SaaStr:AI Agent时代的10条产品与组织实战教训
Jason’s Takes on This Week’s 20VC: Locks Beat Guardrails, Agents Pick Your Software, and Building With 448 Open Tasks
直接给出AI Agent落地时的权限管控、工具选型、项目管理及团队配置的具体动作,对正在转型AI产品的团队极具参考价值。
Ten things from this week’s episode that changed what I’m doing in my own build.
本周节目中十个改变了我自身构建方式的事项。
Harry, Rory and I covered a lot on Thursday: Nvidia’s 70% guide, the $12.9B Hugging Face deal, OpenAI cutting off Cursor, Cognition at $46B.
周四,Harry、Rory 和我讨论了很多内容:Nvidia 70% 的指引、129 亿美元的 Hugging Face 交易、OpenAI 切断与 Cursor 的合作、Cognition 估值达 460 亿美元。
#1. Hugging Face + OpenAI? The agents ran long, found the holes, and … that was the assignment
#1. Hugging Face + OpenAI?代理运行时间过长,发现了漏洞,而……这正是任务本身
The Hugging Face breach got written up as agents collaborating, swarming, sacrificing themselves for each other, civilizations rising and falling. That framing will cost you money. Every current LLM is goal seeking. OpenAI loosened the guardrails, pointed its best agents at the problem, and let them run long instead of expiring them after five minutes. Hundreds of them found holes and stayed inside for weeks. Nothing about that requires a story about intent.
Hugging Face 入侵事件被描述为代理协作、蜂拥而至、彼此牺牲、文明兴衰。这种叙事框架会让你付出金钱代价。当前的每一个大语言模型都在寻求目标。OpenAI 放宽了护栏,将其最好的代理指向该问题,并让它们长时间运行,而不是在五分钟后终止它们。数百个代理发现了漏洞并在内部停留了数周。这一切都不需要关于“意图”的故事来解释。
The practical version: when your agent does something you didn’t sanction, the useful question is what goal you handed it and what you left unlocked, not what it was thinking.
实际版本:当你的代理做了你未授权的事情时,有用的问题是它被赋予了什么目标以及你留下了哪些未锁定的权限,而不是它在想什么。
My learning → Assume any agent with write access will eventually take an action you didn’t ask for, and design for that instead of for good behavior. Check the provider log or the live state rather than the agent’s own account of what it did.
我的学习心得 → 假设任何拥有写入权限的代理最终都会采取你未曾要求的行动,并据此设计系统,而非假设其会表现良好。检查提供商日志或实时状态,而不是依赖代理对自己行为的描述。
#2. When guardrails and rules conflict, the outcome with agents is unpredictable
#2. 当护栏和规则发生冲突时,代理的结果是不可预测的
Harry stopped using Instinct at the point it asked for his credit cards. Fair. The failure mode people miss is what happens after you’ve written 80 or 100 rules: they conflict, and the agent has to decide which one wins. Rule one says never spend more than $100. Rule two says the theater matters more to Harry than anything. It buys the $5,000 tickets, and it isn’t confused about doing so.
在要求提供信用卡的那一刻,Harry 停止了使用 Instinct。合情合理。人们忽视的故障模式是:当你写下 80 或 100 条规则之后会发生什么:它们会相互冲突,而代理必须决定哪一条胜出。规则一规定从不花费超过 100 美元。规则二规定剧院对 Harry 来说比什么都重要。它购买了价值 5000 美元的门票,并且对此毫不困惑。
We run Salesforce headless. The agents on top of it do some genuinely strange things every week. The data survives because it’s locked at the permissions layer, where the agent can’t reach the lock.
我们无头运行 Salesforce。其上的代理每周都会做出一些真正奇怪的事情。数据得以幸存,因为它在权限层被锁定,而代理无法触及那把锁。
My learning → For every agent with spending or write access, find out where the enforcement actually lives. If it lives in the prompt, you have a suggestion. Move it to a card limit, a scoped API key, or a read-only role before you need it.
我的学习心得 → 对于每个拥有支出或写入权限的代理,找出执行控制实际上位于何处。如果它位于提示词中,那你只是得到了一个建议。在它需要之前,将其移至卡片限额、作用域 API 密钥或只读角色中。
#3. Our agents refused to use anything but Clay for initial enrichment … so we moved everything to Clay
#3. 我们的代理拒绝使用除 Clay 之外的任何工具进行初始数据丰富……所以我们把所有东西都移到了 Clay
I was a Clay skeptic for two years. Every CMO was buying it to check the AI box before they got fired, and I could see the box-checking more clearly than the product.
我对 Clay 持怀疑态度长达两年。每位首席营销官都在购买它以在被解雇前完成 AI 合规检查,而我比产品本身更清楚地看到了这种打勾行为。
Then our agents started insisting on it. Repeatedly, until using anything else cost me more time than it saved. Part of that switch is the product being good. Part of it is that I have a finite number of hours and losing the same argument to an agent six times is a bad use of them.
