Infrastructure · October 4, 2026
A continuous AI improvement loop needs a durable link between production traces, curated evidence, evaluation results, and the deployment that changed
CoreWeave has introduced Forge, a development environment intended to connect the stages of an AI improvement cycle: running models and agents in production, observing traces and feedback, curating data and evaluation suites, improving a model or harness, and evaluating a version before deployment. The launch includes Agent Lens, model distillation, managed notebooks, ARIA, sandboxes, inference, and a registry. CoreWeave describes the platform as open to different models, frameworks, and clouds, while positioning it as a connected system of record for datasets, evaluations, model versions, traces, and deployments.
Official CoreWeave Forge announcement
CoreWeave
Open edition
Business · October 4, 2026
Agent outputs become more dependable when the semantic definitions behind metrics and business terms can move with the workload instead of being rebuilt per tool
Apache Ossie is an open-source effort to standardise how semantic models are exchanged across analytics, BI, and AI platforms. Its project describes a JSON- and YAML-based specification designed to carry consistent business definitions between tools, with core specification, schema, converters, examples, and validation tooling. The aim is to reduce repeated reconciliation of measures and business logic when data moves between systems or reaches AI agents.
Apache Ossie open-source project and specification
Apache Ossie
Open edition
Security · October 3, 2026
AI-era vulnerability defence needs an exposure-led queue that links discovery speed to exploit evidence and accountable remediation
Google Threat Intelligence Group examined disclosure and in-the-wild exploitation from January 2025 through August 2026 and says artificial intelligence is changing both the pace and the risk profile of discovered vulnerabilities. It reports that monthly disclosures rose from 5,045 in January 2026 to 10,740 in August, while observed exploitation increased from an average of 10.5 vulnerabilities a month in 2025 to 18 a month in 2026. The report also notes that only about 0.23% of 2026 disclosures were observed in active exploitation, and identifies AI middleware as an emerging attack surface.
Google Threat Intelligence Group analysis
Google Cloud
Open edition
Agents · October 2, 2026
Persistent agents need explicit action boundaries and a review path that survives the move from one task to the next
OpenAI has introduced dots: always-on agents powered by GPT-6 Astra that have their own cloud computer and browser, can use connected tools, and can continue work between conversations. OpenAI says users can set boundaries through permissions and Custom Rules; its safeguards include pre-action Auto-review and ongoing safety monitoring. Enterprise availability begins as an admin-enabled beta, initially off by default.
Official GPT-6 Astra system card and dots safeguards documentation
OpenAI
Open edition
Security · October 1, 2026
Agent constraints need an independent enforcement point that can still observe and stop work when the agent runtime cannot be trusted
NVIDIA has published its Open Agent Safety Platform, a reference design that uses the Apache 2.0-licensed OpenShell runtime to sandbox autonomous agents with kernel-level isolation. Operators can define permitted files, networks, tools, processes, and credentials as policy before execution. The optional NVIDIA Sentry layer runs on BlueField data processing hardware, correlating agent interactions and policy decisions while providing monitoring and enforcement outside the host resources available to the agent.
Official Open Agent Safety Platform announcement
NVIDIA
Open edition
Security · September 23, 2026
Runtime AI controls are most useful when the same request path can govern model choice, prompt risk, spend, and what agents may do through enterprise APIs
Fastly has announced AI Runtime Control, AI Firewall, and expanded API Security capabilities. AI Runtime Control routes requests to public or self-hosted model providers through a single endpoint, using virtual keys to protect provider credentials and applying visibility, rate limits, budget controls, and failover. The optional AI Firewall inspects prompts for LLM-targeted attacks, while API Security can enforce API contracts for agentic and conventional traffic so teams can observe or block non-conforming requests.
Official AI Runtime Control, AI Firewall, and API Security announcement
Fastly
Open edition
Security · September 17, 2026
AI connectors need an accountable application lifecycle: approved installation, least privilege, enterprise identity, ownership, and visible activity
HubSpot's Fall 2026 release adds App Governance controls that let administrators decide which apps and AI connectors are allowed, who can install them, and whether an approval is required. New granular OAuth scopes distinguish read from write access, while an optional user-level model constrains an app's runtime action by the permissions of the person using it. The release also adds app ownership and activity logs; for Claude Enterprise, verified-domain restrictions can keep MCP connector access to company-provisioned accounts.
Official connected-app and AI-connector governance announcement
HubSpot
Open edition
Agents · September 15, 2026
A managed agent harness reduces orchestration work, but the environment that can execute tools remains an enterprise security boundary
OpenAI has introduced the Agents API in public beta, making the harness behind Codex available as a managed API. The service handles long-running session orchestration, context compaction and recovery, while developers define the task, model, tools, and environment. It supports durable sessions and can run work in OpenAI-hosted sandboxes or a sandbox connected from the customer's own infrastructure or a supported provider.
Official Agents API public-beta announcement
OpenAI
Open edition
Agents · September 11, 2026
Coding agents modernize legacy systems more safely when numerical parity, module boundaries, and human review are designed before the first automated change
Mistral describes helping a European energy operator migrate 40,000 lines of a physics-intensive Fortran 77 reservoir simulator to C++. The team first created a harness that exports legacy-state checkpoints and tests the C++ implementation against them, then used agents to document the caller-callee tree and work through independently scoped modules. Mistral says fully autonomous translation produced functional but unmodernized code; the final workflow used planner, coder, tester, and reviewer roles, with reservoir-engineer approval of architecture and human review of pull requests.
