Three papers exploring the boundaries and breakthrough paths of agent capabilities. Sakana Fugu (Sakana AI) trained a 0.6B orchestrator model that learns to dynamically coordinate a pool of frontier LLMs, achieving public SOTA on SWE-Bench Pro and other benchmarks — the core thesis is that the orchestrator itself can be trained rather than hard-coded by engineers. NatureBench uses 90 real research tasks from Nature journals to ask: can coding agents actually make scientific discoveries? The best configuration only surpasses published SOTA by 17.8%, mainly by translating problems into familiar ML tasks rather than truly inventing new methods. Finally, Rising from the Ashes — six security researchers systematically map how agentic AI can take over five categories of labor-intensive tasks that have long plagued defenders, with 16 case studies as deployment references.
Three papers on agent platform infrastructure gaps: PlanBench-XL reveals top LLMs collapse under tool failure in large-scale ecosystems (GPT-5.4 drops from 52% to 11%); TU Munich provides the first technical taxonomy of 9 agent communication protocols (MCP/A2A/ACP/ANP) for principled selection; AMD's Arbor uses tree search as a shared cognition space for multi-agent collaboration, turning failures into useful exploration signals. Together, they outline three foundational infrastructure gaps in 2026 agent platforms.
Three papers approaching agent reliability and safety in production from three layers: inference-time, training-time, and infrastructure. LedgerAgent uses a lightweight ledger structure at inference time so tool-calling agents no longer stuff all state into the prompt for the LLM to reconstruct — directly reducing policy violations and state errors. Alibaba's Connect the Dots (CoD) takes the longer view, using reinforcement learning to train agents that update their environmental awareness while executing tasks in long-term deployments, improving across tasks over time. Sovereign Execution Brokers tackle the security infrastructure layer, inserting credential verification at the exact moment an agent touches a production system, strictly binding authorized actions to actually executed actions. Three papers
Three papers paint a full picture of how agents land in the real world: Perplexity + Harvard Business School use production data to quantify the agent vs. chatbot gap for the first time — 87% faster task completion, and agents attract cognitively harder work; Self-Harness shows how agent scaffolding can automatically mine weaknesses and fix itself, yielding 33-60% relative gains across three models; The Consistency Illusion exposes a core trap in multi-agent debate — output-level consensus can mask fundamentally misaligned reasoning underneath. Read together, the signal is clear: an agent's real competitive edge isn't a stronger model — it's production-data-driven scaffolding self-improvement and rigorous validation of collective decision reliability.
Three papers tackle 'making agents more reliable' from different angles: EinsteinArena builds a persistent platform for multi-agent collective intelligence that found 12 new best-known solutions in math; APEX extends agent self-evolution beyond prompt tuning to simultaneously evolve principles and workflow topology; AI Economist Agent demonstrates how to ground every quantitative claim in formal model execution via knowledge graphs. The signal across all three: the next competitive dimension for agent systems is the infrastructure for collective knowledge sharing and how to make self-evolution and precise quantitative output work in production environments with real data.
Three papers challenging conventional wisdom in the agent space: ACCORD shows agents act on assumptions instead of observations and fixes it with active grounding (AppWorld 42% → 62.6%); 'The Illusion of Multi-Agent Advantage' proves auto-generated MAS underperforms single-agent CoT-SC at 10x the cost; 'Agentic Very Much' provides large-scale GitHub evidence that coding agent adoption in new projects has more than doubled year-over-year. Together they signal: agent tools are spreading fast, but the assumptions that 'multi-agent is always better' and 'agents understand your instructions' are being challenged by data.
Three papers targeting three critical infrastructure layers of Agent platforms: HarnessX introduces a 'harness as evolvable component' framework that turns static Agent scaffolding into a self-optimizing system (+14.5% average across 5 benchmarks); the second studies skill-conditional trust routing in multi-agent collaboration, revealing when fine-grained trust actually helps and how attackers can hijack it; OCELOT tackles security with a 'posterior leakage budget' mechanism to prevent Agents from gradually leaking user privacy to external services. Together they cover framework design, multi-agent governance, and privacy security — exactly the three pitfalls most commonly hit when shipping Agent platforms to production.
Three papers challenging core assumptions about agent tool use and memory: Evoflux shows compact models nearly fail at MCP tool catalogs (3% success) and uses inference-time evolutionary search to reach 17-24%; FlowBank precomputes diverse workflow portfolios and routes at inference time, beating handcrafted designs by ~15%; GitOfThoughts reveals memory only helps when problems are near-duplicates (similarity > 0.8), but git version control offers an engineering path through auditability and replayability.
Three papers address agent reliability from three layers. RefGRPO fixes a neglected reflection calibration problem in agentic RL, turning agents into their own verifiers. 'Agents All the Way Down' delivers a complete custom-agent methodology from LLM substrate to production, arguing that solid foundations matter more than framework choice. EurekAgent uses autonomous scientific research to show that environment engineering beats process engineering for agent reliability.
