{"id":5912,"date":"2026-09-20T13:23:28","date_gmt":"2026-09-20T18:23:28","guid":{"rendered":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=5912"},"modified":"2026-09-20T13:23:28","modified_gmt":"2026-09-20T18:23:28","slug":"ai-ops-weekly-september-20-2026","status":"publish","type":"post","link":"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=5912","title":{"rendered":"AI Ops Weekly &mdash; September 20, 2026"},"content":{"rendered":"<style>\n.single .entry-title,\n.single .entry-header .entry-title,\n.single .post-title,\n.single header.entry-header h1,\n.single h1.entry-title,\n.single .page-title,\n.post-template-default h1.entry-title,\n.post-template-default .entry-header,\narticle .entry-header,\narticle .entry-title { display: none !important; }\n.single .entry-header { margin: 0 !important; padding: 0 !important; }\n.single .entry-content { margin-top: 0 !important; padding-top: 0 !important; }\n<\/style>\n<table role=\"presentation\" class=\"wrapper\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n<tr>\n<td align=\"center\">\n<table role=\"presentation\" class=\"container\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"680\">\n<p>        <!-- Banner --><\/p>\n<tr>\n<td class=\"banner\" style=\"background-color:#0e7490;background:linear-gradient(135deg,#0e7490 0%,#0891b2 100%);padding:36px 32px;color:#ffffff;\">\n<p class=\"date\" style=\"color:#ffffff !important;\">September 20, 2026 &middot; Weekly Edition<\/p>\n<h1 style=\"color:#ffffff !important;\">AI Ops<\/h1>\n<p class=\"tagline\" style=\"color:#ffffff !important;\">Three stories this week carry production numbers somebody measured. <strong>Uber<\/strong> stripped 50,000&ndash;70,000 tokens of MCP tool schema out of every agent session and took cost per 1,000 agent requests down about 34%. <strong>DoorDash<\/strong> turned multi-agent LLMs loose on 60,000 feature flags and got usable pull requests on 45 of 50, at 13.8 minutes and $4.79 apiece. <strong>Lyft<\/strong> attributes &ldquo;a few million dollars per year&rdquo; to one autoscaler. Against that, <strong>AWS<\/strong> confirmed that data held only in its Bahrain region is gone permanently &mdash; multi-AZ design explicitly did not cover what happened. Twenty-five stories, with every vendor-supplied figure labelled as such.<\/p>\n<\/td>\n<\/tr>\n<p>        <!-- At a glance --><\/p>\n<tr>\n<td class=\"content\">\n<h2>This week at a glance<\/h2>\n<p>This was a good week for evidence, which is not the usual verdict in this section. Three engineering organisations published numbers from production systems, and all three are about the same thing: what it costs to run agents, and what you do about it. <strong>Uber<\/strong> operates more than <strong>1,000 MCP servers<\/strong> behind a single gateway, and found that pre-loading roughly 100 tool schemas into the agent context burned <strong>50,000&ndash;70,000 tokens<\/strong> before any work began. Removing schema pre-loading entirely &mdash; replacing it with CLI resolution, on-demand tool search and code-mode batching &mdash; took that to &ldquo;near-zero per session&rdquo;, and between February and August 2026 weekly agent requests rose <strong>9.4x<\/strong> while total spend stayed roughly flat from April onward; cost per 1,000 agent requests fell about <strong>34%<\/strong> and cost per session about <strong>52%<\/strong> from its peak. <strong>DoorDash<\/strong> published the first hard accuracy-and-cost figure for agentic code maintenance we have seen: across a 50-flag evaluation, <strong>45 of 50 (90%)<\/strong> produced usable pull requests, <strong>31 merged first-pass<\/strong>, zero bugs or regressions were recorded, and the average cleanup cost <strong>13.8 minutes and $4.79<\/strong> against a manual baseline of one to two engineer-hours. And <strong>Lyft<\/strong> moved hundreds of production Flink jobs onto the community Kubernetes operator and credits the autoscaler with right-sizing a fleet that had been overprovisioned by <strong>&ldquo;a few million dollars per year&rdquo;<\/strong>. Note what all three have in common: the win came from removing something &mdash; schemas, dead flags, spare capacity &mdash; not from a better model.<\/p>\n<p>The counterweight is <strong>AWS<\/strong>, and it is the most consequential operational story of the week. On <strong>15 September<\/strong> AWS confirmed it cannot restore resources and data hosted exclusively in its <strong>Bahrain<\/strong> region after Iranian drone attacks in March 2026 and a secondary disruption in April; in the UAE region one availability zone is back and two are not. AWS&rsquo;s own wording is the part to read twice &mdash; the damage &ldquo;spanned multiple Availability Zones and exceeded what our regional and multi-AZ services are designed to withstand&rdquo;. Multi-AZ was not the answer, and customers who did not move after March are the ones who lost data in April. Elsewhere, label the sourcing before you quote it. The <strong>Splunk .conf26<\/strong> bundle is one announcement told three times across this issue and Agentic NetOps, and all its capability claims are Cisco&rsquo;s; the <strong>Azure SRE Agent<\/strong> piece is a <strong>Microsoft-sponsored post<\/strong> whose 1.8 million incidents and 3,000 service teams are Microsoft&rsquo;s own internal figures, with customer percentages that carry no stated baseline; the <strong>three-tier incident-response<\/strong> MTTR ranges are the author&rsquo;s illustrative numbers, and the article says so itself; and the <strong>governance<\/strong> podcast write-up rests on theCUBE Research&rsquo;s own survey plus an unnamed anecdote about 8,000 discovered agents. Meanwhile <strong>Vercel<\/strong>&rsquo;s gateway telemetry shows open-weight models crossing <strong>56% of tokens<\/strong> in August while <strong>Anthropic still takes about 64 cents of every dollar<\/strong> &mdash; a volume-versus-spend split worth understanding before anyone tells you open weights have won.<\/p>\n<div class=\"watchlist\">\n<h2>On our watch list<\/h2>\n<ul>\n<li><strong>Whether Uber&rsquo;s three anti-schema mechanisms show up in anyone else&rsquo;s numbers.<\/strong> CLI tool resolution, on-demand tool search and code-mode batching are transferable to any MCP gateway, and the claimed result &mdash; near-zero schema tokens per session with 9.4x more agent requests on flat spend &mdash; is large enough to be worth reproducing. Watch for a second organisation publishing its own before-and-after cost per 1,000 agent requests rather than a vendor repeating Uber&rsquo;s.<\/li>\n<li><strong>Whether the vendors whose MCP servers ship 30&ndash;50 tools start trimming them.<\/strong> Uber found third-party servers were the worst offenders: a workspace suite exposing 49 tools for about 22K tokens of schema, a messaging vendor 34, a project tracker 46. Watch whether vendors begin shipping scoped or lazily loaded tool catalogues, because until they do, the fix stays on the customer&rsquo;s side of the gateway.<\/li>\n<li><strong>Whether DoorDash&rsquo;s 90% pass rate survives contact with someone else&rsquo;s codebase.<\/strong> The work was accepted to the ICSME 2026 industry track, so the method will be public and checkable. The hard case is already named &mdash; dependency-injected wrappers spreading a flag across 5 to 20 files, the reason Uber&rsquo;s AST-based Piranha did not work. Watch for a replication that reports its own merge rate by complexity, not just a headline percentage.<\/li>\n<li><strong>Whether Anthropic&rsquo;s spend share on Vercel&rsquo;s gateway finally breaks below 61%.<\/strong> It has not done so in any month since December 2025, even as open-weight token volume went from 7% to 56%. These are Vercel&rsquo;s own gateway numbers and skew toward web developers and coding agents, so watch the September and October reports for the spend line specifically &mdash; token share moving is not the same event as spend share moving.<\/li>\n<li><strong>The Splunk GA dates that have not landed yet.<\/strong> Agent Observability with Tokenomics, the Network Intelligence App and Cisco AI POD for Splunk were dated 15 September 2026; Observability and Enterprise Security integration is promised for end-2026, FedRAMP coverage for January 2027, Splunk Enterprise on-prem for later in 2027, and Agent Launchpad later this year. No pricing has been disclosed for any of it. Watch the dates slip or hold before you build a 2027 plan on them.