Anthropic Hands METR the Keys — And Why a $2T Listing Needs Them insight cover
Private CompanyAMZN · GOOGL · MSFT•13 min read

Anthropic Hands METR the Keys — And Why a $2T Listing Needs Them

Six METR researchers are now sitting inside Anthropic on company laptops with access roughly on par with Anthropic's own risk-assessment teams, and Anthropic cannot veto what METR publishes. Three days after a Singapore government safety MOU and four days after a separate self-replication warning went out, this is the offensive safety story a $2 trillion pre-Thanksgiving IPO needs to paper over a $42 billion 2025 net loss, an ~12-fold revenue surge resting on ~$7.3 billion of compute, and a customer concentration that has the SEC asking questions.

Published Oct 16, 2026Updated Oct 16, 2026

2025 revenue

$4.6B

12-fold YoY growth; FY 2025 S-1, leaked Sep 28, 2026

2025 net loss

$42B

Includes ~$34B non-cash charge on convertible financing; S-1

2025 compute spend

$7.33B

More than half of $12.65B total operating expenses; S-1

Planned cloud capex

$518B

Multi-year cloud and infrastructure commitment disclosed in S-1

The event

Anthropic Just Let an Outside Watchdog Move to Inside

Anthropic said on October 15, 2026 that six researchers from METR — a nonprofit that tests frontier AI systems — will get company-issued laptops, office space, and a seat at internal tools that approximates what Anthropic's own alignment staff see, with exclusions only for customer data, attorney-client privilege, and model architecture. METR can publish its findings; Anthropic can ask for narrow redactions, and METR may publicly say whether it agrees with those redactions. Anthropic named Accenture and SecureBio as adjacent evaluators and said it is in early talks with Hugging Face.

Anthropic is the first frontier lab to give an outside evaluator veto-free publication rights with company-laptop access, and METR is the only evaluator Anthropic has put in the top of its three-tier framework. OpenAI took the opposite turn a fortnight earlier and fired three safety researchers for sharing information with a third-party evaluator.

What it actually means

The Three-Tier Framework Is the Real Disclosure

Anthropic organized the announcement around a three-tier evaluator ladder rather than a single headline deal. METR is the only lab in Tier 3, the band with no approval-to-publish requirement; Tier 2 gets more access but Anthropic can require removal of specific categories; Tier 1 — where SecureBio sits today — is narrower, with Anthropic deciding access case by case and reviewing any publication.

Anthropic's three-tier independent-evaluator framework, as disclosed Oct 15, 2026.
TierAccess levelPublication rightsCurrent occupant
Tier 1Narrow risk investigations; Anthropic sets scopeAnthropic approval requiredSecureBio (reviewing Aug 2026 Risk Report CB chapter)
Tier 2More internal access than Tier 1Publish without approval; Anthropic may require redactions in narrow categoriesAccenture (alignment, red-teaming, safeguard testing)
Tier 3Employee-like: office, hardware, internal tools at risk-team level; exclusions for customer data, privilege, model architecturePublish without Anthropic veto; Anthropic may require narrow redactions; METR may characterize themMETR (six researchers; eight-week initial agreement)
  • Sets a publish-by-default floor that OpenAI, xAI, and Google DeepMind now have to either match or explain why they won't
  • Gives investors a verifiable third-party signal ahead of an IPO targeted for before Thanksgiving 2026
  • Closes the loophole most safety critics exploit: the red-team reads the summary, not the system

Why now

The $42-Billion Problem That Made It Urgent

Anthropic's leaked S-1 prospectus, dated late September, puts 2025 revenue at $4.6 billion — up twelvefold year over year — and a net loss of $42 billion, of which roughly $34 billion is a non-cash mark-up on financing instruments that could convert into shares. Operating losses alone were $8.06 billion against compute and infrastructure spend of $7.33 billion, more than half of total operating expenses. The filing also flags that nearly a quarter of 2025 revenue came from two customers.

2025 revenue

$4.6B

12-fold YoY growth; FY 2025 S-1, leaked Sep 28, 2026

2025 net loss

$42B

Includes ~$34B non-cash charge on convertible financing; S-1

2025 compute spend

$7.33B

More than half of $12.65B total operating expenses; S-1

Planned cloud capex

$518B

Multi-year cloud and infrastructure commitment disclosed in S-1

Anthropic's 2025 P&L: Compute Spend Is Larger Than Most of the Operating Expenses

FY 2025 income statement as disclosed in the leaked S-1, Sep 28, 2026.

