The Harness

Stripe buys AI's billing layer

Show Notes

Stripe finalized a $7 billion-plus acquisition of AI model router OpenRouter, buying the metering layer that sits between developers and every model provider rather than betting on any single model. Anthropic's Dario Amodei broke from blaming messaging for AI's backlash and called it a crisis of trust, the same week a new investigation found the AI-credit black market has grown a full brokerage layer that undermines identity-based access controls. Also: RedNote, the company behind China's Xiaohongshu app, open-sourced a 280B frontier-grade agent model, and an independent test found Alibaba's newest open model burns 21 minutes reasoning about tasks that need seconds.

What is The Harness ?

A daily summary of what is interesting and happening in the AI industry, with a focus on what this means for people building harness experiences that are used.

Good morning, it's Monday, August seventeenth.

In today's briefing we see Stripe buying its way into AI's billing layer with a deal worth more than seven billion dollars for OpenRouter, Anthropic's chief executive naming a trust crisis across the whole industry, and a Chinese social media company open sourcing a frontier grade agent model for free.

First up - Today in the big model news;

Anthropic
Anthropic chief executive Dario Amodei published a lengthy statement rejecting investor Gavin Baker's claim that Amodei's own AI risk warnings are fueling public backlash against data centers. Amodei argued instead that ordinary people don't trust companies, governments, or the tech industry, independent of anything Anthropic has said, and that only delivered benefits, not different messaging, will fix it. The statement landed alongside a separate piece asking why the public isn't buying Mark Zuckerberg's AI vision, and one day after Anthropic's own watermark explainer drew subscription cancellation threats for a mechanism Google had normalized without backlash the day before. Two of the industry's most prominent leaders are now naming a trust deficit directly instead of treating it as a messaging failure, which reframes recent friction, like Twitch's opt out training default and the watermark backlash, as symptoms of one problem rather than isolated incidents. Neither company has said whether it will change anything structural, like reversing a default, rather than just naming the problem.

Alibaba
An independent test from Simon Willison found that Alibaba's Qwen 3.8 27B burns over twenty-two thousand reasoning tokens and twenty-one minutes on a single straightforward task, defaulting to its highest reasoning effort setting even when told not to reason at length. Willison ran the model himself locally, so the finding is first party and reproducible, not a secondhand report. None of Qwen 3.8 27B's benchmark gains over its predecessor capture this, because those benchmarks score task success, not token efficiency or default setting sanity: a model can top a leaderboard and still be unusable out of the box without a manual fix. Willison's own workaround, setting reasoning effort to low, is itself evidence the underlying capability is real even though the shipped defaults oversell it. That echoes a recent finding that Opus five feels worse to work with than its benchmark scores suggest: benchmark suites and lived developer experience keep diverging without either side being wrong, and default configuration, not raw capability, decides which one a user actually encounters.

In local model developments, RedNote, the company behind China's Xiaohongshu app and better known as a lifestyle and shopping platform than an AI lab, open sourced dots three note preview, a two hundred eighty billion parameter mixture of experts model with sixteen billion active parameters, a five hundred twelve thousand token context window, and multimodal support across text, vision, and audio. It's built for agents that operate over hours rather than single turns, using a reinforcement learning method called TEMPO that lets the agent periodically stop, critique its own progress, update what it remembers, and adjust its plan mid task, instead of running one long uninterrupted reasoning chain. That's a direct answer to the failure mode where long horizon agents drift off task the longer a session runs. The checkpoint scored a perfect forty two out of forty two at this year's International Mathematical Olympiad, and unlike most labs' Olympiad claims, that exact checkpoint is sitting on Hugging Face for anyone to run, not a held back internal variant. A social platform with no prior model release history shipping frontier grade open weights extends a pattern: the companies giving capability away are consistently the ones that don't monetize inference directly. RedNote's business is ad supported content, not API revenue, so a free model costs it nothing while adding one more capable option nobody has to rent.

In AI Infra; this is the second infrastructure layer consolidation by a company outside the model business, after SpaceX folded Cursor into its own compute stack: Stripe has now finalized a deal worth more than seven billion dollars for OpenRouter, the gateway that routes developer API calls across more than four hundred AI models and meters spend across all of them in one place. The price fell from an initial ask of roughly ten billion dollars, even though OpenRouter's own valuation had reached one point three billion dollars only months earlier. Stripe's business is settling transaction volume, not judging model quality, so this extends the same neutral chokepoint logic it already runs across card networks into AI spend: it profits from developers switching models rather than betting on which one wins. The asset here is the metering point that every model vendor's revenue already passes through. OpenAI, Anthropic, and Google's direct developer billing relationships now compete with a router sitting inside the payments rail those same developers already use for everything else. None of the major labs have said whether they'll build a rival multi model billing surface, or cede the layer entirely.

In other news, a new investigation from Vectoral maps a broker layer that has grown up around the AI credit relay economy it first documented: brokers now advertise up to one hundred thousand dollars a day in resellable spend, and operate dedicated marketplaces, bulk discount routing services, and channels on Telegram and Reddit, selling access to closed frontier models at thirty to eighty percent below list price. It's the same enforcement gap the original piece surfaced, bulk registered accounts and stolen payment methods turning identity into a bulk commodity, except now there's a visible commercial layer of intermediaries organizing supply rather than a single covert actor. That undermines identity based gating as a workable enforcement tool for closed model access, at the same time more jurisdictions are leaning on that same mechanism to control who reaches frontier capability. No lab has said whether it will respond with anomaly detection aimed at bulk resale specifically, or treat this as an acceptable cost of open API access.

That's the briefing. Have a great day, and don't forget to subscribe.