The Agentic Company OS: Substrate Inversion for Sustained Enterprise Agent Deployment
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
Abstract (arXiv)
Enterprise AI agents often succeed in a demonstration and then stall once they must operate day after day. An industry report estimates that most pilots never reach production and that deployed systems rarely retain feedback or improve over time, while agent benchmarks show single-run successes masking unreliable repetition. We argue that these failure modes share a common architectural root: agents reason over data structured for human operators and traditional applications, not for the language models that power them. This position paper proposes that companies deploying agents in sustained operation should rebuild their cognitive substrate, the shared environment agents read as working context, around representations matched to that reasoning surface, isolating schema translation to the action boundary. Markdown is the instantiation available today, not a proven agent-native primitive. Two mechanisms ground the argument: context-bandwidth asymmetry, the gap between one-pass reading of connected prose and field-by-field typed access that strips relations; and cross-loop coupling, the claim that action, skill, and policy loops compound only if they share one substrate. A four-layer framework (Data, Knowledge, Intelligence, Governance) operationalizes the position, with a Sync Agent enforcing the action boundary and a per-skill trust gradient, making governance and auditability structural properties of the substrate. The position revives the shared-substrate tradition of classical multi-agent systems under LLM-era economics. We analyze the main objections and risks, including indirect prompt injection on the compile path, and outline a research agenda for evaluating substrates directly.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 26 of its 47 references that are in the map. First posted on arXiv 11 Sep 2026.
Builds on
26 of 47 references.
Closest ancestors · 4
Same direction, newest first
- 2025Exploring Advanced LLM Multi-Agent Systems Based on Blackboard Architecture2 Jul
- 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains17 Jun
- 2024Large Language Model based Multi-Agents: A Survey of Progress and Challenges21 Jan
- 2023AgentBench: Evaluating LLMs as Agents7 Aug
Other references · 22
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
- 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,796
- 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,455
- 2023Voyager: An Open-Ended Embodied Agent with Large Language Modelscited by 2,191
- 2024From Local to Global: A Graph RAG Approach to Query-Focused Summarizationcited by 1,453
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
- 2023MemGPT: Towards LLMs as Operating Systemscited by 1,389
- 2023GAIA: a benchmark for General AI Assistantscited by 1,128
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
- 2024A Survey on RAG Meeting LLMs: Towards Retrieval-Augmented Large Language Modelscited by 452
10 more
- 2025Defeating Prompt Injections by Designcited by 297
- 2023How is ChatGPT's behavior changing over time?cited by 270
- 2024Defending Against Indirect Prompt Injection Attacks With Spotlightingcited by 267
- 2025Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directionscited by 265
- 2025Artificial Intelligence Index Report 2025cited by 64
- 2026The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systemscited by 30
- 2023Building Your Own Product Copilot: Challenges, Opportunities, and Needscited by 17
- 2025LLM-Based Multi-Agent Blackboard System for Information Discovery in Data Sciencecited by 15
- 2025Agentic Business Process Management: Practitioner Perspectives on Agent Governance in Business Processescited by 10
- 2026Structured Context Engineering for File-Native Agentic Systems: Evaluating Schema Accuracy, Format Effectiveness, and Multi-File Navigation at Scalecited by 5
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Agentic Context Management: Solving Agent Memory and Cost by Treating Them as Lifecycle and Architecture Problems
- 2026Governed Memory: A Production Architecture for Multi-Agent Workflows
- 2026The CASE Framework: A Multi-Disciplinary Control Architecture for Governing Enterprise Agentic AI
- 2026Substrate-Aware AI Agents: Execution Context as a First-Class Input
- 2025AgentArch: A Comprehensive Benchmark to Evaluate Agent Architectures in Enterprise
- 2026From Cognitive Architectures to Language Agents: A Mechanism-Level Review of Lineage, Convergence, and Migration Gaps
- 2026Beyond Task Success: An Evidence-Synthesis Framework for Evaluating, Governing, and Orchestrating Agentic AI
- 2026Demand-Driven Context: A Methodology for Building Enterprise Knowledge Bases Through Agent Failure