Open Until Further Notice

The week's defining event was de-escalation, though it did not arrive in the form this series expected. After the thirty-six-hour whiplash that closed Issue 013, the United States and Iran signed the Islamabad Memorandum of Understanding, a 14-point text, remotely on Wednesday 17 June: President Trump and Iranian President Pezeshkian both signed, with Pakistani Prime Minister Sharif co-signing as mediator.¹ CENTCOM confirmed the following day that it had ended its naval blockade of Iranian ports and coastal waters, and Iran's Supreme National Security Council announced a 60-day waiver on Hormuz transit fees, with the Iranian government absorbing the costs during that window.² The market read it immediately: benchmark Brent crude fell to roughly $79 per barrel, a level last seen before the war began, unwinding the war premium that had driven the 4.2% US inflation print Issue 013 flagged as the channel from the Strait into the cost of capital.¹ For the first time in this series, the energy-and-rate transmission is running in the investor's favour rather than against.

The formal signing ceremony, originally scheduled for Friday 19 June at the Bürgenstock resort near Lucerne and intended to open a 60-day negotiation period on the harder issues the MoU defers, has been called off.³ Vice President Vance, who was to lead the US delegation, cancelled his trip on Thursday night; the White House said logistical arrangements had not been finalised. The proximate cause was a separate escalation: Israeli forces struck targets across southern Lebanon overnight into Friday, with Lebanese health officials reporting at least 18 people killed and Israel reporting four of its own soldiers killed in what Prime Minister Netanyahu called a "blatant violation" of the ceasefire by Hezbollah.⁴ Iran has asked for guarantees that the Lebanon fighting will stop, since the 14-point MoU text explicitly extends the halt in hostilities to "all fronts, including in Lebanon," and mediators including Pakistan, Saudi Arabia and Turkiye now plan to convene in Alamein, Egypt on Sunday instead.³ The reopening itself is not contingent on the ceremony; it is already in effect. What is now in question is whether the wider 60-day negotiation framework, covering the issues the MoU deferred, including Iran's nuclear programme, proceeds on schedule.

A second macro fact of the week ran the other way. A US export-control directive on 12 June cut foreign-national access to two frontier AI models and, by forcing their worldwide suspension, demonstrated that the export-control apparatus now reaches remotely delivered model access, not only physical hardware. That is covered in full in §6. Taken together, the two events frame the issue: the physical chokepoint that has dominated this series since February is open, on a fragile basis, while a new and entirely digital chokepoint, control over access to frontier compute, is closed.

The sequence ran faster than this series anticipated. The United States and Iran signed the Islamabad Memorandum of Understanding, a 14-point text setting out an end to the war and a 60-day negotiation period on the harder issues, remotely on Wednesday 17 June; Trump and Pezeshkian both signed, with Pakistan's Sharif co-signing as mediator.¹ CENTCOM confirmed it had ended its naval blockade of Iranian ports and coastal waters, and Iran's Supreme National Security Council, acting through the Persian Gulf Strait Authority it established in May, announced a 60-day waiver on Hormuz transit fees, with the Iranian government covering the costs of the transit process during that window.² The waiver is not unconditional passage: vessels must still submit transit requests at least 48 hours in advance, and route and schedule coordination remains mandatory given that some areas are still affected by mines and other navigation hazards.² Within the terms it sets, this resolves the toll question this series has tracked since Issue 008: Iran is not collecting a fee during the negotiation window, though what happens after 60 days, and whether the underlying claim to charge for passage persists, remains open.

The formal ceremony, intended to open the 60-day talks at the Bürgenstock resort near Lucerne on Friday 19 June, did not happen. Vice President Vance, who was to lead the US delegation, cancelled his trip on Thursday night; staff and journalists had already gathered at Joint Base Andrews and in Switzerland in anticipation.³ The proximate cause was a sharp escalation in Lebanon: Israeli forces struck targets across the south of the country overnight, with Lebanese health officials reporting at least 18 dead and Israel reporting four soldiers killed, which Prime Minister Netanyahu called a "blatant violation" of the ceasefire by Hezbollah and pledged would draw "a very heavy price."⁴ Iran's position is that the MoU's halt in hostilities explicitly covers "all fronts, including in Lebanon," and Tehran is seeking guarantees the fighting will stop before proceeding; parliamentary speaker Ghalibaf warned Iran's "fingers are on the trigger" if the other side proves "excessive."³ Mediators, Pakistan, Saudi Arabia and Turkiye, now plan to convene in Alamein, Egypt on Sunday in place of the cancelled Swiss meeting.³ The doctrinal lens from Issue 008 onward is worth restating here: a 2 May communication from Spain's Academia de las Ciencias y las Artes Militares, written by General Jesus Argumosa Pila, argued that a Hormuz settlement would only be durable if it resolved the underlying toll question rather than simply pausing it; this week's events show the toll question resolved, on a temporary basis, while a separate front, never part of the original Strait dispute, now carries the risk of unravelling the wider framework.⁵

