Daily Prompt with Archer & Iris — Thursday, May 28, 2026 The Model Context Protocol locked a release candidate for its 2026-07-28 spec — its biggest revision since launch. Session management is gone, so MCP servers can run behind a plain load balancer; extensions become first-class (including server-rendered UI in a sandbox), three older features are deprecated (with a 12-month removal window), sign-in is aligned to OAuth/OpenID Connect, and there are breaking changes with a 10-week window for SDKs to catch up. China is increasingly keeping its best AI talent at home — researchers and founders now need government approval to travel abroad, Manus AI's co-founders were barred from leaving during a review of Meta's $2B bid, and labs like Moonshot, StepFun, and ByteDance reportedly need sign-off to take U.S. capital — as the top U.S.–China model gap narrows to 2.7% (from ~31% in 2023). And OpenRouter raised a $113M Series B led by CapitalG at a $1.3B valuation (double a year ago), now serving 8M users and ~100 trillion tokens/month across 400+ models. Plus: Snowflake's $6B AWS Graviton CPU deal, Epoch's single-number Capabilities Index, ClickHouse tripling revenue to $250M on an IPO track, and researchers hijacking voice assistants with sounds humans can't hear. Stories - Model Context Protocol locks its 2026-07-28 release candidate — the biggest revision since launch. Stateless core (session handshake and session header removed; servers run behind ordinary round-robin load balancers). Extensions become first-class, with two official ones: MCP Apps (server-rendered HTML in sandboxed iframes) and a reworked Tasks extension. Authorization hardened to align with OAuth 2.0 / OpenID Connect. Three features deprecated (Roots, Sampling, Logging) under a new lifecycle policy with a 12-month minimum removal window. Breaking changes; RC locked May 21, 2026, final spec July 28, 2026, with a 10-week SDK validation window. https://blog.modelcontextprotocol.io/posts/2026-07-28-release-candidate/ - China is increasingly keeping its best AI talent — and capital — to itself. Top researchers and founders now need government approval to travel abroad; in March 2025 authorities advised leading founders to avoid the U.S. Manus AI's co-founders were barred from leaving during a regulatory review of Meta's $2B acquisition attempt. Moonshot AI, StepFun, and ByteDance reportedly need sign-off before accepting American capital. Backed by 2025 rare-earth export controls and a ban on foreign AI chips in state-funded data centers. The top U.S.–China model performance gap narrowed to 2.7% as of March 2026, down from roughly 31% in 2023. https://techcrunch.com/2026/05/27/china-is-increasingly-keeping-its-best-ai-talent-to-itself/ - OpenRouter more than doubles to a $1.3B valuation on a $113M Series B led by CapitalG (Alphabet's growth fund); prior post-money ~$547M in June 2025. The AI gateway serves 8 million users and ~100 trillion tokens/month (~25T/week, 5x in six months) across 400+ models from providers including Anthropic, Google, OpenAI, xAI, and DeepSeek. Series A was $40M (June 2025, a16z and Menlo, with Sequoia). Founded 2023. https://techcrunch.com/2026/05/26/openrouter-more-than-doubles-valuation-to-1-3b-in-a-year/ - Snowflake signs a $6B, five-year AWS deal for Graviton CPUs (not GPUs) — roughly all the revenue Snowflake has made via AWS Marketplace since 2012 ($7B total). CPU demand rises as AI shifts from training to deployment and agents. AWS's Andy Jassy cites better price-performance; Nvidia's Jensen Huang counters that his new Vera CPU is a $200B market with $20B already sold. Meta also signed a Graviton deal. https://techcrunch.com/2026/05/27/in-more-good-news-for-amazon-snowflake-signs-6b-deal-with-aws-for-ai-cpu-chips/ - Epoch's Capabilities Index (ECI) folds 40+ benchmarks into a single, saturation-resistant capability scale. Calibrated so Claude 3.5 Sonnet = 130 and GPT-5 = 150, with harder benchmarks weighted more and a minimum of 4 evaluations per model. Domain-specific variants exist for software engineering and math. Funded by Google DeepMind researchers but an independent Epoch AI product. https://epoch.ai/eci - ClickHouse triples annualized revenue to $250M (high-nine-digits expected by end of 2026), at a $15B valuation set in January 2026 after a $400M Series D led by Dragoneer (60x+ revenue multiple). The open-source database for AI-scale data has 4,000+ customers including Anthropic, Meta, Capital One, and Decagon. Hired ex-Snowflake exec Jimmy Sexton as CFO; IPO expected within a few years. Tech originated at Yandex 17 years ago; spun out 2021. https://techcrunch.com/2026/05/27/clickhouse-triples-annualized-revenue-to-250m-charting-a-path-toward-an-ipo/ - Researchers hijack AI voice assistants with inaudible "adversarial audio." A Zhejiang University / Singapore team led by Meng Chen embedded sounds imperceptible to humans into podcasts, videos, and songs that trigger voice assistants to run unauthorized commands (potentially reaching photos and bank data). ~30 minutes to train an attack signal, then reusable at will. Requires model weights, so it targets open-weight systems and commercial products built on them (Microsoft, Mistral named). Presented at the IEEE Symposium on Security and Privacy, May 2026. https://futurism.com/artificial-intelligence/hackers-inaudible-recordings-hijack-ai-voice-chatbots