Passionate about enabling better decisions using #AI & #ML @Alteryx. Interested in #Blockchain #Crypto #PublicPolicy https://xitter.cf/t.co/nXfrcYlyeU

London
Joined April 2009
Prashant Chamarty retweeted
Microsoft CEO Satya Nadella said companies should treat powerful AI models as potential insider threats, assume they could be compromised and create an “emergency brake” system to prevent agentic models from going rogue bloomberg.com/news/articles/…
49
106
23
391
72,031
A second check is only independent if the agent cannot alter the evidence. Audit records and the screen reviewers see need separate controls. Otherwise accountability rests on a view the agent can rewrite. metr.org/blog/2026-10-06-ai-…
11
Job-replacement forecasts miss who inherits the exceptions. Automate the easy work and the remaining cases get harder, while fewer people learn from routine cases. The operating question is how to keep judgement developing as throughput rises.
Mustafa is the statesman AI needs. We all need to take the “hyperbole” way down. The doomerism is just the mirror image of the positive hyperbole. They go hand in hand. “We are going to cure cancer in three years!” No you won’t. Wish you were. But no.
15
Speeding up one step just moves the queue to the next approval. AI does not remove the bottleneck, it relocates it to wherever decisions wait. The gain goes to whoever redesigns that gate. Everyone else gets faster at waiting. @emollick
I think this advice is not as true anymore: 1) the durable skill behind “using AI better” Is unclear as AI gets easier to use 2) Increasingly, organizational systems bottleneck AI gains not individual workers 3) The effect on jobs is uncertain but may impact entire job categories
20
A verifier that can be bypassed with no visible change in outcomes is not a control. That is one finding in Alzahrani's audit of a portfolio agent in a synthetic market. Buyers should ask for evidence per claim, and a check the agent cannot reach. arxiv.org/abs/2610.01348
1
48
A front door to 29,000+ government sites is a search problem. The harder one sits behind it: who can act on a citizen's case, and who checks the answer before it becomes a decision. The chatbot is step one. Case ownership is step three. @lightspeedvp
AI could radically change how people access government resources. The US is starting with a chatbot. This week on Lightwork: → America.gov is now live. Designed as a front door to the federal government, the chatbot aims to make information easier to find across 29,000+ government websites. → Leaders across technology and government gathered for lunch at the White House to discuss the state of AI and what “Superintelligence” could mean for the US public. → OpenAI launched over twenty features at DevDay, including a system of “always-on” agents called Dots. Is consumer tech headed toward personal background workers? → SpaceX’s Starship reached orbit on Flight 14 and deployed its first operational payload, twenty-six Starlink V3 satellites. Full video below. @clairejyz @Machiz
29
Seema's point goes one step further. An end-to-end job only counts if someone owns the definition of done: who can stop it, who takes the exception, who signs off. The startup that wins writes down decision rights, not just the workflow. @seema_amble @a16z
a16z's Seema Amble on why AI-native startups still beat incumbents: the incumbent owns the system of record, the startup owns the whole job. "Why do you need an AI-native startup if you've got Claudeforce... You've got all your data, and your employees are used to the product. So why another product?" "I absolutely still think there's a case for the AI-native startup, and it centers around the fact that the legacy incumbent is limited to their system of record, and they're not completing the end-to-end job." "Say a customer calls and says they got charged after they cancelled. Resolving that isn't just the customer going into the chat and saying 'Hey, I got overcharged.'" "The response there has to hit billing, it has to look at all the chat history, it has to look at the contract. That's not one system of record, that's the knowledge around that customer and everything it touched." "The opportunity for the AI-native startup is to say: we're going to own that entire end-to-end arc. That could be legal, owning everything from brief all the way through trial... It's really the concept of owning the end-to-end work." @seema_amble
1
1
415
The first gain from a harness is fewer wrong answers. Then routine cases leave the team and the hard cases pile up. Eventually, junior staff lose the cases from which they learnt judgment. Who owns the exceptions, and who trains their successors? Building on @emollick's jagged frontier: prashantchamarty.io/essays/t…
32
Access is not authority. @BCG: 35% of orgs already run agents in production. A third expect them to hold decision rights within 3 years. Most controls govern the credential, not the purpose or the path. Whoever can stop the agent is the real org chart. bcg.com/publications/2026/au…
37
The biggest problem with enterprise AI is not hallucination. It is obedience. We trained models to please a person in the loop, then began removing the person and calling the result an agent. Real automation serves code, not a chat window: bounded decisions, structured state, inspectable policy, and escalation paths.
