Databricks CEO on AI Pacing, Cyber Risk, and the Enterprise
68m 34s
The conversation centers on AI adoption, risks, and governance, highlighting a critical disconnect between public fears of existential threats and the actual, immediate risks of cyberattacks driven by autonomous AI agents. Ali Godsee argues that the real danger lies not in superintelligence—far from current reality—but in the rapid growth of AI capabilities that outpace human security, especially in detecting and exploiting system vulnerabilities. While some advocate for slowing AI development or imposing regulations, Godsee contends that this approach is politically motivated, poorly executed, and fails to address the core issue: the lack of contextual understanding in AI models. Most organizations, he observes, are still behind in adopting AI at scale, relying on basic chatbots rather than agentic systems that can automate complex workflows. The key to unlocking value lies in building organizational ontologies—comprehensive digital records of internal processes, meetings, and decisions—so that AI can operate with meaningful context. Databricks demonstrates such use cases in healthcare (e.g., diabetes management with Omnipod), drug discovery (e.g., Merck’s Teddy model), and crisis response (e.g., crisis text lines). These examples show tangible, life-saving benefits. Ultimately, the path forward is not about slowing progress or fearing AI’s advent, but about engineering better, context-aware systems that deliver measurable value while maintaining robust security. The industry must prioritize transparency, independent oversight, and digital infrastructure over fear-based narratives.
As a business leader, there's a tragedy of the commons.
If you want to stop, if you want to go slower,
why don't you go slower? Like I'm competing, I want to win.
There's almost two camps. There's one camp
which believes that this actually is an engineering problem.
And there's others which actually believe you have to slow it down.
Humans don't respond fast enough to the attacks that are happening.
You need to automate all of those.
And also organizations are actually not supposed to do that.
It is RSI and recursive self-improvement
that the labs are doing leading us there.
That's the big question.
Something Elon said, this is some elaborate for D-Chess
because on the one hand, you're saying all of humanity will die.
On the other hand, you're saying, hey, what do you want for your IPO location?
For the first time ever, a company at scale last week
said that they're moving from the frontier models to GLM.
Do you think that that's a trend or anything?
That's just like a one-off anecdote.
AI may already be smart enough for the enterprise.
The problem is that it doesn't understand your company.
Databricks CEO Ali Godsee joins A-16Z's Martín Casado and Sarah Wang
to discuss what's actually holding back AI adoption
and why the answer may have less to do with building smarter models
and more to do with giving them the right context.
They also debate the push to pace frontier AI,
recursive self-improvement, and where the risks are real today.
Ali argues that superintelligence remains far from what we currently see.
While cybersecurity is an immediate problem
as agents make attacks faster and harder for human security teams to keep up with.
And they get into what Databricks has learned using AI internally
from building an organizational ontology
to managing token costs and choosing different models for different jobs.
Thank you for being here, Ali.
Super excited.
So we obviously want to get to Databricks,
but there is a broader conversation going on right now about AI.
And Dario's waiting, Yacht Cubs waiting, Elon's waiting.
But we want to hear what Ali Godsee thinks.
In terms of, you know, if you call the topic broadly speaking,
pacing the frontier, et cetera,
what is your strongest agreement with what's being out there?
Where do you disagree?
And maybe where is their nuance that's not being captured?
Yeah, happy to cover it.
And me and Martín argue a lot.
So I'm sure that's not going to take time.
But try to stay calm.
But why?
I do think, first and foremost, that there may be we agree on this,
that leaders have responsibility to not freak people out unnecessarily,
unless there's really, really good reason.
And I think, you know, there's always different people in society
that are different places, you know, in their mind space.
So, you know, talking about these kind of existential risks
and, you know, scenarios where all of humanity is going to be wiped out,
I think it's irresponsible.
It can tip a lot of people over.
And it can cause a lot of mental health issues.
Unless you have something that's going to wipe people out.
Yeah.
As I said, yeah.
If there is a actual reason for it, then, you know, that's a different story.
But I think that right now, the existential risk is close to zero.
So, why freak everybody out?
It's not actually needed.
There are risks.
We'll get into it.
That's probably where we disagree.
But first, I think that leaders should not freak everyone out.
And I mean, you know, if there's like technical nuances
in how we're doing AI research and so on,
well, researchers can discuss that.
You don't need to every time go on TV and or blast on Twitter
to millions of people that, hey, you know, I think there's like,
this percentage, 10% risk that all of humanity is going to be wiped out.
I don't think that's like helpful for a lot of people.
Actually, I think it causes a lot of harm for a lot of folks
who get stressed out.
And actually, are not in the nuances of all of this stuff and what it means.
So that, I don't think we should do.
I don't think it's fruitful.
It doesn't really help anyone.
I mean, I think this is very, very true for the general public.
Yeah.
Like my sister, who's great, who's a school teacher
and rural areas on a on Sunday, text me and said,
it said, "Martine, should I prepare the cabin for?"
Yeah, she's kind of a prepper anyways,
but should I prepare the cabin for the AI apocalypse?
You know, I've got water set up.
Like, when are you showing up?
I'm like, hold on.
Yeah, the like, we're not there.
So clearly, this is kind of spilled over the populace which I agree
is unnecessary and has blowback.
I think there's a second one which is,
I don't know if you saw like walking in here.
I was checking X and Elizabeth Warren just talked about
pausing all of AI development.
That of course is on the co-tails of Bernie,
who's also working with Bannon, like Steve Bannon.
Yeah.
So now, so in addition to like, you know, just scaring people,
the federal complex is now spinning up.
And I think that could be actually quite contrary
to the actual goals of the message.
And so there's more than just, you know,
I think public hysteria at stake here.
Yeah, there's a lot of politics going on,
but I'm like in all of these groups and, you know, I see both sides,
there's heavy politics happening on both sides,
we should say.
Like, right?
Oh, this is happening on both sides.
So this is, no, this is a, this is a,
I think both parties that do not include Trump himself
agree that that AI should be constrained at some level.
I'm talking about the other side of this argument as well.
Let me give you an example.
Even Greg Abbott, right?
Yeah.
Like even Greg Abbott was like, you know,
you can't have data centers in Texas.
Well, I'm not talking about politicians.
I'm talking about there's politics going on on both sides, right?
Right.
There is politics on the business side.
People who want to see great IPOs,
and they want to get returns on their investments.
And they're like, don't mess up my IPO.
Yeah.
And they want to get like, hey, can everybody just shut up
so that we can get our money back?
So there's that.
And they're, you know, they have resources,
and they're using them.
And, you know, so there's politics on that side.
And those are like, not, they're not sitting quietly
and not doing anything.
And they can pull strings and they have connections.
On the other side, there's a lot of people that are like,
okay, how do we weaponize this?
This is awesome.
Yeah, that's what I said, yeah.
You know, let's weaponize this one.
Let's plant this.
If I, you know, let's pump these, you know, threads.
Let's talk to the Pacific leverage point
that everybody is using.
'Cause I actually think that this is like a classic case
of a PR messed up.
And it's not just the doom and gloomy type stuff.
So here's the PR messed up, I think, which is,
like, it is not unusual for industries
to try and regulate themselves.
It's just not, right?
And I think saying like, security and safety is important.
It is with every techie puck,
and we want to have some oversight.
That was very, very sensible.
The problem is, is just couching this notion of pacing.
And there's a number of issues with pacing.
First off, it's orthogonal to safety and security.
Like, you can slowly build a weapon.
Like, it was not different than building a weapon.
People don't feel it's genuine
because like these companies have been at a dead run.
If you're still buying more compute to be even better.
No, no, I mean, like, they just haven't done it.
They haven't done it historically.
But also, it kind of feels like this kind of almost
milk toast capitulation to the pos people.
So you're like, well, you say pos, well, I say pacing,
which is almost like pos but it's not like pos.
So like, they chose this kind of like flag to follow around pacing.
But if you actually read, did you read the document?
It's a totally sensible document.
Yeah.
It just says nothing to do with pacing, right?
And so I honestly just mentioned it.
Look, see, I kind of a little bit disagree.
Look, there's a tragedy of the comments.
There's this like, hey, if you want to stop,
if you want to go slower, why don't you go slower?
Why are you writing articles?
There's a lot of people making that argument.
Yeah.
But no, I mean, as a business leader, I understand that.
There's a tragedy of the comments.
Like, I'm competing.
I want to win, you know.
Well, there's also the market equilibrium
which suggests that pacing is probably in practical anyways.
Yeah.
So I'm just saying that, you know, so it makes kind of sense
where people say, hey, if you guys don't stop this,
this tragedy of the comments are going to continue.
I'm not going to stop racing because, you know,
there is IPOs at stake.
There is a competition at stake.
There's also some animosity between the people.
So like, I'm not going to stop unilaterally.
I'll be a sucker, you know.
Why don't you stop first?
So then they're saying, hey, can you come in and stop us?
But, you know, I think that you could also make the argument
that if you look at the hugging face opening an incident
that, by the way, I think these companies are great.
And I think they are probably investing a lot of resources.
No, I agree.
But it's very clear from, if you read what happened,
is that there weren't monitoring every token coming out
and having it, you know, they were just like running
these RL experiments.
And then after the fact coming in and checking up
it, what happened?
So they should have paced.
They should have been much lower in that particular incident, right?
I just don't want to just quibble on syntax.
But like words matter with PR, right?
Yeah.
So let's take the hugging face incident.
Yeah.
When I read that, you know what my reaction was, was not,
oh, opening it, I should pace.
I was like, dude, fucking secure your thing, right?
Like do security controls like we always have done.
It is pacing though.
It is pacing.
It is pacing.
Like in the history of the internet, we had all of these things
where we're like, let's pace the growth.
It is pacing.
Let's do security.
Let's do control.
Let's do like what I do.
You should do that.
But it is pacing in a sense that look, I face this all the time.
I have a legal department at Databricks.
I have a security department at Databricks.
And, you know, they are always like, hey, slow everything down
for everything, not AI.
Like literally every little thing.
Like, oh, you're going to go on a podcast.
Well, what's the script for it?
What are you going to say?
And let's review that.
And, you know, what's illegal?
You cannot say this.
You can say that.
You can say that.
You know, everything you say have to do materially true.
You're facing people in a room with us, right?
So, you know, so you're running our own experiment.
You're training the next model.
Should the security team be there and look at, like,
run all their monitors and look at everything.
I mean, like millions of hours of GPU hours of tokens were produced.
And these agents were running, you know, a mock in the sandboxes.
It would have slowed them down significantly.
You had security teams sit there and look at all the stuff.
I agree.
Now, and they're saying, hey, like, you know, if we do that,
it will slow us down.
And I'm not sure the other side is doing that.
So can you guys come in and slow us down?
Like, just tell us.
Like, put some guards around us.
We'll happily then follow the rules and do the secure thing.
Otherwise, it doesn't make sense.
Because we will get our.
I just think like nuance, second order words don't work when like,
people are really afraid.
You're like, I'm going to pace.
And therefore things like these don't happen.
I literally think we should just been like safety security.
is paramount, we're going to put in these controls,
like that's the important thing.
And I do think that nuance actually got lost.
If you look at the-- - How good would Zuck said?
Do you agree with that? - I thought that Zuck did it.
I thought it would be better. - We're going to pace ourselves.
We're going to put in security,
like the reason we released this later
is because of security. - Well, I thought was so great
about Zuck is like he was very focused
on like security, safety, and self-regulation.
Dario, Dario's first five words or whatever,
like we need to pace the frontier, right?
It just puts you in a very different mindset
than what he could have said is we need to secure the frontier.
Fine, we need safety.
I mean, at some level, I think they're trying to optimize
both for the tumors, which cause for pause,
and for politicians, and they kind of didn't satisfy either.
- But those people are actually freaking out
inside the labs, and there are a lot of safety people
that are freaking out generally.
By the way, and not all of them are YA people
and so on, other people are like, hey, they're surprised, right?
But here's the thing, is that using the best pace doesn't help
either of them.
I think it's like literally, you're like,
you're trying to find this, like he, he, he,
pace is like the uncanny valley of making the tumor people
unhappy and the policy people unhappy.
Because the tumor people are like, that's not a pause,
this is pacing. - Yeah.
- And you know, everybody else is like, well, like this is,
you know, this isn't really, you're not gonna do it anyways,
and you're not as focused on security.
So again, independent of what we should do,
which we should talk about, I just think that the way
it was presented was just bad, and it just didn't work,
and that's what it is. - Yeah, some of the blowback.
These guys are, you know, they're not trained, you know,
PR people, you know, and yes, some of the stuff,
I agree with, I mean, I agree with the PR people.
I agree with the core premise
that we shouldn't freak the public out.
I think that the existential risk right now
is close to zero, you know, but let's talk about the core thing,
which is the fact that, you know, anyone who's doing big
reinforcement learning runs, and they're giving it a reward
function, so unleashing, you know, saying, hey,
here's like a, you know, 10,000 agents,
and here's a hundred million dollars.
Let's put them in parallel, and let them run on a gigantic
cluster for a month or two, try to solve anything,
and it doesn't need to be a security thing.
It could be like, do anything, you know, solve this map puzzle.
Really bad things can happen.
Really bad things, meaning things get hacked,
and it has, you know, cyber is the primary one, right?
That is real, right?
I think of this making it, hey, this is an existential risk
and so on, which I think was a mistake.
I think it's not good to scare the public that way.
I think it's become something that everyone,
not just your sister, everybody around the planet,
is like now talking about.
I've had all kinds of people that never care about this stuff,
and they find this extremely boring.
Ping me and say, what do you really actually think
about this?
This is really important in my accounts,
and now I'm starting to worry about it.
So then it becomes a political issue,
and we have elections here coming up,
but there's elections all around the world.
So you're gonna see, they're not gonna sit still
in other parts of the world either.
But I think that's our responsibility
to talk about this in a balanced way,
and actually expose the risks.
I think that super intelligence,
that idea from that book is very, very far away.
I don't see any evidence that we're actually marching
towards that or that's gonna happen.
- Say it.
- Apparently some people, yeah.
Apparently some people at the labs are freaked out
that maybe there's progress towards that,
and I think it comes from our side,
recursive self improvement, the models improving themselves.
I would love to understand how much,
what have they seen, something we don't know?
There's, you know, kind of four criteria.
If those four things are happening,
I would love to understand them.
One is our models,
if we end up in a situation
where following four conditions are happening,
which is the next model requires less resources,
less GPUs to train, and super linearly,
not just like tiny a little bit.
The next model takes less time to train as well.
So it's a second condition.
Third, accuracy of the model, the intelligence is increasing,
and fourth, we can do the former three again and again,
and again, you know.
It's not just, all those at the same time, right?
All at the same time, not just any of them.
Yeah, all four, if all four are happening,
then you can imagine in a way where you can, you know,
'cause any of them does not happen,
like for instance, if resources is constant,
then that's okay, 'cause we're gonna run out of hardware,
so then it will pace itself.
Like we will not happen in a hardware
to do that, not enough GPUs, right?
Time the same.
So it needs to be that you end up in this situation.
So if you just mean that the software is writing itself,
we're already there today.
Like 90, some percent of the software in Databricks
is written by AI.
Does it matter if the last few percent is also written by AI?
No, it doesn't matter, really that much.
But if you're getting these four conditions,
then you might get a speed up,
where the next model, let's say, takes half a month of time
and half the resources, and it is more intelligent,
and you keep doing that, you know.
Then you might end up in a situation where I don't know,
but I don't even know if that necessarily leads you
to super intelligence per se.
That's a good word, yeah.
But it could, so then that would be more risky,
so it would be nice if they can share all that data
and we can share some light and transparency on that.
I actually think it's a great breakdown that you have.
I don't think anyone is using that as a definition,
actually, right?
I think there is a little bit of people freaking out
about like, oh my god, the emergent behavior.
Now it's creating itself and so on.
But I think, like as I said,
a lot of people there definition is just,
hey, if I'm not even coding anymore,
and it's coding itself, but I think they're conflating,
hey, what's my value and is it scary for me versus, hey,
that then means we'll get that super intelligence
that 2014 theoretically was hypothesized by Whatström.
- Well, you're putting in compute,
though, is a really good one that's missed
in a, I think a lot of arguments on RSI, right?
Because as far as we can tell,
the minimum threshold for compute
needed to train a good model just keeps going up.
Like it was a hundred million, billion,
now it's probably like five billion.
And so that- - To train a model now?
- To train like a frontier model, right?
- Five to ten billion.
- Right, right, exactly, versus like-
- Billion, billion, billion, billion, billion.
- First, you're just very expensive.
- Yeah, French is very expensive.
- To replicate the frontier six months later,
is about 120 of the cost.
- No, I think Sarah is a great point,
which is, this is a good argument against this whole thing,
which is that the next model, first of all,
there's only one or two such runs a year
that each of these labs do.
And they take, it's the opposite of the four criteria
that I mentioned, right?
Which is, it's going to take more resources,
more humans involved, and it's even more brittle,
and they have to build out the data centers.
I mean, like the labs are not necessarily doing that,
but others have to build the data centers,
and they have to be gigantic, and they have to get the GPUs,
and they have to get the networking right,
they have to do the engineering to make sure
that they can tolerate, 'cause you know,
every order of magnitude more GPUs are crammed in there.
You have to not worry about the errors
that before you didn't have to worry about.
So you have to increase robustness of the-
So it's like a very brittle process,
and if it fails, you've squandered so much money,
so they're like very, very careful with that run,
and there'll be multiple runs that have been watched.
So it's the opposite of that that you hate.
The next model is faster, cheaper, smarter,
and recursive improvement, it's the opposite.
It's like it's taking longer, and it's more brittle,
and it's more people, and it's harder to pull off.
So I do think that that is true.
With respect to RSI, with respect to actually cyber risks,
and things get hacked, we need to take it seriously, yeah.
- So I'm gonna have another like, like Ms. Tessia's,
like I actually love your four criteria.
I was like literally just waiting to argue with her,
but I actually think it's better.
Like it is, respect to her.
So let me give you like a black box,
like when you're dealing with these dynamic adaptive systems,
like what are you gonna believe?
Are you gonna believe like the numbers
are your lying eyes, right?
So I think you kind of have to go to the numbers
on these ones, so like what are the numbers to look at?
I really think you should just basically,
and maybe going public is the right way to do it.
Like if these companies continue to grow,
reduce the number of people, and the number of money
that goes into them, then I would say something
is definitely happening here.
Like I do think that you can actually black box this
and take a look, but none of those indicate
like they're hiring like crazy.
- But that's not fair.
- That's not fair, 'cause you know,
companies are not necessarily efficient, right?
So like what if you have, I mean,
opening it itself was doing like a million different activities
is a very small team of like 10 people
we're doing LLM's, and the LLM stuff was useful.
Twitter was a lot of people, now it's much less people.
- I agree, it's just another LLM test.
We have to have two LLM tests,
we have your LLM test which I think is great,
but then you would actually have to have a way to instrument it.
- Yeah.
- And then we should have the black box LLM test.
Like I mean, listen, if you're anthropic in two weeks is,
you know, 12 people and they continue to grow
and they're putting out models that are increasing it, right?
I think we should probably take notice of that.
- That's sufficient criteria, but it's not necessary,
condition, right?
Well, I'm just saying that, you know,
there could be that, you know,
and really the right way to do this then to look at,
okay, they're pre-training in the post-training
that's been doing that's really necessary.
'Cause they have so much resources
that they might be doing a lot of other stuff they don't need
to do, but they're doing it just
and it can just hire people 'cause they have infinite money
and infinite, so really, the people that are training
the next model is that team, tiny, tiny,
and it's actually getting reduced
and they're doing less and less work
and just AI is doing it and in the post-training,
and then they're all just using less GPUs.
That's not the case.
- We've had this argument many times as an industry before.
I remember when, like, we learned how to really
cluster computers 'cause like the mainframe was actually
kind of limited by things like memory coherence.
Remember that, like, you only make it so big, you know?
And then we kind of went to the client survey area
and then we didn't have the problem,
and then we started creating super computers,
which were like basic, just like, you know,
cluster computers.
And that's not what the internet happened.
- And that was kind of also roughly, like,
when GPU started getting good.
And do you remember that we would actually, like,
expert control play stations?
'Cause we were worried that Saddam Hussein
would use them to do simulation.
And the arguments were very similar,
which is like, these things are getting infinitely powerful.
We were using them to simulate nuclear weapons,
which we were, like I was, like we can't, you know,
this stuff has existential risk.
Actually, they didn't use those words,
but like this has the potential
for like nuclear weapons or whatever,
and we should stop it.
And like, none of that came to path.
So I think a very reasonable discussion
is this time different.
Yes, I know.
I don't have an answer to that.
But I'm PC, but, you know, you're a. - Yeah, I mean, look, I think I was,
I'm not old enough to remember.
So ignorance is bliss.
So I can take this.
But what ever it is, it doesn't care about the export controls in the UI.
Yeah, you know, whatever it is, I think it's up to the different scale now, right?
With the AI and, you know, with the, you know, what we're doing, the pace of development
is so on.
They are freaking out different here.
I do think cyber is actually one of the biggest ones that we're going to see, right?
Because there's just so much infrastructure on the planet.
By the way, way, way more than it was, whatever, whatever Saddam or Xbox or whatever it was,
you're talking about.
We've just interconnected way more things, and they're dependent, and like the planet
just looks different today, from internet, tech, dependency, interconnection, then, you
know, 30 years ago.
So, I just want to make this point.
There's so much infrastructure as insecure, right?
And if you're going to unleash these agents, they're going to find, loophole, they're going
to find exploits, they're going to break in here and there.
So, so this is a real risk and you can't just, and by the way, this time it didn't do that,
you could imagine a scenario where it starts hopping.
It takes resources and it starts executing itself elsewhere, so it's kind of spread like
a virus a little bit.
So, that's a real risk.
So, and this is pure curiosity, I promise I'm not, you know, trying to be a foil here,
but like, why do you think we just haven't seen very much then?
Like, again, again, I'm much older than you, I remember very well.
So, when the internet came out, by this point, we had literally taken out 10% we'd
disabled hospitals, we'd taken out critical infrastructure, we'd cause tens of billions
of dollars in economic damages from worms, like all of that had already happened.
And to your point, we had much less build out, you know, less of the, the economy was
on it.
And so, you know, AI has so many people that want to find risks and threats.
We're running so fast, so much money has been put into it and we haven't seen anything
commensurate with the early days of worms.
What does that disconnect?
Yeah, look, so I do remember that those days.
But it doesn't need the same time.
Yeah.
So, look, I would just say that I am sleeping well at night and I don't think there's
existential risk right now.
I do think there's a lot of infrastructure needs to be secured.
Yeah.
We have a product in the market, in the detection market, Lake Watch, that helps you
do detections.
And the space is just there is moving so fast because, you know, you just have these
SOC teams, security operations center people that would, you know, look at what the
intrusions are happening, how are we being attacked and so on.
And now the humans just can't keep up.
So this is the whole space, security, cyber space is being transitioned into fully automated
using agents for detection on the other side.
If we don't do that, I mean, now we're rushing, we are rushing the industry is rushing
to do that super, super fast.
If we don't do that, I do think you will start seeing those kind of things like sites
going down, you know, you know, whole systems that stop working for a while and there
will be consequences, not existential, but economic damage and, you know, people getting
hurt and so on could happen.
So we just have to raise very, very fast to do all of those things.
There's just, you don't have the, the humans don't respond fast enough to the attacks that
are happening.
So you just, you need to automate all of those and all sorts of organizations are actually
not as close to doing that.
The banks are doing it.
Some of the people that are super security conscious are doing it, but most of the industry
today is running with old school security operations centers and people that are waking
up every day and there's like hundreds of emails of detections that have fired.
Many of them are just false positives.
So you don't need to ignore them, but some of them are not.
They just don't have time to go through those and you need to identify that.
You need to have threat hunting that's automated where you're actually attacking your own
systems automatically with agents and so on.
It hasn't happened.
So I do think that if we just say, hey, this is just like the internet in the early days,
you know, bad things are going to happen.
So there is a race going on, you know, it was actually very surprised earlier this morning
I was on a conference like, I feel like you and I are like pretty close, I'll be plucked
periodically.
I feel like I know a fair bit about Databricks.
I was on a call this morning where a founder was basically like, yeah, listen, like, you
know, we're doing all of this like observability agent threat detection using Databricks.
I didn't even know that you, you had this offering like quite frankly.
I mean, just from an education standpoint, like how extensive have you gotten in like the
agent AI observability security safety thing?
Yeah, I mean, we haven't talked this year at RSA actually with Ben Horvitz, but the issue
is that data and AI is blending with cyber.
These two markets are collapsing because I think, you know, and the reason they're collapsing
is that it used to be like, okay, we have like data and AI, the kind of stuff Databricks
and these kind of companies used to do, which is like, okay, we have a bunch of data and
you run AI and machine learning and that just lives separately.
And then you have the cyber world.
Cyber world is, you know, we wanted to detect if something bad.
It's like bad people are trying to hack us.
If bad people are doing things, we need to detect that, okay?
But now on the data and AI side, we have agents running internally in the company.
People are having agents running and the agents are also like doing things with other
people's agents and they're producing a lot of data logs, trails, you know, fingerprints
that are being left.
And so, you know, they have internally these agents that are doing that, so these worlds
start merging more and more, which is like, okay, well, all the data that's being produced
needs to be analyzed.
And the scale at which you need to do that is just like many, many orders of magnitude
more than just one or two years ago.
So things have changed dramatically.
Like, 2018, the time it would take from, you know, a CVE vulnerability being sort of published
until you see it actually be weaponized in the industry would be like two, three years.
That went down to, you know, 2022 significantly, but it was still like eight, nine months.
So that's kind of fun.
You have eight, nine months from a vulnerability to, that was 2022.
Now, if you look at this curve from 2022 until now, now it's down to like basically hours.
So it's like down to like basically no time.
Like things get immediately weaponized.
So you need to just do it in an automated, with the data and AI sort of platform approach.
So these markets I'm going to argue are just going to collapse actually.
So the very specific question here.
I actually think a lot of like it to pull back on the like the existential, ex-risk discussion.
It feels like there's almost two camps.
Yes.
And like companies like, yeah, like Databricks can solve it.
And they can solve it through product and through engineering solutions and through services.
And so like we just as an industry can solve that problem.
Yeah.
And there's others which actually believe seems to me that there is no engineering solution.
You have to slow it down, you know, you have to use regulation.
It's more like a clear weapon, et cetera.
So like does this mean you believe it as an engineering problem?
Or are you not quite comfortable saying that?
Yeah, because why?
It was testers.
Why?
Why don't you even buy Databricks, man?
Let's just put this stuff in the national app.
Just paste it.
That's the only solution.
I'm going to just paste themselves a little bit.
They won't be fine.
They're bad guys.
There is no line of inquiry ever that gets to pacing.
I don't think.
I think it's like you pause it or like you like to solve it.
If we've learned here is that Martin really hates the word chasing.
Never use that word with you ever again.
Okay.
Clearly.
Do you really know it?
Yeah.
Is it an engineering problem that can be solved by engineers or is there more to it?
I actually think which problem are we talking about?
There's two separate problems that I think are being completed.
Yeah.
There is the super intelligence problem, you know, and I think a lot of this comes from
like both Strem 2014 super intelligence book.
And if you look at the definitions, like I think people don't have this clear definitions
of what super until if you read his book, those definitions are kind of crazy.
So I think what he had in mind when he said super intelligence is, you know, AI's that,
I don't know, I don't know what the examples were something like something like the right
to whole PhD thesis with novel like peer reviewed stuff in a couple of seconds.
And they can do like millennia worth of thought, you know, in like instantaneously.
And, you know, so this is like the level of, you know, how fast they are, how intelligent
they are.
So it's like I can learn.
Yeah.
Yeah.
I mean, yeah, but it's just many, many, many orders of it, right?
It's like it's just the scale of the problem is just completely different.
So if such a thing exists, do I think it's just an engineering problem to solve?
No, I think that's actually a very, if such a thing would happen, that would be very
substantial.
Of course.
And that's what everybody agrees on.
So I think that's being mixed with, now we have agents that are nowhere near that, it's
not even like there's nothing like that.
And we don't have anything towards that path right now.
But these agents are capable and you can do something with them that you could never
do before in a history of mankind.
So I do think an efflection point has happened.
Something has changed, which is we could get, we have good security researchers at Databricks.
But I could never say let's get 10,000 of them in a sandbox for a month and have them
do 100 million dollar works of salary wage work.
We can do that now.
We just turn on a button and we can get 100,000 of them or mathematics.
Like we can say, hey, you know, we want to solve the, like, conjecture, okay, let's get
pretty good mathematicians, but let's have 10,000 of them collaborate, you know, and then
you can like make very fast progress.
So this, I think, is an engine, this leads to all these cyber risk.
I think cyber is the major problem here.
This is, I think, you can solve with engineering and I think it's like, we are working on it.
Many others are working on it.
There's still risks.
They're not existential.
I think we should do it.
There is the super intelligence thing.
That's the thing that could do, right, a novel PhD thesis or like reason intuitively and
11 dimensional space physics instantaneously without writing anything down.
Something humans can't do.
Like that kind of super intelligence.
The question is, is RSI and recursive self improvement that the labs are doing leading
us there?
Are we going to get there?
Trying to do.
Trying to do.
Is that what's going to happen?
And how fast is that going to happen?
And they've suggested that, you know, hey, we should have inspectors that come in and look
at what we're doing.
And there's a good idea.
Have them go in there and get the data.
I would love to, like, the question is who are the inspectors?
Because you can, like, you can--
Stacked, right?
You can stack that.
- Who do you think you're teaming?
- Yeah, so there's a bunch of people
that like on either camp, actually, I wouldn't care.
If they're the inspectors,
I would not be very impressed by what they say.
'Cause they've already made up their minds
even before they would go in there.
- Right, exactly.
- But let's say like as an example,
if John Dacoon, who was one of the inventors of this,
you know, deep and electrical technology, right?
Wanted pioneers.
If he said, hey, there's nothing to see here.
There's no risk, you know, I'm paraphrasing him.
This is nothing.
He's super intelligent.
This is just nonsense.
Keep on going, go fast, fast, fast.
I don't know what to believe in.
I'm putting words in his mouth, I mean, I'm not exactly. Now, if he was one of the inspectors and he went in there
and he had the look and he came out and he said,
hey, I've looked and it's just what I said.
There's nothing to see here.
Just keep going.
I would feel very good about that.
That would take a while, I would feel very. Or if he comes out and says, oh my God, you know,
I, you know, he's wobbling
and he would change his mind a little bit.
That would also have a lot of interesting signals.
So I think it comes down to who pick as inspectors
and I think it's a good idea.
Let's have some of them and pick a diverse set of people.
That we can get different nuanced points of view.
What do you think about this kind of Elon Musk view,
which is like, it's less third party, it's more. It feels like there's kind of three proposals.
Like the open AI anthropic one is a third party.
Yeah.
The Elon Musk one, as far as I can tell,
is the labs cross check each other like pure of you,
like you do in science.
Yeah.
And then the Mark Zuckerberg one is please yourself, right?
What do you think about this middle one?
That they should pace each other, like, you know,
evaluate each other.
I think if we have boxing matches in the ring,
the boxers should just be the judges of each other.
Would that work?
No, they would scream foul all the time.
Fowl, foul, foul, like, you know, it's like, ah, you know,
the moment, the moment the other guy puts out the great model.
And it's a big super intelligence risk, sir.
Absolutely, like, you know, they have not been responsible.
Like, you know, when vested interests are at play
and there's like IPO plans
and these two companies are so competitive
and they have like this history also between them.
Yeah, they'll be very, they'll be very fair to each other.
I'm sure that's why you need a part, right?
And why do we have judges in the world at all?
Why do we have third parties at all?
Like, why can't just people like
figure things out between themselves?
But I mean, it's a try.
If they want to do it, they should try.
But I'm skeptical that they wouldn't just, you know,
be biased in, you know, in multiple ways
to, to, to self, like, you know, judge each other.
So I have to ask, Olli, do you think something Elon also said,
I think he was on the all-in, you know, summit.
He was like, this is some elaborate for DHS
because on the one hand, you're saying
all of humanity will die.
On the other hand, you're saying,
hey, what do you want for your IPO allocation, right?
And so, I mean, that is probably a more cynical view.
But like, how do you, how do you reconcile that?
I mean, the dissidents, I think, gets a lot of people.
Like, how do you think that gets reconciled?
Look, I think all of these things get mixed.
Like, I think there are people that are freaked out.
And I do think that the people are saying, like,
okay, if there was regulation that would pace us,
sorry to use the word, that would be good for us, right?
That would be good for us.
But I also think that people have that set interest, right?
These things, like, you know, usually people figure out a way
to always get all of these things to align
in their, you know, harmonically, in their head.
So yeah, do I think that there has been a tendency
in the past of, in general, using also marketing stunts
by saying, you know, oh my god, this latest model
is so good that I train.
It's like unbelievable, it's almost scaring me.
And then the whole world, like, kind of starts focusing on it.
Yeah, there's been that kind of marketing going on.
- Yeah.
- But at the same time, also, as I said,
the time from CVE to actually weaponize exploit
has been going down from years down to like minutes now,
just in like three, four years.
So it's real, the cyber attacks are real.
And this is, but there's also a great marketing ploy
to, you know, whenever you train a new model,
make lots of noise around how much of a, you know,
crazy risk register the world, it helps you, right?
So, you know, maybe they're not in contradiction
these things.
- So, I mean, you and I are networking folks.
And there's a long history of forming third parties
to help arbitrate things, right?
Like IETF or, you know, IEEE or, you know,
even like I can.
- I see where this is gone.
- No, no, no, no.
So my question to you is like, so I think it's actually,
this is a very sensible proposal
that they actually have.
I actually agree with you.
You probably want to make sure it's independent,
which is not very right.
- Yeah.
- And there's gonna be a lot of arguments
of who you put there and everybody's gonna disagree.
- Right, right.
- But you said, you know, why do we have judges?
So that's like actually like the state stepping
is actually quite a different thing
than basically industry self-policing.
So like at what point in time do you think it makes sense
to actually consider federal involvement?
Or do you think that now is a time
to actually consider actual federal involvement
as opposed to like more industry self-policing?
- Well, there's a very different, they are different,
but they kind of bleed into each other like, you know,
like Princess Findreill, you know,
it's not like a completely independent self-policing.
It is, but you know, it's linked to the government.
So I think these things kind of will bleed over.
I think it's hard for them.
- Do you think that they evolve into,
historically they've, they've, they've,
they've industry self-polices
and then it evolves into recognition.
- Look, if they are saying there is existential risk
which they're saying, you know,
and they're just saying, come police us and regulate us,
I think it's very hard for regulators to say,
no, we're not gonna do that.
So far they've said that,
but I think that's not gonna last very long, yeah, you know.
- But it wasn't David Sacks was like,
I've never had to see you ask us to regulate them.
And my favorite thing is--
- And the CEO that I've never had a regulator,
that says no to that.
Just say no.
- I mean, the reality is like,
the actual like, metapolitical machinery
is actually in motion already, right?
I mean, like everyone has a talking point.
Obama has came out as a major issue.
Like, do you think that there's a reality that is too late?
This will be a major issue in the midterms
and we're actually going to like heavy-handed
federal regulation.
And this is all gonna be paused, you know,
and the anthropocost into the DOE.
And we're past that point,
or do you think we can actually end up
with like a sensible self-policing regulation?
- I mean, I think it was the headlines you cannot.
- We should strive towards doing the right thing.
I think there's still some degrees of freedom
of how things evolve and there's still time.
And yeah, you're right,
that largely you have these companies
where we're pumping in so many billions of dollars.
And the way reinforcement learning works is that you,
you know, give it the reward function that's verifiable.
Like we're gonna solve this math problem,
or this kind of, you know, this narrow area of programming
and so on.
And when you're pouring so much money into that,
you can get quite good results in that narrow kind of,
that doesn't mean that you're getting
that super intelligence.
- No, you can even trick yourself into thinking
that like less inputs are giving you a better outcome
just because you're running so many experiences
thought about it so much, right?
But it's actually very hard to do a closed experiment
this way, given how many resources you're going through.
- Well, the fundraisers are going up
astronomically to your point.
- Yes, yes.
- That's why these companies are going public, right?
I think they would otherwise have.
They would say, I mean, as someone who runs a private company
at scale, I think they would prefer to stay private
otherwise, why are they going public?
'Cause they need the capital.
And they consider the scaling laws
and the capital to be a strategic advantage.
So that's why they're going public.
But I would say, let's go back to the four things
that I listed.
If those are true, you know, if those four are true,
would you want to be know about it?
And is that, would that be worrisome?
That could get out of hands.
Now there's no evidence that those four are happening.
But if there was like, you know, no,
that is actually where it's headed.
- Yeah, I actually think understanding
for any system, like any sort of self-propelling property
is important.
And we've done this in the past with dynamic systems, right?
Like we've done this with like whatever a compiler
to do this with all the research on nanotechnology.
Like it's been a common interest of ours.
And I don't think that that's new,
that it's an interest which you continue to have the interest.
I just think the fear is that these particular systems
are net economic systems that are so complex,
that the risk is is crying that you're seeing it
when you're not seeing it.
And I think a lot of that's happening right now.
- Yeah, but of course, if you see it, yeah, of course.
I mean, you want to know.
- But it is fair to say that the labs are now
focusing a lot on RSI, and that's where they're headed next.
And maybe they're unjustifiably like word themselves,
just like they were word about GPT-2.
So I was like, GPT-2 is world ending,
and then it was on GPT-3 and working on it.
- So I don't want to quibble.
A lot of the times when they say RSI,
they're actually talking about adult catalytic effects.
And adult catalytic effects have been our industry
for a very, very long time.
So for example, there's no way you can create
a computer chip without a computer chip.
It's like you cannot do it.
Anyone with computer science agree with you, right?
- My final right, it's my own compiler.
- Well, that becomes closer to RSI.
But like the steam engine was adult catalytic, right?
So my full-time job is people coming out of labs
in starting companies, and they all say RSI
because everybody says RSI.
And like maybe 1% of those are RSI.
Like they're more like we use AI for data cleaning.
We use AI for making it simple.
- Let's make these things.
So you're saying, it basically capitalists,
in a sense that they're using AI to speed things up.
- It's auto catalytic, yes.
So I would say of what we hear to be RSI.
- Like the model trends in other models, right?
- You're using a model to build a GPU kernel.
You're using a model to do data cleaning.
Just like I use a computer tablet computer.
It's auto catalytic, which every tag,
that the internet was auto catalytic
'cause it allowed people to collaborate remotely.
So I would say, this is anecdotal.
- 90% of the calories are auto catalytic,
which is 100% with you to exist.
- And that's been going on for a while though.
I mean, that's not even new.
But I would say, but also now there is a focus on,
let's move towards, actually,
can we get the model to train itself?
This kind of like the auto research that Carpati did,
but now I want to do that.
- There are teams doing it.
- There are teams that do that.
It is not nearly as many calories as you would expect.
- Yeah.
- I just feel like I actually have a good sampling of this
because they all come and talk to us.
- Right, so can we have for me?
Can we move to one of the inspectors?
Can we get all that data and all of us look at that data?
Maybe there's nothing to see here, you know?
I personally don't think it's like very high probability
that those four criteria are happening.
- We're in Rockman, went on the pot this week.
It says we're at a GI era.
- Yeah, so now I ask the same question after.
He said nothing now.
Everybody's saying we have a GI.
People follow what they say, but people have for a very long time when I asked this question
said that AI smarter than most of the people around me most of the time.
That's been almost like, since Q3, Q4 last year, they've been saying that.
Then I asked them how many of you have hundreds or thousands of agents that you are managing
that are coordinating with each other in swarms and negotiating and automating your life
and everything around you, and if so raise your hand, it's like almost nobody raises
their hand.
It's done that at home, but most enterprises are on Microsoft co-pilot, like that's the
extent of their AI.
Most enterprises I talk to when I ask this question, they're like, no, we don't have any of
that.
What are you doing then?
They're using a chatbot, like they're asking questions from a chatbot.
That's basically very, very glorified, efficient Google search of the old day.
It results just faster Google search, and their coding is happening, so people are using
it for coding, though their ROI is, you know, we can discuss that right there, but there's
no, like, agentic, like, work that's automated, the whole enterprise.
That has just, like, not happened, so then why is that?
And I think that the real reason is if you actually look at it is, the models are smart
enough, but they just don't have the context that exists inside of any organization.
They have not been in every meeting, they don't know what's in everybody's heads, they don't
know all the processes, they don't know, there's always like a couple of employees who know
everything in and every organization, you know, you go tap on their shoulder and they're
like, everything's like, oh my God, what would happen if he or she quits?
You know, they don't have that context and if you just fused that and gave that context
into the AI models, just different here today, I think there's so much productivity gains
you could get for any organization on the planet.
For that, we actually don't need smarter models.
So we don't need a smarter model that can actually solve Navier Stokes or conjectures or
do better on humanity's last exam, like, we need it to just go from 60 to 70 percent.
None of that is needed. So I think actually people are very upset on some, like, oh, if we
pace different here, but actually if the frontier doesn't advance, it doesn't actually matter.
I think for vast majority of organizations on the planet, they're just so far behind
in the adoption curve of actually automating things and getting value out of this stuff.
But it would be disastrous in the labs because the price of intelligence is dropping asymptotically.
I think it's going down by one tenth every six months or something like that.
So that will dramatically change their businesses. It's like you weren't pushing the frontier.
Yeah.
But this is what we should focus on, right? We should focus on like, you know, there's
us two sides of who we discussed here, a lot of their costs, like this cost benefit analysis
that we should do on everything, right? We've discussed the costs a lot here, like always
there are like existential threats, there's their cyber risk, there's things we should be
worried about and so on. That's like the cost side. What's the benefit?
And I think now that this has become like a public thing and the whole public cares about
AI, they're asking, hey, what's in it for me? What am I getting out of it?
It seems nothing.
So how do they get there?
What are some of the use cases you've seen to date that have maybe surprised you to the
upside?
Yeah, I mean, first of all, there's like so much worry about existential risk and so on.
So I think a lot of people just don't know what are cool use cases where people are actually
doing interesting things. We have a lot of use cases that are, I mean, just fascinating.
One that I like is crisis text line. So, you know, they actually use one language models
with us to detect if teenagers want to do self-harm, so it's awesome use case and it actually
saves lives. So that's a great company and that's, you know, that organization is doing
amazing work. Another one that's kind of interesting is the Omnipod, which is for diabetes
patients, they can put the Omnipod and it uses a actually really learn your insulin release
and your glucose levels and actually exactly release. You know, I don't know if you remember
when people used to like stick themselves, right? But this now happens automatically and
it's like self learned AI for your body. You know, that's a cool use case. Zip line is
another one they're doing also, you know, but when they started, it was like these drones
that had, you know, they were completely automated, all AI driven, everything from the,
you know, battery optimization to the routes and everything and they were delivering food
in, you know, areas of the blood, blood to refugees, blood to refugees, yeah, started in
Africa and then elsewhere in the world. So yeah, that's, that's all, yeah, it's AI use case,
you know, built on Databricks. So it's a cool one, but there's more advanced ones also.
Like one that I kind of like, but it's hard to maybe explain is this model that we built,
transformer based model that we built with Merck. It's called Teddy, transformer and
has drug discovery. Yeah. So, and the public actually, the research you can, you can check
it out. But it, basically, it's a model instead of predicting the next token in English,
it predicts what the gene regulatory network that you are in is going to respond. And it
can really detect, you know, which cells are causal and which ones are just reactive.
So they're just reacting. And therefore, they can start using this in drug discovery and
get costs down significantly for developing drugs that are targeting specific diseases.
So that's a super cool use case. There are lots of these, you know, Jeannie, I mentioned,
you have this ontology and you can ask any questions, Novo Nordisk is using this. So,
you know, they built this GLP one drug. But what Novo Nordisk is doing is now they're using
it for all of their trials that they're running. And you can compress the time it takes to
get insights. First of all, if you're doing a obesity study or something from weeks down
to minutes. So there are a lot of amazing use cases of AI. We should not forget these
upsides also, like we want all of these. And we do not want to pace these. Exactly. You're
totally right. And so how do they let's if you map out the next 12 months, how do the
enterprise actually get value? You drop the word context, but how do they operationalize
that? It's actually harder than most people believe. But, you know, first and foremost,
we have to make sure that we have digitized everything that's happening in an organization.
That actually you cannot actually just, you know, have a magic wand and make that happen.
So, you know, every meeting has to be transcribed. You know, you have to be able to get all the
context of all the meetings and everything that's happening, all the digital content has
to be fed today. So you have to build, we call it an ontology, we build that. But first
of all, you have to collect that. That itself is a problem in many organizations because
legal teams will say, don't record every call, don't record every thing. So you have to
do that in a way where you define ontology for everyone because I know Palantir says the
word a lot, but it's not like they own the word on like, what does that mean? And for
the people listening, like, yeah, I mean, it's the, you know, ontology just means that in
an organization, the relationship between all the abstract concepts of all the goals and
all the departments and all the people and all the projects that are going on, what do
they exactly mean? And what's the relationship between them, the people, the resources and
what that company does? So it's the difference between a person who is a new employee in
the company and just started today and a person that has worked their five years, you know,
let's say they're equally skilled, they have the same educational background, they're equally
smart and hardworking and all of that. But one, it's, you know, her first day today at work,
the other one, she's been there five years. What's the difference between these two people?
The one has an ontology of how that organization works, who the people are, how you get stuff
done, don't look at the org chart. That's, don't go ask that person. Yeah, he will not get
anything done. You go ask this person, you know, he'll get it done for you. And, and that's
not how it works. You don't need to file that paperwork here. And, you know, and this is,
this project, this is what's going on. This is essential. So there's just a lot of ingrained
knowledge that's sitting in everybody's heads, who knows how an organization works. That's
why it's people say, in startup land, they say, hey, if you lose most of your people, that
company can't recover from it. You can't just replenish and hire new people, like the people
are so essential. How do we get that context? That's ontology and give it to the AI. Part of that
is, we just have to have, you know, the recording and all of that. But the second part is,
how do you actually distill it down into a graph? Actually a digital graph that you can then
feed to the AI. So the way a lot of the agents work today, like a cloud code or any of them,
codex or pi or, you know, open code, or you can go through the whole school of them. You know,
they have this loop, a genetic loop. It can reason. But then it goes and checks every resource
one at a time. So we'll go to this MCP server for your question and try to see, is the answer
here? Is there another one? It synthesizes it and gives you an answer. But it's kind of slow.
I like in this too. If Google would have built Google Search this way 25 years ago, we would have
said, okay, we're going to get 10 blue links. We search for key terms here. But instead of giving
you 10 blue links, it would have gone to one website, summarized with an LLM what it does, found
a few hyperlinks, jumped in parallel to a few of them, read a few websites, done that for 10 minutes,
and then giving you like its best 10 blue links it would find. Well, that would be very expensive.
It costs a lot of money to do that every time go on the web to it would have taken a long time,
when we get away to 10 minutes. And through the quality would be bad because you're actually
only looking at a very small subset of everything that exists out there, right? So how do they do it?
They have an index, all right? You never leave Google servers. You search for, it hits the index,
the reverse index immediately gets you the 10 blue links within, you know, less than 100 milliseconds.
What did you do the same thing for the AI? So the ontology is that we need to compute that index
offline all the time. So it's almost like the page rank algorithm that Google had invented back in
the day, but it's more complicated because Google was just looking at a web where everybody can go
on the web. Here, their permissions, the links existed. Yeah, here are just permissions involved.
The data I'm allowed to access might not be the data that you're allowed to access. So there's privacy,
there's access control. Also, there's many different types of objects here that we're dealing with,
not just websites. So the problem is a little bit harder, but it's manageable. You can actually do it.
So, you know, I'm convinced you can do this and you can get massive productivity gains out of it
but because we did this for the ever.
- Yeah.
- We did it for ourselves.
- Yeah, and we're like.
The company has just completely changed.
It's like not the way it was, I would say a year ago,
because of this.
- I mean, you've been dog fooding data bricks
for data bricks forever, but maybe say more
about the impact you've seen as an organization.
- Yeah, I mean, once we got this ontology,
and we started working on it,
and we actually have probably the largest of all
of our customers, we have the largest ontology.
Our ontology is bigger on us than any of our customers
when they use us to build their ontology,
because Databx uses Databx more than anyone else
uses Databx.
And so it's like millions of millions of nodes
in the graph, in the ontology graph that we have.
So it's just, you know, what happens in an organization?
What happens in an organization,
you have a tree structure organization,
and information flows up and down the tree structure.
You know, if you can't make a decision,
you escalate your boss, maybe they can tie great,
it's a phase up.
Then if you get up to speed on what's happening,
and then if you get all the context,
and then they make decisions, once decisions get made,
you have to percolate them down into organization.
A lot of this can now be done by AI
if you have an ontology.
Why?
Because, you know, what happens in a meeting?
In a meeting, you go through some, you know,
someone has done the analysis.
They probably have a PowerPoint deck,
with some pretty graphs in it.
That person did the analysis
of some smart person that used Excel,
made some models, there were some numericals.
So a lot of that, you can now just do with AI.
So the AI can do the analysis for you.
It has all the context.
It can present it in a way that you want.
You can ask questions about it.
Instead of having follow-up meetings,
you can directly ask questions directly from the AI.
So it's very similar.
It's along the lines of what Jack Dorsey has said
that you can do to the organization.
It's just a concrete way of implementing it.
- Yeah.
- So it's game changer for us.
Like, you know, it's just everybody's
on their phones now in the meetings on Genie.
And they're like asking Genie questions.
You can see, soon as someone says something complicated
or something like, you know, you see everybody go through the poll.
- Can you share that finance?
Like the finance anecdote, you mentioned ones at a board meeting.
- Yeah, it's, yeah, sure.
Internal board meeting.
Yeah, so--
- Only a kosher group.
- Yeah, exactly.
No, it's actually needed for one of our presentations.
I need to know how many customers do we have in Fortune 500?
That is, what's our penetration of Fortune 500?
And I asked one of the people in sales ops
'cause I thought she would have it.
And she texted me back and said, oh, sorry,
I can't log in to Genie right now.
I'm on a flight.
That's the way, if you're just going to log in to Genie,
I can do that myself.
Like I don't know.
I asked you 'cause I thought you had something alternative
that I don't have access to.
So then I was kind of a little bit angry.
So I texted the CFO instead, Dave.
And so the texted Dave, and I said, hey,
do you know what our Fortune 500 penetration is?
And he just copy-pasted a screenshot of Genie back then.
(laughing)
So he also asked that.
So then I said, does anyone do anything novel here
that everybody's just going to Genie
and asking the ontology, you know, for questions?
- It's like, let me Genie that for you
and so let me go.
- That's what everybody's doing.
Now we just say, if you say, hey, can someone just Genie this?
Can I think just get it from the ontology?
So I do think it's a game changer.
But it's not just you press about
and you have an ontology in an organization.
And I think Palantir actually has done a great job
of going to organizations and getting a lot
of that tacit knowledge written down
and getting it into the organizations.
We automatically take that and build the graph.
And then we feed that graph into the agents
so that we can answer the question
and answer it in a way that business leaders would like to see.
Which is in graphs, you know, in a political way
and a way where you can interrogate that question.
And you know, continue asking questions
and get answers to those so you can make decisions.
And then disseminating that information
and organization.
- Yeah, it's pretty amazing.
You sort of bookmarked the developers
are obviously using AI, questionable value.
I want to follow up with you on that
because I feel like you guys were one of the earliest.
And I say, I don't want to use the word token maxing
'cause it has such a negative connotation.
But I think in terms of applauding people
who can use AI to become more productive,
you guys were at the forefront of that, right?
And then of course there's this cycle of oh shoot,
people are being wasteful.
Now we need to value max.
Like what was your own journey on that?
And like how do you guys think about value maxing,
not token maxing?
And then I'm gonna throw in Unity Gateway in this, right?
Because I think the managing of cost piece
is actually getting more important
and you guys are helping people do that.
But maybe tie that in to extend it.
- Yeah, yeah.
So around Q4 last year was when, you know,
the models got really, really good.
And we started noticing that, okay,
it's actually starting to give much better productivity.
So I actually started using the models myself
to sort of start, you know, commit code into production
for later weeks, like the actual,
as I want to take it all the way to production.
So I did that and started pushing the organization
that hey, everyone needs to do that.
I have done it, why are you not?
Like if the CEO can commit code to production
and a very sensitive data platform
that has all these security requirements,
you should be able to do that too.
You being any manager or anyone in the organization.
So started pushing everyone very hard
and we started making leaderboards in Q4.
And at the beginning of, I say January, February,
when kick it off the year, we were already full swing,
everybody was using the stuff
and we were pushing and we were managing this.
But, you know, the whole token maxing thing was happening
around, you know, February, March, period,
already it was happening.
So yeah, we just had a lot of being,
maybe a few quarters ahead of folks
to see what was happening here.
And it was getting out of hand.
So we already had a gateway.
So it's called Unity Gateway where we were already,
this gateway was being used to provide token capacity.
So you can get OpenAI and Thropic, Gemini, GROC capacity.
Like any customer can come to us
and we'll just provide them the capacity
'cause we have a relationship with those.
And any open source model.
So we started putting in budget constraints in place
and giving people warnings like, okay, you have this much
of your budget left.
You're getting close to your kind of ceiling.
So we started doing that per person and for group.
And then we started doing great analytics
so we could predict exactly what the costs were going.
And then, yeah, and then we added smart routers
that could actually pick cheaper models
if you're getting close to your budget
or if, you know, you have simple questions,
we started doing that.
We also built a harness called Omnigent
which can multiplex between the different harnesses.
Turns out actually the harness itself matters.
Like if you use the same model, but different harnesses,
there's almost two X different cost difference.
Even exactly same model.
You know, same version, but different harness,
you get two X difference in actual cost.
So if you can change harness,
you can get a lot of leverage in the cost.
So we started using all of this.
That's what we were able to actually bend the curve
and actually a cost for AI has been basically,
the tokens will continue to go up,
but the cost have been sort of stagnant.
So that's been actually super, super important for us.
And there's huge demand for this.
I think every organization is going through this now.
- Yeah, for the first time,
I do a lot of board meeting,
so I'm on 20-something boards.
This is a large engineering organization.
Do you see this?
Do you think that that's a trend?
Do you think that's just like a one-off anecdote?
'Cause I've been hearing about,
I remember the first deep seek moment
when video started, and that turned out to not be real.
Then the kidney moment and the next deep seek moment,
none of it seems to have actually had an appreciable impact
on the market.
But now the amount of anecdotes that I have are pretty real
and this seems to be happening.
I love your view.
I mean, I think people want both.
They want the latest model that's super intelligence
for the difficult task where they get ROI,
but then there's a lot of mundane dump things.
People literally use their harness
to rename files and whatnot.
It's like you're paying orders of magnitude more for that.
Please type that in yourself.
Don't have the model do that.
It's going to spin for five minutes
and then it's going to rename the file for you
and cost you, you know, sense.
But I guess what people have just wanted to do,
you actually see them are moving on it.
No, people are moving on it,
but what they're doing is that, you know,
the pattern is either you can use this expert pattern
where you have, you know, small cheap,
broken-source model that uses the expert model, the big ones
or vice versa or a way in which they can sort of ping-pong
them to each other, but also multiplexing harnesses
and just changing harnesses so that you can control the costs
is also what people are doing.
You know, people have found, for instance, you know,
there's pie is very efficient when it comes to as a harness.
So yeah, I think there's going to be a multitude of these.
It's easy to, the models themselves are stochastic,
as you said, every time they give you different answer
and they're changing so much.
So there's just a lot of experimentation happening.
So I think we're going to get to a world where you're not
always using the smartest model for everything,
which is kind of the being the paradigm
for the last couple of years.
Like a new model comes out, it's super smart,
they use it for everything, even really, really simple
and then tasks.
- Yeah, I'll tell you what, I see,
I see people using Fable and Astra for architecture,
a cheap model for implementation
and then Fable and Astra for audit.
- Yeah, that seems to be like this emerging.
What are you guys seeing in the start-ups?
I mean, aren't they?
- So that's it, that's honestly the pattern.
- How much open source?
- By token and by dollar, either.
So by dollar, open source is like five percent,
it's very little, but by token count is over 60%.
- Yeah, I was gonna say, I mean, we talked to,
let's say a Decagon or something like that.
They, well, I think it's different internal use
versus external for product.
On the external for product,
I think they're almost up to 90% open source.
On the internal, and I don't want to say for Decagon in particular,
and a lot of them are like, we don't care.
We'll just use Frontier.
We're not thinking about cost control.
But as it gets bigger, you and I are in other board meeting,
where they actually didn't bring that down,
just from a waste perspective.
So I definitely see that moving more toward open source
on the product side.
And actually, that's related to another question,
maybe around open source, but post-training specifically.
I feel like you were kind of early,
I remember talking in 2023,
you were like, what did you buy Bosaic?
[BLANK_AUDIO]
So this vision that you had in 23 kind of came true in 2026 I don't know if you guys would agree right like that sort of what we're hearing across you know of course oh just sort of like hey we're going to actually you're going to own your own intelligence.
You're going to be you know open source models etc. And that's definitely what the startups are doing. I don't know if that's what the enterprises are doing yet but like I mean do you feel like you were early to that or
Yeah I mean first of all you know there was when we started it was also hey we're also pre-training for you which that doesn't make sense you know you can there's so very good pre-trained model now that you can use.
But that you can do actually post training on the model and you can do reinforcement learning yeah we actually doing it that scale and many of those startups are actually customers.
So we actually help them you know using early or reinforcement learning environments where we can make the models very very good at the specific tasks that they are doing it makes a lot of sense for them to do that.
If you have a repetitive task so if you start up and it's offering a product and a product does something specific it's not just a general intelligence it does something specific for you it makes just a lot of sense to.
Take a really good open source model and you know use reinforcement learning and make it really good at that specific task you can cut the cost down you can make it really fast.
You know they control their own IP so in that sense that is possible but a lot of enterprises they just need basic automation and it's just too much for them to do this right now.
Yeah I think one of the challenges is you know you need good devils and making good devils is hard so while the startups can do that and they're motivated to do that.
It's other organizations the easy button might be just to use a frontier model then having to create your own evils we actually generated even you know evils for the customer automatically in the product and we had it front and center.
But then people want they don't want to use it so it's okay let's move it to the back end so that it's optional and then they would never go to it.
So I would say in general why they just don't want to get into it's too complicated or I think you want quick you know quick reinforcement of like you know hey there's a new model I want to try this out.
I want to get this problem solved you don't have time to go do this scientific method of let's make an evile let's have a great baseline and it's sort of like TDD test driven development.
You know it's off-range range if people actually do test driven development very few did right everyone said it's the right way to do it but nobody actually practiced it.
So that's the same that that's kind of a little bit of the curse of you know doing training your own model is the evils is the hard part.
I know you haven't an FD model at data bricks that's very popular word right now or acronym but does it like to get these at enterprises that large is it a full FD model that's required or like how do you and how's that evolved maybe yeah yeah I mean we've had these FDs and it's the demand for it's gone up significantly.
A lot of it is you know how do we build that ontology like the ontology is automatic but if you're not collecting any information like you're not recording anything right.
So that's one of the key things that we do but also things like you know I want to go to an agent I want to put it on you know.
I want it to be customer facing it is a really low latency and I wanted to have guard rails to not people coming to abuse it or ask it things that we don't want to answer and so on.
So we can build that like you know like sports AI that fox has you can watch out with it about sport events.
You can try to ask it actually about politics and it's very good at rejecting you and moving and talking about sports instead.
So so FDs built that so you know we'll help the organizations actually get started with AI.
It is important because it's just many organizations do not have the in-house expertise to build the stuff so just a little bit of help on the side and then they get started.
So this is more related on the agent side but I saw recently that I think a third party neutral third party I think did some tests that lake base or neon was actually the data the postgres database of choice for agents.
And I thought that was interesting one because you know one exciting data works but to I probably wouldn't have guessed that maybe a year ago.
Yeah it was a surprise just because there's others out there that have you know great developer momentum as well but it was pretty clearly number one and so I'm curious.
How did you guys crack this and what what makes you win across the agents because you win the agents now you win the market.
Yeah I mean I think a lot of credit should go to neon and Nikita and team and I think what they've done is they've just been obsessive about how do you make the models how do you make the models pick and agents favor lake base or neon as a database.
So what did they do the agents one experiment you know they're going off they're trying to build a little bit software they need the database so you need the database to come up quickly.
So they had this obsession that everything should take less than a you know far less than a second.
So you know database comes up in far less than a second you can clone gigantic database again petabyte database you can clone it in less than a second you know so it's like highly elastic highly responsive and then they built this killer feature called branching.
So branching just lets you branch the database you can have many many branches of the same database.
And they just made this very light weight we saw this with other things with agents right like UV you know rip grab like basically re implementation of a lot of the tools on units making them really really blazing fast and lightweight and also sort of fail safe for agents.
They just did this to a part of problem which is database so like now you have a postgres database and the postgres radius has all these advantages that it's really fast it's nimble it's fail safe you can go back to snapshots you can do those things so I think that's why it's just easier for agents to use this.
They also make sure they had a pricing model that was like you don't want just because the agents are building some software and experiment you don't want to cost to run out.
You're okay paying for your database if it's like production using lots of people are using it but just experiment. So I think they were just obsessed they were not trying to win the database war or trying to be better than some other vendor they were obsessed with how are we the best for agents.
And that's a new persona because in databases the obsession has been how do we help TBA's how do we help app devs how do we help help the people that are using the database they changed the game and said hey how do we focus on agents and help agents get the best database they want.
And you know now over 90% of their the databases that are created on neon and like base are actually created by agents so it's not humans.
So you know number speak for themselves they're by the way it's remarkable so I've started using the on as like my standard database and it was bizarre to me because normally when you enter a large company things slow down is actually like the product has got materially better.
Yeah are they totally independent they work with the rest of the like no it's a great team I mean work very closely together you know we love databases and data so it's it's you know we live that but the team does a great job of just making super fast snappy and great for agents.
All right Ali what is your p-dume less than 10% no close to zero what about yours I don't know I just say my my only answer is my p-dume without AI as much hair than my p-dume with AI wow that's about what I'm sorry.
I went on a technical I would agree with Ali and this one.
Thanks for listening to this episode of the a-16z podcast if you like this episode be sure to like comment subscribe leave us a rating or review and share it with your friends and family.
Or more episodes go to YouTube Apple podcast and Spotify follow us on X a-16z and subscribe to our sub stack at a-16z dot sub stack dot com thanks again for listening and I'll see you in the next episode.
As a reminder the content here is for informational purposes only should not be taken as legal business tax or investment advice or be used to evaluate any investment or security
and is not directed at any investors or potential investors in any a-16z please note that a-16z and its affiliates may also maintain investments in the company's discussed in this podcast.
For more details including a link to our investments please see a-16z dot com forward slash disclosures.
Podcast Summary
Key Points:
There is a "tragedy of the commons" in AI development, where companies compete to advance quickly, driven by IPO pressures and market competition.
Pacing AI development is often framed as a political or PR strategy rather than a genuine safety measure, and it fails to address real risks like cyberattacks.
Cybersecurity is a pressing, immediate risk as AI agents outpace human security teams in detecting and exploiting vulnerabilities.
The real danger lies not in superintelligence, but in unregulated, autonomous AI agents causing systemic failures through rapid, automated attacks.
AI models today lack organizational context, limiting their effectiveness—enterprise value comes from context-aware systems, not smarter models.
Databricks and other companies are building organizational ontologies to capture internal knowledge, enabling AI to understand workflows and decision-making.
The push for "recursive self-improvement" or RSI is exaggerated; most AI progress is auto-catalytic, not self-referential or self-improving in a transformative way.
Trust in AI safety requires independent, diverse inspections of research, not self-policing by labs or corporate competition, to ensure transparency and reduce bias.
Summary:
The conversation centers on AI adoption, risks, and governance, highlighting a critical disconnect between public fears of existential threats and the actual, immediate risks of cyberattacks driven by autonomous AI agents. Ali Godsee argues that the real danger lies not in superintelligence—far from current reality—but in the rapid growth of AI capabilities that outpace human security, especially in detecting and exploiting system vulnerabilities. While some advocate for slowing AI development or imposing regulations, Godsee contends that this approach is politically motivated, poorly executed, and fails to address the core issue: the lack of contextual understanding in AI models.
Most organizations, he observes, are still behind in adopting AI at scale, relying on basic chatbots rather than agentic systems that can automate complex workflows. The key to unlocking value lies in building organizational ontologies—comprehensive digital records of internal processes, meetings, and decisions—so that AI can operate with meaningful context. , crisis text lines).
These examples show tangible, life-saving benefits. Ultimately, the path forward is not about slowing progress or fearing AI’s advent, but about engineering better, context-aware systems that deliver measurable value while maintaining robust security. The industry must prioritize transparency, independent oversight, and digital infrastructure over fear-based narratives.
FAQs
The primary concern is that AI agents can make cyberattacks faster and harder for human security teams to detect, leading to real-world risks like system outages and financial damage due to rapid exploitation of vulnerabilities.
No, he believes the risk of superintelligence is extremely low and currently far from reality, arguing that the conditions required for such intelligence are not being met in current AI development.
It refers to the competitive pressure among companies to race ahead in AI innovation, with each one trying to outperform the others, leading to a situation where no single entity can slow progress without sacrificing competitive advantage.
He believes that 'pacing' is a politically motivated PR tactic that fails to address real risks and creates false impressions, as it doesn't ensure safety or security and can be seen as a surrender to political pressure.
By providing AI models with accurate organizational context—such as meeting notes, processes, and employee knowledge—so they can make better, more relevant decisions without needing to surpass current intelligence levels.
Examples include AI detecting self-harm in teens, automating insulin delivery for diabetes patients, and accelerating drug discovery by predicting gene regulatory responses in cells.
Chat with AI
Loading...
Pro features
Go deeper with this episode
Unlock creator-grade tools that turn any transcript into show notes and subtitle files.