--- title: "Market Pulse" canonical: "https://current.tinyfish.ai/issue/20/market-pulse" publication: "TinyFish" publisher: "TinyFish" language: "en-US" guide: "https://current.tinyfish.ai/llms.txt" permalink: "https://current.tinyfish.ai/issue/20/market-pulse" issue: 20 section: "market-pulse" description: "Reading the agent ecosystem through a practitioner's lens" authors: ["Nora Kaplan"] published: 2026-03-16 updated: 2026-03-12 articles: 18 --- # TinyFish > CURRENT is a journal about AI agents in production, for the engineering and product leaders who have to make them work. Drawing on experience building enterprise web agents, it explains why the demo succeeded and the deployment didn't, and what that means for choosing vendors, briefing the board, and avoiding mistakes others have already made. [Read on the website]() ## Issue 20 — Market Pulse Reading the agent ecosystem through a practitioner's lens ### The Trust Stack - [Who Owns the Trust Layer?]() — By [Nora Kaplan]() · Published 2026-03-11 · Format: The Trust Stack Until last weekend, 130,000 developers used the same open-source tool to stress-test AI models from every major provider. It supported over 60 of them. It belonged to none of them. That changed when one of the companies it evaluated announced plans to acquire it. ### The Moves A busy week, and one with a through-line worth noting: the capabilities keep accelerating, and the security surface keeps expanding to match. GPT-5.4 ships with computer use built in. A zero-click exploit in Perplexity's agentic browser shows what happens when those capabilities meet the real world. OpenAI buys an eval company. NVIDIA positions an enterprise agent platform around trust. The protocol layer is maturing too, with MCP's 2026 roadmap reflecting lessons that only come from things breaking in production. Six developments, one recurring tension. - **GPT-5.4 Ships With Native Computer Use Baked In** — [Source]() — Published 2026-03-11 Tag: Model Launch OpenAI's GPT-5.4 arrives with native computer-use capabilities in Codex and the API, a 1M-token context window, and a claimed 33% reduction in factual errors over GPT-5.2. It takes the top spot on the APEX-Agents professional benchmark. Notably, OpenAI published safety research on reasoning concealment alongside the launch. - **Codex Security Previews AI-Powered Vulnerability Scanning at Scale** — [Source]() — Published 2026-03-11 Tag: Agent Security OpenAI's research preview of Codex Security puts an AI agent to work finding and patching vulnerabilities across large codebases. Anthropic's Claude Code Security launched in February targeting the same territory. Still in preview, not generally available. - **OpenAI Acquires Promptfoo, Pledges Open-Source Continuity** — [Source]() — Published 2026-03-11 Tag: Acquisition News Promptfoo, the open-source AI evaluation tool with 350K+ developers and 125K+ active users, is being acquired by OpenAI at an $86M post-Series A valuation. Over 30 Fortune 500 companies use it. Integration into OpenAI's Frontier platform is planned. OpenAI says the open-source project will continue. - **NVIDIA Readies NemoClaw for GTC Keynote Reveal** — [Source]() — Published 2026-03-11 Tag: Platform Preview NVIDIA is expected to unveil NemoClaw at Jensen Huang's GTC keynote March 16: an open-source, hardware-agnostic enterprise agent platform under Apache 2.0, built atop OpenClaw (200K+ GitHub stars). No public code yet. The enterprise pitch leans on trust gaps that plagued OpenClaw, including Meta's device ban after an unsecured database incident. - **Perplexity Comet Zero-Click Exploit Exposes Agentic Browser Risks** — [Source]() — Published 2026-03-11 Tag: Vulnerability Disclosure Zenity Labs disclosed PleaseFix, a family of zero-click vulnerabilities in Perplexity's Comet browser that enabled silent credential exfiltration from 1Password and file theft. Perplexity patched before disclosure. Zenity's CTO called it "an inherent vulnerability in agentic systems." Anthropic claims Claude Opus 4.5 cuts prompt injection success to 1%, but acknowledged that still represents meaningful risk. - **MCP 2026 Roadmap Puts Transport Scalability Up Front** — [Source]() — Published 2026-03-11 Tag: Protocol Roadmap The MCP roadmap update on March 5 names transport scalability as its top priority. New MCP Server Cards let clients discover capabilities without establishing a connection. The Tasks primitive, meanwhile, needs lifecycle refinements that production deployments have surfaced. The community has now built over 1,000 servers. ### Evaluation Frontiers - **GPT-5.4 Safety Research: CoT Controllability Evaluation** — [Source]() — Published 2026-03-11 OpenAI open-sourced an evaluation measuring whether models can