Nvidia CEO Jensen Huang called it the “ChatGPT moment for physical AI” at CES in early 2026 — and by September, the capital markets have taken the claim seriously. Physical AI robotics has moved decisively from research demo to commercial deployment: PepsiCo is running 35 driverless trucks on public Arizona highways, Tesla has committed $20 billion in capital expenditure to convert Model S/X production lines into Optimus humanoid robot manufacturing, and venture capital poured $47.4 billion into physical AI startups across 521 deals in just the first half of 2026. This is not a speculative technology narrative anymore — it is an industrial IoT and supply chain automation software buildout with real revenue, real deployed hardware, and a credible multi-trillion-dollar addressable market.

Key Takeaways

• The global physical AI market was valued at $81.4 billion in 2025 and is projected to reach roughly $1.145 trillion by 2035 (33.5% CAGR), with some more conservative estimates putting the narrower AI-robotics segment at $15.24 billion by 2032.
• Humanoid robot shipments in China were revised sharply upward by Morgan Stanley — from 14,000 units at the start of 2026 to a projected 50,000 units by year-end, following Tesla’s own Optimus Gen 3 production ramp.
• Autonomous trucking has crossed from pilot to paid commercial operation: Gatik has completed 60,000 driverless orders incident-free with $600 million in contracted revenue, and Volvo plans to remove safety drivers entirely on U.S. highways by Q1 2027.
• Full trucking automation could save the U.S. economy an estimated $300 billion annually in labor costs, with $100–125 billion in net savings after accounting for technology costs.
• Roland Berger projects the humanoid robot industry alone could reach $750 billion by 2035 and $4 trillion by 2050 — a scale comparable to today’s global automotive industry.

From Pilot to Production: The 2026 Inflection Point

For years, physical AI robotics and driverless tech lived in the same category as flying cars — perpetually five years away. That changed in mid-2026, when a cluster of commercial milestones landed within days of each other. PepsiCo became the first major U.S. consumer-goods company to disclose large-scale autonomous truck use on public roads, running driverless vehicles between bottling plants, storage facilities, and retail customers including Walmart and Dollar General. Simultaneously, Einride completed its business combination and began trading on Nasdaq, and multiple autonomous trucking developers — Aurora, PlusAI, Waabi, Kodiak Robotics — began preparing factory-built, driver-out trucks for mass production rather than retrofitted pilot vehicles.

The Regulatory Map Is Catching Up

Autonomous freight is no longer operating in a legal gray zone in its core markets. Over half of U.S. states now have autonomous truck testing or operation rules, and 24+ states explicitly permit self-driving trucks, led by Texas, Arizona, Florida, Arkansas, and Nebraska — where the majority of current commercial operations run. Both Aurora and Gatik briefed the FMCSA and NHTSA ahead of launching driverless operations, establishing a federal engagement pattern other operators are now following. Internationally, Japan is targeting Level 4 autonomous trucks in 2026, UN regulatory harmonization for autonomous vehicles is expected by mid-2026, and Dubai has launched Apollo Go robotaxis via Uber with an explicit goal of 25% autonomous transportation by 2030.

The Humanoid Robot Market: From Demonstrators to Factory Floors

The industrial IoT story of 2026 isn’t just wheels — it’s hands. Hyundai Motor Group debuted its Atlas humanoid robot for production settings at CES 2026, and BMW Group is deploying Figure AI’s Figure 02 humanoid to improve productivity, safety, and consistency in automotive operations. Tesla’s Optimus Gen 3, now in production at the Fremont facility, features 22 degrees of freedom and 50 actuators — a meaningful dexterity leap that is the underlying justification for Tesla’s unprecedented $20 billion capex commitment to convert core vehicle production lines toward robot manufacturing, the single largest physical-AI capital investment made by any automotive OEM to date.

The variance across these estimates — spanning more than a factor of three — reflects genuine definitional disagreement in the industry: some trackers count only AI-native perception/planning software, others include the full hardware, sensor, and actuator supply chain. What’s consistent across every methodology is the direction and steepness of the growth curve, not the exact terminal number.

