YPO Technology Network AI Brief

Google is selling the enterprise agent control plane from the top down. Employees are building the AI workforce from the bottom up. In today's YPO Technology Network AI Brief, Stephen Forte connects those two moves and explains why CEOs need to stop asking which model is best and start asking who governs the work. Stories covered: Google's push to make Gemini Enterprise the control plane for enterprise AI agents Why agent governance is becoming a board-level operating question Writer's 2026 enterprise AI adoption data on AI elites, non-adopters, and shadow AI Gallup and HBR signals showing that employees are already building AI leverage from the bottom up The CEO takeaway: the model is not the moat. The operating system around the model is. Sources: Reuters, Writer, Gallup, Harvard Business Review.

The honeymoon era of enterprise AI is over. Three stories landed this week that change the conversation in your boardroom from whether to do AI to how much it will cost you, who you will buy it from, and what the geopolitical risk looks like. In this episode: Microsoft and OpenAI restructure the most lucrative partnership in tech. Exclusivity is gone. OpenAI can sell on AWS within weeks, Google likely next. The real shift is architectural — Azure for stateless API calls, AWS for stateful agents — and what it means for the model decisions every CIO now has to make per workload. Tokenmaxxing is detonating cost structures. Uber exhausted its entire 2026 AI budget before May. Anthropic billed one user a hundred-fifty-thousand dollars in a single month. The killer insight: most token bills aren't a vendor problem, they're a model selection problem — and that decision happens at the prompt layer, not the procurement layer. China blocks Meta's Manus deal. Beijing's NDRC ordered Meta to unwind a two-billion-dollar acquisition with no justification. Singapore-washing is dead. If you have any cross-border AI M&A on your roadmap, your diligence playbook just changed. What I'd do this quarter: Re-open every multi-year Azure AI commitment signed under exclusivity assumptions. Name an AI FinOps owner with hard kill switches at the API layer. Reassess any cross-border AI M&A based on origin of talent and IP, not legal domicile. Sources: Microsoft — The next phase of the Microsoft-OpenAI partnership VentureBeat — Microsoft and OpenAI gut their exclusive deal Pragmatic Engineer — AI token spending out of control New York Times — Tokenmaxxing GitHub — Changes to Copilot individual plans TechCrunch — China vetoes Meta's $2B Manus deal Reuters — Blocking Meta's AI startup buy raises risk for cross-border China tech deals

MCP — Model Context Protocol — has gone from a curiosity to enterprise infrastructure in less than a year. Last Friday, the Linux Foundation made it official, formalizing MCP under its new Agentic AI Foundation alongside production integrations from SUSE, AWS, and Fujitsu. Translation: it is now the standard your engineers are building on. In this episode, Stephen Forte explains: What MCP actually is — the USB-for-AI analogy, in plain language, no developer experience required Why it became default — Anthropic, OpenAI, Google, Cursor, LangChain, LiteLLM, IBM LangFlow all support it Why it cannot be deployed alone — the protocol is open by design, and an open protocol without a wrapper is a powerful electrical outlet with no cover The AgentOps layer your team needs — gateway, identity, logging — same pattern as DevOps, new layer of the stack Three direct questions to ask your CTO this quarter, and why naming a single owner matters more than convening a committee Brex (the corporate-card and spend-management fintech) made the point cleanly this week with the open-source release of CrabTrap — a small proxy that watches every HTTP call an agent makes before it goes out. A 306-practitioner study published this month puts the urgency in numbers: 82% of organizations have agents in production or pilot, and the number-one cited challenge is reliability, not capability. The protocol your engineers are excited about is genuinely useful and genuinely standard. The work of making it safe to operate is a separate budget line and a separate skill set — and it is the price of admission for running this stuff in a real company.