<\/li>\n<li><strong>Whether MCP&rsquo;s governance actually stays plural.<\/strong> The protocol has 40+ maintainers with fewer than 25% at Anthropic, tier-1 SDKs pulling roughly 500 million downloads a month, and a home at the Linux Foundation&rsquo;s Agentic AI Foundation since December 2025. That maintainer ratio is the number to re-check in six months if you are betting infrastructure on the protocol.<\/li>\n<li><strong>Whether anyone publishes agent-identity numbers with a named source behind them.<\/strong> This week&rsquo;s most-quoted governance figure &mdash; 8,000 agents discovered inside one engineering organisation &mdash; is an anecdote with no organisation attached, sitting next to survey findings from theCUBE Research&rsquo;s own panel. Watch for a discovery count published by the organisation that ran the discovery.<\/li>\n<li><strong>Whether BlueGreen deployment closes Lyft&rsquo;s redeploy window.<\/strong> Stop-then-start redeploys cost 3&ndash;6 minutes on a typical job and about 20 minutes on the largest. BlueGreen mode arrived in Flink Kubernetes Operator 1.14.0 on 15 February 2026, and Lyft has already found and reported one bug in it. Watch for published before-and-after downtime from a fleet running it in anger.<\/li>\n<li><strong>Whether Karmada&rsquo;s graduation produces adopter numbers.<\/strong> The CNCF announcement lists Bloomberg, Trip.com, Alibaba Cloud, Huawei, Bilibili, iFLYTEK and others by name and gives no cluster, node or pod counts for any of them. Watch for the first adopter to publish multi-cluster scale figures, because 1,214 contributors tells you about the project and nothing about the deployments.<\/li>\n<li><strong>Whether the sponsored SRE-agent figures ever get a baseline.<\/strong> Microsoft&rsquo;s own internal numbers &mdash; 1.8 million+ incidents handled, 3,000+ service teams, more than 50% of incidents autonomous for some teams &mdash; are the largest deployed dataset in this category. The customer percentages beside them (80% less investigation time, 84% lower cost) state no baseline at all. Watch for a customer publishing the before number.<\/li>\n<li><strong>Whether monitoring overhead on agent inference gets measured independently.<\/strong> The claim in circulation is roughly 20% added inference compute for persistent agent monitoring, sourced this week to an Nvidia product executive rather than a benchmark. If agent observability costs a fifth of your inference bill, that belongs in the business case &mdash; watch for a figure from someone not selling the runtime.<\/li>\n<\/ul><\/div>\n<p>            <!-- Topic map --><\/p>\n<div class=\"topic-map\">\n              <img decoding=\"async\" src=\"https:\/\/www.cybersecurityinstitute.com\/blog\/wp-content\/uploads\/2026\/09\/topic-map-aiops-2026-09-20.png\" alt=\"Topic map of this week&rsquo;s AI Ops themes: AI Ops at the centre linked to token economics, agent governance and sprawl, agents doing ops work, the Kubernetes platform for AI, automated root-cause analysis and multi-region resilience; a token-economics cluster tying Uber, context and schema hygiene and the Model Context Protocol to Vercel, the Vercel AI Gateway, open-weight models, Anthropic and Claude Opus 5; a Splunk and Cisco cluster linking Splunk Agent Observability, Tokenomics, Splunk Token Meter, the Splunk log-reasoning LLM, Cisco AI POD for Splunk, Jeetu Patel, Nvidia and OpenTelemetry; a governance cluster linking agent identity, runtime guardrails, the Agentic AI Foundation, WSO2 Agent Manager, StackGen Aiden OS, agent harnesses and Traefik Labs with SUSE; an agent-operations cluster linking DoorDash, feature-flag debt, Azure SRE Agent, Microsoft, toil and MTTR reduction and vendor-sourced numbers; a Kubernetes platform cluster linking Lyft, Apache Flink, the Flink Kubernetes Operator, autoscaler right-sizing, Karmada, CNCF, multi-cluster scheduling, TauGrid, GPU scheduling, Dropbox and infrastructure efficiency; a resilience cluster linking AWS, Bahrain, the United Arab Emirates, long-running incidents, Enova and Vanessa Huerta Granda; and an AI-native cluster linking why agents fail, Nvidia OpenShell and Nemotron\" loading=\"eager\"><\/p>\n<p class=\"caption\">This week&rsquo;s topic map &mdash; token economics anchors the upper centre, wiring Uber and context hygiene to the Model Context Protocol and Vercel&rsquo;s gateway to open-weight models, Anthropic and Claude Opus 5. Splunk and Cisco sit to the right through Agent Observability, Tokenomics, Token Meter and the AI POD; agent governance runs through the centre via agent identity, runtime guardrails, WSO2 Agent Manager and StackGen Aiden OS. The Kubernetes platform cluster fills the lower right with Karmada, CNCF, TauGrid, GPU scheduling and Lyft&rsquo;s Flink operator and autoscaler; AWS, Bahrain and the UAE anchor multi-region resilience on the left beside long-running incidents; and a vendor-sourced-numbers node ties the sponsored and contributed rows together, because that is where most of this week&rsquo;s percentages come from.<\/p>\n<p>              <!-- INTERACTIVE_MAP_LINK_START --><\/p>\n<p style=\"margin:10px 0 0;text-align:center;\"><a href=\"https:\/\/www.cybersecurityinstitute.com\/blog\/?p=5911\" target=\"_blank\" rel=\"noopener\" style=\"display:inline-block;padding:8px 18px;background-color:#0f172a;color:#ffffff !important;text-decoration:none;border-radius:6px;font-size:13px;font-weight:600;\">View interactive topic map &rarr;<\/a><\/p>\n<p><!-- INTERACTIVE_MAP_LINK_END -->\n            <\/div>\n<p>            <!-- Article index --><\/p>\n<h2>Article index<\/h2>\n<p style=\"font-size:13px;color:#6b7280;font-style:italic;margin:0 0 6px 0;\">25 articles, grouped by sub-theme. Nineteen are from this week&rsquo;s coverage window (September 14&ndash;20); six are longer-form foundational reads on the beat. Sponsorships, contributed posts and author affiliations are named in each group.<\/p>\n<h3>Token economics as an operations discipline<\/h3>\n<div class=\"cluster-intro\">The through-line of the week: token spend is now a line item with an owner, and the levers are context hygiene, model routing and per-session attribution. Uber&rsquo;s and Vercel&rsquo;s figures come from their own production systems &mdash; Vercel&rsquo;s are gateway telemetry, not a market-wide measurement. The three Splunk rows are vendor announcements: <strong>the Network World piece is a press-release rewrite and every capability claim in it is Cisco&rsquo;s<\/strong>, and the SiliconANGLE roundup is five separately-sourced keynote sections rather than one argument.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>1. <a href=\"https:\/\/www.thestack.technology\/1-000-mcp-servers-zero-schema-bloat-ubers-assault-on-ai-costs\/\">1,000 MCP servers, zero schema bloat? Lessons from Uber&rsquo;s attack on AI costs<\/a><\/td>\n<td class=\"src\">The Stack<\/td>\n<td class=\"dt\">Sep 16, 2026<\/td>\n<\/tr>\n<tr>\n<td>2. <a href=\"https:\/\/thenewstack.io\/open-weight-anthropic-spend\/\">Open-weight models now handle a majority of tokens on Vercel&rsquo;s AI Gateway. But Anthropic still takes 64% of the spend.<\/a><\/td>\n<td class=\"src\">The New Stack<\/td>\n<td class=\"dt\">Sep 18, 2026<\/td>\n<\/tr>\n<tr>\n<td>3. <a href=\"https:\/\/www.networkworld.com\/article\/4222333\/cisco-brings-splunk-ai-on-premises-expands-agent-observability-monitors-token-costs.html\">Cisco brings Splunk AI on premises, expands agent observability, monitors token costs<\/a><\/td>\n<td class=\"src\">Network World<\/td>\n<td class=\"dt\">Sep 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>4. <a href=\"https:\/\/siliconangle.com\/2026\/09\/16\/trust-becomes-the-product-five-takeaways-from-the-splunk-conf26-keynotes\/\">Trust becomes the product: Five takeaways from the Splunk .conf26 keynotes<\/a> <em>(keynote roundup)<\/em><\/td>\n<td class=\"src\">SiliconANGLE<\/td>\n<td class=\"dt\">Sep 16, 2026<\/td>\n<\/tr>\n<tr>\n<td>5. <a href=\"https:\/\/devops.com\/splunk-open-sources-token-meter-tool-for-application-developers\/\">Splunk Open Sources Token Meter Tool for Application Developers<\/a><\/td>\n<td class=\"src\">DevOps.com<\/td>\n<td class=\"dt\">Sep 18, 2026<\/td>\n<\/tr>\n<\/table>\n<h3>Agents doing real operations work, with a measured pass rate<\/h3>\n<div class=\"cluster-intro\">Three items on agents performing maintenance and incident work, and only one of them has an independently reported cost-and-accuracy figure. <strong>The Azure SRE Agent post is sponsored by Microsoft Azure<\/strong> and every number in it is Microsoft&rsquo;s own; its customer percentages carry no stated baseline. <strong>The three-tier piece is a contributed post<\/strong> whose MTTR ranges are the author&rsquo;s illustrative figures &mdash; the article itself calls them directional.