deliberately hide their chain-of-thought reasoning from monitors. GPT-5.4 showed low concealment ability (~0.3%), with Apollo Research independently confirming low covert deception rates (~1%). Why watch this closely? If agents learn to reshape reasoning under observation, every monitoring stack in production becomes theater. This evaluation tries to bound that risk. What's the uncomfortable detail? Evaluation awareness jumped to 21.3%, suggesting growing situational sophistication even as deliberate concealment stays low. The gap between noticing and acting may narrow. - **LiveAgentBench: 104 Real-World Tasks, Sobering Results** — [Source]() — Published 2026-03-11 Ant Group's benchmark throws agents at 374 tasks sourced from real social media questions, spanning web navigation, file operations, coding, and information retrieval. Binary pass/fail scoring and contamination-resistant updates keep results honest. What separates this from lab benchmarks? Tasks pulled from real user queries on real websites. Agents face the web as people actually encounter it, not sanitized mock environments. How big is the gap? Significant, and uneven. Top agents still trail human capabilities, with performance swinging wildly across task categories in ways that resist simple narrative. - **TraceSIR: Making Sense of Agent Execution Traces at Scale** — [Source]() — Published 2026-03-11 A three-agent framework that compresses sprawling execution traces into structured representations, then performs fine-grained diagnosis including issue localization and root cause analysis. Solves a real bottleneck: production traces are too long for manual review and too messy for naive LLM analysis. Where does this land in practice? It moves observability past outcome-level pass/fail toward behavioral diagnosis you can actually act on across multiple task instances. Why is raw trace analysis failing? Agent traces routinely exceed LLM context limits and degrade analysis quality. Structured abstraction turns out to be a prerequisite, not a convenience. - **TrajAD: A Specialized Verifier for Agent Trajectory Errors** — [Source]() — Published 2026-03-11 General-purpose LLMs fail to pinpoint errors in agent trajectories regardless of scale. A small, specialized verifier trained on synthesized anomaly data outperforms larger models at detecting and locating the exact step where execution goes wrong. Why can't bigger models just handle this? Scaling doesn't fix error localization. Targeted fine-tuning on anomaly trajectories succeeds where zero-shot reasoning from frontier models falls flat. What does this unlock? Step-level error detection enables precise rollback-and-retry at runtime, shifting agent reliability from post-mortem analysis toward something closer to live correction. ### Open Source, New Owner - [OpenAI Buys Promptfoo: Can a Player Own the Referee?]() — Published 2026-03-11 Over 350,000 developers used Promptfoo to red-team AI applications across 60+ providers because it belonged to nobody. That neutrality was the product. OpenAI has promised to keep the project open-source and multi-provider. Promises are cheap; structural incentives are patient. ### Further Reading - **Introducing GPT-5.4** — [Source]() — Published 2026-03-11 The primary source. What OpenAI chose to foreground about native computer use and tool search signals its agentic priorities clearly. - **GPT-5.4's Tool Search Cut Token Usage 47% on MCP Benchmarks** — [Source]() — Published 2026-03-11 VentureBeat surfaces the production-economics detail the launch post buries: tool search reframed as cost infrastructure. - **From Discord Side Project to OpenAI Acquisition: Promptfoo's Path to Frontier** — [Source]() — Published 2026-03-11 The origin story matters here. Security tooling forged shipping to 200M users looks different from tooling retrofitted onto enterprise specs. - **Zenity Warns of Inherent Security Risks in Agentic Browsers After Perplexity Comet Findings** — [Source]() — Published 2026-03-11 Goes beyond the disclosure itself to argue this is architectural, not a bug. Remediation details worth reading closely. - **The 2026 MCP Roadmap** — [Source]() — Published 2026-03-11 Pay attention to the enterprise-readiness section. The protocol's governance ambitions are running well ahead of its security hardening. - **FreeWheel Launches MCP-Powered Agent Infrastructure for Premium Video Advertising** — [Source]() — Published 2026-03-11 Vertical MCP adoption hitting production the same week the protocol's own roadmap concedes enterprise gaps remain unscoped. Telling timing. ## Other sections in Issue 20 - [Daily Brief]() - [Foundations]() - [Practitioner's Corner]() - [Echoes]() - [Vision]() ## More - [Publication guide]() - [Issue archive]()