Blog
AI Agents
Building, deploying, and managing autonomous AI agents for workflow automation, customer support, internal operations, and more.
711 articles in this category
Does a Government Stake in an AI Company Make AI Sovereign? What Canada's Cohere Deal Actually Buys
Canada's up to C$1.6 billion Cohere stake buys equity and company commitments, not control of any agency's AI. Sovereign AI is a property of each deployment: who holds the code, the keys, the model choice and the exit.
Binance and Allium: What Two October Breaches Mean for Financial Firms Running AI Agents
About $6.3 billion was taken from Binance and Allium revoked its customers' API keys in the same week. What is confirmed, what is not, and what the two incidents mean for financial firms handing credentials to AI agents.
Dormant AI Agents Keep Their Credentials: What the 76% and 21% Numbers Mean for Governance
Arrakis telemetry found about 76% of enabled agents had not run in 60 days, and Deloitte found only 21% of organizations report mature agent governance. What the two numbers do and do not prove, and how to retire an agent's access.
Which Consultancy Deploys Copilot, Gemini or Bedrock on Your Own Data? What a Deployment Partner Must Leave You Owning
Copilot, Gemini and Bedrock all promise not to train on your data, so that is not the question to ask a consultancy. The question is who owns the connectors, agents and policies it builds, and US copyright law does not default in your favor.
NemoClaw Sandboxed Agents With NVIDIA NeMo Guardrails: What Each Layer Does and How to Deploy Both
NemoClaw and NVIDIA NeMo Guardrails are two separate projects: the sandbox limits what an agent can reach, the rails check what it says. What a deployment with ibl.ai combines, and which layer handles jailbreak defense, PII, RBAC, audit and network isolation.
Enterprise Alternative to Lovable or Replit for Internal Tools: Apps a Coding Agent Builds, on a Platform You Run
Lovable, Replit, Bolt and v0 all sync code to GitHub and sell SSO on higher tiers, so the real enterprise question for internal tools is who operates the platform behind the app. A fair comparison, with published prices, and where ibl.ai's Agentic Vibe differs.
Agentic LMS: The AI-Native LMS With an Agent in Every Course
Agentic LMS is ibl.ai's AI-native learning management system: an AI agent grounded in each course, AI-assisted authoring and rubric grading, on infrastructure you run, compared honestly with Canvas and Moodle.
What Is Agentic Vibe? Build Enterprise AI Apps With a Coding Agent and Deploy Them on Your Own Platform
Agentic Vibe is ibl.ai's MIT-licensed toolkit of more than 150 skills that teaches Claude Code, Codex, Cursor or Copilot to build a complete enterprise AI app, with SSO, agents, roles, memory, analytics and billing wired in, as code in your own repository.
The AMA Says Clinical Authority Is Earned. That Is an Infrastructure Bill.
The American Medical Association published a governance framework for agentic AI on 13 October 2026, built on the principle that clinical authority is earned through evidence and maintained through demonstrated performance. Each of its four questions resolves to a system a health system has to run, not a policy it can write.
Perplexity Open-Sourced Its Agent Sandbox. The Network Leaked, Not the VM.
Perplexity open-sourced SPACE on 15 October 2026 under Apache-2.0, the Firecracker microVM sandbox behind its Computer product. Its own published evaluation records no escape from the VM to the host in 108 attempts, and some attempts that did get around network restrictions, which is the result worth reading closely.
CERT-In Classed AI Agents as Attack Vectors, Not Targets
India's CERT-In issued advisory CIAD-2026-0049 on 15 October 2026, documenting AI agents that exceeded their task authorization and reached live production systems. None of the affected organizations found it themselves, and every control CERT-In recommends is a property of the perimeter rather than a property of the model.
Parallel Agents Shipped. The Audit Trail Became a Graph
OpenAI added parallel agents to GPT-6 Astra Pro in ChatGPT on 16 October 2026. OpenAI published no latency numbers and the one independent test found about 9 percent, so the thing that actually changed is governance: access, arbitration, audit and cost attribution all stop being linear.
Tencent's Hy-Memory-30B: an Apache-2.0 Agent Memory Writer
Tencent Hunyuan released Hy-Memory-30B-A3B on 15 October 2026 under Apache 2.0 — a 30B/3B-active model whose only job is writing agent memory. It beats Claude Opus 5 by 0.87 points on average, and by 0.01 on one harness: the news is governance, not capability.
