Full episode · 24 min
Satya Nadella: Whether to Trust Frontier Models | Why Companies Need to Own Their Own Intelligence
Satya Nadella says companies should treat frontier models as untrusted and build controls that let them use AI while keeping their own intelligence.
20VC · Harry Stebbings
- Satya Nadella is CEO of Microsoft.
The best minutes
Also worth watching
- 4:32Hidden reasoning makes model oversight harder3 min
- 15:47AI training budgets ultimately depend on GDP growth3 min
Skip the personal opening and sponsor reads, the exercise-routine exchange, the next-decade hopes question, and the closing sponsor reads.
Summary · 2 min read
Satya Nadella is Microsoft's CEO and has been at the company for 34 years, according to the episode description. The description says Microsoft was valued at $300 billion when he became CEO and reached $3.9 trillion under his leadership.
Nadella argues that model capability is advancing faster than alignment, so companies should surround AI agents with external identity, logging, policy and monitoring controls. He says firms should retain the value of their own data and AI use, including through private evaluations that could become core intellectual property. He expects much AI usage to shift to cheaper models while frontier models remain important for new problems, and sees implementation work as a blend of business and technical expertise. He also argues that AI could lift productivity and global growth if it spreads across sectors and improves outcomes in areas such as healthcare.
Minute by minute
- 4:32
Auditability may favor open weights. Nadella says chain-of-thought can be unfaithful, and hiding it can make auditing harder. He favors inspectable traces for trusted partners and says a lack of transparency from closed-model providers could increase demand for open weights. He also argues that an unaligned model could threaten its creators, not only its targets.
- 6:51
Most model traffic may become commodity. Nadella expects frontier models to remain useful for new problems, but says most token use may become commodity usage. He argues that companies can train on their own traces and use local or cheaper models for stable tasks. He points to GitHub's hydrofusion work and says Copilot uses both cheaper closed models and open-weight models.
- 8:53
Firms need to retain AI-created knowledge. Nadella says firms should accumulate knowledge through AI rather than leak the value of their data and usage signals to model providers. He expects each firm to build private evaluations that models improve against, making those benchmarks part of the firm's core intellectual property. He predicts this practice will spread beyond AI-native companies.
- 11:54
AI needs new implementation skills. Nadella says AI implementation will combine business and technical consulting rather than simply repeat traditional systems integration. He cites Unilever's order-to-cash and trade-claims agents: the company started with a frontier model, moved trade claims to a lower-cost MAI model, trained on its traces and now has its IT team managing the system.
- 13:53
Applications may route across a competitive stack. Nadella expects competition across chips, systems, models and applications, and says applications could route tasks to the best model. He sees vertical integration as possible but hopes multiple winners will emerge at each layer. He says inference demand has exceeded expectations and that large training runs depend on revenue, R&D budgets and long-lead supplies such as power and silicon.
- 17:41
AI could lift productivity and GDP growth. Nadella says AI could raise GDP growth if it improves outcomes and reduces costs, citing Copilot in the NHS as a possible way to improve healthcare. He also points to software development, science, engineering, silicon design and maintenance planning as areas where AI could expand output or improve productivity.
- 21:58
Companies may become their own benchmarks. Nadella says firms may come to function as AI benchmarks through their private evaluations. He hopes AI spreads across sectors and raises global growth, including by helping the Global South converge, rather than simply producing winners and losers.
Published Oct 26, 2026.
Transcript · 19 min read
20VC, hosted by Harry Stebbings, with Satya Nadella.
Transcribed by machine (Whisper) from the episode’s audio, so a word may be off here and there. Where the podcast’s audio and the video part ways, some times are a minute or so off.
- 0:03
internal systems ai agents whatever you need to build base 44 gets you there go to base44.com forward slash 20VC. That's base44.com slash 20VC. While Base44 helps you build faster, Laredin helps you measure AI impact. Every company now runs two workforces, humans and AI agents. Laredin is the first unified dashboard across both workforces that measures their work and optimizes their impact. Laredin answers four questions. Who's using AI? Which tools? What is it costing? And what's it actually being produced for every team across every vendor? AI ROI stops being a guess and becomes a number that you can consistently and confidently measure. Gainsight, Vertiv, SurveyMonkey, and many other enterprise organizations run their AI programs on Laredin. Thousands of AI tools and millions of dollars of AI spend are measured you bet on ai larid improves that it's working visit laridin.com to learn more that's l-a-r-r-i-d-i-n.com you have now arrived at your destination satya thank you so much for doing this with us i would say you know thank you for coming to the studio but you're actually hosting us here so really appreciate you taking the time like thank you so much for having me on the show harry
- 1:22
it's been a long time coming but i'm finally glad we were able to do it now you wrote a seminal piece 10 days ago or so. And you said that we should assume a model is compromised. And I just wanted to expand on that. Does that mean that we can't or shouldn't rely on the disclosures of the model provider companies? No, I think the challenge the way I see it right now is the models are becoming more and more capable, right? Scaling laws are working. Except one of the assumptions I had was that you'll have alignment just fall out of scaling and it doesn't seem to be. In this There's more science challenges there that need to be tackled, right?
- 1:58
And mechanistic understanding is also elusive. And so, given that, I think the best posture to have, if you want to continue to use these sophisticated models, is to treat these models in a trust architecture. I mean, after all, zero trust is not something new, right? We've had zero trust architectural approaches. So, the claim, at least I'm making, is let's create an engineered zero trust environment that can contain any malfunctioning agent before it does any harm, right? So, that's the point. Because if you're really going to have agents that are more capable and yet less aligned, then you need to have a trust system that you can rely on.
Read the whole transcript
- 2:33
Can I ask, what does that trust system look like? Who's the architecture of it? Who's the arbiter of it? It's a great point. So that's why I kind of look at it and say, you leave AI safety outside of this, right? Because that alignment, for example, at least my take is that it's really mostly has to show up in training, right? In fact, maybe even in pre-training. I don't think you can even RL your way to alignment. You have to truly get alignment to be something that truly gets embedded in the weights right at the very beginning of it. And so that's the model itself. Hopefully, at some point, we'll get aligned.
- 3:10
So if you leave AI safety, then the trust architecture is going to be just, you know, what a company like Microsoft does or all the cyber folks do. So what we have done, for example, is we build these two things, right? Agent 365 and perception, right? What does it do? It gives every agent an identity. It then logs all of its activity, all its tool calls, in fact, every model call and the COT unit. In fact, that's where I'm also asking that all the COT better be in English and not in new release. And then you can check using multiple models. It better be tamper-proof, right? You can't have the agent go modify its own logs.
- 3:47
And then on that, you set policy, and then you behaviorally monitor the activity of the agents so they're confirmed to the policy. So that's the architecture. We don't have that architecture today. Is that just symbolic of where we are in the production? No, that architecture exists. So there are two, I think people conflate what I'll call an engineered security, zero trust architectural system for containment and AI safety, right? Because I think people say, well, AI safety is hard and elusive and not yet achieved. So therefore, there must be nothing we can do on security. And I'm not saying that these two things are all got to come together at the same time. In fact, I would just say, hey, we have to deal with the situation as it exists. So let's build a trust system outside, in fact, of the model, and then just be super aggressive in setting policy and monitoring for policy deviation. On the monitoring
- 4:32Hidden reasoning makes model oversight harder
“We know that the chain of thought itself can be unfaithful.”
- 7:15
dimensions, which is like traffic and dollars. If we look forward, say, 24 months, what percent of traffic goes through open versus closed? It's a great question. I think it depends on
- 7:28
what the frontier looks like, which is I think most things seem to get saturated. And when it gets saturated, open weights or even just cheaper models of even closed weights seems to work. Because especially one of the things is if you can train on your own traces, then you really don't need the latest model to be able to solve that same problem if the problem has not changed, right? So if you have an eval that you want to continuously keep moving forward, then you may want to pay. But even there, by the way, I'm very thrilled about this hydrofusion stuff we now have in GitHub where- I just saw this. Yeah, because the cool thing there is it's a learned model.
- 8:12
Anyway, we are now going into these agent swarms and multiple sub-agents. So I can call a lot of sub-agents that even happen to be local models. And so I think my suspicion is that there will always be a market for Frontier. There will always be some new things. Science may be the next thing that Frontier is being set at. But I think predominantly token usage will be commodity token usage. Does that mean it's open source predominantly? It may be. It may be open weights. Or as I said, it can also be cheap closed weights, right? Because there'll be lots of price competition, let me put it that way, right?
- 8:53
Because if you look at my own usage inside a co-pilot, we use a lot of close source, cheaper models, along with open rate models.
- 8:53Companies should keep the intelligence their AI use creates
“For this to be stable, more of that surplus that gets created by use of intelligence to remain at the firm.”
- 12:06
Because when we think about these customers, like, as you said, some of your very big customers, they will need heavy FDE support, much more so than they have done in traditional years in the last 10 years, will we have a very heavy implementation economy to transition existing customers into this? Yeah, it's interesting, right? The implementation economy, like systems integrators have always existed, right? You know, we've depended on implementation economy for lots of other technology diffusion.
- 12:43
So this one, I think, has different contours, right? Because- What do you think is different about this one? It's just, it's the combination of tech and business, if I could say. But it's not classic management consulting, it's not classic systems integration, and it's not classic sort of technology support. It's sort of, like, for example, think about this, right? You want to start, like, when I look at my FDE engagements, right, even take the Unilever example I talked about at the keynote today. It's fascinating. They've built an agentic system to say, hey, we're going to really have order-to-cash automated using an agentic system, plus their trade claims.
- 13:15
And by the way, they started using a frontier model, and then they substitute for, in fact, I think they're using currently an MAI model for all the trade claims because it's sort of a lower cost. And it's, by the way, they control it, right, because they're able to train on their traces. And so we had some FTEs, but a lot of who got deployed, and now their IT team itself is, you know, managing it all. But it started with what's the business? What's the eval? What's the way to conceptualize the agentic architecture? So it's sort of business consulting combined with technical consulting. And I think, yeah, you're right in saying that there will be a new set of skills that will get built in the ecosystem. Today, I think all of us have, quote unquote, our own FDEs, but FDEs will become like, you know, traditional systems integration will become new FDE.
- 14:05
You've mentioned, obviously, MAI. But when we look at a lot of different players, it's kind of this realization that you need to be full stack from chips to models to application. Is that the future? You have to have vertical ownership? Yeah, it all depends on the industry structure, right? You know, I think that I would say today, you know, there'll be, who knows, five, six closed models all competing, maybe five, six, you know, open weight models all competing. And so therefore... At some level, if you're building an application like a Gentic system, you could even have something like what I said, which is a router with even a decision engine built into it, and then you just route to the best model for a given task. So that's a possibility. Of course, there's always the risk that there could be one vertically integrated model and app tier and all the way to the silicon and system. It's unlikely to me, right? I thought at some point that that might be the case, that there will be one. If anything, it's going the other way, which is every day you wake up and you say, wow, there's more competition in every layer of the stack, whether it's in silicon, whether it's in systems to manage the silicon, in the model layer, in the app layer.
- 15:34
And so I think that's a healthy sort of direction of travel, but you never know, right? Because this is one of those things where it all depends on what becomes the dominant design. But my hope is that this becomes a little bit of a horizontal specialization with multiple winners in each layer, and then the ability for people to compose. The thing I didn't see is the depth of each layer. What I know now that I wish I'd known 12 months ago, it's just like the infinite demand for inference. Yeah, that's a great point. And I wish I'd known it 12 months ago, I would have done some very different investing. Speaking of that, we've had like Mustafa Suleyman saying training runs of
- 15:47AI training budgets ultimately depend on GDP growth
“And if that is going to be true, then the question is, what is the world GDP growth rate?”
- 18:49
fascinating to see how much the demand is elastic for software development, right? That means the IT back.
- 18:57
clogs were huge and none of us even recognized it i was taught that you had to be the top one or two in a market to win in venture we're in you know factory which is fifth and it's winning fifth yeah this breaks all rules of venture a question that i have again slightly naughty not on schedule but it's just like well we see the tipping in terms of capability advancement in alternative functions finance sales marketing that we've seen in coding because coding has been the mother load I think that that's a good point. People talk a lot about, you know, do you have a verifiable reward and, you know, it's easy to do these because a lot of the magic has been RL on top of these pre-trained models. That is what, you know, has helped coding. Can we crack that in knowledge work seems much harder. But again, all the examples I talked about sort of, you know, in contact centers, in the supply chain systems, in these marketing slash or cash to order systems, I think that it's possible and we're seeing it.
- 19:59
Is the demand as elastic as coding? I think it may be science may be as elastic, right? Or engineering in general. Like, by the way, you know, if I look at even what's happening inside, not just in software development, let's take silicon development. That's another thing that's going through a radical shift, right? Your ability to tape out much faster, simulate everything in silico is much better. Your first spin can completely come out. But even just like optimization of maintenance reports, like you said, with Rolls-Royce, which I would never... It's more. It's unbelievable. Like, I mean, it's a thing that they've been dealing with forever, just scheduled maintenance.
- 20:38
And I had not realized that, wow, that's a big optimization problem that you can go now run. So I've watched many, many of your shows, and we're going to do a quick fire round. And people haven't asked some of these questions, which I've always wanted to know, and I think everyone wants to know, but people haven't asked them. What's the exercise routine given the travel schedule, Satya? Well, I mean, you're in good shape. Well, I try to be. I don't know whether it's all well hidden. but you know the one thing i've gotten into the habit you know this has been maybe 25 years even on which is every morning i get up and you know i used to be able to run unfortunately my knees have gone away and so now at least i walk with incline even this morning i was able to get a half hour in and so that's what in spite of any jet lag wherever i am i get hit the gym every day i do have bad knees it's my age as well uh what have you changed your mind on in the last 12 months? It might be, because after all, I was one of the first, obviously, when Dario and Ilya and Sam and Greg and Elon were all, I guess, one happy family, they were really the believers in scaling laws. And that's what I believed in back in 2018, 2019. And I think the biggest change
- 21:58
now I have is I used to always think that alignment will just fall out. I no longer believe that. So So I think this alignment thing may be a harder, different problem. And so, yeah, that's the one thing I've changed my mind on. What looks crazy today, but will be incredibly common and accepted in five years? You know, it might be that thing that we just talked about, this evals, right? What is a firm? I think a firm would be an AI benchmark. Final one for you. There are many things to be excited about over the next 10 years. For you specifically, like for me, it's my mother's got MS. I'm so excited for the drug development that could be capable.
- 22:39
What are you most excited for? I mean, that's a great one, I think. One of the things that I've always been, I would say, been looking forward to is a general purpose technology, even as powerful as this. And people say, oh, this is not just another general purpose technology, whatever this is. I hope this spreads, diffuses throughout the world faster than anything else and throughout all sectors of the economy, unlike anything else. And truly, for once, there is a real shift in the frontier of that global growth that happens, where it's not about just counting winners and losers, but it's kind of like everyone gets lifted.
- 23:18
That's been my dream. In fact, my father was a development economist. It's about convergence growth. When will the Global South get something that just suddenly boosts that? I hope this is it. That's it. This has been such a joy to do. Thank you so much for taking the time. Absolutely. It's a pleasure, Harry.


