Sam: Anthropic filed for its IPO this week. With annualized revenue at $47 billion and a valuation that now tops OpenAI's, the company that built its brand on AI safety is about to find out what public-market shareholders think safety is worth.

Priya: Welcome to AI Revolution, the Saturday Week in Review for the week ending June 6th, 2026. I'm Priya Nair.

Sam: And I'm Sam Kim. This was a week where the business of AI and the governance of AI collided in ways we haven't seen before.

Priya: We've got three big themes to unpack. First, the financialization of AI — Anthropic's IPO, the government wanting a stake in OpenAI, and what it means when AI labs become public institutions in every sense of that word. Second, the growing tension between AI safety rhetoric and operational reality — from NSA cyber operations to Florida's product liability lawsuit to federal testing mandates with no one to enforce them. And third, the infrastructure scramble — SpaceX renting GPUs to Google, massive data center buildouts in India, and new hardware trying to break through fundamental compute bottlenecks. Let's get into it.

Sam: So let's start with the money, because the scale of what happened this week is genuinely hard to process. Anthropic filed for its IPO. Their annualized revenue hit $47 billion in May. For context, that's up from roughly $9 billion at the end of 2025. That's a five-times increase in about six months.

Priya: To put that in perspective, that growth rate is faster than basically anything in enterprise software history. And Daniela Amodei spent part of the week on her IPO roadshow pushing back on investor skepticism about whether AI returns are real or sustainable.

Sam: Which is the right question for investors to ask. The revenue is clearly real — enterprises are spending on Claude at massive scale. But the question is whether this is a new baseline or a land-grab surge that normalizes. Anthropic is spending enormous amounts on compute. They're renting GPU capacity from Elon Musk's xAI infrastructure, which is its own ironic subplot.

Priya: And speaking of xAI, there's a remarkable story this week about Musk's AI lab reportedly training its coding models on Claude's outputs for months. When Anthropic revoked access, xAI engineers apparently kept going through private accounts and third-party services. Meanwhile, xAI's pretraining team has shrunk to fewer than five people, and the GPUs Musk acquired are now generating revenue by renting to Anthropic and Google rather than powering xAI's own models.

Sam: The xAI situation is fascinating as a case study in how the competitive dynamics actually work. You have a company that invested heavily in compute infrastructure, couldn't build competitive models fast enough, and is now essentially becoming a compute landlord while allegedly using competitors' outputs to bootstrap its own capabilities. The terms-of-service enforcement question here is real — how do you actually prevent model distillation through API access at scale?

Priya: That connects to the Microsoft story too. Microsoft had been marketing its MAI models as trained on "enterprise grade, clean and commercially licensed data." Turns out they used Common Crawl and other unlicensed web data, same as everyone else. The pattern is consistent — what companies say about their data practices and what they actually do are frequently different things.

Sam: Right. And for enterprise customers evaluating these vendors, the data provenance claims are material. If you're in a regulated industry and your vendor told you the training data was clean, and it wasn't, that's a liability question that lands on you.

Priya: Let's shift to the governance and safety theme, because this week was extraordinary on that front. The biggest story, in my view, is the report that Anthropic has stationed roughly six engineers directly at the NSA to adapt its Mythos model for offensive cyber operations against China and Iran.

Sam: This is Anthropic — the company that was literally founded to be the safety-focused alternative. And to be clear, their published policies on restricting AI use for mass surveillance explicitly apply only to US citizens. So there's an internal consistency to their position, but it's a very different message than most people associate with the brand.

Priya: And this is happening in the same week they file for an IPO. Once they're a public company, the tension between safety commitments and national security contracts becomes a quarterly earnings discussion. Shareholders are going to want to know about government revenue. The safety board's recommendations become material disclosures.

Sam: The timing with Florida's lawsuit against OpenAI adds another dimension. Florida is the first state to sue OpenAI directly — and they sued Sam Altman personally. The 83-page complaint treats ChatGPT as a defective product. It cites ChatGPT-linked murders, missing age verification, inadequate investment in safety. The legal theory is product liability and public nuisance.

Priya: The product liability framing is the important part. If a court accepts that an AI chatbot is a product in the traditional legal sense — subject to the same kind of liability as, say, a consumer appliance or a pharmaceutical — that changes the entire industry's risk calculus. You'd need to demonstrate safety testing, implement verifiable controls, potentially carry product liability insurance.

Sam: And then you layer on the federal level, where the Trump administration has an executive order requiring AI model testing, but the teams who would actually do that testing were gutted by DOGE cuts. So you have a policy mandate with no enforcement capacity. Critics called it "short-sighted and performative," which is blunt but hard to argue with if there's literally no one to run the evaluations.

Priya: Meanwhile, separately, OpenAI is negotiating a direct government equity stake with the Trump administration. The concept is a "Public Wealth Fund" that would distribute AI gains to American citizens. Senator Sanders is pushing a 50 percent tax on AI shares as an alternative legislative approach.

