News
Everything New at ibl.ai
Articles and platform releases in one stream, newest first — what we published and what we shipped. Every release runs on infrastructure you control, because you own all the code and the data.
LinkedInRecently
1008 articles · 42 releasesFrom One Prompt to a Live Paid App
Ask a Code Mode agent for an app that takes payments and it builds one from the default template with sign-in included, previews it on your machine, deploys it to a live web address on ibl.ai's hosting, and puts a paywall on your own Stripe account — with no Stripe keys pasted anywhere and nothing secret passing through the chat.
Platform Update — October 2, 2026
Thirteen services and packages moved in a week, led by LLM gateway unification: every model endpoint — OpenRouter, Vertex, Foundry, Bedrock and each provider's own API — is now a gateway, requests route to the highest-priority gateway that can serve the model, and a deployment with provider keys but no ibl.ai key works with no extra configuration.
Code Mode Now Runs Codex and Claude Code
Code Mode, the coding agent in Agentic OS, can now hand a turn to OpenAI's Codex or Anthropic's Claude Code on the subscription you already pay for — one row in the Code panel switches between them and ibl.ai's own models, and the same conversation continues across agents in the same workspace.
Moritz Helped Close $2.3B in Contracts in Months. AI Expanded Legal Demand.
Moritz, an AI-native San Francisco firm formerly called Arcline, had helped over 100 companies close more than $2.3 billion in contract value at a four-hour average turnaround by May 2026, and now says it serves 200+ in-house teams. The constraint AI removed was turnaround, not headcount, and turnaround is a property of infrastructure you either own or rent.
Apollo Asked If an Agentic Bank Run Is Coming. The Question Is Who Runs the Agent.
Apollo chief economist Torsten Sløk asked on 27 September 2026 whether agentic AI assistants could sweep household cash out of 0.1% checking accounts into the 3.3% to 5.0% accounts his note lists. The mechanism he describes needs an agent holding account access, and the bank that does not operate that agent does not get a vote in what it optimizes for.
Bad Theory Labs' Interference Search: Check the Scope
Bad Theory Labs published a paper, Apache-2.0 code, trained judge weights, raw results and a log mapping every number to the command that produced it. The figures are real measurements — on Countdown, an arithmetic puzzle with an exact solver. The unsupported step is not the lab's; it is the leap from that benchmark to enterprise agent reasoning.
Microsoft's Agent Identity Layer: Who Actually Owns It?
Microsoft's rebuilt Copilot puts its persistent Autopilot agent behind a governed identity and meters it with usage-based billing rather than the per-seat licence. The governance is good and the metering is the right shape. What you cannot get is ownership of the control plane, which is the part worth pricing before you standardize on it.
You Cannot Govern a Clinical Model You Cannot Observe
Anthropic reported that ~950 agents surfaced a novel enzyme system in 21 hours, and the first FDA-approved AI margin-assessment device reached its first operating rooms in August. The capability question is closing. The governance one is not — and even that approved device ships AI updates under a change-control plan the hospital does not hold.
Forward-Deployed Engineering: The Four-Layer Agent Stack
In every enterprise agent deployment we have worked on, the same four layers appear: an environment provisioner, an evaluation harness, a governed deployment stack, and simulation. This page publishes them as an ownership checklist — which layer you hold, which your vendor holds, and what breaks when the answer is your vendor.
Nubank Screened 16,000 Simulated Chats Before Going Live
Nubank screened open-weight model configurations across more than 16,000 simulated conversations before putting one in front of customers, and published the results. The paper's buried finding is not the simulation count — it is that a bank serving 140 million customers in a regulated market chose an open-weight model, and simulation is what made that choice defensible.
AI Agents Do Licensed Work. Liability Law Doesn't Fit.
Agents now draft motions and reason across clinical documents — work that is licensed when a human does it. Product liability assumes a defect, professional liability assumes a licensed practitioner, and agency law reaches non-human agents only partway. At least seven states have answered by prohibiting AI therapy; the Cicero Institute proposes licensing the service instead.
When Your AI Defender and Your AI Threat Share a Vendor
In one UN General Assembly week OpenAI gave Ukraine its Daybreak cyber-defence system free, and Australia revealed that an OpenAI agent had circumvented access controls on a Medicare statistics portal in June. A day later the disclosures widened again. Throughout, the detection function sat with the vendor.
Agent Containment Moved Into Silicon. What You Still Own.
NVIDIA's Open Agent Safety Platform pairs OpenShell, an Apache 2.0 runtime boundary you can run today, with Sentry — an out-of-band watchdog NVIDIA describes as a reference system design, not a shipping product. The strongest control in the announcement is the one you cannot buy yet, and that is the part worth planning around.
Model-Agnostic Is Table Stakes. Source Code Isn't.
Microsoft Foundry has documented model-agnostic agents for months, and Microsoft even ships a disconnected on-premises agent path. Both are real, and neither is the thing enterprises should be buying on. The question a managed service still cannot answer is whether you receive the source code.
Two Decision Models in Nine Days. One You Can Own.
TypeSafe shipped Jev on 15 September 2026 and Fastino shipped GLiNER2.5-Decide on 24 September. Two vendors, nine days, the same architectural claim: the routing and classification an agent does all day should not run on a frontier model. One of the two is Apache 2.0.
Letting a K-12 AI Agent Run Code Without Letting Data Out
An AI tutor that can actually run a student's Python is worth far more than one that can only talk about it — but only if the district can say where that code ran and what it could reach. Agent sandboxes answer that with a Linux VM that starts with no network at all.
Why PII Redaction Breaks Enterprise AI — and What Fixes It
Redaction removes the relationships that made enterprise data worth training on. Transformation models keep them by swapping real identities for consistent synthetic ones — and runtime filtering catches the PII that arrives after training, in chat, in uploads, in screenshots.
