Teahose.
SIGN IN
NEW HERE — WHAT TEAHOSE DOES
We read the entire AI & tech firehose — so you don't have to.
PODPodcastsAll-In, No Priors, Acquired…
NEWNewslettersStratechery, Newcomer…
PAPPapersPhysical AI research
PHProduct Huntdaily launches
VCInvestor ScoutSequoia, a16z, Benchmark…
CLAUDE DISTILLS →
7 reads, 30 sec each — free, 6 AM ET.
+ a live graph of the companies, people & themes underneath.
HOME/20VC/20VC: Satya Nadella on Open vs C…
POD
// EPISODE
20VC

20VC: Satya Nadella on Open vs Closed Models: Who Wins | Whether to Trust Frontier Model Providers | Why Companies Need to Own Their Own Intelligence | The Importance of Verticalisation: From Chips to Models and More

DATE October 26, 2026SOURCE 20VCPARTICIPANTS HARRY STEBBINGS, SATYA NADELLA
// KEY TAKEAWAYS6 ITEMS
  1. 01Assume the Model Is Compromised: Build Zero Trust Around It
  2. 02The Concrete Agent Trust Stack: Identity, Tamper-Proof Logs, English CoT, Policy, Behavioral Monitoring
  3. 03Alignment Must Be Baked In During Pre-Training, Not RL'd In
  4. 04Commodity Tokens Win the Volume; Frontier Persists at the Edge
  5. 05The Reverse Information Paradox: Firms Must Retain the Surplus from Using AI
  6. 06Private Evals as the New Core IP, and the Firm as an AI Benchmark

1. Key Themes

Assume the Model Is Compromised: Build Zero Trust Around It

Nadella's central claim is that capability is scaling faster than alignment, so safety must be engineered outside the model. He reversed a prior assumption: "Scaling laws are working. Except one of the assumptions I had was that you'll have alignment just fall out of scaling and it doesn't seem to be." 00:03:40 His prescription is architectural: "let's create an engineered zero-trust environment that can contain any malfunctioning agent before it does any harm, right? So that's the point, because if you're really going to have agents that are more capable and yet less aligned, then you need to have a trust system that you can rely on." 00:03:40 He separates this from AI safety itself: "people conflate... an engineered, security, zero-trust architectural system for containment... and AI safety, right?" 00:05:58

The Concrete Agent Trust Stack: Identity, Tamper-Proof Logs, English CoT, Policy, Behavioral Monitoring

Nadella spelled out the components, making this an actionable spec for security and infrastructure builders: "It gives every agent an identity. It then logs all of its activity, all its tool calls, in fact, every model call and the COT in it. In fact, that's where I'm also asking that all the COT better be in English and not in neuralese, and then you can check using multiple models. It better be tamper-proof, right? You can't have the agent go modify its own logs. And then on that, you set policy, and then you behaviorally monitor the activity of the agents, so they conform to the policy." 00:04:40 He pointed to Microsoft's Agent 365 as part of this. He says the architecture exists today, not as a future roadmap. 00:05:58

Alignment Must Be Baked In During Pre-Training, Not RL'd In

A strong technical position on where alignment has to happen: "my take is that... it really mostly has to show up in training, right? In fact, maybe even in pre-training. I don't think you can even RL your way to alignment. You have to truly get alignment to be something that truly gets embedded in the weights, right at the very beginning of it." 00:04:40 He named this his biggest change of mind in the past year: "I used to always think that alignment will just fall out. I no longer believe that." 00:00:00

Commodity Tokens Win the Volume; Frontier Persists at the Edge

On open vs. closed traffic, Nadella argues saturation drives migration to cheaper models: "most things seem to get saturated. And when it gets saturated, open weights or, or even just cheaper models of even closed weights seems to work." 00:09:03 The mechanism is training on your own traces: "if you can train on your own traces, then you really don't need the latest model to be able to solve that same problem if the problem has not changed." 00:09:03 His prediction: "there will always be a market for frontier... But I think predominantly token usage will be commodity token usage." 00:09:40 He reports his own mix: "if you look at my own usage inside a Copilot, we use a lot of closed-source, cheaper models along with open-weight models." 00:10:10

