Posts

OpenAI’s Agents API Can Resume Work. It Cannot Prove the Work Succeeded

Image
September 14, 2026 OpenAI’s Agents API removes substantial infrastructure work from long-running agent applications: OpenAI runs the Codex model-and-tool loop, retains durable session state, compacts context, coordinates subagents, and manages platform-level recovery. The application still chooses the agent’s tools and execution environment and remains responsible for product integration. That division of labor is useful—but it does not make the managed session an authoritative record that an external business action committed correctly or exactly once. The defensible production architecture is to treat the Agents API as a managed harness for workflow continuity , not as a transaction coordinator, authorization service, or acceptance test. Use it where outcomes can be verified independently and consequential actions remain read-only, idempotent, reversible, or approval-gated. Retain an application-owned runtime when exact recovery order, storage location, trace export, or irreversib...

Token Rates Are Not Task Costs: A Reproducible LLM Cost-Test Protocol

Editorial status — September 13, 2026: This article is a reproducible cost-test protocol, not a report of completed benchmark trials. The prices and provider fields below were checked against first-party documentation on that date. A model with the lowest price per million tokens is not necessarily the least expensive model for a production task. Retries, invalid output, truncation, cache behavior, tools, service tier, regional processing, and human review can all change what a team pays for one result it can actually accept. The useful unit is therefore not the rate-card row. It is cost per accepted result : the billed cost of every attempt divided by the number of outputs that pass an independent acceptance test. cost per accepted result = total billed cost of all attempts ÷ accepted outputs Key Takeaways A price table is a lookup aid, not a production-cost benchmark. OpenAI and Anthropic expose inclusive output totals with reasoning or thinking details; Google exposes candida...

Google’s Managed Shell Sandbox Is GA—But the Security Boundary Is Still Yours

Published September 13, 2026 Google has removed a meaningful infrastructure burden from teams that let AI agents execute commands. The product is officially named Gemini Enterprise Agent Platform , and its managed Shell sandbox became generally available on September 9, 2026 . Google describes a managed, isolated Linux container with shell execution, private-connectivity controls, customer-managed encryption keys, and lifecycle APIs. GA does not make the sandbox an authorization system, credential broker, output validator, or workflow recovery engine. The real deployment decision is therefore not “sandbox or no sandbox,” but which execution plane can meet the workload’s isolation, networking, observability, portability, latency, and recovery requirements while keeping policy authority outside the model-controlled path . Key Takeaways Gemini Enterprise Agent Platform’s Shell sandbox became GA on September 9, 2026 . Google documents it as a managed, isolated Linux container reached...