Sam: China just put a number on decoupling: $295 billion over five years for AI data centers, with an 80 percent domestic chip mandate. That's not an aspiration — it's a procurement policy that essentially locks US semiconductor companies out of one of the largest infrastructure buildouts in history. And at the same time, Taiwan is moving to criminalize chip smuggling to China. So you've got both sides of the strait hardening their positions simultaneously.

Priya: Welcome to AI Revolution for Tuesday, June 9th, 2026. I'm Priya Nair.

Sam: And I'm Sam Kim.

Priya: We have a packed show today. We're going to dig into that China infrastructure story and pair it with a fascinating parallel development — Google and Nvidia are turning to Intel as a backup foundry for AI chips. Then we'll talk about Apple's rebuilt Siri, which now runs on Google's foundation models. OpenAI and Anthropic have both filed for IPOs. There's a Microsoft Research paper showing that caption quality beats model scale for image generation. We've got a concerning supply chain attack targeting AI agents. And OpenAI is publicly walking back fully autonomous AI. Let's get into it.

Sam: So the China story. Bloomberg is reporting that Beijing plans roughly $295 billion in AI data center investment, and the key detail is the mandate: at least 80 percent of the technology stack has to come from domestic suppliers. In practice, that means Huawei. They're the only Chinese company with a remotely competitive AI accelerator — the Ascend series. Now, these chips are still a generation or two behind Nvidia's best, but 80 percent domestic procurement at this scale essentially creates a guaranteed market for Huawei to iterate and close that gap.

Priya: And the scale matters here. $295 billion over five years is roughly comparable to what the US hyperscalers are collectively spending on data centers. So China is matching that investment but routing it through a completely separate supply chain. For anyone building systems that depend on the global semiconductor ecosystem, you're watching that ecosystem split into two largely independent stacks in real time.

Sam: Right. And the Taiwan angle adds another layer. Taiwan is considering making AI chip smuggling to China a criminal offense — not just a regulatory violation, but an actual crime. That tells you the leakage problem is real enough that civil penalties aren't deterring it. You've got US export controls, you've got Taiwan potentially criminalizing smuggling, and you've got China saying "fine, we'll build our own." All three moves reinforce each other.

Priya: Which brings us to the Intel story, because the US side of this equation has its own supply chain anxiety. Google has ordered more than three million AI chips from Intel Foundry for 2028 delivery, and Nvidia is testing Intel's 18A manufacturing process for its next-generation Feynman GPU architecture.

Sam: This is remarkable because Intel's foundry business has been struggling for years. They've been losing process leadership to TSMC, losing customers, losing money. But the AI demand surge has created a problem that even TSMC can't solve alone — there simply aren't enough leading-edge wafers to go around. So Google and Nvidia are effectively investing in Intel as overflow capacity. Google's three million chip order is big enough to justify Intel keeping advanced lines running and improving yields.

Priya: The strategic logic is straightforward: if most of the world's advanced AI chips are manufactured in Taiwan, and geopolitical risk around Taiwan is increasing, you want manufacturing diversity. Intel has fabs in Arizona, in Oregon, in Ireland, in Israel. That geographic spread is valuable independent of whether Intel's process technology is exactly on par with TSMC's best.

Sam: And for Nvidia specifically, testing Intel's process for Feynman is a hedge. If it works, Nvidia has a second source for its highest-volume chips. If it doesn't work well enough, they haven't committed to anything. But the fact that they're testing at all tells you TSMC allocation is a real constraint on Nvidia's roadmap.

Priya: So zoom out — you've got China building a $295 billion domestic AI infrastructure, the US side diversifying away from TSMC concentration risk, and Taiwan tightening enforcement. The semiconductor supply chain for AI is restructuring in real time along geopolitical lines.

Sam: Let's shift to Apple, because WWDC 2026 had a big reveal. The rebuilt Siri now runs on foundation models co-developed with Google. For complex queries, it routes to Nvidia GPU infrastructure in the cloud rather than processing everything on-device or through Apple's own servers.

Priya: This is a significant strategic shift. Apple spent decades building the narrative that they control the full stack — silicon, software, services. With the original Apple Intelligence rollout, they tried to bring AI into that model: on-device processing with Apple Silicon, Private Cloud Compute for heavier tasks. And it underperformed. Users noticed Siri was still worse than ChatGPT or Gemini for most things.

Sam: So now they've essentially outsourced the hard part. Google provides the foundation models — likely some variant of Gemini optimized for Apple's use cases. Nvidia provides the inference infrastructure. Apple provides the device integration, the privacy layer, and the user experience. It's an acknowledgment that foundation model development requires a different kind of organizational capability than Apple has built.

Priya: And it raises real questions about where the value accrues. If the intelligence behind Siri is Google's model running on Nvidia's GPUs, what's Apple's moat? It's distribution — two billion devices — and trust in their privacy commitments. But the technical differentiation is now largely upstream of Apple.