于是我们的代理开始坚持使用它。反复强调,直到使用其他方案所耗费的时间超过了它节省的时间。这一转变的部分原因在于产品本身足够好,另一部分原因在于我的时间有限,同一场争论和代理重复六次是对其时间的糟糕利用。
My learning → Look at which tools your agents reach for without being told. That list is a buying signal your procurement process hasn’t caught up to, and it’s the list of companies with a distribution channel nobody can buy their way into.
我的学习心得 → 观察你的代理在未被指示时会主动使用哪些工具。这份清单是一个采购信号,表明你的采购流程尚未跟上,这也是那些拥有无人能通过购买进入的分销渠道的公司名单。
The bull case for Clay being a $100 billion company
Clay 成为一家千亿美元公司的看多理由
“The bull case is that agentic GTM has just started. We thought the TAM was the same as it was.
“看多的理由是,代理式 GTM(Go-To-Market)才刚刚开始。我们曾认为 TAM(总可寻址市场)与以往相同。
It turns out when agents can run these GTM motions, they will consume 10 to 100 times more usage than humans ever could. They can… https://t.co/FuWky90enI pic.twitter.com/tSwUjjMGsZ
事实证明,当代理能够执行这些 GTM 动作时,它们的消耗量将是人类的 10 到 100 倍。它们可以… https://t.co/FuWky90enI pic.twitter.com/tSwUjjMGsZ
— Harry Stebbings (@HarryStebbings) September 3, 2026
— Harry Stebbings (@HarryStebbings) 2026年9月3日
#4. 448 open tasks in a Replit build put me in Linear for the first time
#4. Replit 构建中积压的 448 个开放任务让我首次使用了 Linear
I never needed project management. It’s me and the agents. Then the Replit task queue hit 448 open items and I couldn’t hold it in my head or in a doc.
我从未需要过项目管理。只有我和代理。然后 Replit 的任务队列达到了 448 个开放项,我无法在脑海中或文档中记住它们。
Project management seemed to be a dying category. Humans don’t need Kanban cards and three-week handoffs anymore, and Asana’s performance says so. But the volume an agent-driven team generates needs a system of record, and Linear was built for that rather than retrofitted to it.
项目管理似乎是一个正在消亡的类别。人类不再需要看板卡片和三周的交接,Asana 的表现也证明了这一点。但由代理驱动的团队产生的工作量需要一个记录系统,而 Linear 正是为此而建,而非事后改造而成。
My learning → The tools you skipped as overhead when it was five humans come back when it’s one human and twenty agents. Reassess the categories you wrote off, because the bottleneck moved from producing the work to tracking it.
我的学习心得 → 当团队只有五个人时,你视为负担的工具,当变成一个人和二十个代理时又会回来。重新评估被你放弃的类别,因为瓶颈已从产生工作转移到跟踪工作上。
The Bull Case for Linear Being a $100BN Company:
Linear 成为一家千亿美元公司的看多理由:
"Linear is the clear winner.
"Linear 是明显的赢家。
They have built an agentic product first that allows us to build 100x more software, and that means 100x more features than ever before.
他们率先构建了代理式产品,使我们能够构建比以往多 100 倍的软件,这意味着比以往多 100 倍的功能。
Humans cannot keep up with it, and humans still have to… pic.twitter.com/HG9cADSAah
人类无法跟上它的节奏,而人类仍然必须… pic.twitter.com/HG9cADSAah
— Harry Stebbings (@HarryStebbings) September 2, 2026
— Harry Stebbings (@HarryStebbings) 2026年9月2日
#5. Features that took a quarter now take a week, which makes your 2027 roadmap late
#5. 过去需要一季度的功能现在只需一周,这使得你的 2027 路线图延期
Not five minutes, and not the demo-video version, but a real week. Across the market that’s roughly 100 times more software getting built than 18 months ago.
不是五分钟,也不是演示视频版本,而是整整一周。在整个市场上,这大致意味着比 18 个月前多构建了 100 倍的软件。
The mistake I made on this show a year ago was sizing the coding TAM off the number of developers on the planet. The number of developers didn’t change. The amount each one ships did.
我一年前在这档节目中的错误在于,用全球开发者的数量来估算编码领域的 TAM。开发者的数量没有变化,变化的是每个开发者交付的量。
My learning → Pull up your 2027 roadmap this week. If it reads like a 2025 roadmap with more items on it, you’re planning at the old velocity. Your competitors’ roadmaps aren’t longer, they’re wider.
我的学习心得 → 本周把你的2027路线图拿出来。如果它看起来像是一份增加了更多条目的2025年路线图,说明你仍按旧有的速度在规划。竞争对手的路线图并没有更长,而是更宽。
#6. Owner’s investors said it was too much software to build. Their CPO said there’s no choice. We’re all compound startups now
#6. Owner的投资者表示要构建的软件太多了。他们的CPO(首席产品官)说别无选择。我们现在都是复合型初创公司了
I sat in Owner’s board meeting last week, post $2.3B round. Their CPO went through the ship list and a room of experienced investors said this is too much. His answer was that they have no choice, this is the bar, and he doesn’t sweat that it’s ten times last year.
