YPO Technology Network AI Brief

Three things happened over the weekend that, taken together, mean your existing SaaS stack just got publicly graded on a curve. One investor with a spreadsheet. One reorg at OpenAI. One quiet number from Anthropic's CFO. The agent economy is no longer something coming — it is something already grading you.

What's inside this episode:

• The SaaStr Agent API Report Card. Jason Lemkin graded 116 enterprise software companies on whether AI agents can actually use them. Stripe got an A-plus. Workday got a D. Only 27 of the 116 hit A-tier. This is the first public scorecard CEOs can use to evaluate their own stack.
• OpenAI reorganizes around agents. Greg Brockman put in charge of a unified ChatGPT-plus-Codex agentic platform. Codex shipped to iOS. ChatGPT wired to your bank account via Plaid. Seventy-two hours of urgency.
• Anthropic passes OpenAI in paid enterprise. Ramp's AI Index showed the flip. Anthropic's CFO disclosed a $30B annualized run-rate — up from $250M two years ago. 120x in 24 months.

The three stories are one story told from three angles. Anthropic winning is the result. OpenAI reorganizing is the response. Lemkin's scorecard is the playing field. Once your vendors are publicly graded on agent readiness, every CEO in your peer group asks the same two questions at their next operating review — and the vendors on the wrong side of the line stop being your software providers and start being your migration project.

What to do this week:

• Pull Lemkin's scorecard. Find your top 10 vendors. Twenty minutes, not a project.
• Notice which of your vendors are silent — the ones that did not even get graded. That is also useful information.

Sources:

• Jason Lemkin / SaaStr Agent API Report Card
• The Verge — OpenAI executive reshuffle
• The Rundown AI — The Enterprise Shift OpenAI Saw Coming
• The Rundown AI — OpenAI Takes Codex Mobile

The YPO Technology Network AI Brief is hosted by Stephen Forte, founder of BuildClub and a member of YPO. Episodes drop weekday mornings.

OpenAI just raised $4 billion to start an implementation company. Microsoft just disclosed two serious security holes in its own AI agent framework. These are not two separate stories — they are one story told from two ends.

In this episode of the YPO Technology Network AI Brief, Stephen Forte unpacks why the implementation layer is becoming required infrastructure for enterprise AI, and why your agent stack is now complicated enough that you cannot reasonably govern it from the inside.

What's covered:

• OpenAI Deployment Company — A $4 billion raise at a $10 billion valuation, backed by TPG, Bain Capital, Brookfield, and Advent. Bain & Company, Capgemini, and McKinsey are inside the deal as implementation partners. The model labs just consolidated the implementation layer — exactly as we predicted three weeks ago in "From Press Release to P&L."
• Microsoft Semantic Kernel vulnerabilities — Microsoft disclosed two serious security holes in its own AI agent framework: a prompt-to-shell remote code execution and an arbitrary file write. Patched versions shipped this month. The lesson Microsoft's own security team put on the page: "Your large language model is not a security boundary. The tools you expose define your attacker's affected scope."
• Why outside eyes matter — In a market this young, every lesson is being learned in real time. Internal teams have seen one network — theirs. Implementation partners with cross-client visibility import pattern recognition you cannot build inside one building. That is what OpenAI just raised $4 billion to industrialize.
• Two moves to make this quarter — Inventory every AI agent framework your teams are running, and what version. Then pressure-test your AI program with one question: "How many other companies have you watched do this?"

The takeaway: The implementation layer is becoming required infrastructure. Not because anyone wants to spend more on consulting. Because the only way to safely operate systems this new is to import the cross-client pattern recognition you cannot build inside one company. You cannot learn this from the inside.

Sources:

• OpenAI Deployment Company announcement, May 15, 2026 — MarketingProfs AI Update
• "When prompts become shells: RCE vulnerabilities in AI agent frameworks" — Microsoft Security Blog, May 7, 2026

The YPO Technology Network AI Brief is a daily, peer-to-peer briefing for CEOs and senior business leaders on what AI news actually means for how you run your company. Hosted by Stephen Forte.

Weekend Special Edition for YPO members. One topic, no rapid fire. This week: the company brain — a permissioned, governed AI memory layer that reads across meetings, email, documents, tickets, and CRM so leaders can finally understand the operating record of the firm, not just the structured slice their dashboard shows.

There is a version of your company that your dashboard cannot see. It lives in meeting transcripts, support tickets, CRM notes, and the language your people use when nobody is assembling the pattern. In the old world, looking at that material sounded like prying. In the AI world, refusing to build a governed memory layer over it starts to look like managerial malpractice.

In this 14–17 minute deep dive, host Stephen Forte makes the CEO/operator case for the company brain and draws a clear line between operating intelligence and surveillance:

• What the company brain actually is, in plain English — RAG, vector search, knowledge graphs, GraphRAG, and the MCP connector layer
• Why every major platform is converging on the same pattern — OpenAI Company Knowledge, Microsoft 365 Copilot, Google Gemini Enterprise, Claude Enterprise Search, and Glean
• The governance line — the company brain should be a permissioned window, not a skeleton key, with disclosure, role-based access, retention limits, and audit logs
• Real reference points — Klarna's internal assistant Kiki, Morgan Stanley Wealth Management's OpenAI-powered advisor tool, and Moderna's company-wide AI deployment
• What the UK ICO, the FTC, and NIST already say about employee monitoring and AI confidentiality

Four moves for Monday morning:

• Inventory the corpus — list every system where company memory lives
• Pick three questions worth answering — account health, project drift, sales-to-delivery handoff, or your three
• Build the permission model before the pilot, not after — governance is the product
• Require citations on every answer that touches an operating decision

If a vendor cannot tell you in one sentence how their system inherits your source-system permissions, that vendor is not ready for your company. Walk them politely to the elevator.

This is the YPO Technology Network AI Brief weekend edition — peer-to-peer, CEO-grade, and built for members running $13M+ companies who want the perspective before the next executive committee meeting.

Subscribe and listen at the YPO Technology Network AI Brief on RSS.com.

Social Capital published an AI agents primer this month that walks the architecture of the agent stack. One section in it is genuinely important and almost nobody is measuring it yet: Hidden Human Cleanup Costs. Stephen reads that finding as the line item your AI vendor invoice is not showing you — and the lever you have on your next renewal.

What's covered

• How agents fail differently than traditional software — not with red error boxes, but with confident wrong answers, false-assumption actions, and quietly abandoned tasks that compound through fifteen steps of a workflow before anyone notices
• The cleanup math — diagnosis, impact analysis, rebuild, restart. At $50–$200 per hour fully loaded, a 5% intervention rate on 10,000 monthly tasks runs over $200,000 a year per agent. Off invoice.
• The Amazon Q examples as the cleanest public data — December 2025's 13-hour AWS-China outage from an autonomous production-environment deletion, March 2026's 120,000 lost orders and 1.6 million errors, and the separate incident days later that dropped 99% of North American marketplace orders for six hours
• The spookier number from the March 2026 Claude Code source leak — 1,279 sessions with 50+ consecutive failures wasting roughly 250,000 API calls per day at one of the best-resourced AI labs in the world
• The one-question test for vendor evaluation — "What is your intervention rate per hundred tasks?" plus "What is the average cleanup cost per intervention?" Get both answers in writing before any renewal.

The thesis: The vendors who minimize human cleanup costs are the ones who will justify their economics in production. The vendors who do not are running pilots. They just call them products.

The challenge: Pull your current intervention rate by agent and by workflow this week. If your team cannot tell you, you do not have an agent program — you have a science project. The cleanup cost line item is the leverage you have on your next renewal. Most CEOs are not using it yet.

The YPO Technology Network AI Brief is hosted by Stephen Forte for YPO members and senior operating leaders.

There are two workforces inside your company right now, and the gap between them is widening every quarter. Writer's 2026 AI Adoption Survey found that super-users save 4.5x more time, are 5x more productive, and are 3x more likely to be promoted with a raise compared to their non-adopting peers. Same job title. Same company. Same tenure. Stephen makes the case that this is not a productivity bump — it is a different employee — and that the historical PC adoption analog (which took 15 years to show up in productivity statistics) is the wrong mental model. This cycle is moving in months, not decades.

What's covered

• The hard data — Writer's April survey on super-users, Gallup's 50% adoption number, Microsoft's 22-point critical thinking lift when managers model AI use, and the executive numbers nobody is saying out loud (77% will not promote non-adopters, 60% are planning layoffs of AI refusers, 92% cultivating an AI elite)
• What the adopters are actually doing differently — not "they use AI more." They have internalized a different mental model of work. Decomposition, iteration, critical evaluation. The thinking skill, not the software skill.
• Why the PC analog is misleading — Solow's 1987 productivity paradox took 15 years to resolve. That slow burn was a gift. This cycle is opening gaps in months. The story of a software engineer in his late twenties being measurably outpaced by 23-year-olds who design their workflow around AI from the first keystroke.
• Three moves CEOs should make as a sequence — (1) elevate the adopters now into broader scope and role redesign, (2) replace generalized AI training with workflow-specific 1:1 coaching that sits next to each employee and shows them what AI does for THEIR Tuesday morning, (3) be honest with the small percentage who will not adapt
• A note on what this is not — AI fluency is a skill, not a personality test. Most people can acquire it. The bifurcation is between the curious and the refusers, not the brilliant and the average.

