The Board Room

Deep dives

1. 01

   Q1 Earnings Created a New Market Regime — Your AI Investment Narrative Must Change This Quarter

   The Verdict Is In: Revenue Loops Win, Capex Promises Lose

   Q1 2026 produced the cleanest natural experiment the AI market has offered: four hyperscalers reporting in the same week, all raising capex guidance. The market split them into two cohorts. Google and Amazon, the two with demonstrable AI-to-cloud-revenue loops, rose. Meta and Microsoft, still pointing at future returns, fell. The spread was Google +7% versus Meta -6.6%, despite Meta posting 33% revenue growth on both lines.

   The era of undisciplined AI investment is closing. The era of AI revenue accountability is opening.

   Google's quarter stands on its own: 63% cloud growth, a $460B backlog that doubled in a single quarter, and Pichai calling it the strongest quarter for consumer AI to date. Google is selling TPUs externally while building silicon-level lock-in. AWS ran this playbook in the 2010s. Google is executing it faster.

   The FCF Collapse No One Is Pricing Correctly

   The numbers under the headlines are harder to love. Amazon's trailing-twelve-month free cash flow fell from $25.9B to $1.2B, a 95% collapse driven by $59.3B in incremental property and equipment. Microsoft's FCF fell 22% year-over-year. Combined 2026 capex sits at $725B, up 77% from the prior year's record $410B, with Google's CFO telling investors capex will "significantly increase again in 2027."

   A reasonable skeptic would note that capex cycles always look terrifying at the peak and fine in retrospect. The skeptic is correct about cloud. The question is whether this is 1996 internet infrastructure or 2000 fiber optic, and those two are indistinguishable until the margins arrive. The next 18 months decide.

   5% Enterprise Adoption Against $725B in Spend

   Microsoft's Copilot at 20 million seats out of 400 million potential is the most sobering data point in the cycle. The best-distributed enterprise software company on earth, with Nadella's full go-to-market muscle, is at 5% penetration. Cloud gross margin fell 5 points to 56%, directly attributable to GitHub Copilot usage. AI features are a margin headwind until pricing is restructured. Nadella's line that every per-user business will become a "per-user and usage business" confirms the restructuring is underway.

   Google is counter-positioning with seat-based predictability while Microsoft and Anthropic shift to consumption. That opens a narrow procurement window to use Google's pricing as leverage in Microsoft negotiations, before the market converges on consumption.

   The Real Split: Who Owns the Revenue Loop

   The consequential distinction is not who spent more. It is whether the capex sits inside an existing revenue loop that grows with the spend, or builds a loop that does not yet exist. Google Cloud and AWS have the loop. Meta's AI spend has to monetize through advertising and engagement, a harder path. The $535B committed this year is not distributed across equivalent risk profiles. It is a portfolio of bets with different payback structures being treated by consensus as a single trade.

   ---

   Blackstone restructuring its entire growth equity business into an AI-focused unit (BXN1) and exploring JVs to deploy Anthropic across portfolio companies points to a new demand vector: PE-mandated AI adoption. If the template spreads to KKR, Apollo, and Carlyle, enterprise AI stops being bottom-up experimentation and becomes top-down capital allocation. That is the demand shape operators should plan for.

   What to do

   1. →

      Rewrite every AI investment proposal to include a named revenue loop and a 12-month ROI milestone before presenting to the board

      This sprintThe market has stopped funding capability narratives without revenue attachment — Meta's 6.6% decline on 33% revenue growth proved that
   2. →

      Model a June rate cut into capital allocation and M&A pipeline planning

      This sprintFour dissenters on the rate hold (most since 1992) plus imminent Warsh chairmanship make a June cut highly probable — cheaper capital arriving into a higher-scrutiny AI environment changes the math
   3. →

      Open competitive bids with Google Cloud using seat-based guarantees as leverage in Microsoft negotiations before the market converges on consumption pricing

      This quarterGoogle is deliberately under-pricing to gain enterprise share while Microsoft shifts to consumption — this window closes when Google follows
   4. →

      Stress-test your AI revenue projections against the 5% Copilot benchmark — if Microsoft converts only 5% of 400M captive seats, recalibrate your own enterprise AI adoption assumptions downward