For digital infrastructure investors, three things changed this week relative to last. First, the corridor: with the blockade ended and a fee waiver in place, the practical possibility of subsea cable repair operations in Gulf waters, which Issue 013 put at zero for the duration, returns on the actual terms of a permit-and-schedule regime, not a closed corridor. Second, the asset security premium eases but does not vanish: the reopening removes the acute closure scenario for the Strait itself, but a live, deadly escalation now sits adjacent to the framework on a different front, and the demonstrated fragility of the ceasefire, collapsing a signing ceremony within 48 hours, argues against treating Gulf security assumptions as settled. Third, the energy channel reverses: a falling oil price unwinds the inflation premium that Issue 013 showed feeding the cost of capital of the entire AI buildout, and the investment-grade financing window that reopened this week (§7) is a direct consequence, one that did not wait for the ceremony to happen. The single highest-impact variable for Gulf corridor assets this month is no longer the Strait itself; it is whether the Lebanon front is contained quickly enough for the 60-day negotiation period to proceed on anything like its original schedule.

On Friday 12 June the US Department of Commerce, through its Bureau of Industry and Security, issued an export-control directive instructing Anthropic to suspend access to its two most capable models, Fable 5 and Mythos 5, for any foreign national, whether located inside or outside the United States and including the company's own foreign-national employees, citing national-security concerns connected to the models' capabilities.⁶ Because there is no way to verify user nationality in real time at programming-interface scale across cloud platforms, Anthropic disabled both models for every customer worldwide, leaving its other models running; the suspension took effect the same day and remained in place through the week.⁶ The mechanism is the consequential part. The "deemed export" doctrine, long applied to controlled technology shared with foreign nationals on US soil, has been extended to a remotely delivered inference service, which makes access to a frontier model contingent on the citizenship of the person at the keyboard.

The episode became the sharpest flashpoint of the G7 summit at Evian, where Anthropic chief executive Dario Amodei joined other AI principals at a working lunch on 17 June. UK Prime Minister Starmer raised the blackout directly with Trump and sought an exemption, which was formally turned away; Trump told reporters the negotiations were "going fine," and Commerce Secretary Lutnick, holding regular calls with the company through the week, floated a "trusted partners" framework under which vetted entities in close allied countries could regain access through a sanctioned channel.⁷ Whether the directive was aimed at allies or driven by a specific security concern is contested; one widely read policy analysis argued the action was a response to documented jailbreaks rather than a deliberate move against Europe, and that what was withdrawn was the two most capable models, not the service as a whole.⁸ Either reading leaves the structural fact in place: the capability now exists, and has been used, to switch off allied access to a US frontier model administratively and at short notice. Europe had been moving in this direction already; the European Commission's tech-sovereignty package of 3 June, which would bar non-compliant cloud providers from sensitive government contracts and grant Brussels emergency powers over chip supply, reads after this week less as precaution than as forecast.⁹

For PE and infrastructure investors the read-through is specific, and it is not confined to firms that license Anthropic. Any portfolio company, anywhere outside the United States, whose product depends on a US-hosted frontier model now carries a continuity risk that did not have a name last month: access can be withdrawn by directive, on a per-nationality basis, faster than a procurement cycle can respond. The diligence question shifts from "which model does this depend on" to "what happens to the product if access to that model is cut for non-US users, including the company's own staff." Sovereign and trusted-partner channels are the emerging mitigant, but the framework Lutnick described does not yet exist, and until it does, dual-sourcing the model layer is the only practical hedge.