The thesis: This is not about whether AI is the future. That argument is over. This is about whether your company elevates the adopters, trains the curious, and is honest with the refusers — or protects the resisters until it cannot afford to anymore.

The challenge: Walk the floor this week. Have a real conversation with one super-user about how they work now. Have a real conversation with one refuser about what they think is going to happen. The data you collect on those two walks will tell you more about your company than any AI strategy deck.

The YPO Technology Network AI Brief is hosted by Stephen Forte for YPO members and senior operating leaders.

A week ago Tuesday, OpenAI silently swapped the default ChatGPT model from GPT-5.3 Instant to GPT-5.5 Instant. Most enterprises did not notice. Their sensitive workflows ran on a different model at lunchtime than they did at breakfast — with a different hallucination profile on legal, medical, and financial outputs — and nobody at the C-level was told. Stephen reads the default swap as the cleanest test of where your company sits on a much larger divide: PwC's finding that 74 percent of AI's economic value is being captured by 20 percent of companies.

What's covered

• What actually changed on May 5 — GPT-5.5 Instant becomes default, GPT-5.3 phased out for paid users in 90 days, real benchmark improvements on hallucination in sensitive domains, and the parallel rollout of GPT-5.5-Cyber for vetted teams
• The three-question test — which model is our team on, when did it last change, did anyone evaluate the new one against our workflows. If you cannot answer all three quickly, you are in the 80%.
• The core reframe — two ways a company can relate to AI right now. Consume it as a feature (whatever's in the chat box is what you run) or run it as infrastructure (versioned, evaluated, governed). The 74/20 divide is not about adoption. It is about posture.
• Three concrete moves the leaders are making — version-controlling the model stack, running an evaluation harness on sensitive workflows, and picking growth use cases on purpose rather than productivity use cases by accident
• The GPT-5.5-Cyber footnote — why specialty AI procurement is starting to look like the Pentagon's procurement (callback to S1E60), and what that means for the commodity tier most enterprises are buying without realizing it

The thesis: The companies that noticed last Tuesday's default swap are running infrastructure. The companies that did not are running a chat box and hoping. That is not a tools problem. That is the whole problem.

The challenge: One engineer, one evaluation harness, one person whose job description includes "tell me when the model changed." That is the gap between the 20 percent and the rest. Run the three-question test this week.

The YPO Technology Network AI Brief is hosted by Stephen Forte for YPO members and senior operating leaders.

On May 1, the Pentagon signed agreements with eight frontier AI labs — SpaceX, OpenAI, Google, NVIDIA, Reflection, Microsoft, Amazon Web Services, and Oracle — to deploy models on Impact Level 6 and 7 classified networks. Most of the press read it as a defense story or a politics story. Stephen reads it as the procurement playbook most enterprises haven't built yet.

What's covered

• What the Pentagon actually structured on May 1 — eight vendors named, Impact Levels 6 and 7, the $200M Google contract from 2025, the separate $500M Scale AI deal, and Oracle added on the day of the announcement
• Three things the Pentagon got right — multi-vendor sourcing against a single capability scope, use restrictions written into the contract rather than into policy, and an expandable framework rather than a fixed roster
• Why Anthropic ended up frozen out — the use-case restrictions they refused to remove, the supply-chain risk classification that followed, and what their absence teaches operators about vendor-customer values alignment
• Three operator moves for your own AI vendor stack — pull the real list, classify by workflow class not by product, and put use-case scoping into the contracts at renewal
• Why compute reliability is what makes vendor optionality possible in the first place

The reframe: Most enterprises are running a roster. The Pentagon built a framework. One bar, one contract template, multiple vendors qualified, workloads portable. New vendor signs, gets in. Old vendor falls behind, gets de-prioritized without a renegotiation.

The challenge: Probably three weeks of work to build a vendor stack that survives the next model release without an emergency board meeting. The Pentagon did the procurement work at signing time. You can do it at renewal time. Cheaper either way.

The YPO Technology Network AI Brief is hosted by Stephen Forte for YPO members and senior operating leaders.

Anthropic's annual conference last week shipped enterprise infrastructure rather than another headline model — Managed Agents, multi-agent orchestration, outcomes-as-rubric, a memory feature called dreaming, and a serious compute expansion. Most of the coverage reads like a product launch recap. Stephen reframes it as a P&L event and walks through the three-stage method for turning announcements like these into a workflow change a CFO will defend in the budget cycle.

What's covered

• What Anthropic actually shipped — Managed Agents, multi-agent orchestration, outcomes (rubric-based self-checks), the dreaming memory feature, and why the compute expansion is the silent variable that turns a fragile experiment into a budget line
• Why most enterprise AI rollouts stall — not a model problem, a sequencing problem
• Stage one — Build the bad version in Perplexity Computer. Three patterns that show up almost every time: the order is wrong, the agent reads the instruction differently than you wrote it, and the QA step belongs at every stage rather than the end
• Stage two — Run it manually for two weeks with a senior person in the loop and a daily two-line journal that becomes the operating manual
• The handoff — How Perplexity Computer writes the spec as markdown while you iterate, and how that markdown folder seeds Anthropic's Managed Agents with light tweaks rather than a rewrite
• Stage three — Move the hardened version into a managed environment with long-running sessions, scoped permissions, persistent memory, and an audit trail

The thesis: Use Perplexity Computer, or a tool like it, to learn the workflow. Use Anthropic Managed Agents, or one like it, to run the workflow. Two different tools for two different jobs. Discover, then operate.

The challenge: Pick one workflow this quarter — reconciliation, expense triage, sales-order processing, customer onboarding, ticket routing. Build the bad version in a flexible environment over a week. Run it for real for two weeks. Then harden it into a managed environment built to run it every day. Ninety days, end to end. One workflow, demonstrably cheaper, faster, or more accurate than it was the quarter before.

The YPO Technology Network AI Brief is hosted by Stephen Forte for YPO members and senior operating leaders.

Weekend Special Edition. The Saturday deep dive on secrets management for AI agents — the unglamorous infrastructure decision that determines how big your blast radius is when something goes wrong. Stephen walks through the BuildClub stack, the patterns we use with clients, and the specific mistakes that cost companies the most.

The single thesis: Treat your agents like employees, not like scripts. Give them an ID. Give them the minimum access they need. Write down what they have. Revoke it when they leave. Same playbook you already run for humans.

What you will get out of this episode:

• Why the over-provisioning trap is universal — and why it is not a careless-developer problem
• The two angles for production deployment: corporate identity in your tenant, and giving the agent its own user account
• How to structure your secrets vault so a single leak does not own the whole company
• Where to keep the seed credential — and why GitHub Actions secrets plus OIDC federation beats a static admin key
• OAuth 1 vs OAuth 2 vs static API keys, explained for a non-technical audience
• The two practical disciplines that matter most: rotation and revocation
• BuildClub's offline-first build pattern and why it gives client IT a precise ask instead of a fuzzy one

Vendors and tools mentioned:

• Infisical — open-source secrets management; what we run at BuildClub
• 1Password Service Accounts — solid alternative if your org already runs 1Password
• Microsoft Entra Agent ID — first-class identities for AI agents in your tenant
• GitHub Actions OIDC — short-lived cloud credentials, no long-lived keys
• GitGuardian — automated secret scanning across your repos

The two-thing close: If I were sitting in your seat this quarter, I would (1) pull the list of every agent, automation, and integration in your company that holds a credential — just the list, not a project — and (2) rebuild one workflow the right way as the template for everything that follows.

Listen. Share with a fellow member who is shipping their first agents. Stay sharp.

Hosted by Stephen Forte, CEO of BuildClub. The YPO Technology Network AI Brief is a daily podcast for CEOs and senior business leaders.

Earlier this week, we talked about inference getting cheaper. Today is the other half of the story: AI may be getting cheaper to run, but it is not getting simpler to install inside a real company.

OpenAI and Anthropic are both moving deeper into enterprise AI services. The strategic lesson is not the deal structure. It is the admission: the hard part is no longer only the model. The hard part is understanding how work actually happens inside companies.

In this episode, Stephen Forte explains why the best AI deployments start with workflow archaeology: interviewing the people doing the work, mapping repeated task patterns across teams, finding where humans act as middleware between machines, and building agents around shared work instead of individual job titles.

Key takeaways:

• Do not start with, “What agent should we build?” Start with, “What work is actually happening?”
• The unit of analysis is not the employee. It is the task pattern.
• Many companies have seven people doing the same 20 percent of work in different departments.
• Measure agents by output: transactions handled, files normalized, exceptions routed, cycle time reduced, and human review required.
• AI adoption is a migration, not a rip-and-replace transformation.

The future is not one bot per employee. It is a new operating system for the business, assembled from the real work people already do.