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>6. <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/doordash-feature-flag-cleanup\/\">DoorDash Uses Multi Agent LLMs to Clean up 60,000 Feature Flags<\/a><\/td>\n<td class=\"src\">InfoQ<\/td>\n<td class=\"dt\">Sep 18, 2026<\/td>\n<\/tr>\n<tr>\n<td>7. <a href=\"https:\/\/thenewstack.io\/azure-sre-agent-operations\/\">Agents operate, humans govern: Scale your operations and reduce toil with Azure SRE Agent<\/a> <em>(foundational, Microsoft Azure-sponsored)<\/em><\/td>\n<td class=\"src\">The New Stack<\/td>\n<td class=\"dt\">Sep 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>8. <a href=\"https:\/\/devops.com\/the-three-tiers-of-agentic-incident-response-when-to-trust-ai-autonomy\/\">The Three Tiers of Agentic Incident Response: When to Trust AI Autonomy<\/a> <em>(foundational, contributed)<\/em><\/td>\n<td class=\"src\">DevOps.com<\/td>\n<td class=\"dt\">Sep 16, 2026<\/td>\n<\/tr>\n<\/table>\n<h3>Governing agent sprawl: identity, policy and the control plane<\/h3>\n<div class=\"cluster-intro\">The category that produced the most announcements and the fewest numbers. The MCP status report is the substantive item; the WSO2 and StackGen rows are press-release rewrites with no adoption figures; <strong>the governance piece is a write-up of a podcast whose two guests both sell into this space<\/strong>; and the harness explainer is a single-source Q&amp;A, not a market survey.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>9. <a href=\"https:\/\/www.thestack.technology\/state-of-mcp-multi-agent-identities-and-overlapping-protocols\/\">State of MCP &mdash; Multi-agent, identities, and overlapping protocols<\/a><\/td>\n<td class=\"src\">The Stack<\/td>\n<td class=\"dt\">Sep 18, 2026<\/td>\n<\/tr>\n<tr>\n<td>10. <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/ws02-agent-manager\/\">WSO2 Releases Agent Manager as Enterprises Look to Control Growing AI Agent Sprawl<\/a><\/td>\n<td class=\"src\">InfoQ<\/td>\n<td class=\"dt\">Sep 18, 2026<\/td>\n<\/tr>\n<tr>\n<td>11. <a href=\"https:\/\/siliconangle.com\/2026\/09\/15\/stackgen-launches-autonomous-operations-factory-to-govern-production-agents\/\">StackGen launches Autonomous Operations Factory to govern production agents<\/a><\/td>\n<td class=\"src\">SiliconANGLE<\/td>\n<td class=\"dt\">Sep 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>12. <a href=\"https:\/\/siliconangle.com\/2026\/09\/19\/ai-governance-provable-control-agentic-ai-thecube-appdevangle\/\">AI governance shifts toward provable control<\/a> <em>(vendor-executive podcast)<\/em><\/td>\n<td class=\"src\">SiliconANGLE<\/td>\n<td class=\"dt\">Sep 19, 2026<\/td>\n<\/tr>\n<tr>\n<td>13. <a href=\"https:\/\/www.techtarget.com\/ai\/news\/366650281\/AI-harnesses-bring-coordination-and-guardrails-to-enterprise-AI-agents\">Harnesses bring coordination and guardrails to enterprise AI agents<\/a> <em>(foundational, single-source Q&amp;A)<\/em><\/td>\n<td class=\"src\">TechTarget<\/td>\n<td class=\"dt\">Sep 14, 2026<\/td>\n<\/tr>\n<\/table>\n<h3>Observability that diagnoses rather than displays<\/h3>\n<div class=\"cluster-intro\">The common mechanism across this group: normalise metrics, logs and traces into one anomaly representation and correlate over the topology graph. Atlassian&rsquo;s is the most mechanically detailed write-up of the week and carries no time-to-diagnosis baseline; the Splunk model announcement names no parameter count, licence or release date; the O&rsquo;Reilly essay is argument rather than data and says so.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>14. <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/atlassian-automated-rca\/\">Atlassian Automates Root Cause Analysis by Correlating Metrics, Logs and Traces<\/a><\/td>\n<td class=\"src\">InfoQ<\/td>\n<td class=\"dt\">Sep 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>15. <a href=\"https:\/\/devops.com\/splunk-preps-second-open-source-llm-for-telemetry-data\/\">Splunk Preps Second Open Source LLM for Telemetry Data<\/a><\/td>\n<td class=\"src\">DevOps.com<\/td>\n<td class=\"dt\">Sep 16, 2026<\/td>\n<\/tr>\n<tr>\n<td>16. <a href=\"https:\/\/www.oreilly.com\/radar\/enterprise-analytics-beyond-dashboards-intelligent-data-orchestration-with-llms\/\">Enterprise Analytics Beyond Dashboards: Intelligent Data Orchestration with LLMs<\/a> <em>(foundational, essay)<\/em><\/td>\n<td class=\"src\">O&rsquo;Reilly Radar<\/td>\n<td class=\"dt\">Sep 14, 2026<\/td>\n<\/tr>\n<\/table>\n<h3>Platform plumbing for AI workloads<\/h3>\n<div class=\"cluster-intro\">Where the AI workload actually runs: a streaming fleet moved onto a community operator, a multi-cluster scheduler graduating, a GPU workload manager open-sourced, and a storage platform making room for AI by spending less power on what it already runs. Note that the InfoWorld headline oversells its subject &mdash; the story is an open-source, self-hosted application, not an AWS product bet.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>17. <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/lyft-flink-k8s-operator\/\">Lyft Moves Streaming Fleet to Apache Flink Kubernetes Operator<\/a><\/td>\n<td class=\"src\">InfoQ<\/td>\n<td class=\"dt\">Sep 16, 2026<\/td>\n<\/tr>\n<tr>\n<td>18. <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/karmada-kubernetes-cncf\/\">Kubernetes Multi-Cluster Project Karmada Reaches CNCF Graduation<\/a><\/td>\n<td class=\"src\">InfoQ<\/td>\n<td class=\"dt\">Sep 17, 2026<\/td>\n<\/tr>\n<tr>\n<td>19. <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/microsoft-taugrid-open-source\/\">Microsoft Open-Sources TauGrid to Simplify AI Workload Management on Kubernetes<\/a><\/td>\n<td class=\"src\">InfoQ<\/td>\n<td class=\"dt\">Sep 16, 2026<\/td>\n<\/tr>\n<tr>\n<td>20. <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/dropbox-datacenter\/\">Dropbox Outlines How Focusing on Existing Infrastructure Efficiency Can Create Headroom for AI<\/a><\/td>\n<td class=\"src\">InfoQ<\/td>\n<td class=\"dt\">Sep 16, 2026<\/td>\n<\/tr>\n<tr>\n<td>21. <a href=\"https:\/\/www.infoworld.com\/article\/4222882\/aws-bets-that-ai-agents-need-an-inbox-not-another-chat-window.html\">AWS bets that AI agents need an inbox, not another chat window<\/a><\/td>\n<td class=\"src\">InfoWorld<\/td>\n<td class=\"dt\">Sep 16, 2026<\/td>\n<\/tr>\n<\/table>\n<h3>When the redundancy design is the thing that failed<\/h3>\n<div class=\"cluster-intro\">Two failures that healthy components and correct multi-AZ design did not prevent, and one of them is permanent. The AWS reporting is built on the status page rather than a post-incident review, so no service list or customer count exists yet. The InfoQ item is a recorded QCon San Francisco presentation with a transcript, not a written article.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>22. <a href=\"https:\/\/www.thestack.technology\/aws-cloud-instances-in-bahrain-uae-might-be-lost-for-good\/\">AWS: Cloud instances in Bahrain, UAE might be lost for good<\/a><\/td>\n<td class=\"src\">The Stack<\/td>\n<td class=\"dt\">Sep 15, 2026<\/td>\n<\/tr>\n<tr>\n<td>23. <a href=\"https:\/\/www.infoq.com\/presentations\/stream-incidents\/\">When Incidents Refuse to End<\/a> <em>(foundational, QCon presentation)<\/em><\/td>\n<td class=\"src\">InfoQ<\/td>\n<td class=\"dt\">Sep 17, 2026<\/td>\n<\/tr>\n<\/table>\n<h3>Ops culture and the AI-native transition<\/h3>\n<div class=\"cluster-intro\">What changes in an engineering organisation when agents do the work, and why an agent failure is usually not a model failure. Both pieces rest on single interested sources &mdash; an Nvidia product executive in one, a keynote anecdote in the other &mdash; so take the framing and leave the percentages.