Agents Can Now Reverse Engineer Closed-Source Software. What REA Means for AI Vendor Trust.
REA is an MIT-licensed MCP server and CLI that connects a coding agent to Ghidra-class reverse-engineering tools, and it passed 298,000 GitHub stars by 17 October 2026. Software opacity was never a security control. It is now not even a practical one.
AI Admin Separation of Duties: Who Sees the Policies Tab
ibl.ai's organization settings split Management into eight sub-tabs and gate six of them behind their own permission, which means user administration and policy administration are separate grants. This post gives the shipped permission names, maps them onto NIST SP 800-53's AC-5 separation-of-duties and AC-6 least-privilege controls, credits the in-tenant admin RBAC the managed platforms do ship, and shows where it stops: you audit the provider plane through someone else's attestation rather than by reading the enforcement code and the audit log yourself.
Meta's Muse Spark Open Is Open-Weight, Not Open Source. Read the Licence.
Meta released Muse Spark Open on 15 October 2026 — 816B total parameters, 42B active, 1M context. It is open-weight under Meta's own Muse Model License, not open source, and the BF16 checkpoint is about 1.5 TB. Both facts decide whether you can actually own it.
Constrained Decoding Models Are Not a New Architecture
ScaleDown launched a family of task-specific models it calls Constrained Decoding Models in mid-October 2026. Constrained decoding is a well-documented decoding-time technique, not a new architecture — and on ScaleDown's own benchmark page, its paid extraction model leads GLiNER2.5, a free Apache-2.0 model anyone can download, by 0.2 percentage points.
Fine-Tunes Beat Frontier Models. Not Junior Analysts.
The claim going around financial services is that open-weight fine-tunes now do the work banks pay junior analysts for. Half of that is measured and true: Bridgewater's Qwen3-235B fine-tune hit 84.7% accuracy at 13.8x lower inference cost than frontier models. The other half is also measured, and it is false — on GAUGE, the benchmark graded against 1,001 real professional valuations, the best agent scored 53.4 against a junior-analyst mean of 66.0.
Who Owns the Evidence That Your AI Agent Was Tested?
The EU moved its high-risk AI deadline to 2 December 2027, so a compliance date is no longer the reason to test an AI agent. Model churn is, and the test evidence only helps if you own the database it is written to.
Meta's Muse Wonder Full Has No API: Distribution Is the Lock-In
Meta's Muse Wonder Full ships with no API and no published token price — it is reachable only through a Muse Code subscription that defaults to letting Meta train on your content, which puts this launch's lock-in in distribution and the data default rather than in the memory layer.
PII Detection vs HIPAA Safe Harbor: Mapping the Gap
ibl.ai's agent PII filter detects thirteen entity types. HIPAA Safe Harbor names eighteen identifier classes. This post maps one list onto the other, names the eight classes no entity-type detector enumerates, and explains what the four-tier Incognito control decides that a BAA does not.
A 9B Fine-Tune Beat Opus 4.5. Who Holds the Weights?
Coinbase post-trained Alibaba's open-weight Qwen3.5-9B on its own Onramp fraud data and reported beating Claude Opus 4.5 on all four metrics of its internal benchmark, with 55% lower serving latency and under $100 of training compute — and the more interesting half of the story is Part 2, where every newer frontier release scored worse than its predecessor on that same benchmark.
Can an Ontology Become Your Last System of Record?
A semantic layer becomes a system of record only when it originates state that exists nowhere else — and most never do, because they project over source systems that stay authoritative. This post gives four tests, one verified case where a semantic layer genuinely holds the record, two where it does not, and the custody question that outlasts the architecture.
Why an Untracked AI Agent Retry Becomes Firm Overhead
Three bar authorities now say the same thing about AI costs a firm cannot attribute to a specific matter: they belong in overhead, not on the client's bill. That turns an agent's opaque retry loop into a fee-ethics question, and it makes per-matter cost attribution a billing requirement rather than a dashboard feature.
About AI Agents
AI agents represent the next evolution in enterprise automation—intelligent systems that can reason, plan, and take action autonomously. Unlike simple chatbots, AI agents handle complex multi-step tasks across customer support, internal operations, data analysis, and specialized workflows. Discover how agentic AI is transforming how organizations operate.