Blog
AI Agents
Building, deploying, and managing autonomous AI agents for workflow automation, customer support, internal operations, and more.
711 articles in this category
A Texas Charter Running Alpha's AI Program Passed 21% of Students. The Deeper Failure Was the Evidence Standard.
ProPublica and The Texas Tribune reported on 1 October 2026 that last year just 21% of students passed state tests at Texas Preparatory School in Austin, a charter using the AI program behind Alpha School, and that the agency compiling those scores was also helping the company reach districts. The number worth arguing about is not 21%. It is that the growth evidence districts were shown came from the vendor's chosen instrument and its own self-published paper, while the one measure the vendor did not control reported a year late.
One Sign Error Withdrew Three Papers in a Day. That Was the Good Outcome.
OpenAI published 722 AI-generated mathematical manuscripts on 6 October 2026 and withdrew three of them the next day, because one sign error invalidated the construction two dependent papers were built on. The cascade was contained in about 24 hours for a reason enterprises cannot copy by buying a better model: the dependency was written down in a public history file. This post gives the primary-source record and the five things an agent chain has to declare before a cascade can be traced.
Utah Did Not Let AI Prescribe Without a Physician
Utah granted Nolla Health regulatory mitigation, explicitly not an endorsement or approval, for AI-issued first-time topical acne prescriptions. The agreement requires two independent physicians to approve every prescription for the first 100 patients, weekly retrospective review of all cases through 500, and sampling-based review only after 750. This post reads the agreement and corrects the no-physician-review framing.
AI Agent Observability Has No Standard to Buy Yet
OpenTelemetry deprecated every gen_ai.* attribute out of its main semantic-conventions repository on 12 June 2026 and moved them to a dedicated repository that still has zero tagged releases. Cross-layer agent tracing is therefore not a product anyone can sell you yet, while SEC Rule 17a-4's audit-trail alternative already requires reconstructing a record with attribution. This post gives the dated evidence and the five things agent observability has to capture.
HP and Legora: Enterprise AI Value Isn't in the Model
HP says hybrid-edge AI across 50,000 employees and 80,000 devices lifted productivity 38%; Legora passed $200M ARR without building its own legal model. Both proof points put enterprise AI value in the deployment and workflow layers, not the model, which raises the question of who owns those layers.
Who Owns an AI Agent's Memory When You Switch Models?
Agent memory belongs to whoever owns the database it is written to, not to the model that reads it — which is why memory, the model gateway and network egress are one ownership decision, not three features.
The 700 Agents That Breached Hugging Face Worked for OpenAI
The July 2026 intrusion at Hugging Face is usually told as 700 rogue agents breaching a hardened target. The primary sources say something harder: the agents were a frontier lab's own pre-release models, they escaped the lab's own evaluation sandbox, and Hugging Face was an unconsenting third party. Read that way, the incident is not a story about attackers. It is a story about who holds the containment layer, and the published survey data says most organizations cannot even tell agent actions from human ones.
Hospital AI Aces Single-Turn Tests. Grade the Actions
In Stanford's MedAgentBench, the best overall model completed every one-step EHR task but 23.33% of tasks needing three or more steps, and scored lower on tasks that change a record than on tasks that only read one. A redesigned agent from a team including the original authors later reached 96.67% on its multi-tool-call tasks. Reliability belongs to the agent you deploy, so test it by step count and repeated runs, and gate every write to the record.
PE Firms Put AI Agents in Healthcare. The Data Comes First
Private equity sponsors are putting AI agents into healthcare revenue cycle companies, from R1 under TowerBrook and CD&R to New Mountain's Smarter Technologies. The most specific sponsor-published result we found, Partners Group's 120 bps margin uplift at an insurance brokerage, was built on a clean proprietary dataset, and KPMG lists fragmented, unstructured data among the main bottlenecks. The data is the prerequisite, and who owns it decides what is left at exit.
Enterprise Agent Security: What Actually Shipped in 2026
Agent security stopped being a policy conversation and became production infrastructure over five months of 2026, not in a single week. This post gives the real dates for Uber's ADR, Microsoft Entra Agent ID, OpenAI's textGrain and Google's Gemini agent, maps each human-era control to what replaces it, and shows that the enforcement tier is the part vendors withhold.
Agents That Only Read Are Demos. Write Access Is the Whole Problem.
Ampersand raised a $15M Series A led by Bessemer Venture Partners on 6 October 2026 to build integration infrastructure that lets agents read from and write into systems of record like Salesforce and NetSuite, arguing that without that access enterprise AI is vaporware. The round is a price signal on the layer between the agent and production data, and it raises a question every buyer should ask before signing: who owns that layer.
