Founder Control Is the Weakest Way to Protect Your Mission. Build a Fortress Instead.

There is a ghost in your board meetings, and everyone in the room defers to it.

Someone proposes the obviously right thing, then hedges. The market might not like it. Might? Did anyone in the room actually poll your investors? Eric Ries has built a career on questions like this. His last book, The Lean Startup , gave Silicon Valley its operating system, the playbook a generation of founders used to build. His new one, Incorruptible , takes on the harder problem that comes next: how to scale a company without losing its soul. I sat down with him for a long conversation about it, which you can watch in full here .

The soul problem starts with that ghost. "Who is the market," Ries asked me, "and why are they in this meeting?" You cannot interrogate it. You cannot survey it. Nobody in the room has actually polled your investors. Yet this thing warps decisions at every level, quietly pulling good companies toward mediocrity and worse.

Ries has a name for the ghost. He calls it financial gravity, "the psychological pressure that shapes behavior and, eventually, values based on the desire to succeed at future transactions." His book makes one argument above all others. Only one thing reliably resists that pull. Not a strong founder. A strong structure.

Control feels like protection. It is the weakest kind.

Every mission-driven founder reaches for the same tool first. Keep control. Super-voting shares, a board you dominate, the guarantee you can always overrule the room. It feels responsible. You hold the values, so you hold the wheel.

Ries grants that founder control works. When we spoke, he called it the model of "a despotic emperor for life" and pointed to Mark Zuckerberg at Meta. "That is effective," he said, "but it has some downsides." The downsides are the ones founders never plan for. Control concentrated in one person dies with that person, decays with that person's judgment, and converts to cash the day that person takes a hard enough offer. Founder control is not really a structure. It is you, promising to stay strong forever. A guardian made of one human is a guardian with an expiration date.

Success makes you vulnerable.

The counterintuitive part is that the stronger your company gets, the more dangerous its position. "The more successful an organization becomes," Ries told me, "the more valuable it becomes as a target." Success is what puts a target on your back, and no single person can hold the line against it. Anyone can be pressured, outvoted, or bought.

Whole Foods is what that looks like. John Mackey spent forty years building the company that wrote the book on conscious capitalism, and it was profitable every quarter it was public. None of that saved it. "None of this would have mattered, however, if not for the governance structure of Whole Foods," Ries writes. Built to standard best practices, the company had no ability to resist a hostile takeover, so when gravity pulled the stock down, the hedge fund Jana Partners forced a sale to Amazon and pocketed about $300 million for six months of work. The market had manufactured the very problem it then arrived to solve.

So Ries points to something that does not depend on a person at all. He calls it a governance fortress, and builds the idea from Costco, whose founder Jim Sinegal wired the defenses into the company at its 1985 IPO, before any threat appeared, because he understood that success attracts predators. Ries writes that Sinegal was "creating what I call a governance fortress," then draws the distinction that matters most. "Unlike founder control, the fortress wasn't reliant on any one person. It is a property of the organization itself."

That line is the whole strategy. You are not trying to be strong enough to hold the mission. You are building something that holds it without you.

Here is how the fortress goes together, in the order a founder should build it. One caveat before step one. Costco is not a public benefit corporation. Sinegal built his fortress in 1985, and Delaware did not create the PBC until 2013, so he poured his foundation with the tools he had. Take Costco as proof the walls hold. Then start with the cheaper foundation he never got to use.

1. Lay the foundation: the PBC.

Convert to a public benefit corporation. It is a short charter filing that writes your purpose into the company and gives directors legal cover to weigh mission against profit. It is cheap and fast. It is also, on its own, weak. It stops one narrow attack, the lawsuit claiming a mission decision failed to maximize shareholder value, and nothing more. Treat it as the slab you pour before the walls go up, not the fortress itself.