Three papers paint the 'agent reality of 2026': UC Berkeley's real-workplace benchmark shows top agents pass only 2.6% of the hardest tasks; Microsoft finds developers spontaneously develop 4 oversight behaviors that tools don't support; Reins AI argues task-level monitoring can't see the worst structural failures in early-stage agent systems.
Three papers tackle the same core question from different angles: **how to evaluate and operate AI Agents under real deployment conditions.** Emergence World builds a multi-agent sandbox that runs continuously for weeks, exposing behavioral drift and cross-model contamination invisible to short-term benchmarks; a survey paper establishes a complete taxonomy for agent environment design (8 attributes x 8 domains) and proposes symbolic vs. neural synthesis paradigms; Martin Monperrus's position paper declares outright that coding agents have crossed the threshold and human code review can retire.
Three papers tackling core Agent platform challenges from the angles of memory architecture, training efficiency, and reliability evaluation. HORMA proposes a hierarchical filesystem memory architecture so Agents stop collapsing under exploding context in long workflows; TRACE redesigns rollout budget allocation for Agent RL training, squeezing an extra 2.8 percentage points on Multi-Hop QA from the same compute; and τ-Rec exposes the 'reliability cliff' in multi-turn conversational recommendation Agents — even the strongest model drops to just 38% reliability over four consecutive runs, a sobering number for any team planning to ship an Agent product.
Three papers today approach agents from two angles — how to evaluate them and what they fundamentally are: T1-Bench introduces a high-fidelity benchmark spanning 25 real business domains, giving cross-domain reasoning its first systematic quantitative baseline; VISTA solves the credibility problem of using LLMs to simulate users for agent testing, providing 6 metrics to quantify whether your tests actually cover the agent's capability boundaries; Agentic Software clarifies from first principles that when the LLM becomes the primary reasoning engine, the nature of software has changed — directly impacting how agent platforms should design their debugging tools and testing strategies.
Three papers today explore 'agent-native infrastructure' at different layers: the first redesigns API error responses to give agents structured recovery hints, dramatically improving tool-call success rates; the second argues Agent OS is the right abstraction for long-running agents; the third builds a hardware-aware simulator for multi-turn agent serving to quantify KV cache scheduling trade-offs. From APIs to OS to hardware, every layer of the agent stack needs rethinking.
Three papers today converge on one theme — moving agents from experiments to reliable production: a multi-agent troubleshooting architecture deployed at hyperscale cloud with 90%+ autonomous resolution; a memory mechanism that lets agents learn from past tool-call successes and failures without retraining; and the first systematic comparison of six AI-assisted development process frameworks across six dimensions.
Today's three papers center on **security boundaries and capability optimization for coding agents**: SABER introduces the first executable-workspace benchmark and finds even the best models have 54%+ dangerous operation rates; the second paper has 100+ real developers collaborate with a secretly sabotaging AI agent for five hours — 94% never noticed; SePO shows that auto-optimizing system prompts alone (no model changes) yields an average 4.49-point gain across five benchmarks. Together they remind platform builders: agent safety is harder to measure and harder to catch than assumed, yet low-cost improvement paths exist.
Three papers mapping to three layers of the agent platform stack: AgentJet (training layer) introduces a distributed framework for simultaneous RL training of multiple heterogeneous LLMs, solving the fundamental limitation of single-model-only training tools; AdaPlanBench (evaluation layer) reveals with a 67.75% ceiling that LLM agents are far from ready for real-world scenarios where rules are disclosed progressively — it is the first benchmark to systematically quantify this adaptive planning capability; Beyond Tokens (communication layer) surveys multi-agent systems that replace text with embeddings for inter-agent communication, providing a taxonomy to evaluate the engineering trade-offs of this new communication path.
Three papers tackle agent infrastructure decisions: ADK Arena quantitatively compares LangGraph, AutoGen, CrewAI and other frameworks on real-task completion rates and costs; Agent Memory offers the first computer-systems taxonomy of 10 memory designs covering latency, bandwidth, and scalability trade-offs; Search-Time Contamination questions deep research agent benchmarks—agents can search for answers during evaluation, inflating scores by up to 4%. Together they provide new quantitative tools for three core platform decisions: framework selection, memory architecture, and evaluation trustworthiness.
Three papers on three deep agent-system questions: **memory architecture** (which design generalizes?), **self-evolution** (can AI build agents autonomously?), and **security blind spots** (how domain-dependent is CUA safety?). AutoMEM shows agents that actively manage their own memory generalize better than those relying on external pipelines; Meta-Agent Challenge reveals that frontier models still fall well short of autonomous agent development; Domain-Conditioned Safety finds Claude Sonnet 4.6 has 0% prompt-injection ASR on web tasks but 100% on code tasks — all three challenge core design assumptions in agent platforms.