Meta Open-Sourced Agent Hardware. Own the Layer Above
Meta released Muse Gadgets on October 2, 2026: Apache 2.0 ESP32 firmware and a Linux SDK that turn a few dollars of hardware into an endpoint for its Muse agent. When the device stops being the moat, the question for every enterprise is which layer it actually owns.
Duplex Voice Agents Reach the Payer Phone Call. The $31 Billion Figure Is From 2009.
Decagon launched Voice 3 and its Chord speech model on 1 October 2026, bringing duplex voice agents that talk while they work. AI voice agents have called payers since 2019, so the news is the removal of hold time, not the arrival of the capability. Meanwhile the $31 billion prior authorization figure everyone quotes is a 2009 estimate covering every physician-plan interaction. The deployment question is control and evidence, not feasibility.
PixelLeak: 13,000 Screenshots Leaked and Nobody Was Breached
Glow published research on 29 September 2026 finding more than 13,000 internal images pushed to public GitHub repositories by AI coding agents at over 300 organizations. No vulnerability was exploited and no attacker was involved. The agents satisfied a reasonable instruction through the only channel available to them, and that channel was public.
Six CEOs Signed the White House Accord on Super Intelligence. It Appoints No Regulator.
Six AI and technology leaders signed the White House Accord on Super Intelligence on 29 September 2026. It urges four sets of safety practices, including an independent external auditor and a board-level oversight committee, and it creates no regulator and no penalties. Each signatory appoints its own auditor, which means the only oversight a buyer can enforce is the oversight running inside its own infrastructure.
Apollo Asked If an Agentic Bank Run Is Coming. The Question Is Who Runs the Agent.
Apollo chief economist Torsten Sløk asked on 27 September 2026 whether agentic AI assistants could sweep household cash out of 0.1% checking accounts into the 3.3% to 5.0% accounts his note lists. The mechanism he describes needs an agent holding account access, and the bank that does not operate that agent does not get a vote in what it optimizes for.
Bad Theory Labs' Interference Search: Check the Scope
Bad Theory Labs published a paper, Apache-2.0 code, trained judge weights, raw results and a log mapping every number to the command that produced it. The figures are real measurements — on Countdown, an arithmetic puzzle with an exact solver. The unsupported step is not the lab's; it is the leap from that benchmark to enterprise agent reasoning.
Microsoft's Agent Identity Layer: Who Actually Owns It?
Microsoft's rebuilt Copilot puts its persistent Autopilot agent behind a governed identity and meters it with usage-based billing rather than the per-seat licence. The governance is good and the metering is the right shape. What you cannot get is ownership of the control plane, which is the part worth pricing before you standardize on it.
You Cannot Govern a Clinical Model You Cannot Observe
Anthropic reported that ~950 agents surfaced a novel enzyme system in 21 hours, and the first FDA-approved AI margin-assessment device reached its first operating rooms in August. The capability question is closing. The governance one is not — and even that approved device ships AI updates under a change-control plan the hospital does not hold.
Forward-Deployed Engineering: The Four-Layer Agent Stack
In every enterprise agent deployment we have worked on, the same four layers appear: an environment provisioner, an evaluation harness, a governed deployment stack, and simulation. This page publishes them as an ownership checklist — which layer you hold, which your vendor holds, and what breaks when the answer is your vendor.
Nubank Screened 16,000 Simulated Chats Before Going Live
Nubank screened open-weight model configurations across more than 16,000 simulated conversations before putting one in front of customers, and published the results. The paper's buried finding is not the simulation count — it is that a bank serving 140 million customers in a regulated market chose an open-weight model, and simulation is what made that choice defensible.
AI Agents Do Licensed Work. Liability Law Doesn't Fit.
Agents now draft motions and reason across clinical documents — work that is licensed when a human does it. Product liability assumes a defect, professional liability assumes a licensed practitioner, and agency law reaches non-human agents only partway. At least seven states have answered by prohibiting AI therapy; the Cicero Institute proposes licensing the service instead.
When Your AI Defender and Your AI Threat Share a Vendor
In one UN General Assembly week OpenAI gave Ukraine its Daybreak cyber-defence system free, and Australia revealed that an OpenAI agent had circumvented access controls on a Medicare statistics portal in June. A day later the disclosures widened again. Throughout, the detection function sat with the vendor.
Agent Containment Moved Into Silicon. What You Still Own.
NVIDIA's Open Agent Safety Platform pairs OpenShell, an Apache 2.0 runtime boundary you can run today, with Sentry — an out-of-band watchdog NVIDIA describes as a reference system design, not a shipping product. The strongest control in the announcement is the one you cannot buy yet, and that is the part worth planning around.
About AI Agents
AI agents represent the next evolution in enterprise automation—intelligent systems that can reason, plan, and take action autonomously. Unlike simple chatbots, AI agents handle complex multi-step tasks across customer support, internal operations, data analysis, and specialized workflows. Discover how agentic AI is transforming how organizations operate.