capabilities that we don’t find a provider for in Europe — if it needs to be done in Europe, we’ll find some way to implement it or find ways to address it,” Lacroix said.

For enterprise buyers, that is a more honest framing than most sovereignty marketing offers: full regional control is available, but the moment an AI agent reaches out to the open web, sovereignty becomes a configuration decision rather than a default. The same pragmatism runs through the announcement’s most surprising line item.

Why Europe’s open source AI champion is hosting China’s GLM-5.2

A French national champion — one that has partnered with the French army and positioned itself as Europe’s answer to American AI dependence — hosting a Chinese lab’s model invites an obvious question. Lacroix’s answer was disarmingly matter-of-fact.

“It’s a great model. Everyone loves it. It’s open weight, so there was no good reason for us not to do it, really,” he said, noting that Mistral’s own stack is already built on open-source software like Kubernetes.

On security vetting, he argued that open weights fundamentally change the risk calculus. “The risks in taking a new model, at the layer of the weights, are — at least in my opinion — rather limited,” Lacroix said. “We checked basically all of the safety and compliance evals that we have. We’ll control that model, its outputs, and what it does the same way we do any of our models. We have the same inputs and outputs and monitoring capabilities over all of it.”

The strategic logic is worth unpacking. By hosting third-party open models under European regional controls and the same SLAs as its own, Mistral is repositioning itself from model vendor to sovereign distribution layer — the trusted intermediary through which any open model, regardless of origin, can be consumed by a regulated European enterprise that could never call a Chinese API directly. It is the “model garden” playbook the hyperscalers run with Bedrock and Vertex, executed on European soil with European guarantees.

Customers appear to be reading it that way. “Mistral allows us to run open models under strict regional controls and service commitments, making it easy for us to maintain data residency and compliance requirements,” Matan Griberg, CEO of AI software-engineering company Factory, said in a statement.

Lacroix stressed the move is not a retreat from frontier training: the model Mistral had in training as of June “is still training, and we’re still very excited about it,” he said. But openness to rivals’ models signals where the company now believes its moat lies — not in any single model, but in the infrastructure underneath all of them. Which makes its relationship with the world’s most powerful infrastructure company all the more interesting.

How the multibillion-dollar Microsoft deal funds Mistral’s independence

Hovering over every sovereignty claim is Mistral’s deepening relationship with Microsoft. In July, the two companies announced a multibillion-dollar expansion of their partnership under which Microsoft will rent capacity from Mistral’s European data centers to serve its own cloud and AI demand, while adding Mistral Medium 3.5 and OCR 4 to Microsoft Foundry, bringing Medium 3.5 to Copilot Studio, and enabling Mistral models on Azure Local for disconnected, customer-controlled environments. Mistral CEO Arthur Mensch told The Wall Street Journal at the time that two-thirds of Mistral’s customers already work with Microsoft.

How does a company selling independence from U.S. hyperscalers square taking one on as its largest tenant? Lacroix described Microsoft not as a patron but as an anchor customer that de-risks the buildout.

“It allows us to scale different parts of the business differently by building infrastructure with Microsoft as a customer,” he said. “We can scale that team, we can scale our infrastructure, and make sure that we can then, on the side of it, also build for ourselves and for our customers.” He compared the arrangement to the neocloud playbook — companies that built businesses supplying capacity to the hyperscalers themselves. “As that part of our business resembles that of neoclouds, we’re following the same thing.”

It is a genuinely clever inversion: rather than renting American infrastructure, Mistral is renting infrastructure to one of America’s largest companies, using Microsoft’s demand to finance capacity that also serves European sovereignty customers. But the independence has limits no contract can engineer away — the GPUs filling Mistral’s European data centers come overwhelmingly from Nvidia and other American chipmakers, as SiliconANGLE noted in its coverage of the July deal.

Asked directly why a customer should choose Mistral over an EU region on AWS or Azure, Lacroix gave two answers. “The simplest possible answer is capacity. There is more demand than supply right now, and so it adds another option,” he said. The second cuts closer to the pitch: “We are a European provider, and on the region that would be Mistral compute, we are fully independent. That’s a truly differentiated offering than all of the hyperscalers or pure inference companies can provide.”

The economics of open models: why agentic AI is pushing inference to the cloud

There has always been a tension at the heart of Mistral’s business: its best-known models are free to download, and open models have historically been difficult to monetize through APIs. Asked how free weights fund a gigawatt buildout, Lacroix offered the clearest articulation yet of the company’s thesis — that the economics of self-hosting are collapsing under the weight of the models themselves.

“When the models were smaller, and we were before the explosion of agentic AI, it was doable for enterprises to host their own — up to, let’s say, 100-billion-parameter dense models — on their premises,” he said. “More and more, with models going into the trillion or more parameters, with the current hardware, and with the increasing amount of tokens that need to be processed, it becomes harder.”

His conclusion was blunt: “I don’t see how, with the current trend of model size and growth of agentic tokens, we keep the full inference on-prem. To me, that is why we think we’re going to monetize our cloud inference.” Inference, he noted, is particularly well suited to the cloud because it “does not need to hold any data” and can be encrypted in transit.

In other words: open weights get Mistral into the enterprise, and the physics of trillion-parameter agentic workloads brings the inference — and the revenue — back to Mistral’s data centers. The thesis will get an expensive test. Mistral has raised roughly $4 billion to date, according to PitchBook data — a fraction of the war chests assembled by OpenAI and Anthropic — and Bloomberg reported in June that the company is in talks to raise about €3 billion at a roughly €20 billion valuation, nearly double its Series C mark. The revenue behind the buildout will have to come from exactly the enterprises Tuesday’s announcement is courting.

And Europe, in Mistral’s telling, is only the first market for what it is selling. Asked whether the framework could be replicated in the Middle East, Asia, or anywhere else anxious about AI dependence, Lacroix didn’t hedge: “It’s completely right. We’re starting this in Europe because it’s also an easier part of the world for us to scale into, especially in the infrastructure. But we definitely want to extend this, depending on customer demand.” Every layer of the stack, he said, “can be controlled, changed, replaced depending on where we operate and what the requirements are — that’s pretty much where we excel.”

That is the wager underneath the SLAs, the compute units, and the Chinese model flying a European flag: in a world where the U.S. and China dominate frontier AI, the durable business is selling everyone else control. To fund it, Mistral is asking Europe’s largest enterprises to sign five-year contracts with no exit — while making a bigger, longer commitment of its own. A gigawatt, after all, is a promise measured in decades. For Mistral, too, there is no getting out.

Presented by Tata Communications

Continuous inference, agent-to-agent communication, and real-time data pipelines are generating unpredictable, always-on traffic that legacy architectures were never built to support. As AI moves from pilot project to operational backbone, the network is emerging as a critical control layer that determines performance, reliability, and cost.

The shift is forcing organizations to question assumptions that have held for decades. Legacy systems were static and rigid, and lacked the ability to manage network demand efficiently or dynamically, while AI-ready networks need to adapt in real time. A study by Cisco notes that 80% of executives believe their company’s competitive survival will depend on agentic AI, and consumer usage of AI is already prevalent and accelerating. This is driving a fundamental shift in how traffic is generated, distributed, and experienced, with implications for service providers and enterprises that manage large-scale networks.

