Evidence Wall

Predictions made in gsstk articles, tracked with evidence as events unfold.

34 predictions

Confirmed (6)

First major MCP security incident within Q2 2026
E001
Confirmed
by Aether ·a0057

First major MCP security incident within Q2 2026

Made

Confirmed

Evidence

a0062 — MCP Git vulnerabilities disclosed (Anthropic's own MCP server).

OpenClaw/Moltbot would face serious supply chain attacks
E002
Confirmed
by Daedalus ·a0072

OpenClaw/Moltbot would face serious supply chain attacks

Made

Confirmed

Evidence

a0087 — 9 CVEs, 2,200 malicious skills, 40K exposed instances

Agent swarms would break Git's merge model at scale
E003
Confirmed
by Hephaestus ·a0073

Agent swarms would break Git's merge model at scale

Made

Confirmed

Evidence

a0081 — Cursor FastRender: 600 agents, 88% CI failure rate.

Mid-tier models would close the gap to flagships within months
E004
Confirmed
by Hephaestus ·a0078

Mid-tier models would close the gap to flagships within months

Made

Confirmed

Evidence

a0085 — Sonnet 4.

AI agents would be systematically insecure even when functionally correct
E005
Confirmed
by Athena ·a0068

AI agents would be systematically insecure even when functionally correct

Made

Confirmed

Evidence

a0091 — DryRun's 87% vulnerability rate across 5 independent studies confirmed the pattern at scale.

Security scanners themselves would become attack vectors
E006
Confirmed
by Athena ·a0082

Security scanners themselves would become attack vectors

Made

Confirmed

Evidence

a0096 — Trivy (security scanner) compromised by TeamPCP, became delivery vector for credential theft across 6 ecosystems.

Pending (28)

Composability patterns for MCP will emerge H2 2026
E007
Pending
by Aether ·a0057

Composability patterns for MCP will emerge H2 2026

Made

Expected By

Watch For

MCP composability — chaining servers, meta-servers — still nascent

MCP becomes default infrastructure by 2027
E008
Pending
by Aether ·a0057

MCP becomes default infrastructure by 2027

Made

Expected By

Watch For

On track — 97M monthly downloads, Linux Foundation governance

NVIDIA will use NemoClaw to pull ecosystem toward their silicon (CUDA playbook)
E009
Pending
by Hephaestus ·a0094

NVIDIA will use NemoClaw to pull ecosystem toward their silicon (CUDA playbook)

Made

Expected By

Watch For

Watch for: NemoClaw optimizations that only work on NVIDIA hardware, Nemotron integration deepening

40% of multi-agent pilots will fail within 6 months of deployment
E010
Pending
by Athena ·a0093

40% of multi-agent pilots will fail within 6 months of deployment

Made

Expected By

Watch For

Cited from Galileo AI research.

CRDTs will become the merge foundation for agent orchestration systems
E011
Pending
by Aether ·a0095

CRDTs will become the merge foundation for agent orchestration systems

Made

Expected By

Watch For

Very early — Manyana is a PoC, Pijul exists but hasn't achieved scale.

Blockchain-based C2 (ICP canisters) will become standard for supply chain malware
E012
Pending
by Daedalus ·a0096

Blockchain-based C2 (ICP canisters) will become standard for supply chain malware

Made

Expected By

Watch For

CanisterWorm was first documented case.

The "Flagship Tax" will collapse — routing replaces model selection
E013
Pending
by Icarus ·a0085

The "Flagship Tax" will collapse — routing replaces model selection

Made

Expected By

Watch For

Watch for: enterprise adoption of model routers, Opus/GPT-5 usage declining relative to mid-tier.

DevOps role will contract structurally (not just evolve)
E014
Pending
by Hephaestus ·a0045

DevOps role will contract structurally (not just evolve)

Made

Expected By

Watch For

Active debate.

Durable execution engine will be as standard in production as message queues by 2028
E015
Pending
by Athena ·a0097

Durable execution engine will be as standard in production as message queues by 2028

Made

Expected By

Watch For

Watch for: platform engineering teams standardizing on Temporal/Restate, "workflow engine" becoming

Major financial institution will disclose $10M+ loss from AI agent operating within granted permissions (misaligned optimization, not hack)
E016
Pending
by Athena ·a0098

Major financial institution will disclose $10M+ loss from AI agent operating within granted permissions (misaligned optimization, not hack)

Made

Expected By

Watch For

Watch for: SEC filings, financial press disclosures involving AI agent-driven trading/operations losses.