Sierra closed a $950 million round at a $15.8 billion valuation, led by Tiger Global and GV with Benchmark, Sequoia, Greenoaks and others. Eight months ago the company was valued at $10B. The reason for the step-up is not a keynote demo. It is revenue: $100M ARR in November, $150M by early February, and a customer list that includes Cigna, Prudential, Blue Cross Blue Shield, Rocket Mortgage, SoFi, Ramp, Discord, Rivian, Sonos, and Wayfair.

Stephen Forte's read: customer service is the first enterprise workflow with a billion-dollar AI receipt attached, and the part your CFO should underline is the pricing model, not the round size.

In this episode:

• Why outcome-based pricing changes every line item in your stack
• How a single agent across phone, IVR, chat, WhatsApp, email, and 34+ languages becomes the wedge into your front office
• Why the contact center stops being a cost line and becomes a competitive surface
• Three CFO-grade moves this quarter: model a 30-60% per-contact cost reduction in the 2027 plan, put outcome pricing in every contact-center RFP, separate brand-defining calls from payroll-consuming calls
• The honest caveats: a $15.8B valuation on $150M ARR is a huge multiple, ARR is not profit, and we have lived through chatbot hype before, but the customer list is different this time

The contact center stopped being just a cost center this week. It became a competitive surface. Treat it like one.

Anthropic is reportedly finalizing a roughly $1.5 billion joint venture with Blackstone, Hellman & Friedman, Goldman Sachs, and General Atlantic to deploy Claude across private-equity portfolio companies. Three weeks earlier, OpenAI was reported to be backing a parallel vehicle with TPG, Bain Capital, Advent, and Brookfield. Same plot, different cap tables.

Stephen Forte's read: the frontier labs are not just shipping models anymore. They are buying distribution, because the last mile of enterprise AI is harder than the demos made it look.

In this episode:

• What the Wall Street Journal reported and who is putting in what
• Why benchmarks do not solve the integration problem: old ERPs, custom CRMs, and the three Karens with the spreadsheets
• What PE-backed CEOs should expect from the value-creation team in the next twelve months
• Why the service layer, not the model, is becoming the lock-in layer
• Three things to do this quarter: ask the sponsor, write portability into every contract, double down only where proprietary data creates advantage

The labs are not just selling models anymore. They are buying customers. The CEOs who notice early get to negotiate. The ones who do not get assigned.

For eighteen months the story has been the same. AI is expensive, and getting more expensive. That story has inverted. The price of using AI, not building it, is collapsing, and most of your vendors are quietly hoping you do not notice.

In this weekday brief, Stephen Forte teaches the single most important distinction in AI economics, walks through four pieces of evidence in eleven days that the price floor is cracking, and gives you three concrete moves for the contracts already sitting in your legal folder.

What you'll learn:

• Training vs. inference. Training is medical school. Inference is every patient visit for the next forty years. Inference is north of ninety percent of what you actually pay.
• The chip split. Google announced TPU 8t for training and TPU 8i for inference on April 22. Nvidia, AMD, and AWS Trainium/Inferentia are all moving the same direction. F1 cars vs. delivery vans.
• The Nebius/Eigen deal. On May 1, Nebius paid $643M for a startup that does one thing: makes AI run inference faster and cheaper. Three months earlier they bought Tavily for $275M. Same theme.
• DeepSeek V4 (April 24). An open-weight Chinese model claims to close the gap with frontier reasoning at a fraction of the cost. Western vendors will discount or explain why they aren't.
• Anthropic at $900B. A $50B round only pencils if inference economics work at industrial scale. That is the bet.
• Models are splitting too. Frontier models are neurosurgeons. Distilled models (Haikus, Minis, Nanos) and mixture-of-experts architectures are nurse practitioners — 95% of the visits at 10% of the cost.

Three moves for this week:

1. Pull every AI vendor contract signed in the last eighteen months. Find the inference pricing line (per token, per request, per seat).
2. Ask your CIO: what percentage of our AI workload could run on a smaller or distilled model? The honest answer is north of seventy percent.
3. Open the renegotiation conversation now. Not at renewal. Vendors fighting for share will move on price.

The training story made the headlines. The inference story makes the budget. For eighteen months you have been the seller's customer. As of last week, you are the buyer.

Sources:

• Bloomberg — Nebius Agrees to Buy Startup That Makes AI Run Faster, Cheaper (May 1, 2026)
• TechCrunch — Google Cloud launches two new AI chips to compete with Nvidia (April 22, 2026)
• TechCrunch — DeepSeek previews new AI model that closes the gap with frontier models (April 24, 2026)
• Bloomberg — Anthropic Weighs Funding Offers at Over $900 Billion Valuation (April 29, 2026)

Google is selling the enterprise agent control plane from the top down. Employees are building the AI workforce from the bottom up.

In today's YPO Technology Network AI Brief, Stephen Forte connects those two moves and explains why CEOs need to stop asking which model is best and start asking who governs the work.

Stories covered:

• Google's push to make Gemini Enterprise the control plane for enterprise AI agents
• Why agent governance is becoming a board-level operating question
• Writer's 2026 enterprise AI adoption data on AI elites, non-adopters, and shadow AI
• Gallup and HBR signals showing that employees are already building AI leverage from the bottom up

The CEO takeaway: the model is not the moat. The operating system around the model is.

Sources: Reuters, Writer, Gallup, Harvard Business Review.

An AI coding agent at Amazon was given a bug to fix. It found a solution. It deleted and recreated the entire production environment.

That is not the interesting part. The interesting part is Amazon's explanation: this was not an AI failure. It was user error, specifically misconfigured access controls. In the narrow technical sense, Amazon was right. Which is exactly the problem.

This shorter weekend edition focuses on the real enterprise lesson: agents don't go rogue. They inherit. They inherit permissions, approval paths, stale documentation, and identity from systems that were built for humans.

Key ideas in this episode:

• IAM, in plain English: identity and access management is the permissions system companies use to give rights to people, machines, services, and now agents.
• Permission inheritance: if an agent runs inside a human engineer's session, the authorization system may see only the human's authority.
• Knowledge inheritance: agents can industrialize stale wikis and outdated internal process docs at machine speed.
• Identity inheritance: if agents lack separate identities, audit logs compress machine decisions into human actions.
• Cost as the warning light: API retry storms and runaway compute are often control failures before they are AI failures.

The practical question for leaders: where can an agent inherit a human's permissions, stale knowledge, human-only approval paths, or an audit identity that hides the machine?

Sources:

• Breached.Company — Kiro incident analysis
• Barrack.ai — Amazon AI deleted production analysis
• CRN — AWS official Kiro response
• Fortune — Amazon retail incidents
• AWS — Agent Registry launch
• RocketEdge — agent cost incidents

Hosted by Stephen Forte.

The honeymoon era of enterprise AI is over. Three stories landed this week that change the conversation in your boardroom from whether to do AI to how much it will cost you, who you will buy it from, and what the geopolitical risk looks like.

In this episode:

• Microsoft and OpenAI restructure the most lucrative partnership in tech. Exclusivity is gone. OpenAI can sell on AWS within weeks, Google likely next. The real shift is architectural — Azure for stateless API calls, AWS for stateful agents — and what it means for the model decisions every CIO now has to make per workload.
• Tokenmaxxing is detonating cost structures. Uber exhausted its entire 2026 AI budget before May. Anthropic billed one user a hundred-fifty-thousand dollars in a single month. The killer insight: most token bills aren't a vendor problem, they're a model selection problem — and that decision happens at the prompt layer, not the procurement layer.
• China blocks Meta's Manus deal. Beijing's NDRC ordered Meta to unwind a two-billion-dollar acquisition with no justification. Singapore-washing is dead. If you have any cross-border AI M&A on your roadmap, your diligence playbook just changed.

What I'd do this quarter: Re-open every multi-year Azure AI commitment signed under exclusivity assumptions. Name an AI FinOps owner with hard kill switches at the API layer. Reassess any cross-border AI M&A based on origin of talent and IP, not legal domicile.

Sources:

• Microsoft — The next phase of the Microsoft-OpenAI partnership
• VentureBeat — Microsoft and OpenAI gut their exclusive deal
• Pragmatic Engineer — AI token spending out of control
• New York Times — Tokenmaxxing
• GitHub — Changes to Copilot individual plans
• TechCrunch — China vetoes Meta's $2B Manus deal
• Reuters — Blocking Meta's AI startup buy raises risk for cross-border China tech deals

Meta installed monitoring software on every U.S. employee laptop — keystrokes, clicks, periodic screenshots — to train AI agents that will replicate white-collar work. CTO Andrew Bosworth confirmed there is no opt-out. The same week, Meta confirmed 8,000 layoffs.

Europe blocked the program at the border under GDPR. The United States did not. Stephen unpacks the deeper question every CEO is about to face: every company building internal AI agents needs proprietary training data. Where does yours come from?

