Week 14 · 2025-03-31 → 2025-04-06 · 11 newsletters

The Vortex Arrives

tariffs-and-the-vortex · career-identity-and-trust · operator-craft · ai-and-infrastructure-risk

The first week of April 2025, the week the Rose Garden tariffs landed. The inbox was sparse, ten newsletters across seven days, but it was the kind of sparse where each piece carried weight. One macro siren, two long career confessions, two operator notes from people who actually run things, and a Next.js CVE that quietly affected every version ever shipped. No padding needed.

Macro: The Vortex Finally Arrives

The Last Bear Standing wrote the week's defining piece with "The Vortex," and the framing is the one to remember: "the median stock peaked back in December, DOGE took office in January, Tariff-talk arrived in February, soft data started screaming in March. Now, it's April and we've passed the point of no return." The argument is that this week's Rose Garden tariff announcement is not a negotiating posture and not a stick or a carrot, but "a wrecking ball, intended to dismantle the status quo." The S&P had already taken its ten percent drawdown by early March. Dip buyers held the line for three weeks while traders called the political bluff. The bluff was not a bluff.

The reason the piece lands is that the author has been writing this turn for months and is now collecting on the call. The line that matters most: "It's not a policy to juice economic metrics, it's one that will bring immediate pain." That is the regime change. For an operator reading it the first week of April 2025, this is the moment the cycle pivoted from "are we in a correction" to "are we in a different economy." Everything that comes in Q2 and Q3 (supply chain repricing, capex pauses, currency rebalancing) starts from this week.

The take: when a writer who has been calling for a turn for a year says "we're past the point of no return," and the news catches up to them the same week, you treat that piece as the timestamp on a regime change, not as one more market note.

Career and Identity: The Quiet Confessions

The strongest non-macro thread of the week was two writers who built successful careers and then admitted, in long form, that the career was the wrong fit. Alec McNayr wrote "Make Something Worth Following," a confessional about ending the 2010s as an upper-mid executive at a company that began as his 150-person creative agency, got acquired four times, and ended up inside AT&T's WarnerMedia (now Warner Bros Discovery). His phrase for it was "literally and figuratively, clothing that didn't fit." The Mad Men allusion ("that's what the money's for") is the line a lot of operators will recognize.

Abby Falik at Taking Flight wrote "Trust the Bird, Not the Book," a meditation on the small surrenders we make to digital authorities (Google for routes we know by heart, Claude for "best" titles) and what that does to self-trust. The bird-watching frame, sourced from a family teaching ("when the bird and book disagree, trust the bird"), is the kind of soft heuristic that lands harder than it should. Her arc from hummingbird in her 20s and 30s ("burning so much energy existing that they're trapped in a perpetual cycle of flying to eat and eating to fly") to pelican in her 40s ("gliding, discerning, diving deep, but only when it's needed") is the metaphor a lot of forty-something operators will quietly clip and keep.

Winning Therapy ran the third version of this in "On Living Fully, Changing The Past, and The Ultimate Competitor," a Sunday almanac of ten "winningcore" beats. The one that fits the week's mood: "the path of ascension starts with running towards this pain. Choosing the short term step down for the long term ascent upwards." That is the same argument McNayr and Falik are making in different registers.

The take: three pieces, three voices, one through-line. The week's career writing was about people who got to the top of a ladder and admitted out loud that the ladder was leaning on the wrong wall. The fact that it landed the same week as the tariff news is not coincidence. Regime changes outside force regime changes inside.

Operator Craft: Reviews, Principles, and Compliance Conversations

Two pieces this week were small, sharp operator notes. Ami Vora at The Hard Parts of Growth wrote "Use leadership reviews to get principles, not (just) answers," and it is the kind of post you forward to a PM lead. Her argument is that leadership reviews are great for early-stage unblocking but become a bottleneck once you have product-market fit, and the fix is to use reviews to extract principles ("is our principle here to optimize for Y users over Z users?") instead of one-off rulings. The reframe is right: a leadership review that produces a principle is leverage; a leadership review that produces an answer is a meeting.

