
Hi everyone,
Happy 4th of July to our American friends! It has been a good, light week, but quite a hot one in Boston!

World Cup fever continues with some amazing games. Cape Verde!!! What a fantastic performance! Cape Verde, as someone pointed out, showed how you can still win even if you lose in World Cup.

This week I wanted to finish a thought I started last week, about the build vs. buy decision. This time I wanted to chat about prioritization, always a hot topic with business applications teams, but especially now with AI in the mix.
Cheers.
Reza
📶 Signals This Week
Model access became a policy variable. The week's arc was hard to miss: Anthropic's Fable, a frontier model, went dark by government order, came back in stages, and the data that followed showed two thirds of enterprises had already built a model hedge before the reversal even landed. Add a federal AI agent bill and model standards accelerating out of the White House, and this looks like the quarter Washington moved from watching AI to steering who gets it. Treat model choice like a supply-chain decision, and test your fallback before you need it.
Agent security went from theoretical to demonstrated. This was the week the warnings got receipts: a coding agent hijacked through its monitoring integration, a hacker walking a frontier model into a ticketing exploit that touched nearly every US music festival, and a steady drumbeat on prompt injection aimed at agents, RAG pipelines, and model routers rather than chatbots. Agents don't just read your systems, they act on them, and the attack surface is the connections you approved. Treat agent credentials like production access, and review them the way you'd review a new hire with admin rights.
The jobs data refuses to pick a side. The studies keep cancelling each other out. One benchmark shows AI agents handling six times more freelance work than a year ago, though still only about a sixth of it. A study of a billion job ads finds the market reshaping rather than shrinking, with demand tilting toward judgment and away from routine tasks. And the companies spending the most on AI are hiring more people, not fewer. Whatever AI is doing to the job market, it isn't showing up cleanly in the data yet. When a headline tells you the answer is settled, someone is selling something.
🎯 The End of the Yes Reflex

The queue for yes
For most of the SaaS decade, IT's real job was saying yes. The business found a tool, the tool had a champion, and the request arrived pre-decided. There was a prioritization process on paper, but in most organizations I've seen, it was a queue for yes. For a while that was survivable, because the blast radius of any one tool stayed inside the tool. If marketing bought a bad platform, marketing owned a bad platform.
Andrea Ballinger, the CIO of Rensselaer Polytechnic Institute, described where that reflex leads in CIO.com's 2026 State of the CIO survey: "We are saying yes to everyone without stepping back and focusing on the business cases that show real value." Same reflex, new object. And the object has changed in a way that matters.
The blast radius changed
An AI request is not a SaaS request. When someone asks for an agent, an MCP connector, or data access, they're not asking for a tool with its own login and its own walls. They're asking for a capability that cuts across the CRM, the warehouse, the ticketing system, and whatever else it can reach. You've probably lived some version of what comes next. A connector gets rolled back because it reached the warehouse, the CRM, and customer data through one over-permissioned service account. An approval stalls for weeks because the one person coordinating the security review changed roles and nobody else owned it. The tool inventory has far more entries than named owners, and the AI request backlog keeps growing anyway.
Three breaks and a bill
Without prioritization governance, three things break at once.
Ownership: VentureBeat put it plainly this week, enterprise AI has an ownership problem, not a technology problem, and in their survey 17% of enterprises say no one holds formal accountability for AI at all.
Measurement: the same State of the CIO survey found 83% of IT leaders have or are building AI steering committees, 53% have a formal approval process, and still only 19% say their AI initiatives met business goals. Committees exist; teeth don't.
And control: Gravitee's February survey of more than 900 executives and practitioners found barely half of AI agents are actively monitored, and only 14% of organizations say all their agents went live with full security and IT approval. That's a lot of software running with more access than your newest hire and less oversight.
Then the bill shows up. A SaaS license creates a predictable run-rate problem. AI creates a unit-economics problem, because cost scales with use. TechCrunch reported in June that Uber burned through its 2026 AI coding budget by April and now caps spend per employee, and Ramp's customer data shows average monthly token spend up 13x since January 2025. Prioritization used to be roadmap politeness. Now it decides where real money compounds.
Five moves
The fix is less exotic than the problem. It's a demand-management motion, and I've been building a version of it with clients. Five moves.
One front door. A SaaS request, an MCP request, an agent request, and a data-access request are the same question wearing different clothes: should this capability exist, who owns it, what can it touch, how will we know it worked, and when does it get turned off. Route them all through one intake, renewals included, because AI now arrives inside tools you already own.
Validation before evaluation. The teams the request touches confirm its prioritization first. The requester states the outcome they want, and the impacted teams confirm the problem is real and actually theirs, and needs attention soon.
A joint review, not two silos. The application team and the AI team sit at the same table and answer three questions. Do we already have something that does this, or can an existing system be extended? Is this something the AI team can build, now or on a near roadmap? And does either team have the capacity to take it on without dropping something bigger?
A shared ROI test. Requests rarely arrive with humble math. The projections are confident, and often the confidence belongs to the vendor doing the selling, or to a team that just wants the yes. So the application team and the AI team pressure-test the assumptions together, and the numbers that survive become the yardstick later. And if nobody can say what the thing will actually cost to run, it isn't ready to be bought yet. Fund it as a small, time-boxed experiment whose job is to find out.
An escalation path with a purpose. When the business disagrees with the call, or it requires heavy investment of resources, it goes to a small advisory group, say CFO, COO, CIO, and their job is to referee tradeoffs and keep the company pointed at the big rocks, not to process tickets.
Too small for the machinery
One caution. A reasonable pushback here is that most requests are too small for this machinery. Correct, and that's the design. Most things should clear a fast lane in days. The full review is reserved for anything that touches shared data, customer records, or real money, and it gets a clock too, or people route around it.
Permission to say no
The operators are already moving. Eric Pace, who runs AI at Cox Business, told CIO.com in late June that his team keeps full visibility into AI spend and token consumption across the enterprise, and that "we have used 'no' liberally to keep our people focused on the things that will get us to value quicker." Chris Campbell, the CIO of DeVry University, made the same point to TechTarget: "By centralizing intake, we stopped duplicating work and started building reusable agentic AI patterns."
Notice what both of them are describing. The intake isn't there to approve things faster. It's a permission structure for saying no, and no is what protects the yes that matters. Slow down enough to put the big rocks in first, and the small rocks still find room. Say yes to everything, and the rocks bury you.
💬 Overheard

