This Month's Signals: June 2026

This is the first edition. It is the start of the record.

Every month, SignalLock looks for the real signals under the noise. A signal is a gap in the AI industrial revolution that many people see but no one has solved. SignalLock writes down each gap and locks it with a date, then collects evidence on two sides. Gap confirmations show the problem is real and still open. Who's-solving-it evidence shows someone is working on a fix.

Strength is the balance between the two sides. The more a gap is confirmed, and the less it is being solved, the stronger the signal. SignalLock does not score gaps by hand and does not predict the future. A gap that no one has answered yet is the most interesting one of all.

Each signal also has an opportunity window: opening, open, closing, then closed. At its best, a gap is one that many people agree is real while almost no one is building the fix. Once the fixes ship, the window closes. So the rule is simple. Act while it is still open.

This Month's Signals

Ten signals are locked this month, ranked by strength.

Signal	The gap	Strength	Window
Sovereignty by design	No way to prove where data lived and AI ran	1.0	opening
The dissolving interface	Agents build the screen; intent and permissions go uncaptured	1.0	open
The maintenance load	Cheap to build, expensive to keep alive	0.9	open
Agent accountability	Agents act alone and no one authorized the spend	0.8	open
Code provenance	No trusted record of where code came from	0.7	open
Cost discipline	Token spend isn't linked to results	0.7	open
Patch tempo	A bug is exploited the day it is disclosed	0.6	closing
The power ceiling	Compute runs out of electricity before chips	0.5	open
Interop & portability	Switching models still means a rewrite	0.5	closing
Answer trust	Higher test scores, more made-up answers	0.3	closing

What's still Missing

These are the gaps almost no one is solving yet. They are the openings.

Sovereignty by design (window opening)

Countries are starting to treat data, models, and even biology as national assets. But builders have no clear way to prove where their data lived, or where their AI actually ran. China now treats data as a national resource and is building a data economy around it. Brazil calls its new one-shot Dengue vaccine a matter of medical sovereignty, and links it to data and AI sovereignty. No one is selling a fix yet. That silence is the finding.

The dissolving interface (window open)

The fixed screen is breaking apart. More and more, an agent builds the interface for each task on the spot. But nothing yet separates what should stay, like your data and permissions, from what can be thrown away after one use. Cursor 3 already hides the code editor behind an agent. Ethan Mollick shows that models can build a one-off interface on the fly. OpenAI and Qualcomm are said to be building a phone with no apps, where the agent is the interface. Google's Omni takes any input and returns any output. The hard question is still open: how do you capture intent and permissions once the screen is gone?

The maintenance load (window open)

AI made software cheap to build and expensive to keep alive. And the old base layer of the web is aging out, with no one trained to replace it. The signs are everywhere. Agent code piles up hidden debt in the parts around it. New app submissions jumped 84%, while Apple started pulling vibe-coded apps from the store. PHP veterans are retiring, and juniors never learn the old stacks. IPv6 is still stuck. BGP is still unsafe at many providers. On the answer side, there is really one move: Cloudflare's EmDash rebuilds WordPress from scratch instead of maintaining the old one.

Agent accountability (window open)

Agents now run real operations on their own. So the hard question is no longer "can it act?" It is "who allowed it, and who answers when it goes wrong?" A Cloudflare and Stripe agent can open an account, register a domain, start a subscription, and deploy an app. A human only grants permission once. Stripe and Tempo shipped a machine payment protocol, and iWallet is drafting another. Both take the human out of the loop. The one real answer so far is NVIDIA's OpenShell. It puts each agent in a sandbox and keeps its keys behind an outside gateway.

Code provenance (window open)

AI now writes and touches far more code than anyone can read. And there is no trusted record of where that code, or its parts, came from. TeamPCP poisoned about 4,000 GitHub repositories through one bad VS Code extension. Claude Code has leaked credentials into public repos and package registries. The answers are early. GitHub's dependency scanning is in public preview. The MCP standard is being hardened with OAuth and OpenID-style sign-in.

Cost discipline (window open)

Agents and reasoning models burn through tokens fast. The industry is starting to treat tokens like money, not free fuel. The radar calls the end of tokenmaxxing. GitHub Copilot now bills by usage. OpenRouter's studies show price per token and chat length moving in opposite directions across vendors. What is still missing is a way to link token spend to business results. Lanai's TokenTuner is the first real try. It scores teams on how well their spend maps to outcomes.

The power ceiling (window open)

Compute now runs out of electricity before it runs out of chips. Capacity is contracted in gigawatts: Anthropic agreed to buy 3.5 gigawatts of compute from Google and Broadcom, a deal sized in power rather than chips. The inference era raises the load, since serving models now drives more cost than training them. The answers are partial. Google shipped a TPU built for inference. Together AI runs an inference cloud serving more than 200 open models. Both make each watt do more work, but neither lifts the ceiling itself.

The signals being solved

These gaps are real too. But the answers are arriving, and the window is closing on each one.

Patch tempo (window closing)

Copy.fail was exploited within a day of its release. Claude Mythos found 271 unknown bugs in Firefox. Both Anthropic and OpenAI now limit their strongest cyber models. And the Firefox team says that once you know the bugs, defenders can catch up.

Interop & portability (window closing)

DeepClaude drops one company's model into another's agent loop just to save money. Open models now match the best ones on rented hardware. A three-layer agent stack and an OAuth-ready MCP are settling into shared standards.

Answer trust (window closing)

GPT-5.5 scores higher on tests but makes up more answers. Still, the check layer is filling in fast. Microsoft pairs models to review each other. Moonshot ships a vendor verifier. GPT-Rosalind is tuned to push back, not please. And Opus 4.8 says it will tell you when it is not sure.

Windows do not stay open. The gap no one is solving today is the best opening on the board. The first real answer starts to close it. Subscribe below to get next month's signals in your inbox, so you see the next opening before it closes.