Archive
Weekly sector reports
Each Monday, a deep editorial synthesis per sector with directional moves, leaders, and watchlist items.
Devtools shipped evidence and trust controls for agents: Currents traces, incident.io Extensions, CircleCI OIDC v3 and GitHub's package firewall.
agent-toolingsupply-chain-securityoidcmcpAnalytics assistants gained persistent memory as Holistics and OpenCTI tightened the modeling layer beneath.
assistant-memorylineagemcpcolumnstoreTeable's chat-first workspace led a week of agent surfaces for notes, files and grids.
chat-first-workspaceagentsmcpsecurity-defaultsGitHub's package firewall led a week in which MCP servers and agent tooling picked up security controls.
supply-chain-securitymcpagent-ruleshardeningGitHub Copilot added model-policy controls while open-source assistants reorganized their runtimes.
model-policyagent-workspacesenterprise-controlsdeprecationsProject tools rebuilt around agents, led by Rize's redesign and NocoBase's rebuilt agent conversations.
ai-agentsredesignclient-portalsbeta-releasesCRMs gave agents write access and governance controls, led by folk, Close and Twenty.
agent-accessmcpdata-residencyssoAgent infrastructure drove the week as Gumloop and n8n widened agent reach and Pimcore patched advisories.
agentsmcpsecurity-patchingrelease-cadenceHR tools put AI behind admin controls, with Tanda, Teamtailor and Ashby leading a compliance-heavy week.
admin-controlsai-agentscomplianceaudit-logsSupport tools hardened AI features and shipped fixes while Libredesk's v2.9 candidates added WhatsApp and cited replies.
ai-controlsmcprelease-candidatesmaintenanceSocial tools reworked scheduling and bulk editing while two competitors' feeds stayed all content.
schedulingbulk-editingcontent-marketingai-translationShopify moved stock counts and batch fulfilment into the admin as ecommerce work centered on operations.
operationsinventoryshippingsecrets-handlingMessaging platforms shipped identity and trust controls while Twilio and Krisp widened AI-driven operations.
identitydeepfake-detectionbulk-messagingsecurity-defaultsVideo infrastructure tools spent the week on hardening and account-level control, not meeting features.
hardeningsipdrm-monitoringrelease-cadenceAI platforms spent the week tightening access control around agents, MCP and tenants.
access-controlmcpagent-tracingevaluationPrivy and Surfer SEO open marketing data to AI assistants through MCP as Clay tightens spend controls
mcpai-searchdata-freshnessapproval-workflowsTwenty and Close build CRMs for agents while folk and Close add the enterprise features that widen who can buy
ai-agentsmcptelephonyenterprise-readinessHOMER and rtpengine harden real-time media infrastructure while JW Player merges live and VOD editing
security-hardeningbackportsmedia-workflowai-call-summariesLobeHub runs agents on users' devices while Copilot's autofix reaches general availability
device-side-executionmodel-onboardingagentic-autofixmulti-userRAGFlow, LiteLLM and MLflow ship agent features and the controls to contain them in the same releases
agentsleast-privilegeobservabilitymcpAnalytics tools put AI at the center of the dashboard while dbt and Tinybird push users onto new platforms
ai-dashboardsplatform-migrationmcpself-hostedTeable and Double open their workspaces to outside agents through OAuth and MCP connectors
mcpagent-accesslong-betaself-hostedTwilio moves into audience building while Krisp and Element tighten trust in live communication
mcpaudience-segmentationfraud-detectionsecurity-defaultsXurrent and Live Helper Chat give support agents scoped permissions while handoff bugs surface at LiveAgent
mcpagent-governancehandoffself-hostedCodeRabbit and WeWeb bet on AI that verifies its own work while Dapr keeps backporting security fixes
ai-verificationdurable-executionmcpbackportsAgents move into review and deploy as GitHub, Cursor and CircleCI ship the week's biggest devtools changes
agentic-deliverymcpci-cdgovernanceShopify moves warehouse work into the admin as Cody and CartFlows prepare merchants for peak season
peak-seasonfulfillmentai-setup-assistplatform-migrationGOAT.tax adds R&D credit Section G reporting while Stigg widens billing beyond Stripe
compliance-reportingbilling-integrationscredit-analyticsrelease-cadenceTanda and Teamtailor let HR teams describe outcomes in plain language while Ashby and Workable add enterprise structure
ai-agentsplain-languagemulti-divisionhrisCode.org moves Adaptive progress server-side while TAO and Blackboard publish only maintenance and staging notices
adaptive-learningai-labpatch-releasesstaged-releaseGumloop widens what agents can reach while n8n makes production execution safer to shut down
mcpagent-reachexecution-safetysecurity-patchesFibery and NocoBase let AI assemble the workspace while SmartSuite and Tracecat add controls
ai-agentsmcpgovernancebreaking-changesDevtools made themselves legible to agents, from CircleCI's API v3 to Buildkite triage tools, while Expo shut its own agent down.