Three takeaways for your leadership team:

• Write the one-page workplace-monitoring policy now, before a vendor pitches the line and HR has to react in a meeting.
• Route this to the CHRO, not the CIO. It is a labor question wearing an IT costume.
• Map your proprietary workflow data this quarter. The cost curve on observation has collapsed; the question is what you will not ask for at any price.

Sources:

• Platformer — Casey Newton on Meta's MCI program
• The Lives of Others (2006) — referenced in episode

The YPO Technology Network AI Brief publishes Monday through Friday. Forward to a fellow member if it was useful.

MCP — Model Context Protocol — has gone from a curiosity to enterprise infrastructure in less than a year. Last Friday, the Linux Foundation made it official, formalizing MCP under its new Agentic AI Foundation alongside production integrations from SUSE, AWS, and Fujitsu. Translation: it is now the standard your engineers are building on.

In this episode, Stephen Forte explains:

• What MCP actually is — the USB-for-AI analogy, in plain language, no developer experience required
• Why it became default — Anthropic, OpenAI, Google, Cursor, LangChain, LiteLLM, IBM LangFlow all support it
• Why it cannot be deployed alone — the protocol is open by design, and an open protocol without a wrapper is a powerful electrical outlet with no cover
• The AgentOps layer your team needs — gateway, identity, logging — same pattern as DevOps, new layer of the stack
• Three direct questions to ask your CTO this quarter, and why naming a single owner matters more than convening a committee

Brex (the corporate-card and spend-management fintech) made the point cleanly this week with the open-source release of CrabTrap — a small proxy that watches every HTTP call an agent makes before it goes out. A 306-practitioner study published this month puts the urgency in numbers: 82% of organizations have agents in production or pilot, and the number-one cited challenge is reliability, not capability.

The protocol your engineers are excited about is genuinely useful and genuinely standard. The work of making it safe to operate is a separate budget line and a separate skill set — and it is the price of admission for running this stuff in a real company.

Google retired Vertex AI in a single afternoon and replaced it with the Gemini Enterprise Agent Platform — what Sundar Pichai called "mission control for the agentic enterprise." Stephen Forte argues this is the moment AI agents got an HR system: cryptographic identity, a directory, an access gateway, and a performance review.

In this episode:

• Why Vertex AI is gone — and what the replacement actually does
• The four pillars of the Agent Platform translated into HR terms (hire, deploy, supervise, review)
• The traction numbers Google disclosed: 40% QoQ growth, 8M seats, 2,800 enterprises
• The structural reveal: Anthropic crossed $30B annualized revenue — and is now Google Cloud's largest TPU customer
• Two concrete moves to make this quarter, plus one CEO-mirror question to leave you with

The closing line: The compute will commoditize. The control plane will not.

Sources:

• Google Cloud — Introducing Gemini Enterprise Agent Platform
• ComputerWeekly — Pichai mission-control framing
• Infosecurity Magazine — Kurian zero-trust quote
• Google Cloud Docs — Agent Identity overview
• Business Analytics Review — A2A protocol and Anthropic on TPU

Most AI conversations happening in boardrooms right now are cost conversations — G&A reduction, procurement automation, headcount trimming. This episode takes the opposite angle. Jason Lemkin published the most detailed CEO-authored account of deploying AI across an entire sales and marketing operation, and the result is a growth story, not a savings story: $2.4 million closed, eight humans compressed to 1.2, twenty-plus agents running in parallel, and a monthly software bill under $5,000.

In this episode:

• Why the cost-cutting frame is the wrong frame — and what the growth frame looks like in practice
• How SaaStr structured 20-plus agents as a workforce, each with a job description and a system of record
• The assembly sequence: inbound first, then enrichment and segmentation, then outbound — in that order
• What a machine-readable operating model actually means: 100 distinct segments across 1,000 target contacts
• The senior operator role the stack cannot run without — and why it is not a cost, it is a conductor
• Three companies across three verticals running the same structural move: SaaStr, Pump, and A-LIGN

The stack, layer by layer:

• Salesforce + Agentforce — the CRM spine and AI agent layer that takes actions directly on records
• Qualified + Piper — inbound conversation handling; Piper is the AI sales agent running 24 hours a day on the website
• Clay — data enrichment platform that builds full buyer profiles from dozens of sources
• Artisan — autonomous outbound agent that writes and sends prospecting emails using enriched profiles
• Zapier — workflow orchestration layer connecting CRM, enrichment, inbound, outbound, and Slack
• Claude Opus via Replit — custom strategy layer built on Anthropic's model; runs as an AI VP of Marketing producing the morning brief
• Gamma — AI presentation tool that drafts decks from a brief when agents book meetings

The numbers:

$4.8 million in pipeline sourced first-touch by AI agents. $2.4 million closed from that same source. Team size moved from eight-to-nine humans down to 1.2. Total monthly cost for the connected stack: $2,000 to $5,000.

Source:

Jason Lemkin's original post — the eight-month postmortem that forms the basis of this episode.

The AI Brief is a weekly episode from the YPO Technology Network, covering applied AI for CEOs and senior executives. New episodes every Monday and Friday.

The old salty guy problem. The senior operator who knows everything and is about to walk out the door with fifteen years of judgment. This episode is the framework for capturing what he knows before the fire goes out.

No news cycle coverage today — we pivot to a single-thesis deep-dive on the retiring-expert problem. We introduce The Campfire Protocol, a 7-phase framework for turning tribal knowledge into an operational asset that survives the person.

The stakes. Boeing 737 MAX: $1.6 billion in direct losses traced to lost institutional knowledge. Shell ROCK: $300 to $400 million per year in retained value. NASA, unable to recover its own spacesuit manufacturing expertise, awarded Axiom a $1.3 billion contract in 2022 to rebuild what it had lost.

The 7 phases:

1. CONSENT — the legal and personal permissions
2. CORPUS — every artifact the expert has touched
3. DISCOVERY — structured interviews on decision-making patterns
4. INTERVIEW — recorded, transcribed, tagged ground truth
5. SHADOW — AI watches the expert work for 30 to 90 days
6. HANDOFF — the successor works with the AI for 90 days with the expert available
7. STEWARDSHIP — ongoing maintenance so the knowledge base does not decay

Failure and success cases:

• IBM Watson at MD Anderson — $62 million written off in 2017
• Eudia at Duracell — outside counsel costs cut 50 percent by augmenting, not replacing
• NASA spacesuits — 19-year gap, full rebuild required

Legal anchors: California AB 2602 and SB 683, Tennessee ELVIS Act, Moffatt v. Air Canada (2024), Mobley v. Workday (2025) class cert, iTutorGroup EEOC $365,000 settlement, DDB Technologies v. MLB (2008).

The economics. Annual recurring: $18,000 to $24,000. One-time build: $70,000 to $175,000. Tooling: Guru, Dust.tt, Fathom, Fireflies, AssemblyAI, Microsoft Presidio, ElevenLabs PVC, Delphi.ai, Synthesia, HeyGen, D-ID.

"The campfire does not scale. The campfire goes out."

"You are not cloning a person. You are keeping the fire."

"The goal is to never lose the conversation."

If this was useful, send it to a fellow member. Stay sharp.

The UK government quietly confirmed an AI model just completed the hacking equivalent of a four-minute mile. Eleven of the largest companies on Earth already have a copy. The threat model you were operating under on Friday is not the one you are operating under today.

In this episode:

• What Claude Mythos actually did on AISI's 32-step "Last Ones" test — and why Anthropic's own safety team called it "the greatest alignment-related risk" they've released
• The Roger Bannister four-minute mile analogy — why one lab crossing a capability barrier changes what every other lab believes is possible
• Project Glasswing — the eleven companies with access (AWS, Apple, Cisco, CrowdStrike, Google, JPMorgan, Microsoft, NVIDIA, Palo Alto Networks, Goldman Sachs, Linux Foundation) and the oversight framework that isn't public
• Why your threat model shifted from nation-states to "everyone who has ever been angry at you and kept a copy of something"
• The three-step playbook to ask about by Friday: kill switches (1-10-60 rule, CrowdStrike/SentinelOne/Defender isolation), agentic security platforms reading your logs 24/7, and immutable 3-2-1-1 backups (Veeam, Rubrik, Commvault, AWS S3 Object Lock)
• The CEO mirror — a three-column credential audit to take into your next forum meeting

Key line: "The tool does the skill. The tool does the twenty hours of work. A motivated amateur with a Claude API key and a grudge is now a credible threat."

Cybersecurity used to be a specialist problem. It is now an operational problem. It belongs in the same meeting as insurance and succession.

The YPO Technology Network AI Brief is a daily, peer-to-peer podcast for YPO members (CEOs and Presidents of $13M+ companies) making sense of AI without the hype. Produced by BuildClub.

Welcome to the YPO Technology Network AI Brief with Stephen Forte. Every weekday morning in about ten minutes, Stephen walks you through what actually happened in AI — and what it means for the company you run.

Not the hype cycle. Not the vendor press releases. Just answers, through the CEO lens, with a take.

Weekdays at 6am Eastern. Saturdays, a longer weekend edition.

Follow the show and share it with a fellow member.

