The Board Room

The Data That Kills the Waiting Strategy

Princeton's updated ICML 2026 paper tested GPT 5.5, Gemini 3.1 Pro, Gemini 3.5 Flash, and Claude Opus 4.7 on agent reliability metrics. The finding is that newer, more capable models are not meaningfully more reliable for agent tasks than the generation they replaced. A reasonable skeptic would point out that one paper is one paper. The reasonable skeptic is correct, and also missing what this paper actually is: three independent labs, optimizing against different objectives with different data and different alignment stacks, converging on the same ceiling. When three labs converge, the constraint sits in the problem, not in the lab.

The common enterprise posture — waiting for the next model to clear the reliability bar — is now a waiting strategy with no exit condition.

The Paradox: AI Writes the Code but Can't Run the Task

The same week the reliability ceiling was confirmed, two data points landed in the other direction. Anthropic reports Claude writes over 90% of its own codebase. GitHub logged 17 million agent-generated pull requests in March 2026, with platform growth running at 3x internal forecast. The December 2025 capability step enabled what GitHub's CPO calls 'macro-delegation': agents completing defined units of work that survive human review at scale. AI-authored code is in production.

These findings are not in tension. They describe two different workloads with fundamentally different reliability requirements. Code generation has a built-in verification layer in compilation, tests, and review. Autonomous agent execution does not. Organizations rolling both capabilities into a single 'AI maturity' metric are planning against the wrong curve.

What This Means for Org Design

If AI writes 90% of the code, the engineering org's cost structure is decoupled from its headcount structure in a way it was not eighteen months ago. GitHub's shift to usage-based billing on June 1, 2026 means the cost line scales with agent activity rather than employees. The human role does not disappear because agents cannot autonomously execute. It shifts to architecture, judgment, orchestration, and reliability engineering.

Bain's finding that human oversight is the primary friction slowing AI ROI names the bottleneck. The loop is visible: AI writes code, humans review it, AI outputs train the next generation. Firms that restructure around this loop, with humans as architects and judges and agents as builders, will operate at 5-10x leverage. Anthropic is operating that way now. The competitive set is 6-12 months behind.

The Fork in the Road

Two paths frame the 2027 agent program:

1. Wait for model improvements. Hope the next generation cracks reliability. The Princeton data says that is a wish, not a plan.
2. Engineer around the ceiling. Invest in evaluation harnesses, fallback architectures, scope reduction, human-in-loop design, and reliability infrastructure that makes current models production-viable.

The board-deck version of this is that path two is the harder option. The complete version is that the teams choosing path two quietly will be in production while the path-one teams are still drafting the go-live memo.

SpaceX Joins the Hyperscaler Tier

SpaceX now books $2.17 billion per month in committed compute revenue from Google and Anthropic alone. Annualized, that clears $26 billion, which places it alongside the traditional cloud incumbents on raw infrastructure spend. The Google arrangement runs at $920 million per month, reportedly involving 110,000 Nvidia chips rented from SpaceX. The 90-day cancellation clause in that deal is the interesting part. Both parties wrote it because both parties believe current compute pricing is volatile and temporary, and neither wants to be the one holding a three-year commitment when it normalizes.

The list of firms operating at hyperscaler cadence just grew by one, and the new entrant is not a cloud provider, not a model lab, and not a customer anyone's procurement team has on a vendor matrix.

Meta's Tent Build-Out: Time Is the Constraint

Meta is deploying GPUs under 125,000 square-foot temporary structures with off-grid power because conventional data center construction takes 2-3 years and the demand curve does not wait. A company that can write checks for tens of billions is choosing fabric over concrete because time is the binding constraint, not money. SoftBank's €75 billion commitment to French data centers and AI infrastructure running at 0.8% of US GDP point in the same direction. The pattern is structural because the inputs that gate it — power, permits, skilled construction — are the slow ones, and capital is the fast one.

What Changed for the Capacity Plan

The assumption worth revisiting is that frontier-scale compute demand is concentrated among four or five named buyers. That assumption held last year. SpaceX, operating outside the traditional vendor matrix, is now competing for the same GPU allocation, power contracts, and long-dated capacity deals. Pricing power on multi-year commitments is moving toward whoever can sign the largest commitment fastest, and the pool of firms able to do that is wider than the procurement models reflect.

The Vendor Leverage Shift

A reasonable skeptic would point out that capacity panics tend to resolve themselves, and that 2027 looks far enough away to wait out. The skeptic is half right. Pricing will normalize. The harder consequence is that competitors who locked in capacity early will be training models that cannot be economically replicated, which is a durable advantage even after spot prices fall. Any cloud commitment signed today for 2027 workloads should be treated as provisional, and organizations that have not already secured 2027 capacity through conventional procurement are late. New York's data center moratorium adds the dimension procurement teams are least equipped to model: power contracts and permits in certain jurisdictions are now a political risk, not just an operational one.

From Campaigns to Worms: A Category Change

The Miasma worm is now sitting inside 73 Microsoft GitHub repositories and remains uncontained. The interesting word there is uncontained. This is not a campaign that needs an operator at a keyboard. It propagates through the dependency graph on its own, the way automated botnets replaced targeted phishing a decade ago. The labor-intensive version of supply-chain compromise has been productized.

At the same time, a critical RCE in the Hugging Face Transformers library turns AI model configuration files into an exploit vector with a 2.2 billion installs blast radius, aimed at GPU-accelerated inference workloads. ML teams pull those files from model hubs every working day. Any organization running production inference on downloaded models is live to it today.

The attack surface is expanding faster than defensive capabilities. AI is accelerating this asymmetry. Traditional trust models — vendor repositories, official packages, single-vendor infrastructure — are proving insufficient.

Your Developer Tools Are Intrusion Vectors

The Claude Code MCP protocol vulnerability means developer productivity tooling is now part of the attack surface, not adjacent to it. Microsoft has formally cataloged 7 new AI agent failure modes, which is a polite way of saying the taxonomy is still being written. An AI security startup found 21 zero-day vulnerabilities in FFmpeg alone using autonomous agents, in a library that sits underneath nearly every video pipeline shipped. Chrome closed 429 bugs in a single cycle, which probably reflects the same AI-accelerated discovery pressure pointed inward.

The Structural Imbalance

Attackers have reached platform economics. AI attack tooling trades as a commodity on criminal marketplaces with vendor-grade support, which means capability development is self-funding and compounding. Defenders are learning that AI infrastructure adopted at speed carries architectural vulnerabilities, not incidental ones. The discovery-to-exploit window has compressed from weeks to hours. A regulated enterprise still needs a change advisory board, a maintenance window, and a vendor whose support contract reads thirty days.

Cisco SD-WAN: The Unpatched Zero-Day

CVE-2026-20245 is an actively exploited high-severity vulnerability in Cisco SD-WAN with no available patch. This is not a security event in the usual sense. It is a vendor relationship failure. When the sole network provider has no fix, the customer has no options, only compensating controls activated under duress.

The Organizational Response

A reasonable skeptic would say the answer is to patch faster. The reasonable skeptic is investing in the wrong side of the trend. The answer is architectural resilience: AI-powered compensating controls, virtual patching, zero-trust design that makes any single vulnerability less consequential, and AI security treated as a first-class function with dedicated headcount and governance authority over deployment velocity. The decision this quarter is which of those the organization is willing to fund. The decision next quarter is what the unfunded ones cost in incidents.