What's Your Clock Speed?

Google has made its stateful Interactions API the primary interface for Gemini models and agents. The service can retain interaction history, run work in the background and provision managed environments in which an agent can use tools, manage files and continue after the original session ends. Google says new frontier agent capabilities will increasingly arrive there rather than in its older request-and-response interface. ¹²

Microsoft markets Foundry as an end-to-end environment for building, running, governing and distributing agents, including managed memory, identity, monitoring, model routing and links into Microsoft 365. AWS offers a managed agent runtime with memory, tools, policy, evaluation and monitoring. OpenAI's proposed acquisition of Ona is explicitly intended to give Codex persistent, customer-controlled cloud environments for work that continues over hours or days. ³⁴⁵

These are supplier descriptions, not proof that every capability works equally well in every enterprise. The direction is nevertheless consistent: the model provider and cloud platform increasingly want to operate the surrounding system as well as supply the intelligence. Convenience rises because less infrastructure must be assembled internally; dependence can rise for the same reason.

The newest arXiv batch makes the shift easier to see without requiring leaders to read the technical papers. LatticeMind asks how several agents can maintain an organisational truth when their claims conflict or become obsolete. Its answer is a memory layer that records what is confirmed, contested or superseded instead of simply storing every assertion. Prompt Embedding Probes asks whether a system can detect elevated error risk from signals inside a model before relying on its final answer. Both are early research results, but both move responsibility beyond raw model intelligence. ⁶⁷

Other papers expose why the surrounding system matters. Pragmatic Attack Surface shows that manipulation can be carried through implication and context rather than an obvious malicious instruction. Agentic Auto-Research is Fuzz Testing argues that autonomous discovery needs frequent signals showing whether each experiment is making progress, while keeping final validation separate so the system cannot simply game its own measure. ⁸⁹

Seen separately, these are studies of memory, security, monitoring and feedback. Seen together, they resemble the anatomy required to sustain intelligence: memory that can update, an immune response to untrusted context, senses that reveal internal health and feedback loops that keep activity within an acceptable range. The papers do not prove that a mature agent operating system exists; they show where unresolved development is concentrating.

A fully managed platform can be the right choice when speed, scarce engineering capacity and integration with an existing cloud estate outweigh the switching risk. Owning every component is not automatically strategic. The mistake is allowing a sequence of convenient defaults to determine where organisational memory lives, which identity system grants authority, how activity is inspected and whether a long-running workflow can be recovered elsewhere.

Treat the operating layer as four separate decisions. First, can the model be changed without rebuilding the workflow? Second, can state, instructions, files and learned procedures be exported in usable form? Third, do permissions and policies remain enforceable outside the supplier's interface? Fourth, can the organisation reproduce the audit trail, interrupt the work and recover it during an outage or migration?

Open standards help at the connection points. The Linux Foundation's Agentic AI Foundation now provides a neutral home for protocols including MCP, which connects models to tools and data, and its members span the major providers. That reduces some integration friction, but a common connector does not automatically make memory, monitoring, policy, economics or recovery portable. ¹⁰

North American organisations may have the widest access to new platform features and specialist talent, while Europe and the United Kingdom place greater weight on data location, traceability, worker rights and the legal allocation of provider and deployer duties. Asia-Pacific buyers face a broad range of cloud availability, language performance and sovereignty requirements. Africa, the Middle East and Latin America include both advanced cloud markets and settings where connectivity, cost, local-language capability and institutional capacity make a lighter or more portable architecture more valuable.

Microsoft's July announcement of an Asia Pacific Data Zone is one example of platforms adapting their operating layer to regional requirements, but availability is not equivalence. Leaders should check the exact services, models, retention terms, residency boundaries and support arrangements available in each country rather than treating a global product name as a global operating condition. ³

The durable global principle is to make the ownership boundary explicit; the local decision depends on law, infrastructure, language, skills and bargaining power.

Select one useful but non-critical workflow and implement it in a managed environment with a clearly documented boundary. Record where its history, instructions, credentials, tools, policies, monitoring data and recovery procedures live. Then reproduce the workflow in a second environment or with a portable component at the layer the organisation says it controls.

Measure time to working deployment, full operating cost, task completion, human intervention, failure recovery and the effort required to move. The migration itself is the test: if the team cannot transfer the workflow's state or explain which controls disappear, the dependency is real and should be priced into the decision.

The 1990s did not end the processor race; they made the rest of the system economically decisive. AI appears to be entering the same phase. Leaders do not need to predict which model wins, but they do need to decide whether the organisation will own enough of the surrounding system to change engines without rebuilding the business.