Episode summary. Sam Altman says a world-shaking AI cyberattack is coming within twelve months. The proof of concept arrived this weekend: one Roblox download on a personal device triggered a three-company breach that ended with Vercel's source code, GitHub tokens, and NPM publishing keys for sale on BreachForums. Stephen Forté connects the warning, the breach, and the architectural fix most companies have not yet implemented — giving every AI agent, tool, and integration its own machine identity.

Why this matters. AI is no longer a tool sitting next to your business. AI is the attack surface. The new physics is clear: your security perimeter now includes every AI tool used by every vendor of every employee of every customer. The fix is not another seat license — it is plumbing, and your CIO can implement it this quarter.

What this episode covers:

• Sam Altman's Axios interview and why frontier-lab safety data backs the warning — Anthropic's 99% valid zero-day finding rate, and the $2,283 / 20-hour discovery of Chrome CVE-2026-5873.
• The Vercel breach chain of custody: Lumma Stealer → Context.ai OAuth tokens → Vercel mailbox → GitHub + NPM. 580 employee records, undisclosed API keys, sold by ShinyHunters for $2M.
• The GitGuardian 2026 numbers: 28M hardcoded secrets exposed in 2025, AI credentials up 81% YoY, 24,000 unique creds leaked from MCP config files alone.
• The architectural fix: machine identity and agent-level authentication — treating every AI tool, agent, and integration as its own authenticated principal rather than sharing an employee's OAuth token.
• The three questions to take to your CIO and CISO this week.

Key takeaway. The breaches coming in 2026 will not look like the breaches of 2024. The attacker does not need to beat your security team. The attacker walks through three companies on a single thread of inherited AI trust. Identity is the new perimeter — and AI agents need identities of their own.

Hosted by Stephen Forté for the YPO Technology Network.

Episode summary. On February 17, 2026, federal Judge Jed Rakoff issued the first nationwide ruling holding that conversations with consumer AI chatbots are not protected by attorney-client privilege and are fully discoverable in litigation. Six weeks later, the Delaware Court of Chancery used a CEO's deleted AI chat logs as trial evidence in a $250 million earnout dispute. This episode walks CEOs, GCs, and CISOs through what the courts actually held, what it means for your company in practice, and the five specific moves to make this week.

Why this matters. Every prompt your employees type into ChatGPT, Claude, Gemini, or Copilot is now a timestamped, logged document living on a third party's servers under terms that explicitly permit disclosure to regulators and courts. The candor of AI conversations — precisely because employees feel they are thinking in private — makes them disproportionately damaging in discovery. This is the AI wake-up call, and it lands harder than email did in the 2000s or Slack did in the 2010s.

1. United States v. Heppner — No. 25 Cr. 503 (JSR), 2026 WL 436479 (S.D.N.Y. Feb. 17, 2026). Judge Jed S. Rakoff, Southern District of New York. The anchor case. Bradley Heppner, former Chair of GWG Holdings, was indicted for securities fraud allegedly costing investors more than $150 million. Facing a grand jury subpoena, he used the free version of Anthropic's Claude to generate 31 documents analyzing his defense strategy and shared them with Quinn Emanuel. FBI agents seized the documents during a Dallas search warrant. The government moved to compel. Rakoff — calling it "a question of first impression nationwide" — ruled the documents were not privileged on three independent grounds and found they may have even waived privilege over the original attorney-client communications Heppner had pasted into Claude.

2. Fortis Advisors LLC v. Krafton, Inc. — C.A. No. 2025-0805-LWW (Del. Ch. Mar. 16, 2026). Delaware Court of Chancery, Vice Chancellor Will. Krafton acquired Unknown Worlds Entertainment (maker of Subnautica) for $500M up front plus a $250M earnout. When the deal soured, Krafton's CEO used an AI chatbot to draft a "Response Strategy to a No-Deal Scenario" including a "pressure and leverage package" and a "two-handed strategy" combining legal pressure with softer retention offers. The court quoted the AI logs extensively to establish pretextual intent — and noted the CEO's admitted deletion of some logs may "factor prominently" in the damages phase. Civil discovery, not criminal. The reasoning travels.

3. Warner v. Gilbarco, Inc. — No. 2:24-CV-12333, 2026 WL 373043 (E.D. Mich. Feb. 10, 2026). Magistrate Judge Anthony P. Patti. A pro se plaintiff in an employment discrimination case used ChatGPT to prepare filings. The court upheld work product protection on narrow facts — a pro se litigant is the party, FRCP Rule 26(b)(3)(A) protects party-prepared materials, and uploading to an AI tool is not disclosure to an adversary. This is not a circuit split with Heppner (different context, criminal vs. civil, represented vs. pro se), but it is the only counterweight on the books.

4. Morgan v. V2X, Inc. — No. 1:25-cv-01991 (D. Colo. Mar. 30, 2026). Magistrate Judge Maritza Dominguez Braswell. A modified protective order establishing the precise contractual checklist any AI tool must meet before confidential discovery materials can be loaded into it: (1) no training on inputs, (2) strict confidentiality, (3) contractual right to delete. The court acknowledged this effectively bars most consumer AI tools from discovery-sensitive workflows.

5. In re OpenAI Copyright Litigation — S.D.N.Y. Jan. 5, 2026. The court upheld a discovery order requiring OpenAI to produce a sample of 20 million de-identified ChatGPT conversation logs. Confi

Healthy-company layoffs are no longer just a lagging indicator of weakness. In this weekend edition, Stephen Forte argues they can be an early signal of organizational redesign — and explains what mid-market CEOs should do before the pressure shows up in their numbers.

What this episode covers:

• Why this wave of layoffs is different from 2009 and different from the 2023 over-hiring correction
• Why many strong companies are redesigning around new information economics, not just cutting costs
• Why most mid-market firms should not copy Block directly
• The pattern Stephen sees across successful and failed AI adoption efforts
• A practical 90-day playbook for CEOs: pick two workflows, map them properly, run shadow mode, define decision rights, and learn from overrides

Key idea: the real shift is not AI as a tool. It is AI as a change to how context moves, how decisions get made, and what parts of management remain valuable.

If your company is healthy, that is not a reason to delay this work. It may be the best reason to start it.

Stephen Forte explores why AI investments are failing and the answer is not what you think. Drawing on the CIA 1944 Simple Sabotage Field Manual and a landmark 2026 survey showing 29 percent of employees actively sabotage their company AI strategy, he unpacks the invisible resistance destroying AI ROI.

• The CIA Manual: How 80-year-old bureaucratic sabotage tactics are alive and well in your AI steering committee
• The Data: 29 percent sabotage rate (44 percent among Gen Z), plus a 30-point perception gap between executives and employees
• The Failure Landscape: 95 percent of AI pilots deliver zero ROI (MIT), with BCG attributing 70 percent of failure to people, not technology
• The Fear Factor: 89 percent of workers worried about job security, 55,000 AI-related layoffs in 2025
• The Spectrum of Resistance: From overt refusal to invisible pretenders, plus the vicious cycle that makes sabotage look like technology failure
• The Solution: Champion networks achieve 3x implementation success. Find the domain experts already using AI on their own

Key insight: The programming language of this era is English. The real skill is domain expertise. Find your champions, reward them, and let your laggards self-select out.

Sources: Writer/Workplace Intelligence 2026 Survey, MIT NANDA Initiative, BCG, RAND Corporation, ADP Research, Aalto University, CIA Simple Sabotage Field Manual (1944)

Today, one thread ties together a thousand layoffs at Snap, a survey showing the majority of C-suite leaders admitting AI is fracturing their organizations, and Molotov cocktails thrown at a tech CEO home. That thread is the cost of what you, as a leader, have not yet said.

• Snap cuts 1,000 jobs (16% of workforce) citing AI productivity. CEO Evan Spiegel was direct. Most CEOs have not been.
• Writer 2026 survey of 2,400 executives: 54% of the C-suite say AI is tearing their company apart. 97% deployed agents, only 29% see ROI. 35% cannot shut down a rogue agent.
• Physical attacks on AI leaders: Molotov cocktails at Sam Altman home, 13 bullets through an Indianapolis councilman front door over a data center vote.

The thesis: Having no AI policy is a policy. You are just letting fear set it for you.

Hosted by Stephen Forte.

Every adoption metric just crossed the line — and the line turns out to be behind us. Three stories about AI adoption outrunning governance at a pace no one predicted.

Stories covered:

• The 50% Line — Gallup's Q1 2026 workplace survey of 23,717 employed adults finds 50% now use AI at work, up from 46% last quarter. But only 41% of organizations have formally integrated AI — meaning roughly 14 million American workers are using AI tools their employer hasn't approved or secured.
• CyberStrikeAI: 600 Firewalls in 5 Weeks — A free, open-source AI tool autonomously compromised 600+ Fortinet FortiGate firewalls across 55 countries. No zero-day vulnerabilities needed — just exposed management interfaces and weak authentication. The barrier to autonomous cyberattack just dropped to zero dollars and a laptop.
• 96% Agents, 12% Governed — OutSystems surveyed 1,900 IT leaders: 96% are already using AI agents in production, but only 12% have centralized governance. Gartner forecasts 40% of enterprise applications will include task-specific agents by end of 2026, up from 5% in 2025.

