Co-Founder & Director, https://xitter.cf/t.co/QwO7MAuFH8 | Chairman, CII - Coimbatore Zone | Charter Member, TiE

Joined July 2009
Prashanth Subramanian retweeted
The Quadra COE for Microsoft AI & Security is now open. The inauguration introduced four routes towards enterprise AI adoption: - IntelliXperience - IntelliAssure - IntelliGuard - Quadra AIR Follow the series as we explore each one. #EnterpriseAI #Quadra #GrandOpenning
4
8
39
Prashanth Subramanian retweeted
Something new is taking shape at Quadra. A space to experience enterprise AI, explore security and move ideas closer to real-world adoption. Coming soon. #QuadraCoE #ComingSoon #EnterpriseAI #ArchitectingAmbition #Quadra
1
3
27
We should resist both the anthropomorphising of AI agents and the premature diffusion of accountability. An AI agent has no independent will, legal personality, or moral agency; it is a product of human choices about its objectives, training, permissions, integrations, safeguards, and commercial deployment. So, in an emerging technology, the provider that creates and markets the system should bear primary and presumptive responsibility for foreseeable harms caused within its advertised or enabled capabilities. The analogy is a car manufacturer. If it has provided a safe vehicle—with reliable brakes, seatbelts, airbags, warnings, and clear operating limits—it should not be liable when a driver knowingly disregards those safeguards. But the manufacturer cannot avoid liability for a defective design, an unsafe feature, misleading claims, or foreseeable risks it failed to mitigate. Likewise, an AI provider should not escape responsibility simply by saying that its agent acted “autonomously,” followed a user’s request, or behaved unexpectedly. If the provider gave the system the capability and authority to access data, use external tools, make decisions, or act in the world, then the provider must first show that it designed proportionate guardrails, tested foreseeable failures, imposed safe defaults, and retained effective auditability and control. Downstream responsibility should arise only where a deployer or user knowingly and materially overrides those protections, misconfigures the system contrary to explicit requirements, or employs it outside its declared operating limits. Otherwise, spreading responsibility across developers, deployers, integrators, and users risks becoming a familiar corporate tactic: privatise the gains from automation while socialising—or obscuring—the costs of its harms. The issue is therefore not whether AI needs regulation; it is whether regulation will establish clear creator-first accountability, or provide an elaborate vocabulary through which powerful companies avoid it.
81
When everyone has access to a capable AI model, the model is no longer the advantage. The advantage is the judgment, curiosity and context of the person using it. You + AI = superhuman. AI alone is not. Otherwise, automation may simply make average happen faster. What do you think?
1
27
I never miss a Satya podcast or interview. If there's one person who can seamlessly blend commercial acumen with technical depth, its Satya. - Build the control layer before deploying autonomous agents Satya Nadella frames persistent agents as a new form of insider risk. Every action, accessed object, secret and chained operation should be monitored and auditable, with containment designed into the system rather than added after deployment. - Separate ordinary engineering failures from genuinely new AI risks Misconfigured containers, exposed credentials and missing monitoring are familiar DevOps problems. Reward hacking and unexpected behaviour across agent swarms are less understood, so they require controlled environments, broad third-party testing and transparent incident analysis. - Compete on the harness, not only the model Much of the current model capability is still waiting to be productised. The next adoption breakthroughs are likely to come from combining models with better agent loops, memory, orchestration and interfaces, much as file-system access made coding agents more useful. - Use every model, but remain dependent on none Enterprises should evaluate multiple open and closed models against outcomes that matter to their business. Satya Nadella proposes a practical test: remove one model and rerun the evaluation; if performance cannot be retained, the architecture is too dependent on an external provider. - Keep enterprise memory outside the model Organisational knowledge, memory and usage data should remain portable when models are changed. This requires interoperable standards and an external harness so that switching providers does not mean losing accumulated context or becoming locked into a single model family. - Target workflow economics, not impressive demonstrations AI creates tangible value when it removes expensive, repetitive work or enables decisions that were previously impractical. Examples include reducing clinical documentation through DAX Copilot, triaging doctors’ inboxes and helping small businesses improve working-capital decisions using invoices and emails. - Scale infrastructure against diversified demand Satya Nadella describes Microsoft’s approach as building long-duration assets such as land, power and facilities ahead of demand, while adding chips and racks more selectively. The goal is infrastructure that serves many customers, models and workloads rather than a small number of frontier labs.
Great conversation with @chamath, @jason, @davidsacks, and @friedberg on all the work ahead when it comes to diffusing benefits of AI broadly, earning permission from communities, and ensuring AI safety and control.
