--- title: "Market Pulse" canonical: "https://current.tinyfish.ai/issue/18/market-pulse" publication: "TinyFish" publisher: "TinyFish" language: "en-US" guide: "https://current.tinyfish.ai/llms.txt" permalink: "https://current.tinyfish.ai/issue/18/market-pulse" issue: 18 section: "market-pulse" description: "Reading the agent ecosystem through a practitioner's lens" authors: ["Rina Takahashi"] published: 2026-03-02 updated: 2026-02-26 articles: 17 --- # TinyFish > CURRENT is a journal about AI agents in production, for the engineering and product leaders who have to make them work. Drawing on experience building enterprise web agents, it explains why the demo succeeded and the deployment didn't, and what that means for choosing vendors, briefing the board, and avoiding mistakes others have already made. [Read on the website]() ## Issue 18 — Market Pulse Reading the agent ecosystem through a practitioner's lens ### The Definitional Gap - [The $8 Billion Word Problem]() — By [Rina Takahashi]() · Published 2026-02-25 · Format: The Definitional Gap In February 2026, five companies raised a combined $8 billion for agent infrastructure. Every single one pitched "reliability." Temporal meant something specific by that word. Daytona meant something different. Databricks, something else entirely. Astelia, yet another thing. Four layers of the stack, four theories of where agents actually break. Somewhere in procurement offices right now, teams are choosing between these theories, locking into a definition the market hasn't finished writing. ### Five Definitions Five agent infrastructure companies raised a combined $7.5 billion in February. All of them are selling "reliability." None of them means the same thing by it. Temporal wants your agent to survive a crash. Daytona wants it safely exploring parallel paths without poisoning production. Databricks wants the data layer underneath to hold. Astelia wants your security team to stop drowning in false positives. Basis wants a tax return that's actually correct. Same category label, five genuinely different products. The grid below makes the divergence concrete. - **Temporal Raises $300M for Durable Agent Execution** — [Source]() — Published 2026-02-25 Tag: State Persistence Temporal's $300M Series D at a $5B valuation, led by a16z, funds infrastructure for long-running stateful agents that recover from failures without losing progress. Cloud processes 300K+ agent actions per second. OpenAI and Nordstrom are among the installed base. - **Daytona's $24M Bet on Agent-Native Sandboxes** — [Source]() — Published 2026-02-25 Tag: Sandboxed Execution Daytona's Series A, led by FirstMark Capital, builds isolated execution environments where agents launch sandboxes in milliseconds, fork into parallel decision paths, and snapshot mid-execution. Hit $1M ARR in under three months, doubled it six weeks later. - **Databricks Closes $7B Round for Agent Data** — [Source]() — Published 2026-02-25 Tag: Data Infrastructure Databricks' $7B financing at a $134B valuation doubles down on Lakebase, a serverless Postgres database purpose-built for AI agents, and Genie, its conversational AI layer. Revenue run rate surpasses $5.4B with 65% year-over-year growth. - **Astelia Raises $35M to Find Real Vulnerabilities** — [Source]() — Published 2026-02-25 Tag: Security Prioritization Astelia's combined seed and Series A, led by Index Ventures and Team8, deploys autonomous agents that map enterprise environments and surface which vulnerabilities are actually exploitable. In some deployments, roughly 30 out of nearly 3 million proved genuinely reachable. - **Basis Hits $1.15B Valuation Automating Accounting Work** — [Source]() — Published 2026-02-25 Tag: Domain Accuracy Basis raised $100M Series B led by Accel for long-horizon agents that autonomously complete complex accounting workflows, including the first AI-completed end-to-end 1065 tax return. Roughly 30% of the top 25 U.S. accounting firms now use the platform. ### Research Radar - **Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP** — [Source]() — Published 2026-02-25 Applies structured threat analysis to four agent communication protocols and finds twelve distinct protocol-level risks with no shared security framework across them. "Security" carries quietly different meanings in each protocol's design assumptions. How deep does the fragmentation go? The definitional gaps visible in commercial agent deployments run all the way down to the protocol layer itself. Why now? Published weeks before NIST's March 9 deadline for public comment