{
  "docId": "019dd923-5e88-73ef-bd5d-0d0f98caffe1",
  "docSlug": "5df6bd1b0447b5f6",
  "documentTitle": "2025 Air Street Capital The State of AI Report 2025",
  "authorId": "AirStreetCapital",
  "authorName": "Air Street Capital",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "vc_research",
  "sourceTypeLabel": "VC research",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.777,
  "pageNumber": 176,
  "pageCount": 313,
  "prevPage": 175,
  "nextPage": 177,
  "slideType": "key_messages",
  "function": "summarize",
  "density": "balanced",
  "nDataPoints": 0,
  "notes": "Part of the State of AI 2025 report.",
  "elementsJson": [
    "headline_text",
    "paragraph",
    "bullet_list"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5e88-73ef-bd5d-0d0f98caffe1/176",
  "deckHref": "/decks/019dd923-5e88-73ef-bd5d-0d0f98caffe1",
  "deckJsonHref": "/decks/019dd923-5e88-73ef-bd5d-0d0f98caffe1.json",
  "deckAnchorHref": "/decks/019dd923-5e88-73ef-bd5d-0d0f98caffe1#slide-176",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "The answer isn't another model \"monitor,\" but real standards plus fine-grained, data-aware controls.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd952-47c2-727e-a402-dfb54d6474db",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.45,
        "w": 0.9,
        "x": 0.05,
        "y": 0.42
      },
      "kind": "list",
      "text": "Protocol churn: stateless chat completion APIs have moved to stateful Responses API with breaking semantics and provider-kept session state. Forced re-architecture increases hidden state and compatibility-driven vulnerabilities.\nMCP immaturity: unclear authentication, state, and versioning. Coarse \"gateway\" monitors and model-on-model oversight are bypassable, leaving prompt-injection/tool misuse largely unsolved.\nOpaque chains: caches persist across tools/models but there's no \"DNS for agents\". Callers can't know who or what handled a request, complicating trust and forensics.\nAI-enabled malware: payloads embed OSS models, hijack local CLIs/dev tools, and semantically hunt PII/financial data and model caches.",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "c78889cb-24f4-4db3-adee-a596f3513ae1",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.18,
        "w": 0.9,
        "x": 0.05,
        "y": 0.21
      },
      "kind": "paragraph",
      "text": "The AI stack is racing from stateless APIs to stateful protocols and agent layers. That evolution is outpacing security: specs churn, backward compatibility breaks, caches leak, and MCP still lacks clear auth/state semantics. At the same time, attackers are bundling open models into malware that hijacks local dev tools and hunts sensitive context. The answer isn't another model \"monitor,\" but real standards plus fine-grained, data-aware controls.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "73ed1acb-67fe-46aa-a497-e83356dcae7d",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.04,
        "w": 0.45,
        "x": 0.05,
        "y": 0.14
      },
      "kind": "title",
      "text": "The emerging surfaces of AI security threats",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "011744cd-20aa-4ef0-a192-a24f38189cc6",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 189,
      "from": 12,
      "beatId": "019dd95a-0682-776c-8e35-9f380673831f",
      "arcName": "The Triple Take",
      "arcSlug": "triple-take",
      "beatName": "The Facts (What)",
      "beatSlug": "triple-take-the-facts-what",
      "evidence": "Sections 1-2 lay out research findings and industry data with charts and case studies.",
      "position": 1,
      "confidence": 70,
      "parentBeatName": "Setup",
      "parentBeatSlug": "setup"
    },
    {
      "to": 189,
      "from": 90,
      "beatId": "019dd95a-0682-776c-8e35-b06421e14afb",
      "arcName": "The Onion",
      "arcSlug": "onion",
      "beatName": "Deeper Layer",
      "beatSlug": "onion-deeper-layer",
      "evidence": "Industry section exposes economics, infra, geopolitics beneath research.",
      "position": 3,
      "confidence": 45,
      "parentBeatName": "Development",
      "parentBeatSlug": "development"
    }
  ],
  "loops": [],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}