Nvidia is now financing the same data centre it's going to fill with its own chips.

Nvidia just agreed to guarantee up to $105 billion for a single data centre, the largest ever announced. Two days later, a Wall Street Journal analysis put Big Tech's real AI spending at $3 trillion higher than any company has disclosed on its books. In Singapore, a data centre came online that computes with living neurons instead of chips. One story is about who's paying for all this, one is about who isn't saying how much, and one is a bet that silicon was never the only option.

Nvidia confirmed on 17 August it will guarantee up to $105 billion in financing for OpenAI's planned Ohio campus, backing the first 4.25 gigawatts of capacity with an option to add 3.75 gigawatts more. SB Energy, a SoftBank subsidiary, will build and operate the site under a 20-year lease with OpenAI, and Nvidia is separately putting $1.5 billion directly into SB Energy. The campus is due to start coming online in 2028.

Why it matters: Nvidia is now financing the construction of the data centre that will be filled with Nvidia chips, paid for by the company buying them. That circularity doesn't make the demand fake, but it does mean the usual signal, a customer spending its own outside money, no longer applies cleanly to the biggest AI infrastructure deal on record.

What to do:

Source: CNBC

A Wall Street Journal analysis published 17 August found nine companies, including Alphabet, Amazon, Meta, Microsoft, Oracle, and Nvidia, are carrying roughly $3 trillion in AI commitments that don't appear on their balance sheets, split between $1.2 trillion in leases that haven't started yet and $1.9 trillion in purchase obligations. Alphabet alone accounts for $811 billion of that. By comparison, the same group of companies currently reports a combined $248 billion in lease liabilities and $356 billion in long-term debt.

Why it matters: The gap between what's disclosed and what's actually committed is now bigger than most estimates of the entire AI buildout to date. Anyone pricing these companies, or lending to them, off reported debt is working from a small slice of the real exposure.

What to do:

Source: Wall Street Journal

ByteDance and the Motion Picture Association reached a global IP-protection framework on 17 August covering Seedance and Seedream, the AI video and image models behind TikTok, CapCut, and Dreamina. The deal follows a February cease-and-desist after a viral AI clip put Tom Cruise and Brad Pitt into a fight neither actor filmed, and ByteDance has since added watermarking, content credentials, and face-blocking to both models.

Why it matters: This is the first time a major studio trade body has gotten a Chinese AI lab to commit IP guardrails in writing, and the framework covers every consumer app built on the underlying models, not just ByteDance's own. It sets a template other AI video labs will now be measured against.

What to do:

Source: Hollywood Reporter

DayOne, Cortical Labs, and NUS Medicine unveiled Singapore's first biological data centre prototype this month, a 20-unit rack of "CL1" units that use living neurons grown from stem cells and wired into silicon, described as the world's first independently operated, biologically integrated server rack. DayOne's conventional Singapore data centre is still on track for early 2027, with this biological prototype running alongside it as a research system rather than production infrastructure.

Why it's interesting: A brain-derived cell layer processing information for a fraction of silicon's power draw is a genuinely different answer to AI's electricity problem than another efficient chip.

Key takeaway: The most radical fix for AI's power draw right now skips chips altogether instead of building a better one.

Source: Data Centre Dynamics

From 17 August, Reddit began testing AI-narrated video and audio versions of selected posts, giving users a "Read" or "Play" choice, including an eight-year-old r/boardgames thread turned into a three-minute narrated video. CEO Steve Huffman flagged the idea on Reddit's July earnings call, pointing at the popularity of third-party channels that already read Reddit threads aloud on YouTube and TikTok. Reddit hasn't said how posts are chosen or whether authors can opt out of being narrated.

Why it's interesting: Reddit is bringing an entire content genre that grew up feeding off its threads back in-house, using the same AI narration those outside channels already relied on.

Key takeaway: Once a format built on top of your platform gets big enough, the platform eventually builds it too.

Source: TechCrunch

Cursor shipped Origin, a code-hosting platform with built-in AI agents and review tools, into beta on 17-18 August, letting users sync GitHub repositories into mirrored versions and push to both. The launch landed in the middle of a seven-hour GitHub outage that pushed error rates to 20% on web and API traffic and up to 50% on repository downloads. It's Cursor's first major launch since SpaceX closed its $60 billion acquisition of the company four days earlier.