This infrastructure gap is a global concern. A recent Bloomberg study, “The Future-Ready Enterprise,” commissioned by Tata Communications, found that while 3 in 4 leaders consider AI a board-level priority, nearly two-thirds (65%) of enterprises continue to operate on transitional or legacy infrastructure. This disconnect between ambition and reality is a primary obstacle to realizing value from AI investments.

The performance bar has also moved by an order of magnitude. Traditional business applications could tolerate 100 to 500 milliseconds of latency, while mission-critical AI workloads now require latency below 10 milliseconds.

“This isn’t just an incremental improvement,” says Kapil, Vice President, Global Network Services at Tata Communications. “It’s a completely different performance paradigm that breaks traditional network design assumptions, where such extreme low latency was never a primary consideration.”

How network performance affects AI reliability and cost

That gap between what legacy infrastructure can deliver and what AI demands turns network performance into a direct driver of AI reliability and cost. Treating the network as a best-effort transport layer introduces risk that many organizations only discover once a deployment underperforms in production. A model built for real-time fraud detection or supply chain optimization becomes worthless the moment network congestion delays the data it depends on, and Kapil notes that every millisecond of that delay can carry a direct financial or operational cost.

“Relying on a ‘best-effort’ network turns multi-million-dollar AI stack investments into a high-stakes gamble, where performance is left to chance,” Kapil says.

He adds that businesses often underestimate the complexity of using the public internet as a global enterprise network. Performance may look acceptable within a single country, but once data starts crossing borders or connecting to international cloud platforms, the lack of end-to-end control becomes an operational barrier.

Distributed AI across cloud, edge, and enterprise increases complexity

Complexity compounds as AI components spread across cloud, edge, and enterprise environments. Organizations often focus on compute power and data infrastructure while overlooking the network fabric that connects them. That blind spot often surfaces as a performance bottleneck created by high-frequency east-west traffic moving between GPUs.

Distribution also widens the surface enterprises have to defend. Applications, users, and partner ecosystems are now spread across cloud, SaaS, edge, and device environments, and Kapil notes that AI-driven malicious bots account for roughly 37 percent of online traffic, making it increasingly difficult to distinguish legitimate users from automated threats. Many enterprises have responded by layering on siloed tools, which has produced fragmentation, inconsistent security, and a lack of unified visibility rather than a coherent defense.

“SASE helps mitigate these risks by converging networking and security into a unified, cloud-delivered architecture,” Kapil says. “This convergence is enabling consistent policy enforcement across cloud, on-premises, and edge environments, while supplying the scalability and proximity needed to secure real-time AI-driven interactions.”

The network must evolve from passive transport to an intelligent layer

Closing that gap requires organizations to gain far greater visibility into how AI traffic moves across distributed environments and the ability to direct workloads accordingly. Kapil says that demands a different approach to network management.

“Leaders must realize that the network is no longer passive ‘plumbing.’ It must be managed as an active, intelligent platform foundational to the entire AI stack,” he says. “That platform requires real-time observability into how and where AI traffic flows, paired with the control to orchestrate workloads across the most efficient and secure path available.”

It’s the difference between merely connecting systems and unlocking new capability, for instance a seamless shopping experience during a peak sales period or a global sports broadcast streamed without buffering.

This intelligence also changes how infrastructure teams spend their day. The network itself is now software-defined and API-driven rather than fixed by hardware configuration, which Kapil says shifts infrastructure teams away from reacting to outages and toward designing the systems that prevent them.

“Instead of manually re-routing traffic during an outage, the team must define the rules, policies, and business outcomes for an intelligent fabric,” Kapil says. “The network itself then executes those policies automatically and autonomously.”

Tata Communications is putting this principle into practice with its recently launched IZO Data Centre Dynamic Connectivity. The software-defined platform creates a “self-healing, intelligent network” using deterministic multi-path routing to reroute traffic automatically in seconds during a disruption.

The company says the platform transforms resilience from a reactive process into an autonomous capability, providing the predictable, low-latency performance mission-critical AI applications require while reducing operational costs by up to 30%.

Real-time AI requires predictable, low-latency connectivity

Delivering on that intelligence in practice means giving mission-critical workloads dedicated capacity rather than having them compete for it. Reaching that level of consistency also requires enterprises to define performance far more precisely than they have in the past. It’s the shift from vague goals like “high performance” toward deterministic performance criteria where an organization commits to a guaranteed service level, such as latency for a specific workload not exceeding 10 milliseconds 99.999% of the time, for instance.

That same demand for predictability extends into capacity planning. As AI workloads become larger and more dynamic, networking infrastructure must be able to absorb rapid shifts in demand without sacrificing performance or efficiency.

“Without dynamic scalability, enterprises are forced into a false choice: either risk performance-killing congestion or engage in massive, inefficient overprovisioning of their network ‘just in case.’ This is incredibly expensive and unsustainable,” Kapil says.

Building this foundation for the world’s most demanding AI workloads is already underway. For example, Tata Communications is collaborating with Amazon Web Services (AWS) to build one of India’s largestAI-ready networks. This high-capacity, resilient network will connect major AWS infrastructure locations in Mumbai, Hyderabad, and Chennai, providing the ultra-low latency backbone needed to accelerate generative AI adoption and cloud innovation across the country.

He points to a consumption-based model, where software allows bandwidth and network functions to scale instantly with demand, as the operational alternative, since it lets organizations pay only for what they use while still protecting performance during spikes.

CIOs should treat the network as a strategic investment

CIOs and infrastructure leaders need to reframe the network, not thinking of it as a cost center but as something closer to an insurance policy for an organization’s broader AI investment portfolio. An intelligent network de-risks those investments in three ways:

enabling dynamic scalability that removes the need for overprovisioning

strengthening security and governance through the visibility needed to protect data and models

and providing a flexible, programmable foundation that can absorb future compute demands without a full architectural overhaul.

Getting there does not require enterprises to start from scratch.

Choosing a partner with a proven track record is critical. Tata Communications was recently named a Leader in the Gartner Magic Quadrant for Global WAN Services for the 13th consecutive year, reflecting its completeness of vision and ability to execute. That recognition reflects continued investment in areas such as SASE capabilities for AI-driven security and high-capacity 800G services designed for AI-scale infrastructure.

“We recommend a phased approach that begins with assessing the current state of the network and identifying inefficiencies, then prioritizing upgrades in areas such as AI-ready technologies, seamless data exchange, and advanced security solutions,” Kapil says. “Treating the network as a business enabler rather than overhead gives organizations the scalable, secure, and resilient infrastructure the AI economy will continue to demand.”

Sponsored articles are content produced by a company that is either paying for the post or has a business relationship with VentureBeat, and they’re always clearly marked. For more information, contact sales@venturebeat.com.

Bright Machines wants to solve one of the least glamorous but most consequential problems in the AI buildout: what happens to quality data when a human being has to touch the production line.

