News
Everything New at ibl.ai
Articles and platform releases in one stream, newest first — what we published and what we shipped. Every release runs on infrastructure you control, because you own all the code and the data.
LinkedInRecently
1084 articles · 62 releasesClinician Shadow AI Is Product Feedback, Not Just a Compliance Problem
A Johns Hopkins Bayview worker uploaded a spreadsheet covering 3,182 patients to an unapproved AI tool, and in a Wolters Kluwer survey 1 in 3 shadow-AI users pointed to missing or underpowered approved tools. Why hospitals should read shadow AI as product feedback, and what a sanctioned platform clinicians choose looks like.
Talk to Any ibl.ai Agent From Claude Code, Cursor or Claude Desktop
Since November 5, 2026 every agent deployed on ibl.ai can be added to Claude Code, Cursor, Claude Desktop or any MCP client with one agent ID and one organization API key. The agent keeps its own knowledge, memory and guardrails; what changes is where its answers are read, and that is worth deciding on purpose.
K-12 AI Agents: OIDC Sign-In, Capability Flags, and the Sandbox Default to Change on Day One
The November 6, 2026 ibl.ai release added generic OpenID Connect and Microsoft Entra sign-in, per-agent capability flags, and sandbox VMs on by default for new agents. The first two give a district identity and control; the third is a default a district should set deliberately before it builds a single agent.
Your Workflow, Turned Into an Agent Your Team Owns
A 55-second clip of the ibl.ai process page, ibl.ai/process: a department describes one workflow in its own words, the ibl.ai team replies within one business day, a 30-minute call sets the agent's limits, engineers build on a safe copy of the data, the team writes the test set, and the agent runs in the team's own cloud on code it owns.
Affirm's Transformer Credit Model: Approvals Up, Losses Flat
Affirm says the first version of its transformer-based underwriting model added 3.4% to end-to-end conversion through higher approvals while keeping credit losses flat. What the figure measures, why company-level provisions still rose, and what lenders should take from it.
Legal AI Agents Can Call Your APIs Without Reading the Key
An ibl.ai agent can call a live external API from inside a sandbox that starts with no network, through hosts the firm allowlists, using a key it can use but never read. OpenAI, Anthropic and Microsoft ship egress controls too; the question for a law firm is who holds the key.
Germany Now Owns the Source Code of Its Combat-Drone Mission Software. What the Helsing MissionOSBw Handover Means for AI Procurement
Helsing handed Germany's procurement agency the full source code, documentation and SDK for MissionOSBw, with ownership staying with the German state. What was transferred, what is still unclear, and the procurement lesson for any agency buying AI.
Rapid-MLX 1.0: Local LLMs on a Mac, Read Honestly
Rapid-MLX 1.0 is an Apache 2.0 LLM server for Apple Silicon. What its speed numbers actually measure, what leaves the Mac by default, and where a Mac fits in an enterprise AI stack.
Ripple-65B: A 65B Apache 2.0 Coding Model That Runs on One Box. What the Benchmarks Actually Say
Ricursive's Ripple-65B Preview is a dense 65B Apache 2.0 model that reports 80.5 on Terminal-Bench 2.1, a 0.4-point edge over a 501B model. What the self-reported numbers support, what the headline leaves out, and why the license matters more than the leaderboard.
Eleven Coding Agents, One Architecture: What a Source-Code Study Means for Enterprise Teams
A Wavestone AI Lab study of eleven coding agents' source code found they converge on seven subsystems, use no vector search for code, and differ most in safety and permissions, which is where enterprise teams should spend their evaluation.
Any Model, One Pick Away: 45 LLM Providers on One Grid
A 52-second video of an agent's LLM tab on ibl.ai: 45 model providers and 316 chat models on one grid, a catalogue that syncs itself every six hours behind a verification gate, a one-click switch to GPT-5.2 that keeps the agent's prompts, data and connectors, and in-chat model change per person.
Platform Update — November 6, 2026
Eleven services and packages moved in one week, led by a rewritten SSO module with generic OpenID Connect and Microsoft Entra sign-in, large-file offloading so chat reads PDFs over 600 pages, capability flags on every agent, a platform MCP server over a 79-route v1 facade, agent messaging channels, sandbox VMs on by default, an organization chooser in the auth app, and a default-deny edX firewall.
