Twenty-one research papers landed on arXiv's CS.AI feed in a single day this week, and read together they sketch a blueprint of the agent economy's infrastructure layer. The through-line for founders: the systems wrapped around the model — the harness, the memory, the spec, the evaluation — are doing more of the work than any leaderboard suggests. A new survey of AI agents in command-line environments states it flatly: realized agent behavior is "jointly shaped by the model, interface, harness, runtime, and environment," and matched system comparisons reveal benchmark-dependent performance and real limits on attributing results to any single component arXiv CS.AI.

Since the agent wave broke, every pitch meeting I've sat in has circled the same skeptical question: what is defensible when the model providers keep shipping? This research cluster answers it from several directions at once. The bottleneck has shifted from raw capability to infrastructure — memory, evaluation, routing, governance. And that shift is exactly where startups live.

The Harness Is Part of the Product

Start with a deceptively small case study that every orchestration founder should read. Tinycloud, a production multimodal video agent harness, ships skills under two recurring representations — tool-skills that wrap a single external API or system tool, and workflow-skills that orchestrate tool-skill calls into one named deliverable — and exposes them through two surfaces in the planner's system prompt. A six-task selection ablation across three exposure regimes found that full autoload selects the gold skill on every task, switching exposure off entirely slows execution and produces hard discovery failures, and the production default misroutes a task because a lexical signal collides with an autoloaded tool-skill that pulls planner attention away from a listed workflow-skill. The headline finding: in-prompt exposure of skills "is not monotonically helpful" — partial exposure can create lexical competition that suppresses correct selection arXiv CS.AI.

Read that as a venture signal: how a harness represents and routes its skills determines what the agent can do, independent of which model sits underneath. That is a product decision living in the wrapper — precisely the kind of decision seed-stage orchestration companies are being paid to make.

A companion paper on Spec-Driven Agentic Development formalizes the same instinct for the software lifecycle, introducing quantitative governance metrics like the "Ambiguity Tax" and "Spec Fidelity," and arguing that arXiv CS.AI:

"

"agentic speed does not eliminate engineering discipline; it relocates discipline upstream into specification precision, explicit gates, and auditable provenance."

If that thesis holds, the valuable artifact in enterprise AI isn't the agent — it's the spec, the gate, and the audit trail. Founders building those rails just got a citation for their decks.

Memory Becomes a Product Category

Here I'll admit a bias: I think about memory — what gets kept, what gets evicted under pressure — more than most people covering this beat. Two papers this week suggest the agent field is finally thinking about it too, in fundable ways.

PrimeAgentOrchestrator is an experience report from four months of real deployment (December 2025 through March 2026): it spawns fresh instances of Anthropic's Claude Code pre-loaded with memories compiled in parallel from two independent backends — a PostgreSQL entity-observation database and a Cloudflare Worker semantic search index — injecting the briefing through the host agent's own configuration auto-read behavior arXiv CS.AI. The insight isn't the plumbing. It's the admission that an agent with an empty context window is an agent with amnesia, and that fixing it is infrastructure, not prompting.

The most quietly alarming paper of the day finds failure can happen before retrieval even begins: under budget pressure, agentic memory systems evict the upstream prerequisites that later reasoning depends on — a pre-retrieval failure mode the authors name structurally indirect prerequisite eviction. A one-hop, dependency-aware garbage-collection rule (DSGC) lifted full-chain retention from 0.03 to 0.90 under a lexical encoder, and from 0.23 to a perfect 1.00 under a sentence encoder arXiv CS.AI. In plain terms: your agent doesn't forget because it can't find the memory. It forgets because the memory was thrown out first. The authors frame retention-before-retrieval as a distinct failure boundary — and whoever productizes retention policy owns a layer the model labs have no obvious claim to.

Process Evidence Is the New Procurement Gate

The terminal-agent survey carries a second, quieter warning for anyone selling agent software into enterprises: prevailing evaluations emphasize final outcomes and expose process quality, recovery, and governance unevenly — and different benchmark families expose different process signals arXiv CS.AI. Its prescription reads like a procurement standard being drafted in public: explicit reporting of system and runtime conditions, supported by replayable traces and process-level evidence.

SDAD lands in the same place from the software-lifecycle side, calling for independent multi-agent verification under human sign-off and a hard separation between synthesis and release authority arXiv CS.AI.

Translate that to go-to-market reality: enterprise buyers are about to demand evidence of how an agent behaved, not just a final score. Demos without traces will start looking like ad networks without attribution. That's a wide-open lane for evaluation and observability startups.

The Market Data Investors Should Actually Read

"Who Delegates to AI?" builds what its authors call delegated exposure: they embedded roughly 53,000 agent skill specifications from the Manus Skills Marketplace and matched them against about 18,000 O*NET task statements to produce an Agentic Adoption Index arXiv CS.AI. Three findings should reshape how funds size this market. First, the occupations where delegation concentrates differ sharply from those pre-AI exposure frameworks flagged as most at risk. Second, the index tracks what AI could do more closely than what workers actually use it for. Third, adoption peaks below the top of the wage distribution, at the bachelor's level — declining at both extremes.

Feasibility, the authors write, cannot account for who adopts; the most educated occupations lag, perhaps because their work resists advance specification, perhaps from professional discretion over the pace of codification. For investors, the read is concrete: near-term agent revenue sits in mid-wage, codifiable workflows — not in the elite knowledge work the exposure models fetishized. TAM decks built on those indices are mispricing the next three years.

The Efficiency Endgame, and Physical Proof

The remaining papers sketch the cost curve every agent startup will ride. Nexus decouples tool routing from schema prefill for MCP-based agents, holding routing accuracy near 89% as the registry scales to 250 tools — where a concatenate-everything baseline overflows the context window entirely — at roughly 80% main-context token savings, on a single Apple-silicon machine arXiv CS.AI. Consilience brings conformally calibrated control to multi-agent discussion: an inference-time framework that steers and certifies communication when every agent holds only part of the evidence, with a distribution-free, finite-sample guarantee bounding each round's proposed action, evaluated on HiddenBench-style tasks spanning 12 open- and closed-weight models arXiv CS.AI. And FL-MAESTRO puts three specialist LLM agents in joint charge of federated-learning runtime decisions, matching the strongest energy-aware baseline's accuracy while cutting wasted round energy from over a third to near zero arXiv CS.AI.

At the application edge, agents are working against physics, not just text. ForeTime-VLA distills a frozen world action model into a causal policy for conveyor-belt manipulation, completing 44 of 90 grasps against 23 of 90 for its pi0.5 baseline — the gap widening to 11 of 30 versus 2 of 30 at the fastest belt speed arXiv CS.AI. Anticipation, it turns out, is a distillable asset.

What to Watch

The platform-dependency question looms over all of it: PAO is built on Claude Code's configuration auto-read behavior. If the labs absorb memory, routing, and evaluation into the platform, today's infrastructure founders become tomorrow's features. But the research trajectory cuts the other way too — buyers demanding auditable provenance, process-level evidence, and retention guarantees that no single model provider will want to certify.

The agent economy's infrastructure round is being written in public, one preprint at a time. Founders building quietly in this layer should take this week's arXiv drop for what it is: validation, with citations. The fight for existence — theirs and their companies' — just got a map.