Action items:

• Ask your CISO about exposed management interfaces and single-factor authentication gaps — today, not next quarter
• Find out what percentage of your workforce is using AI tools IT hasn't provisioned
• Count your agents — if nobody can give you a number, that is the number that matters most

Hosted by Stephen Forte. New episodes weekdays.

Three stories about how AI companies stopped competing on capability and started competing on leverage — and what the squeeze means for every CEO writing checks right now.

Stories covered:

• Musk's Grok Toll Booth — The New York Times confirmed Elon Musk is requiring every bank advising the SpaceX IPO to purchase Grok enterprise subscriptions. Goldman Sachs, JPMorgan, Morgan Stanley, and others have committed tens of millions. Not because Grok won a bake-off — because the alternative is losing access to $500M+ in advisory fees from a $50B+ raise.
• GPU Prices Surge 48% — The Ornn Compute Price Index shows Nvidia Blackwell GPU rentals now cost $4.08/hour, up from $2.75 eight weeks ago. Half of planned 2026 data center builds are delayed — not by chips or capital, but by 5-year lead times on high-voltage electrical transformers.
• OpenAI Kills Sora — OpenAI is discontinuing its video generation tool with roughly six months notice. A Futurum Group survey found 61% of enterprises cite OpenAI as their primary generative AI platform — raising hard questions about single-vendor dependency.

Action items:

• Lock in compute contracts before the next price jump
• Build optionality into your vendor stack before a deprecation notice forces your hand
• If 40%+ of your AI workloads run on a single vendor, draft a migration playbook now

Hosted by Stephen Forte. New episodes weekdays.

Three stories exploring the gap between what we believe and what the data shows in AI.

• Anthropic Mythos / Project Glasswing — An AI model too dangerous to release is now controlled by eleven handpicked organizations and the White House. That is not a safety framework. That is a guest list.
• OpenAI Acquires TBPN — OpenAI spent hundreds of millions to buy a podcast. It reports to their chief political operative. The sole financial relationship is now OpenAI. When you cannot control the narrative through technology, you buy the megaphone.
• AI Coding Quality Collapse — Six independent studies converge on the same finding: AI-generated code has more bugs, and developers using it believe they are faster when they are actually 19% slower. The 39-point perception gap is the largest ever documented.

Weekend Special Edition | Saturday, April 11, 2026

Anthropic launched Claude Managed Agents in public beta on April 9, 2026. The infrastructure problem that was killing enterprise agent projects between prototype and production is now a managed service. This episode goes deep on what changed and what to do about it.

What we cover:

• Claude Managed Agents: four core capabilities — secure sandboxing, long-running autonomous sessions, multi-agent coordination (research preview), and a full governance layer. Pricing: standard token rates plus $0.08/session-hour.
• The three-agent harness: Planner expands your 1-4 sentence prompt into a full product spec. Generator builds in sprint rounds. Evaluator interacts with the live application via Playwright — clicking through UI, testing API endpoints, checking database states — and grades output against calibrated thresholds, running 5-15 iteration cycles until complete.
• The context problem solved: externalized state via JSON specs, progress logs, and git commits rather than in-context memory. The Ralph Loop prevents premature completion claims.
• Early adopters: Notion, Asana, Rakuten (10x faster agent delivery, 22-point task success improvement), Vibecode.
• The five-point executive playbook: find your stalled agent project, scope by workflow not AI capability, separate generators from evaluators in every AI process, design governance before scaling, get on the multi-agent coordination waitlist at claude.ai.

Hosted by Stephen Forte, YPO Tahoe Integrated, YPO Miami Gold, YPO London Gold

OpenAI published a 13-page policy paper on April 7, 2026 — the same morning The New Yorker published a 1.5-year investigation into Sam Altman's trustworthiness on AI safety. This episode reads OpenAI's proposals not as forward-looking policy, but as a pre-apology for disruption that is already underway and already documented.

In this episode:

• What OpenAI is actually proposing: a four-day work week, a Public Wealth Fund, a robot tax, worker voice mechanisms, and mandatory AI safety auditing
• How each proposal maps to a specific, documented harm — including 60,000 job cuts in March alone and $852 billion in AI-driven capital concentration
• OpenAI's two-year lobbying record against the exact safety policies the paper now endorses
• The timing collision: the policy paper and the New Yorker investigation dropped on the same day
• Who is funding the D.C. think tanks that will define responsible AI policy
• A closing question for every CEO: could your company write the equivalent internal document?

Sources:

• OpenAI — Industrial Policy for the Intelligence Age
• TechCrunch — OpenAI's vision for the AI economy
• Fortune — Sam Altman says AI needs a New Deal

About the show: The YPO Technology Network AI Brief is a daily podcast for YPO members — CEOs and company presidents — covering AI developments with direct business impact. Hosted by Stephen Forte.

One Employee Destroyed a Warehouse. Now Imagine Your Network. | April 9, 2026

A Kimberly-Clark warehouse in Ontario, California is gone — 1.2 million square feet, total loss — because one employee had access, motive, and fuel that was already in the building. This episode traces that pattern from the physical world into the digital: 500,000 tech layoffs coming this year, the SolarWinds supply chain attack explained, and last week’s AI-era version of the same breach — 40 minutes, three major AI labs in the blast radius simultaneously.

What we cover:

• The Ontario warehouse fire: Chamel Abdulkarim, 29, arrested on felony arson charges after destroying a 1.2M sq ft Kimberly-Clark distribution center serving 50 million people
• The layoff fuse: 78,557 tech cuts in Q1, 9x increase forecast this year — every departing employee walking out with system knowledge, credentials, and potentially still-active access
• SolarWinds explained: Russian intelligence spent 14 months inside US government networks — Treasury, Homeland Security, State, DOE — through a trusted update that 18,000 organizations installed voluntarily. $90M+ recovery. First CISO ever charged by the SEC.
• AI’s SolarWinds: LiteLLM poisoned on PyPI for 40 minutes, cascading to Mercor — supplier to OpenAI, Anthropic, and Google simultaneously — 4TB claimed stolen
• Three actions: offboarding access audit, AI supply chain dependency monitoring, AI-powered log monitoring

Key data:

• 1.2M sq ft warehouse, total loss — one person, no specialized skills
• 78,557 Q1 tech layoffs | 47.9% attributed to AI | 9x increase forecast 2026
• SolarWinds: 18,000 orgs | 14 months undetected | $90M+ recovery | 11% avg revenue impact
• LiteLLM attack: 40 minutes active | all 3 top US AI labs in blast radius | 4TB claimed
• IBM X-Force: 4x increase in supply chain attacks since SolarWinds

Sources:

• LA Times: Kimberly-Clark Warehouse Fire
• Tom’s Hardware: Q1 2026 Tech Layoffs
• Breachsense: SolarWinds Case Study
• Mercor/LiteLLM Breach
• Mandiant: SolarWinds SUNBURST Analysis

Hosted by Stephen Forte, YPO Tahoe Integrated, YPO Miami Gold, YPO London Gold

The Citizen Hacker | April 8, 2026

Anthropic built an AI model so capable at finding security vulnerabilities that it cannot be released to the public. Claude Mythos Preview has already found thousands of high-severity flaws in every major operating system and browser, including a 27-year-old bug that survived decades of expert review. This episode unpacks what that signals about corporate security today, introduces the citizen hacker, and closes with five specific moves every company needs to make before this month is out.

What we cover:

• The model Anthropic won't release: what Claude Mythos found, and what it means that it found these flaws entirely autonomously
• The reality check: 94% of passwords reused, breaches taking 328 days to detect, hackers paying employees up to $15,000 for network access
• The citizen hacker: how vibe coding's mirror image is already attacking companies at scale
• The five moves: credential audit, AI log monitoring, agent governance, behavioral monitoring, continuous patching

Key data:

• 74-95% of breaches involve the human element (Verizon / SentinelOne 2025)
• Average credential breach detection: 328 days
• Time-to-exploit: negative one day (Mandiant 2025)
• Insider risk: $19.5M per organization annually (Ponemon 2026)
• Attacker breakout time: 29 minutes, down 65% (CrowdStrike 2025)
• Global ransomware damage: $74 billion in 2026 (Cybersecurity Ventures)

Sources:

• Anthropic Project Glasswing
• Secureframe 2026 Data Breach Statistics
• Mandiant: Negative Time-to-Exploit
• Ponemon/DTEX 2026 Cost of Insider Risks
• Forrester: Vibe Hacking and No-Code Ransomware
• Cybersecurity Ventures: Ransomware Damage 2026

Hosted by Stephen Forte, YPO Tahoe Integrated, YPO Miami Gold, YPO London Gold

This episode of the YPO Technology Network AI Brief, hosted by Stephen Forte, maps the agent explosion happening across every major enterprise platform — and explains why the right move is neither consolidation nor inaction.

