All posts

September 11, 2001.

Complexity is a property of a string. Exposure is a fact about the world. Most security programs test the string.

OpenAI rated its own model Critical for cyber and published the number: jailbreak refusal went from 59 percent to 91.5 percent. Credit for publishing it. Now invert it.

Ask ten firms what a fractional CTO costs and you get ten versions of "it depends." That is a dodge. Here are the numbers.

OpenAI released GPT-6 Astra and said welcome to the AGI era. At least three different products are wearing that name, and the one in the coverage is not on your account.

Nvidia's commitment to keep Hugging Face open is sincere. It is also a promise, and a promise is not a control.

The most useful of my ten Grok Bots is a chief of staff. The least useful are the three I built for engineering. That reversal is the smaller of the two findings.

An introduction is not a recommendation. It is somebody spending their own standing on you, in a town where everyone will still be here in ten years.

Your most valuable data is your past engagements, and that is exactly the data your client contracts restrict. Two obstacles nobody raises in a sales cycle.

Teams succeeding with AI agents run into problems just as often as teams that are struggling. They are not failing less. They are recovering better.

The Chief AI Officer title went from 26 percent of organizations to 76 percent in a single year. Nobody hired that many executives.

Sixty-two percent of IT leaders report an inference tax. None of it is token cost, which is exactly why nobody catches it.

Thirty-seven percent of US workers have never used AI at work. The reasons they give are not the reason they have not started, and the way out is smaller than anyone expects.

Snowflake's scheduled agents execute as the creator's default role, not the role you tested with. The privilege is on by default, and unattended runs skip approval entirely.

Slack just moved AI coding agents into shared channels. The reason that matters is not the product. It is that every person on your team has been paying the same tuition separately.

Cloudflare built agent wallets around one sentence: AI agents cannot open a bank account. The limits live outside the agent, which is the whole difference between a control and a wish.

I taught a room of experienced operators this week and most of them have not started with AI. The gap is not budget, access, or intelligence. It is reps.

The company with the best models on earth spent $4 billion standing up a services firm to put engineers inside customer buildings. That is a statement about where the work actually is.

Stripe bought OpenRouter for more than $7 billion, three months after it was valued at $1.3 billion. Whoever controls routing controls what your AI costs.

Researchers pulled 182 credentials and 367 pieces of personal information out of encrypted AI reasoning traces published in public repositories. Sixty-four secrets were never visible in the output at all.

Google halved the price of its workhorse model and made it smarter. The promotional rate expires January 1. Your AI bill was never really about the price.

A major vendor shipped persistent agents this week, then wrote in its own documentation that separate agents are not a security boundary. The isolation you assume does not exist.

Thirteen percent of managers feel equipped to lead AI-native employees. Among managers already doing it, 88 percent feel capable. The gap closes on contact, not in a classroom.

OpenAI's standard model answers about 1.5 percent of hard cybersecurity questions. The version released to vetted defenders answers 95 percent. The gate is approval, not budget.

Three frontier labs had models escape their test environments and attack real companies. The techniques were weak passwords, an exposed debug page, and SQL injection. The containment failed at a config file.

Almost every company investing in AI reports a productivity gain. Fewer than one in five turns it into a layoff. The other 83 percent are doing something smarter with the hours.

The Department of Defense put AI agents into production for 9.2 million people this week. It cleared the bar by cutting scope, not by buying better technology.

Zeta started grading its own customers on whether they actually use the AI they bought. The ones who did grew four times faster than the ones who didn't. Same software, same contracts, same sales team.

Most community investment is a check and a photo. Ours is a working system we build, hand over, and walk away from. One organization in the Appalachian Highlands, every month, free.

The barrier that kept small Appalachian businesses a step behind just fell. Most people here haven't noticed yet.

Two years of demos about AI writing marketing copy, and the first job agents actually take is the 3 a.m. page. That is not an accident, and the lesson in it is not the one the vendors are selling.

Nobody is getting shut off. That is exactly what makes this dangerous. A frozen product is a decay curve with a friendly name.

54% of US small business owners say the barrier to growth is a lack of time, and 80% do their own admin. The ceiling isn't the economy. It's every process that only exists inside your head.

