SOFIAH NICHOLE SALIVIO

News Editor

SHI has joined the Tokenomics Foundation as a founding member. The group is part of the Linux Foundation.

The move makes SHI one of the early members of an industry body focused on standards and best practice for the economics of artificial intelligence infrastructure. The foundation is developing frameworks to help organisations track the cost and value of AI systems as use of generative AI and agentic tools expands.

Businesses are under growing pressure to show returns on AI spending while keeping control of usage, governance and operating costs. That has led to closer scrutiny of how computing resources are used and whether AI deployments are delivering measurable business value.

The Tokenomics Foundation was set up to advance open collaboration around token production, token consumption and AI value management. Its work draws on FinOps principles, linking product design, engineering, finance, operations and governance through a shared understanding of AI cost and value.

For SHI, the membership extends an existing role in adjacent areas of technology cost management. It is also a Premier member of the FinOps Foundation, which is also hosted by the Linux Foundation.

SHI said it would work with other members to help define frameworks and best practices for organisations adopting and scaling AI. The effort is intended to improve how AI-generated value is measured, distributed and governed.

One issue for companies deploying AI is that consumption-based pricing can make spending difficult to predict. As use spreads across departments, executives often face questions about whether systems are delivering enough value to justify the cost, especially when oversight is split across technical, financial and operational teams.

Shane Cronin outlined SHI’s view of that shift. “As organizations move from experimenting with AI to operating it at scale, the ability to understand how token consumption drives cost, efficiency, and business value is becoming critical,” said Shane Cronin, Head of FinOps & ITAM Services, SHI.

“SHI has long believed that strong governance requires collaboration across the disciplines of IT Asset Management, FinOps, and now AI economics. We are committed to helping shape the industry standards, frameworks, and best practices organizations need to manage technology and AI investments with confidence. Joining the Tokenomics Foundation strengthens our ability to help customers turn AI adoption into measurable business outcomes while contributing to the evolution of this rapidly emerging discipline,” said Cronin.

Industry standards

The foundation’s backers argue that common methods are needed because organisations often lack a consistent way to measure value from AI spending. That challenge has become more acute as AI tools move beyond pilots into broader operational use.

J.R. Storment, Executive Director of the Tokenomics Foundation, said SHI would add practical experience to the group’s work. “SHI has established itself as a key voice and member across the technology value community, including the FinOps Foundation, ITAM Forum, and now Tokenomics Foundation,” said J.R. Storment, Executive Director, Tokenomics Foundation.

“SHI brings a depth of customer and practitioner experience to the table. As organizations work to measure value from AI spend, Tokenomics Foundation gives them a neutral, community-built discipline to do it, and we look forward to the insight SHI will add as we define AI value management together,” said Storment.

SHI describes itself as a USD $16 billion technology solutions provider serving more than 17,000 corporate, public sector and academic customers worldwide. The business employs more than 7,000 people.

Its entry into the foundation reflects a wider effort across the technology sector to create AI governance models more closely tied to spending discipline. As companies seek to move from experimentation to routine use, industry groups are trying to establish shared definitions and measurement standards that can be applied across suppliers, customers and internal teams.

That work is likely to shape how organisations assess the financial case for AI projects, especially where usage is measured in tokens and infrastructure costs can shift rapidly with demand. The Tokenomics Foundation’s central aim is to build common frameworks and best practice that support responsible, efficient and business-aligned AI adoption.

Supermarkets including Asda, Tesco, Sainsbury’s and Co-op have suspended sales in response to warnings from fire chiefs during a period of hot, dry weather that has increased the risk of wildfires across the country.

The likes of Wilko and The Range have also started removing them from stores and online.

Recent blazes have already broken out in Dunwich, Suffolk and the Rhondda Valley in Wales.

Major retailers have taken action in line with voluntary guidance from the National Fire Chiefs Council (NFCC) lasting until Wednesday, August 12.

A Co-op spokesperson said: “Co-op takes its environmental and community responsibilities extremely seriously and has a long-standing policy for the safe sale disposable BBQs, supported by the NFCC.

“Due to the very hot weather and drought conditions the UK is currently experiencing, and in line with the NFCC guidance, we have voluntarily removed all disposable BBQs from sale for a temporary period.”

A spokesperson for Tesco said: “As a responsible retailer Tesco follows the voluntary code on the sale of disposable barbecues created by the British Retail Consortium and the NFCC.

“In line with the code, we have temporarily removed disposable barbecues from sale across our stores and online.”

Retailers Aldi, Lidl, Waitrose and M&S stopped selling disposable barbecues in 2022.

“We have to accept the fact that the climate has changed”

Jon Pearce, the Labour MP for High Peak in Derbyshire, who has called on retailers to remove the products from sale for the rest of the summer, welcomed the move and urged smaller shops to follow suit.

He also called for longer-term action to address changing climate conditions.

