World Models in 2026: Genie 3 at 24 fps, Cosmos 3 at 64B, V-JEPA 2 Planning in 16 Seconds, and an $8.2B Exit to AMD
What a world model is in 2026 and what actually shipped: Genie 3 at 720p and 20 to 24 fps for a few minutes behind a $249.99 subscription, World Labs' Marble and Atlas and the $8.2 billion all-stock sale to AMD, NVIDIA Cosmos 3 at 64B, 16B and 4B under OpenMDW 1.1, V-JEPA 2 planning a robot action in 16 seconds against Cosmos's four minutes, LeCun's AMI Labs raising $1.03 billion at $3.5 billion, the Physics-IQ ceiling of 29.5 out of 100, what inference costs, and a V-JEPA 2 embedding script I ran on a laptop CPU.
14 minOct 5, 2026Workflow Automation in 2026: n8n Published 196 Advisories in Nine Months, 59,558 Hosts Sat Exposed, and the Code Alternative Raised at $12.55B
The no-code automation tools became agent runtimes this year and the security record followed: n8n went from a EUR 250M valuation to a reported $5.2B while publishing 196 GitHub security advisories in 2026 (19 critical), a CVSS 10.0 unauthenticated flaw left 59,558 hosts exposed per Shadowserver, and CISA added one n8n and six Langflow CVEs to its exploited list. Zapier MCP counts 25 million tool calls, Copilot Studio bills 5 credits per agent action, Agentforce ARR passed $1.5B, and Temporal raised $550M at $12.55B with 4,300 paying customers. Plus a hardened n8n queue-mode compose file.
15 minOct 5, 2026The 2026 SaaS Selloff: IGV Fell 36%, Then Rose 45%. Revenue Grew 11% to 37% the Whole Time
The SaaSpocalypse checked against filings: Anthropic's Cowork plugins on 30 January, Thomson Reuters' worst day ever on 3 February, $285 billion gone in a day and nearly a trillion in a week, a second leg on Mythos in April, IGV down 36 percent to its 10 April low and up 45 percent since; against that, Q2 2026 revenue growth of 11 percent at Salesforce, 24 at ServiceNow, 36 at Datadog and 37 at Snowflake, median retention flat at 110 percent, median multiples from 4.9x to 3.0x to 4.2x, 4,000 Salesforce support roles, Klarna's reversal and $65 billion of Anthropic run-rate.
13 minOct 5, 2026Policy as Code for AI Agents in 2026: Cedar at the Gateway, Rego in the Hook, and the 11.2% the Model Still Lets Through
What actually enforces limits on AI agents in 2026: OPA 1.21 and Rego v1 after the founders moved to Apple, Cedar in Amazon Bedrock AgentCore Policy (GA 3 March 2026, 13 regions, default deny), Kyverno 1.19 retiring ClusterPolicy for CEL, Claude Code hooks that deny even in bypass mode, Codex's Seatbelt and bwrap sandboxes, the MCP 2026-07-28 authorization spec, and why none of it is optional while browser-agent injection success sits at 11.2% and OpenAI says the problem is unlikely to ever be fully solved. With a tested Rego policy and a Cedar policy for tool calls.
13 minOct 5, 2026Kubernetes as the Agent Control Plane in 2026: Agent Sandbox Hit v1.0, 300 Claims a Second, and DRA in Every Supported Release
What shipped for running AI agents on Kubernetes by October 2026: the kubernetes-sigs Agent Sandbox project from a KubeCon preview in November 2025 to v1.0.0 in August, its four CRDs and gVisor, Kata and Firecracker runtime classes, Google's 300 claims per second and 16x growth figures, a density benchmark of 61 Kata agents versus 88, 133 and 274 per node, DRA going GA in 1.34 and locked on through 1.37, kagent, Dapr Agents 1.0, agentgateway, the Inference Extension's move into llm-d, the CNCF survey's 66 percent, and the Gartner 80 percent platform-team prediction nobody has measured.