2. Set the keystone: a supermajority of all shares.

This provision turns a pile of defenses into a fortress, and the mechanism is the trick worth understanding. Costco requires a two-thirds vote of all shares outstanding to amend protected charter provisions, not two-thirds of the votes actually cast. Ries explains why that distinction changes everything. "In a typical shareholder vote, abstentions don't count, but under Costco's rules, every share that doesn't vote yes effectively votes no." An activist has to win the active consent of two-thirds of every shareholder, not just arrive with a motivated minority. In 2014, raiders won 72% of votes cast to declassify Costco's board and still lost, because that was less than half of all shares.

3. Lock the keystone to itself: the self-reinforcing lock.

A supermajority only protects your mission if it also protects itself, and this is the part founders miss. Say you require two-thirds of all shares to change your mission provisions. Good. But what vote does it take to remove that two-thirds requirement in the first place? If the answer is a simple majority, you have built nothing. An activist wins one ordinary vote to strip out the supermajority rule, then a second ordinary vote to gut the mission. Two easy steps, and the fortress is gone.

The self-reinforcing lock closes that loophole. It requires the same two-thirds vote to change the two-thirds rule itself. Picture a deadbolt with its screws on the inside of the door instead of the outside. Nobody can quietly unscrew the lock and let themselves in. The wall can no longer be voted away by the people it was built to stop.

4. Bind the directors: the board mission pledge.

Your board is a threat vector too. Left to default training, directors drift toward investor interests, because that is what the governance industry taught them to do. Whole Foods learned this the hard way. Mackey had filled his board with venture investors whose incentives diverged from the mission, allies as long as the company went where they wanted and no further. Ries's fix is a board mission pledge, directors committing in the bylaws to "use their broad discretion to support the mission and consider it in every decision." The PBC shields directors from outside pressure. The pledge points them at the mission on purpose.

5. Raise the outer walls.

The remaining defenses each close one avenue of attack. Their power is cumulative, because an attacker has to beat all of them at once.

  • Classified board. Stagger director terms so only a third stand for election each year, which blocks a single-cycle takeover.
  • High proxy access barriers. Require real ownership, 3% or more held for years, before anyone can nominate directors.
  • Advance notice provisions. Require early disclosure of proposals and nominations, which kills the ambush.
  • Poison pill. Trigger automatic penalties against a hostile acquirer building a stake.

None of these alone decides anything. Together they mean no single move breaches the hull.

The cautionary tale: 199 days.

Everything above works only if you build it in time. Twilio is what happens when you do not. Jeff Lawson founded the cloud communications company in 2008 with a mission to "unlock the imagination of builders," took it public in 2016, and grew revenue to $4.15 billion, up 1,400% from the IPO price. By every normal measure, he had won.

But Twilio was exposed on every front. It never became a PBC. It kept the majority-independent board the experts recommend. And Lawson's supervoting shares carried a seven-year sunset, the compromise advisors love to offer, protection now and accountability later. When that sunset arrived and his shares converted to ordinary votes, the guardian vanished.

The countdown that followed ran 199 days. That is how long it took activist investors who owned less than half a percent of Twilio to force Lawson out and seize the direction of his company. Ries, who watched it happen, draws the lesson without flinching. "Once a company can be forcibly pressured from outside, it can never again be fully trusted." The breach came "not because of who took over but because someone could."

The takeaway: decide who decides.

Every choice in this piece comes down to one question. Who decides what your company becomes. In most companies, the ghost decides. That invisible market sits in the room and quietly overrules the mission, meeting after meeting, until the mission is gone. The fortress is how you take that decision back and hold onto it. As Ries put it to me, the fight is rarely about the surface issue. "The question is who should decide."

If your answer is "I stay in charge," you have named a guardian with a lifespan, and you have watched what happens to a beloved founder who runs out of it. The fortress is the version that outlives you.

The founders who lose their mission are almost never the ones who moved too early. They are the ones who waited until they were worth attacking, and by then the market had already decided for them.