| Sturnella Signals |
Vol. 1 · Issue 017
Wednesday, August 12, 2026 |
Golden Dome · CMMC · Deal Flow
Critical minerals · Energy infrastructure · Defense supply chains · Cyber
|
| |
|
This week in Sturnella Signals
Washington opened a new door to industry. The cybersecurity verification model behind it is still being worked out.
The Golden Dome for America Ecosystem Hub launched Tuesday, creating a direct route for traditional contractors, commercial companies, venture capital, universities and non-traditional suppliers to engage the program. Two days from now, the CMMC reform RFI closes. One initiative is widening access to the defense market while the other is reconsidering how cybersecurity assurance should work inside it.
|
Gold ~$4,428 +1.4% on CPI |
Core CPI 2.5% headline 3.4% |
WTI ~$83.3 Brent ~$88.9 |
Fed 3.50-3.75% Sept hold favored |
PBOC +19.9t 21st month |
July CPI rose 0.1% month over month and 3.4% year over year; core CPI was 2.5% · Post-release futures put the probability of a September rate hike at roughly 40%, below the pre-CPI level · PBOC July purchase reported August 7
|
|
What we are watching for next
• CMMC: Whether the Reform Task Force's final report — due within 60 days of July 13, putting the endpoint at September 11 — preserves third-party Level 2 assessments, replaces them with another verification model, or materially changes the Phase II rollout.
• Golden Dome: Whether the new Ecosystem Hub moves from concept submissions into awards for non-traditional companies, and whether the FY27 funding structure allows that momentum to continue into October.
• Barrick: Whether the planned North American IPO gets an SEC filing and firm timetable while Barrick continues to target completion by year-end.
|
|
|
Cyber & OT Signal
Twelve States, and Controllers Still Sitting on the Open Internet
• The campaign widened. Federal agencies confirmed incidents in at least seven states on July 30; subsequent reporting places affected water systems in at least twelve states.
• The hardware is named. The FBI and EPA specifically identify Rockwell Automation / Allen-Bradley MicroLogix 1100 and 1400 PLCs.
• The technique is simple. Attackers reached internet-facing controllers, changed IP configurations and passwords, and caused loss of monitoring or control.
• The consequences are operational. Reported impacts include loss of pressure and flooding; federal guidance notes that pressure loss can create water-quality risk.
• The exposure is still there. CISA acting director Nick Andersen said the agency continues to find water-system controllers exposed to the internet with no password or default credentials.
|
| Sturnella lens: This is less a sophisticated-tooling problem than an ownership problem: know what is exposed, who owns it, who holds the credentials, and what happens operationally when it disappears. |
|
|
Policy & Procurement Signal
Golden Dome Opens a Front Door
|
The Itemized List
• August 11: The Department of War launched the Golden Dome for America Ecosystem Hub.
• Who can use it: Traditional defense contractors, commercial technology companies, venture capital, universities, research laboratories and non-traditional entrepreneurs.
• What changes: Companies can register, upload concepts and submit designs directly to program decision-makers rather than relying solely on traditional defense-industry channels.
• Program scale: Gen. Mike Guetlein says approximately $185 billion is needed to deliver Golden Dome.
• Supply chain matters: The Department explicitly says the Hub is intended to strengthen supply-chain security, diversify participation, reduce sub-tier vulnerabilities and connect suppliers with capital.
• Funding remains the watch item: Reporting puts the FY27 Golden Dome request at about $17.5 billion, with most of it outside the Pentagon's base budget. Guetlein has warned that a continuing resolution could therefore create a funding gap.
|
| Sturnella lens: The interesting part is not simply that smaller companies can register. Golden Dome is widening the supplier funnel while simultaneously putting supply-chain resilience inside the program architecture. |
|
|
Governance Watch
CMMC Comment Window Closes Friday at Noon
|
Deadline
August 14, 2026 · 12:00 p.m. ET
|
• Phase II remains suspended. It had been scheduled to begin November 10, 2026.
• Phase I remains in force. Applicable Level 1 and Level 2 self-assessment requirements continue.
• Later milestones are paused. The Department suspended pending and future CMMC implementation milestones while the review is underway.
• The underlying safeguarding duty remains. The Department says NIST SP 800-171 Rev. 2 will continue to be enforced through self-assessments and selected government-led assessments, and DFARS 252.204-7012 contractual obligations remain.
• The task force has a 60-day clock. Its final report is due to the DoW CIO within 60 days of July 13, a September 11 endpoint.
• Industry input closes Friday. The RFI asks seven questions addressing commercial cybersecurity capabilities, verification, compliance burden, small-business participation and resilience.
|
| Sturnella lens: A pause in third-party certification is not a pause in protecting CUI. What is unsettled is the verification mechanism and rollout, not the underlying obligation to safeguard the information. |
|
|
Macro Signal
CPI Cooled. Energy Is Still the Variable.
Editor's note: This is market commentary, not investment advice.
• Headline CPI: +0.1% MoM · +3.4% YoY.
