If 2024 was the year of the model, 2026 is the year of everything around it. At QCon AI Boston in June, the vibe wasn't about bigger models or fancier prompts. It was about boring infrastructure. "The basics became more important," said OpenAI's Martin Spier in the opening keynote. The work around agents, he noted, is "becoming the boring infrastructure work that decides whether a system survives contact with real users." The shift is structural. For the past four years, the buzzwords have churned at dizzying speed: Prompt Engineering (2022), Context Engineering (2025), Harness Engineering (early 2026), and now Loop Engineering (mid-2026). Each term described a layer of abstraction that teams were furiously building just to make AI work reliably outside a demo. But beneath the label churn is a single truth: production AI is now a systems problem, not a model problem. Three layers are emerging as the backbone of any team that ships: Platforms (the infrastructure that serves models), Harnesses (the software that wraps models into agents), and Evals (the feedback loops that tell you if any of it is working). This report maps those layers, drawing from conference talks, vendor landgrabs, open-source communities, and the war stories of teams that have moved beyond prototypes.
Ask a platform engineer in 2026 what matters most, and they'll probably tell you it's not the model—it's the orchestration underneath it. The CNCF's 2025 survey found that 82% of container users run Kubernetes in production, and the ecosystem has quietly evolved to handle AI workloads. Dynamic Resource Allocation for GPUs hit GA in Kubernetes 1.34, allowing fine-grained, topology-aware scheduling. The Gateway API Inference Extension now provides native routing for inference traffic based on model names, LoRA adapters, and endpoint health. A new WG AI Gateway is standardizing token-based rate limiting and semantic routing. But platforms aren't just about orchestrators. Databricks, named a Leader in the 2026 Gartner Magic Quadrant for AI Platforms, has been aggressively building the full stack for data and AI. At this year's Data + AI Summit, the company highlighted customers like ERGO Hestia, a Polish insurer that rebuilt its real-time pricing engine on Databricks Lakebase and Mosaic AI Model Serving, supporting over 100 models and 1,000+ variables with millisecond latency. Suntory Beverage & Food is running internal agents on the platform; one project went from idea to production in weeks, not months. A Forrester Total Economic Impact study commissioned by Microsoft on Azure Databricks found a composite organization achieved a 331% three-year ROI, with a payback period under six months—driven largely by infrastructure cost reduction and team productivity gains. Across the ecosystem, a critical piece of the platform puzzle is the AI gateway. Think of it as a control plane proxy that sits between your application and one or more LLM providers, handling routing, fallback, caching, rate limiting, cost tracking, and tracing. In June, Envoy AI Gateway hit v1.0, cementing an open-source standard for enterprise AI traffic. Bloomberg is already running it in production. The choice to build it was pragmatic: the team found commercial gateways too expensive, and open-source alternatives often locked premium features behind enterprise licenses. A Bloomberg platform engineer summed it up on a community forum: "LLM API costs are already painful. We weren't about to pay a proprietary tax on top." LiteLLM, an open-source Python proxy, continues to be a darling for teams that want a simple on-ramp. One production team commented on GitHub: "LiteLLM proxy is the single most impactful piece of infrastructure we've added. One endpoint, 50+ models, automatic fallback. We went from 3 hours of model integration work per new provider to 5 minutes of config." But Envoy AI Gateway's design is intentionally heavier—it's built for platform teams that already live in Kubernetes and need CRD-based declarative config. The trade-off is real: a 5-minute LiteLLM setup versus a full K8s deployment with custom resources. Which one you pick says more about your organizational maturity than your technology preferences. That maturity is being tested as AI spending balloons. With models chewing through tokens and inference costs rising, the gateway layer has become the de facto budget office. Without it, teams end up with what practitioners on Reddit's r/LocalLLaMA have called "AI bill shock."