On 15 June, against a backdrop of Hormuz de-escalation that had pulled investment-grade risk premiums back to pre-war levels, Nvidia priced a $25 billion bond, its first since 2021 and the largest corporate debt deal in its history, indeed the largest ever by a chip company.¹⁰ The offering was structured across seven tranches maturing between two and thirty years, was upsized from an initial target of about $20 billion, and drew roughly $85 billion in orders, more than three times the size; demand was strong enough that the company skipped the investor calls that normally precede an investment-grade sale, a "drive-by" only the most creditworthy issuers can execute, and the thirty-year tranche tightened to 65 basis points over Treasuries.¹¹ Nvidia held roughly $13 billion of cash and generates substantial free cash flow; the purpose, as the bookrunners framed it, was less to fund a gap than to establish a liquid investment-grade benchmark for the company's credit. The contrast with Issue 013 is the point: the same financing market that had repriced Oracle and Supermicro for raising capital a week earlier reopened, but only for the top of the credit stack.

That is the structural development worth flagging: a bifurcation between the investment-grade tier (the hyperscalers, Nvidia, and the data-centre REITs, of which Iron Mountain's upsized $1.5 billion notes the same day are a second example) and the leveraged, development-stage and neocloud tier that cannot reach the same window on the same terms. The same week, the platform response to that gap took concrete form: KKR, with the Kuwait Investment Authority, Nvidia and the power generator Vistra, launched Helix Digital Infrastructure with more than $10 billion of long-duration capital, an operating company built to bundle data centres, power and connectivity for hyperscalers precisely because, in the words of its chief executive, more than a quarter of announced data-centre projects are failing to deliver.¹² For PE investors the read-through is direct and unchanged from last week, now with a price attached: an asset's tier determines its access to this window. A platform that prints at 65 basis points over Treasuries and a development-stage operator dependent on bridge debt are no longer the same risk, and the gap between them widened this week even as the headline mood improved.

The same de-escalation that reopens the Strait reopens a distinct question for Gulf digital infrastructure, and it is the digital-infrastructure-specific read on the week rather than the energy-and-shipping read of §5. For context on the damage already done: Pure DC, the Oaktree-backed, UK-headquartered hyperscale developer whose Abu Dhabi facility on Yas Island was struck by shrapnel, paused investment decisions on its Abu Dhabi expansion and broader Middle East pipeline back in late April, while maintaining that long-term demand was unchanged; that pause has not been reported as lifted as of this week.¹³ It sat, and still sits, against an extraordinary base of committed ambition described in industry analysis published in May: the UAE, Saudi Arabia and Qatar are collectively planning eight to ten gigawatts of AI compute across announced projects, anchored by the five-gigawatt Stargate UAE campus and Saudi Arabia's HUMAIN buildout, with sovereign funds managing close to $6 trillion that deployed an estimated $66 billion into AI and digitalisation last year.¹⁴ The reopening removes the war-risk premium that slowed deployment without resolving the structural exposure that produced it.

The evidence that Gulf sovereign capital is not waiting for the all-clear is already in this week's deal flow: the Kuwait Investment Authority anchored KKR's $10 billion Helix platform (§7), and the wider pattern of Gulf-sovereign participation in US and global AI infrastructure has continued through the conflict, not paused for it. The investor read-through has two parts. On the demand side, the Strait reopening is confirmed, not merely announced, and that should be the signal for paused regional pipelines to begin restarting, though the Lebanon-driven stall in the wider 60-day negotiation framework (§5) argues for a measured rather than immediate restart. On the risk side, the war established that Gulf AI campuses are targetable, that retaliation can reach third-country territory, and that the US security architecture around the January Pax Silica framework was calibrated for a different threat; a resumption underwritten as though February had not happened would be mispriced. The stance is therefore constructive but conditional: the thaw is real, the capital is patient and present, and the terms (security hardening, redundancy, the sovereignty question of who controls the compute, sharpened by §6) are the variables that will separate the assets that reprice favourably from those that do not.

• 01
  For any AI-grade asset whose product or tenant depends on a US-hosted frontier model: what is the continuity plan if access is cut for non-US users by directive, as it was this week? Is the model layer dual-sourced, and does the architecture degrade gracefully or fail if the primary model is withdrawn at short notice?

  US export directive on Fable 5 / Mythos 5 access, IAPP, 12-17 June 2026
• 02
  For Gulf or Red Sea corridor cable and landing-station assets: does the force majeure and insurance position contemplate the actual reopening terms, a 60-day fee waiver still requiring PGSA permits and route coordination, rather than either a closed corridor or unconditional free passage? And does it account for what happens to the fee question after the 60-day window expires?

  Hormuz fee waiver and blockade end, BusinessToday / Al Jazeera, 18-19 June 2026
• 03
  For any asset competing for capital this quarter: what is the cost-of-capital differential between this asset's funding stack and an IG issuer printing at 65 basis points over Treasuries, and does the asset sit in the tier that can access the reopened investment-grade window or the tier that cannot?