• Core CPI: +0.2% MoM · +2.5% YoY.
• Energy: -1.5% in July; gasoline -2.9%.
• Shelter: +0.1%.
• Food: +0.1%.
• Fed: September hold is now favored; futures moved the probability of a September hike to roughly 40% after the CPI release.
• Gold: Spot gold moved above $4,400 following the report.
• Oil: WTI remains around the low-$80s and Brent around the high-$80s as uncertainty around the Strait of Hormuz continues.
• China: The PBOC added nearly 20 tonnes of gold in July, extending its buying streak to 21 months.
• Hormuz: Shipping remains severely constrained while U.S.-Iran negotiations continue; the waterway should not be described as effectively reopened.
|
| Sturnella lens: July CPI got help from lower energy prices. The question for August is whether that benefit survives a crude market that has already moved back in the other direction. |
|
|
IPO, Uplisting & Deal Flow
A Nevada Settlement, a Scheme, and an Approval
|
Barrick & Newmont — $1.95B Nevada Settlement JV Settlement
Announced August 10 · IPO consent · Barrick targeting year-end completion
Newmont will provide $1.95 billion of consideration to Barrick as the companies bring excluded properties into Nevada Gold Mines. Barrick contributes Fourmile; Newmont contributes Fiberline and Mike. The agreement resolves outstanding NGM disputes and adds revised governance provisions, and Newmont formally consented to Barrick's proposed North American IPO. One important distinction: Barrick had already said it was free to pursue the IPO unilaterally. The settlement removes JV friction; it does not create the IPO authority. Barrick continues to target completion by the end of 2026, subject to market conditions and approvals, with Mark Hill slated to become CEO of the new company upon separation.
|
|
Austral Resources — Hammer Metals Scheme + Spin-off
Binding Scheme Implementation Deed · ~A$80.7M implied Hammer equity value
Hammer shareholders receive Austral equity plus participation in a planned spin-off of Hammer's Western Australian gold assets, and are expected to own approximately 31.1% of the combined copper company.
|
|
Energy Fuels — Australian Strategic Materials Approved
98.23% of votes cast in favor · Remaining implementation conditions outstanding
ASM shareholders approved the transaction. Strategic logic: combine resource development with downstream rare-earth processing capacity.
|
| Sturnella lens: Barrick is the item to watch. The settlement does not "clear" an IPO that was previously blocked; it makes a complicated JV relationship materially cleaner ahead of one. |
|
|
Earnings & Operations
Barrick — Higher Earnings, Higher Costs
• Revenue: $5.292B · +44% YoY.
• Net earnings: $1.217B · +50% YoY.
• Adjusted EPS: $0.82 · +74% YoY.
• Gold production: 796,000 oz · above the company's 730,000-770,000 oz Q2 guidance.
• Gold AISC: $1,866/oz · +11% YoY.
• 2026 outlook: Barrick says it remains on track for full-year production and cost guidance.
|
| Sturnella lens: Higher gold prices are reaching the earnings line, but operating costs are rising with them. |
|
|
Workforce Signal
The Cuts Are Still Concentrated
|
Reductions Announced This Week Layoffs
• Lufthansa: Up to 550 administrative positions under the first phase of a broader restructuring program.
• Zillow: Just over 500 employees, approximately 7% of its workforce.
• TikTok: 250 positions tied to the planned closure of its Nashville office.
• Etsy: Approximately 220 positions, roughly 12% of its workforce, concentrated primarily in product and engineering.
|
|
Small-Business Demand Context
• NFIB says a seasonally adjusted 20% of small-business owners plan to create jobs over the next three months.
• 36% report positions they cannot fill, the highest reading since June 2025.
|
| Sturnella lens: The aggregate labor market may look quiet, but the organizational churn underneath it is not. Administrative layers are being reduced while specialized technical demand remains comparatively resilient. |
|
|
Where We'll Be
Events & Speaking Engagements
Sep 18 | BSidesCache — "From SaaS to SCADA" Logan, UT · Bridgerland Technical College The IT-to-OT boundary risk the water-sector campaign continues to demonstrate. |
Sep 22 | Defense TechConnect Innovation Summit & Expo — Poster Presentation Sep 22-24 · National Harbor, MD "From Compliance Gap to Contract Risk: CMMC Readiness for Defense Tech and Dual-Use Companies." |
Oct 28 | WIM Nevada Lunch & Learn — "From Mine Site to Board Packet" 11:30 a.m. opening · Final location and details TBC Translating operational, cyber, contractor and resilience risk into information a board can govern and act on. |
|
|
Field Note
Five Things Mining Companies Can Do Now to Build Operational Resilience
Five practical places mining companies can start identifying operational dependencies and single points of failure. Read the full article →
|
|
Sturnella
At the intersection of cyber, capital, and national security.
This newsletter is for informational purposes only and does not constitute investment, legal, accounting, or cybersecurity advice. Market information is time-sensitive and may change after publication.
|