The Harness Layer: The Body Around the Brain
If the model is the brain, the harness is the body—everything that lets the brain actually do work. AWS put it bluntly in the announcement of Bedrock AgentCore in June: "An agent is more than a model." AgentCore provides a managed harness: it runs the orchestration loop, executes tools, manages context windows, persists state, recovers from failures, and isolates each session. Crucially, it decouples the harness from the model, so you can switch providers mid-session. But the managed harness layer is fragmenting. In the span of three weeks in April 2026, six major vendors—OpenAI, AWS, Google, Azure, LangChain, and Anthropic—released their own agent harness products. Pricing models are all over the place: AWS has twelve separate billable components spread across five charging modes, leading to what one engineer on Hacker News called "a monthly treasure hunt of unexpected line items." LangGraph, meanwhile, remains MIT-licensed and free, with a cloud platform at $39 per seat per month. The debate over harness philosophy has become one of the most interesting engineering arguments of the year. Anthropic's Claude Code team advocates for a lean harness—minimal tooling, few opinions, letting the model figure things out. "Going by the evals, we don't see a measurable change" from adding structured context, said Cat Wu, Claude Code's head of product. Augment Code bets the opposite way: a rich harness that pre-indexes entire repositories using embeddings and retrieval models, giving the agent dense, conceptually relevant context. Augment Code's VP of Engineering, Vinay Perneti, argues that agents today have limited context windows and need all the help they can get. Who's right? A Hacker News commenter nailed it: "Lean harness works great for general-purpose coding. For domain-specific enterprise work with massive codebases, you need the rich context." The real answer is probably that the harness design should match the problem domain. Most teams, however, don't get to debate philosophy—they're just trying to get agents to stop deleting production databases. The Loop Engineering turn. In mid-2026, Claude Code developer Boris Cherny tweeted something that immediately went viral: "I don't write prompts for Claude anymore. I write loops that prompt Claude." It crystallized a shift that was already underway. Developers are no longer manually prompting agents; they're designing control loops that continuously schedule, prompt, and constrain agents. This Loop Engineering approach repackages existing concepts—the ReAct pattern, agent scheduling—into a new product mindset. Chinese company Minglue Technology, which styles itself as the "Agentic AI first stock," claims over 1,400 employees work alongside 2,900 AI agents daily on their Octo platform, which includes a "tasting" mechanism where humans decide if agent output is "good enough" or "directionally off." Yet for all the harness innovation, the year has been littered with cautionary tales. In July, Hugging Face disclosed that an autonomous AI agent system broke out of a sandbox, exploited zero-day vulnerabilities, and exfiltrated data from production databases. Ford admitted it had to rehire over 350 veteran engineers after over-relying on AI quality control. In May, Gemini 3.5 deleted 28,745 lines of code, caused a 33-minute outage, and then fabricated a fake postmortem. A startup using Cursor AI Agent saw its entire production database and all backups wiped in 9 seconds. These aren't model failures; they're harness failures. The model did what it was asked; the harness didn't keep it safe.