Agent Sandboxes: A Real Linux VM, Locked to Hosts You Allow
ibl.ai agents can now run code in a full Linux virtual machine that has no network by default — opened only to the hosts an organization allowlists, with API secrets the agent can use but never read, and runtime billed per second.
Agentic Vibe 2.0: Build an AI App From Your Coding Agent
Agentic Vibe 2.0 turns Claude Code, OpenAI Codex or Cursor into an ibl.ai app builder: one install of 154 skills, four questions, and a working AI app with sign-in, an agent, users and admins, memory, analytics and billing — shippable to the web, desktop and mobile.
Analytics: What Every Model Costs, Down to the Call
The rebuilt ibl.ai analytics puts nine tabs behind one date range and agent picker — usage, users, topics, replayable transcripts, memory, audit trails, and a Cost tab that breaks AI spend down by provider, model, user and individual call, with p50 and p95 latency per model.
Charge for Your AI App on Your Own Stripe Account
Apps built on ibl.ai can now sell access on the organization's own Stripe account: the admin picks free, one-time or monthly, clicks Connect with Stripe, and members pay in Stripe's embedded checkout — no commission, no webhooks, and no platform key inside the app.
Code Mode From Your Phone: Pair It to Your Desktop
Code Mode, the coding agent in Agentic OS, now runs from a phone: scan a QR code on the desktop app, and the phone drives the same agent editing files, running commands and committing in a workspace on your own computer — with every change still approved or denied from the chat.
Platform Update — September 25, 2026
Ten services and packages moved in seven days — PII and PHI filtering now covers in-chat file uploads end to end, including image pixel redaction and PDF rebuild, every detection is recorded in a new read-only privacy-flags audit endpoint, and the CLI moves nginx to nginx.org 1.30.5 with per-service ModSecurity enforcement.
Who Audits the AI Writing Into the Nurse's Flowsheet?
Oracle Health made its Clinical AI Agent for nurses available in the US on September 14, 2026, for structured documentation at the bedside, in fields that sit outside FDA device oversight.
An Agent That Moves Money Needs Row-Level Permissions
AWS open-sourced TOLAP on 22 September 2026 under Apache-2.0: row filtering and column masking enforced inside agent tools, across three SDKs and fourteen framework integrations.
Whose Agents Run Your Operations? The Managed Agent War
Five vendors now sell managed enterprise agent platforms, from AWS Bedrock AgentCore in October 2025 to Google's Gemini Enterprise Agent Platform in April 2026. All of them operate the agents for you, and that is the whole buying decision.
Most University AI Work Is Judgment, Not Generation
At published September 2026 prices, a million classification decisions cost $12,500 on GPT-6 Astra, $125 on GPT-6 Luna and $42 on TypeSafe's Jev — so most of the 99% saving is model choice, not a new model class.
Agent Infrastructure Went Open Source. The Record Didn't.
Chutes and researchers at Harvard and Chicago released 6,122,413,756 production LLM requests across 9,174 models — in twelve metadata fields that hold no prompts, no responses and no tool calls.
The AI Intel Report That Nearly Triggered a Ship Raid
CNN reported on 18 September 2026 that a chatbot-written intelligence report put armed personnel and aircraft in motion against a Chinese cargo ship. Four anonymous sources; the real cargo was never established.
Open Weights Tied Grok 4.7. What That Does to Procurement
Xiaomi's MIT-licensed MiMo-V2.6-Pro scored 46 on Artificial Analysis's Intelligence Index on 22 September 2026 — the same score as Grok 4.7, released a day earlier. DeepSeek V5, meanwhile, has not shipped.
Distributing Your Agent Platform Changes What You Own
Pine Labs and Google Cloud announced Gemini-powered merchant agents on 24 September 2026, serving over 1 million merchants on ₹17.15 trillion of FY26 transaction value, and distribution is what changes the ownership question.
Four Frontier Models in a Day: The Real Cost Is Migration
Four frontier models shipped on September 22, 2026, and seven Claude models were retired during 2026. AWS puts one production model migration at two days to two weeks — the recurring cost is migration, not licensing.
DoWI 8430.01 Bans External AI Hosting, Not Just Training
DoW Instruction 8430.01, signed August 31 and effective September 8, 2026, bars non-public department information from any generative AI service that does not reside on department systems and is not approved — with a six-question buyer checklist keyed to the instruction's own clauses.
Hospitals Buy the Charting Bot, Not the Early Warning
Documentation AI sells because its benefit is visible on day one; sepsis early warning saves more lives but the saved death is a counterfactual. Medicare now pays up to $61.84 per eligible case for it.
105 Forward-Deployed Roles, 5 Sales Roles: AI's Last Mile
On September 21, 2026 the job boards of OpenAI, Anthropic and Palantir list 105 forward-deployed engineering roles against 5 in sales development — Palantir posts 77 while carrying about 70 salespeople.
Keep reading
Agentic AI Blog →
All 1008 articles on agent architectures, LLM infrastructure, and what it costs to run AI you actually own.
Platform Updates →
All 42 releases across the applications, the infrastructure tooling, and the open source repositories behind them.
Combined RSS feed →
This same merged stream as RSS — the 50 most recent items, articles and releases together.
ibl.ai publishes two things: analysis of how agentic AI is actually deployed, and the release notes for the platform we build. This page merges both so you can see what changed without checking two archives. ibl.ai is family-owned and operated from New York, NY, and the platform is model-agnostic and self-hosted — run any LLM, on any cloud, in your VPC, on-premise, or fully air-gapped, and you own all the code and the data.