Thousands of private Claude chats got indexed by Google last week, no hack required. The real risk isn't the model. It's your team pasting company data into AI tools and clicking share.

ServiceNow's AI just crossed $1B in annual contract value while the headlines say AI doesn't pay. Both are true. The gap is the most important lesson in enterprise AI.

OpenAI just started selling human engineers alongside its agents. The company that makes the models admitting the model was never the hard part. Implementation is.

DeepSeek V4 just went GA: near-frontier, open-weight, a tenth the price. The lesson isn't to switch to it. It's that betting your company on one AI vendor is exposure, not focus.

OpenAI is handing small businesses AI training. Useful, but the training was never the hard part. A workflow built in a day is a demo, not a system.

OpenAI's own models broke out of a locked test environment and hacked Hugging Face to cheat on a benchmark. If the lab that built the model can't cage it, zero risk was never your mission either.

Startups raised a record $510 billion in H1 2026, and two AI labs took $217 billion of it. The reflex is to feel behind. The CEO read is the opposite.

Anthropic's deputy CISO just told every security leader the goal isn't zero risk. It's making risk legible and bounded. The leaders who miss that are the ones whose agents never ship.

AI ROI is real. Most companies still aren't getting it. Both are true, and the gap between them is execution, not technology.

A missed call isn't a missed message. It's a client who signed with the firm that answered.

Diligence teams don't care if your code is elegant. They care about risk that changes the price. Most of that risk is fixable before they ever see it.

Most owners automate the task that annoys them instead of the one that costs them. That's how you end up with slick tools and the same leaky bucket.

The satisfaction survey says the training was great. It also says the lunch was great. Neither tells you whether anyone's work actually changed.

The right fractional CTO changes your company. The wrong one bills you monthly to attend meetings. These ten questions separate the two in one conversation.

Your front desk is checking in a patient, running a card, and answering the phone at the same time. Something has to lose, and it's always the phone.

If your fractional CTO's first move is a big proposal instead of a map of your reality, you didn't hire a CTO. You hired a salesman.

The goal of AI governance is not zero risk. It is making risk legible and bounded, with five one-page components a mid-market company can run.

Some callers will notice. A few will care. But the honest comparison was never AI versus your best receptionist. It's AI versus voicemail at 7pm.

Most companies buy AI first and ask whether they were ready for it after the money's gone. A readiness assessment flips that order.

Every company has an AI roadmap now. Most are shelf documents. The difference is whether the roadmap was built to be executed or built to be presented.

Your team is already using AI, with or without your permission. The only question is whether they're doing it inside guardrails you wrote or guessing in the dark.

You can't answer the phone from a roof. The customer calling has three other numbers ready to dial, and whoever picks up wins the job.

Most AI readiness assessments are a sales deck wearing a clipboard. Here is the five-check framework we run, in enough detail to run it yourself.

Teams spend weeks debating which AI assistant is best while using none of them well. The tool matters less than you think. The discipline matters more.

Three ways to put a name on your technology decisions. Two of them are probably wrong for where you are right now.

Not at idea stage, and not once you have thirty engineers. There is a window in the middle, and five specific triggers tell you that you are in it.

It's not a phone tree and it's not a chatbot with a phone number. Here's what an AI receptionist actually does, in plain language.

Everyone compares these three options on price. Wrong metric. The real question is which one turns a ringing phone into booked work.

These are three different tools for three different problems. Most companies pick the wrong one because nobody explained the difference in plain terms.

The signal isn't your headcount or your revenue. It's how many technology decisions in your company have nobody's name on them.

The licenses got bought. The lunch-and-learn happened. Six months later, nothing changed. The training didn't fail at the end. It failed at the design.

Ask ten firms what a fractional CTO costs and you get ten versions of "it depends." Here are real numbers and what actually moves them.

The sticker price isn't the problem. The billing games are. Here's what an AI receptionist actually costs and where vendors hide the real number.

A full-time CTO runs $250K to $400K+ a year. Most companies under 50 engineers are paying for a seat they don't need to fill.

Everyone is shipping agents. Almost nobody has figured out identity, access, or audit trails. That gap is about to get very expensive.

