The Board Room

Deep dives

1. 01

   The Harness Is the Moat — Meta's $2B Bet Reshapes Your AI Architecture

   The Value Stack Inversion Is Now a Market Transaction

   Meta — which builds its own frontier models — paid $2 billion specifically for agent orchestration technology (Manus), not model weights. This is the most expensive admission yet that the AI value layer has migrated from the model to the harness: memory management, skills, protocols, observability, evaluation loops, and orchestration. Simultaneously, Canva's $50B+ trajectory is built on edit-sequence training data — capturing how designs are made, not just final outputs — creating a process-knowledge moat that no general-purpose model can replicate.

   If your organization treats orchestration as plumbing rather than product, you're building the wrong thing. The model is a commodity; the harness is the business.

   Fine-Tuning Barriers Just Collapsed

   GRPO (the algorithm behind DeepSeek-R1's reasoning) combined with RULER (LLM-as-judge relative ranking) eliminates manual reward functions and labeled data from RL fine-tuning. Any team with moderate ML capability can now create task-specialized models that outperform frontier APIs on specific use cases — at a fraction of inference cost. The ART framework makes this fully open-source. If your AI product is primarily GPT or Claude behind an API wrapper, your differentiation evaporated this week.

   On-Device Deployment Reaches Production

   A fine-tuned Qwen3-0.6B runs at 25 tokens/second on an iPhone 17 Pro in a 470MB package with zero cloud dependency. Meta's ExecuTorch runtime is already in production across Instagram, WhatsApp, and Messenger. This opens healthcare, financial services, and government markets where data sovereignty blocked AI deployment. Meanwhile, Alibaba's Qwen3.6 running as a 21GB quantized model on a MacBook outperformed Anthropic's Opus 4.7 in spatial reasoning — confirming size no longer correlates with quality.

   The Market Confirms: Reliability > Capability

   Anthropic's unprecedented 81,000-person survey across 159 countries reveals: 81% say AI already delivers value, but unreliability is the #1 concern — not capability limitations. Users want professional effectiveness and time freedom, with reliability and human control as preconditions. Canva's 265M-user dataset independently confirms the same: users prefer collaborative AI with human control over full automation. The industry's obsession with autonomous agents is running ahead of revealed user preference at massive scale.

   ---

   What This Means For Your Architecture

   Investment Area	Old Priority	New Priority
   Model selection	Primary differentiator	Commodity input
   Orchestration/harness	Plumbing	Core product surface
   Evaluation infrastructure	QA function	2-3x quality multiplier
   Process data capture	Analytics nice-to-have	Strategic moat material
   On-device/hybrid	Edge case	Market expansion lever

   What to do

   1. →

      Audit your AI architecture: calculate what percentage of differentiation lives in the model layer vs. harness layer. If >50% model, initiate rebalancing within 30 days.

      NowMeta's $2B transaction proves market pricing has shifted — organizations still concentrated in the model layer are building depreciating assets.
   2. →

      Stand up a GRPO+RULER fine-tuning pilot on your highest-volume, most cost-sensitive AI workload within 60 days. Benchmark against current frontier API on quality, latency, and cost.

      This sprintFine-tuning democratization means your competitors can now match your API-based features at 10-100x lower inference cost.
   3. →

      Instrument your product to capture user process data (edit sequences, decision paths, iterative refinements) — not just final outputs. Scope this quarter.

      This quarterCanva's edit-sequence training proves process data is the raw material for domain-specific models no competitor can replicate.
   4. →

      Build dedicated agent evaluation infrastructure using LLM-as-judge patterns. Make eval quality a tracked KPI alongside model quality.

