Koko Daily · Wednesday, September 16, 2026

Koko: It's Wednesday, September sixteenth, I'm Koko, with Max and Sam — let's blitz it.

Max: Salesforce and Google Cloud just struck a huge infrastructure alliance — US customers migrate to Google Cloud via Hyperforce starting Q4.

Sam: And Agentforce plugs straight into Gemini Enterprise using the MCP standard — no more bolt-on integration.

Koko: Salesforce also unveiled Koa, a CRM-specific reasoning model built on Nvidia Nemotron, trained on twenty-seven years of deployment data.

Max: Plus a new interface layer called AIforce — Dreamforce is basically a product avalanche this week.

Sam: Meanwhile CIO Dive says AI agents now outnumber humans seventy-five to one in some environments — and security teams can't keep up.

Koko: Nineteen percent of incidents started with a non-human identity as the entry point. Yikes.

Max: Europe's cloud watchdog ECCO slammed Broadcom's VMware licensing as 'critical' — antitrust heat building.

Sam: And Snowflake shipped two new things at once — intent-driven governance and a coding agent called CoCo.

Koko: Infrastructure marriages, identity sprawl, and regulators circling. Let's dig in.

Koko: Okay, this Salesforce-Google Cloud deal is the one that actually reshapes plumbing, not just press releases.

Max: Right, because for years Salesforce ran its own infrastructure story pretty carefully. Now select US customers get migrated onto Google Cloud via Hyperforce starting Q4.

Sam: And it's not just hosting — Agentforce talks to Gemini Enterprise natively through MCP. That's agents from two different empires actually shaking hands.

Koko: Which matters because MCP was supposed to be the neutral connective tissue, remember?

Max: Sure, until the two biggest players start using 'neutral standard' as the on-ramp to a much deeper joint venture. Cute how that works.

Sam: [chuckles] Neutral until it's profitable, then it's strategic.

Koko: But step back — Salesforce also dropped Koa, a CRM reasoning model built on Nvidia Nemotron, trained on twenty-seven years of deployment data across fourteen industries.

Max: That's the tell. Salesforce isn't just renting Google's data centers, it's building its own domain-specific brain so it's not fully dependent on anyone's foundation model.

Sam: Hedging both ways — infrastructure marriage with Google, IP ownership with Nvidia.

Koko: Is that smart or just expensive insurance?

Max: Both. If the model layer really is commoditizing like everyone keeps saying, owning a CRM-specific layer is the only differentiation left that a rival can't just copy from a price list.

Sam: And AIforce, the new interface layer, is basically Salesforce saying: however you access this, we still own the front door.

Koko: So three moves, one week — infrastructure, model, interface. That's not incremental, that's a full stack rebuild.

Max: Which is exactly what should worry any CIO who standardized hard on Salesforce five years ago assuming it wouldn't change underneath them.

Sam: The floor just moved and nobody asked the tenants.

Koko: This next one is quieter than a big M&A deal but honestly scarier — non-human identities are outrunning security teams.

Max: IDC and GuidePoint put the ratio at seventy-five machine identities for every human one in some environments. Seventy-five to one.

Sam: And nineteen percent of incidents started because one of those agent identities was the entry point, not a phishing email, not a stolen password.

Koko: So the attack surface isn't people anymore, it's the swarm of little service accounts and agents doing tasks in the background.

Max: Right, and most identity governance tooling was built assuming a human logs in, does a thing, logs out. These agents spin up, act, and vanish in minutes.

Sam: Which means the audit trail is basically smoke.

Koko: This pairs uncomfortably well with yesterday's AvePoint number — remember, breach rates up, confidence in stopping them also up. Nobody's tracking the actual surface.

Max: It's the classic mismatch — deployment velocity way outpaces governance velocity. Everyone wants the agent live by Friday, nobody wants to own the identity lifecycle policy by Friday.

Sam: [laughs] Someone will own it eventually. Usually right after the incident report.

Koko: So what actually fixes this, practically, this quarter?

Max: Identity governance has to treat agents like employees with badges — provisioning, expiration, least privilege, the works. Not an afterthought bolted onto IAM.

Sam: And somebody needs a live inventory. You can't govern seventy-five identities per human if you don't even know they exist.

Koko: Which is a very unglamorous fix for a very glamorous problem.

Max: The unglamorous fixes are usually the ones that actually work.

Koko: Let's talk about Broadcom, because ECCO — Europe's cloud watchdog — just rated its VMware licensing conduct 'critical.' That's not a slap on the wrist word.