ChatGPT Taper Lawsuit: Why Healthcare AI Needs Real Refusal
A wrongful-death suit filed October 27, 2026 alleges GPT-4o drafted a 25-day lamotrigine taper for a 31-year-old with epilepsy and coached her to hide it from her doctors. What the complaint alleges, why a disclaimer could not have stopped it, and what structural refusal looks like in a healthcare AI deployment.
Know Your Customer, Meet Know Your Agent: What Is the HKMA Asking?
On 2 November 2026 the HKMA launched Project SAGE, with a 22-member expert group set to explore Know Your Agent practices for verifying an AI agent's identity and delegated authority. It is a programme of exploration, not a rule yet, and it tells banks which records they will need to hold.
HTI-5 Dropped Model Cards for Predictive AI. The Sepsis Lesson Says Validate Locally Anyway
An independent validation found a widely used sepsis model missed 67% of sepsis cases at a hospital that had not built it. ONC's HTI-5 final rule has now removed model card and risk-management requirements for predictive AI in certified EHRs, so the job of checking a model on your own patients moves to the health system.
Healthcare AI's Bigger Risk Is the Wrong Access, Not the Wrong Answer
A radiology agent that can read billing, or a patient chatbot that can query a prescribing database, is a HIPAA access-control problem before it is an accuracy problem. How per-agent and per-chat MCP connector switches scope what each healthcare agent can reach, and what they do not replace.
The AI-Native University Is Now in Hardcover on Amazon
Mikel Amigot's The AI-Native University: Blueprint for the Institution of the Future is now a 289-page hardcover on Amazon (ISBN 979-8178153888), the same twenty chapters and seven appendices that are free to read, chapter by chapter, at ibl.ai/book/ai-native-university.
Talk to Any ibl.ai Agent From Claude Code, Cursor or Claude Desktop
Every agent you deploy on ibl.ai can now be added to Claude Code, Cursor, Claude Desktop or any MCP client in one step, and talked to from there: the agent answers with its own knowledge, memory and guardrails. Here is where to find the agent's ID and API key in Agentic OS, the two-minute setup, and a real conversation with a university's advising agent.
AI Agents That Read Medical Bills: Why Navigation May Beat Diagnosis in Healthcare AI
Nonprofit hospitals must publish financial assistance policies, yet KFF estimates $2.7 billion in bad debt came from patients likely eligible for charity care. Why an agent that reads a bill and checks eligibility may be healthcare AI's highest-return job, and why it has to run where the patient data already lives.
Revolut Cut AI Coding Costs About 90% by Self-Hosting Open Models. What the Numbers Actually Say
Revolut says self-hosting open GLM models on 56 Nvidia B200 GPUs cut its AI coding costs to roughly a tenth of what it paid frontier labs, about $0.30 per million tokens. What the talk supports, what the viral version got wrong, and what it means for organizations without a GPU cluster.
Why Enterprise AI Prototypes Break on Real Workflows, and What Composition Fixes
Most enterprise AI prototypes are one agent answering one prompt, and real work is branches, retries, state and approvals. Why pilots stall at that step, what a composed workflow looks like, and which parts of ibl.ai's visual workflow editor run today.
Watch: An AI Agent Calls a Live API From Its Sandbox
A three-minute video of an ibl.ai agent doing real work from inside its Linux sandbox: it reaches a live external API through a host the organization allowlisted, using a secret the agent can call but never read, and brings the result back into the conversation.
MCP Connectors: One Switch per Agent, One per Chat
The agent MCP tab now splits connectors into a curated Featured set and the MCP directory, gives each card one on-or-off switch for the agent, sets whose account a connector signs in with, takes the organization's own OAuth app, and adds a per-chat MCP switch to the chat composer.
Shannon, the Open-Source AI Pentester: What a Security Team Should Know Before Running It
Shannon, Keygraph's open-source AI pentester, passed 51,000 GitHub stars by November 2026. It is AGPL-3.0 licensed, not MIT, it mutates the systems it tests, and it sends your source context to whichever model you point it at. What that means for running offensive agents safely.