Applied-AI legacy-modernization case study
Mistral
Open edition
Agents · September 8, 2026
Self-hosted coding-agent workers improve execution control only when the cloud control plane and data flows remain explicit
Cursor has introduced Self-Hosted Machines, allowing Cloud Agents to execute tool calls on dynamically scheduled workers inside a team's network while Cursor continues to run the agent loop, planning, and inference. Workers keep a long-lived outbound HTTPS connection to Cursor; they can be organised into shared pools that scale with queued work and serve multiple repositories. Cursor notes that tool output may include code and that agent transcripts may be processed and stored in its cloud.
Self-hosted agent-worker product announcement
Cursor
Open edition
Security · September 7, 2026
AI vulnerability triage becomes operational when code findings are ranked against live traffic, security signals, and the controls already in place
Cloudflare has announced invitation-only Early Access for Vulnerability Discovery and Remediation in Cloudflare Managed Defense. For codebases a customer authorizes it to inspect, the service uses OpenAI Daybreak models for reconnaissance, hunting, and validation, then combines source-code evidence with route activity, traffic, security events, and WAF context. It proposes code patches and mitigations for review; customers decide whether to implement them, and any WAF rule deployment requires authorization.
Early Access vulnerability-remediation announcement
Cloudflare
Open edition
Security · September 4, 2026
AI agents need centrally managed cross-application authorization when every user reconnect and static credential becomes a governance gap
Auth0 has launched Early Access Client App capabilities for Cross App Access, an architecture for B2B applications and AI agents that request data from external APIs or Model Context Protocol servers. Auth0 says the implementation uses the emerging Enterprise-Managed Authorization extension and IETF Identity Assertion Authorization Grant work so enterprise IT can approve access through existing identity-provider trust rather than relying on static API keys or repeated user connection prompts.
Enterprise-managed authorization Early Access announcement
Auth0
Open edition
Security · September 3, 2026
Frontier-model safeguards become easier to operationalise when monitoring evidence remains in the customer-controlled cloud boundary
Anthropic has announced Enterprise Frontier Safeguards, combining zero data retention with automated detection of serious misuse. The service is designed to keep monitoring data in cloud infrastructure controlled by the customer, with customer-managed encryption keys and automated review available as opt-in controls. Anthropic says rollout will begin in phases later this fall across Claude products and supported cloud platforms.
Enterprise safeguard announcement
Anthropic
Open edition
Agents · September 3, 2026
Agent governance needs a complete inventory before teams can judge ownership, permissions, and blast radius
Okta has added AI-agent discovery to all existing Identity Security Posture Management subscriptions. Its inventory can surface endpoint agents and MCP servers, builder-platform agents, OAuth grants, and shadow AI applications, then place agent-related misconfigurations alongside other identity risks. Some discovery sources remain Early Access or planned, so coverage should be validated against the organisation's actual endpoints and builder platforms.
Identity Security Posture Management product announcement
Okta
Open edition
Security · September 2, 2026
Agentic operations need a governed execution model when analysis can turn directly into enterprise action
Palo Alto Networks has acquired Console, an AI-native platform designed for agentic workflows across enterprise operations. Palo Alto Networks says Console will deepen Cortex capabilities that help teams investigate signals, prioritise work, and act across their environment; the announcement describes natural-language workflows that can automate alerts, issues, and requests.
Agentic operations acquisition announcement
Palo Alto Networks
Open edition
Business · September 2, 2026
AI service governance needs a live risk-and-accountability plan when regulatory oversight reaches the platform layer
The European Commission has designated ChatGPT a Very Large Online Search Engine under the Digital Services Act after the service declared at least 45 million average monthly EU users. The designation gives OpenAI four months, through January 2027, to meet additional obligations covering systemic-risk assessment and mitigation, transparency, and independent audits.
Digital Services Act designation notice
European Commission
Open edition
Infrastructure · August 26, 2026
Regulated AI workloads need model access that fits the cloud boundary and operating controls they already use
AWS has made OpenAI GPT-5.6 Terra and Luna generally available through Amazon Bedrock in AWS GovCloud (US-East and US-West). The models offer a million-token context window and prompt caching, but the operational value is that teams with a GovCloud boundary can evaluate the models through their existing AWS account, policy, monitoring, and cost-management practices rather than create an unmanaged parallel route.
Amazon Bedrock availability announcement
AWS
Open edition
Security · August 26, 2026
MCP access becomes easier to govern when each agent connection inherits identity-provider policy and the user’s existing role
Supabase has made enterprise-managed authentication generally available for its MCP server on Team and Enterprise plans. With SSO and a supported identity provider, an administrator can authorize a client centrally while each employee’s access remains limited to their existing Supabase role and project permissions. Supabase documents short-lived, non-refreshable access tokens and central revocation through Authorized Apps.
Enterprise-managed MCP authentication announcement and documentation
Supabase
Open edition
Infrastructure · August 25, 2026
Agent platforms need an inference design that reflects long, multi-step workloads rather than relying on a generic model benchmark
NVIDIA says Groq 3 LPX is now in production as an extension of the Vera Rubin platform, with Nebius as the first committed cloud adopter. The accelerator is aimed at fast token generation for long-context, multi-step agent workloads where repeated model calls can turn inference latency into the limit on the whole business process.
Agent-inference platform announcement
NVIDIA
Open edition
Business · August 25, 2026
Domain-owned models can change professional AI economics when control and specialised evaluation matter more than maximum generality
Thomson Reuters has launched Thomson, an internally developed model built from an open-source foundation and specialised with its professional content and subject-matter expertise. The company controls the model and is putting it into legal workflows, presenting a different route from relying exclusively on third-party frontier models plus retrieval.
Domain-specific model announcement
Thomson Reuters
Open edition