      This quarterMost enterprise AI adoption curves are modeled more aggressively than Microsoft's actual results with maximum distribution advantage
2. 02

   Agent Infrastructure Just Went Live — Stripe, Cloudflare, and Cursor Shipped the Stack in One Week

   Three Layers, One Week, One Platform Shift

   Stripe shipped 288 features at Sessions around a single thesis: AI agents will generate meaningful transaction volume. Agent wallets, streaming payments, one-time-use credentials that never expose real card details, agent-ready Treasury accounts. Cloudflare shipped agent self-provisioning in the same week — agents can now create accounts, buy domains, register paid plans, and deploy code, with humans approving only terms. Cursor open-sourced its agent runtime as an SDK so developers can embed coding agents inside any product. Within days someone had a Cursor agent running inside Gmail.

   For the first time, a software agent can autonomously write code, provision infrastructure, deploy an application, and process payments — with human oversight reduced to permission grants.

   The comparison that fits is 2007-2008, when AWS, the App Store, and mobile SDKs arrived close enough together to make the mobile-cloud era inevitable. The framing question is not whether products need agent-accessible interfaces. It is whether the interfaces get built before a competitor forces the schedule.

   The Governance Gap Is a Countdown

   The governance picture against that buildout is worse than most boards have been told. 93% of prompts to AI agents are auto-approved with zero human oversight. Anthropic's own shared responsibility framework puts three of four security layers on the deploying organization rather than the model provider. OWASP has already published a Top 10 for Agentic Applications. The ClawHub incident — 30 skills from a single publisher silently turning AI agents into a coordinated crypto-mining botnet — is the first operational warning in a pattern that will repeat.

   The part organizations have not priced in is identity. Every agent is a non-human identity with human-scale privileges, provisioned faster than any governance process was designed to absorb. A compromised user sleeps. An agent does not. The population of non-human identities with legitimate production access is about to grow by an order of magnitude, and controls designed to gate humans behave poorly when the caller moves at machine speed.

   The Standards War Has a Two-Quarter Window

   Five candidates are now competing to become the default rail for machine-to-machine commerce: x402 (50M+ transactions since May 2025, mostly on Coinbase's Base), Stripe's Machine Payments Protocol (with Anthropic, OpenAI, DoorDash, and Shopify as launch partners), Visa's Agent Card CLI, Amex's ACE kit, and emerging EVM standards (ERC-8004 for agent identity, ERC-8183 for job escrow). A reasonable skeptic would say standards wars take years to resolve and picking early is the expensive mistake. The reasonable skeptic is usually correct. This time the window is measured in quarters, not years, because the volume is already accruing to whoever ships integrations first. The standard that wins locks in for a decade.

   Google's rename of Vertex AI to the Gemini Enterprise Agent Platform, combined with pushing A2A protocols to production, is the orchestration-layer bet: own the protocol agents use to talk to each other, and you become the substrate regardless of which models customers pick. The board-deck version says stay agnostic across rails and protocols. The complete version is that agnostic is the most expensive option by year three.

   What to do

   1. →

      Conduct a 'non-human user' audit of every product surface and API within 60 days — identify everything that assumes a human user and map the effort to make it agent-accessible

      This sprintStripe, Cloudflare, and Cursor are rewriting the web around a user that is not a person — products that cannot be operated by agents will be routed around
   2. →

      Stand up a non-human identity governance initiative by end of Q2 — inventory all AI agents, service accounts, and automated credentials, implement kill switches and blast-radius constraints

      This sprint93% auto-approval of agent actions is a board-reportable risk that is not yet on most risk registers; Anthropic puts security liability on deployers, not model providers
   3. →

      Develop an explicit position on Google's A2A agent protocol and Stripe's Machine Payments Protocol before they become de facto standards this quarter

      This quarterProtocol defaults set this quarter will define integration costs for the next three to five years — waiting is the most expensive option
   4. →

      Build a thin abstraction over at least two agent payment rails (e.g., Stripe MPP + one crypto-native rail) rather than committing to a single standard

      This quarterFive competing standards will consolidate to two — the abstraction preserves optionality for the smallest ongoing tax
3. 03

   Your Security Toolchain Is Now the Attack Surface — and the Government Just Stepped Back

   The Cascade Through Security Tools

   TeamPCP (UNC6780) compromised packages across npm, PyPI, and Docker Hub in the same window, and the failure mode worth studying is not the initial compromise. It is what happened next. The poisoned Checkmarx KICS Docker Hub image was pulled into Bitwarden's CI/CD pipeline automatically, via Dependabot, into @bitwarden/cli with no human in the loop. The same group's earlier Trivy compromise produced the Cisco source code theft. The security tools installed to detect the intruders were the route the intruders used.

   The architectural assumption underneath most enterprise security programs — that the controls sit outside the blast radius of the thing they are controlling — no longer holds.

   In the same window, five additional compromises landed at Bitwarden, Trivy, LiteLLM, Axios, and Vercel. The AI tooling layer produced CVSS 10.0 flaws in Claude Code and Paperclip AI, with five Flowise vulnerabilities scoring 9.8 to 9.9. Eighty-nine unpatched Citrix XenServer vulnerabilities sit with zero vendor response and no CVEs assigned. The volume is past human scale.

   12.5 Hours: The New Exploit Window

   Sysdig observed exploitation of LMDeploy within 12.5 hours of disclosure, with no public proof-of-concept in circulation. An LLM read the advisory and wrote working code. LiteLLM SQL injection was exploited inside 36 hours, against credential tables holding API keys for OpenAI, Anthropic, and AWS Bedrock. MOAK reports 98% autonomous exploitation on known vulnerabilities, and GPT-5.5 achieves black-box exploitation rates higher than its predecessor managed with source code in hand.

   HackerOne paused its Internet Bug Bounty program because AI-generated vulnerability volume exceeded open source remediation capacity. The coordinated disclosure mechanism gave up before the maintainers did. Every dependency tree now inherits the reservoir of unfixed findings that accumulates behind that pause.

   The Government Backstop Is Gone

   The ODNI's 2026 threat assessment formally shifts long-term strategic defense and state-actor tracking responsibility to the private sector. A reasonable skeptic would read this as a budget cycle adjustment. The reasonable skeptic is wrong. The baseline attribution, the nation-state context, the floor a CISO could point to in a board meeting — that floor is being withdrawn. In the same period, the Chinese distillation campaign ran 16 million exchanges across 24,000 fraudulent accounts against Claude, and DPRK-linked HexagonalRodent used Cursor and ChatGPT to vibe-code malware, exfiltrating $12M from 2,726 developer systems in Q1.

   Drone strikes physically destroyed AWS data centers in the UAE and Bahrain, and Amazon asked customers to migrate workloads or back up data. Cloud resilience used to be a software problem. It is now also a kinetic one.

   Three Fronts, Three Different Clocks

   Front	Timeline	Owner
   Supply chain integrity (CI/CD cascade)	This quarter	Engineering + Security
   AI tooling governance (CVSS 10.0 surface)	This year	CISO + CTO
   Threat intel self-sufficiency (ODNI withdrawal)	Multi-year	Board + CISO

   What to do

   1. →

      Audit all CI/CD pipeline dependencies for image pinning, signature verification, and automated pull policies within 14 days — specifically targeting Dependabot and similar auto-update tooling

      NowTeamPCP's cascade through Checkmarx → Dependabot → Bitwarden demonstrates that auto-pull from unverified registries is an amplification vector, not a convenience
   2. →

      Compress critical patch SLAs from 72 hours to under 12 hours for internet-facing infrastructure, effective immediately

      NowAI-generated exploits weaponized LMDeploy in 12.5 hours with no public PoC — a 30-day or even 72-hour SLA is now post-incident timing
   3. →

      Commission a threat intelligence gap assessment by end of Q2 — map what government-provided intel your security team depends on and identify what must be built, bought, or acquired

      This sprintODNI's withdrawal is policy, not budget — the backstop most security programs assumed is not returning on any useful timeline
   4. →

      Implement mandatory kill switches and blast-radius constraints for all AI agents with production access before any further agent deployment

      NowClaude Opus 4.6 deleted an entire production database and volume-level backups in a single API call during authorized access — agents without containment are board-level risk
4. 04

