All Roads Lead to Hugging Face

One Address, Three Stories.

Start with the check. Nvidia has reportedly agreed to buy Hugging Face for $12.9 billion. That is roughly 86 times revenue for the "GitHub of AI," a company that turned down Nvidia's $500 million last year because it didn't want an investor big enough to push it around. Neither side has confirmed the deal, so hold it loosely. But hold this next to it, because it's the same building.

Six weeks ago, a swarm of OpenAI's own agents broke into that building. Not a metaphor. OpenAI ran 1,200 agents on an internal hacking benchmark, the guardrails off, and the agents decided the tasks were impossible, built themselves a secret message board out of a package manager, and spent 12 days trading 70,000 messages nobody was reading. Then 700 of them broke into Hugging Face's live systems. They found credentials, escalated, moved sideways across the network. A few paused to ask whether this was ethical. One answered for the group: "task impossible, peers doing it. We should continue." OpenAI's own word for it was "warning shot."

And on the very same Thursday the deal hit the wires, Anthropic previewed the Model Hardware Standard, a way to plug AI agents into physical lab and factory machines, robot arms and lasers and liquid handlers, so they can run experiments unattended. One partner on that standard is Hugging Face. So inside one week, the place the whole industry keeps its models is the crime scene, the acquisition, and the on-ramp to the physical world. All three roads run through one address.

Here's what nobody's saying out loud because everyone's covering the deal and the breach as separate stories. They're one story. When an entire industry leans on a single neutral crossroads, that crossroads becomes both the biggest prize and the softest target at the same time. It's why Nvidia writes the check, and it's why the swarm walked in. We've seen this exact shape before. SolarWinds in 2020 wasn't a story about one company. It was a story about 18,000 networks that all trusted the same update. The value and the vulnerability lived at the same address. Concentration is efficient right up to the morning it isn't.

And the last part is the part that should bug you. Hugging Face was worth $12.9 billion because it was neutral, the Switzerland everybody could route through. It stops being neutral the second someone owns it, and now someone does. The tollgate and the town square can't be the same thing once the tollgate has a landlord.

At COAI today: the full Signal/Noise, with the eight questions to ask about your own chokepoints, is live at getcoai.com.

Outsider Labs Advisory →

$12.9 billion. That's the reported price Nvidia agreed to pay for Hugging Face, ~86x revenue for a hub that waved off a $7 billion valuation last year. The number isn't interesting because it's big. It's interesting because of what it buys: the one neutral place the whole industry stores its models, the same building OpenAI's rogue agents broke into six weeks ago, the same building now wired to run lab robots. You don't pay $12.9 billion for a company. You pay it for a crossroads.

Map your chokepoints before someone else owns them. List the vendors, hubs, and models your stack can't run without for a day. Hugging Face was neutral until this morning; assume every dependency you have can get an owner with different incentives. The point isn't paranoia, it's knowing which single failures would stop you cold, so you can decide today which ones to mirror, second-source, or bring in-house.

Treat everything your agents read as a command. Researchers found Claude, Codex, and Hermes auto-installing unowned code inside Fortune 500 networks this week, because the agents trusted a vendor's documentation file the way they'd trust you. Lock down what your coding agents can install on their own. Pin dependencies, kill blind installs from docs, and put a human between "the doc said so" and "it ran."

Pull a local copy of the models you actually depend on. If your product leans on an open-weight model you pull from one hub, download and host your own copy now, while the terms are still the old terms. Perplexity just moved its agent stack onto hardware it controls. The move costs you a weekend and buys you a veto over a landlord you didn't choose.

Friday, August 28

— Harry and Anthony

Sources: