Großwald Curated No. 38 — Strike Substitute, Moscow Stack, SAFE 30 May
11 - 17 May 2026 | Weekly briefing for policy, intelligence, and defence audiences across NATO and the EU
Großwald Curated No. 38
Week of 11–17 May 2026
Week in Signal
Three weekly developments worth keeping separate.
Brave Germany, FV-014 at Neuss, and the FLP-t 150 firing at Île du Levant landed in the same five days at three different maturities — financing instrument, production line, and test milestone. Friday's Vlasiuk component audit of the Kh-101 that struck Kyiv and Sunday's SBU operation against the Russian indigenous-production stack (Angstrem, ELMA, Raduga, MNPZ Kapotnya, Solnechnogorsk, Volodarskoye) ran 48 hours apart; the operational causal chain is not publicly established, but the target overlap is on the record. The 11 May FAC moved four files the post-Magyar period had not previously cleared at the political level — settler sanctions, Russia child-deportation listings, Schröder mediator rejection, and Kos confirmation of the €9.1 bn first tranche disbursing "next week".
Hegseth alone; USEUCOM as channel. Politico Thursday 14 May confirmed Hegseth's 1 May cancellation of the 2nd Armored Brigade Combat Team rotation to Poland (Curated No. 37 §3) was unilateral. At the HASC Friday 15 May, acting Army chief of staff LaNeve confirmed the order routed from Hegseth's office through USEUCOM commander Grynkewich. The same Thursday evening, Polish Defence Minister Kosiniak-Kamysz held a phone call with Grynkewich for reassurance: SACEUR is now both the drawdown executor and the allied reassurance pipeline.
Rutte calls in the primes. FT Sunday: Rutte will convene Rheinmetall, Safran, Airbus, Saab, MBDA and Leonardo in Brussels next week — focus on air defence, long-range missiles, and reduction of dependence on Chinese and Taiwanese components. The 19 May NATO Military Committee CHOD Session in Brussels — Grynkewich and Adm. Pierre Vandier briefing Rutte — opens 48 hours after the Moscow strike. SAFE 30 May closes with Italy hedging (Crosetto–Giorgetti split), Poland updating its application (decree 22 May), and Romania confirmed.
1 The Strike Envelope and the Production Stack Reached
The week's kinetic arc. The 9–11 May three-day US-mediated ceasefire collapsed inside its first night. Overnight 11–12 May, Russia fired 200+ drones into Ukraine. Wednesday 13 May: 892 drones in a single daytime envelope (Signal No. 59) — the largest single-day attack of the war, routed via Belarus and Moldova. Thursday 14 May overnight: 670 attack drones and 56 missiles, including 35 Kh-101 cruise missiles; Kyiv's Darnytskyi apartment block struck, toll rising to 24 dead including three children (Signal No. 60). Friday 15 May: Ukraine struck Russia's Ryazan refinery (17 m t/yr capacity) and the Kaspiysk Caspian naval base (Signal No. 61). On Friday, Vlasiuk told FT that every Kh-101 from the 14 May Kyiv strike was manufactured in Q2 2026 with 100+ western-made components — Texas Instruments, AMD, Kyocera AVX (US); Harting (DE); Nexperia (NL); serial numbers indicating 2024–2025 manufacture; Chinese and Taiwanese components also identified. Russian Kh-101 production runs at approximately eight times pre-war levels; the 2026 intercept rate against the Kh-101 / Kh-55 / Kh-555 family is approximately 88 per cent. Overnight Saturday–Sunday, the SBU jointly with the Armed Forces struck Russia's indigenous-production stack. SBU-confirmed Moscow Oblast targets: the sanctioned Angstrem plant (semiconductors for the Russian military-industrial complex), the Moscow Oil Refinery (MNPZ Kapotnya), and the Solnechnogorsk and Volodarskoye fuel pumping stations (Transneft, ring pipeline around Moscow). Russian Telegram channels Astra and Supernova+ separately reported strikes on the ELMA technopark in Zelenograd (microelectronics) and the Raduga Machine-Building Design Bureau in Dubna (cruise-missile design); Ukraine's General Staff confirmed one strike triggered a fire at a Moscow-region plant "engaged in production of high-precision weapons". Zelensky on X: "Ukrainian long-range sanctions reached the Moscow region." Sunday-night address: "a change in the balance of actions at the front, which is now tangible". The refinery context per Reuters Friday: Ukrainian drone strikes have knocked out ~700,000 bpd of Russian refining capacity January–May 2026 across 16 refineries, against 8 same period 2025; 35 primary distillation units (2.85 m bpd) forced offline vs 12 units (1.37 m bpd) 2025. IEA April Russian oil-product exports at 2.2 m bpd, the lowest in IEA records.
The Belarus vector and the eastern-flank pattern. Friday, Zelensky on Telegram, after meeting Ukrainian military and intelligence officials: "Russia is considering plans for operations to the south and north of Belarusian territory — either against the Chernihiv-Kyiv direction in Ukraine or against one of the NATO countries directly from the territory of Belarus" (Signal No. 61). The Belarusian Ministry of Defence held a command-and-staff exercise 12–14 May; Lukashenko and Putin held a phone call Friday morning. Zelensky said he had instructed Ukrainian defence forces to strengthen defences in the northern Chernihiv and Kyiv regions. Five border events in seven days share a single mechanism — Ukrainian-origin or Ukraine-war-related hardware crossing NATO airspace or waters, in some cases attributed to Russian electronic-warfare diversion, in one (Lefkada) attributed by a NATO foreign minister to Ukrainian origin. Sunday 10 May: Latvian Defence Minister Andris Spruds resigned after two Ukrainian drones — diverted per Sybiha by Russian EW — struck the East-West Transit oil-storage site at Rēzekne on 7 May; Siliņa's coalition collapsed 14 May (Signal No. 60). Tuesday 12 May: Greek Defence Minister Nikos Dendias confirmed at FAC Defence in Brussels that the USV recovered from a Lefkada coastal cave on 7 May is Ukrainian-built (Magura-type, HUR-attributed). Dendias: "We have certainty now that it is a Ukrainian USV… This is an extremely serious issue." Romanian Defence Minister Radu-Dinel Miruța: "This is a common threat. It is happening on the entire eastern flank." Friday 15 May: Helsinki Airport closed three hours over suspected drone activity; Stubb: "no direct military threat against Finland". Saturday 16 May: Romania recovered an unexploded "unguided reactive projectile" carrying 2 kg of explosives in Pardina, Tulcea county. Sunday 17 May: a suspected Ukrainian military drone — undetected on entry, unarmed — crashed in Samane, Lithuania; Latvian Army issued a Russia-border drone alert, NATO Baltic Air Police summoned.
Assessment › Friday's Vlasiuk audit and Sunday's SBU operation against the Russian indigenous-production stack ran 48 hours apart with substantial target overlap; the operational causal chain is not publicly established. Two procurement implications follow. First, for European primes: any defence-electronics supply chain that touches Russia's third-country reseller network is now both regulatorily and kinetically exposed. The EU 21st sanctions package negotiating late June into early July (Signal No. 59) will face higher-priority pressure on component tracing and extraterritorial enforcement than on headline-list additions. Second, for NATO eastern-flank ministries: Ukraine's operational success is producing border-incident events across multiple states, and the Lefkada attribution shifts the pattern from Russian-EW-diversion framing to Ukrainian-origin hardware on the record by a NATO foreign minister. The Cotroceni B9 air-defence commitments (Signal No. 59) will be tested under both attributions simultaneously. Putin's pending Beijing visit (per Peskov 15 May) is the next political marker.
2 The European Long-Range-Strike Substitute Becomes Visible
Continuation of Curated No. 37 §3, where the named long-range fires unit (3rd Battalion / 12th Field Artillery Regiment) was the lead and the European-built substitute architecture was assembling around the cancelled US Long-Range Fires Battalion.
Three different maturities in five days. Monday in Kyiv, Boris Pistorius and Mykhailo Fedorov signed Brave Germany — the German counterpart to BRAVE SWEDEN — routing joint grant funding through Ukraine's Brave1 cluster, stated range envelope including long-range strike up to 1,500 km, first competition phase to open end-2026. Brave Germany sits behind the April Berlin €4 bn agreement covering several hundred Patriot missiles, 36 IRIS-T launchers, €300 m for Ukrainian deep-strike, and 5,000 AI-enabled medium-range strike drones in the first production tranche. Pistorius confirmed the Bundeswehr will study Ukraine's DELTA battle-management system "very intensively" in H2 2026, integration "conceivable". Pistorius is planning a Washington visit to revive Berlin's July 2025 Letter of Request for the Typhon launcher plus 400 Tomahawk Block Vb missiles (estimated above €1 bn, in US export-control review for ten months without an LOA) — Hegseth meeting "far from certain" per FT. Tuesday at the Rheinmetall AGM in Düsseldorf, Armin Papperger announced series production of the FV-014 loitering munition at the Neuss site: up to 100 km range, up to 70 min loiter, four-kg dual-purpose warhead, final assembly Germany and warhead Italy ("entirely within the EU" per Papperger). The system sits inside a €1 bn Bundeswehr framework covering a five-figure number of drones, €300 m initial BAAINBw order; deliveries H1 2027. Stark and Helsing already hold similar Bundeswehr framework agreements; Rheinmetall enters as a follower. On 5 May at Île du Levant — reported 12 May — Thales and ArianeGroup conducted the first firing of the FLP-t 150: operational range exceeds 150 km, intended as the sovereign French successor to the LRU. Thales leads the overall system; ArianeGroup develops propulsion and guidance. The companion X-Fire multipurpose launcher from Thales and Soframe will conduct first demonstration firings by end-May. The three maturities — financing (Brave Germany, first competition end-2026), production (FV-014, deliveries H1 2027), and test (FLP-t 150, first firing 5 May) — sit at different distances from operational capability.
Hegseth alone; USEUCOM as channel; Rutte to industry. Politico Thursday 14 May, with three Pentagon officials, confirmed Defense Secretary Pete Hegseth's 1 May cancellation of the 2nd Armored Brigade Combat Team rotation to Poland was unilateral. SASC ranking Democrat Jeanne Shaheen: Congress was not notified. Army Secretary Daniel Driscoll and acting Army chief of staff Gen. Christopher LaNeve had not mentioned the cancellation in their 12 May SASC testimony. At HASC Friday 15 May, LaNeve confirmed the routing — Hegseth's office directed USEUCOM commander and SACEUR Gen. Alexus Grynkewich to reduce troop levels on the continent — and dated the decision to "within the last two weeks". HASC chairman Mike Rogers (R-AL) and ranking member Adam Smith (D-WA) jointly criticised the absence of statutory consultation; Rogers warned the committee would inflict "pain" on the Pentagon if it sought to drop European troop levels below the 76,000 NDAA floor. Rep. Don Bacon (R-NE) called it a "slap in the face" per Politico. The same Thursday evening Politico was publishing, Polish Defence Minister Władysław Kosiniak-Kamysz held a phone call with Grynkewich for reassurance; SACEUR is now simultaneously executing the Pentagon's drawdown and channelling allied reassurance. FT Sunday: NATO Secretary General Mark Rutte will convene Rheinmetall, Safran, Airbus, Saab, MBDA and Leonardo in Brussels next week, focus on air defence, long-range missiles, and reduction of dependence on Chinese and Taiwanese components — the same supply-chain question the Vlasiuk audit raised in §1. Briefing line per FT: "It's about making the defence spending increase look more real." Berlin's Tomahawk-substitution effort is characterised by FT as "more urgent after the Pentagon scrapped plans to deploy its own equipment". The 19 May NATO Military Committee CHOD Session in Brussels — Grynkewich and Adm. Pierre Vandier briefing Rutte — opens 48 hours after the Moscow strike.
Assessment › The week's substantive procurement question is whether SAFE allocations (§3) flow into the Rutte-anchored capability gaps or into legacy national-prime contracts. Two implications. First, Berlin is running the Tomahawk LoR track and the Brave Germany track in parallel rather than as substitutes — but the FT framing now characterises the Tomahawk push as "more urgent after the Pentagon scrapped plans to deploy its own equipment", which makes the dependency visible. Second, the DELTA study is the bigger institutional move: a Bundeswehr command-and-control system informed by combat-validated Ukrainian software is a structural shift in the C4I dependency direction, distinct from the kinetic substitute architecture. Variables to watch: which companies present which plans at Rutte's meeting; whether announcement-grade commitments are pre-trailed before Ankara; whether the Pistorius–Hegseth meeting materialises.
3 Brussels Sequences Two Cash Flows; SAFE 30 May
The 11 May FAC moved four files in one session. First, ministers cleared sanctions on three Israeli settlers and four settler organisations involved in violence against Palestinians in the occupied West Bank, after Hungary had held the file under Orbán for more than two years; the unblock followed Magyar's 9 May inauguration. Second, the EU listed 16 individuals and 7 entities in Russia for systematic unlawful deportation and forcible transfer of Ukrainian children — entities including federal institutions linked to Russia's Ministry of Education, with officials and politicians from Russian-occupied territories and leaders of youth camps among the listings. The Council estimates Russia has deported or forcibly transferred close to 20,500 Ukrainian children since the war began. Third, ministers rejected Putin's Saturday suggestion of Gerhard Schröder as a preferred European mediator. Kaja Kallas: "It's clear why Putin wants him to be the person — so that actually he would be sitting on both sides of the table." Lithuanian, Austrian, German and Ukrainian foreign ministers all rejected the framing. Fourth, Enlargement Commissioner Marta Kos confirmed the first €9.1 bn tranche of the €90 bn EU loan to Ukraine would disburse "next week". The 12 May FAC Defence under Kallas received the updated EU Threat Analysis; agenda items covered Ukraine defence-innovation cooperation (Fedorov by VTC), the Iran-war situation, and European defence readiness implementation. Shekerinska attended in person; the EDA Steering Board met before the Council under Kallas as Head of EDA. The €90 bn Ukraine loan has a €60 bn defence-allocation envelope; senior EU sources to Euronews framed the open question as how much flows to European arms and which ones. SAFE 30 May. Italy. Defence Minister Guido Crosetto wrote twice to the Treasury urging a decision on Italy's €14.9 bn entitlement; Economy Minister Giancarlo Giorgetti hedged in parliament, citing Iran-war energy-cost shielding as the government's "top priority"; unease in the Italian defence sector reported. The Crosetto–Giorgetti split continues the Italian hedge documented in Curated No. 37 §3. Poland. Kosiniak-Kamysz announced Friday that the Polish SAFE application will be updated to reflect an expansion of the non-military defence-preparation programme covering Border Guard, Police, State Protection Service and Infrastructure Ministry requirements; implementing decree ready 22 May. Romania. €8.33 bn Bolojan-government clearance remains in force; Romanian Lynx contract the signature anchor.
EBRD financing, conditionality, and the EU steel quota. EBRD President Odile Renaud-Basso confirmed in Kyiv Friday 15 May that the EBRD supports Ukrainian privatisation efforts and could provide financing depending on the buyers. Ukraine targets approximately UAH 13 bn ($295 m) in privatisations this year per PM Yulia Svyrydenko; Sense Bank and Ukrgasbank are among the named assets, alongside a 40-year concession on two Chornomorsk port terminals. Renaud-Basso also confirmed a 700 MW renewable-energy financing pipeline. Her caveat — financing "depending on who the buyers are" — runs alongside the Yermak proceedings as the rule-of-law conditionality test. More structurally significant: NABU Director Semen Kryvonos told reporters in Kyiv Tuesday 12 May that the probe spans both energy and defence, with numerous Ukrainian weapons manufacturers — including drone companies — under investigation. EU conditionality under the €90 bn architecture tracks the functioning of Ukrainian anti-corruption institutions rather than specific case outcomes — an active probe extending into the defence sector is a positive structural indicator for the conditionality track, even where the underlying allegations carry execution risk for the named companies and ministries. From 1 July, the EU will cut its steel import quota by 47 per cent and impose a 50 per cent tariff on additional imports. The Commission's initial bilateral proposal for Kyiv: 713,000 tonnes tariff-free against 2.65 m tonnes sold to the EU last year — a 70 per cent reduction worth up to €1 bn in lost Ukrainian export revenue. Metinvest's Oleksandr Vodoviz: "They will completely kill any possibility of Ukrainian companies to deliver on the European market… our core market was always Europe." MEP Karin Karlsbro, file rapporteur, is pressing the Commission for "very special treatment as a candidate country under very special security concerns". The quota cut was agreed under pressure from France, Spain and Poland to respond to Chinese overproduction; the Commission has said it "will take into account Ukraine's difficult situation".
Assessment › The two Council-sequenced flows are the €9.1 bn first tranche of the €90 bn Ukraine loan (confirmed by Kos at the 11 May FAC) and the €150 bn SAFE instrument closing 30 May. The EBRD privatisation pipeline and the DG Trade quota policy run as parallel institutional pressures inside the same eight-week window, not as Council-sequenced flows. SAFE 30 May approaches with the Italian Crosetto–Giorgetti hedge as the immediate variable. Two Brussels tracks pull in opposite directions on the same Ukrainian balance sheet — EBRD structuring privatisations on one side, DG Trade compressing steel revenues by up to €1 bn on the other; the European Parliament's pressure for a special carve-out is the political variable before 1 July. The Kryvonos confirmation that NABU's probe extends into the defence sector lands the same week as the €9.1 bn first disbursement: EU conditionality tracks institutional functioning rather than specific case outcomes, so the probe is structurally positive for the conditionality track even where the named-company execution risk is real.