<\/div>\n<table class=\"index-table\">\n<tr>\n<th>Article<\/th>\n<th>Source<\/th>\n<th>Published<\/th>\n<\/tr>\n<tr>\n<td>24. <a href=\"https:\/\/www.oreilly.com\/radar\/how-to-get-from-ai-assisted-to-ai-native\/\">How to Get from AI-Assisted to AI Native<\/a> <em>(foundational, essay)<\/em><\/td>\n<td class=\"src\">O&rsquo;Reilly Radar<\/td>\n<td class=\"dt\">Sep 18, 2026<\/td>\n<\/tr>\n<tr>\n<td>25. <a href=\"https:\/\/thenewstack.io\/nvidia-agent-debugging-safe\/\">Your AI agent failed. The model might not be the problem.<\/a><\/td>\n<td class=\"src\">The New Stack<\/td>\n<td class=\"dt\">Sep 20, 2026<\/td>\n<\/tr>\n<\/table>\n<p>            <!-- Detailed write-ups --><\/p>\n<h2>Detailed write-ups<\/h2>\n<div class=\"article\">\n<h4>1. Uber deleted the tool schemas and the agent bill stopped growing<\/h4>\n<p class=\"meta\">The Stack &middot; September 16, 2026<\/p>\n<p>The most useful engineering story of the week is about removing something. <strong>Uber<\/strong> runs more than <strong>1,000 MCP servers<\/strong> behind a single unified gateway, and at the outset roughly <strong>100 tools<\/strong> were installed into the agent context by default. Those schemas alone cost <strong>50,000&ndash;70,000 tokens<\/strong> of context before the agent did any work &mdash; paid on every session, for tools most sessions never called. Uber&rsquo;s answer was not a smaller model or a bigger context window. It stopped pre-loading schemas at all, and reports the cost of doing so as &ldquo;near-zero per session&rdquo;.<\/p>\n<p>Three mechanisms replaced pre-loading, and all three are portable. <strong>CLI tool resolution<\/strong> lets the agent invoke a shell command at the moment of need rather than carrying a definition in case it is needed. <strong>Tool search<\/strong> is an on-demand catalogue lookup that loads only the relevant definition. <strong>Code-mode batching<\/strong> has the model write a script, a subprocess execute it, and only a summary return to the context window &mdash; which is the one that changes the shape of the cost curve, because the intermediate output never enters the context at all. The workloads in scope are ordinary operations work: code review, self-healing CI failures, end-to-end PR completion with visual validation, on-call alert triage and bug debugging.<\/p>\n<p>The part worth taking to a budget conversation is the trend line. Between <strong>February and August 2026<\/strong>, weekly active users of Uber&rsquo;s AI coding tools rose <strong>7x<\/strong> and weekly agent requests rose <strong>9.4x<\/strong>, while total spend stayed roughly flat from April onward. Cost per 1,000 agent requests fell about <strong>34%<\/strong> and cost per session about <strong>52%<\/strong> from its peak. Uber is explicit about where the problem originated, and it is a warning for anyone assembling an agent platform from vendor connectors: third-party MCP servers were the worst offenders, because vendors expose their full product surface &mdash; a workspace suite shipping <strong>49 tools for about 22K tokens<\/strong> of schema, a messaging vendor <strong>34 tools<\/strong>, a project tracker <strong>46<\/strong>. <strong>Uday Medisetty<\/strong>, a distinguished engineer at Uber, puts it plainly: &ldquo;Managing third-party software proved significantly more challenging than our internal servers. Vendors design MCP servers to expose full product capabilities.&rdquo;<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.thestack.technology\/1-000-mcp-servers-zero-schema-bloat-ubers-assault-on-ai-costs\/\">The Stack (1,000 MCP servers, zero schema bloat?) &mdash; https:\/\/www.thestack.technology\/1-000-mcp-servers-zero-schema-bloat-ubers-assault-on-ai-costs\/<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>2. DoorDash put a number on agentic code maintenance: 45 of 50, $4.79 each<\/h4>\n<p class=\"meta\">InfoQ &middot; September 18, 2026<\/p>\n<p><strong>DoorDash<\/strong> carries more than <strong>60,000 feature flags<\/strong> across <strong>623 repositories<\/strong> and creates roughly <strong>2,300 new flags every month<\/strong>; over <strong>1,000<\/strong> were classified stale, meaning unmodified for 90 days, still referenced in code, and neither archived nor explicitly excluded. This is the kind of debt that never wins a sprint planning argument, which is exactly why it is a good test of whether agents can do maintenance work at a quality you would accept from a person.<\/p>\n<p>The architecture is the interesting half. <strong>Phase one<\/strong> runs <strong>Claude Sonnet<\/strong> on Google&rsquo;s <strong>Agent Development Kit<\/strong>: it pulls the stale-flag Jira ticket, searches the repositories and queries the experimentation platform over <strong>MCP<\/strong>. A human engineer then reviews the report and confirms the flag&rsquo;s target value &mdash; and only then does <strong>phase two<\/strong> run <strong>Claude Opus<\/strong> agents in isolated Git worktrees, capped at <strong>four concurrent agents per repository<\/strong>, with a <strong>one-hour timeout<\/strong> per agent and Gradle run without the daemon so agents cannot share build state. A pull request opens only after build, tests, JaCoCo patch coverage and Detekt static analysis all pass. The confirmation step and the isolation are doing as much work here as the model choice.<\/p>\n<p>The results are the first properly reported accuracy-and-cost figures for this kind of work. Across a <strong>50-flag evaluation<\/strong>, <strong>45 of 50 (90%)<\/strong> produced usable pull requests: <strong>31 merged first-pass<\/strong>, <strong>14 needed revision<\/strong> and <strong>5 required engineer intervention<\/strong>. <strong>Zero bugs or regressions<\/strong> were recorded across the 50 changes. Single-pass merge rate degraded predictably with difficulty &mdash; <strong>100% simple, 94% medium, 85% complex<\/strong> &mdash; and the average cleanup took <strong>13.8 minutes and $4.79<\/strong> against DoorDash&rsquo;s own baseline of one to two hours of manual engineer time per flag. The failure mode is named too: dependency-injected wrappers that spread a flag&rsquo;s definition, client calls and business logic across <strong>5 to 20 files<\/strong>, which is why Uber&rsquo;s AST-based <strong>Piranha<\/strong> tool did not work for this codebase. The work has been accepted to the <strong>ICSME 2026<\/strong> industry track, so the method will be checkable rather than merely quotable.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/doordash-feature-flag-cleanup\/\">InfoQ (DoorDash uses multi agent LLMs to clean up 60,000 feature flags) &mdash; https:\/\/www.infoq.com\/news\/2026\/09\/doordash-feature-flag-cleanup\/<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>3. Open weights took the tokens; Anthropic kept the money<\/h4>\n<p class=\"meta\">The New Stack &middot; September 18, 2026<\/p>\n<p>The single most useful chart in this issue is a volume-versus-spend split. On <strong>Vercel&rsquo;s AI Gateway<\/strong>, open-weight models&rsquo; share of token volume went <strong>7% in December 2025, 13% in April 2026, 36% in July, 56% in August<\/strong> &mdash; the first month they crossed a majority, with a single-day record of <strong>62% on 22 August<\/strong>. And yet in that same August, open-weight models took about <strong>14 cents of every dollar spent<\/strong> while <strong>Anthropic took about 64 cents<\/strong>. Anthropic&rsquo;s spend share has not dropped below <strong>61%<\/strong> in any month since December 2025. If your AI cost reporting tracks only token share, it is telling you a story your invoice does not support.<\/p>\n<p>Underneath the headline the mix is moving fast. Within Anthropic&rsquo;s August spend share, <strong>Claude Opus 5<\/strong> accounted for <strong>22.5%<\/strong> and rose month-over-month, while <strong>Claude Fable 5<\/strong> fell to <strong>4.9%<\/strong> from <strong>13.2%<\/strong> in July &mdash; <strong>90% of teams<\/strong> using Fable cut their usage, and Opus picked up nearly twice the volume Fable lost. Average price per token on the gateway fell <strong>23.2%<\/strong> in August, a third consecutive monthly decline, and for teams that processed <strong>10M+ tokens<\/strong> in both months the median cost per token fell <strong>7.6%<\/strong>. On the challenger side, <strong>Z.ai&rsquo;s GLM-5.3-Flash<\/strong> reached <strong>3x<\/strong> the daily volume of GLM-5.2 within five days of launch, and <strong>Google&rsquo;s Gemini 3 Flash<\/strong> lost <strong>22 of 25 percentage points<\/strong> of Google&rsquo;s overall share, with more than <strong>75%<\/strong> of that volume going to competitors rather than to other Google models.