Most AI conversations happening in boardrooms right now are cost conversations — G&A reduction, procurement automation, headcount trimming. This episode takes the opposite angle. Jason Lemkin published the most detailed CEO-authored account of deploying AI across an entire sales and marketing operation, and the result is a growth story, not a savings story: $2.4 million closed, eight humans compressed to 1.2, twenty-plus agents running in parallel, and a monthly software bill under $5,000. In this episode: Why the cost-cutting frame is the wrong frame — and what the growth frame looks like in practice How SaaStr structured 20-plus agents as a workforce, each with a job description and a system of record The assembly sequence: inbound first, then enrichment and segmentation, then outbound — in that order What a machine-readable operating model actually means: 100 distinct segments across 1,000 target contacts The senior operator role the stack cannot run without — and why it is not a cost, it is a conductor Three companies across three verticals running the same structural move: SaaStr, Pump, and A-LIGN The stack, layer by layer: Salesforce + Agentforce — the CRM spine and AI agent layer that takes actions directly on records Qualified + Piper — inbound conversation handling; Piper is the AI sales agent running 24 hours a day on the website Clay — data enrichment platform that builds full buyer profiles from dozens of sources Artisan — autonomous outbound agent that writes and sends prospecting emails using enriched profiles Zapier — workflow orchestration layer connecting CRM, enrichment, inbound, outbound, and Slack Claude Opus via Replit — custom strategy layer built on Anthropic's model; runs as an AI VP of Marketing producing the morning brief Gamma — AI presentation tool that drafts decks from a brief when agents book meetings The numbers: $4.8 million in pipeline sourced first-touch by AI agents. $2.4 million closed from that same source. Team size moved from eight-to-nine humans down to 1.2. Total monthly cost for the connected stack: $2,000 to $5,000. Source: Jason Lemkin's original post — the eight-month postmortem that forms the basis of this episode. The AI Brief is a weekly episode from the YPO Technology Network, covering applied AI for CEOs and senior executives. New episodes every Monday and Friday.

The UK government quietly confirmed an AI model just completed the hacking equivalent of a four-minute mile. Eleven of the largest companies on Earth already have a copy. The threat model you were operating under on Friday is not the one you are operating under today. In this episode: What Claude Mythos actually did on AISI's 32-step "Last Ones" test — and why Anthropic's own safety team called it "the greatest alignment-related risk" they've released The Roger Bannister four-minute mile analogy — why one lab crossing a capability barrier changes what every other lab believes is possible Project Glasswing — the eleven companies with access (AWS, Apple, Cisco, CrowdStrike, Google, JPMorgan, Microsoft, NVIDIA, Palo Alto Networks, Goldman Sachs, Linux Foundation) and the oversight framework that isn't public Why your threat model shifted from nation-states to "everyone who has ever been angry at you and kept a copy of something" The three-step playbook to ask about by Friday: kill switches (1-10-60 rule, CrowdStrike/SentinelOne/Defender isolation), agentic security platforms reading your logs 24/7, and immutable 3-2-1-1 backups (Veeam, Rubrik, Commvault, AWS S3 Object Lock) The CEO mirror — a three-column credential audit to take into your next forum meeting Key line: "The tool does the skill. The tool does the twenty hours of work. A motivated amateur with a Claude API key and a grudge is now a credible threat." Cybersecurity used to be a specialist problem. It is now an operational problem. It belongs in the same meeting as insurance and succession. The YPO Technology Network AI Brief is a daily, peer-to-peer podcast for YPO members (CEOs and Presidents of $13M+ companies) making sense of AI without the hype. Produced by BuildClub.

Episode summary. On February 17, 2026, federal Judge Jed Rakoff issued the first nationwide ruling holding that conversations with consumer AI chatbots are not protected by attorney-client privilege and are fully discoverable in litigation. Six weeks later, the Delaware Court of Chancery used a CEO's deleted AI chat logs as trial evidence in a $250 million earnout dispute. This episode walks CEOs, GCs, and CISOs through what the courts actually held, what it means for your company in practice, and the five specific moves to make this week.Why this matters. Every prompt your employees type into ChatGPT, Claude, Gemini, or Copilot is now a timestamped, logged document living on a third party's servers under terms that explicitly permit disclosure to regulators and courts. The candor of AI conversations — precisely because employees feel they are thinking in private — makes them disproportionately damaging in discovery. This is the AI wake-up call, and it lands harder than email did in the 2000s or Slack did in the 2010s.The Four Rulings You Need to Know1. United States v. Heppner — No. 25 Cr. 503 (JSR), 2026 WL 436479 (S.D.N.Y. Feb. 17, 2026). Judge Jed S. Rakoff, Southern District of New York. The anchor case. Bradley Heppner, former Chair of GWG Holdings, was indicted for securities fraud allegedly costing investors more than $150 million. Facing a grand jury subpoena, he used the free version of Anthropic's Claude to generate 31 documents analyzing his defense strategy and shared them with Quinn Emanuel. FBI agents seized the documents during a Dallas search warrant. The government moved to compel. Rakoff — calling it "a question of first impression nationwide" — ruled the documents were not privileged on three independent grounds and found they may have even waived privilege over the original attorney-client communications Heppner had pasted into Claude.2. Fortis Advisors LLC v. Krafton, Inc. — C.A. No. 2025-0805-LWW (Del. Ch. Mar. 16, 2026). Delaware Court of Chancery, Vice Chancellor Will. Krafton acquired Unknown Worlds Entertainment (maker of Subnautica) for $500M up front plus a $250M earnout. When the deal soured, Krafton's CEO used an AI chatbot to draft a "Response Strategy to a No-Deal Scenario" including a "pressure and leverage package" and a "two-handed strategy" combining legal pressure with softer retention offers. The court quoted the AI logs extensively to establish pretextual intent — and noted the CEO's admitted deletion of some logs may "factor prominently" in the damages phase. Civil discovery, not criminal. The reasoning travels.3. Warner v. Gilbarco, Inc. — No. 2:24-CV-12333, 2026 WL 373043 (E.D. Mich. Feb. 10, 2026). Magistrate Judge Anthony P. Patti. A pro se plaintiff in an employment discrimination case used ChatGPT to prepare filings. The court upheld work product protection on narrow facts — a pro se litigant is the party, FRCP Rule 26(b)(3)(A) protects party-prepared materials, and uploading to an AI tool is not disclosure to an adversary. This is not a circuit split with Heppner (different context, criminal vs. civil, represented vs. pro se), but it is the only counterweight on the books.4. Morgan v. V2X, Inc. — No. 1:25-cv-01991 (D. Colo. Mar. 30, 2026). Magistrate Judge Maritza Dominguez Braswell. A modified protective order establishing the precise contractual checklist any AI tool must meet before confidential discovery materials can be loaded into it: (1) no training on inputs, (2) strict confidentiality, (3) contractual right to delete. The court acknowledged this effectively bars most consumer AI tools from discovery-sensitive workflows.5. In re OpenAI Copyright Litigation — S.D.N.Y. Jan. 5, 2026. The court upheld a discovery order requiring OpenAI to produce a sample of 20 million de-identified ChatGPT conversation logs. Confi