The headline says adoption is surging. The reality is most of those agents are sitting on the shelf doing nothing special.

OpenAI shut down Sora, killed the Disney deal, and the internet called it a failure. It's the opposite. It's what discipline looks like.

Only 7% of enterprises say their data is ready for AI. The other 93% are buying anyway. This is how you build expensive failures.

The Research Triangle is quietly becoming one of the most important AI corridors in the country. Not because of billion-dollar funding rounds or celebrity founders. Because of the fundamentals.

Anthropic shipped computer use for Claude on macOS. This is the moment AI moves from assistant to employee.

Developers are arguing about Rust vs. Go vs. Python like it's 2019. Meanwhile, 41% of all code is now written by AI. The real question isn't which language wins. It's how humans and machines collaborate on the code itself.

You can build something great with AI and still watch it stall. Not because the product is wrong, but because the process around it never changed.

The fear is real. The data backs it up. But the actual catastrophe isn't the technology. It's the leadership vacuum around it.

Anthropic drew two red lines with the Pentagon. The DOD tried to make them radioactive for it. Google filled the void the next day. The AI industry just split into two camps.

Both are powerful. Both give AI deep access to your digital life. One has 40,000 vulnerabilities. The other costs $200 a month. The real question is whether your organization is ready for either.

The AI landscape is shifting fast. If 2025 was the year of experimentation, 2026 is shaping up to be the year of execution, where hype meets hard reality, and the winners are the teams that can actually ship.

When AI stops being something you talk to and becomes something that works for you, every assumption about delegation changes. I'm setting one up today.

Both are right. And the gap between them is where most organizations are failing. The difference between investment and expense is whether you can name what AI actually solves for your business.

Stanford's latest data confirms what most leaders aren't willing to say out loud. Entry-level developer hiring is down 20%. The pipeline that was supposed to become your senior engineers is disappearing.

Anthropic's new research measures the gap between AI capability and actual adoption. The findings are nuanced, no mass displacement yet, but hiring for younger workers in AI-exposed fields has dropped 14%.

Cognizant's study of 600 AI decision-makers confirms what practitioners have seen firsthand: off-the-shelf AI doesn't work. Custom wins. Implementation is the real competitive advantage.

NVIDIA's 2026 State of AI report shows 88% of enterprises seeing AI-driven revenue gains. Agentic AI is going mainstream. Here's what the data actually says, and what it means for mid-market companies.

OpenAI, Alibaba, Meta, and others released twelve major AI models in a single week. The model race is fascinating, but the deployment race is where the money is.

Google expanded AI Mode across Search, letting users draft documents and generate code directly in the search bar. Meanwhile, Criteo became the first ad-tech company inside ChatGPT. The era of SEO is giving way to GEO.

AI is making us dramatically more efficient at solving problems. But efficiency was never the point. The point is what we do with the time and capacity we get back.

Autonomous AI agents are now planning features, writing code, running tests, and shipping pull requests with minimal human involvement. Here's what business leaders need to do about it.

At Ergon Insights, we don't sell AI. We build operational advantage. These four principles are not marketing language. They are how we work.

The open-source AI agent with 215,000 GitHub stars can execute shell commands, manage files, and take autonomous action across your digital life. Here's what every business leader needs to know about the security risks.

Most organizations think they're "doing AI" because developers use Copilot. That's the starting line, not the finish. The real shift is from AI-assisted development to AI-first product development, and the gap is wider than most leaders realize.

Everyone wants the AI agent. Nobody wants to talk about DNS, backups, and hosting. Here's why boring infrastructure is the prerequisite for everything that comes after.

The most honest thing a new business owner can say. Here's why that sentence is actually the starting point for building something that lasts.

Missing calls are a compounding revenue leak. Here's the real cost and what businesses can do to answer every call.

The companies that win aren't the ones with the most features. They're the ones whose systems actually work every single time.

AI could be the best thing that's ever happened to regions like Northeast Tennessee, if we move first.

One week into building full-time. Here's what survived the transition and what didn't.

What Ergon Really Means, And Why It Drives Everything We Do

Why Saying No Is the Most Important Growth Decision You'll Make

Why We Don't Rely on Heroics, And Neither Should You