13 minOct 5, 2026MLOps in 2026: Evals Are the New Unit Tests, Judges Agree With Experts 66% of the Time, and OpenAI's Evals API Shuts Down on 30 November
The 2026 state of MLOps, checked against primary sources: OpenAI is closing its Evals API (read-only 31 October, off 30 November) and winding down fine-tuning while buying Promptfoo; Langfuse went to ClickHouse and W&B to CoreWeave; GDPval's model grader agrees with experts 66% of the time against 71% for humans; ARC-AGI-3 went from 0.51% to 99.9% in five months; Terminal-Bench retires a task when every frontier model solves it 5 of 5 times; MLflow 3.16, Kubeflow 26.03, Feast 0.66, lakeFS under BSL, and a pytest gate on a Wilson lower bound that I actually ran.
14 minOct 5, 2026MCP in 2026: 475M SDK Downloads a Month, 39,492 Servers in a Registry Still in Preview, and 12 Gateways Selling the Same 3 Features
The MCP ecosystem ten months after the Linux Foundation took it over, measured from primary sources: 475 million SDK downloads a month across npm and PyPI, three spec revisions ending in the stateless 2026-07-28 rewrite, an official registry I paged to 39,492 servers (24,242 remote) that is still labelled preview while Glama lists 96,340, every major client with different controls, twelve gateways from $0 to $0.005 per thousand calls, the tool-overload numbers (55k tokens before the first prompt, 85 percent recoverable), and a stateless Python server on mcp 2.3.0 that I ran and tested.
14 minOct 5, 2026Infrastructure as Code in 2026: Two Forks at 1.16 and 1.13, a $6.4B Owner, 912 Public State Files, and One Agent That Ran terraform destroy
Infrastructure as code three years after the BSL relicence: Terraform 1.16.5 under IBM versus OpenTofu 1.13.1 under the Linux Foundation and who shipped what first, HCP Terraform at $0.10 to $0.99 per resource with the legacy free plan gone, CDKTF and System Initiative archived, Pulumi 3.267 and Crossplane 2.4, a Terraform MCP server that grew from registry lookups to workspace administration in 15 months, 44 percent running AI for infrastructure but 34 percent trusting it, 912 exposed state files with 41 live AWS keys, and the agent that ran terraform destroy on 2.5 years of production.
13 minOct 5, 2026DevOps Still Matters in 2026: AI Cut Delivery Stability 7.2%, Then Doubled Merged PRs and Added 91% to Review Time
Why DevOps is the big thing of the agent era: DORA 2024 found a 25% rise in AI adoption cost 1.5% throughput and 7.2% stability, DORA 2025 saw throughput turn positive while instability stayed up across nearly 5,000 respondents, and DORA's 2026 ROI model budgets a 15% three-month dip and a change failure rate rising from 5% to 6%; GitHub merged 518.7M PRs (+29%) and over 1M agent PRs in five months, Faros telemetry on 10,000 developers shows 98% more PRs and 91% longer reviews, METR found experienced developers 19% slower, and the Replit postmortem's fixes are 2015 DevOps controls.
13 minOct 5, 2026Coding Agents in 2026: Cursor at $2B Then Sold to SpaceX, Cognition at $1B, 58% on Terminal-Bench, and the Only RCT Still Says Slower
The coding-agent market as the primary sources report it in October 2026: Cursor from $500M to $1B to $2B in nine months and then acquired by SpaceX, Cognition from $73M to a $1B run-rate at a $48B valuation, Claude Code past $500M, Lovable at $13.3B, nearly 140,000 organisations on Copilot; four re-pricings from requests to tokens; Terminal-Bench 4.0 topping out at 58.2 percent for $3,267 a run; METR's redesigned study at minus 4 to minus 18 percent against 1.4 to 2x self-reports; 45 percent insecure samples, 1.7x more issues per AI pull request, and curl's bug bounty closed.