Mr Pearce told the Press Association: “The big retailers are taking the lead, which is great, but now we need the others to come in behind them.

“Asking them to suspend sales this summer is to deal with the immediate problem but we have to accept the fact that the climate has changed.”

He said that “last summer was the worst on record for wildfires,” and warned: “This year will almost certainly surpass it.

“We need to adapt quickly to our changing climate and start planning for next summer now.”

Mr Pearce continues to campaign for a full ban on disposable barbecues in public spaces.

He said: “The Government needs to genuinely look at what’s happening.

“It’s great retailers are supporting us this summer but I would expect the Government to look at the risks and act ahead of next summer.”

Fire chiefs say wildfires are putting growing and sustained pressure on services, with more than 700 incidents already recorded in England and Wales this year.

What are wildfires caused by?

Prolonged hot weather combined with human activity is one of the main causes of wildfires, according to the National Emergencies Trust.

It explains: “Hotter weather alone cannot cause wildfires.

“It depends on fuel, weather conditions and an ignition source, like lightning or human action.

“Many wildfires are sparked by human activities, including discarded cigarettes, campfires, and even arson.

“Unintentional acts of negligence can have devastating consequences.”

Do you agree with the decision for supermarkets to remove disposable barbecues from sale? Let us know in the comments.

SOFIAH NICHOLE SALIVIO

News Editor

Chainguard has joined AWS Security Hub Extended as a supply chain partner, giving AWS customers access to Chainguard Libraries through the service.

The integration places Chainguard in the new Supply Chain category within AWS Security Hub Extended, allowing customers to bring its package catalogue into existing AWS security workflows. Users can buy the offering through existing AWS contracts, with Enterprise Discount Program terms applied where relevant, and view findings alongside other security alerts in Security Hub.

The move comes as companies face growing concern over attacks targeting open-source software dependencies. These attacks can insert malicious code into widely used packages that developers pull into applications, creating a route into corporate systems before security teams detect a problem.

Chainguard says its Libraries product is designed to replace packages from public repositories such as PyPI, Maven Central, and npm with alternatives rebuilt from verified source code. Those packages are produced in its own build environment rather than taken directly from public registries.

Security Hub Extended is AWS’s broader marketplace and operational framework for security tools that run inside its cloud environment. By joining the service, Chainguard becomes one of the suppliers customers can activate from within the AWS console rather than through a separate buying process.

Open-source risk

The backdrop is a wider shift in cybersecurity from detecting threats after software enters an organisation to blocking suspect components earlier in the development chain. Open-source software underpins much of modern application development, but public package repositories have become a target for attackers seeking scale.

Chainguard argues that conventional scanning tools can miss the window when a malicious package is first published and quickly downloaded into software builds. It says more than 98% of malware ships as a pre-built package with no matching source code, making early verification of provenance more important than later inspection alone.

Its approach is to supply versions of common language dependencies rebuilt from source and accompanied by signed provenance and software bills of materials. The packages available through the AWS integration are rebuilt in a SLSA Level 3 build environment, according to Chainguard.

The AWS arrangement also changes how customers pay for and support the product. Rather than setting up a separate vendor relationship, customers can purchase through AWS and consolidate the spend into one bill while still relying on Chainguard’s expertise for the software itself.

For enterprise users, the service also brings unified Level 1 support from AWS for Enterprise Support customers. Security findings are centralised using the Open Cybersecurity Schema Framework, allowing data from Chainguard to sit alongside findings from AWS and other partners in a common structure.

Patrick Donahue, Senior Vice President of Product at Chainguard, addressed the significance of the partnership in the context of open-source risk.

“Open source is the foundation the world’s software is built on. When that ecosystem gets compromised, the blast radius is enormous,” Donahue said.

He also linked the AWS listing to broader recognition of supply chain security concerns.

“AWS adding us as a partner for supply chain security with the Extended plan is a real signal that the industry is treating this problem with the seriousness it deserves. Chainguard delivers that protection to customers with open source that’s trustworthy by default,” Donahue said.

Buying route

The commercial element may prove as important as the technical integration for some buyers. Procurement teams often slow adoption of new security tools because separate contracts, reviews, and billing arrangements add time and cost, particularly when development teams want to move quickly.

By appearing inside AWS Security Hub Extended, Chainguard gains access to organisations that prefer to buy third-party security products through a cloud provider they already use. The setup also lets customers apply AWS spending commitments and discount structures, which can make a new product easier to justify within existing budgets.

Chainguard is one of a growing number of security suppliers trying to address weaknesses in the software supply chain before code reaches production systems. Its customer list includes large technology and industrial groups, reflecting stronger demand for tools that monitor or replace open-source components used in commercial software.

Customers using AWS Security Hub Extended can subscribe to Chainguard Libraries through the Extended plan and configure it within their environments, with findings then surfaced centrally through Security Hub.