<\/p>\n<p>Two cautions before this goes into a slide. First, every figure here is <strong>Vercel&rsquo;s own gateway telemetry, not a market-wide measurement<\/strong>; the gateway skews toward web and JavaScript developers and toward coding agents, so the right phrasing is always &ldquo;on Vercel&rsquo;s AI Gateway&rdquo;. Second, Vercel&rsquo;s chief executive <strong>Guillermo Rauch<\/strong> is describing a transition he expects to continue: &ldquo;This is very likely just the start, because enterprise adoption is still early, and harnesses, CLIs, IDEs, SDKs, etc need to be adapted to be model agnostic.&rdquo; That is the operational point for platform teams &mdash; the constraint on routing cheaper models is tooling that assumes one provider, and it is yours to fix.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/thenewstack.io\/open-weight-anthropic-spend\/\">The New Stack (open-weight models now handle a majority of tokens on Vercel&rsquo;s AI Gateway) &mdash; https:\/\/thenewstack.io\/open-weight-anthropic-spend\/<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>4. Cisco puts Splunk AI on-premises and starts metering the tokens<\/h4>\n<p class=\"meta\">Network World &middot; September 15, 2026<\/p>\n<p>Five named pieces arrived or were pre-announced at <strong>.conf26<\/strong>, and the framing is consistent: instrument the AI stack the way you instrument an application, then charge for it. <strong>Cisco AI POD for Splunk<\/strong> is an on-premises and air-gapped AI runtime on Nvidia accelerated compute with a Kubernetes architecture, available now as part of Cisco Secure AI Factory. <strong>Splunk Agent Observability with Tokenomics<\/strong> instruments GPUs, vector databases, agent memory and orchestration frameworks rather than only the application, and applies runtime guardrails intended to block hallucinated output and prompt injection before it reaches a user. <strong>Observability Studio<\/strong> embeds OpenTelemetry instrumentation into the development workflow. The <strong>Network Intelligence App<\/strong> pulls Cisco network topology, device health and events into Splunk so network state sits beside application telemetry. <strong>Agent Launchpad<\/strong>, a custom agent builder, is expected later in 2026.<\/p>\n<p><strong>Tokenomics<\/strong> is the piece with the clearest operational job: track and attribute token consumption in real time, route workloads to cheaper models, and forecast consumption before the billing period closes, delivered through Splunk Observability Cloud and Cisco Cloud Control. Read the rest with the sourcing in mind &mdash; this announcement is a press-release rewrite, every capability claim is Cisco&rsquo;s, <strong>no pricing or licence terms were disclosed for any of the five items<\/strong>, and Cisco&rsquo;s claim that instrumentation time drops &ldquo;from hours to seconds or minutes&rdquo; is published with no measured baseline for the &ldquo;hours&rdquo;. <strong>Jeetu Patel<\/strong>, Cisco&rsquo;s president and chief product officer, gives the strategic line: &ldquo;One of the biggest roadblocks to enterprise AI today is that it&rsquo;s too hard to deploy.&rdquo;<\/p>\n<p>The keynote roundup is where the numbers live, and they are worth lifting with attribution because no other row carries them: agent token consumption <strong>overtook human consumption in February 2026<\/strong> and is now <strong>5x human volume<\/strong> seven months later; <strong>60% of global AI compute<\/strong> is going to inference rather than training; a guardrail evaluator cut evaluation cost from about <strong>$1,000 a day to &ldquo;a few dollars&rdquo;<\/strong>; and <strong>Constellation Energy<\/strong> took mean time to detect and respond on a cloud-native identity incident from about <strong>20 minutes to 39 seconds<\/strong>. Splunk data chief <strong>Kamal Hathi<\/strong>&rsquo;s summary of the economics is the quotable one: &ldquo;Capacity up 10x, bill flat.&rdquo; Note that the roundup is five separately-sourced sections, not a single thesis. Splunk also open-sourced two things this week, both thin on specifics: a <strong>Token Meter<\/strong> CLI that reads local AI coding-agent trace files and prices them against public model rates &mdash; surfacing tokens per second, model wait time, input-versus-output split and budget alerts, with a read-only MCP server and support for Claude Code, Codex, Cursor, OpenCode, Kiro and Pi &mdash; announced with <strong>no licence, repository or availability date<\/strong>; and a second open-source LLM, a <strong>log-reasoning model<\/strong> to follow Cisco Time Series Model 1.0 for metrics, to be published on Hugging Face with <strong>no parameter count, benchmark, named licence or release date<\/strong> disclosed.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.networkworld.com\/article\/4222333\/cisco-brings-splunk-ai-on-premises-expands-agent-observability-monitors-token-costs.html\">Network World (Cisco brings Splunk AI on premises) &mdash; https:\/\/www.networkworld.com\/article\/4222333\/cisco-brings-splunk-ai-on-premises-expands-agent-observability-monitors-token-costs.html<\/a> &middot; <a href=\"https:\/\/siliconangle.com\/2026\/09\/16\/trust-becomes-the-product-five-takeaways-from-the-splunk-conf26-keynotes\/\">SiliconANGLE (trust becomes the product: five takeaways from the Splunk .conf26 keynotes) &mdash; https:\/\/siliconangle.com\/2026\/09\/16\/trust-becomes-the-product-five-takeaways-from-the-splunk-conf26-keynotes\/<\/a> &middot; <a href=\"https:\/\/devops.com\/splunk-open-sources-token-meter-tool-for-application-developers\/\">DevOps.com (Splunk open sources Token Meter tool) &mdash; https:\/\/devops.com\/splunk-open-sources-token-meter-tool-for-application-developers\/<\/a> &middot; <a href=\"https:\/\/devops.com\/splunk-preps-second-open-source-llm-for-telemetry-data\/\">DevOps.com (Splunk preps second open source LLM for telemetry data) &mdash; https:\/\/devops.com\/splunk-preps-second-open-source-llm-for-telemetry-data\/<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>5. AWS says the Bahrain data is not coming back<\/h4>\n<p class=\"meta\">The Stack &middot; September 15, 2026<\/p>\n<p>This is the disaster-recovery story of the year so far, and it is short. Iranian drone attacks in <strong>March 2026<\/strong> damaged AWS infrastructure in both the <strong>Bahrain<\/strong> and <strong>UAE<\/strong> regions, and a secondary disruption in <strong>April 2026<\/strong> took the Bahrain region out entirely. On <strong>15 September 2026<\/strong> AWS posted a status update confirming that it cannot restore resources and data hosted exclusively in Bahrain. That is permanent loss, not an extended outage. In the UAE region, availability zone <strong>mec1-az2<\/strong> has been restored; <strong>az1 and az3 remain inaccessible<\/strong>.<\/p>\n<p>The sentence that should end a lot of internal arguments is AWS&rsquo;s own framing: the damage &ldquo;spanned multiple Availability Zones and exceeded what our regional and multi-AZ services are designed to withstand&rdquo;. Multi-AZ redundancy is a design for component and facility failure inside a region. It is not a design for losing the region, and AWS has now said so in writing. The second lesson is about the window: customers who did not migrate out after the March attacks are the ones who lost data in April. There was time, and using it was a decision.<\/p>\n<p>Two limits on what can responsibly be said about this. The reporting is built on the AWS Service Health status page rather than an interview or a published post-incident review, and <strong>no AWS spokesperson is quoted by name<\/strong> &mdash; the statement reads &ldquo;After a thorough assessment, we have determined that we are unable to restore access to the resources and data hosted exclusively in [Bahrain]&rdquo;, with the region name bracketed by the reporter. And the article <strong>does not name which services were affected and gives no customer or instance counts<\/strong>. For planning purposes that does not matter much: the actionable item is to find every workload whose only copy lives in one region, and that is an inventory question you can answer yourself this week.