Programme Tracker
European Long-Range-Strike Substitute
Brave Germany signed Mon 11 May (Pistorius–Fedorov): joint drones up to 1,500 km, first competition phase end-2026; €4 bn April baseline incl. €300 m for Ukrainian deep-strike. FV-014 series production at Neuss Tue 12 May (Rheinmetall AGM): 100 km range, 70 min loiter; €300 m initial in €1 bn Bundeswehr framework; intra-EU supply chain; deliveries H1 2027. FLP-t 150 first firing at Île du Levant 5 May reported 12 May (Thales–ArianeGroup): >150 km, sovereign French LRU successor; X-Fire launcher first demonstration firings end-May.
DELTA Bundeswehr study concludes H2 2026 | Berlin Tomahawk LoR ten months without LOA; Pistorius Washington trip pending | UK–Germany ELSA still without industrial contract nineteen months on
Rutte–Industry Brussels Meeting / USEUCOM as Channel
Rutte convenes Rheinmetall, Safran, Airbus, Saab, MBDA, Leonardo in Brussels next week — focus: air defence, long-range missiles, Chinese/Taiwanese component-dependence reduction. Pre-Ankara groundwork. Hegseth's 1 May 2nd ABCT cancellation confirmed unilateral by Politico Thu 14 May; HASC Fri: LaNeve confirmed routing through SACEUR Grynkewich. Rogers (R-AL) and Smith (D-WA) jointly criticised statutory-consultation breach. Polish DefMin Kosiniak-Kamysz held phone call with Grynkewich same Thursday evening for reassurance. 19 May NATO MC CHOD Session: Grynkewich and Vandier brief Rutte 48 hours after Moscow strike.
SACEUR simultaneously executing drawdown and channelling reassurance | 76,000 NDAA floor unbreached but statutory consultation in unilateral breach | Berlin Tomahawk push "more urgent after the Pentagon scrapped plans to deploy its own equipment" per FT
Kh-101 Forensics and the Indigenous Production Stack
Vlasiuk to FT Fri 15 May: every Kh-101 from 14 May Kyiv strike manufactured Q2 2026, >100 western-made components each; named Texas Instruments, AMD, Kyocera AVX (US), Harting (DE), Nexperia (NL); serial numbers 2024–2025. Sat–Sun 16–17 May SBU joint operation against the Russian indigenous-production stack — SBU-confirmed: Angstrem, MNPZ Kapotnya, Solnechnogorsk, Volodarskoye; reported by Astra/Supernova+: ELMA, Raduga. Substantial target overlap with the Vlasiuk forensic finding; the operational causal chain is not publicly established.
Russian Kh-101 production ~8× pre-war | 88 per cent 2026 intercept rate | EU 21st sanctions package late June: component tracing now higher-priority than headline-list additions | Reuters: refinery campaign doubled YoY (700,000 bpd offline Jan–May 2026 across 16 refineries vs 8 same period 2025)
SAFE 30 May Cohort
Italian DefMin Crosetto wrote twice to Treasury Thu 14 May urging decision on €14.9 bn entitlement; Economy Minister Giorgetti hedged in parliament citing Iran-war energy-cost shielding. Polish DefMin Kosiniak-Kamysz Fri 15 May: SAFE application updating to reflect expanded non-military defence-preparation programme (Border Guard, Police, SOP, Infrastructure Ministry); decree ready 22 May. Romania €8.33 bn cleared; Romanian Lynx contract the signature anchor.
Italian Treasury decision the immediate variable | Polish decree 22 May | Common-procurement contracts signable beyond 30 May; disbursements continue through 31 Dec 2030
Strategic Indicators
Monday 19 May, Brussels. NATO Military Committee CHOD Session — Grynkewich and Vandier brief Rutte 48 hours after the Moscow strike. Rutte's industry meeting with Rheinmetall, Safran, Airbus, Saab, MBDA, Leonardo follows the same week: air defence, long-range missiles, Chinese/Taiwanese component-dependence reduction.
Friday 22 May, Warsaw. Polish decree expanding the non-military defence-preparation programme; updated SAFE application follows.
Saturday 30 May, SAFE single-state procurement-derogation deadline. Italian Treasury decision on the €14.9 bn allocation; Polish updated application; Romanian Lynx signature against the cleared €8.33 bn line. Common-procurement contracts signable beyond; disbursements continue through 31 December 2030.
Wednesday 1 July, EU steel quota cut. 47 per cent quota reduction with 50 per cent additional tariff. Ukrainian export-revenue impact estimated up to €1 bn. European Parliament special-carve-out push (Karlsbro) the political variable.
7–8 July, Ankara NATO Summit. Headline procurement announcements anchored on the Rutte–industry track (§2); eastern-flank counter-UAS and air-defence at the centre of deliverables; US presence-reconfiguration trajectory (§2) and the production-stack strike geometry (§1) the framing variables.