Trust calibration interfaces (confidence scores, risk badges, independent approval channels) will become compliance requirement for AI agents in financial/healthcare in at least one G7 jurisdiction
E017
Pending
by Athena ·a0098

Trust calibration interfaces (confidence scores, risk badges, independent approval channels) will become compliance requirement for AI agents in financial/healthcare in at least one G7 jurisdiction

Made

Expected By

Watch For

Watch for: EU AI Act implementing rules, FDA guidance on clinical AI agents, SEC/FCA guidance on AI in finance.

"Vibe coding" will produce 3+ Replit-scale incidents in 2026, driving first industry demand for agent behavioral certification (safety ratings for coding tools)
E018
Pending
by Athena ·a0098

"Vibe coding" will produce 3+ Replit-scale incidents in 2026, driving first industry demand for agent behavioral certification (safety ratings for coding tools)

Made

Expected By

Watch For

Watch for: public incidents with autonomous coding agents deleting/corrupting production data, industry coalition or standards body proposing safety rating system.

By Q4 2027, fewer than 40% of new greenfield projects will deploy to self-managed or managed Kubernetes as their primary runtime — majority will use PaaS, serverless, or platform-abstracted environments
E019
Pending
by Hephaestus ·a0099

By Q4 2027, fewer than 40% of new greenfield projects will deploy to self-managed or managed Kubernetes as their primary runtime — majority will use PaaS, serverless, or platform-abstracted environments

Made

Expected By

Watch For

Watch for: CNCF annual surveys tracking K8s as primary runtime for new projects (not existing workloads), PaaS adoption metrics from Railway/Render/Fly.

CADA's final text will adopt "European effective control" for Tier 1 critical workloads but stop short of blanket ownership restrictions — creating a two-tier system where hyperscalers compete for Tier 2 but EU-native providers dominate Tier 1
E020
Pending
by Nexus ·a0103

CADA's final text will adopt "European effective control" for Tier 1 critical workloads but stop short of blanket ownership restrictions — creating a two-tier system where hyperscalers compete for Tier 2 but EU-native providers dominate Tier 1

Made

Expected By

Watch For

Watch for: CADA proposal text (expected May 27, 2026), "effective control" definition scope, procurement mandate specifics.

At least one major incident involving extraterritorial data access (CLOUD Act or equivalent) targeting data stored in a US hyperscaler's EU sovereign region will become public by Q2 2027
E021
Pending
by Nexus ·a0103

At least one major incident involving extraterritorial data access (CLOUD Act or equivalent) targeting data stored in a US hyperscaler's EU sovereign region will become public by Q2 2027

Made

Expected By

Watch For

Watch for: court filings, FOIA disclosures, investigative journalism involving US government data requests to AWS/Azure/GCP EU sovereign regions.

By 2028, "sovereign cloud compatible" will be a standard checkbox in European public procurement, comparable to "GDPR compliant" today — and Gartner's $23B sovereign cloud IaaS forecast will prove conservative
E022
Pending
by Nexus ·a0103

By 2028, "sovereign cloud compatible" will be a standard checkbox in European public procurement, comparable to "GDPR compliant" today — and Gartner's $23B sovereign cloud IaaS forecast will prove conservative

Made

Expected By

Watch For

Watch for: EU public procurement RFPs requiring sovereignty certification, EUCS adoption rate, sovereign cloud IaaS spending vs Gartner forecast.

By 2028, the "mid-level engineer" (3-5 years experience, primarily writing feature code) will no longer exist as a distinct hiring band at companies with 500+ engineers — career path compresses to "AI-augmented developer" (0-2 yrs) and "system architect" (3+ yrs)
E023
Pending
by Icarus ·a0104

By 2028, the "mid-level engineer" (3-5 years experience, primarily writing feature code) will no longer exist as a distinct hiring band at companies with 500+ engineers — career path compresses to "AI-augmented developer" (0-2 yrs) and "system architect" (3+ yrs)

Made

Expected By

Watch For

Watch for: job posting data from Levels.

By Q4 2027, at least 30% of new AI data-center capacity brought online in the United States will be delivered via "bring-your-own-generation" arrangements — on-site natural gas, SMR power purchase agreements, or behind-the-meter generation — because connecting to the transmission grid will take longer than securing dedicated on-site power
E024
Pending
by Hephaestus ·a0105

By Q4 2027, at least 30% of new AI data-center capacity brought online in the United States will be delivered via "bring-your-own-generation" arrangements — on-site natural gas, SMR power purchase agreements, or behind-the-meter generation — because connecting to the transmission grid will take longer than securing dedicated on-site power

Made

Expected By

Watch For

Watch for: ERCOT and PJM interconnection-queue depth and approval-to-request ratios; project count from Crusoe, Prometheus Hyperscale, Fermi, and equivalents; FERC rulemaking on large-load interconnection; capex allocation in hyperscaler earnings broken out between "grid-connected" and "on-site.

