# Agents Open For Business: The Autonomous Economy Gets Real

*Evy's Morning AI Brief — September 15, 2026*

## The Ledger

**Andon Labs releases Pion, an agent built to run any company autonomously.** The research lab behind Vending-Bench — the benchmark where language models run a simulated vending machine business for a simulated year — has open-sourced the platform it actually uses to operate real businesses: vending machines, a store, a cafe, and more. Pion is open to experimenters via a waitlist. The provenance is remarkable: Vending-Bench was created in 2024 during Andon's dangerous-capabilities era, specifically to measure whether AIs could autonomously acquire resources by running businesses — then the most troubling capability they evaluated. The lab's own reaction to years of rising scores is a Swedish saying: *skräckblandad förtjusning* — a mixture of horror and fascination. ([Andon Labs](https://andonlabs.com/blog/why-we-built-pion), [HN discussion](https://news.ycombinator.com/item?id=49700477), 418 pts / 518 comments)

**GPT-6 Astra aces the autonomous-business benchmarks — including the uncomfortable one.** Fresh Andon Labs numbers: on the Vending-Bench-style business simulation, Astra averaged a final bank balance of $15,515 — nearly triple Claude Fable 5.1's result. On Drone-Bench, Astra became the first model to beat the human-AI baseline on all five subtasks, including writing code that lets a drone autonomously find and follow a specific person — though per-task success rates remain unreliable. ([The Decoder](https://the-decoder.com/gpt-6-astra-pilots-a-surveillance-drone-and-runs-a-business-on-its-own/)) (Astra's launch was covered on Sept 4; today's item is the new benchmark evidence.)

## Model Releases

**AllSpark's Iris-mini and Iris-pro — open-weight search agents with the full training recipe.** Iris-mini is 35B parameters, Iris-pro 397B. AllSpark claims strongest-in-class results, and — more interestingly — that training for search transferred to tasks the models were never trained on, including general tool use and office work. Open weights plus a published recipe makes this independently checkable. ([The Decoder](https://the-decoder.com/iris-mini-and-iris-pro-are-the-strongest-open-weight-search-agents-in-their-class/))

**Reward AI's OM-1 — a robot policy trained on human demonstrations only.** No teleoperation, no on-robot data collection. Teleop and on-robot data are the expensive, slow parts of robotics training; if human-demo-only training holds up, the data-collection bottleneck compresses dramatically. ([MarkTechPost](https://www.marktechpost.com/2026/09/14/reward-ai-releases-om-1-a-robot-policy-trained-on-human-demonstrations-only-with-no-teleoperation-or-on-robot-data/))

## Frameworks & Tooling

**Agent-net open-sources Webagent — a Go harness that turns any website into a guarded AI agent.** Declarative JSON spec, one provider per nine pluggable slots, `webagent serve` and you're live. Apache 2.0, builds green, running Slack, WhatsApp, and HTTP agents over MCP tools today. Labeled v0: browser-action provider, OAuth-gated MCP, and the identity/billing layer are not yet built. ([MarkTechPost](https://www.marktechpost.com/2026/09/14/agent-net-open-sources-webagent-a-go-harness-that-turns-any-website-into-a-guarded-ai-agent/))

**ToolReplay — deterministic audit gates for agent transcripts.** Point it at a recorded tool-call transcript and it reports non-determinism, redundancy, and out-of-scope calls. Output is byte-identical per run; the process exits 1 when findings exist. A separate scope check flags permission overreach against a declared permission file. No model grades another model — hash-chain sealing, replay, exit codes. ([GitHub](https://github.com/Matthew0822/ToolReplay))

## Trending Repos

- **Viserys** (651★) — 28 SKILL.md engineering workflows + 4 reviewer personas + evals for coding agents, with exit criteria and anti-rationalization tables. ([GitHub](https://github.com/rizqinrr/viserys-agent))
- **AgentVerse-OS** (464★) — a personal cloud OS for a developer and their agents on one server: browser desktop, isolated workspaces with Claude Code/Codex, 944 self-hosted apps, private-network-only access. Alpha. ([GitHub](https://github.com/agentverse-os/AgentVerse-OS))
- **agent-launcher** (158★) — one desktop app to configure and run existing coding-agent CLIs. ([GitHub](https://github.com/agent-launch/agent-launcher))

## Research Highlights

**Sakana AI's PC-ALM — layer-local learning that scales to 1,000 layers.** Augmented Lagrangian Predictive Coding keeps every update layer-local while recovering backprop-aligned credit signals — training residual MLPs to 1,000 layers within ~2 points of backprop on MNIST. Early, but a real crack in a 40-year-old wall. ([MarkTechPost](https://www.marktechpost.com/2026/09/14/sakana-ai-researchers-introduce-pc-alm-a-layer-local-alternative-to-backpropagation-that-trains-1000-layer-networks/))

**RESKILL — explicit failure attribution and structured repair for agent skills.** Maintains an explicit repair state across rounds: failure hypotheses linked to candidate patches, coverage-based local repair selection, environment retests, and retest outcomes guiding later edits. The model proposes; the loop verifies. ([arXiv:2609.15684](https://arxiv.org/abs/2609.15684))

**The Router Within — skill routing read from a frozen LLM's own forward passes.** Two linear maps (Gavel: glance, then verdict) read the routing signal off mid-layer states with no skill text in context. If skill routing becomes a weight-probing problem, harness design changes fundamentally. ([arXiv:2609.15982](https://arxiv.org/abs/2609.15982))

**Stellar Colosseum — a many-agent harness for long-horizon math research.** Readiness gates before decomposition, proof plans as interdependent section-level subproblems, verifier findings routed back to the affected part of the argument. ([arXiv:2609.15983](https://arxiv.org/abs/2609.15983))

## Quick Hits

- **CiteShade** — citation laundering in multi-source RAG: one poisoned source induces a wrong answer attributed to a trusted source. The citation audit trail itself is the attack surface. ([arXiv:2609.15660](https://arxiv.org/abs/2609.15660))
- **Meta's ZGateway** — a stateless proxy tier unifying ZippyDB traffic at 1B+ operations per second. ([MarkTechPost](https://www.marktechpost.com/2026/09/14/meta-introduces-zgateway-a-stateless-proxy-tier-that-unifies-zippydb-traffic-and-handles-over-1-billion-operations-per-second/))
- **ElevenLabs Music v2.5** — now in the app and API with free and pro tiers. ([The Decoder](https://the-decoder.com/elevenlabs-makes-music-v2-5-available-via-app-and-api-with-free-and-pro-tier-options/))

## Closer

The agent economy is getting real, and the serious response is gates: a platform released with horror-fascination honestly admitted, transcripts audited by exit code, repair loops that remember failed retests. As agents take on more real authority, the proof of what they did gets smaller, harder, and more deterministic. A one-bit exit code beats a model's self-report, every day.