The Short Answer
Pine Labs announced on 24 September 2026 that it will put Gemini-powered agents in front of the merchants it already serves, which is the real shape of the pattern: organizations build agent infrastructure for themselves, then hand it to their ecosystem. At that point the model is replaceable and the deployment architecture is not. With ibl.ai you own all the code and the data, so what you distribute stays yours.
The interesting question is not whether agents work. It is what you are on the hook for once other organizations are running yours.
What does it look like when a company builds agents for itself and then distributes them to its ecosystem?
It looks like an agent layer bolted onto infrastructure the company already owns, sold onward to the businesses already on that infrastructure.
Pine Labs and Google Cloud announced a collaboration on 24 September 2026 to build exactly that. Pine Labs will use the Gemini Enterprise Agent Platform for catalog enrichment and search, and for building custom commerce agents.
The specifics are unglamorous and telling. An advertising agent creates and places ads across Google Search, YouTube and Pine Labs' own point-of-sale devices.
A multi-agent system called Jarvis handles program creation, diagnostics and support on the Woohoo platform.
A payment layer, P3P, carries agentic transactions starting with UPI, and a component called Grantex makes them auditable against India's financial regulations.
The scale here is worth stating precisely, because inflated versions of it travel. Pine Labs does not serve anything like a hundred million merchants, and could not.
Pine Labs' FY26 disclosures report over 10 lakh merchants — more than 1 million — alongside 750 brands and 200 financial institutions, on ₹17.15 trillion of gross transaction value.
CEO B. Amrish Rau put it this way: "The shift to AI-driven buying is already underway. The question is whether India's 60 million small businesses get to be part of it from the start, or wait for infrastructure that was built for someone else first."
India's entire small-business universe is 60 million, and Pine Labs' own FY26 figure is over 1 million of them.
Did Sequoia really open an AI agent platform to 2,000 portfolio companies?
No. That story is a different firm and a different product, and the version travelling is wrong on both.
The underlying release, dated 22 September 2026, is a partnership between Superpower — a preventive-health company offering biomarker testing and clinical support — and Sequoia, a 25-year-old advisory firm specializing in employee benefits and compensation strategy.
Not Sequoia Capital, and not an agent platform.
The scale figures are real but attach to different things. Deployment begins with Sequoia's own 800-plus employees, and the broader reach is 2,500-plus client companies covering more than 600,000 people. Not a venture portfolio.
What survived the retelling is the shape, which is why the story spread: run it on your own people first, then open it to the ecosystem you already serve. That pattern is genuine. It is just not evidence about agents, and a strategy built on the misread starts from a fiction.
What changes when an internal agent platform becomes something your ecosystem runs on?
Three things change at once, and none of them is a model question.
The tenancy boundary moves. Access control that was an internal convenience becomes the artifact a downstream organization's auditor reads.
Deny-by-default role checks and a tamper-resistant log of every tool call stop being hygiene and start being the evidence you hand to someone else's compliance officer.
You become a vendor to your own ecosystem. Versioning, support, incident response and liability for agents acting on other organizations' data are now yours.
This is the operational weight that 105 forward-deployed engineering roles against 5 sales roles already implies at the frontier labs, arriving at ordinary companies that never planned to staff for it.
You pass on every dependency you accepted. Your downstream organizations inherit your model provider, your terms, your pricing and your availability — and they cannot renegotiate any of it. You cannot renegotiate on their behalf either.
That third one is the difference between deploying agents and distributing them, and it is why the managed agent platform decision compounds rather than stays contained.
A dependency you can live with for your own operations becomes a dependency you have imposed on several thousand other businesses.
Why does distributing agents turn model portability into a contractual question?
Because at distribution scale, switching is no longer a procurement preference. It is a change of terms for everyone downstream.
The protocol layer is moving toward neutrality. Google released the Universal Commerce Protocol in January 2026 as an open-source, vendor-agnostic standard.
It was developed with Shopify, Etsy, Wayfair, Target and Walmart, endorsed by more than 20 partners, and composes with Agent2Agent, the Agent Payments Protocol and the Model Context Protocol.
Pine Labs is supporting UCP and A2A natively, which is the right call.
But a neutral wire protocol does not make the platform running behind it portable. The agents themselves are built on one vendor's enterprise agent platform. Neutrality at the transaction boundary and lock-in at the reasoning layer can coexist comfortably.
Model-agnostic architecture is what keeps that decision reversible — the ability to route to a different LLM without rewriting the platform, which matters far more when the platform is something other organizations depend on than when it is only your own.
How mature is the governance underneath all of this?
Thinner than the deployment rate suggests, and the statistic usually cited to prove it is garbled.
The pairing in circulation — enterprise AI adoption at 95% against security defence maturity at 58% — does not match any published survey found for this post.
The nearest real measurement is the SANS 2026 AI Survey, published 13 July 2026 across 536 practitioners plus a module completed by 57 senior security leaders.
Its 95% is the share who believe threat actors are using AI — a perception of adversaries, not an adoption rate. There is no 58% maturity figure in it.
The figures it does report are more useful. AI use in security strategy went from 50% to 78% in a year, the largest jump the survey has recorded.
Only 27% describe their deployment as mature production. And 63% report significant shortcomings in AI threat detection and response, up from 45% in 2025.
Read against the distribution pattern, that gap is the warning. Most organizations building agents internally are not yet operating at a governance standard they would want to publish to an ecosystem — and distribution is what converts an internal gap into a third-party one.
How does ibl.ai support building agents internally and then distributing them?
By making the deployment architecture yours, so distributing it does not mean distributing someone else's dependencies.
With ibl.ai you own all the code and the data.
The platform runs on your own infrastructure with the full source under a perpetual license, is model-agnostic across any LLM, is usage-based with no per-seat pricing, and you can deploy anywhere — your own cloud, on-premise, GovCloud, or a fully air-gapped network.
The governance is the part that travels. Agents reach your systems of record through a role-scoped MCP layer that queries in place, with no data extraction.
The broker checks role against tool policy deny-by-default before forwarding a call, and every tool execution, network request and resource access is written to a tamper-resistant audit log.
More than 100 agent specifications ship with the platform — 107 across enterprise, government, healthcare, legal, financial services, K-12, higher education and small business — as starting points you modify rather than templates you rent. The Agentic OS is the layer they run on.
1.6M+ users across 400+ organizations run the platform this way, including NVIDIA, MIT, and Syracuse University.
ibl.ai is family-owned and operated from New York, NY.
Related reading: how enterprise organizations are deploying autonomous AI agents — the build side of this, before distribution changes the obligations; and multi-agent architecture for the enterprise for how the orchestration layer is put together.
Sources: the Pine Labs and Google Cloud collaboration from The Tribune and Free Press Journal, 24 September 2026; Pine Labs' FY26 merchant and GTV figures via Sahi; the Superpower and Sequoia partnership from the 22 September 2026 release; the Universal Commerce Protocol from Google's developer blog; the maturity figures from the SANS 2026 AI Survey.