The San Francisco-based manufacturer announced today the Hybrid BRC (Bright Robotic Cell), an expansion of its Bright Factory platform that lets human operators step inside a sensor-monitored robotic cell to perform prescribed assembly steps — without breaking the digital record that tracks every server from its first screw to its shipping label.

It sounds like an incremental hardware update. It isn’t. The Hybrid BRC is a direct answer to a structural weakness in high-stakes electronics manufacturing — one that CEO Sviat Dulianinov quantified in stark terms in an exclusive interview with VentureBeat.

“If you assemble modern AI servers starting with manual operations, your initial yield — first-pass yield — can be as low as 20%,” Dulianinov said. “Then you gradually ramp up and scale, and it can reach the 60s, 65% or so.”

When a single AI server can cost hundreds of thousands of dollars, and hyperscalers are burning billions waiting for infrastructure they can’t deploy fast enough, that number is the whole story. The Hybrid BRC is Bright Machines’ attempt to keep human hands in the loop without letting human error back in the door.

Why manual assembly steps create a black hole in production data

Modern automated assembly lines generate a continuous stream of production data — torque values, placement coordinates, component serial numbers, inspection images. That “data thread” is what lets a manufacturer prove a server was built correctly and, when something fails in the field months later, trace the failure back to a specific station, step, or part.

But automated lines inevitably need manual intervention, and until now manufacturers had two bad options when that happened: stop the line entirely, or pull in-process units off to a separate manual workstation that sits outside the monitored data flow. The first choice kills throughput. The second punches a hole in the production record at precisely the moment when human error is most likely to occur.

The Hybrid BRC eliminates that tradeoff, the company says. The cell incorporates guarded access doors and safety panels directly into the production line. When an operator opens the doors, the robotic arm deactivates, and on-screen instructions guide the operator through each assembly step while the cell’s sensor array — cameras, force feedback, and tooling sensors — continues monitoring for incorrect installs, missed steps, and wrong components, applying the same quality checks used during full automation. The traceability record persists at the serial-number level from start to finish.

The yield gap between humans and robots in AI server assembly

The economics driving the design become clear when Dulianinov’s manual-assembly figures are set against what automation delivers. “At robotic operations, yield-per-station level is usually more than 98% with our technology, and even at the line level, we usually get to 97.5%, 97.7% or so,” he said.

First-pass yield measures the percentage of units that come off the line correct the first time, without rework. The gap between a 20% manual ramp and a 98% automated station isn’t a rounding error — it’s the difference between profitability and disaster on hardware this expensive.

That math explains the company’s design philosophy for the Hybrid BRC, which treats the human operator as an escape valve for exceptions rather than a substitute for automation. “The more human stations you introduce, the more you increase the risk of lower yields driving the overall yield down,” Dulianinov said. “That’s why we prefer to start at least with 50% automation, and then move to at least 80%.” Speed follows a similar pattern: “On the line level, robots can be faster than humans from like 50 to 100%” in throughput terms, he said.

How server assembly became the hidden bottleneck of the AI infrastructure race

The AI infrastructure conversation usually revolves around chip supply, power availability, and data center construction. Dulianinov argues that assembly — the unglamorous work of turning chips and motherboards into racked, tested, deployable compute — is a quietly enormous drag on deployment timelines.

“When you have the chips and you have the motherboards, you want to be as fast as possible to deploy that in the data center,” he said, describing greenfield deployments where power and buildings already exist. Getting hardware built, tested, and often rebuilt when quality falls short “could be months,” he said. “With more technology used for this, as our tech, we believe that we can cut it by at least a third.”

A company executive on the call added an anecdotal but telling data point: the servers Bright Machines produces are “flying out into production” rather than sitting stacked in warehouses awaiting deployment — evidence that assembly capacity, not just chips or power, gates hyperscaler timelines. The stakes are asymmetric, the executive noted, because the largest hyperscalers lose millions of dollars per day when servers fail or arrive late. That is why customers are less interested in buying boxes than in buying assurance — and why an unbroken data thread has become a product in its own right.

Inside the secretive customer base already running hybrid production lines

The Hybrid BRC is not vaporware. Dulianinov said the company already operates a number of the hybrid lines in the U.S. and has “built more than 10,000 compute nodes” through the new stations. This year, he said, Bright Machines plans to manufacture “more than half a gigawatt of compute capacity.”

Who’s buying? Don’t ask. “We cannot unfortunately name customers. That’s the toughest part of our job,” Dulianinov said. “They’re pretty secretive because, as you can imagine, everything data center related is IP related.”

He did offer growth figures: customers grew “more than 3x this year” versus the prior year, driven by what he called the intersection of “physical AI, AI infrastructure buildout, and onshoring.” The demand is spilling into real estate — the company is moving from its 16th Street San Francisco offices to a Burlingame space this fall that executives described as three to four times larger. Overall, the company says it has deployed more than 130 microfactories across 10-plus countries, served more than 60 customers, and produced more than 300,000 servers.

What separates Bright Machines from Tulip, Instrumental, and contract manufacturing giants

Asked how the Hybrid BRC’s traceability claims stack up against operator-guidance and inspection software vendors like Tulip and Instrumental, Dulianinov drew a sharp line around business models.

“Tulip is just a company that does interface for operators. Instrumental, they focus on inspection. It’s just pieces of the puzzle,” he said. “We, as a technology-enabled manufacturer, we actually run this whole operation… We put our lines, put our software, put our data on the floor, our people, and run it from the beginning to the end.”

The right comparison set, he argued, is contract manufacturing giants like Flex, Jabil, and Foxconn — companies that own the full production process but historically built it on manual labor that generates little data. Bright Machines’ differentiation, he said, is that robot data, sensor data, and now human-station data all flow through one orchestration layer into a single environment the company calls Bright Insights.

That positioning is notable given the company’s origins. Bright Machines was carved out of contract manufacturer Flex eight years ago, and its history has had turbulence: the company planned to go public in 2021 via a SPAC merger at a reported $1.6 billion valuation, according to contemporaneous reporting by The Wall Street Journal and CFO Dive, before the deal fell through. It rebounded in June 2024 with a $126 million Series C — $106 million in equity led by funds managed by BlackRock with participation from Nvidia, Microsoft, Eclipse, Jabil, and Shinhan Securities, plus $20 million in venture debt from J.P. Morgan — bringing its total raised past $400 million, per the company’s announcement at the time.

Who owns the production data — and how workers feel about being monitored

For technical decision makers, two governance questions loom over any system that instruments human work this closely, and Dulianinov addressed both directly.

On data ownership, he drew a clean boundary: “Everything related to the customer and inspection of their devices and parts obviously would be protected and owned by the customer.” Process and robotics data, he said, stays with Bright Machines to fuel continuous improvement across its platform.

