The Board Room
A 25,000-worker study found AI saved 2.8% of work time and zero reached the P&L. The cleanest evidence yet that task-level AI gains leak out before hitting earnings, hours, or wage bills.
If your AI ROI reporting tracks seats and prompts, you're measuring adoption — not the conversion that lands on a P&L.
The AI Conversion Gap
An NBER study of 25,000 Danish workers across 7,000 workplaces found AI saved 2.8% of work time, yet payroll shows near-zero change in hours, earnings, or wage bills over two years. 64-90% saw benefit; almost none reached the P&L. The bottleneck has shifted from model capability to organizational translation.
Compute & Memory Repricing
Meta is shopping up to $10B of surplus compute to Anthropic; SpaceX/xAI runs Memphis at 11% utilization while burning $5B-$6.4B a year. Yet SK Hynix warns of the worst-ever memory shortage by 2027, AI demand outrunning supply past 2030. The buyer's market is a window before a structural squeeze.
Shadow AI Went Upstairs
Roughly two-thirds of senior decision-makers admit using unauthorized AI tools — the leak vector is now the C-suite, not the intern. NadMesh botnets auto-discover exposed ComfyUI, Ollama, and n8n instances, claiming 3,811 harvested AWS keys and turning shadow-AI experimentation into a cloud-account-takeover path.
Consumer & Application AI Whitespace
a16z pulled Josh Elman from Apple's AI revamp, arguing consumer AI is 'still back in 1995,' with a 6-24 month whitespace window. Netflix's up-to-$600M buy of Affleck's InterPositive confirms AI production tooling is now core infrastructure, not a pilot. Value is accruing up-stack, in applications.
Regulation Rewrites the Board
The signal is the cumulative pattern, not any single headline: the EU's Android ruling pushed Google to open access to rival AI assistants (camera, mic, wake word), the Clarity and GENIUS Acts advanced US crypto market structure, and the EU's text-and-data-mining exception is emerging as an AI-training competitiveness lever.
The AI Conversion Gap: Adoption Is Commoditized, Capture Isn't
The cleanest study yet shows AI's time savings never reach earnings — the moat has left the model layer for organizational machinery almost no one has built.
Why the value leaks before it lands
The mechanism matters more than the headline number. AI reliably improves a task without improving the workflow it sits inside. It improves a workflow without moving any number the business knows how to bank. In the Danish payroll data, reclaimed time dissolved into unspecified 'other tasks.' That is an authority vacuum, where no one owns the decision about what happens to freed capacity. That is not a technology failure. The AI worked. The organization had no mechanism to capture the gain.
Read across these signals and one conclusion hardens. The constraint has moved off the model entirely. Frontier capability is commoditizing. Open weights now match proprietary flagships and inference is collapsing toward free, so model access can no longer be the moat. The scarce capability is the ability to convert machine intelligence into repeatable P&L outcomes, and almost no one has built it. A quieter cost runs underneath. Every proprietary prompt, correction, and workflow fed into an external model exports institutional know-how with no patent-like protection. You can pay a vendor to turn your own moat into their training data.
The adoption trap vs. the conversion moat
Most AI dashboards measure adoption: seats, prompts, agents shipped, all of which any rival can buy tomorrow. What compounds is conversion: workflow redesign, governance, and a named owner for reclaimed capacity. A reasonable skeptic will call that a distinction without a difference. The historical rhyme answers back. Solow's productivity paradox resolved only for firms that reorganized around the technology, not for those that merely bought it.
The smart move is unglamorous. It is picking one high-exposure workflow, redesigning it end-to-end, and reallocating the freed time to a defined higher-value output rather than letting it evaporate. One provable conversion beats ten pilots.
Split every AI dashboard into adoption vs. conversion metrics this quarter; kill any tracking usage without a traceable line to revenue, cost, quality, or avoided risk.
Name a single owner for reclaimed capacity in one high-exposure workflow and redesign it end-to-end this quarter, reallocating freed time to a defined output.
Compute's Two Clocks: A Buyer's Market Now, a Squeeze by 2027
A surplus-driven glut and a structural memory shortage move in opposite directions; the 18-month gap between them is a procurement window most cost models haven't priced.