agent-readable-cimcp-server-surfacepermission-scopingsecurity-advisory-patchingDeveloper platforms shed dependencies and added agent authorization: Bun ships a type checker, Rivet drops NATS, Workato gates MCP tools.
fewer-dependenciesmcp-authorizationmerge-gatingsecurity-backportsBI and analytics tools gave their agents reusable skills and write access, while observability stayed in release-candidate plumbing.
agent-skillsmcp-write-accesspersistent-memorydashboard-from-chatCollaboration tools split between hardening against what agents and the network can reach and handing agents the keys.
agent-access-controlsssrf-hardeningconnector-gaself-hosted-sovereigntyWork-management tools opened themselves to agents and, in the same breath, put audit trails and secrets controls around them.
hosted-mcpagent-governancesecrets-managementaccountability-for-aiShopify's Canvas leads a week of commerce platforms making prices, policies and checkout legible to AI shopping agents.
agentic-commercemerchant-chore-removalcheckout-api-rebuildssecurity-hardeningAssistants became agent runtimes: Copilot got a sandbox, Claude finished a model family, LobeHub got hands.
agent-sandboxingmodel-family-releaselocal-inferenceagent-on-desktopCRMs moved prospecting inside the product: calling, voice agents and Claude connectors landed in a week.
voice-agentsclaude-connectoreu-data-residencycall-attributionn8n and Gumloop gave agents budgets, secrets and a browser, while form and CMS tools stayed in patch mode.
agent-guardrailsagent-credentialsdeprecation-enforcementmulti-step-completionVideo platforms spent the week deleting legacy paths: Etherpad, FreeSWITCH bridges and MatrixRTC legacy mode are gone.
legacy-removallivekit-migrationcmaf-paritypost-stream-distributionMessaging products split between auditing AI agents and cleaning up legacy surfaces, with Twilio extending EU residency.
agent-auditabilityeu-data-residencylegacy-removalembedded-callsHiring and workforce tools put prompts in the trigger slot while compliance and payroll plumbing kept moving.
prompt-defined-automationbatch-agentspayroll-accountingregional-complianceAI platform tooling traded features for footprint and handed agents write access to its internals.
agent-write-accesslighter-deploymentsrecall-economyagent-uxSupport platforms put AI operators in the queue and spent the week on handoff, approval and citation controls.
ai-operator-handoffagent-governancedata-residencychannel-expansionCode.org kept shipping near-daily AI Lab releases while Kolibri and TAO Testing sat in alpha and LTS mode.
ai-literacy-toolingstructured-courseslts-hardeningexplainable-modelsMarketing tools widened their inputs this week: new listening sources, imports from rivals, and spend caps on agents.
listening-coveragecompetitor-migrationagent-spend-controlsapproval-workflowsFinance tooling spent the week on release discipline, with InvoiceShelf's MCP server the only agent-facing move.
mcp-accesstenant-customizationstaged-rolloutsrelease-cadenceOpen-source ITSM is in pre-release mode: GLPI 12 sits in release candidates and OTOBO 11.1 in beta.
release-candidatesbeta-cyclesopen-source-itsm