Fintech Compliance Chronicles ran its fifth podcast episode with Lauren McCollom, SVP and Head of Embedded Finance at Grasshopper Bank, recorded at Fintech Meetup 2025. The interview is part of a series Zarik Khan is running on compliance voices in embedded finance, and Grasshopper sits in the interesting spot of being a digital bank serving the BaaS and fintech middle market. The substance is in the conversation about how a bank thinks about API-driven partnerships when the regulatory environment around BaaS has gotten visibly tighter since 2023.

The take: the best operator writing this week was the kind that does not need to be long. Vora's piece is two screens and contains a principle a Series B PM team can use Monday morning. The compliance interview is the kind of slot most weeks do not have time for and that becomes more valuable in a week where everything else feels like noise.

AI and Infrastructure Risk: A Quiet CVE and a Document-Processing Roundup

Client Server ran "Next.js middleware was completely optional until 2 weeks ago," a clear-eyed walkthrough of the CVE that Yasser Allam and Rachid Allam disclosed two weeks prior. A 9.1 CVSS, present in every version of Next.js ever shipped, exploitable by sending a single x-middleware-subrequest header that tells Next.js the middleware has already run when it has not. In recent versions the recursion guard caps at five, so the attacker just sends middleware:middleware:middleware:middleware:middleware and the framework happily skips auth. Jacob Voytko's framing ("this bug checks all of my boxes for is this a fun CVE?") undersells what is actually a serious load-bearing-infrastructure story.

Sahar Mor at AI Tidbits ran his monthly LinkedIn Highlights for March 2025, a roundup of seven posts on document processing and agent patterns. The standout was GOT-OCR 2.0, a 580M-parameter unified encoder-decoder OCR model that reportedly outperforms models ten to a hundred times its size on document text. The other links in the issue point to Vellum's levels of agentic behavior framework and Skyvern for web automation. Useful as a pointer set, less so as a thesis piece.

The take: the Next.js CVE is the kind of story that gets six-figure-impact attention from security teams and almost zero attention from product teams, and that asymmetry is the actual risk. If your stack is on Next.js and you have not patched, this is the most important link in the wrap.

Health and Epistemics: Mares on Formula

Justin Mares at The Next wrote "Why American formula is toxic," and the better half of the piece is not the formula argument but the meta-argument about how we generate knowledge in complex systems. His claim is that randomized controlled trials are well-suited to single-intervention pharmaceuticals and poorly suited to multi-variable nutrition questions, and that "following the science" as a hard rule would have left us smoking until the 1970s and eating trans fats until 2003. You do not have to share his priors on seed oils to take the epistemics seriously: in complex systems with many interacting variables, the absence of an RCT is not evidence of safety. The formula-specific arguments point to a thread from Zach Ranen on the ingredient comparison between American and European formula.

The take: the most defensible version of Mares' argument is the one about the limits of RCTs in nutrition science, not the specific formula claims. That is the version operators in health and consumer brands should clip.

Quiet Notes

Ben Kassoy at A Strawberry Spinning Like A Dreidel sent a register-for-my-free-virtual-writing-class reminder and some photos from Mexico City with "no context whatsoever." Worth flagging only because it is the kind of low-stakes hello that fills a sparse week and reminds you that not every newsletter slot has to be a thesis.

Three Takeaways from the Week

The Rose Garden tariff announcement is the week's regime-change event, and The Last Bear Standing's framing of "The Vortex" is the cleanest one-sentence summary of what changed: this is not a negotiating posture, it is a retreat from free trade for the purpose of realignment, and it will bring immediate pain. If you read one macro piece from this week a year from now, that is the one.

The career-confession cluster (McNayr, Falik, Winning Therapy) is not a coincidence. The same week the macro regime shifts, three writers from three different corners of the inbox publish long-form admissions that the ladder they climbed was leaning on the wrong wall. Outside forces give people permission to ask inside questions, and this week was a permission slip.

If you only revisit three pieces from the week, I would suggest The Last Bear Standing's "The Vortex" as the timestamp on a regime change, Alec McNayr's "Make Something Worth Following" as the career-confession that pairs with it, and Client Server on the Next.js middleware CVE as the infrastructure story most teams missed. Sparse week, real signal.