Leadership & Executive

The Board Room

The Signal

Microsoft's shift to post-quantum code signing breaks shipped apps by mid-October.

The exposure isn't in code your team wrote. It's in the signed third-party components you redistribute, and in the auto-updaters that carry them: a client that can't validate a new signature can't deliver its own fix. A reasonable skeptic would say the inventory pass can wait until the quarter is closed. The tradeoff is that a break surfaced by customer escalation costs roughly ten times what finding it now does, and finding it now means finding it during quarter close.

In Play

  1. Microsoft's Signing Cutover Lands Mid-October

    Microsoft is migrating its code-signing infrastructure to post-quantum algorithms and has explicitly warned developers their apps will break, with completion set for mid-October, per Risky Business. Every signed installer, driver, agent, auto-updater and signed third-party component you ship is in scope. The real exposure is your Q4 release calendar: a break found in a customer escalation costs roughly ten times what finding it now costs — and it costs it during quarter close.

  2. Your Chip Supplier Joins the App Layer's Cap Table

    Nvidia is in talks to invest billions in Perplexity at a valuation above $30B, more than 50% above an implied roughly $20B a year earlier, The Information reports. Deeper commercial ties came before the equity talks, which makes this a template rather than a one-off: compute agreements convert into ownership of demand. The supplier that sets your inference cost now holds a position in a company chasing the same workflows. The same reporting notes Nvidia is also investing in data-center developers and model makers.

  3. Regulators Price an Automated Decision at €825M

    The Dutch data protection authority fined Uber €825 million for disabling driver accounts through automated systems with no human review and no reason given — the second-largest EU data protection fine behind Meta's €1.2 billion, per Risky Business. Any automated suspension, denial, payout hold or deranking in your product now sits against that benchmark. Human review, a stored rationale and an appeal path stop being legal artifacts and become shippable features.

  4. Growth Stopped Earning a Multiple in the Application Layer

    Salesforce guided to 11% full-year growth, an improvement on last year's 9.6%, and has been repriced downward anyway, The Information reports. The proof point sits in procurement: the U.S. Agriculture Department reduced its Salesforce footprint in favor of AI-enabled suppliers. Meanwhile Nvidia is projected to generate $213B in free cash flow this fiscal year against Apple's expected $144B. The profit pool has moved to infrastructure, and any seat-priced footprint thin on proprietary data is now contestable.

  5. AI's Credibility Correction Comes From Inside the Tent

    Eric Topol, a cardiologist who calls Demis Hassabis "a hero of mine" and secured a Hassabis blurb for his 2025 bestseller, publicly called the claim that AI will cure all diseases within a decade hype, The Information reports. Daphne Koller's widely shared "magic wands" post made a similar argument. The defense that critics simply do not understand the technology stops working when the critic is a supporter. Roadmaps that borrowed model-release timelines for outcomes gated by real-world validation are now a credibility exposure.

Deep Dives

  1. Seven Weeks, One Owner, and Every Signed Artifact You Ship

    A forced cryptographic migration lands inside the quarter you close revenue in, and the artifacts most likely to break are the ones you did not build.

    The inventory is the hard part Microsoft owns the migration. The inventory belongs to whoever ships the software, and it runs wider than the release train: installers, kernel drivers, endpoint agents, auto-updaters, build-time signing steps, and the signed third-party components…

    3 action items

  2. Nvidia Is Buying the Demand It Sells To

    Compute neutrality was a procurement assumption; it is now a competitive variable — and the same week handed you a model vendor moving into your delivery channel.

    The sequence carries the argument Commercial ties were strengthened first. The equity talks came second. A financial investor does not order it that way; a supplier converting a commercial relationship into ownership of demand for its own hardware does. That…

    3 action items

  3. The Dutch Regulator Wrote a Product Spec and Priced It

    Human review, a stated reason and a way to appeal just moved from legal boilerplate to product features with a euro figure attached — and acquisitions carry the exposure too.

    Three absences, not one algorithm The ruling did not penalize automation. It penalized automation arriving with three absences: no human in the loop, no reason given, and no route to contest . Uber's automated driver-account deactivations supplied all three at…

    3 action items

The edition continues

Take the signal into the room.

Sign up or log in to read all 3 deep dives in full, plus the final take.

Read the full edition

Continue with LinkedIn