Gavel Playbook · Strategy

What is an AI moat? 11 wedges into markets incumbents already own.

Your investor asks it as a moat question. Your users ask it as a wrapper question. Both mean: does the next model release make this pointless? Five operators, from Google's Jeff Dean to Anthropic's Boris Cherny, on the wedges that survive. Each cited to a timestamp.

Wedges
11 cited wedges
Operators
5 operators
Read time
12 minutes
Updated
August 2026

The short answer

What is an AI moat?

An AI moat is the part of your advantage that a frontier model release cannot erase. Jeff Dean's test is the sharpest one here: build where today's general models succeed 0% or 1% of the time, not 20%, because a model that half-does your job now will fully do it soon. The wedges that hold are data the general model cannot see, workflows that cross organizational boundaries, a product harness nobody has shipped, and a market the frontier will not reach for two or three years.

Every AI founder gets the same question twice in one week. An investor asks what the moat is. A commenter asks whether it is just a wrapper. Both mean: does one model release make the company pointless? Most published answers hand-wave about data flywheels, written by people who never had to answer with their own money. The operators here did. They build the models, fund the application layer, and ship the harnesses.

This is not moat theory, and there is no Warren Buffett in it. What follows is 11 entry wedges, each traced to a real chapter with a timestamp, from Jeff Dean at Google, Sam Altman at OpenAI, Alexandr Wang who founded Scale AI, Matt Murphy at Menlo Ventures, and Boris Cherny at Anthropic. Two of them contradict each other outright on how much structure to build around a model. Adjacent frameworks: counter-positioning for why an incumbent cannot respond, and the beachhead market for how one wedge becomes a second.

"If the model just does something and your application isn't distinctive enough, the workflow, the value you built on top of it, the model takes that market away."

Matt Murphy, Menlo Ventures, on application defensibility

Clear this first

Five things founders keep mistaking for a moat

Four of these appear in most AI seed decks. Each is disqualified by an operator here, not by us.

A task the models already half-do
Partial capability is the tell, not the encouragement. A model doing some of it but not very well means the capability is present, and scale finishes it. Wedge 01.
Anything the labs ship within twelve months
Durability is a date, not a feeling. Six months out is a feature the labs have not reached. Three years out is a window you can build inside. Wedge 02.
Being small and fast
Wang's Goliath versus Goliath framing cuts both ways. If agents turn four people into an enterprise, they do the same for the enterprise. Speed is table stakes. Wedge 05.
A workflow layer that is not distinctive
Murphy's test is unsentimental. If the model doing the thing takes your market with it, it was never defensible. Distinctive means what the model cannot see from outside the org. Wedge 08.
Good gross margins today
Murphy underwrites great AI companies at 20 to 30 percent right now. The question is a credible path to 60 or 70, not this quarter's number. Wedge 10.

Note what is missing: a thin harness. Cherny argues the opposite way, that removing scaffolding others left in place is where unrealized capability lives. See wedge 11.

The Wedges

Eleven ways operators entered markets someone bigger already owned.

01

Jeff Dean, Google · Y Combinator

Build where the model scores zero, not twenty

Jeff Dean built MapReduce, BigTable, TensorFlow, the TPU and Gemini, so his rule for picking an AI problem is worth taking literally. Run today's general models against your domain and read the score. If they are completely failing, he says, that is probably a good sign. If they are kind of able to do some of it but not very well, that is not a great sign, because the capability is already present and more data or a bigger model finishes it.

His instruction is exact. Look for something where the model succeeds 0% or 1% of the time, not 20%.

Steal it

Score today's frontier models on your core task. If they land anywhere near 20 percent, pick a harder problem.

02

Jeff Dean, Google · Y Combinator

Ask whether the labs ship this in six to twelve months

Dean's second filter is the one founders skip. He asks whether the thing you are working on is a durable thing, or whether the models at the forefront get better at it in the next six months or 12 months, or whether it is something they will not manage for a couple of years. Six months means you are building a feature the labs have not reached. Three years means you have room to become a company.