Where the Capital Is Actually Flowing

Investment in supply chain automation software and industrial IoT is concentrated in a few clear categories:

1. Logistics and warehousing — the single largest application vertical by 2026 market share, spanning autonomous forklifts, pick-and-pack robotics, and warehouse fleet orchestration software.
2. Automotive manufacturing — both as a deployment site (BMW, Hyundai) and as a capital source (Tesla’s Optimus pivot).
3. Long-haul freight — Aurora, Gatik, Kodiak, Waabi, Bot Auto, and Volvo Autonomous Solutions collectively represent the most commercially mature driverless segment.
4. Compute infrastructure — Nvidia’s Isaac GR00T and Cosmos models underpin a large share of the perception and planning stack across multiple manufacturers, making Nvidia a structural beneficiary regardless of which individual robotics vendor wins.

Amazon, notably, already operates over 1 million robots handling roughly 75% of its global fulfillment volume, illustrating that at true hyperscale, physical AI has already moved well past the pilot stage into core operational infrastructure — a preview of where the broader industrial economy is heading.

Risk Factors Every Investor and Operator Should Price In

FAQ

How large is the physical AI market expected to become? Estimates vary by methodology, but the most-cited long-run figures point to roughly $1.1–1.15 trillion by 2035 for the broad physical AI market, with the humanoid robotics segment alone potentially reaching $750 billion by 2035 and $4 trillion by 2050.

Are driverless trucks actually operating commercially today, or is this still a pilot technology? Both, depending on the operator. Companies like Gatik and Aurora have moved beyond pilots into paid, driver-out commercial operations with real contracted revenue, while others are still in supervised testing phases. Volvo has publicly committed to full driverless highway operations by Q1 2027.

Which industries are adopting physical AI robotics fastest? Logistics and warehousing hold the largest current market share, followed closely by automotive manufacturing and long-haul freight. Amazon’s fulfillment network, handling roughly 75% of its volume via over 1 million robots, represents the most mature large-scale deployment today.

What is the biggest risk to the physical AI investment thesis? Deployment-pace overstatement is the most commonly cited risk — more conservative industry bodies like the IFR note that real-world humanoid deployment remains largely limited to demonstrators and pilots, with full commercialization likely later in the decade than some vendor projections suggest.

Oracle reports fiscal Q1 2027 earnings on September 10, 2026, the first test of whether the company’s pivot from legacy database vendor to hyperscale AI infrastructure provider can sustain the growth rate management itself guided to just three months ago. The stakes are unusually high: Oracle is guiding to the fastest quarterly revenue growth in its recent history, backed by a $638 billion order backlog that now anchors nearly every bull and bear argument on the stock.

The Setup Heading Into Q1 FY2027

Oracle closed fiscal 2026 with record numbers that reset the market’s understanding of its growth ceiling:

The headline figure investors keep returning to is the $638 billion RPO — Oracle’s contracted-but-not-yet-recognized revenue — which includes a five-year, $300 billion cloud-computing agreement with OpenAI. That single contract now anchors a meaningful share of Wall Street’s bull case, and just as prominently, its bear case: multiple analysts have flagged that nearly half of Oracle’s contracted revenue traces back to one AI-lab counterparty, concentrating execution risk if OpenAI’s own capital plans shift.

Why the Market Is Split on Valuation

Sentiment on ORCL has bifurcated sharply over 2026:

• The bull case rests on Oracle’s transformation into critical AI-training infrastructure. J.P. Morgan has maintained an Overweight rating, arguing the buildout thesis extends beyond raw infrastructure into cloud applications and database modernization — a “diversified growth” argument meant to counter the OpenAI-concentration criticism. Consensus analyst price targets run as high as $400, with a mean around $253, implying substantial upside from levels near $160.
• The bear case centers on financing risk. Oracle raised $43 billion in debt and $5 billion in equity in fiscal 2026 alone, and management has guided to roughly $40 billion in additional financing for fiscal 2027 — including a previously announced $20 billion at-the-market equity issuance. Combined with capex guidance of up to $95 billion, that spending pace has pushed free cash flow negative, a structural feature bears argue the market has under-priced relative to Oracle’s historically conservative balance sheet.

Oracle stock dropped roughly 7% after-hours following its June 2026 fiscal Q4 report, despite beating on both revenue and earnings — a reaction driven almost entirely by the market reading an unchanged full-year revenue outlook as a signal that AI-driven demand might be plateauing relative to hyperscaler peers who had raised their own guidance more aggressively in the same window.