14 minOct 5, 2026CI/CD in 2026: Agents Opened 1M PRs in 5 Months, Bots Write 1 in 5 Reviews, and Most Agent PRs Get No Human Look
What the pipeline looks like when AI agents open the pull requests: GitHub's coding agent went GA on 25 September 2025 and opened over a million PRs in five months, Copilot code review passed 60 million reviews and one in five on GitHub, CodeRabbit has reviewed 13 million PRs on $88 million raised, and the first studies find most agent PRs get no human review attention. The gates that still hold: the assigner cannot approve, an extra approval for bot authors, path fences, signed commits, SLSA provenance, and a workflow YAML that gives agent PRs their own lane.
13 minOct 5, 2026Browser Agents in 2026: 90.2% on OSWorld-Verified, 20.6% on OSWorld 2.0, and Three Agent Browsers Already Shut Down
Computer-use agents passed the 72.36 percent human baseline on OSWorld-Verified this year (90.2 percent for the top framework, 86.0 for Claude Fable 5), then scored 20.6 percent on the 108-task OSWorld 2.0 that replaced it; Operator, Project Mariner and ChatGPT Atlas were all discontinued within 19 months; prompt-injection success in Anthropic's own tests fell from 23.6 to 11.2 percent and no vendor claims zero; Cloudflare sells HTTP 402 access to agents while 52 percent of crawling is for training; and hosting settled on one headless Chrome per microVM at $0.02 to $0.12 a browser-hour.
13 minOct 5, 2026AIOps in 2026: 47% on ITBench, 10% on Hard On-Call, $6.50 an Investigation, and Four Outages Where the Automation Was the Incident
The incident-response agents of 2026 against the evidence: Datadog Bits AI SRE GA at about 6.5 credits ($6.50) per investigation, PagerDuty's approval-gated SRE Agent, Grafana's six GA agent tools, Splunk's AI SRE, Elastic buying Deductive, Resolve at a $1B headline valuation on $4M ARR, Traversal's $48M; benchmarks from 13.8% on ITBench in 2025 to 47% in May 2026, 20.7% exact root cause on OpenRCA 2.0, 10% on hard ORCA-Bench and 40% hallucinated causes; what the AWS, Azure, Cloudflare and Google postmortems say about automation; and why a human should hold the button.
14 minOct 5, 2026AI SOC Agents in 2026: 98% Accuracy Claims, 23 to 34% on the Benchmark, and 0% of Teams Letting Them Act Alone
What the security-operations agents from Microsoft, Google, CrowdStrike, Palo Alto, SentinelOne, Torq and a billion-dollar startup cohort actually do in 2026 and what is measured: a median of 100 alerts a day and 28 percent never investigated, 75-minute mean investigations, Microsoft's $4-an-hour compute units and Google's token meter, CrowdStrike's 98 percent triage claim against Meta's 23 to 34 percent benchmark, Anthropic's and Google's reports of attackers running agents against defenders, and a Sigma rule and CI step that keep a human on the merge button.
14 minOct 5, 2026Agent Memory in 2026: Vendors Claim 92.5 on LoCoMo, a Plain Filesystem Scored 74, and Every Memory Product Lost to BM25
Agent memory systems in 2026, kept honest: Mem0's 66.9 on LoCoMo in its own paper versus 92.5 on its managed platform a year later, Zep's 75.1 rebuttal and the three bugs behind Mem0's 66.0 for Zep, Letta's 74.0 with only a filesystem, MemoryAgentBench putting every commercial system under 45 on retrieval against BM25 at 60.5, Hindsight's 89.6, first-party memory from ChatGPT, Claude and Gemini with dates, both labs' compaction APIs, what re-reading 115k tokens costs at cache-read prices, a Postgres and pgvector layer with supersession, and why memory poisoning is still unfixed.
13 min