Unit: $B

Revenue

4.6

Compute & infrastructure

7.3

Total operating expenses

12.7

Operating loss

8.1

Net loss (incl. non-cash)

42

Two customers accounted for ~25% of 2025 revenue and most contracts are not long-term, the S-1 says — the kind of disclosure that turns a safety-verifiable moat into something an institutional bid can actually underwrite.

Supply chain

The Cloud Stake Is Already Locked In — Now Anthropic Is Selling the Trust Layer

Anthropic has effectively pre-committed its compute future to two clouds. In April 2026, Amazon put another $5 billion into Anthropic — on top of $8 billion already invested — and Anthropic committed more than $100 billion to AWS over the next decade plus up to 5 gigawatts of Trainium capacity through Project Rainier. In May 2026, Alphabet signed Anthropic to a $200 billion, five-year Google Cloud commitment covering TPUs and services. Together with the $518 billion cloud-capex line in the S-1, the safety story is now layered on top of two of the largest cloud revenue pipelines on the public tape.

Anthropic's stated cloud and compute commitments as of October 2026.
CounterpartyCapital from counterpartyAnthropic commitmentCapacity
Amazon / AWS$5B now + up to $20B tied to milestones (Apr 20, 2026)$100B+ to AWS over a decadeUp to 5 GW Trainium via Project Rainier
Alphabet / Google CloudPrior $3B equity (Oct 27, 2023 + Jan 2025 add-ons)$200B to Google Cloud over five years (May 5, 2026)1+ GW expected online in 2026
Total planned cloud capex—$518B (S-1, Sep 28, 2026)Multi-vendor

Trainium is the strategic twist. By routing five gigawatts of training and inference through Amazon's custom silicon, Anthropic has built a parallel compute moat that does not depend on NVIDIA supply. The safety announcement is the second moat: when two of the largest cloud contracts on earth can only be validated by independent frontier-AI evaluators, the integrity of the underlying training is what those contracts are buying.

Anthropic's three biggest non-government counterparties — Amazon, Alphabet, and NVIDIA — are the same three names whose multiples now depend on whether frontier AI training can be independently assessed at all.

The competitive frame

OpenAI Made the Opposite Move Two Weeks Earlier

On October 1, 2026, Apollo Research — OpenAI's partner on scheming evaluations — published 'Principles for Embedded Evaluations,' arguing that future third-party access must be deep, persistent, and publish-by-default. Two days later, OpenAI fired three safety researchers for sharing confidential safety information with a third-party evaluator. METR has said it investigated an OpenAI–Hugging Face incident this summer and plans to look into security issues at Anthropic next. The two events land as a one-line contrast.

Anthropic vs. OpenAI on independent safety access, as of October 2026.
DimensionAnthropicOpenAI
Top-tier outside evaluatorMETR (employee-like access; veto-free publication)Apollo Research (moving from external to embedded; principles published Oct 1, 2026)
Treatment of staff sharing with third-party evaluatorsFrame built around external evaluatorsFired three safety researchers, Oct 1–9, 2026
Self-disclosure on model riskAugust 2026 Risk Report (CB-1 raised to 'low' after UK AISI incident)System cards per model release
Government-level safety pactSingapore MDDI MOU, Oct 14, 2026Signed White House Accord on Super Intelligence, Sep 29, 2026
If Anthropic's pre-IPO safety transparency holds, the relative cost of OpenAI refusing to match it rises with every quarter — and Microsoft, OpenAI's exclusive cloud backer, inherits the gap.

Government

The Government Pattern Is Now Locking In

Anthropic signed a memorandum of understanding with Singapore's Ministry of Digital Development and Information on October 14, 2026 — one day before the METR announcement — covering AI safety, model evaluation, responsible adoption, and incident response. Five days before Singapore, six U.S. AI companies signed the White House Accord on Super Intelligence alongside Executive Order 14434, which commits signatories to partner with an independent external auditor or evaluator. The METR hand-off is the first named evaluator that lets the White House, Singapore, and any future EU AI-Office rule point to a concrete access template.

  • Singapore MDDI MOU (Oct 14, 2026) names evaluation, testing standards, and incident response as joint workstreams
  • White House EO 14434 (Sep 29, 2026) requires signatories to work with an independent external auditor or evaluator
  • METR access (Oct 15, 2026) is the first concrete post-Accord independent-evaluator access from a U.S. frontier lab

Timing

The Three-Day Sequence Was Not a Coincidence

On October 12, 2026, the company published research showing that GLM-5.2 was the only tested open-weight model capable of end-to-end self-replication on commercial IoT hardware, and that smaller30B-and-under models can already complete most individual replication steps. The paper projected small models could reach end-to-end replication by the end of 2026 on current trends. One day later came the Singapore MOU; one day after that, the METR hand-off. Read as a single quarter, the message is: we are the lab that publishes the worst-case numbers, signs the hardest government pact, and opens the deepest evaluator window — at the same time as the IPO roadshow.