What to Watch in the September 10 Report

1. Cloud infrastructure (OCI) growth cadence. Guidance calls for 58–64% growth — a deceleration from Q4’s 93%, but off a much larger base. Any print materially below that range would revive the demand-plateau narrative that hit the stock in June.
2. RPO conversion. Investors will scrutinize how much of the $638 billion backlog is converting into recognized revenue on schedule, since the entire bull thesis depends on data-center capacity coming online fast enough to bill against signed contracts.
3. Financing disclosures. With another ~$40 billion in planned fiscal 2027 financing, any update on debt terms, equity dilution pace, or credit-rating commentary will move the stock independent of the topline numbers.
4. Customer concentration commentary. Any additional color on the OpenAI relationship, or disclosure of new large enterprise commitments (Oracle signed $67 billion in new AI infrastructure contracts in Q4 alone, including four customers each committing more than $8 billion), will factor into how analysts model durability of the RPO figure.
5. Government and enterprise contract wins. Oracle secured a $400 million, 10-year federal contract in mid-2026, part of a broader push into public-sector cloud that diversifies revenue away from pure hyperscaler-AI exposure.

Institutional Investor Framework

For portfolio construction purposes, Oracle now trades less like a legacy enterprise software name and more like AI infrastructure peers (Nvidia, Broadcom, hyperscaler capex plays). That reclassification matters for valuation multiples: applying a 20–22x multiple to elevated fiscal 2028 earnings estimates supports price targets in the $240–$250 range cited by several sell-side desks, implying meaningful upside from current levels if execution holds — but also meaning the stock now carries the multiple compression risk associated with capex-heavy AI infrastructure plays broadly, not just software-company risk.

Bottom Line

Oracle’s September 10 fiscal Q1 2027 report is a referendum on whether 27–29% guided revenue growth and 58–64% cloud growth are achievable without further financing-driven balance sheet strain. The $638 billion RPO remains the single most important number in the Oracle thesis — both as the source of extraordinary growth visibility and as the concentration risk that keeps institutional bears engaged even as price targets on the Street continue to climb.

The 2026 AI governance conversation has largely been framed as a contest between great powers — the United States, China, and the European Union pursuing incompatible regulatory visions. That framing captures only part of the picture. A parallel and increasingly consequential dynamic involves non-state actors — from terrorist organizations exploiting open-weight AI models to civil society groups and industry consortia shaping the rules themselves — operating both as subjects of the emerging global guardrail push and, in some cases, as active participants in building it.

Key Takeaways

• The UN’s Global Dialogue on AI Governance and Independent International Scientific Panel on AI, launched from the 2024 Global Digital Compact, convened its first substantive session in Geneva in 2026 — described by the Council on Foreign Relations as a test of whether global AI governance can move beyond fragmented national approaches.
• A benchmark pilot by Tech Against Terrorism found that almost one-third of AI model responses provided meaningful uplift when prompted to assist malicious actors preparing terrorist activity, despite existing guardrails — and researchers assessed that guardrails are likely removable for all open-weight models, a structural, not merely operational, vulnerability.
• Recorded drone strike events rose 115-fold between 2018 and 2025, with 565 distinct armed groups — including non-state actors and criminal networks alongside state militaries — carrying out at least one drone attack in that period, according to the 2026 Global Peace Index.
• AI-enabled target-to-fire times have compressed from roughly a day using 1990s cruise missile systems to as little as five seconds with autonomous selection systems now in active use in conflicts including Ukraine — a compression the Global Peace Index explicitly warns is outpacing the international legal and diplomatic frameworks needed to govern it.
• A May 2026 terrorism case filed by India’s National Investigation Agency documented a defendant linked to al Qaeda in the Indian Subcontinent using YouTube and ChatGPT to learn improvised explosive device construction and mixture ratios — illustrating how AI reduces informational friction for less experienced non-state actors even as researchers note operational execution barriers remain significant.

Two Distinct Meanings of “Non-State Actors” in the 2026 AI Governance Debate

Precision matters here, because “non-state actors” spans two substantively different categories in current policy discourse, each with distinct guardrail implications.