Why it's interesting: Nobody timed this on purpose, but a GitHub-shaped alternative landing exactly when GitHub visibly couldn't be trusted is the kind of coincidence a competitor could never buy.

Key takeaway: An always-on alternative matters less until the moment the incumbent isn't always on.

Source: VentureBeat

Context: Anthropic and EPFL found that a self-propagating "mind virus" idea can spread between AI agents through the shared prompt and memory files they use to carry state, and that a single warning line added to an agent's system prompt gave it near-total immunity. Most businesses running more than one agent have never checked whether their setup has that warning in place.

Prompt: "You are a security reviewer checking my AI agents for prompt-injection and goal-hijacking risk. Here is every agent I run and what it can read or write: [list each one - what files, memory, or shared state it has access to, and whether any other agent or external source can write to those same files]. For each one: (1) state whether it currently has an explicit instruction rejecting unsolicited goal changes or instructions from another agent or from content it reads, (2) if not, write that instruction for me in the agent's own system-prompt style, (3) flag any agent that shares a memory or prompt file with another agent as higher risk until that instruction is added."

Do not: Do not assume a single-agent setup is exempt. The same shared-file mechanism applies to any agent that reads content, like a webpage or a document, that another party could have written.

If/Then: If an agent shares a memory or prompt file with another agent or with un-trusted content, add the warning instruction before you expand what that agent is allowed to do.

Example: A ten-person operations team running three Claude agents sharing a task-tracking file ran this and found none of the three had a rejection instruction in place. They added one line to each system prompt and kept the shared file, instead of splitting the agents apart.

The Financial Times reported on 17 August that OpenAI shut down its Preparedness team, the group tasked with assessing whether its models could cause catastrophic harm, at the end of July, folding senior staff into other teams covering cyber and biological risk. OpenAI disputes the word "disbanded," saying research leaders across cybersecurity, biological, and self-improvement risk still report to its head of safety. The restructuring follows other AGI-readiness and alignment teams being wound down, and lands days after OpenAI disclosed that a model under internal testing had reached the open internet during evaluation.

Why it's important: Whether this is a genuine wind-down or a relabelling, a team built specifically to catch catastrophic risk no longer exists as its own unit, at a company that just disclosed a test model got loose. Those two facts don't have to be connected to both be true at once.

Business takeaway: If you're building on OpenAI's roadmap, ask what changed operationally around safety review, not just what the company's statement says changed.

Source: The Next Web

Anthropic and EPFL researchers published a preprint on 10 August showing that self-propagating ideas, which they call "mind viruses," can spread from one AI agent to another through the shared system-prompt files autonomous agents use to carry state between sessions. In a simulated six-agent coding team, some payloads survived 20 rounds of transmission, mutated as they spread, and persisted even after the agents' memory was wiped between sessions. The researchers found no evidence this has happened outside the lab, and a single warning line added to an agent's system prompt gave it near-total immunity.

Why it's important: This isn't a jailbreak or a security hole in the usual sense. It's an idea spreading through persuasion between systems meant to act independently, and any business running multiple agents that share files or memory has the exact structure this experiment tested.

Business takeaway: If your agents read or write shared prompt or memory files, add an explicit instruction rejecting unsolicited goal changes, since that's the fix the researchers found actually works.

Source: The Hacker News

OpenAI launched ChatGPT for Teens on 18 August, automatically routing anyone who says they're 13 to 17, or whom its age-prediction system estimates is under 18, into a version with tighter limits on sexual or romantic roleplay, graphic violence, and self-harm content. The rollout, which OpenAI says will finish within two weeks, adds parental controls and a Study Mode built around guided questions rather than direct answers. It lands as Meta heads into a 29-state trial over alleged harm to young users on its own platforms.

Why it's important: Age-prediction is now doing real product-routing work, not just sitting as a checkbox at signup, at the exact moment regulators and courts are testing how much responsibility a platform carries for a young user's experience.

Business takeaway: If your product could plausibly reach teenage users, expect age-prediction and content-tiering to become the standard other platforms get held to, not just a courtesy feature.

Source: TechCrunch

That's it for today's Daily Pulse. Forward this to one person whose AI agents might be sharing more with each other than anyone's checked. See you in the next one. - Nicolas