Self-disclosure, government pact, and third-party access arrived as a single coordinated three-day burst, timed for the IPO roadshow window that Bloomberg now targets for mid-November 2026.

What to watch

Horizons — What Moves First and What Compounds

  • METR's first public report is the catalyst — any redaction Anthropic requests will be the news
  • OpenAI's next system-card disclosure is the counter-evidence — a matching evaluator tier would reset the comparison
  • Anthropic IPO pricing window opens the week of Nov 9, 2026 per Bloomberg — every safety headline before then is priced in twice
  • Anthropic's safety-verifiable positioning becomes a structural moat only if SEC disclosure rules tighten around frontier AI
  • The Amazon–Anthropic Trainium 5 GW corridor compounds through 2027 regardless of Anthropic's listing outcome
  • Government-by-government safety pacts become the export license for Borg)-class models in 12–24 months

The throughline is that pre-IPO transparency is now a tradable asset class. Anthropic has converted METR's independence into a priceable trust premium; the cloud counterparties that underwrite the compute pipeline get the same verification standard attached to their largest AI revenue line; and OpenAI's choice to fire evaluators rather than embed them has shifted the relative cost of staying private for the next twelve months. The honest read: the safety story is the moat, the moat is the multiple, and the multiple is the reason a $42 billion loss prints at $2 trillion.

Stocks the METR Hand-Off Actually Touches

AAmazonAMZN--
--Vol --
-
Bullish
  • $100B+ AWS commitment and 5 GW Trainium corridor means Amazon's biggest AI-revenue line is now anchored to a third-party-verifiable training pipeline
  • Anthropic's safety-disclosure story raises the credibility of the $13B equity stake; near-term, the Trainium substitution away from NVIDIA GPus deepens Amazon's vertical stack
  • Risk: if Anthropic's IPO prices below the rumored $2T mark, the implied implied multiple on Amazon's AI capex narrows fast
GAlphabetGOOGL--
--Vol --
-
Bullish
  • Alphabet's $200B five-year Google Cloud commitment with Anthropic is now backed by a public evaluator framework, not just vendor self-reporting
  • TPU exposure compounds: independent verification of Anthropic's training pipeline raises the value of every TPU hour Google Cloud sells
  • Risk: Google DeepMind has not matched the METR access tier; relative safety-transparency could narrow the gap if regulators focus on it
MMicrosoftMSFT--
--Vol --
-
Mixed
  • Microsoft's Azure–OpenAI exclusive becomes the weaker safety-transparency comparator after Anthropic's METR move
  • Bullish near-term: OpenAI's Apollo Research embedded-evaluations framework (Oct 1, 2026) signals Azure's largest AI tenant is moving in the same direction
  • Bearish: three OpenAI safety researchers fired in the same fortnight creates an employee-risk headline that hurts the safety-first branding of Borg)-scale deployments
NNVIDIANVDA--
--Vol --
-
Mixed
  • NVIDIA remains the dominant inference and training GPU supplier to Microsoft, Oracle, and most of the AI ecosystem outside Anthropic's trainium corridor
  • Mixed: Anthropic's 5 GW of Trainium is a structural substitute, but only one customer; the broader $518B cloud capex envelope still pulls H100/B-class silicon demand higher
  • Watch: METR-class evaluators will publish training-compute claims; any 'compute anomaly' finding becomes a NVIDIA demand headline
OOracleORCL--
--Vol --
-
Mixed
  • Oracle's OpenAI Stargate partnership captures much of the Microsoft–OpenAI overflow; OpenAI's weaker safety-transparency posture today helps Oracle win marginal workloads
  • Bearish: Anthropic-aligned Amazon and Alphabet capex is not flowing through Oracle infrastructure
AAccentureACN--
--Vol --
-
Bullish
  • Accenture is now both an Anthropic Tier-2 evaluator and a major enterprise AI consultant — a dual role no other Big Four/IT-services peer holds
  • Alignment, red-teeming, and safeguard-testing services become a billable line as Tier-2 access expands across Anthropic's enterprise customers
  • Risk: if Anthropic's pre-IPO reading shift drives faster enterprise rollout, Accenture's Q3 FY2026 consulting backlog (latest quarter Aug 31, 2026) gets re-rated