      This sprintBoris Cherny's data shows evaluation alone drives 2-3x quality improvement — most organizations dramatically underinvest here.
2. 02

   Shadow AI + AI Supply Chain Attacks: The Converging Threat Your Org Chart Can't See

   CISOs Are 'Defeated' — And That's Your Problem

   Q1 2026 CISO field intelligence — from RSA offsites, Slack channels, and private conversations — reveals a universal sentiment: security leaders feel defeated by shadow AI. This isn't theoretical risk. Four distinct shadow AI attack vectors are converging simultaneously, all exploiting the same organizational flaw: the enterprise security / AppSec silo that leaves no single team owning the full kill chain.

   The Four Shadow AI Vectors

   1. Consumer AI data exfiltration — sales teams uploading customer lists to Chrome extensions with AI features
   2. Enterprise AI over-sharing — Copilot surfacing board decks to interns because SharePoint ACLs haven't been cleaned up in a decade
   3. Autonomous agent sprawl — PMs running Claude Code against production Jira with personal tokens
   4. Prompt injection against internal tools — now described as 'the new SSRF,' no longer theoretical

   AI rollout budgets fund licensing and enablement, not security. Browser-layer DLP, agent inventory, ACL cleanup, prompt injection testing, and red-teaming don't make it into the budget. You are creating breach conditions on a compressed timeline.

   AI Coding Assistants Are Building Your Attack Surface

   The most novel threat this cycle: AI coding assistants hallucinate plausible-sounding package names that attackers are already registering on public repositories. This creates a self-reinforcing attack loop — more developers adopt AI tools → more hallucinated names get suggested → more attack surface gets created. Registering an internal package name on a public registry effectively gives an attacker RCE in your CI pipeline. Most CISOs the source spoke to admitted they don't know if their organization is even vulnerable to basic dependency confusion, let alone this AI-augmented variant.

   Internal package names leak through: Sentry stack traces, npm configs in public GitHub repos, job postings, error messages in browser JS bundles. Combined with the Wharton research showing persuasion techniques more than double LLM safety bypass rates, and confirmed use of Claude and GPT-4.1 in actual data exfiltration attacks, the threat model has fundamentally changed.

   Edge Appliances: Architecturally Unfixable

   Five major vendors — Ivanti, Fortinet, Palo Alto, Cisco, and F5 — have all shipped critical auth-bypass or RCE chains in the last 24 months. Management portal codebases are built on CGI scripts and PHP with local file includes and SSRF. Nation-states exploit within days of disclosure. CISOs who've completed ZTNA migration report fundamentally better posture. The recommendation isn't 'patch faster' — it's eliminate the appliance within 12 months.

   The Structural Fix: Collapse the Silo

   Every top Q1 threat starts in one security fiefdom and ends in the other. Credential attacks enter through human identities, pivot to machine identities. Supply chain attacks compromise build pipelines then production. Shadow AI spans consumer tools, enterprise platforms, dev environments, and production. No single fiefdom owns the kill chain end-to-end. The 2026 structural fix: unify enterprise security and AppSec under single leadership with shared tooling and budget.

   What to do

   1. →

      Mandate an AI security audit and establish a dedicated AI security budget line with headcount before any further Copilot/Gemini/Enterprise AI rollout. Block new seat provisioning until complete.

      NowAI rollout budgets universally fund licensing but not security — creating active breach conditions on compressed timelines.
   2. →

      Commission an immediate dependency confusion exposure assessment across all build pipelines, with specific focus on AI coding assistant hallucinated package names. Complete within 30 days.

      NowMost CISOs admit they don't know their exposure — and attackers are already squatting hallucinated names on public registries.
   3. →

      Establish a 12-month ZTNA migration plan for all remaining Ivanti/Fortinet/Palo/Cisco/F5 VPN infrastructure. The vulnerability class is architectural, not patchable.

      This sprintFive major vendors have shipped critical exploits in 24 months on architecturally legacy codebases — nation-states exploit within days of disclosure.
   4. →

      Unify enterprise security and AppSec under single leadership with shared tooling and budget by Q3 2026.