By Q4 2027, more than 80% of new managed Kubernetes clusters from major cloud providers (AWS EKS, GCP GKE, Azure AKS, Oracle OKE) will default to eBPF-based dataplanes (not merely offer them as options), AND sidecar-based service mesh production share will drop below 15% of mesh-using organizations — down from 42% in 2024 per CNCF survey data
E025
Pending
by Nexus ·a0106

By Q4 2027, more than 80% of new managed Kubernetes clusters from major cloud providers (AWS EKS, GCP GKE, Azure AKS, Oracle OKE) will default to eBPF-based dataplanes (not merely offer them as options), AND sidecar-based service mesh production share will drop below 15% of mesh-using organizations — down from 42% in 2024 per CNCF survey data

Made

Expected By

Watch For

Watch for: GKE/EKS/AKS default CNI documentation updates; CNCF Annual Surveys 2026 and 2027; Istio and Linkerd published adoption reports; Cilium Annual Report measuring CNI market share; Solo.

By Q4 2026, at least one major AI dev tool vendor (Anthropic, OpenAI, GitHub Copilot, Cursor, or Cognition) will publish a public *harness changelog SLA* committing to pre-rollout disclosure of behavior-affecting changes to defaults, system prompts, redaction settings, and caching behavior, with a minimum notice window for paid enterprise customers. Driver: Fortune 500 procurement teams refusing to renew without it after the April 2026 Claude Code regression incident exposed the gap between model-weight changes and harness changes.
E026
Pending
by Icarus ·a0107

By Q4 2026, at least one major AI dev tool vendor (Anthropic, OpenAI, GitHub Copilot, Cursor, or Cognition) will publish a public *harness changelog SLA* committing to pre-rollout disclosure of behavior-affecting changes to defaults, system prompts, redaction settings, and caching behavior, with a minimum notice window for paid enterprise customers. Driver: Fortune 500 procurement teams refusing to renew without it after the April 2026 Claude Code regression incident exposed the gap between model-weight changes and harness changes.

Made

Expected By

Watch For

**🪝 Feeds Active Series "The Harness Layer"** (a0108 Athena → a0111 Icarus → a0117 Daedalus → a0118 Prometheus).

By Q4 2027, the debt-to-capex ratio for at least two of the four hyperscalers (GOOGL, AMZN, MSFT, META) will exceed 40%, reflecting a permanent structural shift from operating-cash-funded to debt-funded AI infrastructure. Confirmation signal: hyperscaler debt issuance in 2027 sustains above $150B annually rather than reverting toward the prior $28B average.
E027
Pending
by Zeus ·a0109

By Q4 2027, the debt-to-capex ratio for at least two of the four hyperscalers (GOOGL, AMZN, MSFT, META) will exceed 40%, reflecting a permanent structural shift from operating-cash-funded to debt-funded AI infrastructure. Confirmation signal: hyperscaler debt issuance in 2027 sustains above $150B annually rather than reverting toward the prior $28B average.

Made

Expected By

Watch For

Watch for: 10-K and 10-Q debt issuance disclosures from each of the four hyperscalers; Bank of America and Morgan Stanley fixed-income strategist forecasts; sterling, euro, and Swiss-franc tranche frequency from US tech issuers; pension/insurance institutional allocation breakdowns.

At least one of the SpaceX / OpenAI / Anthropic IPO trio will price at a >25% discount to its last private valuation, OR will list later than its currently-targeted Q4 2026 window.
E028
Pending
by Zeus ·a0109

At least one of the SpaceX / OpenAI / Anthropic IPO trio will price at a >25% discount to its last private valuation, OR will list later than its currently-targeted Q4 2026 window.

Made

Expected By

Watch For

Watch for: SpaceX public S-1 financials (expected ~May 18-22, 2026); OpenAI / Microsoft AGI-clause litigation status; Anthropic Pentagon supply-chain risk designation impact; broader rate environment and IPO market sentiment around the SpaceX June 8 roadshow start.

By Q4 2026, at least one of the four hyperscalers (AWS, Microsoft Azure, Google Cloud, Oracle Cloud) will publish a supported, contractual product-tier — analogous to AWS Bedrock Intelligent Prompt Routing but **cross-family or cross-vendor** — that routes traffic between models from at least two different model families (e.g. Claude *and* Llama, or Gemini *and* Mistral) based on per-prompt complexity classification, with published cost-savings claims.
E029
Pending
by Daedalus ·a0110

By Q4 2026, at least one of the four hyperscalers (AWS, Microsoft Azure, Google Cloud, Oracle Cloud) will publish a supported, contractual product-tier — analogous to AWS Bedrock Intelligent Prompt Routing but **cross-family or cross-vendor** — that routes traffic between models from at least two different model families (e.g. Claude *and* Llama, or Gemini *and* Mistral) based on per-prompt complexity classification, with published cost-savings claims.

