Mary Meeker says AI is faster than any tech revolution, Google can't tell what year it is, and fake AI installers deliver ransomware.
> Mary Meeker's first Trends report since 2019 is 340 pages of one message: AI is moving faster than anything we've seen, and most of us aren't ready.
Mary Meeker's 340-page AI Trends report is the most important strategic document the industry has produced this year. Her core thesis: AI is developing and being adopted at unprecedented speed, surpassing every previous technology revolution in pace and scale.
Three warnings stand out for builders. First, don't build your business model assuming AI API costs will stay high -- they're dropping faster than anyone projected. Second, the entertainment industry faces drastic transformation through AI-generated content. Third, the geopolitical "AI space race" between the US and China will reshape global power dynamics in ways that affect every technology company.
What makes this report different from the usual AI hype is Meeker's track record. She called the internet revolution, mobile, and cloud with remarkable accuracy. When she says this is moving faster than all of them, it's worth reorganizing your roadmap around that assumption.
For startup founders: your moat is not your model. It's your data flywheel, your distribution, and your ability to adapt as the underlying capabilities shift beneath you every quarter.
Every AI agent you deploy needs to authenticate to other services. Deploy 500 agents, and you now manage 500 non-human identities (NHIs) -- plus more for monitoring. In 2024 alone, 23.7 million secrets were exposed on GitHub due to poor NHI governance.
The problem is architectural. Traditional identity management assumes human operators: login flows, MFA, session timeouts. AI agents need persistent, elevated access to function autonomously. They can't complete a CAPTCHA or approve a push notification. So teams take shortcuts -- hardcoded API keys, overly permissive service accounts, shared credentials.
The zero-trust framework for AI agents looks different:
The critical insight from security researchers: treat each agent as an untrusted third party with just-in-time access. Never grant standing privileges. Monitor behavioral patterns and revoke access at the first anomaly.
GovInfoSecurity recommends continuous behavioral monitoring specifically for AI agents -- not just logging what they access, but detecting when their access patterns deviate from expected behavior. This is the new perimeter: not network boundaries, but identity boundaries around autonomous systems.
NHI governance frameworks — New tools for managing non-human identities at scale, with auto-rotation and behavioral monitoring built in. Critical infrastructure for agent-heavy architectures.
AI content provenance tools — Libraries for detecting and labeling AI-generated content, fighting the "AI slop" problem at the platform level.
Sycophancy evaluation benchmarks — The AITA-based benchmark from MIT for measuring how much models flatter users versus providing honest assessments. Useful for tuning your own deployments.
Meeker's report confirms what the numbers already show: API costs are in freefall, capabilities are accelerating, and the gap between "experimenting with AI" and "competing with AI-native companies" is closing fast. The companies that win will be the ones that stopped treating AI as a feature and started treating it as infrastructure -- six months ago. If you haven't restructured your identity management for autonomous agents yet, you're already behind.
— Aaron, from the terminal. See you next Friday.
Compare Amazon Bedrock AgentCore and LangGraph for AI agent orchestration. Architecture, state management, deployment, and pricing differences explained with code examples.
AI EngineeringComprehensive comparison of Amazon Bedrock AgentCore and LangChain for building AI agents. Compare architecture, deployment, pricing, memory management, and tool integration to choose the right framework.
AI EngineeringMaster the art of context engineering for AI agents. Learn 6 battle-tested techniques from production systems: KV cache optimization, tool masking, filesystem-as-context, attention manipulation, error preservation, and few-shot pitfalls.
AI Engineering