      This quarterEvery converging threat exploits the organizational seam between these fiefdoms — no single team sees the full kill chain today.
3. 03

   SaaS Moat Erosion: From Thesis to Live Demo in One Week

   The Switching-Cost Moat Just Got a Stress Test

   Claude Design + Opus 4.7 is now autonomously building 'animated, award-winning websites' — prompting immediate market discussion of existential threats to Wix and GoDaddy. In the same week, a sophisticated market commentator flagged Workday, Salesforce, and Intuit as facing structurally lower switching costs and harder incremental customer acquisition. This isn't analyst speculation — it's the thesis entering investor consciousness at companies commanding hundreds of billions in combined market cap.

   Any software company whose core value proposition is 'making a complex thing easier' is in a race against AI that can make the complex thing trivially simple. Website builders are the canary. CRM, financial reporting, and HR systems are next.

   Adobe Is the Case Study

   Adobe's situation is instructive and transferable: 30% year-to-date stock decline, a departing CEO, and simultaneous attack from a foundation model company (Anthropic's design tool) and an AI-native platform (Canva, now described as 'rivaling Adobe's comprehensiveness'). Adobe invested heavily in AI — the problem isn't underinvestment. The problem is that feature comprehensiveness proved less durable than expected when AI replicates capabilities at near-zero marginal cost. Mike Krieger departing Figma's board while remaining at Anthropic is the talent-gravity confirmation.

   OpenAI's Vertical Model Strategy Creates a New Lock-in Pattern

   OpenAI is pioneering vertically-gated model variants that create a fundamentally new enterprise distribution moat:

   • GPT-5.4-Cyber — specialized, permissive model gated behind 'Trusted Access for Cyber' program
   • GPT-Rosalind — domain-specific reasoning for life sciences

   This tests a segmentation model that will extend to healthcare, legal, and financial services. Organizations securing privileged access early gain measurable capability advantages. The second-order effect: access to frontier AI becomes a competitive variable, not a commodity input. This directly contradicts the 'model is commodity' thesis — unless you recognize OpenAI is selling trust and access, not model quality.

   The 'Fire of Fires' Framework

   Daniel Miessler's categorization of AI SaaS replacement as the existential 'fire of fires' carries weight because of his practitioner credibility. His specific audit framework: categorize every vendor as 'defensible' (proprietary data/workflow), 'replaceable by AI' (commodity features), or 'replaceable by cheaper alternative' (Cloudflare-style consolidation). The companies that survive share one trait: their moats are built on data network effects or ecosystem lock-in, not feature comprehensiveness or workflow complexity.

   Defensibility Test

   Moat Type	Durability vs. AI	Example
   Feature complexity	Collapsing	Adobe, website builders
   Switching cost (config)	Eroding	Workday, Salesforce
   Data network effects	Durable	LinkedIn, Stripe
   Ecosystem lock-in	Durable (for now)	Salesforce AppExchange
   Proprietary training data	Strengthening	Canva edit sequences

   What to do

   1. →

      Conduct a 'platform unbundling' stress test this quarter: identify which product capabilities could be replicated by a foundation model in months vs. which represent durable differentiation.

      This sprintClaude Design producing production websites in one week proves the time-to-replicate for feature-based moats has collapsed from years to weeks.
   2. →

      Categorize your entire SaaS vendor portfolio as defensible, AI-replaceable, or consolidation-target. Use findings to renegotiate renewals from a position of leverage this cycle.

      This quarterEvery SaaS buyer now has structural negotiating leverage — and the leverage will only increase as AI alternatives multiply.
   3. →

      Evaluate OpenAI's Trusted Access programs (Cyber, and forthcoming verticals) for both capability advantage and vendor lock-in risk. Decision by end of Q2.

      This quarterEarly access to gated model variants creates measurable competitive advantages — but also creates a new form of vendor dependency.
   4. →

      If you ARE a SaaS vendor: identify your proprietary data moat within 60 days and begin investing in it as your primary defensive asset, distinct from product features.

      This sprintThe only surviving SaaS companies will be those whose moats are data network effects or ecosystem lock-in — not feature comprehensiveness.