GitLab adds GitLab Orbit, Next‑gen SCM, and governance controls for agentic engineering

What changed: GitLab announced a bundle of agent-focused features — GitLab Orbit (a lifecycle context graph), Next‑Generation Source Code Management for server‑side agent queries, and Governance for Agents (audit + policy) — in a June 10, 2026 press release.

Why it matters: Builders and engineering leaders can stop treating agent work as a black box: Orbit promises a single context layer agents and humans can query, the new SCM reduces unnecessary repo cloning and token usage for agents, and governance adds identity, policy, and audit trails so agents can operate without breaking compliance. This matters for teams that want to scale coding agents inside existing DevSecOps pipelines without exploding cost or control gaps.

Try / watch: If you operate CI/CD at scale, request access to the private/public betas and run a pilot that routes a small set of agent workflows through Orbit to measure token and latency reductions before broader rollout. Watch for real-world metrics on token use and audit log fidelity as you test.

Datadog launches Bits AI, Agent Console and AI Guard at DASH (agent observability and runtime protection)

What changed: At DASH (June 9–10 sessions) Datadog promoted Bits AI (an agent suite), Agent Console (centralized monitoring for agents and coding tools), and AI Guard (runtime protection that traces agent decisions and detects anomalous behavior) across its conference catalog and session pages dated June 10, 2026.

Why it matters: Observability and security are now first‑class concerns for agent deployments — Datadog is packaging agent telemetry, evaluations (evals), and automated checks so teams can answer who used an agent, what it did, and whether results were safe. For operators, that reduces the risk of silent data exfiltration, prompt injections, or runaway automation from coding agents and production SRE agents.

Try / watch: Instrument one or two agentic workflows with Datadog’s LLM/agent observability (or equivalent) to capture traces and tool calls. Treat evals as part of your CI loop — build basic chain‑of‑reasoning tests that run automatically. Monitor for false positives in AI Guard and tune rules before letting agents act autonomously.

Nextworld general availability: Agentic Development for prompt→production enterprise apps

What changed: Nextworld announced general availability of “Agentic Development,” a prompt‑to‑production capability that uses coordinated teams of agents (product, dev, QA) plus a Model Context Protocol (MCP) server and a sandboxed Code Mode to produce governed, production‑ready applications (announcement dated June 10, 2026).

Why it matters: Instead of a single agent spitting out prototype code, Nextworld’s approach treats the specification as the durable artifact and runs agentic work inside a platform that automatically inherits RBAC, audit trails, testing, and lifecycle controls. For enterprise buyers and IT teams, that reduces the risk of shadow IT and makes agent‑built apps easier to govern and maintain.

Try / watch: If you evaluate agentic app builders, run a demo that focuses on governance: verify RBAC, test audit logs across agent actions, and validate that sandboxed code execution prevents model context leakage. Watch for limits where platform‑bound agents still need custom infra or integrations.