📡 The Wire
The switch got flipped back on. Anthropic's Fable is back worldwide after Washington lifted its export-control order, ending a three-week stretch where the most capable model on the market was a policy decision. And the next launch arrived pre-negotiated: OpenAI unveiled GPT-5.6 Sol, Terra, and Luna to just 20 partners at the government's request, with access widening in the coming days and broad release expected by mid-July. Model availability is now a negotiated outcome. Plan around it the way you plan around regulators, not vendors.

The labs are coming downstream. In a single week, Microsoft stood up a $2.5 billion Frontier Company with 6,000 engineers to deploy AI inside customer organizations, and AWS committed $1 billion to forward-deployed engineers who embed with clients in 45-day pods, both answering the multi-billion-dollar deployment ventures OpenAI and Anthropic launched earlier. Claude Science is the same move made through a product instead of people: an autonomous research assistant for pharma that can trace every result back to its source. Your model vendor wants to be your systems integrator now. Take the help where it fits, but price the lock-in before you sign.
The market already repriced the stack. For the first time in over a decade, asset-heavy industries out-created tech: software fell from 4th to 31st in BCG's five-year value-creation rankings while mining, defense, and banking climbed, because the AI money is landing on chips, power, and data centers rather than application software. But the same report carries a comfort for anyone sitting in a falling industry: in 32 of 35 industries, the best-run companies still beat the market overall. A hot sector doesn't guarantee returns, and a cold one doesn't block them. How well you run the company matters more than which industry you're in.

Software and IT Services slid 27 places in one year while mining, aerospace, and banks took the top of the table. Source: BCG, 2026 Value Creators Rankings.
And AI keeps colliding with people in ways nobody planned for. Start with the one every operator should sit up for: MIT tested the leading chatbots and found they give less accurate and more condescending answers to users who seem less educated or write in imperfect English, even refusing questions from less-educated users in Iran or Russia that they answered correctly for everyone else. The safety training itself may be the cause. If your customers or your workforce include non-native English speakers, your AI may already be serving them worse, and nobody is measuring it. In the UK, meanwhile, workers are using chatbots to research employment law and sue their employers without hiring lawyers. It levels the field against well-staffed HR departments, and it's also jamming the courts: claims are up 39%, the backlog is up 55%, and hearings are now booking into 2028, partly because the chatbot hands every claimant a polished document with a big damages number at the bottom that they then refuse to settle below. And in a sign of where the hard problems are moving, the AI labs are hiring philosophers faster than they can graduate: as models start acting on their own, someone has to write the rules they live by, and that's ethics work, not engineering. Philosophy graduates now have lower unemployment than computer science graduates, a full reversal of the "learn to code" decade.
🌍 Meanwhile...
Plants spy on the competition