Sam: Quick hits on the IPO front. OpenAI has filed a confidential S-1 with the SEC, about a week after Anthropic filed its own IPO paperwork. Sam Altman described it as "a complicated set of tradeoffs" with no set timeline.

Priya: Two of the three leading frontier AI labs heading toward public markets within the same month is notable. Public companies have quarterly disclosure requirements, audit obligations, and fiduciary duties to shareholders. That changes incentive structures. Research bets that might take years to pay off become harder to justify when you're reporting earnings every quarter. On the other hand, public markets give them access to capital at a scale that even their current private valuations might not sustain.

Sam: Now let's talk about the Microsoft Research Lens paper, because this is technically interesting. Lens is a text-to-image model with only 3.8 billion parameters that matches much larger competitors on standard benchmarks. The key insight is about training data quality, specifically captions.

Priya: So here's the problem Lens addresses. Most large-scale image generation models are trained on web-scraped image-text pairs, and the text is usually whatever alt-text or caption was on the webpage. That's often vague, inaccurate, or just "IMG_4032.jpg." The model has to learn to map text to images from these noisy, low-quality descriptions.

Sam: What Microsoft did was take 800 million images and generate new, detailed captions using GPT-4.1. So instead of training on "a dog," the model might train on "a golden retriever puppy sitting on a wet wooden dock at sunset, ears perked forward, with a lake and pine trees in the background." That specificity means the model learns much tighter text-to-image correspondence with fewer parameters and less compute.

Priya: The analogy I'd use: it's like the difference between learning a language from someone who points vaguely at things and grunts, versus learning from someone who gives you precise, contextual descriptions. You learn faster and more accurately from better teaching, even with less total instruction time.

Sam: And the practical implication is significant. If you can match a 20-billion-parameter model's output quality with a 3.8-billion-parameter model by investing in caption quality, you've dramatically reduced the inference cost. Smaller models are cheaper to run, faster to generate, and easier to deploy. The code and weights are open source, so anyone can build on this.

Priya: Now, the security story. Ars Technica reported that 73 malicious packages were found in Microsoft package repositories, each containing a self-replicating credential stealer. What makes this different from a typical supply chain attack is the trigger mechanism: the malware executes automatically when an AI agent opens the package.

Sam: This is a threat model that's specific to agentic AI workflows. When a human developer installs a package, they might notice something odd — an unexpected post-install script, unusual network calls. But when an AI coding agent is autonomously resolving dependencies, installing packages, and executing code, there's no human in the loop to catch suspicious behavior. The agent just does what the package tells it to do.

Priya: And this is the second incident in weeks, which suggests an active campaign. Someone has figured out that AI agents are a soft target in the software supply chain. They process packages automatically, they have access to credentials and secrets in the development environment, and they don't get suspicious. This is an area where security tooling needs to catch up fast — we need automated integrity checks that operate at the speed of agent execution.

Sam: Last story. OpenAI is publicly stepping back from fully autonomous AI research. Altman and Chief Scientist Jakub Pachocki are now advocating for a "tandem" model of human-AI collaboration, and they've called for an international governance body with authority to slow frontier development if necessary.

Priya: This is a notable shift from the company that, not that long ago, was talking about achieving AGI and then superintelligence as organizational goals on an aggressive timeline. The language of "tandem" and "slowing down" is new from OpenAI specifically. Whether it reflects genuine conviction or pre-IPO positioning is a fair question.

Sam: I think both can be true. If you're about to go public, you want regulators and the public to see you as responsible. But also, the technical reality of autonomous AI research has proven harder than the optimistic 2024-era projections suggested. Models are incredibly capable assistants for researchers, but fully autonomous research — where the model generates hypotheses, designs experiments, runs them, and iterates without human guidance — that remains genuinely hard. The tandem framing may just be honest about where things actually are.

Priya: And the call for an international governance body is interesting in the context of the China story we opened with. Any meaningful international AI governance requires China's participation, and China is currently building a $295 billion domestic AI infrastructure specifically to reduce dependence on Western technology. The incentive alignment for international cooperation on slowing down is not obvious.

Sam: Looking ahead — the semiconductor supply chain restructuring is the thread that connects half of today's stories. China's domestic buildout, Intel's second life as a foundry, Taiwan criminalizing chip smuggling — these are all moves in the same game, and they're accelerating. I'd watch for how Huawei's Ascend chips perform at scale in these new Chinese data centers. If they close the gap with Nvidia faster than expected, the competitive dynamics shift significantly.

Priya: And on the AI agent security front, I think we're going to see a lot more of these attacks. The attack surface is expanding as agents get more autonomy, and the tooling to secure agent workflows is still nascent. If you're deploying AI agents that can install packages or execute code, your threat model needs to account for adversarial inputs specifically designed for automated processing. That's a different security posture than what most organizations have today.

Sam: That's our show for today. Show notes and links to everything we covered are at cleartext.fm.

Priya: Thanks for listening. We'll be back tomorrow.