MCP

The agent-framework market consolidated into four orchestration patterns, but those patterns leak into each other by the vendors' own docs. They are primitives on a spectrum from deterministic to autonomous, and the decision is which primitive you need, not which framework.

The prompt stopped being the hard part. What makes an agent survive tool failures, context drift, and non-deterministic outputs is the open-source harness around it, and a solo operator can now self-host the whole thing.

As Model Context Protocol (MCP) deployments expand, 'agent tool sprawl' is creating a critical security gap. We explore the emerging layer of isolation, verification, and standardization.

Five enterprise vendors shipped near-identical three-layer agent governance stacks built on MCP, clustered most densely between August 31 and September 8, 2026. The open question is whether bundled governance is plumbing or a moat.

AGNTCY is the Internet of Agents project, and it just archived its own Agent Connect Protocol. Reading that archive shows the layer dividing into describe and invoke.

Agent skills began as a way to give Claude domain expertise and became an open, cross-vendor format for packaging capability: a folder with a SKILL.md file that runs on Claude Code, Cursor, Gemini CLI, Copilot, and a Java service alike.

Agentic AI is deploying faster than anyone can govern it. The missing layer is not the model but the control plane around it, and the MCP CVE wave shows what happens when write access ships before that layer exists.

AutoGen is in maintenance mode and its fork AG2 carries on; every model provider now gives away a thin agent SDK. The framework layer is fragmenting on purpose, and the real competition has moved to the orchestration loop, the memory layer, and the protocols.

A2A's move into the Agentic AI Foundation is a hosting change, not a control transfer, and it still leaves enterprise authorization, key-to-org binding, and conformance depth on the buyer.

Model Context Protocol drops its stateful handshake and becomes a stateless protocol, and its new roadmap elevates agent identity to a top-five priority.