Last edition closed on a question. Greater Seoul's power is scarce, scarcity lifts rents — but a scarcity premium only becomes a return if it survives the trip to investor IRR, and even when the lease economics work, another question remains: whose credit actually sits behind the rent?

This edition answers it. And the answer is rarely just the tenant.

A guarantee doesn't remove risk. It reallocates it. The investment question is not whether the rent is contracted — it is what remains with you after the contract has done its work.

Several of 2026's largest AI infrastructure financings shared one feature: a stronger balance sheet absorbed a defined slice of downside. But the slice was different in every deal — and that difference is the whole story.

First — the property layer. Cipher and TeraWulf lease sites to the AI cloud firm Fluidstack, and Google backstops specified Fluidstack lease obligations — support that turns on when the relevant lease commences.
Second — the compute layer. Broadcom's US$35bn AI XPV financing platform, led by Apollo with Blackstone, funds AI racks for Anthropic's expansion; there, Broadcom — not Google — backstops the customer's compute-capacity lease obligations, for a five-year term, with maximum exposure of about US$29bn.
Third — Ohio. Nvidia disclosed, in an SEC Form 8-K signed by its CFO, up to US$105bn protecting a guaranteed minimum value tied to OpenAI's twenty-year lease at SB Energy's PORTS-Pike campus.

Three household names, three different objects: property-lease obligations, compute-equipment lease obligations, and defined minimum-value protection around a long-term data-centre lease. Different beneficiaries, different triggers, different recovery paths. "Backed" is not one structure — and reading it as one is the mistake this edition is about.

A guarantee is not a shield over the whole asset. It is a contract with edges — a scope, a start date, an end date, and a party on the hook. Underwrite the edges, not the logo.

What is covered — and what is not

Nvidia's instrument is not a simple rent guarantee. Per the 8-K, it protects a guaranteed minimum value tied to the OpenAI leases, triggered by specified OpenAI payment or insolvency events — and on trigger Nvidia has a menu of remedies (assume the lease, require reletting, initiate a sale, allow termination, or fund specified costs), with recoveries from reletting or sale reducing what Nvidia owes, up to the cap. The Fluidstack property backstop runs differently again: Google supports specified lease payments, not an asset's residual value. Different instruments, different risks transferred. None covers the whole.

When it starts

In the Nvidia structure and the Google-backed property examples reviewed here, the operating support activates at or around lease commencement / ready-for-service rather than at signing. Nvidia's own words: the guarantee becomes effective as data centres reach ready-for-service, expected to begin from 2028. The operating backstop does not cover the pre-commencement period — construction, completion, grid connection — so those risks sit elsewhere in the project stack, absorbed by whatever sponsor support, collateral or construction financing is separately in place. That is the same window Edition 19 flagged: in Greater Seoul, of 522 power-system applications, only a handful had cleared final approval. That pre-commencement period is exactly where scarcity and execution risk bite.

But outside the operating backstop does not mean unprotected — it means protected differently. At Cipher's Barber Lake, during construction Google warrants are pledged as collateral for the project's noteholders, and Cipher itself carries a completion guarantee to fund the amounts needed to finish. Only at lease commencement does Google's operating backstop take over.

Protection doesn't simply switch on — it changes form: different instrument, different beneficiary, different risk, before and after.

TeraWulf's Lake Mariner runs the same playbook, building by building — US$600m of Google support became effective the moment one hall, CB-3, was delivered. Underwrite which protection is live at the stage your capital is exposed, not the label on the whole deal.

When it ends

The Ohio guarantee can terminate if OpenAI achieves the specified credit-rating threshold. Protection that amortises or terminates as the tenant matures is protection you cannot assume will remain at exit. Duration is not a footnote; it is an underwriting variable.

Who is on the hook — and how far down

Strategic supplier support can strengthen an ecosystem without creating creditor recourse. CoreWeave, for example, disclosed substantial revenue concentration in a single customer — a reminder that even heavily financed AI operators can carry downstream economics that no supplier guarantee reaches. Alignment is not recourse; keep them separate.