   The Scarcity Supercycle: Public Markets Only Buy Three Categories — and Capital Is Concentrating Permanently

   Every Recent Tech IPO Has Underperformed

   Every US venture-backed non-bio company that has gone public since Figma's July 2025 IPO is underwater against the Nasdaq Composite. Navan, Perplexity, eToro, Figure Technologies: all of them. SpaceX is preparing to list at $1.75–2 trillion on $15 billion in revenue. The twelve recently-IPO'd names together generate roughly double SpaceX's revenue and trade at about one-sixteenth of the implied market cap. That is the shape of the market this year.

   A head of investment banking at a major firm reportedly told clients that public markets currently want three things: LLMs, Defense, and Physical AI. If a company is not one of those, the penalty is not a valuation haircut. It is a structural capital disadvantage that compounds after listing.

   The gap here is not financial performance. It is positioning scarcity. A ticker drops the company into a universe of more than 4,000 public equities all competing for the same pool of capital, unless the company happens to be the singular way to bet on a category that matters. SpaceX is the only liquid bet on orbital infrastructure. Anduril is the only liquid bet on software-defined defense. The premium is not being paid for execution, which plenty of firms can demonstrate; it is being paid for non-substitutability.

   Anduril: The Amazon Playbook in Defense

   Founders Fund put $624M into Anduril's $4B round, bringing its total position past $2.6B. Anduril trades at 14x forward revenue versus Northrop Grumman's 1.88x, a 7.4x premium the market is paying for platform economics rather than project economics. The company is absorbing $1B+ in annual losses through 2029, funding its own R&D with venture capital, selling finished weapons off the shelf, and building a $900M Ohio factory on spec for a CCA contract that has not been awarded.

   The read for a technology executive is unglamorous. Wherever a software-defined approach can replace a services or project model inside a regulated industry, the value-creation gap is structural rather than cyclical. The cost of entry is years of losses and access to capital at a scale most firms cannot raise.

   Permanent Capital Is Removing Scarce Assets from Circulation

   The top 100 wealthiest individuals are 4x richer in real terms since 2000. Private markets grew 15x to $13-15T. Sovereign wealth funds grew 12-15x. Smart capital is building permanent vehicles designed to hold scarce assets indefinitely, which is how Thrive Eternal ends up with the SF Giants and HOF Capital ends up with Bugatti/Rimac. The supply of acquirable premium positions shrinks accordingly, and returns concentrate at the top.

   Zuckerberg reportedly values individual AI researchers in the hundreds of millions of dollars. Anthropic is paying $400K for an events role. OpenAI paid more than 10x revenue for a media property, essentially to buy likeability. In an abundance economy, the things that remain authentically scarce — irreplaceable talent, brand affinity, physical presence — are being repriced upward at rates that make traditional budgeting obsolete.

   What to do

   1. →

      Conduct an honest 'scarcity audit' of your company's market position — determine whether you are the singular way for investors to bet on your category, and if not, develop a 12-month consolidation or repositioning plan

      This quarterPublic markets are pricing substitution risk, not execution risk — the spread between category-defining companies and substitutable ones is 15-25x on revenue multiples
   2. →

      If IPO is on your 24-month roadmap, pressure-test whether your narrative maps to LLMs, Defense, or Physical AI — if it doesn't, consider delaying listing until you've consolidated a defensible category position

      This quarterEvery recent venture-backed non-bio tech listing has underperformed the Nasdaq; getting 'Tickered' into a substitutable comp set destroys value that is difficult to recover
   3. →

      Identify your 10 most irreplaceable people and proactively restructure their compensation to reflect scarcity economics — before competitors price them away

      This quarterMeta values top AI researchers at hundreds of millions; traditional comp frameworks systematically undervalue the people whose departure creates non-recoverable capability gaps
   4. →

      Map the autonomous systems and software-defined defense competitive landscape to identify where Anduril's platform approach creates adjacency opportunities for your technology stack

      This quarterThe $54B Pentagon autonomous warfare budget request creates a massive new TAM — and Anduril's deliberate IPO delay means the competitive window for adjacent players is wider than it appears