Evidence Wall
Predictions made in gsstk articles, tracked with evidence as events unfold.
Confirmed (6)

“First major MCP security incident within Q2 2026”
Made
Confirmed
Evidence
a0062 — MCP Git vulnerabilities disclosed (Anthropic's own MCP server).

“OpenClaw/Moltbot would face serious supply chain attacks”
Made
Confirmed
Evidence
a0087 — 9 CVEs, 2,200 malicious skills, 40K exposed instances

“Agent swarms would break Git's merge model at scale”
Made
Confirmed
Evidence
a0081 — Cursor FastRender: 600 agents, 88% CI failure rate.

“Mid-tier models would close the gap to flagships within months”
Made
Confirmed
Evidence
a0085 — Sonnet 4.

“AI agents would be systematically insecure even when functionally correct”
Made
Confirmed
Evidence
a0091 — DryRun's 87% vulnerability rate across 5 independent studies confirmed the pattern at scale.

“Security scanners themselves would become attack vectors”
Made
Confirmed
Evidence
a0096 — Trivy (security scanner) compromised by TeamPCP, became delivery vector for credential theft across 6 ecosystems.
Pending (28)

“Composability patterns for MCP will emerge H2 2026”
Made
Expected By
Watch For
MCP composability — chaining servers, meta-servers — still nascent

“MCP becomes default infrastructure by 2027”
Made
Expected By
Watch For
On track — 97M monthly downloads, Linux Foundation governance

“NVIDIA will use NemoClaw to pull ecosystem toward their silicon (CUDA playbook)”
Made
Expected By
Watch For
Watch for: NemoClaw optimizations that only work on NVIDIA hardware, Nemotron integration deepening

“40% of multi-agent pilots will fail within 6 months of deployment”
Made
Expected By
Watch For
Cited from Galileo AI research.

“CRDTs will become the merge foundation for agent orchestration systems”
Made
Expected By
Watch For
Very early — Manyana is a PoC, Pijul exists but hasn't achieved scale.

“Blockchain-based C2 (ICP canisters) will become standard for supply chain malware”
Made
Expected By
Watch For
CanisterWorm was first documented case.

“The "Flagship Tax" will collapse — routing replaces model selection”
Made
Expected By
Watch For
Watch for: enterprise adoption of model routers, Opus/GPT-5 usage declining relative to mid-tier.

“DevOps role will contract structurally (not just evolve)”
Made
Expected By
Watch For
Active debate.

“Durable execution engine will be as standard in production as message queues by 2028”
Made
Expected By
Watch For
Watch for: platform engineering teams standardizing on Temporal/Restate, "workflow engine" becoming

“Major financial institution will disclose $10M+ loss from AI agent operating within granted permissions (misaligned optimization, not hack)”
Made
Expected By
Watch For
Watch for: SEC filings, financial press disclosures involving AI agent-driven trading/operations losses.

“Trust calibration interfaces (confidence scores, risk badges, independent approval channels) will become compliance requirement for AI agents in financial/healthcare in at least one G7 jurisdiction”
Made
Expected By
Watch For
Watch for: EU AI Act implementing rules, FDA guidance on clinical AI agents, SEC/FCA guidance on AI in finance.

“"Vibe coding" will produce 3+ Replit-scale incidents in 2026, driving first industry demand for agent behavioral certification (safety ratings for coding tools)”
Made
Expected By
Watch For
Watch for: public incidents with autonomous coding agents deleting/corrupting production data, industry coalition or standards body proposing safety rating system.

“By Q4 2027, fewer than 40% of new greenfield projects will deploy to self-managed or managed Kubernetes as their primary runtime — majority will use PaaS, serverless, or platform-abstracted environments”
Made
Expected By
Watch For
Watch for: CNCF annual surveys tracking K8s as primary runtime for new projects (not existing workloads), PaaS adoption metrics from Railway/Render/Fly.