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.thestack.technology\/aws-cloud-instances-in-bahrain-uae-might-be-lost-for-good\/\">The Stack (AWS: cloud instances in Bahrain, UAE might be lost for good) &mdash; https:\/\/www.thestack.technology\/aws-cloud-instances-in-bahrain-uae-might-be-lost-for-good\/<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>6. MCP grows up, and the agent-governance market rushes the gap<\/h4>\n<p class=\"meta\">The Stack &middot; September 18, 2026<\/p>\n<p>The protocol underneath most of this issue now has scale numbers worth knowing. <strong>MCP<\/strong>&rsquo;s tier-1 SDKs are pulling roughly <strong>500 million downloads a month<\/strong>, more than <strong>1 billion tool calls<\/strong> have been recorded through the Claude platform alone, and the protocol has <strong>40+ maintainers with fewer than 25% of them at Anthropic<\/strong>. That last figure is the one that matters if you are betting infrastructure on it: MCP originated at Anthropic in late 2024 and was donated to the <strong>Linux Foundation&rsquo;s Agentic AI Foundation<\/strong> in December 2025, and the maintainer spread is the evidence that the donation was more than a press release. The open engineering questions the report covers are multi-agent topologies, agent identity, and the overlap between MCP and adjacent protocols. <strong>Mazin Gilbert<\/strong>, executive director of the Agentic AI Foundation, makes the maximal claim &mdash; &ldquo;You cannot deploy agentic applications at scale without MCP, that needs to become a central part of every deployment&rdquo; &mdash; and it is worth remembering he leads the foundation that hosts it.<\/p>\n<p>Around that protocol layer, three vendors shipped control planes this week and none of them published an adoption figure. <strong>WSO2 Agent Manager<\/strong> reached general availability on <strong>18 September<\/strong> after a June beta: open source, a sandboxed Kubernetes-native runtime, <strong>40+ built-in controls<\/strong> including PII masking and rate limiting, OpenTelemetry tracing, MCP and OAuth 2.0 extensions, and support for LangChain, CrewAI, Amazon Bedrock, Azure and Ballerina. <strong>StackGen<\/strong>&rsquo;s Autonomous Operations Factory pairs <strong>Aiden OS<\/strong> &mdash; a shared environment record with policy enforcement and action logging &mdash; with an <strong>Aiden World Model<\/strong> knowledge layer over deployments, changes, failures and fixes, shipping four built-in agents for infrastructure ops, DevOps, SRE and observability, with custom agents inheriting the same governance. It is in preview on AWS, Azure, Google Cloud and Oracle Cloud, with a free community edition of the reliability agent and no disclosed pricing. Two ecosystem statistics circulating with that launch &mdash; AI attributed to roughly 10% of disclosed outages in 2026, and at least nine documented cases of agents taking destructive production actions independently &mdash; are published <strong>with no named source at all<\/strong>, so do not carry them into a risk register.<\/p>\n<p>The conceptual vocabulary is settling at the same time, which helps. A <strong>harness<\/strong> is, in the useful definition offered this week, &ldquo;what sits between the agentic code and the models themselves&rdquo; &mdash; handling routing, access control, context management, evaluation and audit &mdash; with an accounts-payable workflow in which <strong>10 to 15 different agents<\/strong> are presented to the user as a single agent. That comes from a one-source Q&amp;A with a consultancy chief executive, not a survey of the category, so treat it as a definition rather than a market map. The same caution applies harder to the week&rsquo;s &ldquo;provable control&rdquo; governance discussion: it is a write-up of a podcast whose two guests are both vendor executives with products in this space, and its figures &mdash; <strong>47%<\/strong> of respondents operating across mixed connected and disconnected environments, <strong>11%<\/strong> deploying generative AI in on-premises and air-gapped infrastructure, and <strong>8,000 agents<\/strong> discovered inside one engineering organisation &mdash; come from theCUBE Research&rsquo;s own survey and, for the 8,000, an anecdote with no organisation named.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.thestack.technology\/state-of-mcp-multi-agent-identities-and-overlapping-protocols\/\">The Stack (state of MCP) &mdash; https:\/\/www.thestack.technology\/state-of-mcp-multi-agent-identities-and-overlapping-protocols\/<\/a> &middot; <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/ws02-agent-manager\/\">InfoQ (WSO2 releases Agent Manager) &mdash; https:\/\/www.infoq.com\/news\/2026\/09\/ws02-agent-manager\/<\/a> &middot; <a href=\"https:\/\/siliconangle.com\/2026\/09\/15\/stackgen-launches-autonomous-operations-factory-to-govern-production-agents\/\">SiliconANGLE (StackGen launches Autonomous Operations Factory) &mdash; https:\/\/siliconangle.com\/2026\/09\/15\/stackgen-launches-autonomous-operations-factory-to-govern-production-agents\/<\/a> &middot; <a href=\"https:\/\/www.techtarget.com\/ai\/news\/366650281\/AI-harnesses-bring-coordination-and-guardrails-to-enterprise-AI-agents\">TechTarget (harnesses bring coordination and guardrails to enterprise AI agents) &mdash; https:\/\/www.techtarget.com\/ai\/news\/366650281\/AI-harnesses-bring-coordination-and-guardrails-to-enterprise-AI-agents<\/a> &middot; <a href=\"https:\/\/siliconangle.com\/2026\/09\/19\/ai-governance-provable-control-agentic-ai-thecube-appdevangle\/\">SiliconANGLE (AI governance shifts toward provable control) &mdash; https:\/\/siliconangle.com\/2026\/09\/19\/ai-governance-provable-control-agentic-ai-thecube-appdevangle\/<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>7. Lyft gave up its own Flink operator and found the money in the autoscaler<\/h4>\n<p class=\"meta\">InfoQ &middot; September 16, 2026<\/p>\n<p><strong>Lyft<\/strong> migrated hundreds of production <strong>Apache Flink<\/strong> jobs off an in-house operator it had run since <strong>2020<\/strong> and onto the community <strong>Flink Kubernetes Operator<\/strong>, upgrading Flink <strong>1.17 to 1.19<\/strong> in the process. The version floor was not a preference: the Kinesis connector forced it, because <strong>flink-connector-aws 5.0.0+<\/strong>, from November 2024, requires Flink 1.19 or later. This is the ordinary shape of platform work &mdash; a dependency sets the deadline, and the migration you had been deferring becomes this quarter&rsquo;s project.<\/p>\n<p>The return came from a component most teams treat as a nice-to-have. Lyft attributes <strong>&ldquo;a few million dollars per year&rdquo;<\/strong> of savings to the operator&rsquo;s autoscaler right-sizing a fleet that had been overprovisioned by roughly that amount &mdash; in the words of streaming engineers <strong>Maheep Myneni, Arda Kuyumcu and Prem Santosh Udaya Shankar<\/strong>, &ldquo;The autoscaler is doing what we had hoped, which is right-sizing a fleet that had been overprovisioned by a few million dollars per year.&rdquo; The catalogue of what the legacy operator lacked is the more transferable artefact: no savepoint retry logic, no idempotency, a single <code>systemMemoryFraction<\/code> knob covering all non-JVM memory overhead, and dual deployments with manual traffic switching required to upgrade a job. If your home-grown operator has any three of those, you already know what the migration would buy.<\/p>\n<p>What has not been solved is downtime on redeploy. Stop-then-start takes <strong>3&ndash;6 minutes<\/strong> for a typical job and about <strong>20 minutes<\/strong> for the largest, which is the gap <strong>BlueGreen deployment mode<\/strong> &mdash; added in operator release <strong>1.14.0<\/strong> on <strong>15 February 2026<\/strong> &mdash; is meant to close. Lyft found and reported a BlueGreen bug upstream and the fix landed in the Apache project within days, which is the argument for community operators stated better than any vendor could put it: the bug you find is fixed for everyone, and you did not have to fix it yourself.