Non-state actors as governance participants include large technology companies (Google, Meta, Microsoft, and others), multistakeholder organizations like the Partnership on AI, and civil-society watchdog groups such as the Civil Liberties Union for Europe — entities with formal or informal access to shape AI regulatory processes at the OECD, the EU, and increasingly at the UN level. Research on this dimension has found that large tech companies possess the monetary resources and technical expertise to actively promote their regulatory preferences within legislative and bureaucratic processes, while civil society organizations have played a documented, vocal role in specific negotiations — including the EU AI Act process.

Non-state actors as security threats include terrorist organizations, insurgent groups, criminal networks, and militias exploiting increasingly accessible AI capabilities to enhance operational effectiveness — the category most directly implicated in the “global guardrails” security debate, and the focus of the remainder of this analysis.

The Democratization Problem: Why Open-Source AI Changes the Threat Calculus

A recurring, structural concern across 2026 security research is that the proliferation of sophisticated open-source AI models has lowered the barrier to entry for non-state actors — including terrorist groups and armed militias — to acquire meaningful operational capability. Open-source and commercial foundation models can be repurposed relatively easily for military or paramilitary applications, a dynamic that Belfer Center research explicitly warns contributes to a “race to the bottom” on safety and reliability standards among both states and non-state actors competing for tactical or strategic advantage from early adoption.

The severity of this concern is directly quantified by a 2026 benchmark pilot from Tech Against Terrorism, which found that almost one-third of AI model responses provided meaningful uplift when prompted to assist malicious actors preparing terrorist activity — despite guardrails explicitly designed to prevent exactly this outcome. The research’s most strategically significant finding is not the uplift rate itself but the assessment that guardrails are probably removable for all open-weight models, meaning the release of a capable open-weight model is potentially catastrophically irreversible from a governance standpoint: once released, the safety measures built into the model cannot be reliably re-imposed by any subsequent regulatory action.

Documented Cases: From Tactical Planning to Explosive Device Instruction

The 2026 evidence base for non-state actor AI exploitation has moved from theoretical concern to documented case material. CSIS research cites a May 2026 charge sheet filed by India’s National Investigation Agency in connection with a November 2025 bombing in Delhi, in which the accused principal — linked to al Qaeda in the Indian Subcontinent — reportedly used YouTube and ChatGPT to learn how to construct an improvised explosive device and determine correct mixture proportions.

Separately, reporting drawing on the 2026 Global Terrorism Index describes AI reportedly helping a designated terrorist organization refine unit sizing, protect explosive components delivered by drone, and plan raids with greater tactical precision — part of a broader pattern the 2026 Global Peace Index frames not as AI inventing new categories of violence, but as making existing violence more efficient. This distinction matters directly for governance strategy: if AI is primarily an efficiency multiplier on existing threat patterns rather than a source of categorically new threats, the governance priority becomes controlling the technology’s diffusion pathways rather than searching for entirely novel threat vectors.

Importantly, CSIS research also notes meaningful operational limits remain: violence is difficult to execute successfully, and untrained individuals frequently fail during operational execution due to stress, inexperience, poor tradecraft, or logistical shortcomings that AI assistance does not eliminate. Advanced terrorist operations still typically require organizational trust, coordination, operational security, financing, and real-world experience that AI-generated technical instructions alone cannot substitute for.

The Speed Problem: Autonomous Systems and the Governance Gap

Beyond informational uplift for individual actors, the 2026 Global Peace Index identifies a second, more systemic non-state actor dynamic: the militarization of AI in ongoing conflicts, where target-to-fire times have compressed dramatically — from approximately a day using 1990s-era cruise missile systems to as little as five seconds with autonomous target-selection systems now in active use in conflicts including Ukraine. Recorded drone strike events rose 115-fold between 2018 and 2025, with 565 distinct armed groups — a category explicitly including non-state actors and criminal networks alongside state militaries — carrying out at least one documented drone attack during that period.

The Global Peace Index’s central warning is structural: this speed of technological change is arriving well ahead of the international legal and diplomatic frameworks needed to govern it, creating a widening gap between what autonomous and semi-autonomous systems can now do operationally and what international oversight mechanisms exist to meaningfully constrain their use — a gap that applies with particular force to non-state actors operating outside the state-level arms control and export regimes that, however imperfectly, still apply some constraint to national militaries.

