
Playbook
Tasteful Skills
“Tasteful Skills” argues that the best agent skills are not documentation or best-practice lists.
Salesforce is already proving the new pricing model works — Nate says Agentforce hit an $800 million ARR run rate, up 169% year over year, while processing 2.4 billion “agentic work units,” signaling a shift from charging for seats or tokens to charging for completed machine work.
Microsoft, Salesforce, and ServiceNow are all building the same kind of toll booth — whether it’s Microsoft’s $15/user/month Agent 365 layer plus Copilot credits, Salesforce flex credits, or ServiceNow’s governed operational actions, vendors are keeping seat pricing and adding a second meter for delegated agent work.
The real risk isn’t just model cost anymore — it’s contractual lock-in — Nate highlights SAP’s 2026 API policy as a warning that agent access may be blocked or rerouted through vendor-approved pathways, making the first question legal and commercial, not technical.
Most teams still optimize for tokens while the market is moving to workflow economics — he points to developers burning 8 billion tokens in a month and argues that builders need to understand whether they’re billed for reads, writes, approvals, executions, failed actions, or all of the above.
A fair agent license is forecastable; a rent-seeking one is deliberately foggy — Nate’s test is simple: transparent meters, exportable usage, caps, differentiated billing by action type, and governed third-party access are fair; vague AI fees, expiring credits, hidden overages, and “security” language used as lock-in are not.
The worst time to negotiate agent pricing is after your workflows depend on it — his practical advice is to push these questions before renewal or rollout, including whether agents acting for users are covered, whether failed actions count, and whether lower human seat counts should reduce your SaaS bill.
Nate opens with the headline that Salesforce’s Agentforce reached an $800 million ARR run rate, up 169% YoY, on 2.4 billion “agentic work units.” His point is that this is not token pricing in disguise — Salesforce is explicitly charging for actions agents complete inside the platform, and that should make every buyer ask what exactly they’re paying for when work moves from a person to a machine.
He frames two decades of SaaS as a simple, hugely profitable conversion of work into seats: 10 people on a CRM meant 10 licenses, easy forecasting, easy multiples. That logic breaks when an agent can read Salesforce, update Jira, trigger ServiceNow, and never “sit” in the software as a human user would — the work still happens, but the old unit of value no longer fits.
Salesforce is the cleanest case: a rep may still have a seat, but the agent identifying customers, summarizing cases, or triggering workflows also burns flex credits. Microsoft does the same in hybrid form through Microsoft 365 Copilot seats plus Copilot Studio credits for answers, actions, grounding, and “premium reasoning,” while ServiceNow reframes itself as the governed substrate for operational actions like access provisioning and incident escalation. Nate’s throughline is simple: the seat stays, but delegated work gets billed separately.
He says even modest agent usage at a 100-seat company can become hard to model once runtime credits and premium actions kick in. The anecdote that sticks is his conversation with a developer who burned 8 billion tokens in a month — and Nate’s reaction is basically, that doesn’t even surprise me anymore, which tells you how fast usage is exploding while procurement still lags behind.
The sharpest warning comes with SAP’s 2026 API policy, which restricts AI systems that plan, select, or execute API call sequences outside SAP-approved architectures. Nate translates that bluntly: if you want outside agents touching SAP data, your first question is not whether it’s technically possible, but whether your contract even allows it.
Nate gives a buyer-side checklist: visible meters, sensible billing units, predictable forecasting, separate treatment for reading vs drafting vs writing vs executing, caps, exportable logs, and no billing failed work like successful work. The bad version is the opposite — vague AI charges, your own data becoming a paid privilege, expiring credits, hidden meters until renewal, and commercial lock-in dressed up as safety language.
He turns directly to developers here: most cost-aware teams still think in tokens, but production agents now need to understand workflow units, contract terms, and which tools are expensive or reversible. His line is memorable because it feels operationally true: an agent that treats every tool call the same regardless of budget is “an incident waiting to happen.”
Nate closes with practical negotiation advice: ask up front whether agents acting on behalf of users are covered, whether third-party agents get the same governed path as native ones, whether failed actions count, and whether seat counts should come down if agents absorb real work. Otherwise, he says, you end up in the worst hybrid of all — the old seat bill plus a new, opaque agent-consumption bill that only becomes obvious after the workflows are mission-critical.
Share
Keep Reading
The Weekly Echo. The inbox-shaped summary of what mattered.
New editorials announced here.

Playbook
“Tasteful Skills” argues that the best agent skills are not documentation or best-practice lists.

Playbook
Learn how tasteful prompting helps you move beyond generic AI output by shaping context, style, and judgment from the start.

Playbook
OpenAI shipped /goal for the Codex CLI. It turns a prompt into a persisted, self-continuing contract.