- Towards AGI
- Posts
- Your Stack Is Already Behind. Find Out.
Your Stack Is Already Behind. Find Out.
Stack already exposed!
Today, we’re diving into:
Hot Tea: Your Desktop Just Got an AI Operator.
Open AI: Your Agents Are Running. You're Not.
Open AI: AI Found Your Blind Spot First.
Dear Folks, this week's AI acceleration is quietly outpacing the systems, processes, and security models your enterprise depends on. Let's break down exactly where the gaps are before your competitors find them first.
Your AI Just Learned to Work Your Desktop. Are Your Systems Ready?
Agentic computer use has crossed from research preview into production infrastructure. The question is no longer what it can do. It depends on whether your enterprise environment is built to absorb it.
The gap between AI that advises and AI that acts has officially closed. The latest generation of large language models now ships with native computer use as a built-in capability, not a bolt-on experiment.

That means an AI agent can open your browser, navigate your ERP, fill a form, read the screen result, and make the next decision autonomously. No human in the loop. No custom integration layer required.
Organisations that fail to prepare their data infrastructure for agentic workloads will find that agent-native competitors move faster, complete more, and make fewer errors at scale.
For enterprise leaders managing complex data environments, this shift deserves serious attention. Your existing systems are about to become the operating surface for autonomous agents.
What "Built-In Computer Use" Actually Means for Your Stack
When computer use is native to the model itself, agents gain the ability to see a screen, reason about what they observe, and take action across browser, mobile, and desktop environments simultaneously.

This is qualitatively different from scripted RPA. Earlier automation tools followed fixed rules against predictable interfaces. Agentic computer use reads context, adapts to changes in the UI, and makes judgment calls on incomplete information.
Cross-platform navigation
Long-horizon task execution
Screen-level reasoning
Legacy app compatibility
No fixed UI dependency
The practical consequence for enterprise data teams is significant. Continuous software testing, knowledge extraction from legacy applications, and cross-platform workflow execution become tasks an agent can sustain over long operational horizons without human handoff.
The Threat Vector Nobody Is Talking About
Agentic systems operating in live environments introduce a risk category that most enterprise security frameworks have not yet accounted for: prompt injection at the interface level.
An agent reading your screen can be manipulated by the content it encounters mid-task. A malicious instruction embedded in a webpage, document, or application response can redirect agent behaviour in ways your access controls do not currently intercept.

Responsible deployment of agentic computer use now requires adversarial training on the model side, combined with enterprise-layer safeguards on your infrastructure side. Both matter. Neither alone is sufficient.
Confirmation Gates: Require explicit user sign-off before agents execute sensitive or irreversible actions in live environments.
Injection Tripwires: Automated task termination when indirect prompt injection is detected mid-workflow by the agent.
These safeguards work alongside secure sandboxing and strict access controls. A defence-in-depth approach is the only architecture that holds at enterprise scale.
What Your Data Infrastructure Needs to Support This Now
Agentic computer use does not require you to replace your systems. It requires your systems to be legible to an agent. That is a data readiness problem, and it starts with your migration posture.

If your data lives in fragmented, undocumented, or inconsistently formatted environments, agents will fail or produce unreliable outputs. Clean, well-structured, and accessible data is the foundation that makes agentic automation trustworthy at scale.
Organisations already running on modernised, cloud-native infrastructure with documented data schemas will onboard agentic workflows in weeks. Those still managing fragmented legacy environments will spend months resolving the readiness gap before agents can deliver measurable value.
The migration decisions you make today are directly shaping how fast you can move in an agent-first world. That window is closing faster than most enterprise roadmaps have accounted for.
AI Agents Are Already Working; Your Processes Aren’t Ready Yet
The shift from chatbots to autonomous agents has crossed the threshold from pilot to default. Inside the most advanced knowledge organisations, agents now handle the work your scheduling, coordination, and specialist bandwidth used to absorb.

The shift from AI assistants to AI agents has already happened inside the world's most advanced knowledge organisations. The unit of AI interaction is no longer a single prompt and a single answer. It is a delegated task, handed off to an agent who works independently for minutes, hours, or an entire shift.
If your enterprise still measures AI value by chatbot adoption rates, you are measuring the wrong thing.
Agents Work Differently Than the Tools You Deployed Last Year
Chatbot interactions are self-contained. You ask, it answers, the session ends. Agents operate on a fundamentally different model. They sustain independent work across extended time horizons, orchestrate multiple tool calls, interact with live environments, and iterate toward solutions without needing a human to advance each step.

