Tighten Contracts and Operational Controls Around AI, Datacenters, and Large SI Deals

What happened

A researcher found that Microsoft Paint and Photos embed a server-issued GUID (a 16-byte identifier) into AI-generated images. The GUID ties the image to the prompt lifecycle and is issued after Microsoft receives and moderates the prompt, meaning the link to user-created prompts exists outside the visible watermark option. Buyers should verify supplier disclosure and contract controls for metadata, retention, and the ability to opt out or control GUID issuance

Why the category manager should care

Treat vendor metadata embedding as a contractual risk area: if GUIDs are linkable to users or prompts, buyers need explicit controls on issuance, retention, and auditability

Key facts

• Embeds a server-issued 16-byte GUID linked to prompts
• GUID issuance occurs after server-side moderation
• GUID is distinct from visible watermark options

What happened

A Congressional Research Service report estimates US datacenters used about 17 billion gallons of water in 2023, roughly triple the reported use from a decade earlier. The growth is linked to AI-driven infrastructure and higher-power AI hardware that increases cooling needs; watch for location-specific regulation and supplier disclosures on water use and cooling methods

Why the category manager should care

Factor water-usage profiles into colocation and cloud sourcing decisions; sites with high liquid-cooling dependency carry different continuity and cost risks than air-cooled facilities

Key facts

• Estimated 17 billion gallons of water used by US datacenters in 2023
• Reported tripling of datacenter water use since 2014
• Indirect water use via electricity generation accounts for the majority of overall water-rela

What happened

HM Revenue & Customs issued a market engagement notice asking suppliers to prepare for a potential up-to-£500 million contract to update the National Insurance and PAYE System (NPS). The department plans a supplier event and aims to publish the tender in September with a start expectation in June 2027, signalling a large, multi-year transformation opportunity that will absorb significant SI capacity

Why the category manager should care

Expect major SI vendors to prioritize large public tenders; factor supplier capacity and potential conflicts into your sourcing calendar

Key facts

• Market engagement for up to £500 million contract (including tax)
• Supplier market event scheduled prior to tender publication
• Tender expected to be published in September, with work starting in June 2027

What happened

Linus Torvalds and contributors fixed a Linux kernel graphics-memory bug, assisted by automated test chunks produced by a bot that helped isolate the issue. The fix was a simple code change but followed extensive instrumentation and many boots to reproduce; buyers dependent on specific kernel branches should track upstream fixes and vendor backports

Why the category manager should care

Treat kernel-level changes as a real maintenance vector: require vendor backport policies and tested upgrade paths for kernel-sensitive appliances

Key facts

• Issue tracked in Linux kernel 7 development
• Automated bot produced 42 test code chunks that aided debugging
• Root fix reduced to a one-line change (round_up() to round_down()) after extensive debugging