Product & Strategy

The Product Desk

The Signal

Routing a live session to a cheaper model re-bills the whole history at cold rates.

Cache entries are keyed to a single model. That detail is missing from most tiered-routing tickets, including the one you are probably scoping this sprint, and it inverts the math those tickets were written to justify. Pick the tier once, at task entry, and the savings actually show up: a marketplace matcher did it that way and hit 98% accuracy at one-seventh the cost. Anything that switches after the work has started is a cost-reduction feature that adds cost.

In Play

  1. The Pricing Meter Moves Off Tokens

    a16z's Sarah Wang and Tugce Erten published a direct attack on per-token billing: of 50 technical AI buyers, 27 prefer credits tied to recognizable work and 14 prefer tokens. That makes the meter a product spec — unit-of-work definition, effort bands and per-task cost telemetry all ship out of your backlog, not finance's. The sample is proprietary and unpublished, with 9 preferences unaccounted for, so treat the direction as real and the ratio as directional.

  2. Cheap-Model Routing Reverses Mid-Session

    Avi Chawla's caching breakdown shows that prompt-cache entries are keyed to a specific model. Routing a long conversation to a cheaper model therefore re-prefills the whole accumulated history at cold rates, inverting the savings case behind most tiered-routing tickets. The same week, two production results show the pattern working when the tier decision happens once at task entry: a marketplace product-matching system hit 98% accuracy at one-seventh the cost, and DoorDash clears millions of daily events with cheap classifiers before any model call.

  3. Authorization Becomes a Product Requirement

    Datadog put three coding agents through six builds of a document portal, and every build shipped a critical IDOR letting any authenticated user read other users' documents. Plan mode changed nothing. Separately, prompt injection now carries NVD scores — Context7 at CVSS 9.0, Apache SkyWalking's MCP server at 9.8 — and MLflow's SSRF entered CISA's exploited-vulnerability catalog on 2026-08-19. Ownership checks and tool-parameter trust are language you write into stories, not cleanup your engineers infer.

  4. Personal-Agent Valuations Outrun Any Usage Data

    Newcomer reported on August 27 that Town, an enterprise personal agent, is in talks to raise at a $1B valuation led by Index Ventures — two days after the Wall Street Journal put consumer assistant Instinct at a $2.5B valuation on $350M raised. Neither report discloses revenue, retention or usage, and Newcomer notes that venture capitalists themselves appear to be the power users. If your own agent metrics blend employees, design partners and enthusiasts with organic users, you are reading the same distorted cohort that priced this category.

  5. Enterprise Software Growth Splits From Its Headline

    Salesforce's July quarter grew 11%, but organic growth was 6.4% once the November 2025 Informatica acquisition is stripped out, per The Information. Workday decelerated from 13.5% to 12.8%. Agentforce ARR passed $1.5B, up 240%, against a raised full-year guide of $46.4B. AI ARR compounding fast off a small base while total growth slows is the signature of attach and bundling — and it is the frame your board will apply to your own AI numbers next quarter.

Deep Dives

  1. Tokens Anchor Your Product to a Falling Cost Curve

    Buyers stopped comparing you with competitors and started comparing you with raw compute; Clay's four-meter rebuild shows what a mispriced credit system costs before anyone notices.

    The precedent that prices the mistake A pricing lead reads the a16z survey, nods, and files it under directional. The survey is not the artifact worth keeping. Clay's 2026 pricing memo is, because it discloses that Clay mispriced credits in…

    3 action items

  2. Visa Published Its Harness; the Routing Play Inside It Runs Backwards

    Two cost levers are being sold as interchangeable: one is a stage map you can fork for free, the other quietly re-bills an entire conversation at cold rates.

    What a harness actually contains An engineer forks the repo expecting a model wrapper and finds orchestration. Visa wrapped Anthropic's unreleased Mythos model in it, pointed it at its own codebases to find and fix vulnerabilities, then open-sourced the code…

    3 action items

  3. Six of Six Agent-Built Portals Shipped the Same Critical Flaw

    Plan mode is marketed as the model thinking before it acts; across six builds it reordered the work, and each agent added a fresh flaw class nobody asked for.

    The finding belongs in acceptance criteria, not the backlog Kennedy Toomey at Datadog gave Claude Sonnet 5, Cursor Composer 2.5 and Codex GPT 5.5 the same brief: a document portal with authentication, file uploads and user management. Six iterations, plan…

    3 action items

The edition continues

Take the signal into the room.

Sign up or log in to read all 3 deep dives in full, plus the final take.

Read the full edition

Continue with LinkedIn