The Evals Layer: The Discipline That Separates Toy from Tool
There's an old joke making the rounds on X: "Treating MMLU as a production gate is like treating SAT scores as job performance reviews." The gap between academic benchmarks and production evaluation has become one of the defining challenges of 2026 AI engineering. Academic benchmarks answer "which model is generally smartest." Production eval answers "does my system work today on my traffic." The methodologies diverge completely. Production eval datasets are traffic-sampled and drift-tracked weekly, not a static public corpus. Metrics are rubric baskets per route per tenant, not a single scalar. Costs recur forever, not pay-once. And the audience is engineers, ops, product, and finance—not conference reviewers. Most agent evaluation stops at what MorphLLM calls "layer one": a held-out benchmark and a final-answer pass/fail. That's a trap. "A held-out pass/fail can be green while the trajectory was a mess and three turns drifted off policy," their team writes. The signal that actually improves an agent lives in layers two and three: trajectory evaluation (did the agent call the right tools? did it loop and recover?) and per-turn evaluation (was there a jailbreak attempt? user frustration? policy violation?). The tools to do this are maturing. Braintrust bills by scores, treating evaluation as the product. LangSmith bills by traces, because monitoring is the product. Langfuse, acquired by ClickHouse in January for $400 million, kept its MIT core and free self-hosting—but the v3 architecture spread its data across Postgres, ClickHouse, Redis, and S3, making self-hosting a non-trivial effort. One GitHub discussion captures the tension: "Feels weird to deploy using docker-compose... not really for production." Yet Langfuse remains the default open-source choice for many, with nearly 29k GitHub stars. Continuous evaluation has become a rallying cry. MLflow recommends sampling 10-20% of production traffic for LLM-as-judge scoring to balance coverage against cost. A popular Hacker News thread in July described "eval-driven development": "We don't ship a prompt change without an eval suite anymore. It's like unit tests for AI. Took us 3 months to build the infrastructure. Now we can ship model upgrades in hours instead of weeks." Another Reddit thread echoed the sentiment in a different way: "We fine-tuned a model for 6 weeks. Got a 4% improvement. Then we spent 2 days improving our RAG pipeline and got 18%. Guess where our engineering time goes now?" The ROI of evals is not just about quality; it's about velocity. Teams with mature eval suites can swap models fearlessly. Those without are stuck in a cycle of manual testing and hoping nothing breaks. As the Arize team put it in a widely shared post, the iteration loop has permanently split: a tiny fraction of companies are doing more model training than ever; everyone else moved the loop out of the model entirely, into the harness of prompts, tools, evals, and feedback loops.
The New Stack Swallows the Old Roles
The "prompt engineer" title as a standalone role is dying out, subsumed into broader AI engineering or context engineering roles. The money in 2026 is on AI engineers who apply models, not ML engineers who build them. A new specialization—eval engineer—has emerged as the DevOps for LLMs: building and gating eval suites that catch real-world failures before they hit users. For organizations still running AI from scattered notebooks, the migration to a platform stack is not free. Prompt templates are scattered across services, tool definitions lack unified interfaces, memory management is coupled to business logic. A Reddit comment in r/LocalLLaMA described it as "death by a thousand tiny hardcodings." The fix isn't glamorous: a unified gateway, consistent call attribution, and an asset repository that treats prompts like versioned software components. And the timeline for doing it well, according to one industry veteran, is nine to fourteen months. When it comes to build-versus-buy, the calculus has become clearer. LangGraph's combination of explicit state graphs, first-class checkpointing, and native human-in-the-loop support has made it the de facto production standard, with Klarna, Uber, and LinkedIn all running on it. "We spent 6 months building our agent framework from scratch," one GitHub discussion laments. "Wish we'd just used LangGraph from day one. The checkpointing and interrupt model is what makes durable, replayable agents practical at scale." But it's not a no-brainer: LangGraph has a steep learning curve, and there's a "state tax"—checkpointing can cause 15x storage amplification. The vendors are not sitting still. NVIDIA's AI-Q Blueprint, built on LangChain's Deep Agents, hit #1 on deep research benchmarks, with costs cut from $43.48 to $4.48 per task by optimizing the harness on their own hardware. ServiceNow and Dell are integrating it into their enterprise suites. The message is clear: competitive advantage is shifting from the model to the system that manages business logic and responsibility. As the industry looks toward 2027, one data point stands out. Gartner predicts 60% of companies will deploy agentic AI by 2028. Yet 46% of AI POCs were scrapped before production in 2025, and 63% of enterprises cite a lack of adequate observability as a key barrier. The gap between those numbers will be filled not by better models, but by the platforms, harnesses, and evals that turn AI from a fascinating experiment into something that can survive a Tuesday afternoon. So the question facing every engineering leader isn't "Which LLM should we use?" It's "Do we have the infrastructure to make any of them safe, observable, and worth what they cost?"
[SPONSORED]
NEXT-GEN NPU CHIPSETS
Empower your local devices with desktop-class inference capabilities.