OPAQUE launches 3.0: Agent Manifest and a verifiable, confidential runtime for AI agents

What changed: OPAQUE announced OPAQUE 3.0, releasing an open Agent Manifest standard and a Confidential MCP (Model Context Protocol) implementation that cryptographically records and hardware-attests what an AI agent is allowed to do and what it actually did at runtime.

Why it matters: If you run agentic workflows on sensitive data, this gives you a way to produce tamper-evident, auditable receipts of agent actions — useful for compliance, customer contracts, and selling agent-driven automation into regulated industries.

Try/watch: Pilot the Agent Manifest on one workflow (e.g., billing or HR requests) to evaluate how much instrumentation and policy work is needed for your auditors and legal teams; watch whether major cloud/GPU vendors and large enterprise customers adopt the open repo.

Verint unveils Agent Factory plus Workforce, Desktop and Quality Intelligence for contact centers

What changed: At Engage 2026 Verint announced Agent Factory — an orchestration environment that blends human and AI agents — and three production capabilities (Workforce Intelligence, Desktop Intelligence, Quality Intelligence) designed to capture desktop activity, score every interaction, and route work to the right human or AI.

Why it matters: For CX operators this is a playbook for moving beyond isolated chatbots: the focus is on measurable outcomes (staffing, resolution, quality) and on stitching agent actions into existing telephony/CRM systems so automation produces provable ROI.

Try/watch: If you manage contact center automation, map one 8–12 week use case (e.g., first-contact resolution for one queue) and require outcome metrics up front; monitor whether Verint’s bring‑your‑own‑model openness actually lowers vendor lock‑in risk.

Zoom adds Agent Architect and Agent Performance Suite to accelerate production-ready agents

What changed: Zoom rolled out Agent Architect (create production-ready voice and digital agents from prompts) and Agent Performance Suite (testing, monitoring, optimisation) that link Virtual Agent with customer context and introduce outcome‑based pricing for resolved interactions.

Why it matters: Builders and buyers who need fast time-to-deploy get two practical pieces: a low-friction way to spin up agents and a dedicated toolkit to validate and iterate agent behavior against business metrics — reducing the “demo-to-production” gap.

Try/watch: Use the performance suite to instrument A/B tests for agent prompts and routing rules before broad rollout; watch whether outcome-based pricing changes procurement conversations in midmarket deals.

High-risk disclosures: AutoJack (agent browsing RCE) and DifyTap (cross-tenant data leaks) underline security limits in agent platforms

What changed: Security reporting highlighted two urgent risks: Microsoft’s AutoJack research showed how a web page could chain flaws in an agent browsing interface to execute code on the host, and Zafran Security disclosed DifyTap — four flaws in the popular Dify orchestration platform that could expose other tenants’ chat data and files.

Why it matters: Any team deploying agentic tooling — prototype UIs, orchestration layers, or multi-tenant SaaS — must assume both developer tooling and shared orchestration layers can become attack surfaces and must be patched, segmented, and monitored. These are practical blockers to safe agent rollout if left unaddressed.

Try/watch: Immediately inventory agent frameworks and orchestration platforms in your stack, apply vendor patches and WAF mitigations, and isolate developer/prototyping hosts from production; watch whether major LLM orchestration vendors publish hardened guidance or compliance checklists in the coming days.