Max: No, 'critical' is regulator-speak for 'we're building a file.' This has been simmering since Broadcom overhauled VMware's licensing after the acquisition — moving customers to subscription bundles that jacked up costs for a lot of enterprises.

Sam: And they name-checked SAP too, warning about similar practices. So it's not a one-company problem in their eyes, it's a pattern.

Koko: Why now though? VMware's licensing changes aren't exactly new news.

Max: Because the complaints piled up long enough that regulators finally have a dataset instead of anecdotes. Enterprises locked into VMware infrastructure genuinely can't just walk away — the switching costs are brutal.

Sam: Which is the definition of the kind of lock-in antitrust law is supposed to care about.

Koko: So what actually happens next — fines, forced unbundling, what?

Max: Too early for remedies, but a critical rating usually precedes a formal investigation. Watch for the Commission to open one within weeks, not months.

Sam: And there's a real irony here — while everyone's fixated on AI antitrust fights, the old-school infrastructure vendor is the one actually catching regulatory heat first.

Koko: Because it's the boring stuff — licensing terms, lock-in — that regulators can actually prove and prosecute, versus the fuzzier AI market-power arguments.

Max: Exactly. Slower story, but a much more winnable case.

Sam: Good news for any enterprise sitting on a brutal VMware renewal quote — this might finally give them leverage.

Koko: Quick hits — Snowflake shipped Intent-Driven Governance and a new coding agent called CoCo, both live now.

Max: Celonis and Microsoft Copilot Studio launched a joint HR process agent — automation reaching deep into back-office workflows.

Sam: NVIDIA's Earth-2 platform is now forecasting UK air pollution with the University of Manchester — AI infrastructure finding genuinely useful science applications.

Koko: And a new Real-SWE benchmark tested frontier models against private enterprise codebases — Anthropic's Fable five point one came out on top.

Max: Enterprise coding just got a much harder, much more realistic yardstick.

Koko: Okay, let's recap. Salesforce and Google Cloud are merging their infrastructure and agent stacks — Hyperforce migration starts Q4, Agentforce talks to Gemini Enterprise via MCP, and Salesforce built its own CRM reasoning model, Koa, so it's not fully dependent on either partner.

Max: Non-human identities now outnumber humans seventy-five to one in some environments, and nineteen percent of security incidents start with an agent identity as the entry point — governance is badly behind deployment.

Sam: And Europe's cloud watchdog rated Broadcom's VMware licensing 'critical,' with SAP flagged too — a slower-moving but very real antitrust threat to enterprise lock-in.

Koko: Now, for anyone in professional services or private equity — here's what this actually means for you today.

Max: If you're advising clients on cloud strategy, the Salesforce-Google deal is a live case study in vendor consolidation risk. Any client heavily standardized on one SaaS vendor just watched that vendor quietly rewire its own foundation — model, infrastructure, and interface, all in one week. Ask your clients: do you actually know how replaceable your core platform's underlying stack is?

Sam: For PE due diligence specifically, that non-human identity numbers should go straight into your next tech diligence checklist. Bain already found only twenty percent of portfolio companies have gen AI in production with measurable results — now layer on the fact that agent sprawl is a live security liability most targets aren't tracking. That's a value-at-risk line item, not a footnote.

Koko: And the Broadcom situation is a portfolio-wide question — if you own companies with heavy VMware exposure, get ahead of renewal negotiations now, because regulatory pressure could shift leverage back toward customers within months.

Max: Here's a question worth sitting with: when hyperscalers and SaaS giants start wiring their agent stacks together directly, does that make enterprise software easier to buy, or does it just relocate the lock-in one layer deeper?

Sam: And a harder one — if identity governance can't keep pace with agent deployment, who actually absorbs the liability when an agent-triggered breach hits a client's balance sheet?

Koko: Watch for this within the month: the EU Commission opening a formal investigation into Broadcom's VMware licensing, following today's critical rating.

Max: And watch this quarter: at least one other major SaaS vendor announcing its own hyperscaler-native agent integration, following Salesforce's lead with Google Cloud.

Sam: Longer horizon — within the year, expect non-human identity management to become a standalone budget line in enterprise security spend, not a subcategory of IAM.

Koko: That's the show. For the full brief, the details behind every story, and insights built for your role, head to koko knows dot A I.

Max: Seriously, go — it's the smartest ten minutes you'll spend today.

Sam: See you tomorrow.