Stephen Forte explores why AI investments are failing and the answer is not what you think. Drawing on the CIA 1944 Simple Sabotage Field Manual and a landmark 2026 survey showing 29 percent of employees actively sabotage their company AI strategy, he unpacks the invisible resistance destroying AI ROI.The CIA Manual: How 80-year-old bureaucratic sabotage tactics are alive and well in your AI steering committeeThe Data: 29 percent sabotage rate (44 percent among Gen Z), plus a 30-point perception gap between executives and employeesThe Failure Landscape: 95 percent of AI pilots deliver zero ROI (MIT), with BCG attributing 70 percent of failure to people, not technologyThe Fear Factor: 89 percent of workers worried about job security, 55,000 AI-related layoffs in 2025The Spectrum of Resistance: From overt refusal to invisible pretenders, plus the vicious cycle that makes sabotage look like technology failureThe Solution: Champion networks achieve 3x implementation success. Find the domain experts already using AI on their ownKey insight: The programming language of this era is English. The real skill is domain expertise. Find your champions, reward them, and let your laggards self-select out.Sources: Writer/Workplace Intelligence 2026 Survey, MIT NANDA Initiative, BCG, RAND Corporation, ADP Research, Aalto University, CIA Simple Sabotage Field Manual (1944)

Every adoption metric just crossed the line — and the line turns out to be behind us. Three stories about AI adoption outrunning governance at a pace no one predicted.Stories covered:The 50% Line — Gallup's Q1 2026 workplace survey of 23,717 employed adults finds 50% now use AI at work, up from 46% last quarter. But only 41% of organizations have formally integrated AI — meaning roughly 14 million American workers are using AI tools their employer hasn't approved or secured.CyberStrikeAI: 600 Firewalls in 5 Weeks — A free, open-source AI tool autonomously compromised 600+ Fortinet FortiGate firewalls across 55 countries. No zero-day vulnerabilities needed — just exposed management interfaces and weak authentication. The barrier to autonomous cyberattack just dropped to zero dollars and a laptop.96% Agents, 12% Governed — OutSystems surveyed 1,900 IT leaders: 96% are already using AI agents in production, but only 12% have centralized governance. Gartner forecasts 40% of enterprise applications will include task-specific agents by end of 2026, up from 5% in 2025.Action items:Ask your CISO about exposed management interfaces and single-factor authentication gaps — today, not next quarterFind out what percentage of your workforce is using AI tools IT hasn't provisionedCount your agents — if nobody can give you a number, that is the number that matters mostHosted by Stephen Forte. New episodes weekdays.