Demand is not cash flow

A contracted AI tenant is the start of a chain, not the end of one: contracted demand → site and power → construction → operational capacity → revenue commencement → payment obligation → credit support → recovery. Each arrow is a separate risk, and a strong tenant name collapses none of them. Theseus shows this clearly — at launch it had the tenant and the equity in place, but had not yet identified its first US sites. Contracted demand plus institutional equity is not bankability; it is the raw material bankability is built from.

1
The credit you underwrite may extend beyond the name on the lease. Anthropic and OpenAI provide the end-user demand; Google, Broadcom and Nvidia provide different forms of support; the operating parties are different again — Fluidstack the property tenant, SB Energy the Ohio lessor. Same AI demand, different obligors, different support. A lender underwrites both the obligor and any enforceable enhancement around it. Read the guarantee, not just the tenant: the signing name tells you who owes; the support documents tell you who else may absorb the loss.
2
A guarantee's scope, start and end are three separate underwriting questions. Scope — ask which risk the instrument actually transfers; residual value and lease payments are not interchangeable covers. Start — the pre-service period sits outside a commencement-triggered backstop; find where construction and grid risk actually land. End — a guarantee with contractual termination conditions may be gone precisely when a later buyer needs it.
3
Do not divide the backstop by the contract value and call it coverage. At Barber Lake the contracted revenue is roughly US$3.8bn and Google's backstop about US$1.73bn. It is tempting to read 45% "coverage." Don't — the two numbers measure different things over different periods and do not share a denominator. A US$35bn financing does not mean US$35bn of rent is guaranteed; a 15-year lease does not mean every risk is covered for 15 years.
4
The same end-user demand can sit in two investments and carry two different risks. In Broadcom's compute financing, the public record identifies a defined five-year Broadcom backstop on the customer's AI-rack lease obligations. In the Macquarie/GIC Theseus platform, Anthropic anchors long-term agreements and Macquarie and GIC fund the majority of project equity — but the 10 August announcement does not disclose the credit-enhancement, completion-support or recovery structure. For a public-information underwriting exercise, give no credit to support that has not been disclosed — do not infer a wrap, and equally do not assert its absence. GIC invests Singapore's foreign reserves, so Singapore sovereign capital is already at the equity layer of a US AI-infrastructure platform. "Anthropic-backed" is not a risk grade.
5
A long lease is not necessarily a long certainty. Edition 15 called this the tenor trap: a neocloud can sign a ten- or fifteen-year building lease while the compute commitments underneath it turn over faster. At TeraWulf's Justified campus, Anthropic signed the 20-year lease directly, removing one intermediary layer. At Cipher's Barber Lake, Fluidstack is the ten-year tenant and Google backstops specified Fluidstack lease obligations; public disclosures do not establish that Fluidstack's downstream commitments match the full lease tenor — Google's backstop moves defined lease-payment risk to a stronger counterparty even when that durability cannot be fully observed. It changes the loss path. Hut 8's River Bend financing shows the payoff: against a 15-year Fluidstack lease supported by Google's backstop, the project raised US$3.25bn of investment-grade senior secured notes on a 16.5-year fully amortising tenor aligned to the lease, eliminating the scheduled maturity refinancing requirement during the base lease. The notes are non-recourse to Hut 8 Corp. and are not guaranteed by the tenant or lease guarantor. The support sits at the lease; the financing benefit shows up in the debt.
Question 1

Scope

What exact obligation is protected, and what remains outside it?

InvestableThe instrument names the risk it transfers; residual value and lease payments are treated as different covers.
Caution"Backed" is read as blanket cover; the specific obligation protected is never pinned down.
Question 2

Activation

What protects the asset before that support begins?

InvestablePre-service construction and grid risk are located and priced — sponsor, lender or collateral.
CautionThe backstop is assumed to cover the build; the pre-commencement window is unpriced.
Question 3

Duration

Does the support survive your expected hold and exit, or lapse as the tenant matures?

