惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

U
Unit 42
Microsoft Azure Blog
Microsoft Azure Blog
Engineering at Meta
Engineering at Meta
博客园 - 【当耐特】
人人都是产品经理
人人都是产品经理
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
WordPress大学
WordPress大学
有赞技术团队
有赞技术团队
Blog — PlanetScale
Blog — PlanetScale
酷 壳 – CoolShell
酷 壳 – CoolShell
aimingoo的专栏
aimingoo的专栏
Jina AI
Jina AI
小众软件
小众软件
博客园 - 叶小钗
MongoDB | Blog
MongoDB | Blog
大猫的无限游戏
大猫的无限游戏
博客园 - 聂微东
Y
Y Combinator Blog
云风的 BLOG
云风的 BLOG
I
InfoQ
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Martin Fowler
Martin Fowler
P
Proofpoint News Feed
MyScale Blog
MyScale Blog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant
Chatbots Are Dead. Long Live Agents: My Take on the Last ...
Keerthana · 2026-05-07 · via DEV Community

TL;DR: GPT‑5.5 and Google’s Remy just pushed us from “AI that replies” to “AI that runs workflows.” If you’re still shipping simple wrappers around LLMs, you’re already behind. The game now is designing agentic systems that can plan, act, and be governed safely in production.

The last 10 days felt like a year. If you blinked, you probably missed the most aggressive pivot in software since “let’s put everything in the cloud”: the Agentic Era.

This is my breakdown of what actually matters for devs—and how to stay relevant.
1. The Death of the “Prompt–Response” Loop
We used to be happy when an LLM returned a nice block of code. Now GPT‑5.5 and Google’s Remy are showing something different: agentic workflows that plan, call tools, and iterate until a goal is done.

A chatbot waits for you. An agent plans for you.

A chatbot answers “How do I build a CRUD API?

An agent creates the repo, scaffolds the API, runs tests, and deploys to your staging environment.

GPT‑5.5 is explicitly built for this “messy workflow” world—planning, verification, retries, and long-running tasks—rather than just single‑turn accuracy.
**
**That means our mental model is shifting:

We aren’t just writing system prompts anymore; we’re designing task loops:
goal → plan → tool calls → critique → retry → done.

If your current “product” is basically:
User prompt → LLM answer → copy‑paste somewhere else,
you’re competing with the default chat UI of every big model vendor. That’s not where the leverage is.

2. Infrastructure Is the New Gold
On the infra side, the writing is on the wall: cloud and enterprise vendors are pivoting hard to AI infra and agent workloads. This isn’t the “let’s experiment with a chatbot” phase anymore—it’s “how do we run thousands of agents safely and cheaply?”

If you’re a DevOps, backend, or platform engineer, your new job description is dangerously close to:

How do I give an AI agent a secure sandbox, a database connection, and a set of tools—
without it blowing up my AWS bill or torching production?

That breaks down into a few boring‑but‑critical questions:

Cost guardrails: timeouts, max steps per task, token budgets, per‑agent spending caps.

Access boundaries: which APIs, databases, queues, and secrets can this specific agent actually touch?

Observability: logs, traces, and audits for “what did this agent do, and why?”

OpenAI’s new agent‑focused releases and NVIDIA’s infra push are both signaling the same thing: the moat is shifting from “I called a model” to “I can operate fleets of agents reliably.”

The infra folks who can answer these questions cleanly will be the ones everyone calls when their “cool demo” needs to become a production system.

3. The “Physical AI” Governance Problem
The next layer of chaos is physical AI—agents that don’t just touch APIs and databases, but robotics, factories, and hardware.

Microsoft just dropped an open‑source Agent Governance Toolkit to bring runtime policy enforcement, identity, and reliability to autonomous agents. It’s built specifically to address the new OWASP Top 10 for agentic AI: goal hijacking, tool misuse, identity abuse, memory poisoning, and more.

Regulators are waking up too: the EU AI Act’s high‑risk obligations and state‑level AI laws are explicitly targeting autonomous systems. “We’ll figure out security later” is no longer a viable strategy.

If an agent has the agency to:

Execute code

Call internal APIs

Move money

Or control hardware

…then security is no longer an afterthought—it’s the core feature.

Think of patterns emerging here:

Policy engines that intercept every agent action before it executes (like a kernel for AI agents).

Cryptographic identity and trust scores for agents talking to each other.

Kill switches and execution “rings” so a misaligned agent can’t take down your whole system.

We’re essentially rebuilding OS‑level concepts permissions, kernels, processes but for autonomous AI.

4. How to Pivot Your Projects (Right Now)
If you’re looking for a weekend project to level up your portfolio, stop building “Chat with your PDF” clones. That’s table stakes now.

Here are some ideas that actually lean into the Agentic Era:

a) Build a Browser Agent
Use Playwright (or your browser automation tool of choice) + an LLM to automate a multi‑step checkout or workflow.

Example spec:

Log into a demo account.

Search for a product, add it to cart, apply a coupon, and reach the checkout page.

At each step, the agent decides what to click/type based on page content (not hard‑coded selectors only).

At the end, generate a structured report: steps taken, time per step, errors, and whether the goal was achieved.

If you have access to something like Swiggy Builders Club APIs or similar sandbox APIs, plug those in to simulate real‑world flows.

Key point: the agent should plan the sequence of actions, not just execute a fixed script.

b) Implement “Agentic RAG”
Don’t just “ask docs a question.” Build a retrieval loop that critiques and verifies before responding.

A simple pattern:

Retrieve: use your usual vector search or RAG stack to pull top‑k chunks.

Critique: ask the model to rate relevance, freshness, and consistency of the retrieved docs against the query.

Decide:

If confidence is high, answer from the docs.

If confidence is low, re‑query, widen the search, or ask the user a clarifying question.

Log: store the critique and confidence scores for future debugging.

This alone moves you from “fancy semantic search” to an agentic knowledge workflow that can say “I don’t know” in a principled way instead of hallucinating.

💬 Let’s Talk
So where are you in all this?

Are you still shipping simple “prompt in, text out” tools?

Or are you already giving your AI autonomy with planning, tools, and guardrails?

What’s your current stack for handling agents—frameworks, runtimes, or governance tools you like? I’m especially interested in:

Agent frameworks (OpenAI’s tools, custom orchestrators, LangChain / alternatives, homegrown).

Infra setups for sandboxing and cost control.

Any security/governance patterns you’ve tried in real projects.

Drop a comment below—I’m looking for new frameworks and patterns to try this weekend