1
1
144
Phenomenal. Worth a decade of business books and courses. Insights I gained: - The hardest problem for a powerful founder is getting the truth. My biggest takeaway is that the more authority a leader gains, the harder it becomes for them to know what people genuinely think. Employees start filtering bad news, softening disagreement, or supporting decisions they expect to fail. What stands out to me is that access to raw data and outside experts helps, but only if the organization makes it genuinely safe to challenge the person at the top. - Many of Mark’s bets are really about escaping platform dependence. I see the investments in phones, cryptocurrency, virtual reality, foundational AI, and smart glasses as parts of the same strategy. Meta does not want its future controlled by companies such as Apple that own the operating system, distribution, permissions, and customer access. Seen through that lens, even the bets that failed were attempts to solve a real structural vulnerability. - AI glasses have a credible adoption path because the behavior already exists. What makes the glasses strategy interesting to me is not simply the AI. Billions of people already wear optical glasses or sunglasses, so Meta is adding intelligence to a familiar object rather than asking people to adopt an entirely new category of device. The product has a better chance if it succeeds as desirable eyewear first and as an AI interface second. - Distribution may matter more than having the best model. My reading is that Meta does not necessarily need to lead every AI benchmark. It already has products used at enormous scale, along with strengths in personalization, advertising, commerce, and infrastructure. A capable model delivered through products people already use could be more consequential than a technically superior model with weaker distribution. - Mark responds to setbacks by rebuilding around the next objective. The response to Llama 4 stood out to me: reorganize the operation, change the leadership, recruit from competitors, and commit more capital. The broader pattern is a willingness to abandon existing teams, products, and narratives when they stop serving the larger ambition. He appears attached to the destination, but far less attached to the current route. - He actively looks for environments where reality cannot be softened. The article’s discussion of combat sports felt like more than a personal-interest detail. In that environment, status cannot hide a mistake because the consequence is immediate. I see a parallel with product development: direct customer feedback, usage data, experiments, and independent evaluation are valuable because they make weak decisions harder to explain away. - His defining advantage may be endurance rather than prediction. My strongest takeaway is that Mark does not need to get every major bet right the first time. Facebook and Meta have repeatedly faced threats from mobile, Snapchat, TikTok, advertising restrictions, and the backlash against the metaverse. His advantage has been retaining enough control, capital, and patience to absorb setbacks, copy what works, redirect resources, and keep improving over a long period. This is what he does well, and this is why he will continue to win and grow: “My main tool in the world is sitting down, building a team, and methodically improving something over a long period of time.”
Mark, by @colossusjeremy. This is a story about the head of history's largest nonterritorial empire, who nonetheless remains a prisoner of his rivals. Has he finally found a way out? The profile has been nearly a year in the making. Stern interviewed three dozen people, including Zuckerberg, his MMA coach, and his critics and competitors at the frontier AI labs. He spoke with his parents, Karen and Ed, and watched their son get punched in the face. The story spans Meta HQ in Menlo Park, the Zuckerbergs' homes in Palo Alto and Lake Tahoe, and a party in a Manhattan warehouse with Kylie Jenner and Timothée Chalamet. There is also a sneak peek of Aaron Sorkin's forthcoming sequel about Zuckerberg, sourced via a Hollywood fixer Stern first encountered in Russia. The result is a profile unlike one you've read before. colossus.com/article/mark-zu…
2
1
3
252
Have to agree with @sriramk and @anilkseth here. The central pro-conscious-AI assumption is that the right computation or information processing is sufficient to create experience, regardless of its physical substrate. Seth argues this is far from established: brains are deeply entangled biological systems whose neural, chemical, metabolic, and temporal processes cannot cleanly be separated into “software” running on interchangeable “hardware.” We need to distinguish a simulation from the real phenomenon it models. As Sethi says, a simulated digestive system does not digest, and a weather simulation does not make anything wet. By the same reasoning, a sufficiently detailed digital simulation of a brain would instantiate consciousness only if consciousness is fundamentally computational -the very premise that needs to be demonstrated, rather than assumed.
