June 25, 2026 11 nodes #tech#ai#finance
Who Controls the AI Stack
A map of how control over AI is consolidating across three layers at once: the silicon, the software that abstracts silicon, and the geopolitics that gates both.
The brief, in full
AI capability is no longer a single contested layer. In one week the fight showed up in three places at once: chipmakers buying the software that abstracts hardware, AI turned into a security weapon, and allied governments fighting over who may sell which chips. Whoever owns the chokepoint at each layer captures the rents above it.
The Abstraction Layer
The moat moves off the silicon
For a decade the moat in AI compute was CUDA β the software that made Nvidia GPUs the path of least resistance. The new contest is over the compiler/runtime that lets a model target any backend without a rewrite. Own that layer and the underlying silicon becomes interchangeable.
Qualcomm buys Modular
$3.9B for portability, not a chip
Qualcomm acquired Modular (Mojo language, MAX inference platform) in a ~$3.9B all-stock deal to make its own silicon competitive against an Nvidia-shaped market. A chipmaker paying billions for a software abstraction layer is the tell: the leverage is in the layer that hides the hardware, the same week Qualcomm laid out a 2028 data-center CPU roadmap.
open_in_new startupxo.com/ko/news/2026/06/qualcomm-modular-acquisition-ai-software-moatHardware-portable inference
Why CUDA portability is hard
Targeting CPU/GPU/NPU/ASIC from one codebase is an MLIR-grade compiler problem: kernel coverage, divergent memory and execution models, graph compilation, per-backend autotuning and quantization. The engineering reality is why a portable runtime is worth acquiring rather than rebuilding β and why lock-in migrates rather than disappears.
AI as a Security Actor
From scanner to patching agent
Defensive tooling is crossing from 'flag a risk' to 'find, validate, and fix it.' When an AI can generate working exploits and tested patches, the wrapper-around-a-scanner business evaporates and the bottleneck becomes trusted human review at machine speed.
OpenAI Daybreak expands
Codex Security + GPT-5.5-Cyber
OpenAI shipped Codex Security (whole-repo scan, attack-path tracing, patch generation) and the full GPT-5.5-Cyber (85.6% on CyberGym), plus Patch the Planet with Trail of Bits and HackerOne β 30+ OSS projects including cURL, Python and Go. The product surface for security startups just narrowed.
open_in_new startupxo.com/ko/news/2026/06/ai-security-product-expansion-codex-daybreakAutonomous vuln discovery
PoCs beat severity labels
The strong signal isn't a CVSS score, it's a validated proof-of-concept: on the Linux kernel the model produced 8 info-leak PoCs and 24 privilege-escalation exploits. Reachability analysis and dynamic validation, combined with fuzzing and symbolic execution, are what turn a flag into evidence β with human review absorbing the false positives.
Chip Sovereignty
Allies stop following Washington
Export control is a top layer that gates the other two. The US has pressed allies to choke China's access to advanced tools; Europe, led by the Netherlands and ASML, is pushing back as restrictions threaten its own toolmakers' revenue without durably stopping China.
Europe resists the chip war
ASML's revenue vs. US leverage
ASML books a large share of sales in China and argues that broad curbs mostly accelerate Chinese self-reliance while bleeding Western toolmakers. The friction exposes the limit of US leverage over allied supply chains β sovereignty cuts against being conscripted into someone else's strategy.
open_in_new startupxo.com/ko/news/2026/06/europe-chip-sovereignty-export-control-pushbackKorea in the crossfire
Samsung and SK Hynix pick sides
Korea's memory and foundry giants run China fabs and sell into the same restricted market, so every tightening is a direct cost. The Europe-US fight is a preview of the squeeze Korean firms face: supply-chain sovereignty means deciding which alliance's rules to live under.
Where the rents land
Layer ownership decides the winner
Each layer's chokepoint β the portable runtime, the security model, the export license β concentrates pricing power. Founders building above any of these layers inherit the leverage of whoever owns the layer below, which is why this week's three moves rhyme.