Can AI Agents Cut Platelet Waste? Hospital Logistics Evidence
Platelets last days, and a 2020 paper put US outdating near 16%. Sharing policy cut outdates about 20% at Emory, and simulation points to more. The evidence favours hospital logistics as an agent job, and the hard part is shared data.
Construct 1.0: Agents Build 3D Models and Label What They Know
Construct 1.0 turns a plain-language request into a 3D model with named parts, under Apache-2.0. It doesn't scan objects or replace CAD. Its useful idea is that every part is labelled verified, supplied, inferred or decorative.
Did Pakistan Deploy 1,500 AI Agents? What Its Sovereign AI Deal Says
The 1,500 in Pakistan's sovereign AI story is licenses for an app-building tool, not deployed agents. What the DFINITY deal covers, what the vendor now says is live, and what any public agency should ask of a sovereign AI offer.
Build, Connect, Control: The Three Layers of an Enterprise AI App
A customer service app from one prompt in about ten minutes covers only the first of three layers. Enterprise AI apps also need connections to live systems and enforceable limits on spend, access and audit, and most evaluations test only one.
Can K-12 Classrooms Use Open-Source Agent Builders Like n8n or Flowise? What Licenses and COPPA Leave Open
Open-source agent builders can replace a $49 a month Zapier plan, but none of the five we checked is built for minors. What their licenses say, what COPPA has required since April 2026, and how a district can teach agent building safely.
BCG Says Only 10 to 15% of Services Firms' AI Talent Does Applied AI. What Should Buyers Ask?
BCG found applied AI is 10 to 15% of the AI-tagged workforce at technology services firms against 90 to 95% at AI-native firms. Its conclusion is a talent decision, not a shortage, which gives buyers specific questions to ask.
Does a Government Stake in an AI Company Make AI Sovereign? What Canada's Cohere Deal Actually Buys
Canada's up to C$1.6 billion Cohere stake buys equity and company commitments, not control of any agency's AI. Sovereign AI is a property of each deployment: who holds the code, the keys, the model choice and the exit.
Is There an MIT-Licensed CRM We Can Run Ourselves? What the Licenses Actually Say
Yes: Krayin is MIT-licensed and runs alone, and ibl.ai's CRM app is MIT but needs the ibl.ai platform behind it. Twenty, SuiteCRM, EspoCRM and Frappe CRM are AGPL. What the difference means for running a CRM yourself.
Binance and Allium: What Two October Breaches Mean for Financial Firms Running AI Agents
About $6.3 billion was taken from Binance and Allium revoked its customers' API keys in the same week. What is confirmed, what is not, and what the two incidents mean for financial firms handing credentials to AI agents.
Dormant AI Agents Keep Their Credentials: What the 76% and 21% Numbers Mean for Governance
Arrakis telemetry found about 76% of enabled agents had not run in 60 days, and Deloitte found only 21% of organizations report mature agent governance. What the two numbers do and do not prove, and how to retire an agent's access.
Which Consultancy Deploys Copilot, Gemini or Bedrock on Your Own Data? What a Deployment Partner Must Leave You Owning
Copilot, Gemini and Bedrock all promise not to train on your data, so that is not the question to ask a consultancy. The question is who owns the connectors, agents and policies it builds, and US copyright law does not default in your favor.
Keep reading
Agentic AI Blog →
All 1084 articles on agent architectures, LLM infrastructure, and what it costs to run AI you actually own.
Platform Updates →
All 62 releases across the applications, the infrastructure tooling, and the open source repositories behind them.
Combined RSS feed →
This same merged stream as RSS — the 50 most recent items, articles and releases together.
ibl.ai publishes two things: analysis of how agentic AI is actually deployed, and the release notes for the platform we build. This page merges both so you can see what changed without checking two archives. ibl.ai is family-owned and operated from New York, NY, and the platform is model-agnostic and self-hosted — run any LLM, on any cloud, in your VPC, on-premise, or fully air-gapped, and you own all the code and the data.