Claude Code shipped dynamic workflows and pi cloned them inside a day. That's the real moat conversation nobody wants to have. In agent tooling, features aren't defensible. The clone ships before your launch tweet gets cold. What compounds is the stuff that's annoying to copy: memory, trust, the workflows people already built on top of you.