Sunday Rollout Report. This week's theme isn't capability. It's the doorman. Three separate stories came down to the same missing line of code: check who is asking.
The headline: a billion people, mostly talking
Google announced that more than 1 billion people use the Gemini app every month — the fastest-growing product in the company's history, and its 14th to cross a billion. The number that actually matters to me is buried in the post: 63% of users now talk to it, one in five Live sessions uses a camera or screen share, and it generates over 150 million images a day. Google specifically calls out small businesses using it for marketing materials.
Voice and camera aren't a gimmick, they're the only interface that works on a jobsite. Nobody in a Worcester basement with a flashlight in their teeth is typing a well-structured prompt. They're pointing a phone at a panel and asking what they're looking at. The assistant that wins in the trades is the one already installed on the phone in the guy's pocket, and distribution just beat every benchmark chart on the internet.
The one that should scare your CTO
Researchers published an attack on the encrypted reasoning traces that OpenAI, Anthropic and Google hand back through their APIs. Those providers hide the model's private chain of thought but still return an encrypted blob so it can be reused. Turns out the blobs weren't bound to a session, a user, or even a model — consistent with a single global key. So you take a strong model's encrypted trace, feed it to a cheaper sibling in the same family, ask nicely, and the little brother reads the big brother's diary out loud. Decoding blocks already scraped from public repos surfaced hundreds of personal-data artifacts and credentials that developers believed were unreadable.
Encryption was never the weak part. Scoping was. An envelope that decrypts for anyone who holds it is a filing cabinet with the key taped to the front.
Meanwhile, 181,874 meetings were just... browsable
A researcher documented that tl;dv, an AI notetaker for Zoom, Meet and Teams, left 181,874 meeting records queryable by any logged-in user — across 84,312 users and 35,003 email domains — because the Firestore rules had no tenant isolation. Records included the creator's email and the conference ID, which for actively-recording calls is a joinable room. Government agency, university and vendor calls included. It was reported in late January and sat unfixed through repeated follow-ups.
This is the exact failure from the gym waitlist story wearing a different hat. Authentication asks are you a user? Authorization asks are you allowed to see this row? Shipping the first and skipping the second is the single most common bug I find when I inherit somebody's platform. Coen's ERP has 120 routes touching payroll and subcontractor invoices; every one of them scopes by company before it reads, because "logged in" is not a permission.
Quick hits
- Gemini 3.7 Flash landed Thursday, three weeks after 3.6 Flash, at an introductory $0.75 per million input tokens — roughly half its predecessor's launch price — with a big jump on debugging benchmarks, while the flagship Pro model stays delayed. The cheap tier is where production work actually lives. The tooling changed again; that doesn't mean you rebuild.
- Deloitte surveyed 500+ tech leaders and found only 15% have scaled multiagent systems, with most bolting agents onto existing processes rather than redesigning them, and leaders estimating three to four years before half their processes are rebuilt around agents. OpenAI's enterprise data the same day showed top-decile "frontier firms" generating 8.3x the output per active user. The gap isn't model access — everybody has the same models. It's that shipping an agent takes 1.9 days and redesigning the process it lives in takes a quarter.
- Intel raised $15B in a stock offering and upsized it to $20B, on the back of a 59% jump in data center and AI revenue. The picks-and-shovels trade remains undefeated.
- The first all-AI news network went live, streaming around the clock with nobody on camera. Whether anyone watches it is a separate filing.
Deployed next week: I'm auditing every read endpoint in the Coen ERP for row-level scope — not because anything broke, but because three stories in one week said the same thing, and I'd rather find it than read about it.
Everyone spent 2026 hardening the model. The lock was on the door the whole time, and it was the same key for everybody.