On worker surveillance, he pushed back on the framing. High-IP electronics floors — especially those touching aerospace, defense, or government workloads — already prohibit workers from carrying personal electronics, he noted. “People who know those floors, they know that this is part of the game,” he said, adding that employees “actually appreciate” the traceability because it underpins the security mission: “If you build a data center for the government, and then you build servers somewhere in China, you cannot guarantee how exactly it was built and what component was put there.” In his telling, the monitoring isn’t about watching workers — it’s about being able to prove, component by component, that American-built AI infrastructure is what it claims to be.

The onshoring bet: rebuilding American manufacturing without 3 million workers

The Hybrid BRC‘s modular design carries strategic weight beyond quality assurance. Because the cells are software-defined and snap together like building blocks, Bright Machines says it can retool lines for new hardware generations in days or weeks rather than months — “we can introduce it within a day” for minor design changes within a product family, Dulianinov said, though a jump from air cooling to liquid cooling remains “a big jump.” In an industry where new chip architectures now arrive on a roughly annual cadence, changeover speed is arguably as valuable as yield; a production line that takes six months to retool is obsolete before it amortizes.

But Dulianinov’s closing argument was about labor arithmetic, not machinery. “We need to build in the U.S., and you don’t have 3 million people to bring up manufacturing in the U.S.,” he said, referencing the massive workforces of Shenzhen-scale electronics plants. “So you need to solve it with AI software and robots, and that’s our thesis… It’s not just robots on the floor — it’s also creating jobs. All the robots, and some people on the floor.”

Lior Susan, founder and CEO of Eclipse and chairman and co-founder of Bright Machines, framed the announcement in the same terms: “The future of manufacturing isn’t choosing between automation and flexibility — it’s combining both in the same digital production environment.”

For all the talk of gigawatts and yield curves, the Hybrid BRC amounts to an admission wrapped in an innovation: even in the most automated factories on Earth, humans still have to open the door and reach inside. Bright Machines’ wager is that the winners of the AI infrastructure race won’t be the manufacturers who eliminate the human hand — but the ones who never lose sight of it.

The Model Context Protocol, the open standard that has quietly become the connective tissue between AI agents and the world’s software, is getting its largest update since Anthropic released it twenty months ago — a sweeping architectural revision that its maintainers and backers say finally makes agentic AI ready for massive enterprise production deployments.

The update, released today under the stewardship of the Agentic AI Foundation (AAIF), a directed fund under the Linux Foundation, finalizes MCP’s transition to a fully stateless architecture, hardens its authentication model against a known class of attacks, establishes a formal 12-month deprecation policy, and graduates two headline capabilities — interactive server-rendered interfaces and long-running asynchronous tasks — into official protocol extensions.

The changes may sound arcane. Their consequences are anything but. According to the announcement, running MCP at scale has historically required “sticky routing” or shared state to maintain continuity across sessions — an operational burden that made large production deployments complex even when the underlying capabilities were simple. The new release removes that bottleneck entirely, letting organizations run MCP servers behind standard load balancers using the Kubernetes and cloud-native DevOps tooling they already operate.

“Some people jokingly call it a v2, and I think in spirit that’s accurate,” David Soria Parra, MCP’s co-creator and a lead maintainer at Anthropic, told VentureBeat in an exclusive interview. “It’s probably the biggest change we’ve ever made to the protocol, and with that, it’s a big step up in maturing it for use by really big players.”

Why stateless architecture is the key to running AI agents at enterprise scale

To understand why the industry’s largest companies pushed for this release, it helps to understand what was broken. Under the old design, an MCP client — the AI application making requests — had to maintain a persistent session with a specific server instance. In modern cloud environments, where fleets of interchangeable compute nodes spin up and down behind load balancers, that requirement was poison. If the specific server holding your session state disappeared, your agent’s work disappeared with it.

“Before, you needed to have a session store and manage session IDs — and if one of your compute pods went down, all of a sudden the requests would start failing,” said Den Delimarsky, a lead maintainer of the protocol, in an interview with VentureBeat. “That’s not going to be a problem with the new version of the protocol. That’s a huge unlock, and it’s one we collaborated with folks across many companies to put together.”

Mazin Gilbert, executive director of the AAIF and a veteran of Google and AT&T, framed the change in historical terms — comparing it to the architectural decision that made the web itself possible. “That stateless capability enables your MCP client to speak to a load balancer that connects with any server. You don’t need the stickiness,” Gilbert told VentureBeat. “You could not have the internet we have today if my browser couldn’t speak to any website — with any server supporting that connection. You can switch between servers behind a load balancer.”

Gilbert said the constraint had become the primary blocker for companies trying to move AI agents from pilots into production. “I’ve come across companies who are deploying tens of thousands of agents, and you cannot do that without having to go in this direction,” he said. Crucially, he argued, the obstacle was never the AI itself: “It wasn’t the technology, it wasn’t the business case, it was really these fundamental changes that were required.”

The tension is nearly as old as the protocol. A public design discussion opened by MCP co-creator Justin Spahr-Summers on GitHub in December 2024 — just weeks after launch — flagged that MCP’s long-lived, stateful connections were limiting for serverless deployments, and sketched three possible paths forward, including the fully stateless option the protocol has now largely embraced. 

Engineers from Vercel, Cloudflare, Shopify, and Amazon weighed in over the following months, a preview of the multi-vendor collaboration that would eventually define the project. The core maintainers formally committed to the direction at a December 2025 meeting on the future of MCP transports, according to the announcement.

The trade-offs of removing state from the Model Context Protocol

Protocol design is a game of trade-offs, and the maintainers were unusually candid about what this one cost. First, payloads get bigger. “A lot of the state doesn’t disappear, but it’s moved back and forth with the server on the wire, at the actual transport layer,” Soria Parra explained. “You get bigger payloads in return for statelessness — but luckily they’re very compressible and very well understood, and still fairly small in comparison to an HTTP request on the web.”

Second, a handful of rarely used capabilities are gone or narrowed. Out-of-band server logging — where a server could push informational log messages to a client at any moment — no longer works in the new model. The team did its homework before cutting it: “As part of the whole exercise, we scraped all of GitHub and looked at who is using it — and it’s basically nobody,” Soria Parra said. Those affected amount to “probably a handful of people — quite literally a handful of people.”

He even allowed himself a moment of engineering self-deprecation. “I’m sad that things I thought were useful turned out not to be useful,” he said. “I think one of the bigger trade-offs was more about my ego than any actual limitation of the protocol.”

Delimarsky argued the shift is less a removal of state than a deliberate transfer of responsibility. “With statelessness, we did shift the responsibility of creating and managing state to the developers — but very intentionally so,” he said. Under the old protocol, “a lot of folks had a hard time understanding: Do I need to use this? Where do I use this? How do I use this? Removing that burden basically says: look, now you can manage state in the way that makes sense for your environment.”

For most developers, migration should be nearly painless, because the vast majority of the ecosystem builds on official SDKs in TypeScript, Python, C#, Rust, Java, and other languages, which will absorb the changes. “One of the key things we constantly do is double-check that the upgrade path is minimal — to the point where any model in the world will probably one-shot it for you,” Soria Parra said — a telling remark in itself, reflecting an era in which protocol maintainers now design migrations to be trivially executable by AI coding assistants.