Three stories exploring the gap between what we believe and what the data shows in AI.Anthropic Mythos / Project Glasswing — An AI model too dangerous to release is now controlled by eleven handpicked organizations and the White House. That is not a safety framework. That is a guest list.OpenAI Acquires TBPN — OpenAI spent hundreds of millions to buy a podcast. It reports to their chief political operative. The sole financial relationship is now OpenAI. When you cannot control the narrative through technology, you buy the megaphone.AI Coding Quality Collapse — Six independent studies converge on the same finding: AI-generated code has more bugs, and developers using it believe they are faster when they are actually 19% slower. The 39-point perception gap is the largest ever documented.

OpenAI published a 13-page policy paper on April 7, 2026 — the same morning The New Yorker published a 1.5-year investigation into Sam Altman's trustworthiness on AI safety. This episode reads OpenAI's proposals not as forward-looking policy, but as a pre-apology for disruption that is already underway and already documented.In this episode:What OpenAI is actually proposing: a four-day work week, a Public Wealth Fund, a robot tax, worker voice mechanisms, and mandatory AI safety auditingHow each proposal maps to a specific, documented harm — including 60,000 job cuts in March alone and $852 billion in AI-driven capital concentrationOpenAI's two-year lobbying record against the exact safety policies the paper now endorsesThe timing collision: the policy paper and the New Yorker investigation dropped on the same dayWho is funding the D.C. think tanks that will define responsible AI policyA closing question for every CEO: could your company write the equivalent internal document?Sources:OpenAI — Industrial Policy for the Intelligence AgeTechCrunch — OpenAI's vision for the AI economyFortune — Sam Altman says AI needs a New DealAbout the show: The YPO Technology Network AI Brief is a daily podcast for YPO members — CEOs and company presidents — covering AI developments with direct business impact. Hosted by Stephen Forte.

The Citizen Hacker | April 8, 2026Anthropic built an AI model so capable at finding security vulnerabilities that it cannot be released to the public. Claude Mythos Preview has already found thousands of high-severity flaws in every major operating system and browser, including a 27-year-old bug that survived decades of expert review. This episode unpacks what that signals about corporate security today, introduces the citizen hacker, and closes with five specific moves every company needs to make before this month is out.What we cover:The model Anthropic won't release: what Claude Mythos found, and what it means that it found these flaws entirely autonomouslyThe reality check: 94% of passwords reused, breaches taking 328 days to detect, hackers paying employees up to $15,000 for network accessThe citizen hacker: how vibe coding's mirror image is already attacking companies at scaleThe five moves: credential audit, AI log monitoring, agent governance, behavioral monitoring, continuous patchingKey data:74-95% of breaches involve the human element (Verizon / SentinelOne 2025)Average credential breach detection: 328 daysTime-to-exploit: negative one day (Mandiant 2025)Insider risk: $19.5M per organization annually (Ponemon 2026)Attacker breakout time: 29 minutes, down 65% (CrowdStrike 2025)Global ransomware damage: $74 billion in 2026 (Cybersecurity Ventures)Sources:Anthropic Project GlasswingSecureframe 2026 Data Breach StatisticsMandiant: Negative Time-to-ExploitPonemon/DTEX 2026 Cost of Insider RisksForrester: Vibe Hacking and No-Code RansomwareCybersecurity Ventures: Ransomware Damage 2026Hosted by Stephen Forte, YPO Tahoe Integrated, YPO Miami Gold, YPO London Gold

In this episode of the YPO Technology Network AI Brief, Stephen Forte examines Microsoft's multi-model Copilot rollout — one of the most substantive architectural changes in enterprise AI this year. The episode covers what's deploying now, what goes generally available May 1, and why the gap between Microsoft's installed base and active usage is a change management problem, not a technology problem.Key topics covered:Multi-model Copilot: Critique and Council modes — GPT and Claude reviewing each other's work, producing a 13.8% improvement on the DRACO research benchmark; Council mode runs multiple models in parallel and synthesizes where they agree and divergeCopilot Cowork and Agent 365 — long-running agentic work that continues after you close the browser, currently in the Frontier program with Capital Group; Agent 365 goes GA May 1 at $15/user/monthThe adoption gap — Microsoft has 400 million installed users but only 15 million paid Copilot seats (3.3% penetration); of those, only 35.8% are actively using the product versus ChatGPT Enterprise's 83.1% activation rateCopilot Studio model marketplace — April GA brings a platform where enterprise developers can orchestrate Claude, GPT, and Grok models against internal data via Fabric integration and the Agent-to-Agent protocolPricing referenced:Agent 365: $15/user/month (GA May 1)Microsoft 365 E7 bundle (E5 + Copilot + Agent 365): $99/user/month (GA May 1)Copilot enterprise: $30/user/month; SMB: $21/user/monthHosted by Stephen Forte for the YPO Technology Network.