General models keep getting better at a broader and broader range of things, so the window closes on its own schedule, not yours.

Steal it

Name the model capability that would make your product pointless, and the date you expect it to ship. Re-check every quarter.

03

Jeff Dean, Google · Y Combinator

Own the data the general model cannot see

So where does the two or three people in a room advantage come from? Dean names two shapes. The first is a product with access to a particular kind of data the underlying general model does not have, like a user's own personal information, so your product sees what the frontier cannot. The second is training the narrow model yourself. He points at AlphaFold, a very specific model for protein folding that beat general models in its domain, and says the same shape works in material science or chip design.

A niche model may not take much compute, so this is judgment, not capital.

Steal it

Name the dataset that exists only because your product runs. If you cannot, build the workflow that generates it before anything else.

04

Alexandr Wang, Scale AI · Y Combinator

Sell the bottleneck nobody is looking at

Scale AI started as something else. Alexandr Wang came into Y Combinator building an AI agent to help people get medical care, worked on it a month or two, and had Jared Friedman pull the team aside to say he did not know if it was going anywhere. What Wang did next is the wedge. He went back to first principles on what training a model required, and found three inputs.

Compute you could get by pressing a button. Code you could get by pressing a button. For data, he says, there was no effective way to get it at all.

Steal it

List the three inputs your customer needs to do the job. Build the one they cannot buy with a button.

05

Alexandr Wang, Scale AI · Y Combinator

It is Goliath versus Goliath now, so aim the multiplier

Wang's read is that the startup story changed shape. Ten years ago, when he started Scale, it was David versus Goliath, and you had to be clever, find an angle into the market, and compete with far fewer resources. Now, with the power of agents, he thinks it is much closer to Goliath versus Goliath, with the startup as a mecha Goliath vastly enhanced by AI. His conclusion is that startups which properly embrace agents can easily outcompete incumbents.

What founders skip is that the multiplier is available to both sides. If agents make four people enterprise-sized, they do the same for the enterprise.

Steal it

Pick the one job where a four-person agent-run team beats a hundred-person department, and refuse every other job for a year.

06

Sam Altman, OpenAI · Y Combinator

Enter while the ground is still moving

Altman's general observation is that startups tend to win when the technology landscape is moving very quickly, when costs are coming down and cycle times are short, and he thinks all of that is happening now. He walks the pattern back through the internet boom, the wave of people building on Facebook, and the iPhone App Store. The line to keep is that great startups tend to cluster when the ecosystem shifts and incumbents lose a lot of their advantage. You are not hunting a market where the incumbent is bad, but one where what the incumbent was good at stopped mattering.

Steal it

Name the incumbent advantage this shift just made worthless. If you cannot, you are entering a market that has not moved.

07

Sam Altman, OpenAI · Y Combinator

Pick the belief the experts call wrong

OpenAI began as a Y Combinator research project at a moment when, in Altman's telling, people said the team was not only wrong that AGI might be possible but was going to single-handedly cause another AI winter. His highest bit of advice is to find things you can develop reasonable conviction in that the conventional wisdom says are just wrong. For years it felt like they knew the biggest secret in the world while everybody called them an idiot, and that dismissal bought them time without massive competitors. Start the same startup as everybody else and you get hype and money, rarely the big outcomes.

Steal it

Write the belief about your market that would embarrass you on a conference panel. If investors nod along instead of wincing, keep looking.

08

Matt Murphy, Menlo Ventures · 20VC

Build across the organizational boundary

Matt Murphy led Anthropic's seed round at Menlo Ventures, and gets the Anthropic-will-eat-your-app question constantly. His answer opens with a concession founders will not enjoy. If the model just does something and your application is not distinctive enough, the model takes that market away, and it probably was not that defensible anyway. Then he names what distinctive looks like at Legora, his legal AI investment.

Its lawyers get in and understand workflows that cross organizational boundaries. On one case there are corporate lawyers, outside firms and a client, plus context inside each firm. Not quite an n-squared problem, as he puts it, but you need workflows that understand it.

