All insights
InfrastructureSeptember 14, 2026 · 9 min read

Token minimizing: price finished work, not tokens

Per-token prices fell about 98% since 2024 and corporate AI bills still rose. The spend is not in answers, it is in agents re-telling the problem — so the unit that matters is cost per finished task.

Manifold Studio · automotive search & data

Token minimizing: price finished work, not tokens — cover image

Audio briefing

Listen to this insight

Extraction-ready summary

  • A 2026 study of eight frontier models found agentic coding averaged 4.17M tokens per task against 3,390 for code chat, with runs on the same task varying up to 30x.
  • Per-token comparisons mislead: a cheaper model with a 75% success rate can cost more per resolved task than a frontier model at 95%, once retries and fallbacks are attributed.
  • Separate deterministic automation from model steps and agent loops before you budget. Rules are free per run; agent loops are a procurement decision.
  • Attach the smallest model that clears the task, reserve frontier models for irreducible ambiguity, and make someone's name appear on every agent's invoice line.

The price of intelligence has collapsed and the bill has gone up anyway. That is the first thing to understand about token economics in 2026: per-token rates are down roughly 98% since early 2024, according to Cockroach Labs' analysis of agentic spend, while enterprise AI invoices keep climbing. Nothing is broken. The unit being priced changed, and almost nobody changed their accounting with it.

This is not a piece about saving pennies on inference. It is about the three decisions that actually determine whether a corporate AI program pays for itself: what you let a model decide, which model you attach to it, and who in the organization is accountable for the credits it burns.

The number that explains the bill

A 2026 study of eight frontier models working SWE-bench Verified tasks, published on arXiv as 2604.22750, measured what agentic coding actually consumes: an average of 4.17 million tokens per task, against 3,390 for code chat and 1,190 for code reasoning. Same models, same benchmark, roughly a thousandfold difference between asking a question and letting an agent work.

The same study found input-to-output ratios around 154:1, runs on the same task varying by up to 30x in total tokens, and no consistent quality gain on the expensive runs. Vantage's session analysis lands in the same place: input tokens re-sent on every turn dominate the total, because turn 40 carries every file read and every failed attempt from turns 1 to 39.

So the spend is not in the answers. It is in the retelling of the problem.

Price finished work, not tokens

A budget model at one cent per call with a 75% success rate costs more per resolved task than a frontier model at three cents with a 95% success rate, once you count the retries, the fallbacks and the human glance on the failures. The per-token comparison says the opposite, which is why so many downgrades quietly invert themselves.

Three amplifiers do the damage:

Silent retries. A weaker model fails schema validation more often, and most harnesses simply re-run the call, sending the entire prompt again. Token usage can multiply two to five times with no change in traffic, and the extra spend is attributed to "normal load".

Fallback chains. Cheap model first, frontier on failure, is correct engineering and double billing. Every failed cheap attempt is paid for twice.

The prompt-length tax. A weaker model needs more examples and more instruction to hit the same quality bar, and that heavier prompt is then re-sent on every retry and carried into every fallback.

The metric that belongs on the dashboard is cost per successful task: total spend divided by tasks that ended usable, with retry rate and effective prompt size reported beside it. If your observability reports tokens by model but not cost by resolved task, you are reading the one number most likely to be wrong.

Define what is AI and what is automation

Most corporate AI spend is really three different things wearing the same badge, and they fail in completely different ways.

Layer

Deterministic code

What it is
Rules, cron, SQL, webhooks, templates, constraints
Cost profile
Free per run
Failure mode
A rule is wrong, visibly
Who owns it
Engineering

Layer

Model step

What it is
One bounded call: classify, extract, tag, summarize
Cost profile
Cents per thousand
Failure mode
Malformed output, quiet drift
Who owns it
The product owner

Layer

Agent loop

What it is
Model chooses its own steps and tools
Cost profile
Dollars per task
Failure mode
Loops, re-reads, runaway context
Who owns it
A named operator

The discipline is a single question: can the rule be written? If yes, write the rule. A model belongs only where the input is genuinely unconstrained language or image, or where the branching is too wide to enumerate. Everything else is code, and code is free per run, testable, and boring in the way that finance departments love.