Two prices moving in opposite directions
Two compute signals point in opposite directions right now, and the disagreement between them is the intelligence. A resale market is forming: Meta is shopping up to $10B of surplus capacity to Anthropic, SpaceX/xAI is pitching the Pentagon on a Memphis site running at just 11% utilization, and both are bleeding cash, SpaceX at -$5B and xAI at -$6.4B. Motivated sellers with stranded silicon make a buyer's market. Meanwhile SK Hynix's CEO warns of the worst-ever memory shortage by 2027, with AI demand outrunning supply past 2030.
A reasonable skeptic would say the glut and the shortage cancel out. They do not, because they run on different clocks. The glut is over-building ahead of demand that hasn't arrived, the visible symptom of frontier players who cannot self-fund the infrastructure race. The shortage is structural DRAM/HBM supply that no resale market repairs. I have watched over-build outrun demand before, and the silicon never cares about the seller's balance sheet. Cheap capacity today is a procurement window that closes hard in roughly 18 months.
Where the margin is migrating
The deeper shift is vertical. As open models match frontier capability without discount pricing, durable margin is leaving the model layer and settling in the compute layer, where chips, memory, and energy access stay scarce. Any 3-year model that optimizes token price is aiming at the part of the stack that is commoditizing. The old tailwind is gone, too. US levelized solar cost rose from $38/MWh in 2021 to $69/MWh in 2026, so data-center cases built on ever-cheaper power are overstated.
The useful frame is to treat compute like a treasury function. That means re-underwriting the cost model in two layers, hedging memory-heavy procurement now while resale depresses spot, and dual-sourcing inference so no single vendor holds pricing power. The firms that reopen capacity decisions this quarter enter 2027 with options. The ones locked into premium multi-year rates get stranded above spot.
Re-underwrite the 2026-2028 AI cost model in two layers — model spend and compute/memory spend — and stress-test RAM at 1.5x and 2.5x today's price to find where margins break, before Q1 renewals.
Lock or hedge multi-year compute and memory procurement now while surplus resale depresses prices, rather than buying into the 2027 shortage.
Shadow AI's Inversion: The Leak Vector Signs the Policy
Two-thirds of executives route around AI controls while botnets industrialize attacks on unguarded self-hosted AI — a governance failure that starts in the boardroom, not the SOC.
The leak vector signs the policy
The frame is an uncomfortable inversion: the biggest AI governance risk now runs top-down. Roughly two-thirds of senior decision-makers admit to using unauthorized AI tools while knowing the risk. A ban is only credible if it can be enforced against the most powerful people in the building, and it cannot. Governance built on the assumption that enforcement flows downhill has failed at the top, quietly.
That behavior now meets an industrialized threat. The NadMesh botnet uses Shodan to auto-discover exposed ComfyUI, Ollama, and n8n instances and claims 3,811 harvested AWS keys. Every unsecured self-hosted AI experiment becomes a direct path to cloud-account takeover. The two signals corroborate each other. Experimentation is outrunning security governance at both ends of the org chart, from the executive routing around policy to the engineer standing up an unguarded inference server.
Why more policy won't fix it
A reasonable skeptic would say the answer is a stronger policy. The skeptic has the mechanism wrong. The failure is operating model, not technology. No policy fixes a behavior problem when the violators control the budget, and no ban on self-hosted AI moves fast enough to outpace deployment. The enforceable move is enablement: a sanctioned, governed toolset that is genuinely faster and better than the shadow one, plus continuous visibility into which identities, human and agent, actually touch corporate data.
This is the one item that does not delegate cleanly to SecOps. The self-hosted-AI exposure audit and the executive shadow-AI discovery are governance decisions leadership has to own, because they aim at leadership itself.
Audit all self-hosted AI tooling (ComfyUI, Ollama, n8n) for internet exposure and cloud-key scope this week, paired with a shadow-AI discovery targeting executive usage.
Stand up a sanctioned, governed AI toolset faster and better than the shadow tools executives already use, funded as enablement not prohibition, this quarter.
Stop optimizing the cheap inputs every rival shares; fund the one thing no vendor sells — the conversion discipline and owned learning loops that turn capability into captured value before your gains quietly dissipate.