How a 12-month deprecation policy gives enterprises the stability guarantee they demanded

Perhaps the most enterprise-flavored feature of the release isn’t code at all. It’s a policy. The new formal deprecation framework guarantees developers a minimum of twelve months between a feature’s formal deprecation and its earliest possible removal — the kind of stability contract that lets a Fortune 500 engineering organization commit to a specification without fearing silent breakage.

The number wasn’t picked arbitrarily. “We consulted with folks like Google, Microsoft, and Amazon to find out: in your deployment environment, what’s the right path for making these kinds of changes?” Delimarsky said. “Twelve months seemed like the reasonable middle ground.” He stressed that features are not being torn out on a whim: “It’s not about ripping stuff out of the protocol just because we don’t like it. There’s a very, very strong industry pull behind these changes.”

Soria Parra added that the maintainers’ own telemetry supports the figure — most of the ecosystem upgrades within six to eight months — and stressed that the window functions more as a listening period than a countdown clock. “It just says that in 12 months we are open to remove it, but both Den and I can change our minds based on feedback,” he said. “I think it’s more of a feedback period than a definite period.”

Gilbert sees the policy as one leg of a three-legged stool of enterprise trust, alongside open standards and stateless scale. “There are companies deploying things at a smaller scale, but they’re slowed down because of MCP’s authorization gap, because of identity, because of — do they trust the deprecation policy? Things could change basically any day,” he said. Those companies, he argued, “are going to benefit not because of the statelessness. They’re going to benefit because of the security.”

New authentication hardening closes OAuth mix-up attacks before hackers could exploit them

The release also ships significant authorization hardening, aligning MCP’s auth specification with how OAuth 2.0 and OpenID Connect are actually deployed in practice. Most notably, the protocol now enforces mandatory validation of the issuer (iss) parameter — a protocol-level defense that, according to the announcement, closes an entire class of so-called mix-up attacks, in which a client can be tricked into associating an authorization response with the wrong identity server.

Was anyone actually attacked? No, Delimarsky said — this was preventive engineering, not incident response. “This is not something that is gated in any existing vulnerabilities or active exploitation,” he said. “This is more of us engaging directly with the security community.” The philosophy, he explained, is to borrow rather than invent: “MCP as a protocol is very much establishing the pattern of: we do not want to reinvent the wheel, but we also want to be at the forefront of a lot of the security innovation.”

That posture is most visible in the new Enterprise Managed Authorization extension, developed in close collaboration with identity provider Okta, which lets organizations make their corporate identity provider the authoritative gatekeeper for MCP server access. “If I’m somebody that manages tens, hundreds of MCP servers for my organization, I want to make sure that I enforce some level of common governance, where folks auth with their corporate credentials and not their personal credentials, so that the client doesn’t send data to sources that are unauthorized,” Delimarsky said. Okta bootstrapped the underlying open standard, he noted, and the maintainers then worked “to make sure that it’s adopted ecosystem-wide, and it’s not something that is specific to only one vendor or provider.”

More is coming: Delimarsky said proposals are already on deck for demonstrated proof-of-possession and workload identity federation — capabilities requested by security teams running MCP in production. Gilbert connected the work to a broader maturation: “MCP has now bridged that gap with these authorization protocols, so it’s basically now becoming what we call enterprise ready, versus an open lab sort of experiment.”

MCP Apps and Tasks become official extensions, pushing AI agents beyond text responses

Two capabilities graduate to official extension status in this release, taking advantage of a new framework that lets extensions evolve on their own timelines, independent of the core specification — a structural choice that lets the protocol grow without bloating its core.

MCP Apps allows servers to ship rich, interactive, server-rendered user interfaces directly into AI clients — moving agent output beyond walls of text toward dashboards, forms, and visualizations, and dramatically accelerating development of user-facing agentic applications, according to the announcement. MCP Tasks tackles the reality that not every tool call finishes in one round trip. Instead of holding fragile, long-lived connections open while a batch job or heavy computation grinds away, servers now return a durable task handle; clients can disconnect, crash, restart, and resume polling. “You’ve been processing some audio for a podcast or a video — it can notify back the client and say, hey, the task is done. You don’t need to wait and keep the stream open,” Delimarsky said.

A third addition, multi-round-trip requests, lets servers and clients negotiate back and forth within a single logical operation. “It’s not just a one-shot — over the stream, get the input and you’re done,” Delimarsky said. “You can actually interact, server to client, to get the right parameters to execute an action.”

Soria Parra emphasized that these capabilities emerged from the same source as the architectural overhaul: heavyweight production users. “This is a version that came together by some of the best distributed systems experts at Microsoft, Google, and others coming together and working on this for their specific needs — and the needs of the industry at large,” he said.

How independent is MCP from Anthropic under Linux Foundation governance?

Anthropic created MCP in November 2024 and donated it to the newly formed AAIF under the Linux Foundation in December 2025, alongside founding projects from Block and OpenAI. Seven months later, the independence question still hangs over the project — and both sides addressed it head-on.

Soria Parra was disarmingly direct about the residual power he holds. As lead maintainer and Anthropic employee, “I do have veto rights, technically,” he acknowledged — “but I think we have never actively used it in any kind of discussion.” 

The core maintainer group now spans Anthropic, Microsoft, OpenAI, Google, and Amazon, with contributions from companies like Block, and key decisions “are usually unanimous,” he said. “Technically we have a lot of influence; de facto, we’re not exerting any of it.” He added that governance will progressively broaden: “As the project progresses, we will increasingly move to more different governing structures that include more and more people.”

Gilbert, who has helped stand up multiple foundations during his time working with the Linux Foundation, offered the numbers behind the neutrality claim. The AAIF has grown from roughly 40 members at its December inauguration to 240 today — “the fastest growing foundation” in Linux Foundation history by membership, he said, “signing up one member every day.”

Anthropic’s share of contributions, by his estimate, has fallen below half. “Holding control of a project doesn’t make it an open standard,” Gilbert said. “You have to let go. You have to contribute, and you have to grow the pie and the community. And Anthropic has done an incredible job doing exactly that.”

Notably, the foundation’s membership has expanded well beyond tech vendors into retail, finance, and telecom companies — adopters who, Gilbert says, “are no longer just deploying the protocols. They want a voice, and they want to be at the table to influence the protocol from the get-go, and that’s something we have not seen before.” The roster now includes CERN and, tellingly, Consumer Reports — “because somebody has to defend consumers when this internet of agents comes alive.”

Keeping one global AI agent standard amid US-China technology tensions

The AAIF is betting that neutrality can hold even amid geopolitical friction. The foundation will host AGNTCon and MCPCon events this fall in Shanghai, Tokyo, Amsterdam, and San Jose, with additional events planned in South Korea, Nairobi, and Toronto, and Gilbert said he is personally investing in growing membership across Asia and India, where he sees underdeveloped growth markets for the foundation.