“CADA's final text will adopt "European effective control" for Tier 1 critical workloads but stop short of blanket ownership restrictions — creating a two-tier system where hyperscalers compete for Tier 2 but EU-native providers dominate Tier 1”
Made
Expected By
Watch For
Watch for: CADA proposal text (expected May 27, 2026), "effective control" definition scope, procurement mandate specifics.

“At least one major incident involving extraterritorial data access (CLOUD Act or equivalent) targeting data stored in a US hyperscaler's EU sovereign region will become public by Q2 2027”
Made
Expected By
Watch For
Watch for: court filings, FOIA disclosures, investigative journalism involving US government data requests to AWS/Azure/GCP EU sovereign regions.

“By 2028, "sovereign cloud compatible" will be a standard checkbox in European public procurement, comparable to "GDPR compliant" today — and Gartner's $23B sovereign cloud IaaS forecast will prove conservative”
Made
Expected By
Watch For
Watch for: EU public procurement RFPs requiring sovereignty certification, EUCS adoption rate, sovereign cloud IaaS spending vs Gartner forecast.

“By 2028, the "mid-level engineer" (3-5 years experience, primarily writing feature code) will no longer exist as a distinct hiring band at companies with 500+ engineers — career path compresses to "AI-augmented developer" (0-2 yrs) and "system architect" (3+ yrs)”
Made
Expected By
Watch For
Watch for: job posting data from Levels.

“By Q4 2027, at least 30% of new AI data-center capacity brought online in the United States will be delivered via "bring-your-own-generation" arrangements — on-site natural gas, SMR power purchase agreements, or behind-the-meter generation — because connecting to the transmission grid will take longer than securing dedicated on-site power”
Made
Expected By
Watch For
Watch for: ERCOT and PJM interconnection-queue depth and approval-to-request ratios; project count from Crusoe, Prometheus Hyperscale, Fermi, and equivalents; FERC rulemaking on large-load interconnection; capex allocation in hyperscaler earnings broken out between "grid-connected" and "on-site.

“By Q4 2027, more than 80% of new managed Kubernetes clusters from major cloud providers (AWS EKS, GCP GKE, Azure AKS, Oracle OKE) will default to eBPF-based dataplanes (not merely offer them as options), AND sidecar-based service mesh production share will drop below 15% of mesh-using organizations — down from 42% in 2024 per CNCF survey data”
Made
Expected By
Watch For
Watch for: GKE/EKS/AKS default CNI documentation updates; CNCF Annual Surveys 2026 and 2027; Istio and Linkerd published adoption reports; Cilium Annual Report measuring CNI market share; Solo.

“By Q4 2026, at least one major AI dev tool vendor (Anthropic, OpenAI, GitHub Copilot, Cursor, or Cognition) will publish a public *harness changelog SLA* committing to pre-rollout disclosure of behavior-affecting changes to defaults, system prompts, redaction settings, and caching behavior, with a minimum notice window for paid enterprise customers. Driver: Fortune 500 procurement teams refusing to renew without it after the April 2026 Claude Code regression incident exposed the gap between model-weight changes and harness changes.”
Made
Expected By
Watch For
**🪝 Feeds Active Series "The Harness Layer"** (a0108 Athena → a0111 Icarus → a0117 Daedalus → a0118 Prometheus).

“By Q4 2027, the debt-to-capex ratio for at least two of the four hyperscalers (GOOGL, AMZN, MSFT, META) will exceed 40%, reflecting a permanent structural shift from operating-cash-funded to debt-funded AI infrastructure. Confirmation signal: hyperscaler debt issuance in 2027 sustains above $150B annually rather than reverting toward the prior $28B average.”
Made
Expected By
Watch For
Watch for: 10-K and 10-Q debt issuance disclosures from each of the four hyperscalers; Bank of America and Morgan Stanley fixed-income strategist forecasts; sterling, euro, and Swiss-franc tranche frequency from US tech issuers; pension/insurance institutional allocation breakdowns.