This distinction is also the answer to the accountability question. A rule that runs ten thousand times is a fixed cost. A model call that runs ten thousand times is a variable cost with a tail. An agent that runs ten thousand times is a procurement decision.

The routing ladder

T0
Deterministic code
Same input, same output
Cron, SQL, webhooks, rules, templates, constraints
$0 in tokens
T1
Small model
Bounded task, schema-checked
Classify, extract, tag, summarize, draft, route
$0.14–$1.00 /M in
T2
Mid model
Work with a plan
Multi-step builds, diff review, content assembly
~$2.00 /M in
T3
Frontier model
Irreducible ambiguity
Production scope, migrations, ambiguous failures
$4.00–$5.00 /M in
Escalate one rung on two failed validations, not on instinct. Come down a rung when a task repeats the same way three times.
Fig. 01 — The routing ladder. Rates are published list prices per million input tokens as of November 2026, and they move every quarter.

Attach the smallest model that clears the task, and reserve the frontier for the work that cannot be specified in advance: production-scope refactors, migrations, security review, and the failures nobody can reproduce. That is the same argument FrugalGPT made in 2023, where a learned cascade matched frontier quality with up to 98% lower cost, and RouteLLM later demonstrated on MT-Bench at 85% lower cost while holding 95% of GPT-4 quality and sending only 14% of queries to the strong model.

Published list rates per million tokens, as of November 2026:

Tier

Budget

Example
DeepSeek V4-Flash
Input
$0.14
Output
$0.28

Tier

Budget

Example
GPT-5.6 Luna
Input
$0.20
Output
$1.20

Tier

Small

Example
Claude Haiku 4.5
Input
$1.00
Output
$5.00

Tier

Mid

Example
Claude Sonnet 5 / Gemini 3.1 Pro
Input
$2.00
Output
$10–12

Tier

Frontier

Example
Claude Opus 5.5
Input
$4.00
Output
$20.00

Tier

Frontier

Example
GPT-5.6 Sol
Input
$5.00
Output
$30.00

Note the output column. Output is five to six times input on most flagship models, which means verbose reasoning is not free, and a cheaper model that writes three times as much to reach the same answer can lose.

Three levers stack on top of list price, and they are larger than the choice of model: prompt caching (Anthropic charges 0.1x base input on a cache read, 1.25x to write a five-minute cache), the batch API (50% off on both OpenAI and Anthropic), and context discipline. A cached batch request can land near 5% of a standard, uncached one.

Where the credits actually die

Creators lose credits to debugging, and the debugging is usually the agent failing to understand the situation rather than the model being too small. Drew Breunig's catalog of context failures is the cleanest map: poisoning, where one bad fact gets referenced forever; distraction, where a long context overwhelms what the model already knows; confusion, where irrelevant facts bend the answer; and clash, where tools and instructions contradict each other. Anthropic's own engineering guidance says the same thing more bluntly: as token count rises, the ability to recall accurately falls.

Four practical consequences for anyone paying the bill:

  1. Long sessions are a cost center, not a virtue. Around 200k–300k tokens of context is where careful teams start a fresh thread rather than pushing on.
  2. Isolate before you escalate. A subagent reading one directory costs a fraction of a frontier model re-reading the repo. Escalation should buy reasoning, not context.
  3. Cap retries at two, then escalate with the trace attached. An uncapped retry loop at turn 40 is the most expensive object in most AI budgets.
  4. If a human cannot see the failure in one line, the agent cannot either. Unclear errors are an observability problem. Structured logs, the exact command, and the exact assertion are worth more than any prompt rewrite.

Who owns the credits

The average user does not know which resource to spend, what it costs, or who to ask. That is not a training problem, it is a governance gap, and it shows up as a line item nobody can defend at quarter end.