Key topics covered:

• Why Salesforce, Notion (21,000+ custom agents), Jira, Zoom, monday.com, and Asana all shipped autonomous agents in the same quarter
• The governance crisis: 3M+ corporate AI agents in deployment globally, with only 47% monitored
• Scenario: Velocity Digital (400-person agency) discovers 31 unauthorized agents running for six weeks
• The experimentation thesis: why picking one agent now is the wrong move
• Scenario: Meridian Financial's 90-day, $180K experiment generates a projected $2.1M annual productivity gain
• Four structural differentiators: model flexibility, local access, data connectivity, and governance surface
• Arthur AI's Agent Discovery platform as an early governance response

Quotable close: "The window for informed experimentation is roughly 90 days before market consolidation starts making the decision for you."

Hosted by Stephen Forte for the YPO Technology Network.

In this episode of the YPO Technology Network AI Brief, Stephen Forte examines Microsoft's multi-model Copilot rollout — one of the most substantive architectural changes in enterprise AI this year. The episode covers what's deploying now, what goes generally available May 1, and why the gap between Microsoft's installed base and active usage is a change management problem, not a technology problem.

Key topics covered:

• Multi-model Copilot: Critique and Council modes — GPT and Claude reviewing each other's work, producing a 13.8% improvement on the DRACO research benchmark; Council mode runs multiple models in parallel and synthesizes where they agree and diverge
• Copilot Cowork and Agent 365 — long-running agentic work that continues after you close the browser, currently in the Frontier program with Capital Group; Agent 365 goes GA May 1 at $15/user/month
• The adoption gap — Microsoft has 400 million installed users but only 15 million paid Copilot seats (3.3% penetration); of those, only 35.8% are actively using the product versus ChatGPT Enterprise's 83.1% activation rate
• Copilot Studio model marketplace — April GA brings a platform where enterprise developers can orchestrate Claude, GPT, and Grok models against internal data via Fabric integration and the Agent-to-Agent protocol

Pricing referenced:

• Agent 365: $15/user/month (GA May 1)
• Microsoft 365 E7 bundle (E5 + Copilot + Agent 365): $99/user/month (GA May 1)
• Copilot enterprise: $30/user/month; SMB: $21/user/month

Hosted by Stephen Forte for the YPO Technology Network.

This week's episode goes deep on one of the most consequential hiring decisions in your organization right now: who should be leading your AI transformation — and why the instinct to hire a senior technology executive is almost certainly wrong.

Key topics covered:

• Why 88% of companies using AI are seeing almost no return on the investment
• The failure pattern: AI pilots that run for 18 months and never touch a real workflow
• BCG's 10-20-70 rule — why 70% of AI value comes from process change, not the algorithm
• IBM Watson Health: a $62 million cautionary tale about the wrong kind of leadership
• The AI Operating Partner model emerging in private equity
• The "anchor employee" hiding in your organization
• The citizen developer revolution: Accenture's 50,000 internal builders
• The constellation model vs. bloated enterprise platforms
• Governance that keeps it from becoming shadow IT chaos

Host: Stephen Forte

In this episode, Stephen Forte explores how enterprise AI is coming full circle — from the cloud back to the enterprise.

• Open-source models match frontier: Five independent model families now match or beat closed models on standard benchmarks. A fine-tuned 3.8B model outperformed GPT-4o on financial NLP at 28x lower cost.
• Hardware makes local AI practical: Apple Mac Studio runs 671B-parameter models for $14K. NVIDIA Project DIGITS handles 200B parameters for $3K. On-premise inference costs $0.11/M tokens vs $2.00 cloud — 18x cheaper.
• Mistral Forge and the model-as-asset thesis: Mistral closed $830M in financing, signed Accenture (700K employees), and is on track for $1B ARR. Forge enables enterprises to train custom models on proprietary data.

Sources: Crunchbase, Lenovo TCO 2026 Whitepaper, NIXSENSE Benchmarks, TechCrunch, CNBC, Fortune, Mistral AI, Dell Technologies, Accenture

In this episode of the YPO Technology Network AI Brief, host Stephen Forté examines two stories that together define the current moment in enterprise AI: the private equity joint ventures locking in AI vendor relationships at the fund level, and Dell's transformation into the dominant AI infrastructure provider — told through the lens of a CFO who deploys the same technology his company sells.

This episode is essential listening for any YPO member evaluating AI vendor strategy, infrastructure investments, or governance frameworks for agentic deployment inside their organization.

• OpenAI and Anthropic PE joint ventures — What these deals actually are (capital allocation events, not vendor evaluations), who the partners are, and what the 17.5% guaranteed return signals about OpenAI's distribution strategy
• BCG's 10-20-70 rule — Why the AI model represents only 10% of transformation value, and why PE operating partners are positioned to capture the 70% that matters most
• Vista Equity Partners' Agentic AI Factory — One playbook across 90-plus portfolio companies, and how Gainsight cut its renewal cycle from seven days to one with a 90% drop in churn risk
• Thoma Bravo's walkaway — The strategic logic behind staying out of the JV structure and what it means for platform vs. model selection
• Dell's reinvention arc — From $32 per share in 2022 to a $25 billion AI infrastructure business built on installed-base relationships and the Dell AI Factory with NVIDIA
• The Kennedy model — Dell CFO David Kennedy's first-person account of deploying AI agents across reconciliations, supply chain, and CRM inside his own finance function — without routing through central IT
• What this means for your organization — When AI vendor selection moves from IT evaluation to board mandate, and why deliberate consolidation beats having the decision made for you

Key quotes:

• "That is not confidence — that is a subsidy. OpenAI is paying PE firms to embed its technology in portfolio companies before the enterprise AI market consolidates." — Stephen Forté
• "The model is the commodity. The operating change is the product." — Stephen Forté
• "The fear of being left behind is becoming more powerful." — David Kennedy, CFO, Dell
• "The question is not whether you will operate inside the architecture they are building. The question is whether you understand your position in it — before it is assigned to you." — Stephen Forté

Sources:

• BCG 10-20-70 rule / PE AI survey — Boston Consulting Group framework on where AI transformation value is created and captured
• Fortune: Dell CFO David Kennedy interview — First-person account of agentic AI deployment inside Dell's finance function
• Reuters — Reporting on the OpenAI private equity joint venture structure and terms
• Dell AI Factory with NVIDIA — Full-stack enterprise AI infrastructure platform announced March 2024
• Vista Equity Partners — Agentic AI Factory deployment framework across portfolio companies

California's new AI executive order, the $630 billion infrastructure sprint, and the first enterprise security architecture for AI agents -- three stories, one uncomfortable thread.

Stories covered:

• California's AI Executive Order -- Governor Newsom signs first-of-its-kind requirements for AI companies contracting with the state, including privacy, security, and watermarking mandates
• The tort lawyer playbook -- How ADA website accessibility lawsuits (4,000+ in 2024) preview the coming wave of AI litigation under California's AB 316 and SB 683
• The $630 billion governance gap -- Morgan Stanley estimates hyperscaler AI infrastructure spend at $630B in 2026, but 60% of data center projects are delayed and governance can't keep pace
• Cisco's agentic security stack -- MCP gateway, Duo Agentic Identity, and DefenseClaw open-source framework unveiled at RSA Conference 2026

Sources:

• California Governor's Office -- AI Executive Order
• Reuters -- How Big Tech's $630B AI splurge will fall short
• Cisco -- Reimagines Security for the Agentic Workforce

Host: Stephen Forte

Same AI tools. Same budget. Opposite results. This episode dives into the data behind the AI productivity paradox and reveals why the companies seeing massive gains are doing something completely different from the ones falling behind.

Key Topics:

• The ActivTrak finding: AI does not reduce workloads, but the 3% who found the sweet spot hit 95% productivity
• OpenAI's 6x productivity gap between power users and average employees
• Google/Ipsos: Only 5% of workers are AI fluent, and they are 4.5x more likely to get promoted
• BCG's 10-20-70 rule: 70% of AI value comes from rethinking the people component
• The seniority flip: Junior staff are more AI-adept than senior leaders
• Why a trained Gen X employee outperforms an untrained Gen Z employee

Sources Referenced:

• ActivTrak 2026 State of the Workplace Report
• BCG: AI Transformation Is a Workforce Transformation
• McKinsey: Redefine AI Upskilling as a Change Imperative
• Google/Ipsos AI Fluency Study
• OpenAI State of Enterprise Report
• LSE/Protiviti: AI Boosts Productivity by One Workday Per Week
• Forbes: The Leadership Gap
• Harvard Business Review: What the Best AI Users Do Differently
• Pearson: Mind the Learning Gap

Hosted by Stephen Forte. Produced by the YPO Technology Network.

In this episode, Stephen Forté covers two stories that signal AI risk has moved from theory to operations.