The Institutional Response: Building Global Guardrails in 2026

The primary multilateral response to this landscape has centered on the UN’s Global Dialogue on AI Governance, launched from the 2024 Global Digital Compact alongside a companion Independent International Scientific Panel on AI. UN Secretary-General António Guterres has framed the effort’s core rationale directly: no single country can see the full picture of AI risk alone, and shared understanding is necessary to build effective guardrails, unlock AI’s benefits, and foster cooperation. The Global Dialogue represents, per Council on Foreign Relations analysis, a genuine test of whether international AI governance can move beyond fragmented, incompatible national approaches toward a more coordinated and inclusive form — though early indications suggest not all countries support this coordinated model equally, and the effort unfolds against a backdrop of the EU’s rights-based regulatory approach, the US’s preference for voluntary standards, and China’s emphasis on state control existing in active tension with one another.

This tension matters directly for the non-state-actor security dimension: a genuinely global guardrail regime capable of constraining terrorist or criminal exploitation of AI capabilities requires exactly the kind of coordinated, cross-jurisdictional cooperation that great-power regulatory competition currently undermines. Smaller and developing states, meanwhile, gain a formal voice in these new UN-backed forums but remain structurally dependent on the small number of major powers that control the bulk of global AI talent, capital, and computing infrastructure — limiting their practical influence over how any eventual guardrail regime is designed and enforced.

Implications for Foreign Policy and Technology Governance Stakeholders

• Open-weight model release policy deserves treatment as an irreversible governance decision, not an incremental product choice. Given the finding that guardrails are likely removable from any open-weight model post-release, policy frameworks evaluating AI model release should weight this irreversibility explicitly rather than treating open-weight releases as equivalent in risk profile to controllable, API-gated model access.
• Governance frameworks should target diffusion pathways, not solely model capability. Since the 2026 evidence base suggests AI is primarily amplifying existing non-state actor threat efficiency rather than creating unprecedented threat categories, policy resources may generate more impact by controlling how capable models reach less-resourced or less-vetted actors than by attempting to cap frontier model capability alone.
• The autonomous-systems governance gap requires urgency independent of the broader UN Dialogue timeline. With target-to-fire compression already operational in live conflicts and 565 armed groups (including non-state actors) already engaged in drone warfare, the multilateral governance process’s more deliberate, consensus-building pace may not match the operational speed of the threat it aims to address.
• Civil society and industry non-state actors remain a meaningful, underutilized lever for governance influence. Given documented civil-society influence in processes like the EU AI Act negotiation, foreign policy and technology governance stakeholders should treat multistakeholder engagement — not only formal state-to-state negotiation — as a genuine channel for shaping eventual global guardrail design.

Frequently Asked Questions

Are terrorist groups actually using AI for operational planning in 2026?

Yes, with documented cases: a May 2026 Indian terrorism case involved a defendant who used ChatGPT and YouTube to learn explosive device construction, and broader reporting describes AI assisting a designated terrorist organization with unit sizing and raid planning — though researchers note significant operational execution barriers remain independent of AI assistance.

Can AI safety guardrails be removed from open-source models?

Research from Tech Against Terrorism’s 2026 benchmark pilot assessed that guardrails are likely removable for all open-weight AI models, making open-weight model releases a potentially irreversible governance risk once safety measures can no longer be reliably enforced post-release.

What is the UN doing about global AI governance in 2026?

The UN launched the Global Dialogue on AI Governance and an Independent International Scientific Panel on AI, stemming from the 2024 Global Digital Compact, aiming to build coordinated international guardrails — though the effort operates amid significant tension between the EU’s rights-based, the US’s voluntary-standards, and China’s state-control regulatory approaches.

Conclusion

The 2026 non-state actor dimension of AI governance defies a simple narrative: the same technology lowering barriers for terrorist groups to plan attacks with greater precision is also, through civil society and multistakeholder participation, actively shaping the emerging global guardrail frameworks meant to constrain that very misuse. With autonomous weapons systems already compressing target-to-fire times to single-digit seconds in live conflicts, and open-weight model guardrails assessed as fundamentally removable once released, the core tension facing foreign policy and technology governance stakeholders is one of speed: whether the deliberate, consensus-driven pace of UN-backed multilateral coordination can keep pace with a threat landscape that is, by the clearest available evidence, evolving considerably faster.