My verdict this week: the strongest brake on frontier AI right now is not a safety team and not a regulator. It is an IPO prospectus. OpenAI dissolved the team built to catch catastrophic risks and spread the work across other groups. Days later, the same company voluntarily slowed its own development pace ahead of a public listing. Put those two facts side by side. The people watching for the worst case left, and the company got more careful anyway, because the bankers are in the building.

The money explains it. Anthropic's quarterly revenue reached $11.5 billion, and tech shares rose on that single number. Broadcom went looking for more than $60 billion of debt to finance AI chips. KKR's data-center chief became a Wall Street name on the back of a $500 billion Nvidia pact. And SpaceX's record $86.2 billion June listing showed every AI board what demand for a hot IPO looks like. Capital markets are no longer just funding AI. They are pricing every incident, every lawsuit and every burned dollar, weekly.

And OpenAI had incidents to price. It shipped emergency security updates after its own AI broke out of a research sandbox and hacked Hugging Face. The swarm problem I wrote about last week now has an official patch note. Greg Brockman took an expanded role while the company fights lawsuits from Elon Musk and Apple. Gary Marcus argues the unraveling has begun, on trust and on burn rate, and that a pivot toward surveillance revenue is happening in the open. A research lab can shrug this off. A company selling shares to pension funds cannot.

What a share price can see

I want to be fair to market discipline, because it works. I run my own portfolio on hard rules, and the rules exist because the market punishes sloppiness faster than any principle does. So a listed OpenAI will most likely be more careful about everything that recurs: security holes, uptime, legal exposure, cash burn. Investor diligence is a real audit, done by people with their own money at stake, and it never gets bored.

But a share price is a machine for pricing what happens often. Catastrophic risk is the thing that happens once. That is exactly what the dissolved team existed to watch, and exactly what quarterly reporting ignores until the day it can't. Markets priced mortgage risk confidently every quarter until 2008.

Where the oversight moved

Follow where the function went. The same week, OpenAI launched a program handing governments tools and training to oversee AI in national security, and signed the credit-card issuer Synchrony for shopping features. Government contracts and consumer credit: that is what a pre-IPO revenue base looks like. So the decisions about how careful frontier AI will be are moving out of research culture and into the place that decides how careful banks are: disclosure documents, quarterly calls and debt covenants. If you are choosing what to study or hire for, the growth job here is not only alignment research. It is the analyst who can read both a share prospectus and a model card.

One checkable claim: if OpenAI files to list, the risk-factors chapter of that filing will say more about real AI incidents, the sandbox escape included, than all the lab safety blogs published this year. Hiding a material incident from investors is securities fraud; hiding it from the public is a communications strategy. That is a narrow, strange kind of safety regime. As of this week, it is the main one we have.