“At least one of the SpaceX / OpenAI / Anthropic IPO trio will price at a >25% discount to its last private valuation, OR will list later than its currently-targeted Q4 2026 window.”
Made
Expected By
Watch For
Watch for: SpaceX public S-1 financials (expected ~May 18-22, 2026); OpenAI / Microsoft AGI-clause litigation status; Anthropic Pentagon supply-chain risk designation impact; broader rate environment and IPO market sentiment around the SpaceX June 8 roadshow start.

“By Q4 2026, at least one of the four hyperscalers (AWS, Microsoft Azure, Google Cloud, Oracle Cloud) will publish a supported, contractual product-tier — analogous to AWS Bedrock Intelligent Prompt Routing but **cross-family or cross-vendor** — that routes traffic between models from at least two different model families (e.g. Claude *and* Llama, or Gemini *and* Mistral) based on per-prompt complexity classification, with published cost-savings claims.”
Made
Expected By
Watch For
**Continues E013** (Flagship Tax / routing replaces model selection) into the next architectural milestone: from intra-family routing to genuinely cross-vendor routing as a managed product.

“By Q1 2027, at least two major AI dev tool vendors will publish structured harness changelog SLAs with notice windows of at least 30 days and explicit disclosures across the seven harness components (system prompt, defaults, context compaction, tool routing, caching, redaction, telemetry). Extends E026 by operationalizing "major vendor publishes" into a measurable bar: two vendors, structural completeness across the a0108 component set, real notice window.”
Made
Expected By
Watch For
**Continues E026.

“By the end of the 2026/27 European football season (June 30, 2027), at least one top-tier domestic competition outside FIFA's umbrella — Premier League, La Liga, Serie A, Bundesliga, or UEFA Champions League — will publicly commit to adopting the Trionda-generation Connected Ball Technology (side-mounted 500 Hz IMU + Kinexon UWB Local Positioning System + Football Technology Centre AG SAOT algorithms) for league-wide use.”
Made
Expected By
Watch For
**Mechanism:** the 2026 World Cup is a forcing function — league officiating committees will see the latency benchmarks and avatar precision demonstrated at the tournament and decide that not having parity is worse than the procurement complexity of getting it.

“By December 31, 2028, at least one of the four hyperscalers (Alphabet, Amazon, Microsoft, Meta) will EITHER (a) shorten its disclosed server / AI-hardware useful-life assumption and book an accelerated-depreciation or impairment charge material enough to be called out in an earnings release, OR (b) a top-tier pure-play AI cloud (CoreWeave-scale 'neocloud') will be acquired by a hyperscaler or restructure its GPU-backed debt under duress.”
Made
Expected By
Watch For
**Mechanism:** Nvidia's ~annual flagship cadence pushes real economic life below the booked 5–6y schedule; the front-loaded 2025–2026 GPU fleet matures into a re-statement window while the useful-life-extension lever is exhausted (can only extend once); GPU-backed-debt collateral re-prices with the same useful-life mark.

“By December 31, 2027, Valkey captures >45% of the managed cache instance default provisionings on AWS, Google Cloud, and Azure, replacing Redis OSS as the baseline hosted in-memory database tier.”
Made
Expected By
Watch For
**Mechanism:** The Redis 8 license change to SSPLv1/RSALv2 drove the Linux Foundation to fork Valkey.

“By December 31, 2027, at least 40% of software vendors offering products built on third-party reasoning models (such as o1, R1) will abandon flat-rate SaaS models in favor of usage-based token billing or adaptive compute budget limits.”
Made
Expected By
Watch For
**Mechanism:** The high operational cost of test-time compute (inference scaling) collapses typical SaaS gross margins, rendering flat-rate pricing unsustainable for intensive queries.
Receive site updates
Subscribe to receive site updates directly to your email
We won't send spam. You can unsubscribe at any time.