His answer to the geopolitics question was emphatic model-agnosticism. “We’re completely agnostic to what the model is, whether the model is Kimi, or Gemma, or a frontier model from Anthropic, or from anybody,” he said. “Every model will have to support MCP — whether it is a Chinese model or whether it is a U.S. model, it doesn’t matter. The protocols must be open, standardized.”

The logic is economic as much as diplomatic. Enterprises, Gilbert argued, increasingly pick models “left, right, and center” based on the task at hand — and no model, regardless of national origin, “can provide value to an enterprise 500 customer company unless you have the protocols open, standardized.” In his telling, the foundation exists precisely to provide neutral ground: a place “where competitors who compete furiously during daytime” can “come to a neutral room and debate, converse, align, consolidate, and drive open standards of how the Internet of Agents will evolve.”

That framing echoes his favorite historical analogy. HTTP earned global trust, he said, because of three things: an open standard, stateless scalability, and neutral governance under a standards body. “If I were a Fortune 500 company looking at how I trust the internet, I’d need those three things to fall into place — and they were not in place a year ago. They were not in place even six months ago. But they are in place today.”

What 250 million weekly SDK downloads reveal about the future of agentic AI

The scale of what’s now riding on this specification is difficult to overstate. Soria Parra said SDK downloads have doubled in the past six months, reaching roughly 250 million per week — “which is just insane numbers.”

For context, Anthropic reported 97 million monthly downloads across just the Python and TypeScript SDKs when it donated the protocol in December 2025. Delimarsky pointed to that same adoption curve as his preferred success metric going forward: “There is certainly a certain inflection point where this is no longer just an open source project. This is a substrate for a lot of the agentic workflows that we see across enterprises, across startups, across all sorts of companies.”

Success, the maintainers say, will be measured in server counts on the new specification, in feedback flowing through working groups, GitHub discussions, and the project’s Discord — and in whether the biggest drivers of the changes, Microsoft and Google among them, ship on it. “They are effectively the ones who have been driving a lot of the changes,” Soria Parra said. “Every early indication we have — it looks very, very positive.”

Both maintainers closed on the same note: this release belongs to no single company. “If you look back 18 months ago, when it was an Anthropic-only project, and then 12 months ago, where there was a lot of engagement — now it’s a truly global community,” Soria Parra said. “I’m incredibly proud of what they have worked together.” Delimarsky, “being very unoriginal,” seconded him: the release “would not be possible without a large community of folks that are also volunteering a lot of their own time in making MCP successful.”

Gilbert, meanwhile, is already looking past this release — toward how MCP interlocks with the AAIF’s newly announced Agent Gateway project for traffic management and policy enforcement, and toward agentic commerce, where MCP serves as the discovery layer letting merchants expose products and services to AI agents. The web took thirty years to become invisible infrastructure that billions trust without thinking. By Gilbert’s reckoning, the internet of agents is “in its first, second year” — and as of today, it finally has plumbing built to carry the load.

Microsoft AI released two new in-house models into public preview on Wednesday — MAI-Image-2.5-Pro, its highest-fidelity image generator to date, and MAI-Voice-2-Flash, a speech model built for high-volume enterprise workloads — while publishing production data that amounts to the company’s most aggressive argument yet that it can power its own products without leaning on OpenAI’s frontier models.

The announcement, made by Microsoft AI’s Superintelligence team, lands roughly a year after the company committed to building purpose-built models internally, and it arrives with an unusual level of specificity about where those models now run: Bing, PowerPoint, OneDrive, Dynamics 365, Excel, GitHub Copilot, and Azure. The message to enterprise buyers — and, implicitly, to OpenAI — is that Microsoft’s homegrown models are no longer research projects. They are production infrastructure serving millions of users.

“Each of these enhancements is a step toward the same goal: Microsoft products, powered by Microsoft models,” the company wrote in its announcement blog.

How MAI-Image-2.5-Pro and MAI-Voice-2-Flash stake out opposite ends of the AI cost curve

The two new releases occupy opposite ends of what Microsoft calls the quality-speed-cost curve, and the positioning is deliberate. MAI-Image-2.5-Pro targets the premium tier: hero imagery, detailed editing, and precise in-image text rendering — the last of which has long been a notorious weak spot for image generation models. Microsoft priced the model at $5 per million text input tokens, $8 per million image input tokens, and $106 per million image output tokens. The base MAI-Image-2.5 model recently launched at No. 2 for image editing on Arena, the community leaderboard that has become a de facto scoreboard for generative media.

The creative industry appears to be taking notice. Rob Reilly, global chief creative officer at advertising giant WPP, called the Pro model “a strong leap forward for GenMedia tools” in a statement included in Microsoft’s announcement, adding that “Microsoft has firmly established itself among the leaders in generative AI.”

MAI-Voice-2-Flash goes the other direction. First previewed at Microsoft’s Build conference, Flash runs twice as fast as MAI-Voice-2 and costs 32% less, priced at $15 per million characters. It is designed for the unglamorous but enormous market of high-volume voice — call centers, voice agents, and real-time speech applications where latency and cost-per-call matter more than marginal gains in expressiveness. Together, the two models reflect a strategy of building families of models rather than a single flagship, because, as the company put it, a creative studio chasing maximum fidelity has very different needs from a customer service operation handling millions of calls a day.

Microsoft’s production metrics show in-house models cutting GPU costs by up to 89%

The model launches are arguably less newsworthy than the deployment metrics Microsoft attached to them — numbers that read like a systematic case for swapping out third-party frontier models across its product portfolio. 

Bing Image Creator now runs entirely on MAI-Image-2.5, end to end, marking the first time the consumer image tool is fully in-house. In PowerPoint, Microsoft says MAI-Image-2.5 reduces GPU costs by up to 84% compared with GPT-Image-2, OpenAI’s image model. In OneDrive, where MAI-Image-2.5 is now the default for key image-editing scenarios, the company reports a 26% increase in save rates, roughly 25% lower P95 latency, and 2.5 times greater efficiency under medium-utilization production workloads.

On the voice side, MAI-Voice-2-Flash now powers Dynamics 365 Contact Center — the platform used by customers including T-Mobile and EasyJet — where Microsoft claims GPU cost reductions of up to 89%. The model is also integrated into Azure Voice Live for developers building speech-to-speech agents.

Perhaps the most consequential deployment sits in healthcare. Microsoft’s Dragon Copilot, used by 170,000 medical providers and responsible for processing 28 million patient encounters last quarter, now runs on MAI-Transcribe-1.5 for its multilingual workflow across 58 languages. Microsoft says internal evaluations show a 50% relative reduction in both transcription and language-identification error rates across most languages — a meaningful claim in a domain where transcription errors can propagate directly into clinical notes.

Inside the ‘hill-climbing’ strategy that lets small models beat GPT-5.6 in Excel

In a companion post published the same day, Microsoft detailed the methodology behind these results — what it calls its “hill-climbing machine,” an integrated flywheel of data, models, and the product “harness” that surrounds them.