The Reverse Information Paradox: Firms Must Retain the Surplus from Using AI

This is the intellectual core of the episode. Nadella inverts Kenneth Arrow's information paradox: "Kenneth Arrow kind of described this paradox of information where if you're a seller and you disclose the secret without a patent or a trade secret protection or copyright protection, you leak the value. Now, for the first time, the buyer needs the protection because the buyer... even it's, you know, most people think of it as, 'Oh, my data.' It's even my exhaust of using it, right? Thumbs-up, thumbs-down signal, right? Who, like, you're creating value for the model company versus capturing that value for yourself." 00:10:40 He grounds it in Hayek: "tacit knowledge is distributed throughout the economy, right? Without that... there can't be only one firm and it can't be one intelligence." 00:10:40 Retention does not require custom weights: "It can be in context. It can be in your evals." 00:10:40

Private Evals as the New Core IP, and the Firm as an AI Benchmark

Nadella predicts a new unit of corporate IP: "every firm will have a private eval benchmark, which is their core IP. And every model comes in and tries to sort of hill climb on that eval, and that to me is how a firm works." 00:10:40 When asked what looks crazy now but will be common in five years: "a firm would be an AI benchmark." 00:22:57

Horizontal Specialization with Competition at Every Layer, Not One Vertical Monolith

Asked whether you must own chips-to-apps, Nadella rejects the monolith: "If anything, it's going the other way, which is every day you wake up and you say, 'Wow, there's more competition in every layer of the stack. Whether it's in silicon, whether it's in systems to manage the silicon, in the model layer, in the app layer.'" 00:15:46 He expects router-based composition: "you could even have something like... a router with even a decision engine built into it, and then you just route to the best model for a given task." 00:15:46 His hope: "a little bit of a horizontal specialization with multiple winners in each layer, and then the ability for people to compose." 00:15:46

The New Implementation Economy: FDEs as Business Consulting Fused with Technical Consulting

Nadella describes a hybrid services category: "It's not classic management consulting. It's not classic systems integration, and it's not classic sort of technology support." 00:13:58 His Unilever example: an agentic order-to-cash and trade-claims system that "started with, what's the business? What's the eval? What's the way to conceptualize the agentic architecture?" and was then handed to Unilever's own IT team. 00:13:58 His prediction: "the traditional systems integration will become new FDE." 00:13:58

AI's Value Is Gated by GDP Growth and Supply Constraints

On $100B training runs: "ultimately, it has to come from the world GDP inflecting, and then that allowing someone to then have as a percentage of R&D... Companies that are heavy R&D spend what, 15, 20% on R&D?" 00:17:33 On supply: "we have power shortages, we have silicon shortages... They will all, they're long-lead items... no one knows, right? Quite frankly, anyone of us who are sitting here today will just be speculating." 00:17:33 He sees the best-fit sectors as those with least displacement: healthcare (NHS Copilot) and software development, where "the IT backlogs were huge, and none of us even recognized it." 00:19:06

Diffusion Follows the PC and Cloud Pattern: Today's "AI-Native" Becomes Passé

"In the late 80s and the early 90s... the few companies that had deployed PCs and were doing forecasting... It took 10 years, maybe, and it spread." 00:12:48 "This time around, what is considered, 'Oh, I'm an AI-native company and I do this,' I think, you know, 5 years from now, it'll be pretty passé." 00:12:48 The cloud analog: "Even Lloyds, you know, which is what, 500 years old, is cloud native." 00:12:48

2. Contrarian Perspectives

The CEO of Frontier AI's Biggest Distributor Says You Cannot Fully Trust Frontier Model Providers

Harry asked whether disclosures from model providers can be relied on. Nadella's answer is structural: assume the model could malfunction and contain it externally. He goes further, noting the transparency problem is partly self-inflicted: "chain of thought itself can be unfaithful, and... it can be made worse when the model company says, 'Well, it's unfaithful, and I'm going to hide it.' And so it becomes even more problematic." 00:06:40 This is a Microsoft CEO publicly signaling that closed-weight opacity is a liability, an unusual stance for the largest commercial partner of a closed frontier lab.

Transparency Demands Could Drive Adoption of Open Weights Even Though Closed Models Are More Powerful

Counterintuitively, safety auditability, not cost or ideology, is the argument he gives for open weights: "closed-weight models are more powerful, but if they kind of don't recognize the need to be more transparent, especially as they're trusted partners use it, then we may have a problem." He frames CoT availability "for trusted partners" as "one of the things that may even drive more open weights quite frankly." 00:06:40

Microsoft Wants Its Own Models to Be a Plain Software Business, Not a Network-Effects Intelligence Business

On MAI: "We will have even the MAI models that will be, not open weight... I think of it more as licensed weights... I want to turn this into just a simple straightforward software business as opposed to a network effects intelligence business." 00:07:45 This rejects the dominant narrative that frontier AI is a winner-take-most network-effects game, and casts model access as licensable, ownable assets for customers.

Venture's "Top One or Two Wins" Rule Is Broken

Harry observed that Factory is "fifth, and it's winning," and "This breaks all rules of venture." 00:20:12 Nadella's framing of every-layer competition, with multiple winners in silicon, systems, models, and apps, backs the idea that this market is horizontal and multi-winner rather than monopolistic. 00:15:46

Coding Is Not Special in Its Elasticity, but Knowledge Work May Be Harder to Crack

Nadella cautions that coding's success comes from verifiable rewards: "a lot of the magic has been RL on top of these pre-trained models. That is what... has helped coding. Can we crack that in knowledge work? Seems much harder." He nominates science and engineering as the likely next elastic domains, including silicon design: "Your ability to tape out much faster, simulate everything in silico is much better. Your first spin can completely come out." 00:20:26

3. Companies Identified

Microsoft

Nadella's own company, building the agent-governance stack, Copilot, and MAI models. Mentioned for Agent 365 and Perception: "It gives every agent an identity. It then logs all of its activity, all its tool calls, in fact, every model call and the COT in it." 00:04:40 Also for MAI licensed weights: "I want to turn this into just a simple straightforward software business." 00:07:45

GitHub (Hydra-Fusion)

Microsoft's code platform, mentioned for a new capability Nadella is excited about. "I'm very thrilled about this Hydra-Fusion stuff we now have in GitHub... the cool thing there is, it's a learned model. It's anyway, we are now going into these agents swarms and multiple subagents. So I can call a lot of subagents that even happen to be local models." 00:09:03

Unilever

Global consumer goods company, cited as a flagship agentic customer. "They've built an agentic system to say, 'Hey, we're going to really have order-to-cash automated using an agentic system plus the trade claims.'... they start at the, using a frontier model and then they substitute for, in fact, I think they're using currently an MAI model for all the trade claims, because it's sort of a lower cost, and it's, by the way, they control it, right? Because they're able to train on their traces." 00:13:58

Rolls-Royce

Mentioned for maintenance scheduling as an agentic optimization problem: "Just schedule maintenance, and I now realize that, wow, that's a big optimization problem that you can go now run." 00:21:24

Barclays and Lloyds

Cited as forward-thinking large enterprises. Harry cited Barclays among customers owning their own intelligence. 00:12:33 Lloyds is used as the example that even a 500-year-old firm becomes "cloud native," and by analogy will become AI-native. 00:12:48

Harvey and Legora

Harry named them as examples of the "rarefied air" of forward-thinking AI-native companies likely to hold private evals, with Nadella agreeing the practice will spread. 00:12:33

Factory

AI coding company that Harry highlighted as a fifth-ranked player that is nonetheless winning, breaking the venture "top one or two" rule: "We're in, you know, Factory, which is fifth, and it's winning." 00:20:03

NHS (UK National Health Service)

Cited as the proving ground for Copilot in healthcare: "if it can improve patient outcomes and reduce cost in the healthcare, that is, by definition, you know, helping the GDP of the United Kingdom." 00:19:06

NVIDIA

Jensen is named as working on Western open-weight models: "I'm pretty pleased with some of the progress even the open-weight models in the West are making. And I'm, you know, obviously, Jensen's working on it." 00:07:45

Base44 and Laridin (sponsors)

Base44 is a natural-language app builder that Harry used to create a guest research hub: "I described it in plain English, a few minutes later, I had the product open in front of me: database, login, back end, and hosting already handled." 00:00:20 Laridin is an AI ROI dashboard measuring humans and AI agents, with Gainsight, Vertiv, and SurveyMonkey named as customers. 00:00:20

4. People Identified

Satya Nadella

CEO of Microsoft. The guest. Notable for the "reverse information paradox" framework, the agent zero-trust architecture, and a candid reversal on alignment. "I used to always think that alignment will just fall out. I no longer believe that." 00:00:00

Kenneth Arrow

Economist whose information paradox Nadella inverts. "Kenneth Arrow kind of described this paradox of information where if you're a seller and you disclose the secret without a patent or a trade secret protection or copyright protection, you leak the value." 00:10:40

Friedrich Hayek

Economist invoked for the foundation of firm-level intelligence. "If you go back even to Hayek, his fundamental description of a economy is local intelligence, tacit knowledge is distributed throughout the economy." 00:10:40

Mustafa Suleyman

Microsoft AI leader, cited by Harry as saying $100B training runs are coming that only a handful of labs can fund: "we've had like Mustafa Suleyman saying training runs of a hundred billion are coming and only a handful of labs can pay for that." 00:17:10

Jensen Huang

NVIDIA CEO, referenced as working on Western open-weight models. 00:07:27

Dario Amodei, Ilya Sutskever, Sam Altman, Greg Brockman, and Elon Musk

Named as the early, "one happy family" believers in scaling laws: "Dario and Ilya and Sam and Greg and Elon were all, I guess, one happy family. They were really the believers in scaling laws, and that's what I believed in, back in 2018, 2019." 00:00:00

Nadella's Father

A development economist, source of Nadella's motivation around convergence growth: "my father was a development economist and, you know, it was always about convergence growth. When will the global South get something that just suddenly boosts that? I hope this is it." 00:23:17

Harry Stebbings

Host of 20VC, who started the show at 18 from his bedroom in London with "no money" and "no contacts in my phone book." 00:00:20

5. Operating Insights

Build a Private Eval as Your Core Company IP Before You Need It

Nadella's operating advice is to codify your business problem as a benchmark that any model must hill-climb. This also makes model substitution cheap, so you can start on a frontier model and swap down to a cheaper one once the problem stabilizes. In Unilever's case, it "started with, what's the business? What's the eval?" and later moved to a cheaper MAI model for trade claims while retaining control. 00:13:58 Operationally: "if you have an eval that you want to continuously keep moving forward, then you may want to pay." 00:09:03

Capture Your Own Usage Exhaust, Because It Is Your Leaked Value

Treat thumbs-up/down signals, traces, and usage exhaust as proprietary assets. "It's even my exhaust of using it, right? Thumbs-up, thumbs-down signal, right? Who, like, you're creating value for the model company versus capturing that value for yourself." 00:10:40 Combined with training on your own traces, this lets you downshift to cheaper models once a problem stops changing. 00:08:48

Use Routers and Subagent Swarms to Mix Frontier, Cheap, and Local Models

Rather than betting on one model, build an architecture that routes tasks. "A router with even a decision engine built into it, and then you just route to the best model for a given task." 00:15:46 Nadella says his own Copilot usage mixes closed cheaper models with open weights, and agent swarms can call "local models." 00:09:03

Deploy FDE Teams as a Bridge, Then Hand Off to Customer IT

The Unilever pattern: embed forward-deployed engineers to frame the business, eval, and agent architecture, then transition ownership. "We had some FDEs, but a lot of, who got deployed and now the, their IT team itself is, you know, managing it all." 00:13:58

Daily Physical Routine as a Constant Under Heavy Travel

Nadella's habit: "every morning I get up... I walk with incline... I get hit the gym every day," regardless of jet lag, sustained for roughly 25 years. 00:21:47

6. Overlooked Insights

Nadella Quietly Declared the Chain-of-Thought "Not Reliable," Yet Is Building Governance on Inspecting It

Asked how reliable chain of thought is, Nadella answered flatly: "It's not, right?" 00:06:40 Yet his own trust stack depends on logging the CoT, requiring it be in English rather than "neuralese," and cross-checking with multiple models. The implication is that the real defense is not trusting any one CoT but redundancy: multi-model verification of tamper-proof logs. It also makes the language of internal reasoning, English versus opaque latent representations, a first-order governance requirement and a potential procurement criterion for enterprises. 00:04:40

"Cheaper Closed-Weight Models" Are Part of the Commodity-Token Story, Not Only Open Source

Harry framed the debate as open versus closed, but Nadella repeatedly widened it: commodity tokens "may be open weights or, as I said, it does, it has, it can also be cheap closed weights, right? Because they'll be lots of price competition." 00:10:10 The overlooked point is that price competition, rather than license type, is the commoditizing force. This means the strategic risk to premium closed labs is saturation of problem difficulty, which makes the cheapest adequate model the default for most volume, so margins compress unless frontier capability keeps expanding the set of unsolved problems. 00:08:48