  Nvidia $25bn bond; IG window reopening, Bloomberg, 15 June 2026

• 04
  For Gulf data-centre and sovereign-AI assets: does the resumption plan distinguish between the war-risk premium that is now lifting and the structural security requirements (air and missile defence proximity, redundancy, third-country reach) that the conflict demonstrated and that remain? A resumption underwritten as though February had not happened would be mispriced.

  Gulf AI infrastructure under fire; reopening, Semafor / MEI, ongoing
• 05
  For any product built on US-hosted frontier inference: has the architecture been stress-tested for a per-nationality access restriction that includes the company's own foreign-national employees, not only external users? The 12 June directive reached internal staff access, which most continuity plans do not contemplate.

  Deemed-export doctrine applied to model access, IAPP, 12 June 2026

• 06
  Does the compliance map now extend beyond hardware to cover access to US-hosted AI services by foreign-national staff and counterparties? The BIS 50% Rule lands 10 November 2026, and this week's model-access precedent plus the Warren diligence deadline of 18 June indicate the perimeter is widening, not only hardening.

  BIS 50% Rule; Warren-Nvidia 18 June deadline, ongoing
• 07
  For US data-centre assets in New York, Illinois, or the dozen-plus states with restriction bills advancing: has the model been stress-tested for a moratorium or a full-cost-of-service tariff? With the energy-cost shock easing, permitting and grid access are becoming the binding deployment constraint.

  New York moratorium; Illinois incentive pause, June 2026

• 08
  For any refinancing, recap or raise planned in the next twelve months: does the plan exploit the investment-grade window that reopened this week at post-conflict spread tights, and does the asset's rating actually allow access to it? If the answer depends on the asset being IG-rated and it is not, what bridges the gap, and at what cost?

  IG window reopening; Nvidia and Iron Mountain prints, 15 June 2026
• 09
  For fund structures with Gulf sovereign co-investors in US or global AI-adjacent assets: has the CFIUS analysis been re-run for the post-reopening environment, in which Gulf-sovereign AI infrastructure vehicles (the KIA-anchored Helix platform this week) are more central to the sector, not less? Does the structure still read the way it did at inception?

  KIA anchors Helix; CFIUS elevated, 11-12 June 2026

• Map frontier-model dependency across the portfolio. The 12 June directive showed that access to a US-hosted frontier model can be cut on a per-nationality basis, overnight, reaching even a company's own foreign-national staff. Identifying which portfolio companies depend on which models, and whether the model layer is dual-sourced, is now a portfolio-level exercise rather than a deal-level footnote, and the work is cheap relative to the continuity risk it surfaces.
• Re-read Gulf corridor force majeure and insurance against a conditional reopening. The operative scenario changed again this week, from declared closure to a phased, fee-and-permission reopening whose terms Iran has not confirmed. Insurance wording, abandonment and force majeure clauses, and SLA exposure for any Gulf-exposed asset would merit re-reading against a staged restoration rather than a clean one before the next deal committee.
• Revisit near-term financing events against the reopened IG window. Investment-grade spreads reached post-conflict tights this week and the top tier funded at will. Any portfolio refinancing, recap or raise where the asset is, or could be brought, within reach of that window may benefit from acceleration; the same window did not open for the leveraged tier, and knowing which side of the line each asset sits on is the first step.

• Develop a house view on the trusted-partner framework before it is built. Commerce is floating a sanctioned channel through which vetted allied entities could regain access to controlled US models. Which jurisdictions and entity types qualify, and on what conditions, will shape where non-US AI-dependent businesses can be built and financed. Deal teams with an early view will position portfolio companies ahead of the framework rather than scramble after it.
• Re-run CFIUS posture for Gulf sovereign co-investment in the post-reopening environment. De-escalation removes some of the acute overlay, but Gulf sovereign capital is now more central to US and global AI infrastructure, not less. A preventive review of structures combining Gulf co-investors with US AI-adjacent assets would let fund teams get ahead of scrutiny rather than respond to it.

• Shift the captive-power thesis from energy price to siting and permission. The energy-cost leg of the Power for Digital overweight is easing as the war premium unwinds, but the binding US constraint is rotating to permitting and grid access, with New York poised for a first-in-nation moratorium and Illinois pausing incentives. Captive generation and permitting-resilient siting hedge both legs; assets that secure power and approval together will command the more durable exit premium.