The Board Room

The enterprise AI market split into two distinct ecosystems this week, and the strategic implications are more consequential than any model benchmark. OpenAI launched 'Frontier Alliances' — multiyear partnerships with McKinsey, Accenture, BCG, and Capgemini to deploy its enterprise agent management platform. These four firms collectively influence technology spending decisions at virtually every Fortune 500 company. When a McKinsey engagement team recommends an AI agent architecture, they'll be recommending OpenAI's Frontier platform. This is the Salesforce/SAP playbook executed at AI-native speed.

Two Theories of Enterprise Disruption

The divergence with Anthropic is not just tactical — it's philosophical. On February 24, Anthropic unveiled Claude Cowork with integrations into DocuSign, LegalZoom, and Salesforce, plus vertical agent plugins for finance, engineering, and design. Anthropic's head of economics, Peter McCrory, explicitly stated the strategy: replace the worker, not the software. OpenAI told investors the opposite — its agents would replace Salesforce, Workday, Adobe, and Atlassian, showing their combined revenues as OpenAI's addressable market.

The market's initial read was telling: Figma jumped 10%, Salesforce rose 4%, and ServiceNow inched up 1.4% on the Anthropic announcement — investors exhaling that at least one major AI lab wants to be a partner, not a predator.

The CrowdStrike Canary

A cybersecurity executive replaced a CrowdStrike product costing over $100,000 annually with a Torq AI agent — powered by both OpenAI and Anthropic models — that connected directly to raw Microsoft login data and replicated core functions at dramatically lower cost. CrowdStrike's response — that it 'lets AI agents connect to its software' — is the defensive posture of a company that knows it can't block the disruption. This template will repeat across every category where the core value proposition is data aggregation plus rules.

The Pricing Trap

Buried in OpenAI's investor math: at $25/month per worker with claimed savings of $50/day, OpenAI is capturing approximately 2.5% of delivered value. They explicitly told investors they're 'only capturing a small fraction' of business value — relying on estimates from Ark Invest, their own shareholder. Read between the lines: this is a company telegraphing massive enterprise price increases. Any strategic plan built on current AI pricing is planning on someone else's generosity.

The Contradiction That Matters

OpenAI's own COO publicly acknowledged that AI has 'not yet really seen AI penetrate enterprise business processes.' If the company best positioned to drive enterprise penetration admits it hasn't started, the 'SaaS is dead' narrative is running ahead of reality. But Anthropic's vertical plugins represent the first credible mechanism for that penetration to begin. The window between 'hasn't started' and 'locked in' is narrower than it appears.

Today's meeting between Anthropic CEO Dario Amodei and Defense Secretary Hegseth may be the most consequential AI governance conversation of the quarter. The Pentagon has threatened to designate Anthropic a 'supply chain risk' — a classification historically reserved for foreign adversaries like Huawei — unless it removes safety restrictions on military use of Claude. This isn't about a $200M contract. It's about whether the US government can use procurement power to strip ethical guardrails from AI systems industry-wide.

The Competitive Landscape Has Already Split

The 'supply chain risk' designation would go beyond canceling Anthropic's contract — it would require every Pentagon contractor to certify they've severed ties with Anthropic entirely. For any enterprise using Claude in government-adjacent work, this creates immediate vendor continuity risk.

The Strategic Paradox

Anthropic is simultaneously positioning itself as a victim of Chinese IP theft (24,000 fake accounts, 16 million exchanges extracting Claude's capabilities) while resisting the government's unrestricted use demands. This creates an interesting leverage dynamic: the company arguing it needs government protection from foreign adversaries is the same company the government is threatening to designate as a domestic adversary. Whether Anthropic can exploit this tension to negotiate better terms may determine the outcome.

If the Pentagon succeeds, it establishes that AI companies must provide unrestricted access or face exclusion from the entire defense ecosystem. For any technology leader considering government contracts, this is the moment to develop a clear, board-approved position on ethical AI use — before you're forced to make that decision under pressure.

Second-Order Effects for Enterprise Buyers

The bifurcation creates a new axis of vendor risk that most procurement frameworks don't account for. European and international customers may actively prefer vendors that resist unrestricted military use. US government contractors will be forced toward compliant vendors. Your AI vendor selection is now a geopolitical positioning decision with reputational, regulatory, and commercial consequences that belong in the boardroom, not the CTO's office.

CrowdStrike's 2026 Global Threat Report delivers a verdict that should force a strategic reckoning: AI-driven attacks are up 89% year-over-year, average breakout times have collapsed to 29 minutes (fastest observed: 27 seconds), and 82% of intrusions are now malware-free and credential-based. The traditional security operating model — detect, triage, investigate, contain — cannot physically respond fast enough to prevent lateral movement in the majority of attacks.