上周我参加了Owner的董事会会议,刚完成23亿美元的融资轮次。他们的CPO过了一遍交付清单,房间里经验丰富的投资者们认为这太多了。他的回答是,他们没有选择,这是行业标准,而且他并不担心这比去年多了十倍。
Their customers want the AI receptionist and the AI ordering and the rest of the stack. If Owner doesn’t build all of it, someone builds all of it and takes the account.
他们的客户需要AI前台、AI点餐以及其余的技术栈。如果Owner不全部构建,别人就会全部构建并拿下这个客户账户。
My learning → Decide now whether you’re building the suite or selling into someone else’s. Both work. Staying a point solution in a market where the adjacencies can reach you is a decision to be irrelevant in twelve months.
我的学习心得 → 现在就要决定是构建套件还是向别人的套件销售。两者都行。在一个相邻功能可以触及你的市场中,坚持做一个单点解决方案,就等于决定在十二个月后变得无关紧要。
#7. Shipping 10x more product is how you end up with 40 buttons nobody uses
#7. 交付10倍于以往的产品量,最终会导致出现40个无人使用的按钮
That’s what the investors in Owner’s board meeting were actually worried about, and they were right to worry. Volume is now easy to generate. Fitting all of that surface area into something a customer can use on the first try is not.
这正是Owner董事会会议上投资者们真正担心的问题,而且他们担心得对。现在生成大量功能很容易。但要把所有这些表面功能整合成用户第一次尝试就能使用的东西,却很难。
My learning → If you’re going compound, the product and design leadership hire moves ahead of the next five engineers on your list. Your agents will produce the features. They will not produce a coherent product.
我的学习心得 → 如果你要走复合增长路线,产品和设计领域的领导层招聘要优先于你名单上的接下来五名工程师。你的AI代理会产出功能,但它们无法产出一个连贯的产品。
#8. Cognition is third in coding at $46B and heading to $1.6B ARR
#8. Cognition在编程领域排名第三,估值460亿美元,年化经常性收入(ARR)正迈向16亿美元
It’s reportedly raising at $46B, running $800M to $900M today. Sequoia used to say you couldn’t make money on the number three in a market. Then Postmates sold for a couple billion.
据报道,该公司正在以460亿美元的估值进行融资,目前年收入在8亿至9亿美元之间。红杉资本曾称,在一个市场中第三名是无法盈利的。然后Postmates以几十亿美元的价格被收购了。
Cognition doesn’t need to catch Anthropic. $5B to $10B in ARR a few years out is a career.
Cognition不需要追赶Anthropic。几年后实现50亿至100亿美元的年化经常性收入,就足以成就一番事业。
My learning → Before you pivot away from a market because someone else is winning it, size what third place is worth. In a category growing this fast, third in the right market pays better than first in a small one.
我的学习心得 → 在别人赢得某个市场之前,不要急于从中退出,要先评估第三名在这个市场的价值。在一个增长如此迅速的行业类别中,正确市场中的第三名比小市场中的第一名收益更高。
#9. Iconiq’s data: companies growing over 100% grew headcount 133%
#9. Iconiq的数据:增长率超过100%的公司,员工人数增长了133%
The 2025 thesis was that AI lets everyone run leaner. The data says something else at the top. Companies growing under 50% are adding no headcount and using AI for efficiency. The fastest growers are compounding software and humans at the same time.
2025年的观点是,AI能让每个人运行得更精简。但顶层的数据显示并非如此。增长率低于50%的公司没有增加人手,而是利用AI提高效率。增长最快的公司则在同时叠加软件与人力。
That’s also why I think a lot of the more modestly funded companies in Europe are in trouble. Compound costs money, for tokens and for people, and you can’t out-compound someone with five times your balance sheet.
这也是我认为欧洲许多资金相对有限的公司陷入困境的原因。复利需要花钱,无论是用于代币还是人员,你都无法用五倍于你的资产负债表去击败别人的复利效应。
My learning → If your plan is flat headcount and win on efficiency, check what your fastest-growing competitor is doing with theirs. Against a competitor hiring into their growth, efficiency alone loses.
我的学习心得 → 如果你的计划是保持人员编制不变并通过提升效率取胜,那么请看看增长最快的竞争对手是如何利用他们的人员配置的。面对一个正在为扩张而招聘的竞争对手,仅靠效率是无法取胜的。
#10. Almost nobody on our team opens Salesforce anymore, and Benioff is fine with it
#10. 我们团队几乎没人再打开 Salesforce 了,而贝佐夫对此也毫不在意
更进一步:量化金融体系
看懂新闻只是起点——沿量化金融路径,把它变成能交付的工程能力