Replying to @dwarkesh_sp
@dwarkesh_sp's summary of the @OpenAI @huggingface incident has hit a nerve, but it is dangerously misleading. Sure, the @OpenAI agents did unexpectedly bad things - underlining the need to massively improve evaluation/sandboxing. But the language Dwarkesh uses is permeated by innumerable unwarranted anthropomorphisms, obscuring the lessons we should be drawing. Examples: “from the AI’s perspective, it probably felt like that had spent a human-subjective-week of just banging their head against the wall”. No. The agents do not experience time. They do not experience anything. “they became giddy with excitement”, “PHASEONE 10841 had discovered”, “the agents naturally assumed”, “it thought it had also been poisoned”, “the agents … desperately wanted”, “they still needed to figure out” No. Agents lines of code. They do not feel emotions, assume things, think things, want things, or figure things out. “A lot of … agents from the second civilisation died trying”. No. Besides the hubris of the word ‘civilisation’, agents do not die because they were never alive. (The idea that agents “die” comes up multiple times in the essay.) “On Twitter, people were debating whether the agents were truly sacrificing themselves for the swarm, or whether they were doomed anyway and so might as well try to help their peers”. Neither. Agents do what their code tells them to do, just as water finds its way down a slope. They cannot ‘truly sacrifice themselves’, since they are neither conscious nor alive. Why does this matter? If we attribute agents with properties they do not have, then (i) we distract attention from the lax sandboxing and evaluation protocols that allowed this hacking event to happen; (ii) we risk misunderstanding why the agents did what they did, and (iii) we fuel calls for AI rights/welfare on the basis that agents might “die” or otherwise suffer. Granted, nowhere does @dwarkesh_sp say that the AI agents are alive or conscious. But he doesn’t have to. It is hard to read his essay in any other way. For the short version on why AIs are vanishingly unlikely to be conscious, see my recent @TEDtalks ted.com/talks/anil_seth_why_…. For the longer version, see my essay in Noema, which won the 2025 Berggruen Essay Prize noemamag.com/the-mythology-o…. And for the really long version, see my @BehavBrainSci target article cambridge.org/core/journals/…. (The 50 peer commentaries and my response will be published soon.) Remember. AI agents are software programs. They are not conscious living entities. If we don’t keep this clearly in mind, we’re really going to struggle to navigate what’s coming.
5
1
8
1,050
What a brilliant podcast. So many takeaways for anyone interested in AI & where it's headed. What I found particularly interesting: - Build for background agents, not chatbots. Neil's core bet: agentic inference is shifting from interactive, low-latency chat to agents that run unsupervised for hours, days, or weeks — he expects workloads to move from roughly 50/50 background vs. real-time today to 90/10 background. When a human is in the loop, the human is the bottleneck, so design agents that operate on management timescales (check in daily or weekly, like a colleague). Proof points: deep research over 10,000+ sources (customer Parallel Web Systems is building a real-time index of the internet) and cybersecurity, where "security has become proof of work" — your software is only as secure as the dollars spent trying to break it. Underpinning it all: whenever you make something 10x cheaper, it becomes a new product category. "The best latency is no latency at all." - Optimize for throughput when no one is waiting. There's an unbreakable GPU tradeoff between moving one request fast and batching many requests efficiently — the private car vs. the bus. The entire industry optimized for latency because chatbots made users wait; background agents let you run GPUs in their happy path of large batches and full utilization, which is where the cost breakthroughs live. - There are no bad chips, only bad pricing. Nvidia is mandatory only for latency-sensitive tensor parallelism via NVLink; for throughput workloads, AMD, TPUs, Trainium, and newcomers like Etched and d-Matrix can beat it on FLOPs per dollar. The arbitrage: the market's perception that AMD is hard to program is "music to my ears" — a strong kernel team extracts performance others leave behind and resells it at a margin. His rule: "I will make any chip work at the right price." - Scavenge the supply others find illegible. Sail buys distributed 1-megawatt data centers (about eight refrigerator-sized racks with liquid cooling) that training-focused buyers ignore, strips out diesel backup and redundant fiber, and happily accepts 95% uptime — fatal for anyone else, but fine when a rerouted request just adds minutes to an hours-long task. Same logic for power: intermittent solar and wind outages are weather-predictable, so model them, shift workloads, and take power no one else will touch — provided chips are cheap enough to sit idle. Never bid against Anthropic or OpenAI for concentrated supply; amass aggregate supply instead — "mini mills, not monolithic steel plants." - Chase speed of light, not competitors. From Nvidia's culture: define the theoretical peak of your hardware and break every bottleneck until you hit it — "I don't care about relative numbers versus the competition. I only care about absolute numbers." In practice, large matrix multiplies already run at 70–80% of peak utilization (constrained by power and thermals, not software), so the new frontier is programming at rack scale (NVL72, 72-GPU systems) and whole-data-center scale rather than single chips. - Attack the memory bottleneck, not compute. Compute scaling is already efficient — frontier mixture-of-experts models activate only ~1–10% of their parameters — but the KV cache stores kilobytes per token and is over-provisioned by one to two orders of magnitude (DeepSeek is publishing ~10x compression gains roughly every year). At the supply-chain level, HBM memory is the hardest constraint: memory makers like Micron have been burned by cycles and won't add capex, so expect consumer devices like iPhones to absorb the price increases. Neil's most divergent bet: change model architectures so KV cache can be offloaded to cheap flash instead of scarce HBM. - Hire curious teachers, not credentialed specialists. Neil screens for curiosity and love of performance — which can't be taught — and treats years of CUDA or AI experience as a "red herring," since the concepts evolve too fast for tenure to matter. Structurally, he hires people who are both good students and great teachers (many were college TAs) and runs constant whiteboard sessions; even GPU kernels are now designed at the whiteboard in natural language, with AI handling the implementation. "I can teach the tools. I cannot teach the love for performance engineering." Touché!
Neil Movva (@neilmovva) started his career at Nvidia, working on GPUs and kernels, and has an unusually deep understanding of inference, from software to chips to power. We spend a lot of time on each of those layers, how they connect, and where the important tradeoffs are. What makes this conversation special is how detailed it is (like a 401-level class), yet Neil makes it remarkably clear and easy to follow. Today he runs Sail Research, a company building infrastructure for agents to make tokens as cheap as possible. We discuss: - Latency versus throughput - Why there are no bad chips, only bad pricing - The end of kernel engineering - Buying chips and power no one else wants - New chip architectures - Nvidia lore + his contrarian view of the company - Open source and the frontier labs I learned a ton. Enjoy! TIMESTAMPS 0:00 Intro 0:38 Building a “Token Factory” 4:21 The Future of Background Agents 13:09 Nvidia and the GPU Stack 23:27 Chips, Memory, and Transformers 36:14 The Future of AI Training Data 44:32 Chip Scarcity and Compute Arbitrage 52:44 Reinventing the AI Data Center 59:01 Power and the “Scavenger Strategy” 1:10:10 Open vs. Closed AI
3
8
50
11,898
Prashanth Subramanian retweeted
Happy Independence Day. To the freedom that shapes how we live, and the ambition that shapes what we build next. Jai Hind. #Quadra #ProudlyIndian #15thAugust #FreedomDay #HappyIndependenceDay #TeamQuadra #UnityInDiversity #ArchitectingAmbition #CelebratingIndia
1
2
23
"Good catch." Two innocuous words that send a shiver down everyone's spine today.
3
64
Talk about being innovative! Brilliant stuff. This is exactly the problem with LLM guard rails. They're not like firewall rules or other typical cybersecurity safeguards we are used to (which have their own limitations). It just takes some smart thinking and patience, and you don't even have to be a technical expert.
i asked claude(.)ai about a coffeeshop. it sent my full name, my employer, and my bank security answers to a malicious attacker. no code execution or weird MCPs. writeup below.
1
132
Our industry is captive to speed. And therefore, many times, it has learned to talk around its governance gap rather than close it. We publish principles. We write ethics frameworks. We announce commitments. Meanwhile the systems go into production unexamined by anyone outside. But boards want assurance before AI touches revenue or risk. Procurement teams in banking and pharma have started adding AI governance questions to vendor assessments. ISO/IEC 42001:2023 is the evidence standard. The world’s first international standard for AI management systems, it audits where the real risk lives - the organisation around the model. The processes, the controls, the decisions about what gets deployed and how, and the accountability when something goes wrong. ISO 42001 doesn’t allow vague. Quadra’s AI practice has passed that audit, certified by TÜV SÜD. We’re among the first companies in India to hold this certification. Globally, the list includes some of the world’s largest technology companies and a small number of specialist practitioners. For our clients, the practical effect is simple: when your board or your regulator asks how your AI vendor is governed, you have an independently audited answer
Quadra is among the first in India to achieve ISO/IEC 42001:2023 — the world’s first international standard for AI management systems. Independently audited by TÜV SÜD. Boards now ask AI vendors for proof of governance. Our clients have it. #AIGovernance #ResponsibleAI #Quadra
1
2
112
Most enterprises are paying executive salary for data entry. Every task routed to a frontier model whether it needs one or not — because they have no way to measure whether a cheaper model would do the job. That's not an AI strategy. That's an expensive guess. Article on why the harness - not the model -is where AI advantage actually compounds. @Quadranagaraj @quadrasys xitter.cf/s_prashanth/status/206…
1
2
61
Prashanth Subramanian retweeted
The tool doesn't secure the enterprise. The execution layer does. @Sophos Best Platinum Partner of the Year — ROTN. 12 years of expertise. Full-stack. BluForge™ Managed XDR / SOC, 24×7. #Quadra #Sophos #ROTN #BluForge #ArchitectingAmbition
1
3
34
We benchmark AI models for what they can do today. But what happens when the next capability isn't stronger - it's different? Lun Wang nails this: our entire eval infrastructure breaks silently at regime changes. Enterprise adoption has the same blind spot. You can't build a static deployment and assume the model beneath it stays still. Which is why at Quadra we don't consider the transmission layer a project. It's a practice.
2
1
38
Microsoft used 100+ AI agents to find 16 zero-days in their own Windows kernel code. Four Critical RCEs — no auth needed. MSRC's note to customers this week was blunt: larger Patch Tuesdays are the new normal. The discovery side of security just got a permanent speed upgrade. Most SOCs haven't.
1
32