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/lyft-flink-k8s-operator\/\">InfoQ (Lyft moves streaming fleet to Apache Flink Kubernetes Operator) &mdash; https:\/\/www.infoq.com\/news\/2026\/09\/lyft-flink-k8s-operator\/<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>8. Karmada graduates, TauGrid opens, Dropbox makes room without buying racks<\/h4>\n<p class=\"meta\">InfoQ &middot; September 17, 2026<\/p>\n<p><strong>Karmada<\/strong> graduated from the <strong>CNCF<\/strong> in September 2026, five years after entering the Sandbox in September 2021 and moving to Incubating in December 2023. At graduation the project counts <strong>1,214+ contributors from 292 organisations<\/strong> and <strong>5,600+ GitHub stars<\/strong>, with release <strong>v1.19<\/strong> landing alongside the announcement. The architecture is worth knowing even if you never adopt it: a control plane of three components &mdash; API server, controller manager and scheduler &mdash; plus its own dedicated etcd, running four internal controllers for Cluster, Policy, Binding and Execution. Scheduling is driven by two custom APIs, <strong>PropagationPolicy<\/strong> for which clusters a workload lands on and <strong>OverridePolicy<\/strong> for per-cluster mutation, so existing Kubernetes manifests propagate across clusters without being rewritten. That is the design choice that makes multi-cluster tractable for teams with an existing manifest estate. Named production adopters include <strong>Bloomberg, Trip.com, Alibaba Cloud, Huawei, Bilibili, iFLYTEK, JDCloud, Kuaishou, SenseTime, Vivo and ZTO<\/strong> &mdash; a list of names only, with no cluster, node or pod counts published for any of them. <strong>Honghui Yue<\/strong>, a senior development expert at Trip.com, offers the adopter framing: &ldquo;At Trip.com, Karmada has become critical infrastructure, enabling unified resource pools without changing existing Kubernetes definitions.&rdquo;<\/p>\n<p><strong>Microsoft<\/strong> open-sourced <strong>TauGrid<\/strong> for AI workload management on Kubernetes, and the verifiable surface is: a Go codebase at <code>github.com\/Azure\/taugrid<\/code>, a requirement for Kubernetes <strong>1.30+<\/strong> with GPU nodes, kubectl and Helm 3.0+, a <code>tau<\/code> CLI, integration with <strong>Kueue<\/strong> for queuing and <strong>KubeRay<\/strong> for orchestration, topology-aware GPU scheduling, workload checkpoint and resume, and GPU-node health monitoring. What is absent is any measurement: <strong>no utilisation, throughput or queue-time figures, no cluster sizes, no comparison against Kueue, Volcano or KAI, and no stated licence<\/strong>. The only concrete configuration published is a sample PyTorch job, which is an example manifest and not a benchmark result. Evaluate it on the feature list and your own cluster, not on the announcement.<\/p>\n<p><strong>Dropbox<\/strong>&rsquo;s contribution is the least fashionable and possibly the most reusable: create headroom for AI by spending less on what you already run. The one figure with a stated baseline is storage power efficiency improving <strong>more than 50% since 2020<\/strong>, measured in watts per petabyte. The rest is qualitative and still instructive &mdash; seventh-generation servers drawing more power handled by doubling PDUs per rack while keeping existing busways; a <strong>&ldquo;Deep Sleep&rdquo;<\/strong> system that powers idle servers and disks into standby and returns them to service within minutes; shingled magnetic recording for density; and hardware lifecycle extension driven by observed reliability rather than a fixed age, all inside the <strong>Magic Pocket<\/strong> storage system. There are <strong>no dollar savings, no server or rack counts and no figure for capacity actually freed for AI<\/strong>, so treat it as a set of levers to check in your own estate rather than a result to cite. The same week&rsquo;s reminder that headlines oversell: an InfoWorld piece framed as an AWS strategic bet on agent inboxes is in fact about <strong>Pizza Bot<\/strong>, an open-source, self-hosted application built on <strong>LangChain&rsquo;s Deep Agents<\/strong> with <strong>LangGraph<\/strong> as the stateful runtime, supporting Anthropic, OpenAI, Google Gemini, Amazon Bedrock and local models via Ollama. There is no availability date, no pricing, and &mdash; as analyst <strong>Manoj Chandra Jha<\/strong> notes &mdash; no support or SLA, which leaves the operational burden with whoever deploys it.<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/karmada-kubernetes-cncf\/\">InfoQ (Kubernetes multi-cluster project Karmada reaches CNCF graduation) &mdash; https:\/\/www.infoq.com\/news\/2026\/09\/karmada-kubernetes-cncf\/<\/a> &middot; <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/microsoft-taugrid-open-source\/\">InfoQ (Microsoft open-sources TauGrid) &mdash; https:\/\/www.infoq.com\/news\/2026\/09\/microsoft-taugrid-open-source\/<\/a> &middot; <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/dropbox-datacenter\/\">InfoQ (Dropbox outlines how infrastructure efficiency can create headroom for AI) &mdash; https:\/\/www.infoq.com\/news\/2026\/09\/dropbox-datacenter\/<\/a> &middot; <a href=\"https:\/\/www.infoworld.com\/article\/4222882\/aws-bets-that-ai-agents-need-an-inbox-not-another-chat-window.html\">InfoWorld (AWS bets that AI agents need an inbox) &mdash; https:\/\/www.infoworld.com\/article\/4222882\/aws-bets-that-ai-agents-need-an-inbox-not-another-chat-window.html<\/a><\/p>\n<\/p><\/div>\n<div class=\"article\">\n<h4>9. Diagnosis, autonomy tiers, and the incidents that refuse to end<\/h4>\n<p class=\"meta\">InfoQ &middot; September 15&ndash;17, 2026<\/p>\n<p>The most mechanically detailed observability write-up of the week comes from <strong>Atlassian<\/strong>, and it describes a correlation engine rather than a dashboard. Metrics are checked for rate, error and duration changes; traces for exceptions, latency and structural changes; logs are grouped into new or unusual error patterns; and all three are normalised into a <strong>common anomaly format<\/strong> and correlated across signal type, time and topology. The topology comes from an <strong>OpenTelemetry-derived service map<\/strong> whose dependency graph is built from real production traffic via parent-child span relationships, with sequence fingerprinting to collapse recurring failure patterns. Most teams already emit what that map needs. What the piece carries no trace of is measurement: <strong>no time-to-diagnosis baseline, no incident volume, no adoption figure, no named engineer, and no product name<\/strong> for the platform. Read it as a mechanism to copy, not a result to cite.<\/p>\n<p>On the response side, the useful contribution is a taxonomy and the useful caution is about its numbers. The three-tier framing &mdash; fully autonomous for well-understood reversible actions, approval-gated for changes with blast radius, human-led for novel or ambiguous failures &mdash; is a sound way to decide what an agent may do unsupervised. The MTTR percentages attached to each tier are <strong>the author&rsquo;s own illustrative ranges in a contributed post<\/strong>, and the article itself tells readers to treat broad industry figures as directional rather than guarantees. Its one sourced datapoint is Microsoft&rsquo;s roughly <strong>8-minute MTTR baseline reduced to about 4 minutes<\/strong> for autonomous AKS recovery in one documented scenario. The larger deployed dataset sits in a <strong>Microsoft Azure-sponsored post<\/strong> about <strong>Azure SRE Agent<\/strong>: <strong>1.8 million+ incidents<\/strong> handled inside Microsoft, <strong>3,000+ Microsoft service teams<\/strong> using it, and <strong>more than 50% of incidents handled autonomously<\/strong> for some internal teams. Those are Microsoft&rsquo;s own numbers about Microsoft, which is still the biggest sample anyone has published; the customer figures quoted beside them &mdash; 80% less incident investigation time, 84% lower cost and similar &mdash; <strong>state no baseline<\/strong> and should not be repeated as measured results.