The Investor

The Strategic Maneuver

OpenAI is executing the most consequential platform independence play in enterprise software since Salesforce built its own infrastructure layer on top of AWS. Two simultaneous moves make the intent unmistakable: OpenAI is building a direct competitor to Microsoft's GitHub and actively discussing commercializing it, while launching stateful AI agent services on AWS via a Bedrock-native orchestration layer that legally circumvents Microsoft's exclusive rights to sell OpenAI's stateless models.

The product-category arbitrage is elegant. Microsoft holds exclusive rights to sell stateless OpenAI models to cloud customers. By selling a stateful agent service — persistent memory, custom models, enterprise integration — OpenAI and AWS engineered a workaround that competes directly with Azure without technically violating the exclusivity. OpenAI projects non-API revenue (agents, stateful services) will exceed API revenue by 2028, meaning Microsoft's exclusivity will cover the smaller half of the business.

The GitHub Threat Is Real

OpenAI building a GitHub alternative isn't a side project — it's being discussed for commercialization. GitHub, acquired by Microsoft for $7.5B in 2018, is the backbone of Microsoft's developer ecosystem and Copilot's distribution channel. Meanwhile, a 906-respondent survey of senior engineers reveals GitHub Copilot's growth has flatlined with only 9% 'most loved' rating, while Claude Code seized #1 position in 8 months. OpenAI's Codex already reached 60% of Cursor's usage from zero in under 9 months. The developer tools market is in play.

Cloud AI Value Chain Shift

OpenAI just proved that exclusivity agreements are only as durable as the product categories they cover — and the cloud AI market is about to reprice around who owns the stateful agent layer.

Amazon's conditional $50B investment — contingent on IPO and AGI milestones — adds another dimension. When the world's largest cloud provider structures a mega-check with milestone gates, it signals that even the most bullish allocators are hedging on AI timelines. Expect milestone-gated deal structures to cascade into growth-stage AI term sheets.

The Data That Should Make Every AI Investor Uncomfortable

OpenAI published a chart showing power users (95th percentile) use 7x more 'thinking capabilities' than the median paid ChatGPT user. Extrapolate across the full base — 900M weekly actives, 50M paying, roughly 2.5M true power users — and 99.75% of ChatGPT users extract virtually negligible value. The 5.5% paid conversion rate is the ceiling, not the floor.

This isn't just an OpenAI problem. It's the structural question underneath every AI valuation in your portfolio: is the adoption gap closing or widening?

Three Sources Converge on the Same Warning

Satya Nadella — CEO of the company that invested $13B+ in OpenAI — publicly warned at Davos that "either people start using AI meaningfully or the bubble will pop." He specified that if only tech groups benefit rather than companies across sectors, "we would get the bubble scenario." This is the single largest capital allocator in AI hedging his own position in public.

Benedict Evans delivers the most concise bear case on OpenAI from a credible analyst: no unique technology, limited user engagement and stickiness, no network effects. Meanwhile, incumbents — Google, Meta — have matched the core AI tech and are leveraging existing distribution. OpenAI's Stargate, announced with $100B in capex promises, has produced nothing material a year later.

Evans introduces a framing that deserves serious attention: the deflationary bubble thesis. Previous tech bubbles overestimated the pace of value creation. The AI bubble may be different: if AI works as promised, the first-order effect is value destruction — displacement of workers, compression of margins, commoditization of knowledge work — before new value materializes.

The Adoption Funnel Is Inverted

The 'QuitGPT' exodus compounds the problem. Power users — the only segment generating real value — are the most willing to switch. Claude's surge to #1 on the App Store proves consumer AI switching costs are effectively zero. OpenAI's ad monetization pivot (keyword-triggered, $200K minimums, manual management) is a tacit admission that the subscription conversion ceiling has been hit.

The AI sector is priced for universal adoption but delivering elite-only value; the companies that close this gap will define the next decade, and the ones that can't will be the decade's most expensive lesson.

The Definitive Competitive Data

The Pragmatic Engineer's February 2026 survey of 906 senior software engineers (median 11-15 years experience, 89% engineers or engineering leadership) delivers the clearest competitive intelligence on AI coding tools this cycle. The results invert consensus assumptions about who's winning.

The Competitive Landscape Has Flipped

The signal beneath the signal: Anthropic's Opus 4.5 and Sonnet 4.5 are mentioned more than all other models combined for coding tasks. Claude Code doesn't win because of its terminal UX — it wins because Anthropic's models are categorically better at code. This is the critical insight: tool-layer companies without proprietary model advantages are structurally vulnerable.

Agent Adoption Has Crossed the Threshold

55% of engineers regularly use AI agents — autonomous systems handling multi-step tasks like code review, bug investigation, and debugging. Staff+ engineers lead at 63.5%. The workflow has shifted to a split-screen paradigm: terminal agent driving work, IDE open for review. This favors terminal-first tools (Claude Code) over IDE-integrated autocomplete (Copilot).

Cursor's position is particularly interesting. At $2B ARR with ~100% quarterly growth and a $29.3B valuation (~14.7x revenue), it's the definitive comp for AI dev tool deals. But it's being squeezed: Claude Code dominates above, Codex threatens below, and 70% of engineers use 2-4 tools simultaneously with near-zero switching costs. The 14.7x multiple is your negotiating anchor — but revenue durability assumptions need stress-testing.

The Enterprise Procurement Gap

GitHub Copilot maintains 56% usage at 10K+ employee companies purely through procurement inertia — it's the only approved option at many enterprises. Claude Code is 9 months old and hasn't cleared procurement at most large organizations. The company that solves enterprise AI tool governance — security review, compliance, multi-tool management — has a massive buyer. This is a fundable gap right now.

In AI coding tools, model quality beats distribution, vertical integration beats wrappers, and the market can flip in 8 months — price your deals accordingly.

PQC Migration Window Is Compressing

The claim that quantum decryption of RSA is much closer than expected aligns with an accelerating body of evidence. Google is already building quantum-safe Chrome HTTPS certificates with Merkle Tree infrastructure — the clearest signal from a hyperscaler that the migration window is real and near-term. The 'harvest now, decrypt later' threat means every piece of RSA-encrypted data already exfiltrated by nation-states becomes readable when quantum capability arrives.

The PQC market — estimated at $3-5B by 2030 — may pull forward 18-24 months. Chrome's certificate deployment is a forcing function: every certificate authority, every TLS implementation, every enterprise PKI deployment will need to migrate. Companies with production-ready lattice-based or hash-based cryptographic solutions are the direct beneficiaries.

AI Framework Vulnerabilities: Systemic, Not Isolated

Four distinct AI framework vulnerabilities surfaced in a single cycle — across four different vendors:

This isn't coincidence — it's a systemic pattern. Every major AI framework is shipping with exploitable attack surfaces that traditional endpoint security doesn't inspect. The browser-AI integration creates an entirely new privilege escalation category: Palo Alto Networks' Unit 42 discovered that a Chrome extension with basic permissions could hijack Gemini Live to access device cameras, microphones, screenshots, and local files.

PANW's SVP of Prisma SASE explicitly framed browsers as "both a primary attack surface and a potential control plane" — telegraphing their product roadmap and validating the enterprise browser security thesis. As every major browser integrates agentic AI capabilities, the attack surface expands from web content to AI-mediated device access.

Investable Categories Forming

Quantum RSA timeline compression and systemic AI framework vulnerabilities are creating two standalone investment categories — the firms that move in the next 90 days will own the category-defining positions.