Steal it

Map every party who touches the workflow you sell into, then build the thing that only works when all of them are in it.

09

Matt Murphy, Menlo Ventures · 20VC

Win one sophisticated service team, then take the next

The obvious objection to a vertical wedge is that the vertical is too small to carry the ambition. Murphy's answer is that the wedge was never the market. Legora's strategy, he says, is absolutely to expand out of legal into tax, compliance and accounting, because what the company built is a base platform that happens to be really good at understanding sophisticated service teams. Legal is where that got proven, not the ceiling, and he expects another leg of the stool nobody has named yet.

You earn the adjacent vertical by being undeniable in the first one.

Steal it

Name the second vertical and the one capability that carries over. Then ignore it until the first vertical is undeniable.

10

Matt Murphy, Menlo Ventures · 20VC

Low margins are survivable. No path to sixty is not

Do margins still matter? Murphy says they do a lot, then describes a market that looks nothing like the SaaS one. A lot of great companies right now sit around 20 to 30 percent gross margins, and because of the cost of inference it is harder to say you are going to be an 80 or 90 percent gross margin company anymore. What he underwrites is the path. Great companies land at 60 to 70 percent, and the credible plan is some optimization, not being completely tied to inference, and often building your own model on your own data.

Steal it

Write the plan from today's gross margin to 60 percent, name the workload you move off frontier inference, and date it.

11

Boris Cherny, Anthropic · Y Combinator

Ship the harness the incumbent will not

Boris Cherny built Claude Code. Product overhang is the gap between what the model can already do with today's models, not a future model, and what any shipped product lets it do. When the product gets in the way, he calls that hobbling. Sonnet 3.5 was the best coding model available and the coding products of the day did single-line autocomplete, sometimes multi-line, plus read-only chat.

So the team got rid of the scaffolding and gave the model the simplest possible harness, enough to write an entire file and build an entire feature. Cherny says there is now so much product overhang that he is not seeing startups capture.

Steal it

List three things the model can already do that your product forbids. Ship the version that removes a guardrail, not the one that adds a feature.

Pick one, then defend it

What each wedge requires, and what closes it

Every wedge has an expiry condition. Naming yours is the difference between a strategy and a hope.

Wedge What it requires What closes it
01 Score-zero domainA domain today's models fail atThe next release scoring 20 percent
02 The durability dateAn honest twelve-month forecastThe labs shipping it early
03 Unseen dataA workflow that generates its dataThat data becoming purchasable
04 The missing inputA bottleneck everyone routes aroundSomeone selling it with a button
05 Goliath vs GoliathAgent capacity aimed at one jobThe incumbent aiming at that job
06 The shifting landscapeAn incumbent advantage the shift killsThe shift finishing before you ship
07 The heretical beliefConviction plus new data pointsConsensus arriving, competitors with it
08 Organizational boundarySeveral parties inside one workflowA single-party workflow, misread
09 Beachhead, then expandUndeniable in one vertical firstExpanding before that is true
10 The margin pathA named plan to 60 percentInference cost with no plan
11 Product overhangA capability no product allowsAn incumbent removing its scaffolding

Where the operators disagree

How much should you specify?

This is the moat question in different clothes, because the structure you build around a model is the product you sell. The man who built Claude Code and the man who built Gemini's infrastructure land in opposite places.

Boris Cherny, Anthropic · Y Combinator

Stop specifying. Give it goals and a way to check the work.

Cherny's read is that engineers who have coded for years or decades share one really common failure mode: trying to over specify, being overly specific, and getting the model to do the task exactly the way they would have done it. That is just not the way the model works, he says, and unlearning it is a journey. Describe the task, the guardrails and the exit criteria, then let the model run. Treat it like a coworker.

Watch on YouTube · 22:48

Jeff Dean, Google · Y Combinator

The spec matters more now, not less.