on agent security, landing squarely in the gap NIST is trying to close. - **Autonomous Agents on Blockchains: Standards, Execution Models, and Trust Boundaries** — [Source]() — Published 2026-02-25 A systematic review of 317 works maps the agent-blockchain interface and finds current authorization frameworks insufficient for agents executing financial transactions. Proposes a five-tier taxonomy by agent authority level, flagging multi-agent collusion as a distinct, underexplored risk. What does the taxonomy reveal? Five authority tiers from read-only analytics to autonomous signing, each carrying security implications that existing standards don't address. Where does authorization break? As agents gain financial transaction capabilities, "authorized to act" splinters across execution contexts with no shared interface standard. - **Agent2Agent Threats in Safety-Critical LLM Assistants: A Human-Centric Taxonomy** — [Source]() — Published 2026-02-25 Examines A2A's structural trust gap: the protocol draws no distinction between human-originated and agent-originated instructions. Both enter a receiving agent's context window with equivalent privilege, collapsing a trust boundary that governance frameworks quietly assume exists. What boundary is missing? When human and agent instructions carry identical privilege at the protocol level, a foundational governance assumption simply evaporates. Who feels this first? Safety-critical deployments on A2A face a structural mismatch between the authorization boundaries they assume and those that actually exist. - **A Survey of Agent Interoperability Protocols: MCP, ACP, A2A, and ANP** — [Source]() — Published 2026-02-25 Surveys the agent interoperability landscape and confirms a familiar pattern: protocols were built for capability first, security second. Fragmented practices across frameworks make integration, security, and scaling of LLM-driven agent communication genuinely difficult. Is piecemeal retrofitting enough? The survey corroborates that protocol-by-protocol security patching won't substitute for a unified cross-protocol framework. Why did this happen? Protocol development simply outran security standardization, and the resulting fragmentation looks increasingly structural rather than incidental. ### The Easy Domain - [Basis Raises $100M at $1.15B Valuation, Betting That Accounting Is Where Agents Can Actually Be Correct]() — Published 2026-02-26 Basis just closed a $100 million Series B led by Accel, with GV and Khosla Ventures participating, at a $1.15 billion valuation. The interesting thing here is the domain, not the check size. ### Further Reading - **AI Agent Reliability Startup Temporal Raises $300M in Funding** — [Source]() — Published 2026-02-26 Temporal's CEO pitches failure recovery over capability. The a16z quote on "demo vs. production system" distills the investor thesis cleanly. - **Databricks Raises $7 Billion for AI Agent Database** — [Source]() — Published 2026-02-26 The investor roster tells the story here. JPMorgan's participation through its "Security and Resiliency Initiative" signals that database-layer reliability has become a financial infrastructure concern. - **NIST Announces AI Agent Standards Initiative for Interoperable and Secure Innovation** — [Source]() — Published 2026-02-26 The primary source on NIST's three-pillar framework. Worth noting the open comment deadlines (March 9, April 2) and the politically loaded rebranding away from "AI Safety Institute." - **Daytona Raises $24M for AI Agent Computing Infrastructure** — [Source]() — Published 2026-02-26 A different slice of the reliability problem: sandboxed execution environments for AI-generated code. The disclosure about hardware constraints limiting customer onboarding is an unusually candid signal of real demand. - **Multi-Agent Systems Move Business AI From Chatbot to Operations** — [Source]() — Published 2026-02-26 Good context on why infrastructure capital is arriving now. The shift from single-prompt assistants to coordinated multi-agent workflows creates reliability requirements that didn't exist a year ago. - **NIST Agentic AI Initiative Looks to Get Handle on Security** — [Source]() — Published 2026-02-26 Essential political context behind the NIST announcement. The safety-to-standards rebranding reflects a broader contest over how federal AI governance gets framed, and who gets to frame it. ## Other sections in Issue 18 - [Daily Brief]() - [Foundations]() - [Practitioner's Corner]() - [Echoes]() - [Vision]() ## More - [Publication guide]() - [Issue archive]()