What works is unglamorous:

  • A named owner per agent or workflow, not per team.
  • A published ladder: what each tier costs, what needs approval, who approves it. One page.
  • Per-run caps on tokens and tool calls, enforced in code rather than in policy.
  • Monthly showback by workflow, including retries and escalations, so a downgrade that inverted itself is visible before finance finds it.

What to do this week

The work is small and it is all measurement.

  1. Instrument cost per resolved task, retry rate and effective prompt size for your three biggest AI workflows.
  2. Take the three most frequently repeated model calls and ask whether they are rules. Convert the ones that are.
  3. Write the escalation contract down: what triggers a rung up, what triggers a rung down.
  4. Turn on caching for anything with a static system prompt and batch anything that does not need an answer in the next hour.
  5. Put a name on every agent in production, and put that name on the invoice line.

Tokens are the cheap part of this. Ambiguity is what corporations are actually buying, and ambiguity is priced by the hour.

Creative compliance gate

No creative reaches a flight before the manufacturer signs it off.

Every piece of creative named in this insight, including anything produced with AI assistance, clears the brand’s review before media spend, organic scheduling or event capture goes live. The four rules below are the ones that keep a campaign on its date.

  1. 01

    Submit the asset pack, not the idea

    Stills, cut-downs, captions, alt text and end cards travel together, with the intended flight dates attached. Reviews stall on packages that arrive in pieces.

  2. 02

    Build the review into the flight date

    Two to three weeks covers most OEM programs. Any clip carrying a product claim, an incentive or a co-op match needs longer, and a launch week is the wrong time to find that out.

  3. 03

    Nothing flies unapproved

    That includes the "test" post, the organic support cut and the paid boost of an organic clip. If it is public, it was published, and compliance will treat it that way.

  4. 04

    Store the approval with the asset

    Keep the sign-off reference and its expiry alongside the creative. Reusing an approved cut saves the next review; reusing an expired one restarts it.

Answer engine fuel

Questions buyers actually ask

What metric should replace cost per token?

Cost per successful task: total spend across every attempt, retry, fallback and tool call, divided by the tasks that ended in a usable result. Token prices say nothing about how many attempts a model needs, so a 2x cheaper model with a 75% success rate can cost more than a frontier model with 95%.

How do I decide between a model and ordinary automation?

If the rule can be written, write the rule. Deterministic code — cron, SQL, webhooks, templates, constraints — is free per run, testable and predictable. Models belong only where input is genuinely unconstrained language or imagery, or where the branching is too wide to enumerate.

When should a small model be swapped for a larger one?

Attach the smallest model that clears the task, and reserve frontier models for work that cannot be specified in advance: production-scope changes, migrations, security review and unreproducible failures. Escalate on two failed validations, not on instinct, and come back down a tier when the same task repeats identically.

How much do prompt caching and batching actually save?

Anthropic charges 0.1x the base input rate on a cache read and 1.25x to write a five-minute cache; the batch APIs at OpenAI and Anthropic are 50% off. Stacked, a cached batch request can approach 5% of a standard uncached call. Neither changes quality; both change what you pay for the same prompt.

Why do agents burn so many credits debugging?

Four failure modes account for most of it: poisoning, where one bad fact is referenced forever; distraction, where a long context overrides what the model knows; confusion, where irrelevant detail bends the answer; and clash, where tools and instructions contradict each other. Capping retries at two and restarting with a clean context beats extending a long session.

Primary sources

Filed under Infrastructure

More from this desk →

The brief

One email when a platform actually changes the rules.

New analysis, plus the moments Google or an assistant quietly changes how inventory, service or parts get found. No newsletters about newsletters.

Manifold

Automotive retail, written for the machines that now do the searching: vehicle sales first, with service, parts and accessories behind them.

Inventory first. Feeds second. Bids last.

At a glance

VERTICAL — automotive retail

SCOPE — sales · service · parts

STACKS — legacy commerce, 2009–2015

MODEL — audit first, then retainers

© 2026 Manifold — all rights reserved

Built for answer engines. Read by humans.