InvestableProtection tenor is matched to the hold; the post-termination case is tested.
CautionA self-terminating guarantee is assumed permanent — and may be gone at exit.
Question 4

Disclosure

Are you crediting only protection that is actually documented?

InvestableUndisclosed support is given no credit; its absence is not inferred either.
CautionAn unseen wrap is assumed to exist — or assumed absent — without the documents.
The winning asset is not the one with the strongest logo. It is the one whose risk allocation remains investable after the support documents are read.

Who benefits if these support structures persist? The beneficiaries can include developers and lenders whose contracted cash flows become more financeable when a stronger counterparty assumes a defined downside. Strategic support providers can benefit too — Nvidia and Google, for example, gain economic alignment through hardware demand or warrants and equity stakes — but the exact consideration differs by deal, and we should not assume a uniform fee or pricing across them. The loser is the investor who reads "hyperscaler-backed" as a risk grade and ends up carrying the risks the support doesn't cover — the construction period before it begins, the stretch after it ends, or an equity exposure whose protection architecture is undisclosed — without pricing any of them.

There is a tell worth noting. McKinsey's cost-of-compute work sorts everyone funding the AI buildout into five groups — builders, energy providers, hardware makers, operators (hyperscalers and colocation providers), and AI architects (the model developers). It puts hard numbers on the first three, but not on operators or AI architects — because their compute spending is hard to isolate, overlapping with their broader R&D and corporate activity. That is not itself a credit conclusion. But it makes the edition's point: there is a difference between what a contract shows you and the harder-to-see economics underneath it. When even a tier-one firm notes that a whole layer is difficult to measure, that difficulty is a reason for caution, not comfort — hard to see is not the same as safe.

The structures above are outside APAC. Among the APAC transactions reviewed for this edition, we did not find a publicly disclosed AI-tenant support structure directly comparable with them — a bounded finding, not an exhaustive market negative. But the exposure is not hypothetical: Singapore sovereign capital is already participating at the equity layer of a US AI-infrastructure platform, and Korean commentary is already engaging the same risk from two angles — institutional analysis treating AI data-centre credit as a distinct alternative-asset risk, and market coverage describing the "circular financing" created by interlocking strategic support in the same US ecosystem. The audience for this thesis is here before the domestic structures are.

Which raises a broader question: once you look beyond the credit support, is the cheapest asset to build still the best asset to own?

Sources

Primary — company disclosure & regulatory filings

1. Broadcom — AI XPV financing platform: US$35bn initial tranche led by Apollo with Blackstone, Anthropic >1GW expansion, Fluidstack-based sites (Broadcom corporate announcement, 9 June 2026). Broadcom backstop on customer AI-rack lease obligations, ~US$29bn maximum exposure, 5-year term (Broadcom SEC 10-Q).

2. Nvidia — guaranteed-minimum-value support up to US$105bn tied to OpenAI's 20-year PORTS-Pike lease; OpenAI tenant, SB Energy lessor/developer; activation at lease commencement / ready-for-service; menu of remedies on OpenAI default; credit-rating termination (Nvidia SEC Form 8-K, 17 August 2026; Nvidia corporate release).

3. Cipher — Barber Lake: ~US$3.8bn contracted revenue, ~US$1.73bn Google backstop of Fluidstack lease obligations, 10-year Fluidstack lease, construction warrant collateral + Cipher completion guarantee, rent commencement Oct 2026 (Cipher SEC 8-K; Cooley).

4. TeraWulf — two 10-year Fluidstack agreements at Lake Mariner, Google support of Fluidstack obligations; US$600m effective on CB-3 delivery (Q2 2026); Justified 20-year direct Anthropic lease (~US$19bn) (TeraWulf SEC 8-K / earnings release).

5. Hut 8 — River Bend: 15-year US$7bn Fluidstack lease, Google backstop base term; US$3.25bn 6.192% senior secured notes due 2042, 16.5-year fully amortising, non-recourse to Hut 8 Corp., not guaranteed by tenant or lease guarantor (Hut 8 SEC filing / PRNewswire).