The LLM Attack Pipeline Is Industrialized

A single threat actor built a fully automated, LLM-powered attack pipeline targeting 2,516 FortiGate appliances across 106 countries, evolved from an open-source framework in roughly eight weeks. The tooling uses a 'dual-model' approach — selecting whichever LLM (DeepSeek or Claude Code) is most permissive per task — creating a race-to-the-bottom dynamic that no single AI company's safety measures can solve. The custom architecture (ARXON as an MCP server bridging LLM analysis with attack scripts, CHECKER2 as a Docker-based orchestrator) represents a pattern that will be commoditized and replicated.

Patching No Longer Equals Protection

The Ivanti EPMM zero-day exploitation is arguably the most strategically significant finding. Two critical vulnerabilities are being actively exploited to gain unauthenticated access to enterprise MDM servers — the systems that manage and control entire mobile device fleets. The critical detail: compromise persists even after patches are applied. Attackers deploy backdoors architecturally independent of the original vulnerability. Any organization that ran vulnerable Ivanti instances may be compromised even if patched.

The Supply Chain Vector Is Evolving

An npm supply chain attack silently installed the OpenClaw AI agent on 4,000 developer machines via a compromised token. A separate 'Sandworm_Mode' attack carries naming conventions linked to Russia's GRU. Microsoft 365 MFA bypass campaigns trick employees into registering attacker-controlled devices, obtaining OAuth tokens that provide persistent access independent of the original phishing vector. The convergence of AI-powered offense, supply chain compromise, and identity-based attacks creates a threat environment where no single defensive layer is sufficient.

The multi-billion-dollar endpoint protection market — built on detecting and blocking malicious software — is defending against a shrinking minority of actual attack techniques. The future of enterprise security is identity-centric.

The Organizational Gap

Multiple sources converge on a structural recommendation: the CISO-reports-to-CIO model is broken. When AI adoption accelerates, the CIO's mandate expands into AI infrastructure and data pipelines — making the conflict with security sharper. Organizations that elevate the CISO to direct CEO/board reporting will have a governance advantage that compounds over years.

The AI compute landscape is fragmenting across three dimensions simultaneously — supply chain structure, hardware architecture, and physical deployment — in ways that create both risk and opportunity for every organization making infrastructure commitments.

Meta Reinvents the Hyperscaler-Chipmaker Relationship

Meta's deal with AMD — $100B+ with performance-based equity warrants covering up to 10% of AMD's outstanding shares (160M shares) — is not procurement. It's quasi-vertical integration. The first gigawatt deployment on custom MI450 architecture begins in H2 2026. If this deal structure works, every hyperscaler will demand similar terms, Nvidia's pricing power erodes, and the GPU market shifts from seller-dominated to buyer-dominated within 2-3 years. Combined with OpenAI's $10B Cerebras deal for 750MW through 2028, the compute market is diversifying away from Nvidia faster than most infrastructure plans assume.

Model-on-Silicon: The Radical Alternative

Taalas's HC1 chip physically etches Llama 3.1 8B model weights into silicon transistors, achieving 17,000 tokens per second per user — compared to Cerebras at 2,000 and Nvidia's B200 at 350-594. The tradeoffs are severe: you can never update the model, aggressive quantization causes quality degradation, and scaling to frontier models would require ~30 separate chip tape-outs. But the strategic signal isn't about Taalas specifically — it's that the inference bottleneck is data movement, not compute, and multiple startups are attacking this from fundamentally different architectural angles. If model improvement rates plateau, purpose-built silicon could deliver transformative cost advantages.

The Physical-World Constraint

Twenty data center projects representing $96 billion were blocked or delayed in Q2 2025, while vacancy rates sit at 1%. Two hundred bills were introduced across US states, forty became law, and ten new moratorium proposals landed in the past month alone. This isn't NIMBY — it's being codified into law. Regulations pushing data centers to rural locations or requiring self-powered operations are creating a new infrastructure asset class at the energy-compute intersection. Scale Microgrids' acquisition of Reload and Forgent Power Solutions' IPO are early signals of capital flowing to this convergence.

Your 2027 compute capacity assumptions may already be obsolete. The capital is abundant, but the permission to deploy it is not.

ASML's EUV Breakthrough

ASML announced its EUV breakthrough could enable 50% more semiconductor production by decade's end, easing supply constraints — but primarily benefiting companies that can afford to buy at scale. Together with the Meta-AMD deal and Cerebras IPO (potential April 2026), the picture is of an infrastructure layer consolidating rapidly where the capital requirements to compete are becoming prohibitive.