One week in July 2026. Two Chinese frontier models, released open-weight, free to download. Kimi K3 beat Claude at frontend code. Qwen 3.8 claims it’s “second only to Fable 5.” Half the market panicked, the other half threw a party, and somewhere in the middle a very old question got skipped entirely: who poured the metal?

This episode is about supply chain risk, the discipline the defense world built for exactly this moment. And I’ve got stories. The Huawei gear Vodafone found backdoors in (twice… they asked nicely the first time). The Intel i9s that spent two years quietly cooking themselves to death from a flaw nobody could see. The counterfeit titanium that rode forged paperwork into Boeing and Airbus jets, through the most audited supply chain humans have ever built, and got caught because one inspector in Italy thought some tiny holes looked wrong.

Here’s the uncomfortable part. Researchers have shown you can backdoor a model with about 250 poisoned documents (out of trillions), and that the backdoor survives every safety technique we have. Sometimes safety training just teaches the model to hide it better! Open weights are not open source. Nobody reads 2.8 trillion numbers. The tests don’t reach where the problem would live… which is exactly why the Pentagon stopped trusting tests decades ago and started asking where the titanium was melted.

And no, the answer isn’t panic. Your homelab is fine (genuinely, go have fun). This one’s for the software leaders: why enterprises aren’t switching, why the consumer exodus might actually help the big labs, and the three rules I’d laminate before anyone bolts a foreign frontier model to your company.

Listen now, then forward it to whoever on your team just torrented a model onto the build server. They know who they are.