6. Macquarie Asset Management / GIC — Theseus Infrastructure: Anthropic anchor tenant under long-term agreements; managers own the platform and fund majority of equity per project; initial US focus; Anthropic covers consumer electricity price increases; financing terms, guarantee structure, completion support, termination protection and recovery mechanics not disclosed (Macquarie / BusinessWire release, 10 Aug 2026; Bloomberg; DatacenterDynamics; The Next Web). Macquarie closed US$40bn Aligned Data Centers sale (20 Jul 2026) three weeks before the Theseus launch; GIC invests Singapore's foreign reserves.

7. CoreWeave — substantial single-customer revenue concentration disclosed (CoreWeave SEC filing).

Industry & regional framing

8. McKinsey — cost-of-compute archetypes; three of five layers sized, operator/AI-architect layers not quantified (compute spend hard to isolate; overlaps broader R&D) (McKinsey, 2026).

9. APAC regional framing (interpretation only, not transaction evidence): AI data-centre credit as a distinct institutional alternative-asset risk — Lawtimes (Jul 2026); "circular financing" of interlocking strategic support in the US AI ecosystem — Seoul Economic Daily, Tech42 (Aug 2026).

Verification & evidence tiers

[PRIMARY — company disclosure] Broadcom AI XPV US$35bn initial tranche, Apollo/Blackstone, Anthropic >1GW linkage (Broadcom announcement, 9 Jun 2026).

[PRIMARY — regulatory] Broadcom ~US$29bn max backstop exposure on customer AI-rack lease obligations (Broadcom 10-Q); Nvidia US$105bn cap, lease-commencement activation, OpenAI-default triggers, remedy menu, rating-based termination (Nvidia 8-K, 17 Aug 2026).

[REPORTED] Detailed senior/junior tranche split, yields and waterfalls for the US$35bn financing; not independently confirmed against financing documents.

[UNKNOWN] Theseus detailed credit-enhancement, completion-support, termination and recovery architecture is not established by the public materials reviewed. UNKNOWN is not treated as absent: it cannot be credited in underwriting, and its absence cannot be inferred either.

[DIRECTIONAL] Neocloud net margin ~14–16% post-depreciation (McKinsey / The Information); colour only, not load-bearing.

Inference/fact seam: (1) That Fluidstack's downstream compute-contract tenor is not fully observable from public disclosures is a fact; that Google's backstop therefore reduces the investor's reliance on that visibility is our inference. (2) Google's lease-level support and the River Bend notes are distinct: the support sits at the lease; the notes are non-recourse to Hut 8 Corp. and are not guaranteed by the tenant or lease guarantor. We do not attribute the notes' specific rating or coupon to Google's backstop. (3) The APAC negative is bounded to transactions reviewed for this edition, not an exhaustive market claim.

Glossary — terms used in this edition

TermFull name / meaning
Contractual obligorThe party legally on the hook for the payment — often the operating tenant (e.g. Fluidstack), not the household name whose credit is being relied on
BackstopA support arrangement where a stronger party covers specified obligations of a weaker one if they fail; what it covers, and when it starts, varies by contract
Completion guaranteeSupport that funds the amounts needed to finish a project — construction/completion risk, distinct from an operating backstop that applies only once the lease begins
Residual- / minimum-value guaranteeA promise about an asset's value, not a tenant's rent; if the tenant leaves, the owner relets or sells and the guarantor covers a shortfall up to a cap
Non-recourseDebt secured only against the project, with no general claim on the parent company — separate from whether the debt is guaranteed by a tenant or lease guarantor
Fully amortisingDebt that repays its whole principal over its term through scheduled payments, leaving no balloon maturity to refinance
Ready-for-service / lease commencementThe point at which a facility is operational and the lease begins; many support arrangements only become effective here, leaving the construction period covered by something else, or not at all
Reletting riskThe risk that, if a tenant leaves, the space cannot be re-leased at the same price or in reasonable time — central to what a minimum-value guarantee protects