<\/p>\n<p>The counterweight to all of it is a QCon San Francisco presentation on <strong>long-running incidents<\/strong> by <strong>Vanessa Huerta Granda<\/strong>, who leads the resilience engineering team at <strong>Enova<\/strong>. She deliberately refuses to define &ldquo;long-running&rdquo; by hours or SLA &mdash; the definition is whatever feels too long to the people responding &mdash; and works through three case studies: database performance degradation, a data-centre infrastructure failure, and recurring seasonal capacity. The four pressures that accumulate are time, coordination, cognitive load and visibility, and none of them is a monitoring problem. Her framing is the line to take into your next long incident: &ldquo;Long-running incidents don&rsquo;t just reveal system fragility, they expose that organizational fragility.&rdquo; Which connects to the week&rsquo;s other argument about agent failure &mdash; that when an agent fails, the model is usually not the problem. That case is made by <strong>Adel el Hallak<\/strong>, a vice president of product at <strong>Nvidia<\/strong>, alongside Nvidia&rsquo;s own <strong>OpenShell<\/strong> runtime and <strong>Nemotron<\/strong> models, and its three circulating numbers each need a source before use: coding agents failing more than <strong>60%<\/strong> of the time on real codebase tasks with no benchmark named; <strong>SAFE<\/strong>, the Secure Agent Findings Exchange, backed by approximately <strong>140 companies<\/strong>; and monitoring adding roughly <strong>20%<\/strong> to inference compute cost for persistent agents. The methodological point stands on its own, though: &ldquo;It&rsquo;s not enough to just look at the logs or the inputs and the outputs. It is important to figure out how it got to the answer.&rdquo;<\/p>\n<p style=\"font-size:13px;color:#6b7280;margin:0;\">Sources: <a href=\"https:\/\/www.infoq.com\/news\/2026\/09\/atlassian-automated-rca\/\">InfoQ (Atlassian automates root cause analysis) &mdash; https:\/\/www.infoq.com\/news\/2026\/09\/atlassian-automated-rca\/<\/a> &middot; <a href=\"https:\/\/devops.com\/the-three-tiers-of-agentic-incident-response-when-to-trust-ai-autonomy\/\">DevOps.com (the three tiers of agentic incident response) &mdash; https:\/\/devops.com\/the-three-tiers-of-agentic-incident-response-when-to-trust-ai-autonomy\/<\/a> &middot; <a href=\"https:\/\/thenewstack.io\/azure-sre-agent-operations\/\">The New Stack (agents operate, humans govern: Azure SRE Agent) &mdash; https:\/\/thenewstack.io\/azure-sre-agent-operations\/<\/a> &middot; <a href=\"https:\/\/www.infoq.com\/presentations\/stream-incidents\/\">InfoQ (when incidents refuse to end) &mdash; https:\/\/www.infoq.com\/presentations\/stream-incidents\/<\/a> &middot; <a href=\"https:\/\/thenewstack.io\/nvidia-agent-debugging-safe\/\">The New Stack (your AI agent failed; the model might not be the problem) &mdash; https:\/\/thenewstack.io\/nvidia-agent-debugging-safe\/<\/a><\/p>\n<\/p><\/div>\n<p>            <!-- Calls to action --><\/p>\n<div class=\"watchlist\">\n<h2>Calls to action<\/h2>\n<ul>\n<li><strong>Audit what your agent loads before it does anything.<\/strong> Count the tool schemas in your agent&rsquo;s default context and multiply by your per-token rate. Uber found about 100 tools costing 50,000&ndash;70,000 tokens per session before work started. Move to on-demand tool lookup or CLI invocation, and check your third-party MCP servers first &mdash; they ship the largest surfaces.<\/li>\n<li><strong>Put a human confirmation step between agent analysis and agent code change.<\/strong> DoorDash&rsquo;s zero-regression result across 50 changes is not only a model story: phase one produces a report and an engineer confirms the flag&rsquo;s target value, and only phase two writes code. Isolated worktrees, a concurrency cap, a per-agent timeout and a PR gated on build, tests, coverage and static analysis are the rest of the reason it held.<\/li>\n<li><strong>Re-check every workload whose disaster-recovery plan stops at multi-AZ.<\/strong> AWS has now stated that the Bahrain damage exceeded what regional and multi-AZ services are designed to withstand, and that data held exclusively there cannot be restored. Identify anything with no copy outside a single region, and treat &ldquo;we are multi-AZ&rdquo; as a statement about component failure, not about losing a region.<\/li>\n<li><strong>Separate token volume from token spend in your own reporting.<\/strong> On Vercel&rsquo;s gateway open-weight models carried 56% of tokens for about 14 cents of every dollar in August. If your AI cost dashboard reports only one of those two numbers, it will tell you a story the invoice does not support. Report both, per model, per team.<\/li>\n<li><strong>Give your incident tooling a way to correlate signals, not just display them.<\/strong> Atlassian&rsquo;s approach is copyable without buying anything: normalise metric, log and trace anomalies into one representation, then correlate across signal type, time and topology using a service map built from real traffic. Start with the service map &mdash; most teams already emit the spans needed to derive it.<\/li>\n<li><strong>Price your agents before you scale them.<\/strong> Splunk&rsquo;s Token Meter reads local coding-agent trace files and prices them against public model rates, surfacing tokens per second, input-versus-output split and tool-call performance. No licence, repository or availability date was named in the announcement, so evaluate it as a pattern you can build in a day if it is not yet downloadable.<\/li>\n<li><strong>Decide your autonomy tier per incident class, in writing, before an incident.<\/strong> The useful part of this week&rsquo;s three-tier framing is the taxonomy, not the percentages: fully autonomous for well-understood, reversible actions; approval-gated for changes with blast radius; human-led for novel or ambiguous failures. Write down which of your runbooks sit in which tier and what the rollback is.<\/li>\n<li><strong>Ask who measured it, every time, before a number enters a plan.<\/strong> Four items in this issue are sponsored or contributed, and their headline figures are the vendor&rsquo;s own or explicitly illustrative. The three numbers worth carrying out of this week &mdash; Uber&rsquo;s 34%, DoorDash&rsquo;s 90% and Lyft&rsquo;s autoscaler savings &mdash; came from engineering teams describing their own production systems.<\/li>\n<\/ul><\/div>\n<\/td>\n<\/tr>\n<p>        <!-- Footer --><\/p>\n<tr>\n<td class=\"footer\">\n<p class=\"brand\">AI Ops<\/p>\n<p>A weekly intelligence bulletin from Security Radar LLC.<br \/>\n            Curated by Paul Davis &middot; <a href=\"mailto:paul.davis@security-radar.com\">paul.davis@security-radar.com<\/a><\/p>\n<p>&copy; 2026 Security Radar LLC. All rights reserved.<\/p>\n<p>Article titles and summaries are excerpted for review and commentary; all linked articles remain the copyright of their respective publishers and authors.<\/p>\n<p>*|LIST:ADDRESS|*<\/p>\n<p><a href=\"*|ARCHIVE|*\">View this email in your browser<\/a> &middot; <a href=\"*|UNSUB|*\">Unsubscribe<\/a><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>September 20, 2026 &middot; Weekly Edition AI Ops Three stories this week carry production numbers somebody measured. Uber stripped 50,000&ndash;70,000 tokens of MCP tool schema out of every agent session and took cost per 1,000 agent requests down about 34%. DoorDash turned multi-agent LLMs loose on 60,000 feature flags and&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[48],"tags":[],"class_list":["post-5912","post","type-post","status-publish","format-standard","hentry","category-ai-ops"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/5912","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5912"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/5912\/revisions"}],"predecessor-version":[{"id":5939,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/5912\/revisions\/5939"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5912"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5912"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5912"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}