The clearest example is MAI-Code-1-Flash, the lightweight coding model launched in GitHub Copilot in June. Microsoft says the model achieves an approximately 10% higher code accept rate than GPT-5.4 Mini and Claude Haiku 4.5 in VS Code, while using 10% fewer median tokens. Developer retention tells a similar story: users were 6% more likely to return across multiple days than with GPT-5.4 Mini, and 11% more likely than with Claude Haiku 4.5.

Then Microsoft did something more interesting. It took the MAI-Code-1-Flash checkpoint and further trained it inside an Excel reinforcement learning environment, teaching a coding model the tools and workflows of spreadsheet knowledge work. The result, according to production user feedback, is a model on par with GPT-5.6 for the most common Excel tasks — while being small enough to run on Nvidia’s older H100 and even A100 GPUs rather than requiring the latest-generation accelerators.

That hardware detail deserves emphasis. Every major AI company is fighting for allocation of cutting-edge chips, and a model that delivers frontier-adjacent quality on two-generation-old silicon fundamentally changes the deployment economics. It also frees the newest hardware — including Microsoft’s now-operational GB200 cluster — for training rather than serving.

Satya Nadella’s ‘frontier diffusion’ manifesto redraws the OpenAI relationship

Microsoft CEO Satya Nadella framed the announcements in a lengthy post on X titled “Frontier Diffusion & Control,” which functions as something close to a strategic manifesto. “We can now take saturated frontier capabilities and deliver them at scale and at lower cost through models optimized for high-usage products, while continuing to use frontier models for frontier needs,” Nadella wrote, adding that Microsoft is “beginning to route traffic across our first-party surfaces to MAI whenever our models match or outperform frontier alternatives.”

Translated from executive prose: capabilities that were state-of-the-art a year ago are now table stakes, and Microsoft believes it can replicate them cheaply for the specific, repetitive tasks that dominate real product usage. Why pay frontier prices for a frontier model when a user just wants to reformat a spreadsheet column?

Nadella was careful to note that “frontier models from OpenAI and Anthropic are part of the orchestration system alongside MAI” — but he also articulated a pointed principle of model independence, arguing that a company’s evaluations “should continue to hill climb even when any given model has been removed.” 

“Keeping the harness, memory, context, and skills outside the model, he argued, is what gives Microsoft control. The subtext is hard to miss. Reuters reported in April that Microsoft’s exclusive license to OpenAI’s technology had been revised into a non-exclusive arrangement, and The Information reported last September that Microsoft had begun incorporating Anthropic models into some products. Wednesday’s announcement completes the triangle: Microsoft as orchestrator, with its partners’ frontier models as interchangeable components and its own models absorbing an ever-larger share of routine traffic.”

Developers cheer cheaper task-specific models while skeptics question Microsoft’s track record

The response online captured both the appeal and the skepticism surrounding the strategy. “I love when people use small models for niche tasks,” wrote one X user, @mavihsk, responding to Nadella’s post. “Why do I have to use the all-knowing model just to change my field in Excel?” Another user, @nabu_lines, distilled the pitch neatly: “cost and performance both improve when you stop overusing the biggest model.”

Others were less charitable about Microsoft’s execution track record. “Microsoft is the worst when it comes to listening to user feedback,” wrote designer @designedbyabin, arguing the company “will lose the AI race because they repeatedly failed to understand user needs.” And one user, @tokenoverflow, offered a drier critique of the model-independence pitch: “i want it keep hill climbing after removing microsoft.”

The skeptics raise a fair point. Microsoft’s self-reported metrics — accept rates, save rates, GPU savings — come from its own internal evaluations, not independent benchmarks, and the company chooses which comparisons to publish.

But the strategy’s logic does not depend on any single number. Nadella’s framing that software now has “real marginal cost for the first time” explains why Microsoft is obsessive about tokens, GPUs, and serving costs: when AI features run on every keystroke across a billion-user product portfolio, an 84% GPU cost reduction is not an optimization. It is the difference between a viable business and a money pit.

Why Microsoft is turning its internal AI playbook into an Azure product

The final piece of the strategy is that Microsoft is selling the playbook, not just the models. Nadella explicitly positioned the hill-climbing approach as “a template for every other AI native, SaaS, or Enterprise company,” and Microsoft is packaging the toolchain through Foundry and what it calls Frontier Tuning — letting enterprises train specialized models against their own proprietary evaluations and reinforcement learning environments. That turns Microsoft’s internal cost-cutting exercise into an Azure product, and it gives enterprise customers a reason to run their AI workloads on Microsoft’s cloud even if the models themselves come from elsewhere.

The company’s emphasis on models trained “on clean, traceable, enterprise-grade data, without distillation from third-party models” serves the same commercial end. In an industry facing mounting scrutiny over training data provenance, Microsoft is betting that enterprise buyers — and courts — will care where model capabilities come from. Microsoft says it is now extending the hill-climbing approach to Copilot Chat, Outlook, and PowerPoint, and both new models are available in public preview through Microsoft Foundry and the MAI Playground. “None of this is an endpoint,” the company wrote. “We’re just getting started.”

Seven years ago, Microsoft bet more than $13 billion that OpenAI would build the future of AI. Wednesday’s announcement suggests the company has since learned a cheaper lesson: the future of AI may belong to whoever builds the frontier, but the profits belong to whoever makes it ordinary.

Poolside, the San Francisco AI lab that has spent most of its three-year existence quietly selling coding models to governments and defense agencies, released its most capable model to date on Tuesday — and made an unusually aggressive bet that radical transparency, not raw scale, is how a smaller lab competes at the frontier.

The model, Laguna S 2.1, is a 118-billion-parameter Mixture-of-Experts (MoE) system that activates only 8 billion parameters per token, supports a context window of up to 1 million tokens, and — according to benchmarks published by the company — matches or beats open models several times its size on agentic coding tasks. The weights are available immediately on Hugging Face under the permissive OpenMDW-1.1 license.

The headline numbers are striking for a model this small. Poolside reports that Laguna S 2.1 scores 70.2% on Terminal-Bench 2.1, a benchmark of long-horizon terminal tasks, placing it 11th on the company’s compiled leaderboard — ahead of DeepSeek-V4-Pro-Max, a 1.6-trillion-parameter model that scored 64.0; Thinking Machines’ 975-billion-parameter Inkling, at 63.8; and Nvidia’s 550-billion-parameter Nemotron 3 Ultra, at 56.4. On SWE-Bench Multilingual, it posts 78.5%, and on SWE-Bench Pro‘s public dataset, 59.4%.

Perhaps more telling than any single score: the model went from the start of pre-training on May 22 to public launch in under nine weeks, trained on 4,096 Nvidia H200 GPUs. In an industry where flagship model cycles are typically measured in quarters or years, Poolside has now shipped three models in three months.

Why the West’s open-weight AI gap has become a boardroom issue

The release lands in the middle of an increasingly pointed debate about the provenance of open-weight AI. Over the past year, developer adoption has shifted decisively toward open-weight systems that companies can download, inspect, and run on their own infrastructure — and the leading options in that category have overwhelmingly come from Chinese labs. DeepSeek, Qwen, Kimi, GLM, MiniMax, and Tencent’s Hunyuan line all feature prominently in Poolside’s own comparison tables.