That distinction matters because it changes the economics. One agent session can represent what would otherwise be hours of skilled human effort. The bottleneck is no longer AI capability. It is whether your workflows are structured to accept delegated, long-horizon work.
AI Agents Are Spreading Beyond IT
The assumption that agentic AI belongs to engineering teams is already outdated. Recent economic research tracking large-scale agentic tool deployment shows that non-developer adoption is outpacing developer adoption by a significant margin across all measured user categories.
Your AI governance framework was probably not built with this cross-functional reality in mind. The access controls, audit trails, and approval workflows designed for a chatbot environment do not map cleanly onto agents operating autonomously across departments.
Legal, finance, recruiting, and operations functions are all crossing into majority agentic usage. Workers in these departments are using AI agents not just for knowledge tasks but for technical execution, including automation, data transformation, structured analysis, and debugging.
The Tasks Getting Longer Are the Ones That Used to Stall Entire Teams
Task horizon is the metric that reveals how seriously your organisation is using agentic AI. By mid-2026, economic research data showed the following distribution among active agentic users:
80% of the submitted tasks required over 30 min of human work
70% of submitted tasks exceeded one hour
25% of submitted tasks exceeded eight hours
These are not experimental edge cases. These are the compound, cross-functional tasks that previously required scheduling, coordination, and specialist time. Agents are absorbing that category of work at scale. The organisations moving fastest deploy multiple parallel agents simultaneously, not one session at a time.
What Stalls Agent Deployment Is Always a Data Problem
Agentic AI does not fail because the models are weak. It fails because the environments agents operate in are poorly structured. Fragmented data, undocumented schemas, inconsistent formats, and siloed systems create the conditions where agent output becomes unreliable.

The enterprises seeing the highest returns from agentic deployment share one characteristic: clean, accessible, well-governed data that agents can read, reason over, and act on without ambiguity.
If your data infrastructure is not ready for agents to work inside it autonomously, the productivity multiplier never materialises. The future of knowledge work is already visible at the frontier. Agents are working longer hours, crossing job function boundaries, and absorbing the tasks that used to bottleneck your most expensive people.
The question is not whether to adopt agentic AI. It is whether your data environment is ready to make that adoption count.
Enjoying this briefing?
Your Data Stack Has Gaps Your Team Has Not Found Yet.
Enterprises reading our newsletter are already closing data blind spots their peers cannot see. Find out what yours is hiding before it surfaces in a breach, audit, or failed migration.
The Security Blind Spot AI Just Made Impossible to Ignore
AI is building your software faster than your governance model was designed to track. Inside that speed gap, unsupported open source components are accumulating silently across your enterprise stack. The risk is compounding daily.
CVE velocity alert: Vulnerability disclosures across widely used enterprise frameworks that took a full year to accumulate in 2025 were matched within a two-month window in early 2026.
AI-assisted development is accelerating your software build cycles faster than your security teams can govern what is being built. Open source libraries and frameworks are being pulled into internal applications at a rate that existing visibility tools were never designed to track.

Your open source exposure problem did not start with AI. But AI just made it significantly harder to contain.
Unsupported Open Source Is Spreading Faster Than Your Team Can See
Most enterprises already carried undisclosed risk before AI-assisted development became the default. Abandoned dependencies, end-of-life frameworks, and unmaintained libraries were already embedded inside critical applications. Teams simply had not looked closely enough to find them.

AI has changed that risk profile entirely. Non-engineering teams are now building internal applications independently, pulling in open source components without evaluating whether those projects are actively maintained, whether security patches still exist, or whether frameworks are approaching end-of-life.
The result is fragmented software stacks, growing visibility gaps, and technical debt accumulating at a rate your governance model was not built to absorb.
AI Just Broke the Security Feedback Loop Your Enterprise Relied On
Open source security once operated on a difficult but manageable equilibrium. Vulnerabilities were discovered at a pace maintainers could validate. Engineering teams could prioritise remediation within cycles that were stressful but survivable. That equilibrium no longer holds.

AI is dramatically accelerating vulnerability discovery across open source ecosystems. The harder challenge is what happens next. Validating findings, understanding exposure, prioritising remediation, and safely implementing fixes still depend on maintainers and security teams already stretched beyond capacity.
2x CVE disclosures doubled in two months: Vulnerability reports across widely used enterprise frameworks in early 2026 matched an entire year's worth of disclosures from 2025. Your remediation cycles were not designed for that velocity.
Your Governance Model Is Built on Assumptions That No Longer Apply
The traditional approach to open source governance treated vulnerability remediation as the primary trigger for security review. Scan for known issues, patch what you find, move on. That model made sense when software creation was slow, and software stacks were relatively contained.

Treating open source governance as a reactive, vulnerability-triggered process is no longer sufficient. It is becoming a liability you cannot afford to carry at scale.
What Sustainable Open Source Governance Looks Like at Enterprise Scale
Organisations navigating this shift most successfully treat open source governance as a continuous operational discipline, not an event triggered by vulnerability disclosure.
Blind Spot 1: Scan-and-patch cycles cannot keep pace with AI-accelerated CVE discovery rates. The queue will not clear.
Blind Spot 2: Unsupported software has no patch path available. Speed of remediation is irrelevant if the fix does not exist.
That means building visibility into which components are unsupported, approaching end-of-life, or no longer actively maintained, before those components become operational risks. It means knowing which open source dependencies are business-critical and whether they can be sustained over the long term.
Your open source stack is growing faster than your governance model. The risk inside it is compounding daily.
Journey Towards AGI
Research and advisory firm guiding on the journey to Artificial General Intelligence
Know Your Inference Maximising GenAI impact on performance and Efficiency. | Model Context Protocol Connect with us, and get end-to-end guidance on AI implementation. |
Your opinion matters!
Hope you loved reading our piece of newsletter as much as we had fun writing it.
Share your experience and feedback with us below ‘cause we take your critique very critically.
How's your experience? |
Thank you for reading
-Shen & Towards AGI team