Dean's position is the reverse. Running a fleet of fifty or a hundred agents, he says, is all about writing really good crisp design docs. If you do not specify very much, the agent has to infer what you meant, and it may infer something different from what you imagined. His claim is direct: the importance of specifying what you want has actually gone up, because you used to hand work to an intelligent human who could ask follow-up questions. His proof case is language translation, which models do extremely well precisely because the codebase is an incredibly detailed specification.

Watch on YouTube · 31:29

They are defending different halves of the same instruction. Cherny is against prescribing the method, the do it this way then this way then this. Dean is for specifying the outcome, what the software must accomplish and how anyone will know it did. Both would sign the same synthesis: maximally precise about the goal and the verification, maximally loose about the steps. The second-order read matters more here. If your value is the scaffolding wrapped around a model, Cherny says that is a liability the next release strips. If your value is a specification of what the customer needs done, Dean says that asset appreciates.

Read it for your situation

How to use this playbook

You are still picking what to build
Start with wedge 01 and wedge 02. Score today's models on your candidate problem, then write the date you expect the frontier to reach it. Wedge 07 breaks the tie between two problems that both pass: take the one the experts call wrong.
You are shipping on a frontier API and cannot answer the moat question
Bring wedge 03, wedge 08 and wedge 11. Those three survive contact with an investor: data the model cannot see, a workflow that crosses organizational lines, and a capability no shipped product allows.
You have a wedge and need the expansion story
Go to wedge 09 and wedge 10. Name the second vertical and the capability that carries over, then write the margin plan to 60 percent. Both questions arrive in the same meeting.

Gavel's chat sits on top of all 11 wedges. Tell it what you are building, who it is for, and which model you are calling, and it points you at the wedge that fits, with the same timestamped citations you just read. It will not score the frontier models for you. It will tell you which of these five operators already argued your case, and where the other four push back.

Common founder questions

Frequently asked

What is an AI moat?
An AI moat is the part of your advantage a frontier model release cannot erase. These operators converge on four shapes: data the general model cannot see, workflows that cross organizational boundaries, a product harness nobody has shipped, and a problem the frontier will not reach for two or three years. Jeff Dean's test: build where today's models succeed 0% or 1% of the time, not 20%.
What are the 7 moats of an AI startup?
There is no canonical list of seven. Published frameworks count five, six, seven or ten, a sign the taxonomy is not settled. These operators converge on something narrower: proprietary data the general model cannot see, workflow depth across organizational boundaries, an un-hobbled product harness, a niche specialized model, and a technology shift that strips an incumbent's advantage.
Is an AI wrapper startup defensible?
It depends on what sits on top. Murphy's test is whether the workflow and value you built are distinctive enough that the model absorbing the raw capability does not take the market with it. Cherny makes the inverse point: most shipped products hobble the model, so a harness that finally elicits what it can already do is real work.
Will OpenAI just build my product?
Jeff Dean turns this from a fear into a dated question. Test the current general models on your problem, then ask whether the models at the forefront get better at it in the next six months, 12 months, or two to three years. Around 20 percent means soon. Around 0% or 1% means you have a window.
What AI companies have moats?
Three shapes cited here. Legora, whose lawyers understand legal workflows crossing corporate lawyers, outside firms and clients on one case. Scale AI, built on the one training input you could not get by pressing a button. And AlphaFold, a narrow model for protein folding that beat general models in its domain.
Do bad gross margins kill an AI startup?
Not on their own. Matt Murphy says a lot of great AI companies run 20 to 30 percent gross margins right now, and inference cost makes the old 80 or 90 percent claim harder. What he underwrites is a credible path to 60 or 70 percent. No plan is the problem, not this quarter's number.

Not sure your wedge survives the next release?
Pressure-test it against these five.

Gavel won't tell you the idea is great. Describe what you're building and who it's for, and it points you at the wedge that fits, citing the same sources you just read.

Free with Google. 20 credits/month forever. Pick a plan in 30 seconds after signin.

The Gavel Playbook Newsletter

One new playbook
every Monday morning.

Cited frameworks from operators who've shipped, in your inbox before your week starts. No spam, no upsells, no recycled LinkedIn takes.

One email a week. Unsubscribe with one click. We never sell or share email.