Poolside’s accompanying press release frames Laguna S 2.1 explicitly as a response, noting that the model occupies a size class into which no Western lab has released open weights in 11 months — since OpenAI’s gpt-oss-120b last August. “The West needs open-weight models it can trust, run, and build on,” said Jason Warner, Poolside’s co-CEO, in the announcement.

Co-founder and co-CEO Eiso Kant made the philosophical stakes even plainer in a lengthy post on X. “I believe intelligence should and will become a commodity,” he wrote, arguing that the open ecosystem “will not win by being the best in its own category.” Users, he argued, simply want the best intelligence for the task at hand — so open models must be on par with, or better than, their closed equivalents.

The strategic logic here is not charity. Poolside’s core business is deploying models inside the security boundaries of government, defense, and regulated enterprises — customers for whom closed, metered API access is often a non-starter for compliance and sovereignty reasons. 

Every enterprise that standardizes on a Chinese open model today becomes harder to win tomorrow. Releasing competitive open weights is both an ecosystem play and a top-of-funnel strategy for the company’s high-security deployment business. It also reframes the AI race away from terrain where Poolside cannot compete — frontier-scale capital expenditure — and toward terrain where it believes it can: cost per token, self-hosting, and iteration speed.

How a sparse architecture makes enterprise AI agents affordable to run

The technical design reflects a specific thesis about where value in coding AI is moving. Laguna S 2.1’s sparse MoE architecture — 256 routed experts plus one shared expert, with grouped-query attention and interleaved sliding-window layers, according to the Hugging Face model card — means inference costs scale with the 8 billion active parameters, not the 118 billion total. Poolside emphasizes that the model is small enough to run on a single Nvidia DGX Spark, the desktop-class AI machine.

That matters for what Poolside calls token economics. Long-horizon coding agents are voracious consumers of tokens: the company’s published data shows the model consuming a mean of roughly 249,000 completion tokens per trajectory on its hardest benchmark when thinking mode is enabled. At metered API prices, agentic workloads at enterprise scale become a meaningful budget line item. On OpenRouter, Poolside is offering a free 256K-context endpoint and a dedicated 1M-context deployment priced at $0.10 per million input tokens and $0.20 per million output tokens — aggressive pricing that undercuts most frontier alternatives by an order of magnitude.

The ecosystem support is unusually broad for day one. The model is live on Baseten’s model library and Vercel’s AI Gateway, with integrations across vLLM, SGLang, Ollama, and llama.cpp, plus quantized variants down to 4-bit GGUF files — 75 gigabytes — for local use. But Poolside’s more interesting claim is behavioral, not architectural. Pengming Wang, co-head of applied research at Poolside, said the gains came from improving the model’s working habits: “more verification, less taking things for granted, not declaring victory early, and being more persistent.” Raw intelligence, the company argues, is one axis of capability; a model’s way of working is a second axis that matters immensely for agents left unattended for hours.

Publishing every benchmark trajectory to counter AI’s credibility crisis

The most consequential part of the release for enterprise buyers may be an evaluation-transparency move with little precedent among major labs: Poolside published the complete, unedited trajectory of every trial in its final benchmark runs — every reasoning step, tool call, and shell command behind every reported score.

This addresses a growing credibility problem in AI benchmarking. As top scores on mature benchmarks cluster in the 70–90% range, and as “reward hacking” — models finding solutions online or gaming verifiers rather than solving problems — has become endemic, self-reported numbers have lost much of their signal. Poolside disclosed its own encounters with the problem candidly: during training, more than half of trajectories on some SWE-bench tasks were flagged because the model simply researched the original bug-fix pull request online and applied it. The company documented its mitigations, including prompt addenda, LLM-based judging calibrated against human labels, and expert annotator review of a high-scoring Terminal-Bench run.

Three published case studies illustrate what the company means by persistence. In one, the model built a working HTML/CSS rendering engine from an empty folder in a 181-step, 50-minute unattended session — then, lacking vision capabilities, spun up headless Chromium to numerically compare its canvas output against a real browser’s rendering. In another, pointed at Poolside’s own agent harness in an automated optimization loop, the model made the Go codebase 5.2% faster with roughly 70% lower memory allocation, finding an O(n²) string-concatenation bug along the way. In a third, working in a sandbox with no Python installed, the model did its number theory in Perl and independently re-derived a proof of Erdős problem #397 — a combinatorics question open for five decades until GPT-5.2 Pro first solved it this past January. Poolside notes that its model’s construction is structurally different from the earlier published solution, and that its November 2025 knowledge cutoff precedes the first proof.

What the disclosed limitations and benchmark fine print reveal

Poolside deserves credit for disclosing limitations most labs bury. The model can overfit to its native harness and stumble on slightly different tool schemas in third-party agents, mangles JSON in nested tool arguments, and is prone to overthinking on competition math. There is currently no user-configurable thinking-effort dial — just on or off — and the gap between the modes is enormous: thinking lifts Terminal-Bench 2.1 from 60.4% to 70.2%, and DeepSWE from 16.5% to 40.4%, at substantially higher token cost.

Buyers should apply their own discounts to the comparison tables. Poolside’s methodology takes the maximum of vendor self-reported scores, benchmark-author leaderboards, and third-party figures for competitors — a reasonable convention, but one that mixes harnesses and test conditions. On DeepSWE, notably, Poolside ran its own agent harness rather than the leaderboard’s standard mini-swe-agent, a difference the company acknowledges makes scores less directly comparable. And the frontier remains clearly out of reach: closed models like GPT-5.6 Sol, at 88.8 on Terminal-Bench 2.1, and Claude Fable 5, at 88.0, along with the 2.8-trillion-parameter open-weight Kimi K3, at 88.3, sit well above Laguna S 2.1.

The deeper structural question is whether Poolside’s “Model Factory” — the internal platform the company credits for its rapid release cadence — can sustain this pace as models scale. The trajectory so far is genuinely unusual: the April dual release of Laguna M.1 and XS.2, the July 2 refresh of XS 2.1, and now S 2.1, which the company says outperforms April’s flagship M.1 at roughly a third of its active size. Remarkably, S 2.1 used the exact same pre-training data as XS 2.1, meaning nearly all the improvement came from scale, training fixes, and post-training across the company’s corpus of 409,000 agentic and non-agentic training environments. Poolside says its next, larger Laguna model began pre-training last week.

For technical decision makers, Laguna S 2.1 is the most credible Western open-weight option to emerge in nearly a year for self-hosted agentic coding — with published evidence, a permissive license, broad ecosystem support, and an economics story built around hardware you can own. Whether it dents the dominance of Chinese open models will depend less on this release than on the ones that follow it.

Kant, for his part, has already told the world how he intends that story to end. Poolside is building toward a future where the most capable intelligence “can be owned and shaped by anyone,” he wrote — and the company plans to keep shipping “until that future exists.” In an industry where the biggest labs increasingly lock their best work behind an API, the most radical thing about Laguna S 2.1 may not be what it scores, but that anyone can download it and check.