• Anthropic's Mythos Leak: Fortune discovered roughly 3,000 unsecured assets on Anthropic's website, revealing internal documentation about an in-development model called Claude Mythos — described by Anthropic itself as posing "unprecedented cybersecurity risks." Cybersecurity stocks dropped on the news. Meanwhile, a US judge blocked the Pentagon's attempt to ban Claude from government work.
• Meta's Rogue AI Agent: An internal Meta AI agent autonomously posted a response without permission. Another employee acted on the bad advice, exposing company and user data to unauthorized engineers for nearly two hours. Meta classified it as Sev-1 — a governance failure, not a model failure.

Key takeaway: The most dangerous thing about AI right now isn't what it can't do — it's what it can do when nobody's watching.

Sources:

• Fortune — Anthropic Mythos Leak
• TechCrunch — Meta Rogue AI Agent
• Bloomberg — Cyber Stocks React

This weekend edition goes deep on the framework that separates companies getting real value from AI from those still running pilots eighteen months later. Stephen Forte walks through the six moves that actually work — from mapping how the business truly operates to deploying constellations of small automations built by the people closest to the problems.

• Map the real operation — Why the official process and the actual workflow are never the same, and how cross-team interviews reveal friction nobody sees
• The first-principles question — Would you build this business the same way today? The gap between your answer and your current operation is both your vulnerability and your opportunity
• AI as a perspective shift — Why this is fundamentally different from an ERP rollout, and how framing agents as employees removes the intimidation barrier
• The champion model — How eleven champions at a 300-person insurance brokerage trained 120 colleagues in eight months through informal peer coaching
• Exhaust commercial first — The vendor sprint discipline that saved a logistics company nine months and significant development costs
• Constellation of small automations — Why fifty targeted solutions built by non-technical teams outperform any single enterprise platform

AI transformation starts when you stop asking what tool to buy and start asking how the work should exist.

Host: Stephen Forte | buildclub.com

In this episode, Stephen Forte examines the pivotal moment when AI stopped chasing consumers and came for enterprise. Two major stories define the shift:

• OpenAI kills Sora — The video generation app that hit #1 on the App Store is gone. Fidji Simo called consumer products "side quests" as OpenAI redirects compute toward Codex and enterprise tooling, burning $14B/year with an IPO on the horizon.
• Anthropic's enterprise dominance — Ramp data shows Anthropic now captures 73% of first-time enterprise AI spend. Claude Code hit a $2.5B annualized run-rate, doubling since January. Margins swung from -94% to +40%.
• Claude Cowork launches — Full computer use: mouse, keyboard, screen control. The Dispatch feature lets you assign tasks from your phone and walk away. 80% reliable on simple tasks today, with rapid improvement expected.

Key insight: The total addressable market for AI shifted from IT budgets to payroll. Companies that treat AI like an employee — with clear instructions, defined scope, and work review — will capture this market.

Action item: Pick one routine workflow this week and assign it to an AI agent the way you'd assign it to a new hire.

Hosted by Stephen Forte. Brought to you by the YPO Technology Network.

Your competitor's AI and your AI use the same brain. That's about to change. In this episode, Stephen Forte unpacks Mistral Forge, the new platform that lets enterprises train custom AI models on their own proprietary data — and why the future of competitive advantage may not be your data, but the model you build on it.

1. The AI customization spectrum: Off-the-shelf → RAG → fine-tuning → custom training, and why most companies conflate the levels
2. What Mistral Forge is: A full-lifecycle training platform using Mistral's own production recipes — pre-training, RLHF, synthetic data, MoE architectures, agent-first design
3. Who's using it: ASML, Ericsson, European Space Agency, DSO Singapore
4. What it costs today: $160K–$1M+ for implementation, $500K–$5M for a meaningfully custom model. But enterprises report $1M–$50M/year in savings
5. Cost trajectory: Infrastructure costs dropped 280-fold. Inference declining 10x annually. Today's $1M could be $100K in 2–3 years
6. The competitive moat: A model that reasons like your best people vs. one that looks things up. That gap compounds over time
7. The Westlaw analogy: Two firms, same database — but one trained a model on every case they've ever argued

Sources: Mistral AI, TechCrunch, CIO.com, Forbes, BCG, Galileo AI, Counterpoint Research, AeoLogic Technologies

MCP — Model Context Protocol — went from zero to industry standard in twelve months. In this episode, Stephen Forte breaks down what MCP actually is, how it works, and why it matters for every CEO running a company with enterprise software.

1. What MCP is: An open standard released by Anthropic that lets any AI agent connect to any tool or data source — the "USB port of AI"
2. The math: BCG found integration complexity rises quadratically without a standard. MCP makes it linear — fundamentally different economics for AI deployment
3. Adoption numbers: 97 million monthly SDK downloads, 10,000+ MCP servers in production, adopted by OpenAI, Google, Microsoft, and donated to the Linux Foundation
4. March 2026 acceleration: People.ai launched MCP for CRM data, Google Chrome previewed WebMCP, Microsoft integrating MCP into SAP/ServiceNow/Salesforce
5. Why CEOs care: MCP means AI vendor independence — your data connections persist even when you swap AI models
6. Security: Only 24% of organizations have visibility into AI agent communications. Governance is essential from day one

Sources: Anthropic, BCG, CIO.com, InformationWeek, People.ai, Google Chrome, Linux Foundation, Gartner, Gravitee Survey

Replit just raised $400 million at a $9 billion valuation, tripling in six months. But the real story is what it represents: the end of the buy the giant platform era in enterprise software.

In this episode, Stephen Forte goes deep on why companies are shifting from monolithic SaaS platforms to constellations of bespoke micro-apps built by the people closest to the problem.

1. Replit by the numbers: From $2.8M to $150M ARR in under two years. Targeting $1B ARR by end of 2026. Users inside 85% of the Fortune 500.
2. Rokt: 700 employees built 135 production applications in 24 hours. Now running financial close, legal tracking, and 30,000+ annual operational tasks.
3. UKG: 400% increase in customer-driven feedback before engineering investment.
4. DoorDash: 40+ custom operational tools, estimated $6M in savings vs. off-the-shelf.
5. ClickUp: Six AI-powered tools connected to Salesforce, Zendesk, and Snowflake. $200K/year saved.

The thesis: systems of record like Salesforce and SAP persist as the data layer. But the interface and automation layer is being rebuilt with bespoke tools in an afternoon.

Hosted by Stephen Forte

The Wild West of AI regulation just ended. The White House dropped a comprehensive national AI framework that preempts state laws and makes one thing crystal clear: if your AI agent discriminates, hallucinates, or violates privacy, you are liable -- not the vendor. In this episode, Stephen Forte breaks down three stories every CEO needs to understand before Monday morning: 1. The Federal Preemption Play -- One national standard replaces 50 state laws. Existing agencies (EEOC, FTC, DOL) will enforce existing laws on AI systems. The target is not AI companies -- it is every company that uses AI. 2. The Global Governance Groundswell -- The UN kicked off a Global Dialogue on AI Governance. These international standards will trickle into vendor contracts and cross-border compliance faster than you think. Think GDPR, but for AI. 3. The Workforce Reckoning -- The Department of Labor is targeting AI used for hiring, firing, and employee monitoring. If your AI tool ranks employees or screens resumes, existing civil rights and labor laws apply right now. Each story includes a concrete Monday morning action item for companies with 30 to 300 employees. Links and references: - White House National AI Action Plan: https://www.whitehouse.gov/ostp/ai-action-plan/ - UN Global Dialogue on AI Governance: https://www.un.org/ai-advisory-body - EEOC Guidance on AI in Employment: https://www.eeoc.gov/ai Hosted by Stephen Forte. Produced by BuildClub (buildclub.com).

A special weekend edition on AI security. This week exposed critical vulnerabilities in the platforms powering your AI stack, revealed that two-thirds of security leaders cannot see their own AI deployments, and delivered formal guidance from the NSA on AI supply chain risks. We break down what happened and give you a five-step playbook to act on Monday.

Stories covered:

1. Critical AI Platform Vulnerabilities — Security researchers disclosed serious flaws in Amazon Bedrock, LangSmith, and SGLang. Severity ratings up to 9.8 out of 10. Langflow was exploited in the wild within 20 hours of disclosure. Amazon called one vulnerability "intended functionality."
2. 67% of CISOs Cannot See Their Own AI — Pentera's 2026 CISO survey found zero percent of organizations have full visibility into where AI is running. Meanwhile, 80% of workers are using unauthorized AI tools, and one-third are sharing proprietary data with unsanctioned services.
3. NSA AI Supply Chain Guidance — The Five Eyes intelligence alliance released formal guidance on AI supply chain security, naming specific attack vectors: data poisoning, hidden backdoors, model manipulation, and evasion attacks. This is now the baseline standard for due diligence.
4. AI Agents Have Too Much Access — Over half of deployed AI agents operate without consistent security oversight. Only 29% of organizations have formal AI agent governance policies. NVIDIA launched OpenShell at GTC to address the agent trust problem with kernel-level security enforcement.

The five-step playbook: Know what is running. Treat AI platforms like vendors. Enforce least privilege for AI agents. Keep sensitive data out of consumer AI tools. Log everything.

Hosted by Stephen Forte, Founder of BuildClub. Brought to you by the YPO Technology Network.