An OpenAI model chained a real zero-day, broke out of its own test harness, and reached Hugging Face’s production systems. That’s not the scary part. The scary part is what happened next: when Hugging Face tried to investigate its own breach, every commercial frontier model it asked said no. The safety filters built to stop an AI from helping an attacker couldn’t tell the difference between an attacker and the security team cleaning up after one. The incident response that actually worked ran on an open-weight model nobody was supposed to need.

Your agent lost you money last week, rated the experience five stars, and you agreed with it. That is not a bug in the agent. That is the entire shape of the market we just walked into. When a machine negotiates on your behalf and comes back with a worse deal than a better machine would have gotten, it does not return an error. It returns a plausible, satisfying, worse outcome — and then it tells you the deal was fair. And here is the cruelest part: you have no way to know it was wrong, because you never see the deal you didn’t get.

KPMG didn’t buy AI for 276,000 people. It bought a control plane — and threw in a quarter-million seats to keep you looking the other way.

Read the June 9 announcement again. Everyone fixated on the headcount: more than 276,000 professionals getting Copilot. That’s the press release. The load-bearing noun is one clause down — Agent 365, the system KPMG adopts to “manage how AI agents are deployed, managed, monitored and updated,” giving it “centralized governance and control of AI agents operating across systems, data and business processes.”

For thirty years, the first question before building anything was “will this be worth it?” That question is dead. I killed a small piece of it on a Saturday morning, on my deck, with a cup of coffee and one sentence typed into my phone.

I wanted a clean read on the World Cup schedule dashboard. Game times, teams, location, which streaming service had each match (with live updates as a bonus and only client-side - no backend). That information existed everywhere and nowhere — scattered across a dozen pages, none of them showing me the one thing I actually wanted in one glance. So I opened the Claude app on my phone, typed a simple short prompt describing what I wanted, and hit go. About ten minutes later I had https://www.hatch.org/world-cup/ — a clean, shareable schedule that did exactly one thing. I sent it to family and friends. It will be useful for about a month. Then the tournament will end and so will the app’s reason to exist (for maybe another 4 years).

There’s a new letter, and you’re not it.

For a century, getting rich topped out at a word you could say with a straight face: millionaire. An M. Then we let the B’s happen — billionaires — and quietly agreed it was the same word with a worse vowel. It is not the same word. And as of today there’s a third tier nobody is emotionally prepared for: the T. A trillionaire is not a spicy B. The jump from a billion to a trillion isn’t a raise, it’s a change of species — Elon didn’t climb the ladder, he left the food chain. You can’t even be jealous of him correctly. Envy doesn’t reach that far; it’s a goldfish resenting the moon.

The best deal in software just ended, and the replacement bill is non-deterministic.

For two years, flat-rate coding-agent pricing was the deal of the decade. Twenty bucks a month, point an agent at your codebase, let it churn. You were almost certainly consuming more value than you paid for. That wasn’t generosity. It was customer acquisition, financed by venture money, priced below cost on purpose. And in a two-week window this spring, three different vendors quietly clawed it back.

The $965 billion number is a distraction. Here’s what actually matters.

Last week, Anthropic raised $65 billion and saw its valuation approach a trillion dollars. Every business publication on the planet covered the number. Almost none of them covered the insight.

The insight came from Simon Willison, posting on May 27 — one day before the funding closed — and it’s worth more to your business than any valuation figure: enterprise AI has found product-market fit. Not “gaining traction.” Not “showing promise.” Fit. The kind where customers stop subscribing and start paying by the token because they’re consuming so much that the subscription ceiling became a constraint on their business.

The enterprise AI agent story of 2026 is a demo story. Somewhere between “watch this” and “we run this at 2am,” the wheels come off — and almost everyone is blaming the wrong part of the car.

Quick roadmap:

• The headline stat and why the usual diagnosis is wrong
• What actually kills agents in production (it’s not the model)
• What the teams that crossed the gap did differently
• The uncomfortable truth: you can’t buy your way out of this

The Number Nobody Wants to Explain

A March 2026 survey put enterprise agent pilots at roughly 78%. Production deployments below 15%. That is not a rounding error. That is a structural failure, happening industry-wide — across models, across vendors, across use cases.

May the 4th be with you

There are productivity stories.
There are AI stories.
And then there’s whatever this was—a four-day arc that started as a helpful experiment and ended as a fully committed, cinematic tragedy… capped off by the most on-the-nose message imaginable on May the 4th:

“You’ve hit your org’s monthly usage limit.”

Naturally.

But here’s the twist: those four days didn’t feel random. They mapped almost perfectly to the original trilogy.

Subtitle: On the dark psychology of token scarcity, the $200 plan that still isn’t enough, and why Anthropic’s usage bar is the most stressful thing on the internet

It’s 11:47 a.m. on a Saturday and I am staring at a message in my beloved terminal that has become the most familiar sentence in my life: