<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:googleplay="http://www.google.com/schemas/play-podcasts/1.0"><channel><title><![CDATA[Shivanath Devinarayanan]]></title><description><![CDATA[The Dark Factory covers the operating reality of enterprise AI beyond vendor decks. CDLTO at Asymbl, Salesforce MVP Hall of Fame, 180+ AI agents in production. I write about agents, accountability, memory, review systems, and decision layers.]]></description><link>https://shivanathd.substack.com</link><image><url>https://substackcdn.com/image/fetch/$s_!JV7n!,w_256,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb48649c8-76ae-46aa-9e4d-319d734242a1_344x406.png</url><title>Shivanath Devinarayanan</title><link>https://shivanathd.substack.com</link></image><generator>Substack</generator><lastBuildDate>Fri, 19 Jun 2026 17:37:02 GMT</lastBuildDate><atom:link href="https://shivanathd.substack.com/feed" rel="self" type="application/rss+xml"/><copyright><![CDATA[Shivanath Devinarayanan]]></copyright><language><![CDATA[en]]></language><webMaster><![CDATA[shivanathd@substack.com]]></webMaster><itunes:owner><itunes:email><![CDATA[shivanathd@substack.com]]></itunes:email><itunes:name><![CDATA[Shivanath Devinarayanan]]></itunes:name></itunes:owner><itunes:author><![CDATA[Shivanath Devinarayanan]]></itunes:author><googleplay:owner><![CDATA[shivanathd@substack.com]]></googleplay:owner><googleplay:email><![CDATA[shivanathd@substack.com]]></googleplay:email><googleplay:author><![CDATA[Shivanath Devinarayanan]]></googleplay:author><itunes:block><![CDATA[Yes]]></itunes:block><item><title><![CDATA[The Payback Review AI Teams Need Before They Scale]]></title><description><![CDATA[Five questions to run before you sign the next AI infrastructure expansion]]></description><link>https://shivanathd.substack.com/p/the-payback-review-ai-teams-need</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-payback-review-ai-teams-need</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Fri, 19 Jun 2026 11:30:42 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/6285a3f0-f177-453f-9ecb-8d985f9a89bc_1680x944.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>The public AI market argument keeps circling one question: is this a bubble?</p><p>That question is useful for headlines. It is less useful inside an operating review.</p><p>A team deciding whether to scale an AI workload needs a different discipline. It needs to know whether the work earns its compute.</p><p>![The Payback Review AI Teams Need Before They Scale](images/substack_cover.png)</p><p>That distinction matters because the demand evidence is no longer thin. <span>NVIDIA</span> reported fiscal 2026 revenue of $215.9 billion, with Data Center revenue of $193.7 billion. <span>OpenAI</span> has described annual recurring revenue moving from $2 billion in 2023 to $6 billion in 2024 to more than $20 billion in 2025. Anthropic has reported run-rate revenue above $30 billion and fast growth in million-dollar annualized business accounts.</p><p>Those are not small signals.</p><p>They still do not answer the operating question.</p><p>The operating question is whether the value event sits close enough to the inference bill.</p><h2>What The Public Thesis Leaves Out</h2><p>The <span>LinkedIn</span> version of this argument is intentionally simple: demand can be real while payback stays uneven.</p><p>Subscribers need the next layer.</p><p>When an AI system moves from demo to production, the cost path changes. A prompt becomes a workflow. A workflow becomes retries, tool calls, file reads, long-context passes, permission checks, validation steps, human review, and monitoring. The marginal unit is not a token. It is a completed business action.</p><p>That is where many AI business cases get too soft.</p><p>They price the model call and forget the loop.</p><p>They count the answer and ignore the verification.</p><p>They cite adoption and skip the margin map.</p><h2>The Payback Review</h2><p><img style="" src="https://substackcdn.com/image/fetch/$s_!p3IQ!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F27253c63-b3d3-4a2d-ac34-7b157009f4e2_1680x944.png" data-component-name="ImageToDOM"></p><p>Before scaling an AI workload, I would run a five-part review.</p><p>![The Payback Review](images/substack_info_01_payback_review_board.png)</p><h3>1. Map The Workload</h3><p>Do not start with the model. Start with the work.</p><p>Name the task, the user, the trigger, the input, the decision, the output, the handoff, and the failure mode.</p><p>A coding agent that edits a test suite, opens a pull request, and saves two engineering days is not the same economic object as a chatbot answering shallow internal questions from stale retrieval. Both may use tokens. Only one may create enough measurable value to justify premium inference.</p><h3>2. Price The Inference Path</h3><p>The first estimate should include more than the visible answer.</p><p>Count prompts, tool calls, retries, long-context steps, file reads, retrieval passes, evaluations, moderation, logging, and human review. Also count the work that happens when the system fails: escalations, rework, support tickets, or manual cleanup.</p><p>This is where model routing becomes an operating control.</p><p>Recent Last30Days research surfaced routing as a practical response to AI overspending. That signal is important. Mature teams stop treating intelligence as one premium tier. They decide which work deserves frontier reasoning and which work can move through a cheaper model, a cached answer, a deterministic rule, or no AI at all.</p><h3>3. Locate The Value Event</h3><p>Every serious AI workload needs a named value event.</p><p>![Usage is not payback](images/substack_info_02_value_event_map.png)</p><p>The value event might be a resolved support case, a contract risk caught before signature, an engineer day saved, a sales handoff completed, a claim processed, or a compliance exception routed before it becomes expensive.</p><p>If the team cannot name the value event, it should not scale the workload yet.</p><p>Usage is not enough.</p><p>Engagement is not enough.</p><p>Answers are not enough.</p><p>The value event is the moment where the business can say: this work paid for the compute it consumed.</p><h3>4. Identify Who Captures Margin</h3><p>This is the uncomfortable step.</p><p>The user may get value. The application owner may get adoption. The cloud provider may get revenue. The chip supplier may capture scarce-supply margin. The model lab may carry heavy compute commitments. The enterprise may pay more than it saves.</p><p>All of those can be true in the same ecosystem.</p><p>That is why the broad bubble debate hides too much. The buildout can create durable economic value while the return pool concentrates in fewer places than the story suggests.</p><p>GMO's framing is useful here: a technology can be transformative and still produce poor returns for many investors. Railroads, telecom fiber, cloud capacity, and internet infrastructure all carry versions of that lesson.</p><h3>5. Choose The Operating Response</h3><p>The review should end with a decision, not a mood.</p><p>![Scale Decision Matrix](images/substack_info_03_scale_decision_matrix.png)</p><p>Use four decisions:</p><ul><li><p>Scale: the workload has paid usage, measured value, and acceptable inference discipline.</p></li><li><p>Route: the workload is valuable, but too much of it is running on expensive reasoning.</p></li><li><p>Redesign: the workflow creates value, but the operating path has too many retries, handoffs, or verification loops.</p></li><li><p>Stop: the workload consumes compute without a credible value event.</p></li></ul><p>The best teams will not be the ones with the most AI stories. They will be the ones that make these calls early.</p><h2>A Concrete Scenario</h2><p><img style="" src="https://substackcdn.com/image/fetch/$s_!qUnZ!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa97a471e-8132-409e-861a-0fa0814117f2_1680x944.png" data-component-name="ImageToDOM"></p><p>Imagine a legal review agent.</p><p>In the weak version, it summarizes contracts and produces plausible notes. Lawyers still reread everything, escalations are unclear, and the business cannot tell whether the agent reduced cycle time or risk.</p><p>That workload may have usage, but it has not proved payback.</p><p>In the stronger version, the system is scoped to a small set of clauses. It routes simple extraction to cheaper processing, reserves premium reasoning for ambiguous risk, records confidence, escalates exceptions, and measures avoided rework or faster approval.</p><p>The same category now has a payback path.</p><p>The difference is not belief in AI.</p><p>The difference is operating design.</p><h2>What To Inspect Next</h2><p><img style="" src="https://substackcdn.com/image/fetch/$s_!D0yq!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F582ac60a-3272-4d8f-a458-1082911e398f_1680x944.png" data-component-name="ImageToDOM"></p><p>For any AI workload already moving toward production, inspect these five things this week:</p><ol><li><p>The exact business action the system completes.</p></li><li><p>The full inference path behind that action.</p></li><li><p>The value event that proves the work was worth doing.</p></li><li><p>The routing policy that keeps premium reasoning away from cheap work.</p></li><li><p>The margin map showing who gets paid when usage rises.</p></li></ol><p>That review will not settle the AI bubble debate.</p><p>It will do something more useful.</p><p>It will tell you whether your AI buildout is becoming an operating model or just a larger bill.</p><h2>Sources</h2><ol><li><p>NVIDIA FY2026 financial results: https://nvidianews.nvidia.com/news/nvidia-announces-financial-results-for-fourth-quarter-and-fiscal-2026</p></li><li><p>OpenAI CFO Sarah Friar on revenue, compute, and practical adoption: https://openai.com/index/a-business-that-scales-with-the-value-of-intelligence/</p></li><li><p>Anthropic Google/Broadcom compute partnership and run-rate revenue disclosure: https://www.anthropic.com/news/google-broadcom-partnership-compute</p></li><li><p>Futurum 2026 AI capex analysis: https://futurumgroup.com/insights/ai-capex-2026-the-690b-infrastructure-sprint/</p></li><li><p>Axios AI data-center financing coverage: https://www.axios.com/2026/06/10/meta-amazon-oracle-data-centers</p></li><li><p>GMO AI valuation and capital-bubble analysis: https://www.gmo.com/americas/research-library/valuing-ai-extreme-bubble-new-golden-era-or-both_viewpoints/</p></li><li><p>Last30Days raw conversation grounding: source_room/last30days_raw/ai-bubble-buildout-payback-inference-economics-raw-v3.md</p></li></ol>]]></content:encoded></item><item><title><![CDATA[The Harness Control Review]]></title><description><![CDATA[The Dark Factory | Edition #20 &#8212; Subscriber Edition]]></description><link>https://shivanathd.substack.com/p/the-harness-control-review</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-harness-control-review</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Tue, 16 Jun 2026 13:10:56 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/5956c4ee-1c81-4532-acc7-8ad79e05a3fa_1680x944.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>The public Edition 20 argument was simple: the OpenAI and Anthropic IPO race is also a harness ownership test.</p><p>For subscribers, the more useful question starts one level lower.</p><p>Before your company expands another enterprise AI contract, can you prove which controls still belong to you?</p><p>That proof should not live in a strategy deck. It should live in a review ritual that a CIO, CISO, product leader, and operating executive can run together.</p><p>Call it the Harness Control Review.</p><h2>The Problem</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!zzfA!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F476f1e92-5bd9-407f-96a3-38d7d8fe3021_1680x944.png" data-component-name="ImageToDOM"><p>Most AI buying conversations begin with capability.</p><p>Which model is better at coding? Which model handles long context? Which product has the strongest enterprise controls? Which vendor can send people into the business to make the deployment work?</p><p>Those questions are useful, but they arrive too early.</p><p>The first question is ownership.</p><p>If the vendor owns context assembly, routing, evaluations, memory, permissions, review, and rollback, the company may still have a legal contract, a security review, and an admin console. It may not have operating control.</p><p>That difference becomes more important as model prices fall.</p><p>Cheap tokens do not remove dependency. They move dependency toward the layer that decides how tokens enter work.</p><h2>Why The Deployment Race Matters</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!ogV6!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F80231c61-4d6f-4fc6-bd80-0c2dbac0a001_1680x944.png" data-component-name="ImageToDOM"><p>OpenAI's Deployment Company announcement is a useful signal because it says the quiet part out loud. OpenAI is not only selling model access. It is building an organization that embeds Forward Deployed Engineers inside customer environments, redesigns workflows around AI, and connects OpenAI models to customer data, tools, controls, and business processes.</p><p>Anthropic is moving through a partner-scale model. Its DXC alliance says DXC will train tens of thousands of Claude-certified Forward Deployed Engineers embedded inside customer organizations.</p><p>Those are different go-to-market shapes, but they solve the same problem.</p><p>The lab needs customer context.</p><p>The customer needs working systems.</p><p>Forward deployed engineering becomes the bridge.</p><p>That bridge can be good. Many companies need help. The mistake is letting the bridge become the only road back into your own operating system.</p><h2>The Review Ritual</h2><img style="" src="" data-component-name="ImageToDOM"><p>Run the Harness Control Review before signing, expanding, or renewing a major AI deployment.</p><p>The review has seven lanes.</p><h3>1. Context</h3><p>List the context sources the agent can use: documents, CRM fields, tickets, code, messages, spreadsheets, product telemetry, contracts, and policy material.</p><p>Then ask who controls assembly.</p><p>Can your team decide what enters context, what is excluded, what is redacted, and what expires? Can you reconstruct what the model saw after a decision? Can you test a different context recipe without asking the vendor to redesign the product?</p><p>If the answer is no, the model does not merely read your context. The vendor controls the shape of your context.</p><h3>2. Evaluations</h3><p>Every agent deployment needs tests that represent the work.</p><p>Not benchmark tests.</p><p>Your tests.</p><p>Renewal risk summaries. Support escalations. Contract clause extraction. Lead routing. Code review. Financial variance explanations. Safety checks.</p><p>The review question is direct: who owns the pass/fail definition?</p><p>If the vendor owns the evaluation harness, your team may get impressive demo scores and still lack proof that the system behaves inside your business.</p><h3>3. Permissions</h3><p>Claude Enterprise and similar products correctly emphasize governance, data controls, identity, audit, and admin infrastructure. Those controls matter. They are the entry ticket for enterprise use.</p><p>The deeper review asks whether permissions are tied to actual work.</p><p>Can the agent read as one role and act as another? Which actions require approval? Which tools are read-only? Which writes can be rolled back? Which systems are off-limits no matter what the model recommends?</p><p>The dangerous deployment is not the one with no permission model.</p><p>Security teams usually catch that.</p><p>The dangerous deployment is the one where permissions exist, but no operating leader knows how they map to the work.</p><h3>4. Routing</h3><p>Routing is the economic control surface.</p><p>The last 30 days of operator conversation kept returning to cost pressure, model routing, caching, and token waste. That signal should change the buying conversation.</p><p>Your company should know which tasks require the frontier model, which tasks can use a smaller model, which tasks should hit cache, and which tasks should stop for review.</p><p>If every request goes through the vendor's preferred path, you are not optimizing. You are trusting.</p><p>The router decides cost.</p><p>The router also decides dependency.</p><h3>5. Memory And Cache</h3><p>Memory is where the harness starts to feel like infrastructure.</p><p>A company should know what the system remembers, why it remembers it, how long it keeps it, how it refreshes stale memory, and how a human can correct it.</p><p>Caching has a similar operating question. Are repeat calls cheaper because your company owns stable, verified context? Or are repeat calls cheaper only inside the vendor's product surface?</p><p>The answer changes the economics.</p><p>It also changes portability.</p><h3>6. Review And Rollback</h3><p>Anthropic's containment post is useful because it frames risk as both likelihood and damage. As agents gain access, the possible blast radius grows.</p><p>That should force a review lane.</p><p>Can a human inspect the evidence before an action completes? Can the system explain which sources, memories, tools, and evaluations affected the action? Can you reverse the action? Can you pause the agent when the failure mode is business ambiguity rather than model error?</p><p>If rollback is a support ticket, your harness is weaker than your ambition.</p><h3>7. Supplier Swap</h3><p>This is the final test.</p><p>Pick one high-value workflow. Imagine replacing the model tomorrow.</p><p>What breaks?</p><p>If the workflow breaks because the model has different syntax, that is manageable. If it breaks because context, evals, memory, routing, permissions, and review all live inside one vendor's surface, the company does not own the harness.</p><p>It rents it.</p><h2>A Concrete Scenario</h2><p>Take a renewal-risk workflow.</p><p>The agent reads CRM history, support tickets, contract language, product usage, and account notes. It drafts a risk summary, recommends next action, routes the account to a manager, and writes an update back to the CRM.</p><p>The Harness Control Review asks:</p><ul><li><p>Which fields can the agent read?</p></li><li><p>Which tickets are excluded?</p></li><li><p>Who wrote the evaluation cases?</p></li><li><p>Which model handles the summary?</p></li><li><p>Which model handles the routing recommendation?</p></li><li><p>Is the prior account history cached?</p></li><li><p>Can the sales leader inspect why the agent flagged the account?</p></li><li><p>Can the CRM write be reversed?</p></li><li><p>Could the company move this workflow from one model provider to another?</p></li></ul><p>That review is slower than a demo.</p><p>It is also where the real strategy appears.</p><h2>What To Inspect Next</h2><p>When the OpenAI and Anthropic S-1s become public, read them for the normal things: revenue, losses, compute commitments, risk factors, customer concentration, and gross margin.</p><p>Then read them for the hidden split.</p><p>How much value comes from model access?</p><p>How much comes from deployment labor?</p><p>How much comes from enterprise product surfaces?</p><p>How much depends on customers rebuilding work around the lab's harness?</p><p>Inside your own company, run the same inspection before the vendor renewal.</p><p>If you own context, evals, permissions, routing, memory, review, rollback, and supplier swap paths, you can rent powerful models without surrendering the work layer.</p><p>If you do not, the contract may still look like software.</p><p>The operating reality is different.</p><p>You rented the factory floor.</p><h2>Sources</h2><ol><li><p>OpenAI Deployment Company: https://openai.com/index/openai-launches-the-deployment-company/</p></li><li><p>OpenAI API pricing: https://openai.com/api/pricing/</p></li><li><p>Claude Opus pricing: https://www.anthropic.com/claude/opus</p></li><li><p>Anthropic and DXC alliance: https://www.anthropic.com/news/dxc-anthropic-alliance</p></li><li><p>Claude Enterprise: https://www.anthropic.com/product/enterprise</p></li><li><p>Anthropic containment engineering: https://www.anthropic.com/engineering/how-we-contain-claude</p></li><li><p>Anthropic Economic Index: https://www.anthropic.com/research/economic-index-march-2026-report</p></li><li><p>Anthropic IPO reporting: https://www.theguardian.com/technology/2026/jun/01/anthropic-ai-ipo</p></li><li><p>OpenAI IPO reporting: https://www.theverge.com/ai-artificial-intelligence/946335/openai-ipo-s-1-confidential</p><div class="subscription-widget-wrap-editor" data-attrs="{&quot;url&quot;:&quot;https://shivanathd.substack.com/subscribe?&quot;,&quot;text&quot;:&quot;Subscribe&quot;,&quot;language&quot;:&quot;en&quot;}" data-component-name="SubscribeWidgetToDOM"><div class="subscription-widget show-subscribe"><div class="preamble"><p class="cta-caption">Thanks for reading! Subscribe for free to receive new posts and support my work.</p></div><form class="subscription-widget-subscribe"><input type="email" class="email-input" name="email" placeholder="Type your email&#8230;" tabindex="-1"><input type="submit" class="button primary" value="Subscribe"><div class="fake-input-wrapper"><div class="fake-input"></div><div class="fake-button"></div></div></form></div></div><p></p></li></ol>]]></content:encoded></item><item><title><![CDATA[MuleSoft as the Anti-Corruption Layer: DataWeave, Canonical Models, and Multi-Source Mediation]]></title><description><![CDATA[One stable business contract that survives many unstable backends]]></description><link>https://shivanathd.substack.com/p/mulesoft-as-the-anti-corruption-layer</link><guid isPermaLink="false">https://shivanathd.substack.com/p/mulesoft-as-the-anti-corruption-layer</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Sun, 14 Jun 2026 18:02:15 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/3c24d04e-8a40-4411-8d39-fb08ebbcf714_1680x944.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p><em>Newsletter note: This is part of a five-part MuleSoft operator series focused on practical integration, governance, and Agent Fabric readiness.</em></p><p>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl</p><p>The connector is not the product.</p><p>The mapping is the mapping alone is too small.</p><p>The product is the business contract that survives backend drift.</p><p>MuleSoft earns its keep when one stable business contract can survive many unstable backends through DataWeave, bounded canonical models, tenant-aware configuration, and source adapters.</p><p>https://learn.microsoft.com/en-us/azure/architecture/patterns/anti-corruption-layer</p><p>https://docs.mulesoft.com/dataweave/latest/</p><p>https://docs.mulesoft.com/mule-sdk/latest/static-dynamic-configs</p><h2>Anti-Corruption Is A Boundary</h2><p>The anti-corruption layer pattern protects one model from another model. In MuleSoft terms, that means a consumer should not inherit every backend identifier, status code, null convention, relationship shape, or protocol compromise.</p><p>The API contract should express the business capability, not the backend mess.</p><h2>DataWeave Is Contract Logic</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!3wPD!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F790154ed-3a1e-4729-93d1-4580f8284b53_1680x944.png" data-component-name="ImageToDOM"><p>DataWeave is not filler between connectors. It is where parsing, transformation, defaults, field precedence, and shape decisions become executable.</p><p>Treat that logic like product code. Test it. Version it. Review it when a source system changes. Give it an owner.</p><h2>Bound The Canonical Model</h2><p>A canonical model should not become a universal enterprise theology. Keep it bounded by durable capability: customer, candidate, order, invoice, worker, policy, case.</p><p>MuleSoft CIM is useful proof that canonical models can reduce friction across Process and System APIs. The operator still has to decide where the boundary stops.</p><h2>Tenant And Credential Resolution</h2><p>Multi-source mediation becomes risky when tenant and credential logic is casual. Dynamic configuration patterns exist for multi-tenancy, dynamic endpoints, and dynamic settings. Use them deliberately.</p><p>Do not trust a tenant header just because it is convenient. Derive tenant context from authenticated client identity when the risk level requires it.</p><h2>What The Docs Do Not Say</h2><p>DataGraph can compose queries across an application network, but it does not decide business meaning. It will not choose identity precedence, resolve tenant boundaries, or design compensation for conflicting backends.</p><p>The mediation boundary still needs human judgment. That is where the integration team becomes a product team.</p><h2>Operator Notes</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!SITP!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb1dacb5c-3b64-4e69-a283-b53fa272b57e_1680x944.png" data-component-name="ImageToDOM"><p>A canonical contract starts with language, not code. Ask the team what a customer, candidate, order, worker, or invoice means. If two systems disagree, write the disagreement down before writing the mapping. DataWeave can express the decision, but it cannot make the decision for you.</p><p>Field precedence is usually where the real argument lives. Which source wins for display name? Which status is authoritative? Which timestamp tells freshness? Which identifier can cross tenant boundaries? These are product decisions disguised as transformation logic.</p><p>The tenant path should be explicit. A canonical API that serves multiple tenants needs to resolve tenant context, credentials, source routing, and audit labels before the backend call. If the tenant is inferred from an untrusted header, the integration layer can become the place where isolation breaks.</p><p>Source adapters keep the system from turning into a pile of conditionals. Each backend should have a narrow adapter contract. Add a source by adding a mapping and route, not by rewriting the consumer contract. That is the anti-corruption layer in practice: backend drift stays behind the boundary.</p><p>Testing needs to match the risk. Unit tests should cover mappings, default behavior, missing fields, enum translation, and source precedence. Integration tests should prove tenant resolution and credential scope. Contract tests should protect the consumer shape. A mapping that works for the happy path can still corrupt the business object when a backend sends an unexpected null or status.</p><p>This is where DataGraph fits carefully. It can help consumers query across an application network, but it does not replace mediation. Someone still has to decide what the fields mean, which system wins, and how the response should behave when one source is stale or unavailable.</p><h2>The Working Artifact</h2><h2>What To Inspect Next</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!wPwO!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F2ce9ac30-97c9-49d9-814c-3f4ac179f561_1680x944.png" data-component-name="ImageToDOM"><p>Next week: once the contract is clean, we expose selected operations as governed tools through Agent Fabric and MCP Bridge.</p><p>Question for the comments: Where does your canonical model fail first: identity, status codes, ownership, tenant routing, or source freshness?</p><div><hr></div><h2>Sources</h2><p>1. https://learn.microsoft.com/en-us/azure/architecture/patterns/anti-corruption-layer</p><p>2. https://docs.mulesoft.com/dataweave/latest/</p><p>3. https://docs.mulesoft.com/mule-sdk/latest/static-dynamic-configs</p><p>4. https://docs.mulesoft.com/accelerators-cim/latest/</p><p>5. https://docs.mulesoft.com/datagraph/</p>]]></content:encoded></item><item><title><![CDATA[Headless MuleSoft: Build and Deploy Without Studio]]></title><description><![CDATA[When the build only works from one laptop, you don't have a delivery system]]></description><link>https://shivanathd.substack.com/p/headless-mulesoft-build-and-deploy</link><guid isPermaLink="false">https://shivanathd.substack.com/p/headless-mulesoft-build-and-deploy</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Sat, 13 Jun 2026 18:24:51 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/40f6ddbc-51c1-45c2-b7b4-4c8e51d15b97_1680x944.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p><em>Newsletter note: This is part of a five-part MuleSoft operator series focused on practical integration, governance, and Agent Fabric readiness.</em></p><p>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl</p><p>The fastest way to expose a fragile MuleSoft practice is to remove the console.</p><p>If the build only works from one laptop, you do not have a delivery system.</p><p>You have a ritual.</p><p>Headless MuleSoft is a tighter platform discipline. It is a tighter operator loop where MCP can assist, but Maven and Anypoint CLI remain the repeatable proof path.</p><p>https://docs.mulesoft.com/mulesoft-mcp-server/reference-mcp-tools</p><p>https://docs.mulesoft.com/anypoint-cli/latest/install</p><p>https://docs.mulesoft.com/cloudhub-2/ch2-deploy-cli</p><p>https://docs.mulesoft.com/mulesoft-mcp-server/mulesoft-mcp-server-release-notes</p><h2>MCP Assists, Maven Proves</h2><p>MuleSoft DX MCP Server can help with project validation, local runs, deployment actions, API governance, policy management, and usage insights. That is useful. It should not become the only proof path.</p><p>The repeatable path still needs source control, Maven, Anypoint CLI, explicit credentials, and environment promotion rules.</p><h2>The Practical Toolchain</h2><p>A terminal-first MuleSoft loop starts from Git, not Studio export. The repo should hold `pom.xml`, Mule XML, MUnit tests, config templates, and deployment configuration. Developers can use MCP in the inner loop, but CI should run deterministic commands.</p><p>The current CLI install path uses Node 22 or later, npm 7 or later, and `anypoint-cli-v4-public`. The current CloudHub 2.0 docs expose deploy, list, describe, logs, download logs, modify, start, stop, and delete commands. Mule Maven Plugin 4.10.0, dated June 2, 2026, also matters because it supports applications targeting Mule runtime engine 4.12.0.</p><p>https://docs.mulesoft.com/release-notes/mule-maven-plugin/mule-maven-plugin-4.10.0-release-notes</p><h2>The Credential Wall</h2><p>The operator lesson is that credentials are architecture. Platform credentials, connected apps, Maven settings, Exchange publishing, and secure deployment properties all shape whether headless work is real.</p><p>Do not bury secrets in source. Do not treat a local settings file as a deployment strategy. If a build needs enterprise Maven access, solve the entitlement problem instead of blaming the tool.</p><h2>The Verification Loop</h2><p>A green deploy is not enough. Check the app list, app description, runtime version, logs, health endpoint, and expected API reachability. Then compare the deployed artifact and configuration to the repo.</p><p>This is where console craft becomes software delivery.</p><h2>What The Docs Do Not Say</h2><p>Docs describe commands. They do not decide where agent assistance stops and deterministic CI/CD begins. My rule is simple: MCP assists, Maven and CLI prove.</p><p>The dangerous path is a deployment that succeeds but cannot be reproduced. That is worse than a failed deploy because it teaches the team to trust a process it cannot inspect.</p><h2>Operator Notes</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!f9yI!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F5a07e52b-a659-4754-bbb9-91bfc27d7ef8_1680x944.png" data-component-name="ImageToDOM"><p>The first headless test should be deliberately boring. Clone the repo on a clean machine or clean runner. Install the documented versions of Node, npm, Maven, and Java. Authenticate through the same path CI will use. Run tests. Package. Deploy to a sandbox target. Then inspect the deployed app from Anypoint CLI without opening the console.</p><p>That test exposes hidden dependencies fast. A missing Maven setting, a plugin version mismatch, a runtime target nobody documented, or a secret that only exists on one developer machine will break the loop. That is good news. The failure is cheaper in the terminal than in a production release window.</p><p>The MCP server fits best as an assistant inside this loop. Let it validate the project, inspect structure, help run local actions, and call deployment tools when the task is bounded. Keep the promotion path deterministic. CI should still run the same Maven commands, publish the same artifact, and use the same deployment configuration every time.</p><p>The artifact boundary is important. A team should be able to answer which source revision produced the deployed app, which runtime version it targets, which environment properties were supplied, which secure properties were injected, and which smoke test proved the endpoint. Without those answers, headless deployment becomes faster console craft.</p><p>The build pipeline also changes review culture. Mule XML, DataWeave, properties, MUnit tests, and deployment config become code review subjects. A change to a secure property name can be as dangerous as a change to a flow. A runtime upgrade can be as meaningful as a connector change. A skipped test can hide a mapping failure.</p><p>The payoff is not speed alone. The payoff is reproducibility. Once the app can be built and deployed without Studio, governance becomes easier to inspect. That is the handoff to the next article: deployment is only the start. The front door still needs API Manager, autodiscovery, client contracts, policy checks, and runtime evidence.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!QM45!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F849e8fb8-8cd0-4801-8085-843c7b52ca71_1680x944.png" data-component-name="ImageToDOM"><h2>The Working Artifact</h2><pre><code>npm install -g anypoint-cli-v4-public
anypoint-cli-v4 --version
mvn -B clean test
mvn -B clean package
mvn -B clean deploy -DmuleDeploy
anypoint-cli-v4 runtime-mgr:application:list --environment Sandbox --output json</code></pre><h2>What To Inspect Next</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!qsT5!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F6eaa9b59-2b6f-4731-82c2-2ca9c13ee9f6_1680x944.png" data-component-name="ImageToDOM"><p>Next week: the front door. A deployed app is not governed until API Manager, autodiscovery, contracts, and gateway mode line up.</p><p>Question for the comments: Where does your MuleSoft delivery path break first when Studio is removed: build, credentials, deploy, logs, or promotion?</p><div><hr></div><h2>Sources</h2><ol><li><p>https://docs.mulesoft.com/mulesoft-mcp-server/reference-mcp-tools</p></li><li><p>https://docs.mulesoft.com/anypoint-cli/latest/install</p></li><li><p>https://docs.mulesoft.com/cloudhub-2/ch2-deploy-cli</p></li><li><p>https://docs.mulesoft.com/cloudhub-2/ch2-deploy-maven</p></li><li><p>https://docs.mulesoft.com/release-notes/mule-maven-plugin/mule-maven-plugin-release-notes</p></li><li><p>https://docs.mulesoft.com/release-notes/mule-maven-plugin/mule-maven-plugin-4.10.0-release-notes</p></li><li><p>https://docs.mulesoft.com/mulesoft-mcp-server/mulesoft-mcp-server-release-notes</p><p class="button-wrapper" data-attrs="{&quot;url&quot;:&quot;https://shivanathd.substack.com/subscribe?&quot;,&quot;text&quot;:&quot;Subscribe now&quot;,&quot;action&quot;:null,&quot;class&quot;:null}" data-component-name="ButtonCreateButton"><a class="button primary" href="https://shivanathd.substack.com/subscribe?"><span>Subscribe now</span></a></p><p></p></li></ol>]]></content:encoded></item><item><title><![CDATA[Governing the Front Door: API Manager, Omni Gateway, and the Autodiscovery Trap]]></title><description><![CDATA[When the policy exists but traffic still finds the wrong door]]></description><link>https://shivanathd.substack.com/p/governing-the-front-door-api-manager</link><guid isPermaLink="false">https://shivanathd.substack.com/p/governing-the-front-door-api-manager</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Sat, 13 Jun 2026 09:08:24 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/3e3cae0d-dc2b-444a-99c4-6a8a6d1b3a5b_1680x944.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p><em>Newsletter note: This is part of a five-part MuleSoft operator series focused on practical integration, governance, and Agent Fabric readiness.</em></p><p>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl</p><p>The policy can exist.</p><p>The API can exist.</p><p>Traffic can still enter through the wrong door.</p><p>API Manager is not policy dust. The front door governs traffic only when runtime, API instance, credentials, client contract, flow binding, and gateway mode line up.</p><p>https://docs.mulesoft.com/gateway-home/</p><p>https://docs.mulesoft.com/mule-gateway/mule-gateway-config-autodiscovery-mule4</p><p>https://docs.mulesoft.com/gateway/latest/policies-included-client-id-enforcement</p><h2>Autodiscovery Is A Binding, Not A Badge</h2><p>In Mule 4, autodiscovery binds an API Manager instance to a Mule flow through `apiId` and `flowRef`. The API must exist in API Manager, and the runtime needs valid Anypoint Platform credentials.</p><p>That is a runtime binding. It is not a decorative metadata sync.</p><h2>Gateway Names Matter</h2><p>Current MuleSoft docs distinguish Omni Gateway, formerly Flex Gateway, from Anypoint Mule Gateway embedded in Mule runtime. Mixing those names creates bad operating assumptions.</p><p>Policy support also depends on gateway mode. A policy that works in one path may not work in another.</p><h2>The Decision Tree</h2><p>Use this sequence before blaming API Manager.</p><ul><li><p>Are consumers hitting the governed endpoint or bypassing it?</p></li><li><p>Is the API instance active in API Manager?</p></li><li><p>Does the Mule app have the right `apiId` and `flowRef`?</p></li><li><p>Did the runtime start with credentials for the right org, business group, and environment?</p></li><li><p>Is the policy supported by the selected gateway mode?</p></li><li><p>Does the client app have an approved contract?</p></li><li><p>Are headers or query params matching the policy extraction rules?</p></li><li><p>Are logs showing `401`, `429`, or only backend responses?</p></li></ul><h2>CloudHub Health Is Not Policy Enforcement</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!3z8K!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F8b769215-6805-48f6-8f2d-617a14fece51_1680x944.png" data-component-name="ImageToDOM"><p>Runtime Manager tells you whether the app is deployed, running, logging, and sized correctly. API Manager tells you whether the API is governed. Those are related surfaces, not the same surface.</p><p>A healthy CloudHub app can still be reachable through a path that does not enforce the policy you thought was protecting it.</p><h2>What The Docs Do Not Say</h2><p>The dangerous failure mode is not policy failure. The dangerous failure mode is traffic finding another door.</p><p>A green API instance does not prove every consumer enters through that instance. A policy attached to the wrong flow does not protect the business action. A rate limit scoped per replica can surprise a team that expected one global bucket.</p><h2>Operator Notes</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!wGiy!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Faf5bb7da-f787-4d4c-98e8-7f788c8e90da_1680x944.png" data-component-name="ImageToDOM"><p>When a policy does not enforce, resist the urge to stare at the policy screen first. Follow the traffic. Which hostname did the client call? Which base path did it use? Did the request enter the managed API instance or go directly to the app? The fastest diagnosis often comes from proving the path before debating the setting.</p><p>Then check the binding. The `apiId` points to a specific API Manager instance. The `flowRef` points to a specific Mule flow. A wrong value can create the worst kind of failure: something appears configured, but the protected flow is not the flow handling traffic.</p><p>Credentials add another layer. The runtime needs platform credentials for the correct organization, business group, and environment. The client app needs an approved contract when the policy depends on client identity. The request needs credentials in the place the policy expects. Headers, query params, and DataWeave extraction expressions become operating standards, not cosmetic choices.</p><p>Rate limiting needs special care. Teams often talk about rate limits as if there is one universal bucket. The actual behavior depends on the policy, gateway mode, replicas, and storage configuration. If you do not know the scope of the counter, you do not know what protection you have.</p><p>CloudHub health can mislead teams here. A running app proves the runtime is alive. It does not prove the traffic is governed. Logs, API Manager status, policy responses, and client error behavior need to be inspected together. A backend `200` might mean success, or it might mean the request bypassed the front door entirely.</p><p>The operating standard should be simple: no API is considered governed until someone can prove the request path, API instance, flow binding, client contract, policy response, and log evidence. That proof matters even more when the next consumer is an agent tool instead of a human-triggered integration.</p><h2>The Working Artifact</h2><pre><code>&lt;api-gateway:autodiscovery
  apiId="${apiId}"
  flowRef="orders-api-main" /&gt;

apiId=12345678</code></pre><h2>What To Inspect Next</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!twyR!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Ff19b2010-d08d-42f5-8e3d-f10a944a7e2d_1680x944.png" data-component-name="ImageToDOM"><p>Next week: after the request enters the right door, we deal with backend semantics, canonical models, and DataWeave mediation.</p><p>Question for the comments: When a policy does not enforce, which check do you run first: endpoint path, API instance, runtime credentials, flowRef, client contract, or gateway mode?</p><div><hr></div><h2>Sources</h2><p>1. https://docs.mulesoft.com/gateway-home/</p><p>2. https://docs.mulesoft.com/mule-gateway/mule-gateway-config-autodiscovery-mule4</p><p>3. https://docs.mulesoft.com/gateway/latest/policies-included-client-id-enforcement</p><p>4. https://docs.mulesoft.com/gateway/latest/policies-included-rate-limiting-sla</p><p>5. https://docs.mulesoft.com/cloudhub/managing-applications-on-cloudhub</p>]]></content:encoded></item><item><title><![CDATA[The 2026 MuleSoft Mental Model: From API-Led Connectivity to Agent Fabric]]></title><description><![CDATA[I would not start a 2026 MuleSoft architecture review with a connector list.]]></description><link>https://shivanathd.substack.com/p/the-2026-mulesoft-mental-model-from</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-2026-mulesoft-mental-model-from</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Fri, 12 Jun 2026 16:15:01 GMT</pubDate><enclosure url="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<div class="captioned-image-container"><figure><a class="image-link image2" target="_blank" href="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png" data-component-name="Image2ToDOM"><div class="image2-inset"><picture><source type="image/webp" srcset="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png 424w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png 848w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png 1272w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png 1456w" sizes="100vw"><img src="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png" data-attrs="{&quot;src&quot;:&quot;https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png&quot;,&quot;srcNoWatermark&quot;:null,&quot;fullscreen&quot;:null,&quot;imageSize&quot;:null,&quot;height&quot;:null,&quot;width&quot;:null,&quot;resizeWidth&quot;:null,&quot;bytes&quot;:null,&quot;alt&quot;:&quot;MuleSoft Mental Model diagram showing agent-tool readiness checklist and connectivity framework.&quot;,&quot;title&quot;:null,&quot;type&quot;:null,&quot;href&quot;:null,&quot;belowTheFold&quot;:false,&quot;topImage&quot;:true,&quot;internalRedirect&quot;:null,&quot;isProcessing&quot;:false,&quot;align&quot;:null,&quot;offset&quot;:false}" class="sizing-normal" alt="MuleSoft Mental Model diagram showing agent-tool readiness checklist and connectivity framework." title="MuleSoft Mental Model diagram showing agent-tool readiness checklist and connectivity framework." srcset="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png 424w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png 848w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png 1272w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/1fc38b11-d9a8-4828-9821-f6e5534735a2.png 1456w" sizes="100vw" fetchpriority="high"></picture><div></div></div></a></figure></div><p>I would not start a 2026 MuleSoft architecture review with a connector list.</p><p>I would start with one question: which APIs are ready to become agent tools?</p><p>Most estates do not like the answer.</p><p>API-led connectivity is not dead. It becomes the substrate for governed agent networks, where APIs, MCP servers, brokers, gateways, identity, observability, and LLM governance are managed assets.</p><p><a href="https://www.salesforce.com/news/stories/agent-fabric-control-plane-announcement/">https://www.salesforce.com/news/stories/agent-fabric-control-plane-announcement</a></p><p><a href="https://docs.mulesoft.com/general/exp-release-notes">https://docs.mulesoft.com/general/exp-release-notes</a></p><p><a href="https://docs.mulesoft.com/general/agent-fabric-release-notes">https://docs.mulesoft.com/general/agent-fabric-release-notes</a></p><h2>The Old Map Became The Base Layer</h2><p>The familiar System, Process, and Experience API map still matters. System APIs protect systems of record. Process APIs hold reusable business verbs. Experience APIs shape consumption for a channel or audience.</p><p>Agents do not remove that discipline. They expose where it was missing.</p><div class="captioned-image-container"><figure><a class="image-link image2" target="_blank" href="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png" data-component-name="Image2ToDOM"><div class="image2-inset"><picture><source type="image/webp" srcset="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png 424w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png 848w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png 1272w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png 1456w" sizes="100vw"><img src="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png" data-attrs="{&quot;src&quot;:&quot;https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png&quot;,&quot;srcNoWatermark&quot;:null,&quot;fullscreen&quot;:null,&quot;imageSize&quot;:null,&quot;height&quot;:null,&quot;width&quot;:null,&quot;resizeWidth&quot;:null,&quot;bytes&quot;:null,&quot;alt&quot;:&quot;Flowchart illustrating API-led connectivity to agent fabric with readiness checklist and interaction flow.&quot;,&quot;title&quot;:null,&quot;type&quot;:null,&quot;href&quot;:null,&quot;belowTheFold&quot;:true,&quot;topImage&quot;:false,&quot;internalRedirect&quot;:null,&quot;isProcessing&quot;:false,&quot;align&quot;:null,&quot;offset&quot;:false}" class="sizing-normal" alt="Flowchart illustrating API-led connectivity to agent fabric with readiness checklist and interaction flow." title="Flowchart illustrating API-led connectivity to agent fabric with readiness checklist and interaction flow." srcset="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png 424w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png 848w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png 1272w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/f5e594dc-b738-42fd-aac4-8398467a94df.png 1456w" sizes="100vw" loading="lazy"></picture><div></div></div></a></figure></div><h2>The Consumer Changed</h2><p>A portal user, mobile app, and partner integration usually call a known endpoint from a known path. An agent can ask, decide, call, retry, delegate, and trigger a second action. That shifts the risk from integration reach to integration control.</p><p>The hard question is no longer whether an agent can call an API. The hard question is whether we know what it called, why it was allowed, which contract it exercised, which policy applied, which identity it used, and how we would prove that later.</p><h2>Exchange Turns Into Inventory</h2><p>The newest MuleSoft direction points to a broader catalog. Exchange now sits in an operating model where agents, APIs, brokers, LLMs, MCP servers, policies, templates, and integration assets can all become managed assets.</p><p>For agent work, the catalog is not documentation. It is inventory. Inventory is where governance starts.</p><h2>The Checklist</h2><p>Before an API becomes a tool, inspect it like an operator.</p><ul><li><p>Is the capability published in Exchange?</p></li><li><p>Is it managed in API Manager?</p></li><li><p>Does it have a current spec?</p></li><li><p>Is the owner clear?</p></li><li><p>Is the operation read-only, write, destructive, or privileged?</p></li><li><p>Is the identity model explicit?</p></li><li><p>Can we observe failures and business outcomes?</p></li><li><p>Is there an approval path for high-risk action?</p></li></ul><div class="captioned-image-container"><figure><a class="image-link image2" target="_blank" href="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png" data-component-name="Image2ToDOM"><div class="image2-inset"><picture><source type="image/webp" srcset="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png 424w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png 848w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png 1272w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png 1456w" sizes="100vw"><img src="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png" data-attrs="{&quot;src&quot;:&quot;https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png&quot;,&quot;srcNoWatermark&quot;:null,&quot;fullscreen&quot;:null,&quot;imageSize&quot;:null,&quot;height&quot;:null,&quot;width&quot;:null,&quot;resizeWidth&quot;:null,&quot;bytes&quot;:null,&quot;alt&quot;:&quot;Checklist and diagram illustrating MuleSoft's 2026 API-led connectivity model transitioning to agent fabric.&quot;,&quot;title&quot;:null,&quot;type&quot;:null,&quot;href&quot;:null,&quot;belowTheFold&quot;:true,&quot;topImage&quot;:false,&quot;internalRedirect&quot;:null,&quot;isProcessing&quot;:false,&quot;align&quot;:null,&quot;offset&quot;:false}" class="sizing-normal" alt="Checklist and diagram illustrating MuleSoft's 2026 API-led connectivity model transitioning to agent fabric." title="Checklist and diagram illustrating MuleSoft's 2026 API-led connectivity model transitioning to agent fabric." srcset="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png 424w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png 848w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png 1272w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/e4e823a2-a07d-499e-9e10-bd2b50c7dd4f.png 1456w" sizes="100vw" loading="lazy"></picture><div></div></div></a></figure></div><h2>What The Docs Do Not Say</h2><p>The docs can show the happy path: discover assets, create MCP servers, govern traffic, visualize networks, and route tasks. The cleanup comes first.</p><p>You need to know which APIs are real products and which are accidental endpoints. You need to know which specs are current and which are archaeology. You need to know which policies are enforced and which only exist in a slide. A successful HTTP 200 can still be a failed business operation.</p><h2>Operator Notes</h2><p>Start with the inventory meeting, not the agent demo. Put the top twenty API capabilities on a board and mark which ones have a current spec, an owner, a policy path, and useful telemetry. The answers will tell you more about agent readiness than any architecture diagram.</p><p>The strongest candidates are boring. Read-only lookups, bounded status checks, narrow workflow actions, and well-owned process APIs make better first tools than large destructive endpoints. A tool that updates a record, opens a case, sends a message, or starts an order needs a different review path than a tool that retrieves account status.</p><p>The naming work matters too. Agents choose from names and descriptions. A vague operation name like `updateCustomer` is not safe enough when the backend action can alter billing, service, legal identity, or ownership. The tool name should describe the business action and the risk. The description should tell the agent when not to call it.</p><p>Identity is the second inspection point. A human user, an agent, a connected app, and a backend service account may all be involved in one action. If the platform cannot explain whose authority was used, the action is not ready for autonomous execution. That is not an AI issue. It is an access-control issue.</p><p>Observability comes next. A trace that says a tool was called is useful, but it is not enough. You need to know the business operation, the input shape, the policy decision, the downstream system, the response, and the exception path. Otherwise the audit trail proves activity without proving intent.</p><p>This is why API-led connectivity still matters. It gives us the controlled surface. Agent Fabric makes that surface visible to agents, brokers, MCP clients, and governance workflows. The transition is not from integration to AI. The transition is from API reuse to governed action reuse.</p><h2>Publishing Angle</h2><p>The article should land as a map before the build series. Readers do not need another MuleSoft overview. They need a way to inspect their own estate before agent teams start wrapping endpoints as tools.</p><p>Use the comments to pull operators into the real constraint. Some teams will say ownership. Some will say identity. Some will say API Manager coverage. Some will admit the spec is stale. That is useful because the next four articles each take one of those constraints into the field.</p><p>The best reader outcome is a small inventory exercise. Pick one API. Ask whether it is discoverable, governed, owned, observable, and safe to expose as a tool. If the team cannot answer those five questions, Agent Fabric becomes an aspiration rather than an operating model.</p><h2>The Working Artifact</h2><pre><code>mulesoft_2026_mental_model:
  foundation: [system_apis, process_apis, experience_apis]
  governance_plane: [exchange, api_manager, omni_gateway, identity, policies]
  agent_fabric: [agent_registry, agent_broker, mcp_servers, a2a_agents]</code></pre><div class="captioned-image-container"><figure><a class="image-link image2" target="_blank" href="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png" data-component-name="Image2ToDOM"><div class="image2-inset"><picture><source type="image/webp" srcset="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png 424w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png 848w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png 1272w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png 1456w" sizes="100vw"><img src="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png" data-attrs="{&quot;src&quot;:&quot;https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png&quot;,&quot;srcNoWatermark&quot;:null,&quot;fullscreen&quot;:null,&quot;imageSize&quot;:null,&quot;height&quot;:null,&quot;width&quot;:null,&quot;resizeWidth&quot;:null,&quot;bytes&quot;:null,&quot;alt&quot;:&quot;Flowchart illustrating API-led connectivity to agent fabric with risk management and readiness checklist.&quot;,&quot;title&quot;:null,&quot;type&quot;:null,&quot;href&quot;:null,&quot;belowTheFold&quot;:true,&quot;topImage&quot;:false,&quot;internalRedirect&quot;:null,&quot;isProcessing&quot;:false,&quot;align&quot;:null,&quot;offset&quot;:false}" class="sizing-normal" alt="Flowchart illustrating API-led connectivity to agent fabric with risk management and readiness checklist." title="Flowchart illustrating API-led connectivity to agent fabric with risk management and readiness checklist." srcset="https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png 424w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png 848w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png 1272w, https://xnczggfeopywmkkpzgtg.supabase.co/storage/v1/object/public/editor-assets/2026/06/690f99d6-0bd6-4bea-b45f-11e13d385d72.png 1456w" sizes="100vw" loading="lazy"></picture><div></div></div></a></figure></div><h2>What To Inspect Next</h2><p>Next week: headless MuleSoft, where the architecture diagram has to survive Maven, Anypoint CLI, MCP tools, and deployment reality.</p><p>Question for the comments: If you had to turn one API in your estate into an agent tool tomorrow, what would block you first: ownership, policy, identity, observability, or the contract itself?</p><div><hr></div><h2>Sources</h2><p>1. https://www.salesforce.com/news/stories/agent-fabric-control-plane-announcement/</p><p>2. https://docs.mulesoft.com/general/exp-release-notes</p><p>3. https://docs.mulesoft.com/general/agent-fabric-release-notes</p><p>4. https://docs.mulesoft.com/general/agent-fabric-overview</p><p>5. https://docs.mulesoft.com/exchange/</p><p>6. https://www.mulesoft.com/lp/reports/connectivity-benchmark</p><p>7. https://www.salesforce.com/blog/api-led-connectivity/</p>]]></content:encoded></item><item><title><![CDATA[The Operating Manual For Fable-Class Work]]></title><description><![CDATA[Claude Fable 5 creates a routing problem. Not a prompting problem.]]></description><link>https://shivanathd.substack.com/p/the-operating-manual-for-fable-class</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-operating-manual-for-fable-class</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 10 Jun 2026 13:22:18 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/8de86e46-e049-47ac-a472-e52457d412d9_1672x944.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>Claude Fable 5 creates a routing problem.</p><p>Not a prompting problem.</p><p>When a model is clearly more capable, teams tend to make the wrong move first. They promote it to default. Every draft, every ticket, every summary, every question starts flowing through the new premium lane because the answers feel better.</p><p>That is exactly how a capable model becomes an expensive habit.</p><p>The better move is to treat Fable as an escalation layer: a model for long, messy, consequential work that deserves extra reasoning and review. Routine work should still go to cheaper models. Sensitive work should still go through governance. High-stakes work should still come back to a human before it changes the business.</p><p>That is the operating manual.</p><h2>The Fable Escalation Test</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!0JF9!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F60c23604-80f6-4b1b-9829-19273ce598c8_1672x944.png" data-component-name="ImageToDOM"><p>Use Fable when at least two of these are true:</p><p>- The context spans many files, documents, teams, or systems.</p><p>- The task would take a senior person several hours or days to structure.</p><p>- A weak output would create real rework or risk.</p><p>- The output will become a reviewed artifact.</p><p>- The task needs visual, chart, table, PDF, or code understanding.</p><p>- The work needs tests, validation, or self-checking.</p><p>- Cheaper models keep losing the thread.</p><p>Do not use Fable just because it is available.</p><p>Use it when the job has enough consequence to justify the escalation.</p><h2>The Model Routing Table</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!HHqM!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F48b3a654-58cb-47fb-af09-d3351879cef7_1672x944.png" data-component-name="ImageToDOM"><p><strong>Model Lane | Use It For | Avoid It For</strong></p><p>Haiku | Fast routine work, simple cleanup, lightweight extraction | Deep planning, high-risk reasoning</p><p>Sonnet | Everyday build work, drafting, summarization, practical implementation | Long-horizon work with many dependencies</p><p>Opus | Complex reasoning, higher-quality review, sensitive work where Fable retention or fallback is not appropriate | Premium long-running work where Fable can remove multiple loops</p><p>Fable | Long-horizon, messy, reviewed escalation work | Routine work, casual drafts, sensitive ZDR-bound material</p><p>This table is the simplest way to keep Fable useful.</p><p>It makes the decision visible.</p><p>If a task cannot explain why it needs Fable, it probably does not need Fable.</p><h2>Developer Playbook</h2><p>For developers, Fable belongs at the point where coding becomes system reasoning.</p><p>Use it for:</p><p>- codebase migrations</p><p>- architectural refactors</p><p>- hard PR review</p><p>- test-plan generation</p><p>- visual implementation QA</p><p>- legacy modernization</p><p>- long-running Claude Code sessions</p><p>Example:</p><p>A team needs to migrate an old service from one internal API shape to another. Sonnet can inspect files, draft a plan, and make the first set of edits. Opus can review the risky parts. Fable enters when the work crosses a threshold: too many modules, uncertain test coverage, ambiguous edge cases, and a final plan that needs to survive senior review.</p><p>The prompt should not be "fix this repo."</p><p>It should be:</p><p>Review the migration plan, inspect the highest-risk paths, identify missing tests, propose a phased rollout, and return a merge-readiness checklist.</p><p>That is Fable work.</p><p>A typo fix is not.</p><h2>Founder Playbook</h2><p>For founders, Fable is best used as a judgment partner for messy strategic inputs.</p><p>Use it for:</p><p>- market synthesis</p><p>- investor memo critique</p><p>- product strategy tradeoffs</p><p>- customer feedback clustering</p><p>- pricing assumption review</p><p>- "kill our plan" sessions</p><p>- prototype judgment before committing engineering time</p><p>Example:</p><p>A founder has customer calls, churn notes, competitor pages, revenue segments, product constraints, and a half-written board memo. A cheaper model can summarize each input. Fable should be used for the higher-order task: turn the mess into decision options, identify weak assumptions, separate evidence from opinion, and tell the founder what must be verified before the next board meeting.</p><p>The output should not be treated as truth.</p><p>It should be treated as a sharper agenda.</p><h2>Project Manager Playbook</h2><p>For PMs, Fable is useful when the project state is too messy for a meeting summary but too important for an ordinary checklist.</p><p>Use it for:</p><p>- release readiness reviews</p><p>- dependency maps</p><p>- risk registers</p><p>- stakeholder tradeoff options</p><p>- acceptance criteria</p><p>- test plans</p><p>- launch packet assembly</p><p>Example:</p><p>A launch has scattered Jira tickets, two meeting transcripts, design changes, customer commitments, unresolved engineering risks, and legal review still open. Sonnet can summarize the meetings. Fable should produce the operating artifact: phases, owners, dependencies, open decisions, acceptance criteria, rollback triggers, and the questions leadership must answer before launch.</p><p>The PM still owns the plan.</p><p>Fable helps expose the missing joints.</p><h2>Cost Governance After June 22</h2><p>The usage window matters.</p><p>Anthropic says Fable is included on Pro, Max, Team, and seat-based Enterprise plans from June 9 through June 22, 2026. Starting June 23, usage on those plans requires usage credits unless Anthropic extends the window.</p><p>That means the first period should be treated like a controlled trial.</p><p>Track:</p><p>- who used Fable</p><p>- what task they used it for</p><p>- which cheaper model was tried first</p><p>- whether Fable removed a review loop</p><p>- whether the output became a real artifact</p><p>- how many retries were needed</p><p>- whether usage credits will be needed after June 22</p><p>Fable costs 2x Opus on the listed API rates. That does not mean it is too expensive. It means it must be routed to work where the extra reasoning reduces total cost.</p><p>If Fable saves three review meetings, it may be cheap.</p><p>If it rewrites a simple status update, it is waste.</p><h2>Retention And Fallback Review</h2><p>Fable is also a governance decision.</p><p>Anthropic says Mythos-class model traffic requires 30-day retention for safety monitoring. Anthropic also says certain categories, including cybersecurity, biology and chemistry, and distillation-related requests, can route away from Fable to Opus 4.8 or refuse.</p><p>For most individual users, this may feel invisible.</p><p>For enterprise teams, it should become a routing rule.</p><p>Before using Fable, ask:</p><p>- Is this data allowed under 30-day safety retention?</p><p>- Does the workspace normally require zero data retention?</p><p>- Would an Opus fallback be acceptable?</p><p>- Does the workflow need to log which model actually answered?</p><p>- Is the output reviewed before action?</p><p>If those answers are unclear, do not start with Fable.</p><p>Start with governance.</p><h2>The First-Week Inspection Ritual</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!R1Tl!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fe30bd642-1ec4-4ab5-8795-01a057a083b4_1672x944.png" data-component-name="ImageToDOM"><p>At the end of the first week, run a Fable usage review.</p><p>Do not ask, "Did people like it?"</p><p>Ask:</p><p>- Which Fable tasks became real artifacts?</p><p>- Which tasks could have been Sonnet or Opus?</p><p>- Which tasks saved human time?</p><p>- Which tasks created extra review work?</p><p>- Which prompts touched sensitive data?</p><p>- Which outputs needed a model fallback?</p><p>- Which use cases deserve a budget?</p><p>- Which use cases should be blocked?</p><p>The goal is to build a routing policy while the included window is still fresh.</p><p>Good teams will not win by using Fable the most.</p><p>They will win by knowing exactly when to use it.</p><h2>What To Inspect Next</h2><p>Create a lightweight `Fable Escalation` tag in your work tracker.</p><p>For every Fable use, capture:</p><p>- role</p><p>- task type</p><p>- source material</p><p>- cheaper model attempted first</p><p>- reason for escalation</p><p>- output artifact</p><p>- review result</p><p>- retention sensitivity</p><p>- estimated loop saved</p><p>After 10 to 20 tasks, the pattern will be obvious.</p><p>Some work deserves Fable.</p><p>Most work does not.</p><p>That is the point.</p><h2>Source Notes</h2><p>Launch and model behavior:</p><p>- Anthropic launch post: https://www.anthropic.com/news/claude-fable-5-mythos-5</p><p>- Fable model page: https://www.anthropic.com/claude/fable</p><p>- API launch docs: https://platform.claude.com/docs/en/about-claude/models/introducing-claude-fable-5-and-claude-mythos-5</p><p>Pricing and usage credits:</p><p>- Claude pricing docs: https://platform.claude.com/docs/en/about-claude/pricing</p><p>- Paid plan usage credits: https://support.claude.com/en/articles/12429409-manage-usage-credits-for-paid-claude-plans</p><p>- Team and Enterprise usage credits: https://support.claude.com/en/articles/12005970-manage-usage-credits-for-team-and-seat-based-enterprise-plans</p><p>Governance:</p><p>- Mythos-class data retention: https://support.claude.com/en/articles/15425996-data-retention-practices-for-mythos-class-models</p><p>Developer workflow:</p><p>- Claude Code product page: https://claude.com/product/claude-code</p>]]></content:encoded></item><item><title><![CDATA[The Trust Boundary Is the Product]]></title><description><![CDATA[WWDC26 is easy to read as a catch-up keynote. That reading is too thin.]]></description><link>https://shivanathd.substack.com/p/the-trust-boundary-is-the-product</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-trust-boundary-is-the-product</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Tue, 09 Jun 2026 15:51:01 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/58a70fe2-ffab-4aaa-b30a-92ef92053523_1672x941.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>WWDC26 is easy to read as a catch-up keynote.</p><p>That reading is too thin.</p><p>The more useful reading is that Apple is trying to move AI from a separate assistant surface into the operating system. Siri AI is the visible part. Liquid Glass is the interface metaphor. App Intents and Foundation Models are the developer surface. Private Cloud Compute and on-device models are the trust claim.</p><p>The hard part is the boundary between them.</p><p>When an assistant can read context, understand what is on screen, reason over personal information, and act through apps, the product is no longer the answer. The product is the control surface around the action.</p><p>That is what operators should inspect.</p><h2>Why the public thesis is incomplete</h2><p>The LinkedIn article argues that WWDC26 was about the operating layer. That is the public thesis.</p><p>For subscribers, the deeper question is more practical: what breaks when the operating layer is poorly designed?</p><p>Three things break first.</p><p>First, context becomes invisible. The assistant uses something the user did not know it was using.</p><p>Second, action becomes ambiguous. The assistant suggests, edits, sends, schedules, files, or changes something without a clear action boundary.</p><p>Third, accountability becomes mushy. The user cannot inspect what happened, why it happened, or how to reverse it.</p><p>That is not a model problem alone.</p><p>It is an operating-design problem.</p><h2>What Apple is testing</h2><p>Apple's WWDC26 announcements put several pieces into the same frame: Siri AI with personal context and onscreen awareness, Apple Foundation Models, App Intents, Spotlight semantic indexing, View Annotations, and Private Cloud Compute.</p><p>Source: Apple Newsroom, Siri AI release, June 8, 2026</p><p>https://www.apple.com/newsroom/2026/06/apple-introduces-siri-ai-a-profoundly-more-capable-and-personal-assistant/</p><p>Source: Apple Developer, WWDC26 Apple Intelligence guide</p><p>https://developer.apple.com/wwdc26/guides/apple-intelligence/</p><p>The interesting part is not any single feature.</p><p>It is the dependency chain.</p><p>The assistant needs context. The model needs a way to reason. The app needs typed actions. The user needs a permission surface. The system needs a trace.</p><p>If one of those pieces is weak, the whole experience feels either magical or unsafe.</p><p>Magic is not enough for production.</p><h2>The five-part trust boundary review</h2><p>Here is the review ritual I would use before calling any assistant production-ready.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!f8AG!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F79371c5c-aa6d-4eca-87af-a5ab7fa1c989_1672x941.png" data-component-name="ImageToDOM"><h3>1. Context review</h3><p>Ask what the assistant can see.</p><p>Can the user tell whether the assistant is reading the current screen, prior messages, calendar events, files, photos, or public web information?</p><p>The important point is not whether the assistant has access. The important point is whether access is legible.</p><p>If the user cannot see which context was used, the answer may be correct but still untrustworthy.</p><h3>2. Action review</h3><p>Ask what the assistant is allowed to do.</p><p>There is a large difference between summarizing an email and sending a reply. There is a large difference between finding a calendar slot and booking it. There is a large difference between drafting a note and filing it into a system of record.</p><p>App Intents matter because they move actions from vague screen behavior into named capabilities.</p><p>Source: Apple Developer, WWDC26 Apple Intelligence guide</p><p>https://developer.apple.com/wwdc26/guides/apple-intelligence/</p><p>Typed actions are inspectable. Screen guessing is not.</p><h3>3. Permission review</h3><p>Ask where the user approves the boundary.</p><p>Permission is not a checkbox buried in settings. It is the moment where the user understands what context is being used, what action is being proposed, and what app or system will receive the result.</p><p>This is where Liquid Glass becomes a useful metaphor.</p><p>Apple described Liquid Glass controls as adjustable from ultra-clear to fully tinted. That is a design setting, but it is also a trust metaphor.</p><p>Source: Apple Newsroom, WWDC26 overview, June 8, 2026</p><p>https://www.apple.com/newsroom/2026/06/apple-unveils-next-generation-of-apple-intelligence-siri-ai-and-more/</p><p>The interface should reveal the right layer at the right moment.</p><h3>4. Trace review</h3><p>Ask what the system records.</p><p>If an assistant moves across context, model reasoning, and app action, the user needs a readable trace. Not a developer log. A user-facing explanation.</p><p>What did it see?</p><p>What did it decide?</p><p>What action did it take?</p><p>Which app changed?</p><p>This is the difference between a helpful assistant and an unaccountable automation.</p><h3>5. Reversal review</h3><p>Ask what can be undone.</p><p>Undo is not a convenience feature in agentic systems. It is a trust primitive.</p><p>If the user cannot reverse the action, the approval moment needs to be stronger. If the user can reverse the action, the system can afford more fluidity.</p><p>That is the operating tradeoff.</p><h2>A concrete scenario</h2><p>Imagine a user asks an assistant to prepare for a meeting.</p><p>A weak system summarizes a few emails and gives a confident answer.</p><p>A stronger operating-layer system shows the source context, separates public knowledge from private messages, identifies which app actions are available, asks before creating or sending anything, and leaves a trace of what changed.</p><p>That second version is not only more capable.</p><p>It is more governable.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!pbgD!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F384b7307-b3ae-41eb-90dc-b24824737862_1672x941.png" data-component-name="ImageToDOM"><h2>What to inspect next</h2><p>After WWDC26, the useful question is not whether Apple has the best model.</p><p>The useful question is whether Apple can make the operating boundary legible enough for users and developers to trust AI inside the system.</p><p>Builders should ask the same question of their own products.</p><p>Can the user see the layer?</p><p>Can the system separate context?</p><p>Can the app expose typed actions?</p><p>Can the permission moment be understood?</p><p>Can the result be traced?</p><p>Can the action be reversed?</p><p>If those answers are weak, the assistant is still a demo.</p><p>If those answers are strong, the operating layer becomes a product surface.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!q2QV!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F4452423b-432f-478c-b793-4c9ec68cc0d2_1672x941.png" data-component-name="ImageToDOM"><p>That is the real WWDC26 takeaway.</p>]]></content:encoded></item><item><title><![CDATA[The Loop Readiness Review]]></title><description><![CDATA[The loop is not useful because it can keep asking an agent to work. It is useful when the loop has a trigger, scope, evidence path, stop rule, and owner.]]></description><link>https://shivanathd.substack.com/p/the-loop-readiness-review</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-loop-readiness-review</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Tue, 09 Jun 2026 08:24:11 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/310ceaad-6513-46d5-ad28-c1c171bce942_1774x887.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>The LinkedIn version made the public argument: loop engineering is not a prompting trick. For Salesforce teams, it is release control.</p><p>The subscriber question is more practical.</p><p>Before a team lets Cursor, Claude Code, and Agentforce participate in real delivery, what should leaders inspect?</p><p>The answer is not another tool list.</p><p>It is a review ritual.</p><p>Call it the Loop Readiness Review.</p><p>The purpose is simple: prove that the loop can work inside a bounded Salesforce release path before it starts changing code, metadata, permissions, or Agentforce behavior.</p><h2>The Problem</h2><p>Salesforce work has never been only code.</p><p>That is why loop engineering gets dangerous if it is imported from generic software engineering without translation. A loop that works cleanly in a small TypeScript service can fail quietly in Salesforce because the repo is only one part of the system.</p><p>The real system includes Apex, Lightning Web Components, Flow, permission sets, profiles, custom metadata, deployment manifests, package versions, sandbox drift, and production release rules.</p><p>Agentforce adds another layer. Salesforce describes Agentforce DX as extending Salesforce DX to work with agents, and says agents are metadata like other Salesforce customizations.</p><p>https://developer.salesforce.com/docs/ai/agentforce/guide/agent-dx.html</p><p>That means agent behavior enters the same release conversation as Apex and Flow. If an Agentforce action calls Apex, launches a Flow, uses a prompt template, or changes how a support rep escalates a renewal risk, the loop is no longer just a coding loop.</p><p>It is a business-behavior loop.</p><h2>The Review Ritual</h2><img style="" src="https://substackcdn.com/image/fetch/$s_!wgNv!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F50f882b8-0a4e-4592-9274-0d600d978104_1448x1086.png" data-component-name="ImageToDOM"><p>Run the Loop Readiness Review before a loop is allowed to operate on a Salesforce branch or sandbox.</p><p>The review has five questions.</p><h2>1. Is The Loop Bounded?</h2><p>A bounded loop has a trigger, a scope, and a no-touch list.</p><p>Good trigger examples:</p><ol><li><p>A pull request opens.</p></li><li><p>A deployment validation fails.</p></li><li><p>A scheduled sandbox drift check runs.</p></li><li><p>A human release owner starts a specific inspection.</p></li></ol><p>Bad trigger example:</p><p>"Improve the renewal process."</p><p>That instruction gives the agent permission to wander. In Salesforce, wandering is expensive. It can turn a small Apex fix into Flow edits, profile changes, and metadata churn nobody asked for.</p><p>The no-touch list matters as much as the scope. If the loop can edit profiles, broad Flow metadata, package boundaries, or production-connected assumptions without review, the loop is not ready.</p><h2>2. Is The Evidence Real?</h2><p>Anthropic's agent guidance makes the control point clear: agents need ground truth from the environment at each step, and stopping conditions help maintain control.</p><p>https://www.anthropic.com/engineering/building-effective-agents</p><p>In Salesforce, ground truth is not a model's confidence.</p><p>It is command output, analyzer output, test output, deployment validation, retrieved metadata, and human review notes.</p><p>For an Agentforce escalation action, the evidence packet should include:</p><ol><li><p>Changed-component map.</p></li><li><p>Salesforce Code Analyzer output.</p></li><li><p>Apex test output.</p></li><li><p>LWC test output when relevant.</p></li><li><p>`sf project deploy validate` result.</p></li><li><p>Agentforce metadata notes.</p></li><li><p>Behavior-review script for the business owner.</p></li></ol><p>Salesforce Code Analyzer gives the loop a static inspection layer across engines such as CPD, ESLint, Flow Scanner, PMD, RetireJS, Regex, and Salesforce Graph Engine.</p><p>https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engines.html</p><p>Salesforce CLI deployment validation gives the loop a release-shaped check instead of a local-only check.</p><p>https://github.com/salesforcecli/cli</p><h2>3. Is Org State Represented?</h2><p>This is the Salesforce trap.</p><p>The repository may look clean while the org is not.</p><p>A Flow can exist in UAT and not in source. A permission set can be missing field access. A managed package version can differ. A prompt template can be connected to an Agentforce action in one sandbox and not another. A test can pass locally while deployment validation fails because the target org has different constraints.</p><p>The loop needs a rule for org-state failures.</p><p>It should not automatically keep editing.</p><p>It should classify the failure:</p><ol><li><p>Code issue inside scope: fix and rerun.</p></li><li><p>Metadata missing from source: stop and report retrieval need.</p></li><li><p>Permission ambiguity: stop and route to admin.</p></li><li><p>Package or org dependency: stop and route to architect or release manager.</p></li><li><p>Business-rule ambiguity: stop and route to business owner.</p></li></ol><p>The loop earns trust by stopping at the right boundary.</p><p>Not by pretending every failure is code.</p><h2>4. Is Agentforce Behavior Reviewed?</h2><p>Agentforce actions are building blocks that let agents perform tasks and interact with data. Salesforce documents custom action paths through Apex, Flow, prompt templates, Apex REST actions, AuraEnabled actions, and named query actions.</p><p>https://developer.salesforce.com/docs/ai/agentforce/guide/get-started-actions.html</p><p>https://developer.salesforce.com/docs/ai/agentforce/guide/agent-invocablemethod.html</p><p>That means a loop can validate code and still miss the business consequence.</p><p>The Apex compiles.</p><p>The Flow deploys.</p><p>The metadata moves.</p><p>The agent still routes the wrong renewal risk to the wrong team.</p><p>That is why the business owner owns behavior review. The loop can prepare the review script:</p><ol><li><p>What should the agent detect?</p></li><li><p>What action should it call?</p></li><li><p>What record should change?</p></li><li><p>What should the user see?</p></li><li><p>When should the agent escalate to a human?</p></li></ol><p>But the loop cannot approve the business meaning.</p><h2>5. Is There A Stop Condition?</h2><p>The most important line in any loop is not the first prompt.</p><p>It is the stop rule.</p><p>Stop when validation passes.</p><p>Stop when the iteration budget is reached.</p><p>Stop when the loop detects missing source.</p><p>Stop when a permission decision is needed.</p><p>Stop when the action changes customer or employee behavior.</p><p>Stop when the loop is about to touch a no-touch area.</p><p>Claude Code and Cursor make the work surface faster. Claude Code can run commands, inspect output, and continue through terminal feedback. Cursor can help engineers reason across files and encode project rules.</p><p>https://code.claude.com/docs/en/overview</p><p>https://docs.cursor.com/agent</p><p>https://docs.cursor.com/context/rules</p><p>That speed is useful only when the stop rule is visible.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!c0H0!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Feb98fecd-8a54-4867-9b58-45dd2c502850_1448x1086.png" data-component-name="ImageToDOM"><h2>What To Inspect Next</h2><p>Run this review on one bounded Salesforce change before scaling it:</p><ol><li><p>Pick one Agentforce action or Apex/LWC change.</p></li><li><p>Write the loop trigger.</p></li><li><p>Write the exact success condition.</p></li><li><p>Write the no-touch list.</p></li><li><p>Write the evidence packet.</p></li><li><p>Write the stop conditions.</p></li><li><p>Assign the five owners: developer, admin, architect, release manager, business owner.</p></li></ol><p>Then run the loop in a sandbox and inspect the evidence, not the vibe.</p><p>The point is not to slow the team down.</p><p>It is to make AI speed legible enough to release.</p><p>Loop engineering will become a real Salesforce skill when teams stop asking whether the agent can make the change and start asking whether the loop can prove the change is ready.</p><p>That is the operating shift.</p><h2>Sources</h2><ol><li><p>Anthropic, Building Effective Agents: https://www.anthropic.com/engineering/building-effective-agents</p></li><li><p>Claude Code overview: https://code.claude.com/docs/en/overview</p></li><li><p>Cursor Agent: https://docs.cursor.com/agent</p></li><li><p>Cursor Rules: https://docs.cursor.com/context/rules</p></li><li><p>Salesforce Agentforce DX: https://developer.salesforce.com/docs/ai/agentforce/guide/agent-dx.html</p></li><li><p>Salesforce Agentforce Actions: https://developer.salesforce.com/docs/ai/agentforce/guide/get-started-actions.html</p></li><li><p>Salesforce Apex InvocableMethod actions: https://developer.salesforce.com/docs/ai/agentforce/guide/agent-invocablemethod.html</p></li><li><p>Salesforce Code Analyzer engines: https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/engines.html</p></li><li><p>Salesforce CLI: https://github.com/salesforcecli/cli</p></li></ol>]]></content:encoded></item><item><title><![CDATA[Build The Room Before You Draft The Memo]]></title><description><![CDATA[The next hallucination firewall is not a better prompt. It is the source room.]]></description><link>https://shivanathd.substack.com/p/build-the-room-before-you-draft-the</link><guid isPermaLink="false">https://shivanathd.substack.com/p/build-the-room-before-you-draft-the</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Mon, 08 Jun 2026 12:53:55 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/218b79d8-51fc-4e3d-842f-88d0ddef4d27_1672x941.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>The public edition makes the visible argument: the next hallucination firewall is not a better prompt. It is the source room.</p><p>For subscribers, the more useful question is operational:</p><p>What does that room actually contain?</p><p>Most teams already understand the surface advice. Verify sources. Check citations. Do not paste sensitive material into unsafe tools. Have a policy. Train the team.</p><p>The Sullivan &amp; Cromwell incident shows why that advice is not enough by itself. The firm told Chief Bankruptcy Judge Martin Glenn that an April 9 emergency motion in the Prince Global Holdings Chapter 15 matter included inaccurate citations and other errors, including AI hallucinations. The same letter said the firm's AI policies were not followed and that citation review did not identify the inaccurate citations generated by AI.</p><p>A policy can describe the behavior.</p><p>A room has to force the behavior.</p><p><img style="" src="https://substackcdn.com/image/fetch/$s_!VXyr!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Faff8c70c-42ca-462f-97d5-b0fc6ed753d8_1448x1086.png" data-component-name="ImageToDOM"></p><h2>The operating problem</h2><p>In serious knowledge work, the agent is usually asked to do two jobs at once.</p><p>First, figure out the source material.</p><p>Second, produce the artifact.</p><p>That is backwards.</p><p>When source material is messy, contradictory, duplicated, or incomplete, the agent spends part of the run guessing the shape of the project. It has to decide what matters, what is stale, what is authoritative, what conflicts, and what is missing while also trying to write the final output.</p><p>That is how polished work gets dangerous.</p><p>The problem is not that the model cannot write. The problem is that the writing starts before the evidence surface is visible.</p><h2>The Source Room Release Ritual</h2><p>Use a source room for any work that could create legal, financial, market, operational, or reputational exposure.</p><p>The minimum ritual has seven artifacts.</p><ol><li><p>Source inventory.</p></li></ol><p>Every file, link, transcript, note, model output, spreadsheet, deck, and prior draft gets listed. Path, type, date, owner if known, and purpose. This is not bookkeeping. It is the first moment where the agent tells the human what it believes the project contains.</p><ol><li><p>Authority ranking.</p></li></ol><p>The room separates signed, filed, approved, published, and current sources from background material. A final policy outranks a draft. A court filing outranks a recap. A signed contract outranks a sales deck. A live system export outranks a remembered chat message.</p><ol><li><p>Conflict log.</p></li></ol><p>The agent does not resolve conflicts silently. It surfaces them. Two decks disagree on the number. A policy and a FAQ describe different approval paths. A source says the tool was unspecified while commentary guesses a vendor. The conflict log keeps ambiguity visible until a human decides.</p><ol><li><p>Missing context list.</p></li></ol><p>Missing material is often more dangerous than available material. The agent should say what it does not have: the final redline, the signed addendum, the current pricing sheet, the raw transcript, the export behind the chart, the approval record. This is where hallucination pressure drops because the gap has a name.</p><ol><li><p>Duplicate and version-family report.</p></li></ol><p>Duplicates are reasoning debt. A repeated transcript can overweight one source. A stale memo with the same title as a current memo can contaminate the answer. A redline and a final version can blend into a false compromise. Do not delete duplicates automatically. Quarantine them and ask for a decision.</p><ol><li><p>Claim ledger.</p></li></ol><p>Every material claim in the draft gets a source. Not every sentence needs a citation. Every claim that would matter if wrong does. The ledger should show the sentence, the source, the source rank, and the verification owner.</p><ol><li><p>Release check.</p></li></ol><p>Before the artifact leaves the room, someone signs the release. Not because humans are ceremonial. Because accountability has to land somewhere. The release check asks: What changed? What claims are unsupported? What conflicts remain? What missing context did we accept? Who is comfortable with this going outside the room?</p><h2>What breaks in practice</h2><p>The most common failure is starting with the deliverable.</p><p>Write the memo.</p><p>Draft the filing.</p><p>Create the board deck.</p><p>Summarize the diligence room.</p><p>That prompt feels efficient because it skips the slow part. But the slow part is often the control. The source room makes the agent do the boring work first, which is exactly the work that prevents the expensive mistake later.</p><p>The second failure is treating source organization as a junior task.</p><p>It is not.</p><p>In an agentic workflow, source organization becomes reasoning architecture. The layout of the folder changes the answer. The labels change the answer. The stale file left beside the current file changes the answer. The missing export changes the answer.</p><p><img style="" src="https://substackcdn.com/image/fetch/$s_!Zsqb!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fe1dc2f6e-3b61-4a4d-be12-f54d656e1024_1448x1086.png" data-component-name="ImageToDOM"></p><p>The third failure is using policy as a substitute for instrumentation.</p><p>Policies matter. Training matters. ABA Formal Opinion 512 matters in the legal context because existing duties still apply when lawyers use generative AI. But the operational lesson is broader: a policy that says "verify everything" still needs a workspace where verification is visible, repeatable, and interruptible.</p><h2>A concrete enterprise scenario</h2><p>Imagine an enterprise team preparing a board memo on AI productivity.</p><p>The folder contains a current KPI export, three old operating decks, two vendor benchmarks, a transcript from a buyer interview, a finance spreadsheet, a draft narrative from last quarter, and meeting notes from a leadership review.</p><p>The fastest bad prompt is:</p><p>"Write the board memo."</p><p>The better first prompt is:</p><p>"Build the source room. Inventory every file. Mark authority. Identify duplicates and version families. Surface conflicts. List missing context. Summarize each source. Do not draft the memo yet."</p><p>The board memo becomes easier after that, not harder. The writing prompt can shrink because the room carries the complexity:</p><p>"Draft from the approved KPI export and current finance spreadsheet. Treat old decks as background only. Preserve the unresolved conflict about retention impact. Flag any productivity claim without a source."</p><p>That is the real shift.</p><p>Prompt quality improves when the room quality improves.</p><p><img style="" src="https://substackcdn.com/image/fetch/$s_!CKOe!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F61c2196c-720c-46bd-884f-d2795f9e71eb_1448x1086.png" data-component-name="ImageToDOM"></p><h2>What to inspect next</h2><p>Leaders should not start by asking how many AI tools are deployed.</p><p>They should ask how many source rooms exist for high-stakes work.</p><p>Inspect five things:</p><ol><li><p>Does the team separate authoritative sources from background sources before drafting?</p></li><li><p>Does the agent produce a conflict log before it synthesizes?</p></li><li><p>Are duplicates quarantined instead of silently blended?</p></li><li><p>Does the final artifact have a claim ledger for material assertions?</p></li><li><p>Is there a named release owner when AI-assisted work leaves the workspace?</p></li></ol><p>If those controls do not exist, the organization is relying on memory, habit, and polished formatting.</p><p>That can work for casual drafting.</p><p>It cannot be the operating model for serious work.</p><p>The point is not to slow AI down.</p><p>The point is to make AI speed legible enough to trust.</p><h2>Sources</h2><ol><li><p>Sullivan &amp; Cromwell letter to Chief Judge Martin Glenn, In re Prince Global Holdings Ltd.: https://websitedc.s3.amazonaws.com/documents/In<em>re</em>Prince<em>USA</em>18<em>April</em>2026.pdf</p></li><li><p>Legal AI Governance case tracker: https://legalaigovernance.com/tracker/cases/in-re-prince-global/</p></li><li><p>Mata v. Avianca sanctions order: https://law.justia.com/cases/federal/district-courts/new-york/nysdce/1%3A2022cv01461/575368/54/</p></li><li><p>ABA Formal Opinion 512: https://www.americanbar.org/content/dam/aba/administrative/professional_responsibility/ethics-opinions/aba-formal-opinion-512.pdf</p></li><li><p>Stanford RegLab, Hallucination-Free?: https://reglab.stanford.edu/publications/hallucination-free-assessing-the-reliability-of-leading-ai-legal-research-tools/</p></li><li><p>Stanford Impact Labs, Large Legal Fictions: https://impact.stanford.edu/article/large-legal-fictions-profiling-legal-hallucinations-large-language-models</p></li><li><p>Thomson Reuters Institute hallucinations report: https://www.thomsonreuters.com/en-us/posts/ai-in-courts/hallucinations-report-2026/</p></li><li><p>OpenAI Codex: https://openai.com/codex/</p></li><li><p>OpenAI Agents SDK update: https://openai.com/index/the-next-evolution-of-the-agents-sdk/</p></li><li><p>Anthropic Claude Code overview: https://docs.anthropic.com/en/docs/claude-code/overview</p></li></ol>]]></content:encoded></item><item><title><![CDATA[Execution Got Cheap. Judgment Did Not.]]></title><description><![CDATA[The Old Insurance Policy Costs Too Much]]></description><link>https://shivanathd.substack.com/p/execution-got-cheap-judgment-did</link><guid isPermaLink="false">https://shivanathd.substack.com/p/execution-got-cheap-judgment-did</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 20 May 2026 17:20:38 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/45be87c9-6105-4f24-a63b-233575987b74_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>Organizations built rituals to protect scarce execution. Now execution is cheaper, but the rituals remain. The costliest work may be the meeting that prevents the prototype from existing.</p><p>This is the Substack sibling to the LinkedIn article, "The Bottleneck Moved. Your Calendar Didn't.". It uses the same local source base, but it changes the reader promise: less public thesis, more operating judgment for subscribers.</p><h2>The Old Insurance Policy Costs Too Much</h2><p>Planning rituals were rational when building the wrong thing was expensive. If a rough version can be built quickly, the cost of preventing all wrong turns can exceed the cost of learning from one.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!94KK!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F5d3f53d9-649e-4cf9-ab18-3c561ea28cd5_1448x1086.png" data-component-name="ImageToDOM"><h2>Containerization Is The Better Analogy</h2><p>When shipping got cheap, winners did not merely load ships faster. They learned what to move, where demand would be, and how to coordinate the network. AI does the same to knowledge work. It moves the constraint.</p><h2>The New Constraints Are Human</h2><p>Clarity, ambition, distribution, and trust do not become abundant because a model writes faster. They become more visible as the true bottlenecks. Teams that spend cheap execution on timid ideas will still underperform.</p><h2>The Subscriber Takeaway</h2><p>The calendar is a diagnostic tool. Count the time spent aligning before testing. If the meeting exists to protect work that could be explored directly, the organization is paying an old tax.</p><h2>Subscriber Operating Lens</h2><p>The calendar test should become a recurring operating review. Take a two-week sample and classify time into alignment, approval, planning, building, testing, distribution, and relationship work. Then ask which meetings existed only because building used to be expensive.</p><p>The answer will be uncomfortable. Some rituals still protect important judgment. Others protect execution that can now be explored directly. The point is not to cancel every meeting. It is to move human attention toward the new constraints: clarity, ambition, distribution, and trust.</p><p>For subscribers, the management challenge is reallocating attention. Cheap execution only creates advantage when leaders spend the saved time on better questions, braver bets, and faster learning loops.</p><h2>What To Inspect Next</h2><p>The practical test is not whether the argument sounds right in a strategy discussion. It is whether the organization has a repeatable way to capture the reasoning that would make the next similar decision better informed.</p><p>That means asking three questions after the relevant decision:</p><ul><li><p>What assumption did we rely on?</p></li><li><p>What exception did we allow?</p></li><li><p>What would a future person or agent need to know before making the next call?</p></li></ul><p>If the answer disappears after the meeting, the organization has not built memory. It has only produced activity.</p><h2>Closing Note</h2><p>The deeper story across this thread is that AI does not only make work faster. It raises the value of context. The firms that learn how to preserve reasoning will get better with each cycle. The firms that do not will move faster without learning faster.</p><p><em>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl. These views are my own.</em></p>]]></content:encoded></item><item><title><![CDATA[The Agent Economy Breaks Seats Before It Breaks Software]]></title><description><![CDATA[The Product Survives. The Toll Booth Changes.]]></description><link>https://shivanathd.substack.com/p/the-agent-economy-breaks-seats-before</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-agent-economy-breaks-seats-before</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 20 May 2026 16:05:56 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/9aa1e4d8-41e8-4112-8d0a-0df7bcb11f17_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>The useful lesson from the current SaaS pricing debate is not that enterprise software became worthless. It is that a pricing model built around human logins looks fragile when work starts flowing through agents.</p><p>This is the Substack sibling to the LinkedIn article, "Your Software Didn't Break. Your Pricing Model Did.". It uses the same local source base, but it changes the reader promise: less public thesis, more operating judgment for subscribers.</p><h2>The Product Survives. The Toll Booth Changes.</h2><p>Data, workflow logic, integrations, reliability, and accountability still matter. What looks weaker is charging by the number of humans who click through a user interface. Agents do not respect that accounting unit.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!gSWE!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb6e5f155-ed04-48d9-b488-ece349f6c13c_1448x1086.png" data-component-name="ImageToDOM"><h2>The Buyer Has A New Argument</h2><p>Even before full automation arrives, AI gives buyers leverage. They can ask why a fee, seat count, or service price still reflects old labor assumptions. The negotiation changes before the operating model fully changes.</p><h2>The Market Can Be Incoherent And Still Right</h2><p>Investors may rotate between contradictory AI stories. That does not erase the underlying signal: if agents can move work away from the UI, vendors must explain what they actually sell. Data access, governed workflows, and accountability become more defensible than seats.</p><h2>The Subscriber Takeaway</h2><p>For SaaS firms and professionals, bolting AI onto the old workflow is not enough. The question is what unit of value remains durable when the human login is no longer the center of work.</p><h2>Subscriber Operating Lens</h2><p>A vendor facing agent-mediated work has to name its durable unit of value. Is it data access, regulated workflow, accountability, integration depth, risk transfer, or measurable outcome? If the answer is merely a human seat, the pricing story is exposed.</p><p>The same logic applies to professional work. A person should ask which parts of their contribution are tied to effort and which parts are tied to judgment, trust, or accountability. AI compresses effort. It does not erase the need for accountable judgment, but it does force that judgment to be made explicit.</p><p>For subscribers, the practical question is pricing architecture. If agents complete more work through fewer logins, what does the buyer still need to pay for, and how will the seller prove it?</p><h2>What To Inspect Next</h2><p>The practical test is not whether the argument sounds right in a strategy discussion. It is whether the organization has a repeatable way to capture the reasoning that would make the next similar decision better informed.</p><p>That means asking three questions after the relevant decision:</p><ul><li><p>What assumption did we rely on?</p></li><li><p>What exception did we allow?</p></li><li><p>What would a future person or agent need to know before making the next call?</p></li></ul><p>If the answer disappears after the meeting, the organization has not built memory. It has only produced activity.</p><h2>Closing Note</h2><p>The deeper story across this thread is that AI does not only make work faster. It raises the value of context. The firms that learn how to preserve reasoning will get better with each cycle. The firms that do not will move faster without learning faster.</p><p><em>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl. These views are my own.</em></p>]]></content:encoded></item><item><title><![CDATA[Architecture Decays When Context Cannot Fit In One Head]]></title><description><![CDATA[Entropy Is A Context Problem]]></description><link>https://shivanathd.substack.com/p/architecture-decays-when-context</link><guid isPermaLink="false">https://shivanathd.substack.com/p/architecture-decays-when-context</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 20 May 2026 14:41:02 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/553401a8-8667-4d3e-a224-ae88eefc51b9_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>Bad architecture is often blamed on bad judgment. In mature systems, the more common culprit is missing context. Good people make locally sensible changes that accumulate into global decay.</p><p>This is the Substack sibling to the LinkedIn article, "Your Architecture Isn't Failing Because of Bad Engineers". It uses the same local source base, but it changes the reader promise: less public thesis, more operating judgment for subscribers.</p><h2>Entropy Is A Context Problem</h2><p>The failure pattern is familiar: each change passes review, each optimization seems reasonable, each exception has a reason. Then the system slows, fragments, or contradicts itself because nobody could see the full interaction surface.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!bwXm!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F1e0e77e7-0ac8-46ab-8487-8d52e1382d60_1448x1086.png" data-component-name="ImageToDOM"><h2>Human Limits Are Not Moral Failures</h2><p>Working memory constraints matter. Architecture asks people to hold performance, maintainability, security, ownership, history, and business pressure together. No seniority level removes the biological limit.</p><h2>Where AI Is Actually Useful</h2><p>The practical opportunity is not to crown AI as chief architect. It is to use AI for tireless cross-checking, pattern enforcement, historical recall, and local-global comparison. That is vigilance work. Humans are not built to do it evenly forever.</p><h2>The Subscriber Takeaway</h2><p>Human architects should own novel design, tradeoffs, and risk judgment. AI should patrol entropy, surface precedent, and teach at the moment of change. The partnership works only when those responsibilities are explicit.</p><h2>Subscriber Operating Lens</h2><p>The best use of AI in architecture review is not a grand verdict. It is a persistent patrol for drift. Ask the system to compare new changes against accepted patterns, old incident notes, known bottlenecks, and cross-service constraints. The output should be a reasoned warning, not an automatic veto.</p><p>Human architects should still own the tradeoff. A rule can say a pattern adds risk. A person has to decide whether the risk is acceptable given timing, market pressure, and reversibility. That split of responsibilities keeps AI from becoming a brittle standards machine.</p><p>For subscribers, the operating model is partnership by cognitive strength. Let AI hold breadth and repetition. Let humans hold novelty, stakes, and business judgment. Make the handoff explicit.</p><h2>What To Inspect Next</h2><p>The practical test is not whether the argument sounds right in a strategy discussion. It is whether the organization has a repeatable way to capture the reasoning that would make the next similar decision better informed.</p><p>That means asking three questions after the relevant decision:</p><ul><li><p>What assumption did we rely on?</p></li><li><p>What exception did we allow?</p></li><li><p>What would a future person or agent need to know before making the next call?</p></li></ul><p>If the answer disappears after the meeting, the organization has not built memory. It has only produced activity.</p><h2>Closing Note</h2><p>The deeper story across this thread is that AI does not only make work faster. It raises the value of context. The firms that learn how to preserve reasoning will get better with each cycle. The firms that do not will move faster without learning faster.</p><p><em>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl. These views are my own.</em></p>]]></content:encoded></item><item><title><![CDATA[Careers Are Compressing Into Agent Orchestration]]></title><description><![CDATA[The Horizontal Collapse]]></description><link>https://shivanathd.substack.com/p/careers-are-compressing-into-agent</link><guid isPermaLink="false">https://shivanathd.substack.com/p/careers-are-compressing-into-agent</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 20 May 2026 13:15:53 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/6a59d338-a405-4050-b151-c11abc80a122_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>The scary version of the AI career story is disappearance. The more useful version is compression. Roles, timelines, and learning cycles are collapsing into a shorter path, and the people who engage early get more repetitions.</p><p>This is the Substack sibling to the LinkedIn article, "AI Is Collapsing Futures - And Most of Us Are Misreading What That Means". It uses the same local source base, but it changes the reader promise: less public thesis, more operating judgment for subscribers.</p><h2>The Horizontal Collapse</h2><p>Functions still matter, but they are increasingly mediated through the same operating skill: directing AI systems with domain judgment. The marketer, analyst, engineer, and operator are not becoming identical. They are all becoming more software-shaped.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!Ao_p!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa329ac77-519c-4613-bed9-87dcda0b9c89_1448x1086.png" data-component-name="ImageToDOM"><h2>The Temporal Collapse</h2><p>The leverage people expected to build over years is compressing into months. Waiting for stability feels prudent, but the learning curve belongs to people who are already building workflows, norms, and instincts.</p><h2>Speed Creates Stability</h2><p>The bicycle metaphor works because slow engagement keeps every new tool feeling alien. Faster engagement creates pattern recognition across systems. You learn what repeats, what fails, and what needs human judgment.</p><h2>The Subscriber Takeaway</h2><p>Do not treat AI literacy as a course to finish. Treat it as an operating rhythm. The durable asset is the habit of learning while the ground is moving.</p><h2>Subscriber Operating Lens</h2><p>The compression argument changes how people should learn. A quarterly training plan is too slow for a toolchain that shifts monthly. The better unit is a weekly practice loop: pick a real task, apply a new AI workflow, inspect the failure, and keep the part that improves judgment.</p><p>The goal is not tool collecting. It is transfer. A person who has used three agent systems begins to see common patterns: context boundaries, memory failures, permissions, evaluation gaps, and handoff risks. That pattern recognition becomes more durable than any single product tutorial.</p><p>For subscribers, the career question becomes concrete. What work are you doing this week that gives you repetitions in agent orchestration, and what evidence will tell you that your judgment improved?</p><h2>What To Inspect Next</h2><p>The practical test is not whether the argument sounds right in a strategy discussion. It is whether the organization has a repeatable way to capture the reasoning that would make the next similar decision better informed.</p><p>That means asking three questions after the relevant decision:</p><ul><li><p>What assumption did we rely on?</p></li><li><p>What exception did we allow?</p></li><li><p>What would a future person or agent need to know before making the next call?</p></li></ul><p>If the answer disappears after the meeting, the organization has not built memory. It has only produced activity.</p><h2>Closing Note</h2><p>The deeper story across this thread is that AI does not only make work faster. It raises the value of context. The firms that learn how to preserve reasoning will get better with each cycle. The firms that do not will move faster without learning faster.</p><p><em>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl. These views are my own.</em></p>]]></content:encoded></item><item><title><![CDATA[The Next Enterprise Moat Sits Above The System Of Record]]></title><description><![CDATA[Records Belong To Functions. Decisions Cross Them.]]></description><link>https://shivanathd.substack.com/p/the-next-enterprise-moat-sits-above</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-next-enterprise-moat-sits-above</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 20 May 2026 11:51:00 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/6f6d65ff-5ef2-43aa-bd6f-7abda4a1f695_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>Systems of record are not going away. They are becoming infrastructure. The value is moving to the layer that decides what to do with the record, why, and under which precedent.</p><p>This is the Substack sibling to the LinkedIn article, "Your System of Record Is Becoming the Least Valuable Thing You Own". It uses the same local source base, but it changes the reader promise: less public thesis, more operating judgment for subscribers.</p><h2>Records Belong To Functions. Decisions Cross Them.</h2><p>A finance system, sales system, and people system each preserve a narrow view of reality. Important decisions cross those boundaries. The missing layer is not another database. It is a reasoning layer above the databases.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!YOf3!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F392c5841-7044-40a4-896d-45aa258dd14b_1448x1086.png" data-component-name="ImageToDOM"><h2>Why Context Beats Semantic Purity</h2><p>Semantic layers tried to standardize business truth. Context graphs can preserve legitimate disagreement instead. Marketing and finance may calculate the same metric differently for valid reasons. The reasoning behind both versions is the useful artifact.</p><h2>Vertical Context Will Win</h2><p>The graph that supports hiring decisions is not the graph that supports incident response or pricing exceptions. The infrastructure can be horizontal. The decision product has to be vertical because precedent is domain-shaped.</p><h2>The Subscriber Takeaway</h2><p>The system of record tells an agent where to look. The decision layer tells it how prior people reasoned when the answer was not obvious. That is where enterprise value compounds.</p><h2>Subscriber Operating Lens</h2><p>A decision layer should not try to replace the systems underneath it. It should read across them, preserve context, and explain why a decision crossed functional boundaries. That makes it different from a dashboard. A dashboard reports state. A decision layer preserves judgment.</p><p>The first product question is vertical. Which domain has enough repeated judgment to justify a graph: recruiting, pricing, incident response, procurement, release governance, or field operations? The wrong answer is everything at once. The right answer is one domain where precedent already matters.</p><p>For subscribers, the strategy implication is clear. The enduring asset is not the generic graph infrastructure. It is the accumulated domain reasoning that makes a future decision better than a cold read of the records.</p><h2>What To Inspect Next</h2><p>The practical test is not whether the argument sounds right in a strategy discussion. It is whether the organization has a repeatable way to capture the reasoning that would make the next similar decision better informed.</p><p>That means asking three questions after the relevant decision:</p><ul><li><p>What assumption did we rely on?</p></li><li><p>What exception did we allow?</p></li><li><p>What would a future person or agent need to know before making the next call?</p></li></ul><p>If the answer disappears after the meeting, the organization has not built memory. It has only produced activity.</p><h2>Closing Note</h2><p>The deeper story across this thread is that AI does not only make work faster. It raises the value of context. The firms that learn how to preserve reasoning will get better with each cycle. The firms that do not will move faster without learning faster.</p><p><em>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl. These views are my own.</em></p>]]></content:encoded></item><item><title><![CDATA[The New Manager Is The Person Who Teaches The System]]></title><description><![CDATA[Cheap Execution Changes Status]]></description><link>https://shivanathd.substack.com/p/the-new-manager-is-the-person-who</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-new-manager-is-the-person-who</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 20 May 2026 10:25:05 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/d0869a9d-f694-4fb1-ad64-17e8eea4275b_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>When execution gets cheap, management stops being only a title. Anyone whose decision shapes the next human or digital action is managing part of the system. Most firms have not admitted this yet.</p><p>This is the Substack sibling to the LinkedIn article, "Every Employee Is Already a Manager". It uses the same local source base, but it changes the reader promise: less public thesis, more operating judgment for subscribers.</p><h2>Cheap Execution Changes Status</h2><p>The old hierarchy rewarded people who could get work done through scarce resources. AI compresses that scarcity. The scarce resource becomes judgment: what to attempt, when to deviate, and why the exception matters.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!qoea!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F92878d63-6f99-4b23-812d-6ebcab2a803c_1448x1086.png" data-component-name="ImageToDOM"><h2>Orchestration Is Already Distributed</h2><p>People are already directing agents, drafting with models, summarizing with tools, and making micro-decisions through AI systems. The risk is not only tool use. It is unrecorded reasoning at scale.</p><h2>The Outcome Layer Belongs To Humans</h2><p>Tasks can be automated. Outcomes still require someone to understand tradeoffs, incentives, timing, and trust. The people who stay valuable are the ones who can explain why an action is worth taking.</p><h2>The Subscriber Takeaway</h2><p>The next workforce architecture should treat every serious judgment call as a management act. Capture it, connect it, and let the system learn from it without pretending the human role disappeared.</p><h2>Subscriber Operating Lens</h2><p>In an agent-shaped workplace, management is not only supervision. It is the act of setting intent, checking outputs, resolving exceptions, and leaving traces that guide future work. That means individual contributors can manage meaningful parts of the operating system without having direct reports.</p><p>The risk is invisible delegation. A person uses an agent, accepts a recommendation, edits the result, and moves on. The organization sees the final artifact but loses the judgment that shaped it. Multiply that across hundreds of workers and the firm becomes more automated while becoming less explainable.</p><p>For subscribers, the practical move is to make orchestration visible. Record which decisions were delegated, which were overridden, and why the human accepted or changed the agent output. That is where the new management signal lives.</p><h2>What To Inspect Next</h2><p>The practical test is not whether the argument sounds right in a strategy discussion. It is whether the organization has a repeatable way to capture the reasoning that would make the next similar decision better informed.</p><p>That means asking three questions after the relevant decision:</p><ul><li><p>What assumption did we rely on?</p></li><li><p>What exception did we allow?</p></li><li><p>What would a future person or agent need to know before making the next call?</p></li></ul><p>If the answer disappears after the meeting, the organization has not built memory. It has only produced activity.</p><h2>Closing Note</h2><p>The deeper story across this thread is that AI does not only make work faster. It raises the value of context. The firms that learn how to preserve reasoning will get better with each cycle. The firms that do not will move faster without learning faster.</p><p><em>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl. These views are my own.</em></p>]]></content:encoded></item><item><title><![CDATA[Why Memory Programs Fail Before The Database Is Chosen]]></title><description><![CDATA[Documentation As A Byproduct]]></description><link>https://shivanathd.substack.com/p/why-memory-programs-fail-before-the</link><guid isPermaLink="false">https://shivanathd.substack.com/p/why-memory-programs-fail-before-the</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 20 May 2026 09:00:42 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/961ca646-59b3-41c1-b3bb-c8f848e18e8c_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>The hard part of organizational memory is not storage. It is getting people to make their reasoning visible while the decision is still fresh. That is a behavioral system before it is a technical one.</p><p>This is the Substack sibling to the LinkedIn article, "You Can't Install Organizational Memory". It uses the same local source base, but it changes the reader promise: less public thesis, more operating judgment for subscribers.</p><h2>Documentation As A Byproduct</h2><p>The Toyota Kata lesson is not that every team needs more forms. It is that learning routines survive when they are embedded in the work itself. Separate documentation becomes optional. Optional work disappears.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!NxVq!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F25ac0b65-a881-4131-886e-3eeef68663e9_1448x1086.png" data-component-name="ImageToDOM"><h2>Reasoning Requires Trust</h2><p>Recording why you made a call creates an audit trail of judgment. In low-trust cultures, that feels like risk. A context graph stays empty when people believe the organization will weaponize the record.</p><h2>Structure Beats Motivation</h2><p>Decision hygiene works because it decomposes judgment into component assessments before the final call. That structure captures reasoning while improving the decision itself. The capture is part of the act, not a report afterward.</p><h2>The Subscriber Takeaway</h2><p>Start with one workflow, one added why field, and one review ritual. Software can make reasoning searchable. It cannot create the habit of saying the reasoning out loud.</p><h2>Subscriber Operating Lens</h2><p>A memory program fails when it asks for hero behavior. People will not consistently write long explanations after hard decisions just because a launch email asked them to. The capture has to be tiny, timed correctly, and tied to a decision they already need to make.</p><p>The manager role changes in this model. The manager is not the person chasing documentation. The manager is the person creating a review rhythm where reasoning can be spoken without punishment and sharpened without blame. The ritual creates the artifact.</p><p>For subscribers, the sequence matters. Start with trust, then structure, then tooling. Reversing the order produces an empty system with impressive search.</p><h2>What To Inspect Next</h2><p>The practical test is not whether the argument sounds right in a strategy discussion. It is whether the organization has a repeatable way to capture the reasoning that would make the next similar decision better informed.</p><p>That means asking three questions after the relevant decision:</p><ul><li><p>What assumption did we rely on?</p></li><li><p>What exception did we allow?</p></li><li><p>What would a future person or agent need to know before making the next call?</p></li></ul><p>If the answer disappears after the meeting, the organization has not built memory. It has only produced activity.</p><h2>Closing Note</h2><p>The deeper story across this thread is that AI does not only make work faster. It raises the value of context. The firms that learn how to preserve reasoning will get better with each cycle. The firms that do not will move faster without learning faster.</p><p><em>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl. These views are my own.</em></p>]]></content:encoded></item><item><title><![CDATA[The Compound Loop Hidden Inside Organizational Memory]]></title><description><![CDATA[Archives Sit Still. Loops Improve.]]></description><link>https://shivanathd.substack.com/p/the-compound-loop-hidden-inside-organizational</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-compound-loop-hidden-inside-organizational</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 20 May 2026 07:35:53 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/e4bf3530-880b-40bc-855a-bc5fb770bdd7_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>A single decision trace is not impressive. A hundred connected traces begin to reveal patterns. A thousand can change how the organization learns. The loop matters more than the archive.</p><p>This is the Substack sibling to the LinkedIn article, "The Loop Nobody Sees Coming". It uses the same local source base, but it changes the reader promise: less public thesis, more operating judgment for subscribers.</p><h2>Archives Sit Still. Loops Improve.</h2><p>Most knowledge systems store artifacts. The more valuable design is circular: decisions generate reasoning, reasoning becomes precedent, precedent improves future decisions, and future decisions generate better traces.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!J900!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fcbdbff98-4e05-4fc8-bcd6-40286453675b_1448x1086.png" data-component-name="ImageToDOM"><h2>Why Consumer Loops Feel Smarter</h2><p>Traffic apps improve when driver behavior and reports feed the next recommendation. Marketplace platforms often improve through similar feedback patterns. Enterprises often stop at logging the outcome. They miss the feedback mechanism that would make the next action better.</p><h2>Emergence Is The Point</h2><p>Kauffman's autocatalytic sets are useful because no individual element carries the whole system. The value appears when enough parts connect. Context graphs work the same way. Connections between traces become intelligence.</p><h2>The Subscriber Takeaway</h2><p>The moat is not a graph database. It is years of connected reasoning that rivals cannot download, scrape, or buy. That is why loop design deserves as much attention as model selection.</p><h2>Subscriber Operating Lens</h2><p>The loop only works if each cycle changes the next one. Capturing a trace is not enough. The trace has to be findable at the next decision, connected to similar cases, and reviewed after the outcome is known. Without that return path, the graph is an archive with better search.</p><p>The first metric should not be graph size. It should be reuse. How often did a past decision inform a new one? How often did a surfaced precedent change the recommendation? How often did a new outcome correct an old assumption? Those measures tell you whether compounding is happening.</p><p>For subscribers, the design challenge is to make learning circular. A linear workflow can move faster with AI. A loop gets smarter because the work changes the memory that guides the next pass.</p><h2>What To Inspect Next</h2><p>The practical test is not whether the argument sounds right in a strategy discussion. It is whether the organization has a repeatable way to capture the reasoning that would make the next similar decision better informed.</p><p>That means asking three questions after the relevant decision:</p><ul><li><p>What assumption did we rely on?</p></li><li><p>What exception did we allow?</p></li><li><p>What would a future person or agent need to know before making the next call?</p></li></ul><p>If the answer disappears after the meeting, the organization has not built memory. It has only produced activity.</p><h2>Closing Note</h2><p>The deeper story across this thread is that AI does not only make work faster. It raises the value of context. The firms that learn how to preserve reasoning will get better with each cycle. The firms that do not will move faster without learning faster.</p><p><em>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl. These views are my own.</em></p>]]></content:encoded></item><item><title><![CDATA[Precedent Is The Training Data Enterprises Already Produce]]></title><description><![CDATA[The Oldest Version Of The Problem]]></description><link>https://shivanathd.substack.com/p/precedent-is-the-training-data-enterprises</link><guid isPermaLink="false">https://shivanathd.substack.com/p/precedent-is-the-training-data-enterprises</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 20 May 2026 06:15:06 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/18570c06-688a-427e-81ba-1e243b160783_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>Every judgment call creates two outputs. One is the immediate result. The other is a precedent. Most organizations keep the result and throw away the precedent.</p><p>This is the Substack sibling to the LinkedIn article, "Every Decision Trains the Next One". It uses the same local source base, but it changes the reader promise: less public thesis, more operating judgment for subscribers.</p><h2>The Oldest Version Of The Problem</h2><p>Ernest Codman wanted medicine to compare decisions with outcomes. The radical part was not measurement. It was accountability for reasoning. Enterprises now face the same problem at digital speed.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!kcky!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Ff0529ece-5420-4c49-b126-f2cf46cdae81_1448x1086.png" data-component-name="ImageToDOM"><h2>Tacit Knowledge Needs A Capture Moment</h2><p>Polanyi was right that people know more than they can tell. That does not mean reasoning is impossible to capture. It means capture has to happen close to the decision, while the context is still live and the tradeoffs are still visible.</p><h2>Precedent Without Review Is Dangerous</h2><p>A context graph should not preserve every decision as wisdom. Some decisions encode bias, politics, or stale assumptions. The operating discipline is double-loop learning: inspect the target, not just the miss.</p><h2>The Subscriber Takeaway</h2><p>Treat experienced workers as generators of decision intelligence. Their judgment does not only resolve today's exception. It teaches the organization how to approach the next one.</p><h2>Subscriber Operating Lens</h2><p>Decision traces should be reviewed before they are reused. Otherwise the organization risks turning old bias into automated precedent. The question is not only what worked. It is whether the reasoning was sound, whether the assumptions still hold, and whether the outcome proved the judgment or merely rewarded luck.</p><p>A good precedent system needs a quality loop. Tag traces that were later contradicted. Mark cases where the outcome was good but the reasoning was weak. Keep examples where the team made the right call for the wrong reason, because those are exactly the cases that teach humility.</p><p>For subscribers, this is the difference between memory and training data. Memory preserves. Training data shapes future behavior. Once decision traces start guiding agents, trace quality becomes operational governance.</p><h2>What To Inspect Next</h2><p>The practical test is not whether the argument sounds right in a strategy discussion. It is whether the organization has a repeatable way to capture the reasoning that would make the next similar decision better informed.</p><p>That means asking three questions after the relevant decision:</p><ul><li><p>What assumption did we rely on?</p></li><li><p>What exception did we allow?</p></li><li><p>What would a future person or agent need to know before making the next call?</p></li></ul><p>If the answer disappears after the meeting, the organization has not built memory. It has only produced activity.</p><h2>Closing Note</h2><p>The deeper story across this thread is that AI does not only make work faster. It raises the value of context. The firms that learn how to preserve reasoning will get better with each cycle. The firms that do not will move faster without learning faster.</p><p><em>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl. These views are my own.</em></p>]]></content:encoded></item><item><title><![CDATA[The Memory Layer Your Systems Never Built]]></title><description><![CDATA[State Is Not Memory]]></description><link>https://shivanathd.substack.com/p/the-memory-layer-your-systems-never</link><guid isPermaLink="false">https://shivanathd.substack.com/p/the-memory-layer-your-systems-never</guid><dc:creator><![CDATA[Shivanath Devinarayanan]]></dc:creator><pubDate>Wed, 20 May 2026 04:50:44 GMT</pubDate><enclosure url="https://substack-post-media.s3.amazonaws.com/public/images/d7f9dad9-5a1c-42a9-ad98-73f913b36d12_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p>Most enterprise systems are very good at remembering events. They remember the renewal, the approval, the moved date, and the closed ticket. What they forget is the reasoning that made those events make sense.</p><p>This is the Substack sibling to the LinkedIn article, "Every Company Has Amnesia". It uses the same local source base, but it changes the reader promise: less public thesis, more operating judgment for subscribers.</p><h2>State Is Not Memory</h2><p>A system of record tells you what happened. Organizational memory tells you why it happened. Confusing those two is how teams end up with pristine databases and no idea why a policy exists.</p><img style="" src="https://substackcdn.com/image/fetch/$s_!OZD9!,w_1100,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F2e93e3e7-addf-4423-9247-4a617f41516e_1448x1086.png" data-component-name="ImageToDOM"><h2>The Missing Unit Is The Decision Trace</h2><p>A decision trace records the inputs, alternatives, exception logic, precedent, and accountable judgment behind a choice. It is not a meeting recap. It is the reasoning artifact that lets a future person or agent understand the decision without finding the person who made it.</p><h2>AI Makes The Gap More Expensive</h2><p>People can sometimes recover missing context through proximity. Agents cannot. They can search the CRM and the wiki, but if the reasoning was never captured, they have only state. That is how technically correct actions become operationally wrong.</p><h2>How To Start Without Boiling The Ocean</h2><p>Choose one judgment-heavy workflow. Record the why when an exception happens. Connect similar cases over time. The first goal is not perfect architecture. It is making reasoning durable enough to be found again.</p><h2>Subscriber Operating Lens</h2><p>A memory layer should begin where reasoning is already being generated under pressure. Discount approvals, hiring calls, vendor selection, escalation handling, and architecture exceptions are useful starting points because they already contain tradeoffs. The capture surface should be small enough that people will actually use it.</p><p>The minimum viable trace has four parts: the situation, the options considered, the reason for the chosen path, and the condition that would make the decision wrong later. That final condition matters. It prevents memory from becoming nostalgia. It tells the next person when precedent should not apply.</p><p>For subscribers, the practical move is to stop treating knowledge loss as a search problem. Search cannot retrieve reasoning that was never recorded. The first system to build is the habit of making the why durable.</p><h2>What To Inspect Next</h2><p>The practical test is not whether the argument sounds right in a strategy discussion. It is whether the organization has a repeatable way to capture the reasoning that would make the next similar decision better informed.</p><p>That means asking three questions after the relevant decision:</p><ul><li><p>What assumption did we rely on?</p></li><li><p>What exception did we allow?</p></li><li><p>What would a future person or agent need to know before making the next call?</p></li></ul><p>If the answer disappears after the meeting, the organization has not built memory. It has only produced activity.</p><h2>Closing Note</h2><p>The deeper story across this thread is that AI does not only make work faster. It raises the value of context. The firms that learn how to preserve reasoning will get better with each cycle. The firms that do not will move faster without learning faster.</p><p><em>Shivanath Devinarayanan, Chief Digital Labor and Technology Officer at Asymbl. These views are my own.</em></p>]]></content:encoded></item></channel></rss>