Sam: This one is unprecedented. A direct equity stake by the US government in a private AI company. The "too big to fail" comparisons to 2008 write themselves. If the government owns a piece of OpenAI, what happens when OpenAI needs a regulatory decision? Who's the regulator and who's the shareholder? Those roles are fundamentally in tension.

Priya: And all of this is happening simultaneously. In a single week, we have the leading safety lab going public while embedding engineers at the NSA, a state treating chatbots as defective products, the federal government potentially becoming an AI company shareholder, and no functional federal capacity to test AI systems. The governance infrastructure for AI is being built — or failing to be built — in real time.

Sam: Let's talk about physical infrastructure, because the compute scarcity story got more interesting this week. The headline number: SpaceX is leasing about 110,000 Nvidia GPUs to Google for $920 million per month.

Priya: Per month. That's an $11 billion annualized compute rental. Google — one of the largest cloud providers on Earth, a company that designs its own TPUs — needs to rent GPU capacity externally because demand for Gemini Enterprise outstripped their internal supply.

Sam: This tells you two things. First, enterprise AI demand is real and growing faster than even hyperscalers projected. Second, the compute supply chain has become so tight that companies like SpaceX, which bought GPUs primarily for its own Starlink operations, are now critical nodes in the AI infrastructure ecosystem. The interdependencies here are getting very complex.

Priya: On the buildout side, AirTrunk committed $30 billion to build 5 gigawatts of AI data center capacity in India. That's one of the largest single-country infrastructure investments outside the US and China. The geographic diversification of AI compute is accelerating.

Sam: And on the hardware innovation side, there were two interesting developments. Majestic Labs announced a server called Prometheus with up to 128 terabytes of memory — compared to roughly 2 terabytes in an Nvidia DGX B300. The thesis is straightforward: LLM token generation is memory-bandwidth-bound, not compute-bound. If you can read model weights faster, you generate tokens faster. More memory with higher bandwidth directly attacks that bottleneck.

Priya: And Nvidia announced RTX Spark at Computex — their Blackwell GB10 superchip for Windows PCs. Microsoft, Asus, Dell, Lenovo, HP all announced devices. This puts serious AI inference capability on the desktop, which matters for air-gapped environments, privacy-sensitive workloads, and any deployment where you don't want data leaving the device.

Sam: Two quick security stories worth flagging. The BadHost vulnerability in Starlette — a Python web framework with 325 million weekly downloads — allows authentication bypass through malformed HTTP Host headers. This directly exposes AI agent infrastructure, LLM gateways, and evaluator endpoints. If you're running anything on Starlette, patch immediately.

Priya: And hackers successfully social-engineered Meta's AI support chatbot to steal celebrity Instagram accounts. They manipulated the chatbot into granting unauthorized access, resold the handles, and it all happened before Meta patched it. AI customer service chatbots are a genuinely new attack surface that most security teams haven't specifically threat-modeled.

Sam: On the model side, two developments worth noting. Anthropic shipped Dynamic Workflows for Claude Code — the ability to orchestrate many parallel sub-agents, break tasks into subtasks, run them concurrently, and validate results. It's a meaningful step toward autonomous multi-agent software engineering. And Alibaba released Qwen3.7-Plus, which combines visual perception, GUI control, and code generation in a single agent loop. Their demo showed it autonomously building a vocabulary app — 10,000 lines of code across 1,000 agent calls over eleven hours.

Priya: So stepping back — what does this week mean?

Sam: I think this is the week where the AI industry visibly crossed from the startup era into the institutional era. Anthropic going public, the government negotiating equity stakes, states filing product liability suits — these are the mechanisms of a mature industry, not a research community. The technology is now embedded deeply enough in national security, enterprise operations, and consumer products that it's being governed — for better or worse — by the same forces that govern pharmaceuticals, financial services, and defense contractors.

Priya: And the gap between the speed of deployment and the speed of governance keeps widening. We have models powering NSA operations, but no federal team to evaluate model safety. We have $47 billion in revenue, but product liability law hasn't decided if a chatbot is a product. We have enterprises running critical workloads on these systems, but vendors aren't honest about what's in the training data. The technical capabilities are racing ahead. The institutional infrastructure to manage them responsibly is still under construction, and in some cases, it's being actively dismantled.

Sam: What I'm watching next week: Anthropic's IPO roadshow and how they position the NSA work to institutional investors. And whether any other states follow Florida's lead on product liability. If that legal theory gets traction, it reshapes the cost structure of the entire industry.

Priya: That's our Week in Review for June 6th, 2026. We'll be back Monday with your daily briefing. Show notes and links to all the stories we covered today are at cleartext.fm.

Sam: Thanks for spending your Saturday with us. See you Monday.