The most interesting thing today is not which model has hit the list again, but that several signals put together to tell a story about the AI industry's "end of the first half and start of the second half."
Let's talk about Microsoft's financial report first. Cloud business exceeded expectations, but quietly cut capital expenditures in fiscal year 2027 from 190 billion to 175 billion, which rose by 8% after hours. The meaning of Wall Street's voting with your feet is clear: you people have been burning cards long enough, it's time for us to see the payoff. On the same day, Hynix's profit rose by 557%, but its stock price fell instead, and the storage sector collapsed collectively. This is not a contradiction, this is the market saying that "growth has peaked." Coupled with the fact that optical communications and storage leaders such as Micron and Coherent have fallen together, the entire AI infrastructure chain is sending the same signal: the arms race that has been running for two years has begun to slow down. It's not that I stopped throwing, it's that the pace of throwing is changing.
Then you look at the application layer. Tencent's WorkBuddy achieved 12 million DAUs in three to four months, and Ali launched Qianwen Office hard overnight. What does it mean that two major manufacturers are fighting each other on the track of office agents? This shows that the dividends of infrastructure are shifting to the application layer. It's not that there are not enough cards, but that "cards alone are not enough." Whoever can truly put AI into the daily workflow of migrant workers will get the next ticket. But to be honest, these office intelligences are still doing the icing on the cake of "helping you organize meeting minutes" and "helping you write weekly reports." They are still far from truly changing the productivity structure. 20 million months of work sounds scary, but the Retention rate and paid conversion are the real questions.
Another thing worth talking about is security. Claude's shared chats are included by Google, and users 'sensitive conversations and Artifacts are directly exposed in search results. This is either a profound technical loophole, or the difference between "sharing" and "disclosure" was not clearly thought through when designing the product. ChatGPT has made the same mistake before. You are a company that claims to be a "security super intelligence" company, but you can't even understand the most basic link rights management. Ilya took $5 billion from Lao Huang. Should you divide the budget to the product security team?
At the same time, more than 1100 employees of AI companies jointly petitioned the government to control the pace of AI development. This is quite ironic. Anthropic's CEO took the lead in signing, but his own product is revealing user privacy. The matter of security has never been solved by petition letters, but by specific authority control, data isolation, and index blocking in engineering practice.
Meituan's batch of stolen swipes in the early morning is also worthy of vigilance. Secret-free payments and off-site write-offs make the attack link too slippery. While platforms pursue conversion rates and convenience, security design is always the final hole to fill. This problem will only become more serious in the AI era, because AI agents naturally need to proxy users to perform operations. Once the authority boundary is improperly designed, stealing group purchase coupons is the smallest loss.
My judgment is that starting from the second half of 2026, what is really valuable is not the models that can write poetry, but the people who can handle security, permissions, and data flow cleanly in engineering. The scuffle at the application level has just begun, but the one that survives will not be the one with the most functions, but the one with the most reassurance.