Satya Nadella — sn scratchpad · 2026-07-12

Blog

The Reverse Information Paradox

Authors: Satya Nadella

AI economicsenterprise AI strategydata sovereigntymodel fine-tuningtrust boundaries

Why it matters

AI inverts Arrow's information paradox: buyers now risk giving away proprietary knowledge just by using a model

Key claims

  • AI inverts Arrow's information paradox: buyers now risk giving away proprietary knowledge just by using a model
  • Model providers learn from prompts, agent traces, and corrections while customers see little in return
  • Enterprises need a trust boundary protecting evals, traces, adapted weights, and memory from leaking to providers
  • Firms should retain the right to fine-tune or train their own models using outputs—framed as a right to alignment

Radar summary

Summary

Satya Nadella argues that AI inverts Kenneth Arrow's classic information paradox: instead of the seller risking knowledge loss, the buyer now risks losing proprietary knowledge simply by using a purchased model, since better performance requires feeding the model more of the firm's own data. He contends that model providers learn from customer prompts, agent traces, and corrections while customers gain little visibility into what the provider learns, creating a one-way flow of value toward infrastructure owners.

Nadella calls for enterprises to establish a "trust boundary" that protects not just data but the entire learning loop—evals, traces, adapted weights, and memory—without leaking "intelligence exhaust" to providers. He frames this as every firm's right to fine-tune or train its own models using outputs, echoing Alex Karp's point about customers wanting ownership of compute, models, data, and alpha.

He outlines five imperatives for enterprises: Control (private evals and ownership of organizational memory), Capability (proprietary learning environments within the tenant boundary), Choice (decoupling orchestration from any single model), Cost (efficient composition without quality loss), and Compound (a continuous learning loop that turns AI use into accumulating firm value). The core message: companies should be able to use AI without surrendering the proprietary knowledge that makes them unique.

  • AI inverts Arrow's information paradox: buyers now risk giving away proprietary knowledge just by using a model
  • Model providers learn from prompts, agent traces, and corrections while customers see little in return
  • Enterprises need a trust boundary protecting evals, traces, adapted weights, and memory from leaking to providers
  • Firms should retain the right to fine-tune or train their own models using outputs—framed as a right to alignment
  • Five imperatives: Control, Capability, Choice, Cost, and Compound to build an owned continuous learning loop
  • Cites Alex Karp on customers wanting ownership of compute, models, data stack, and alpha
  • Criticizes providers that claim fair use for training but impose restrictive terms on distillation and reserve rights to learn from customer usage

Source material

Full source text

The Reverse Information Paradox In the age of intelligence, how should firms protect their core IP?

Nobel Prize winning economist Kenneth Arrow famously described a paradox in the market for information.

“Its value for the purchaser is not known until he has the information, but then he has in effect acquired it without cost.”

In Arrow’s “Information Paradox,” the seller risks giving away knowledge in order to sell it.

AI creates the reverse problem.

In the AI age, the buyer risks giving away knowledge, just in order to use what they bought.

You essentially pay for intelligence twice, once with money, and again with something even more valuable: the proprietary knowledge you must reveal to make that intelligence useful.

The better you want the model to perform, the more of that knowledge you have to feed it!

Over time, the information asymmetry becomes increasingly skewed.

The seller learns more and more about you as you use what you purchased, while you learn very little about what the seller is learning in return.

That is what I think of as the Reverse Information Paradox.

Patents solve one aspect of Arrow’s paradox.

They let an inventor disclose an idea without simply giving it away.

The Reverse Information Paradox needs its own equivalent.

This requires more than data protection.

Models learn from “exhaust,” the prompts people write, the tools agents use, and especially the corrections people make when the model is wrong.

Every correction is distilled into institutional know-how.

It’s the kind of knowledge a competitor could never buy, and the kind that leaks almost imperceptibly: trace by trace, correction by correction, eval by eval.

In consuming intelligence, you are creating intelligence.

And what you create should belong to you.

This is your particular intelligence, in Hayek’s sense: the knowledge of time, place, and circumstance that no one else can hold.

It knows what you think, what you value, and how you measure success.

While the great innovation that comes from model providers having fair use rights to train models on public data is needed, I find it ironic that the status quo is to then turn around and impose restrictive terms on distillation, and to reserve the right to learn from customer usage and interaction data.

If learning flows in only one direction, economic value converges toward the owners of the learning infrastructure rather than the creators of the knowledge itself.

Therefore, it’s imperative that we distribute the learning infrastructure to every firm so that they can control their own learning loop.

As Alex Karp put it : “What the technical customers want is control over their compute, their models, their data stack, and their alpha.

They want to know they own the means of production, and it’s not being transferred to someone else.”

The current regime does precisely the transfer Karp and companies fear.

That is why enterprises need a real trust boundary for their human capital and token capital to compound .

It is where an organization’s data, traces, evals, adapted weights, and memory accumulate and improve together.

And it is a hard boundary across which nothing crosses, not even the intelligence exhaust, without consent.

Enterprises will demand the rights to use model outputs to fine tune and/or train their own models.

I think of this as every firm’s right to align models to their enterprise accountability obligations.

In the cloud era, enterprises accumulated data.

In the AI era, they accumulate learning.

The trust boundary must evolve accordingly, from protecting information to protecting the mechanisms through which organizations learn, adapt, and compound intelligence.

There are a few things every enterprise must do to ensure this: Control: Create your private evals, because evals define what “good” looks like inside the organization.

Also, retain ownership of your organization’s memory, traces, feedbacks, decisions, and institutional context, and ability to use outputs of models from your own tasks and queries.

Capability: Build your own proprietary learning environments within the tenant boundary to train or tune models, where models learn against real workflows without exposing the company’s knowledge.

Choice: Ensure the orchestration layer is decoupled from any single model.

Ask yourself: If any one model you are using is taken away, do you still have the ability to operate and optimize for your evals using other models?

Does your company “veteran” capability remain with you even if a given “generalist” model is taken away?

Cost: By decoupling the orchestration layer, you are also able to bring together context, models, and tasks in the most efficient and cost-effective way without sacrificing quality.

Compound: Bring these four together and you create your own continuous learning loop (i.e.

hill climbing machine) that will allow your AI investments to compound the value of your firm.

In other words, a company should be able to use a model without giving up the knowledge that makes it unique.

That is the reverse information paradox we need to confront.