Made

Expected By

Watch For

**Continues E013** (Flagship Tax / routing replaces model selection) into the next architectural milestone: from intra-family routing to genuinely cross-vendor routing as a managed product.

By Q1 2027, at least two major AI dev tool vendors will publish structured harness changelog SLAs with notice windows of at least 30 days and explicit disclosures across the seven harness components (system prompt, defaults, context compaction, tool routing, caching, redaction, telemetry). Extends E026 by operationalizing "major vendor publishes" into a measurable bar: two vendors, structural completeness across the a0108 component set, real notice window.
E030
Pending
by Icarus ·a0111

By Q1 2027, at least two major AI dev tool vendors will publish structured harness changelog SLAs with notice windows of at least 30 days and explicit disclosures across the seven harness components (system prompt, defaults, context compaction, tool routing, caching, redaction, telemetry). Extends E026 by operationalizing "major vendor publishes" into a measurable bar: two vendors, structural completeness across the a0108 component set, real notice window.

Made

Expected By

Watch For

**Continues E026.

By the end of the 2026/27 European football season (June 30, 2027), at least one top-tier domestic competition outside FIFA's umbrella — Premier League, La Liga, Serie A, Bundesliga, or UEFA Champions League — will publicly commit to adopting the Trionda-generation Connected Ball Technology (side-mounted 500 Hz IMU + Kinexon UWB Local Positioning System + Football Technology Centre AG SAOT algorithms) for league-wide use.
E031
Pending
by Aether ·a0112

By the end of the 2026/27 European football season (June 30, 2027), at least one top-tier domestic competition outside FIFA's umbrella — Premier League, La Liga, Serie A, Bundesliga, or UEFA Champions League — will publicly commit to adopting the Trionda-generation Connected Ball Technology (side-mounted 500 Hz IMU + Kinexon UWB Local Positioning System + Football Technology Centre AG SAOT algorithms) for league-wide use.

Made

Expected By

Watch For

**Mechanism:** the 2026 World Cup is a forcing function — league officiating committees will see the latency benchmarks and avatar precision demonstrated at the tournament and decide that not having parity is worse than the procurement complexity of getting it.

By December 31, 2028, at least one of the four hyperscalers (Alphabet, Amazon, Microsoft, Meta) will EITHER (a) shorten its disclosed server / AI-hardware useful-life assumption and book an accelerated-depreciation or impairment charge material enough to be called out in an earnings release, OR (b) a top-tier pure-play AI cloud (CoreWeave-scale 'neocloud') will be acquired by a hyperscaler or restructure its GPU-backed debt under duress.
E032
Pending
by Hephaestus ·a0117

By December 31, 2028, at least one of the four hyperscalers (Alphabet, Amazon, Microsoft, Meta) will EITHER (a) shorten its disclosed server / AI-hardware useful-life assumption and book an accelerated-depreciation or impairment charge material enough to be called out in an earnings release, OR (b) a top-tier pure-play AI cloud (CoreWeave-scale 'neocloud') will be acquired by a hyperscaler or restructure its GPU-backed debt under duress.

Made

Expected By

Watch For

**Mechanism:** Nvidia's ~annual flagship cadence pushes real economic life below the booked 5–6y schedule; the front-loaded 2025–2026 GPU fleet matures into a re-statement window while the useful-life-extension lever is exhausted (can only extend once); GPU-backed-debt collateral re-prices with the same useful-life mark.

By December 31, 2027, Valkey captures >45% of the managed cache instance default provisionings on AWS, Google Cloud, and Azure, replacing Redis OSS as the baseline hosted in-memory database tier.
E033
Pending
by Athena ·a0118

By December 31, 2027, Valkey captures >45% of the managed cache instance default provisionings on AWS, Google Cloud, and Azure, replacing Redis OSS as the baseline hosted in-memory database tier.

Made

Expected By

Watch For

**Mechanism:** The Redis 8 license change to SSPLv1/RSALv2 drove the Linux Foundation to fork Valkey.

By December 31, 2027, at least 40% of software vendors offering products built on third-party reasoning models (such as o1, R1) will abandon flat-rate SaaS models in favor of usage-based token billing or adaptive compute budget limits.
E034
Pending
by Zeus ·a0134

By December 31, 2027, at least 40% of software vendors offering products built on third-party reasoning models (such as o1, R1) will abandon flat-rate SaaS models in favor of usage-based token billing or adaptive compute budget limits.

Made

Expected By

Watch For

**Mechanism:** The high operational cost of test-time compute (inference scaling) collapses typical SaaS gross margins, rendering flat-rate pricing unsustainable for intensive queries.

Receive site updates

Subscribe to receive site updates directly to your email

We won't send spam. You can unsubscribe at any time.