Four major agent projects move under vendor-neutral governance

What changed: The Agentic AI Foundation added Agent Skills from Anthropic, Open Responses from OpenAI, OpenEnv from Hugging Face, and OpenSandbox from Alibaba. The projects cover reusable agent instructions, a common model interface, training and evaluation environments, and isolated execution; the foundation now hosts 10 projects.

Why it matters: Builders may be able to reduce provider-specific integration work and reuse more of their agent stack across vendors. The additions also signal that agent infrastructure is separating into practical layers: capabilities, model communication, evaluation, and safe execution.

Try/watch: Evaluate Open Responses and Agent Skills in a small prototype, but verify which features each model provider actually supports before committing to portability claims.

Daytona raises $60 million at a $1 billion valuation for long-running agents

What changed: Daytona Platforms announced a $60 million Series B led by FirstMark Growth at a $1 billion valuation, bringing total funding to $91 million. The company is building cloud infrastructure for agents that create many short-lived, stateful jobs, with sandboxed Linux, Windows, and macOS environments plus GPU access.

Why it matters: Agent workloads can require a different operating model from conventional web services: many isolated workspaces, persistent task state, tool access, and bursty execution. The funding validates demand for specialized infrastructure, while also raising questions about whether general-purpose clouds will offer equivalent primitives.

Try/watch: When estimating agent costs, model workspace creation, persistence, sandboxing, and idle time—not just model-token usage.

Google Cloud expands perimeter controls for autonomous agents

What changed: Google Cloud announced generally available improvements to VPC Service Controls, including folder-based perimeter membership, more granular exceptions, and guided troubleshooting for access denials. Google positioned the changes as a way to scale autonomous agents while keeping data inside enterprise security boundaries, with no additional charge.

Why it matters: Agents frequently request data across services and projects, making conventional network rules difficult to manage. Centralized, inherited boundaries can let operators expand agent access without giving every agent broad credentials or unrestricted movement across cloud resources.

Try/watch: Map each agent’s required data paths and test denied requests before production; monitor whether convenience-driven exceptions gradually weaken the perimeter.

Cisco introduces a benchmark for multi-step cybersecurity agents

What changed: Cisco introduced Agentic FAITH, an extension of its FAITH evaluation framework for tasks in which an agent chooses tools, interprets results, and acts through multiple steps. Its first integrated benchmark, VulnLoc, tests whether agents can locate vulnerable files in a code repository while avoiding false positives on patched code.

Why it matters: A final answer alone is not enough to judge an agent that investigates systems. Buyers and security teams need repeatable measurements for tool selection, intermediate decisions, stopping behavior, accuracy, and false alarms.

Try/watch: Add trace-level evaluation to internal agent pilots and score both the outcome and the actions taken to reach it.