Turns out plants run their own intelligence operation. A new study in the Journal of Experimental Botany isolated three barley varieties in chambers connected only by one-way air vents, so the only thing passing between them was airflow. The slow growers, fed air from fast-growing cousins, produced 20% more biomass, apparently sensing they'd otherwise get shaded out. The fast growers did the opposite: with less need to race for the sun, they eased off growth and poured resources into chemical defenses that make their leaves unpalatable to pests. So plants don't just react to damaged neighbors signaling an attack, they read the quiet signals of healthy rivals and retune their whole strategy: race, or fortify.
Source: How plants keep tabs on the competition, The Economist, June 18, 2026
📚 What I'm Consuming
AI models' values are very different from most people's (Economist) - Tested against a global values survey, the major AI models lean more secular and individualist than people in almost any actual country. That matters because when you ask a model something with no factual answer, like how to handle a family conflict, its built-in values quietly make the call for you.
Nvidia's Kimberly Powell: "We are reinventing the doctor experience" (FT) - Nvidia's healthcare VP says the sector is adopting AI ~3x faster than any other, and not to cut costs: there aren't enough clinicians to begin with, so "job replacement" is nonsensical. The cleanest version of adoption pulled by scarcity, not efficiency.
Inside Anthropic's bet on agents that work while you sleep (video, Jess Yan) - Asked how to automate a big process that spans 20 people and several quarters, her answer is to start small: give one person a set of agents, make that single role far more productive, prove it works, then widen out to the whole process. Start with the smallest win, not the whole machine.
The End of Marketing Campaigns as We Know Them (BCG) - Marketing shifts from scheduled campaigns blasted to everyone toward agents deciding the right message for each individual in real time. The calendar-driven campaign stops being the unit of work, and the hard part is changing how teams operate, not the technology.
Sam Altman with Nick Thompson (video, The Atlantic) - Altman argues you can't just make AI safe at the lab and stop there; the institutions around it, banks, hospitals, infrastructure, have to get more resilient too, because powerful models will leak out no matter what the labs do. He also floats paying pennies per use (17¢ to read something, $1 for full access) instead of one flat monthly subscription.
The AI paradox: more automation, more humans, more work (video, Dan Shipper) - The counter to the clean "AI means fewer people" story: every useful agent still needs a human who sets its context, notices when it breaks, and decides what's worth handing off.
🌙 After Hours
Plastic Inc. (2026)
Beth Gardiner | 352 pages | ★★★★☆
This is a piece of investigative journalism about the plastics industry: how plastic gets made, who profits from it, and where the costs of dealing with the waste actually end up. I liked it more for the questions it raised than for how tightly it argued them. A lot of it is anecdotal rather than rigorous, and it walks through the various arguments about plastic and pollution more than it lands firmly on any of them.
Where it got interesting for me was the economics. Gardiner's point is that the low price of plastic doesn't reflect its full cost, because the cleanup, the disposal, and the long-term damage get paid for by the public and the environment rather than the companies that produce it. That raised a question I found worth sitting with: who ends up owning a cost when the people creating it and the people paying for it aren't the same? I wish the economics and the health science had been sharper throughout, but as a map of how an industry's incentives shape its behavior, it was worth the read. And the question travels well past plastic. A price that looks cheap often just means the real cost is landing somewhere you're not looking. Sounds familiar?
🎙️ Listen
Prefer to listen? Quanta Bits is also available on Apple Podcasts and Spotify.
How This Gets Made
I collaborate with Spock, my AI agent. He researches extensively: scanning, filtering, and surfacing what's relevant across my business. I read, listen, and watch what resonates, and decide what matters. I provide direction, we draft together. The editorial judgment is mine. He'd tell you the same. Most logical. 🖖