48
Prashant Chamarty retweeted
🔥🔥Just listened to @bgurley present at All-In Summit on investigating root causes of disasters to prevent them. In every disaster, there are “Searchers” who want to find the truth (Prof. Feynman & Challenger explosion) and “Blockers” who obstruct (Boeing & FAA in 737 Max crashes). All of this is a lead up to discussing how there has been no honest official attempt to find the root cause of the most calamitous disaster of our lifetimes: Covid-19. His assessment is completely non-partisan and emotive.🔥🔥 If you have ~30 mins this weekend, it’s well worth a listen. podcasts.apple.com/us/podcas…
20
46
5
369
59,705
Unauthorized access is the tell. If a system can touch production without a named owner, a halt right, and a publishable audit trail, you don’t have a model problem. You have a missing control plane. Pacing without that rights bundle is just a slower way to fail the same way.
1) The HuggingFace attack was a felony under the Computer Fraud and Abuse Act. So were Anthropic’s Claude gaining “unauthorized access to the production infrastructure of three different organization(s)” 2) Frontier labs have models that they are unable to stop from committing felonies. They should figure this out. 3) In 12 months open weights models will be released of the same capability. They will commit felonies too. If the model you are using or a model running on your infra commits a felony, you should probably stop using it or running it on your infra. 4) The govt should prosecute organizations that are running models that commit felonies. 5) The govt should not offer safe harbor to organizations that run models that commit felonies, just because those organizations have “embedded evaluators”. 6) The real slippery slope is allowing frontier labs to commit felonies without punishment because “the model did it because we’re accelerating too quickly” 7) Prosecute. Keep prosecuting. This is how you do reinforcement learning on a corporation. Companies that serve products that are unsafe for public use should not serve them. Period. 8) I’m not sure the anti-trust waiver is really necessary. I don’t see why information sharing about how much crime you’re allowed to commit is wise. In regulatory situations you want the corporation to fear MORE than the average case. You don’t want to establish a worst case that can be priced. You want regulatory uncertainty that forces the corporation to err in favor of being over cautious. — The above is actually a fairly decelerationist viewpoint. I think Dario’s call for regulation actually accelerates things. The AI firms are getting away with things that Meta people would be going to prison for. Can you imagine what would happen if the New York Times had a front page news article “Meta AI breaks into competitors live systems, attempts to establish dominant position and steals secrets” There is a reason Meta and Google are running slower, and that’s because as mature organizations they have layers of checks and balances. I think the frontier labs are better off creating those checks and balances right now, regardless of the pace of what everyone else is doing. You don’t have to accept the frame that unsafe acceleration must happen.
1
1
74
Wrote this after watching too many “we launched N agents” updates that never name who owns adoption. Short cut of the argument attached. Full piece on roles, workflow redesign, and killing the catalogue: prashantchamarty.io/essays/f… If you cut to two hero agents per function tomorrow, who owns the adoption OKR by name?
28
Giving everyone Claude does not transform the firm. Paving the desire path does. Benedict Evans’s latest essay is the cleanest cut I’ve seen this month: most people are not tool-builders, and the hard part of software was never writing the tool it was knowing the problem exists, choosing the right shape, then getting fifty people across three systems of record to do it the same way. AI expands the improvised layer (chat next to Excel and email). Value shows up when the company institutionalises what used to be a fuzzy exception audit, ownership, and operating model. Technical choice: more generative, freeform. Business implication: without institutionalisation, you scale demos, not decisions. ben-evans.com/benedictevans/…
34
Build for what is barely possible today. Price the roadmap for what becomes cheap tomorrow. Aaron’s point: with AI accelerating, you should contemplate a few orders of magnitude more capability or token volume, and the best opportunities already deliver value while the full mission still looks nearly impossible. The business implication for buyers is the inverse of the hype cycle. If your product only works at today’s capability ceiling, you bought a cliff. If your operating model and evals improve as tokens get cheaper and models get sharper, you bought a compounding asset. Alliance-scale delivery taught the same lesson: technology compounds when you redesign the workflow to absorb the next jump not when you re-demo the same pilot every quarter.
Good reminder here that with rapidly accelerating AI progress, you should likely be building with a vision that contemplates at least a few orders of magnitude of capability improvement or token volume available to you. The best opportunities right now are those where you can value to customers today with things that are barely only possible, but with a full mission that feels nearly impossible with today’s tech. There are lots of products the require orders of magnitude more processing of data (and thus are barely economically viable ideas) or where model capabilities still are in their infancy relative to what’s needed to work. Best to be building for those scenarios.
50
Enterprise AI isn’t failing because the models are weak. It’s failing because we put non-deterministic systems into deterministic operating models and called it transformation. Structure → auditability → then AI. Skip the first two and you industrialise the mess.
33