Agentic AI Foundation
HomeEventsResourcesNewsletters
Sign in
Copyright © The Linux Foundation®. All rights reserved. The Linux Foundation has registered trademarks and uses trademarks. For more information, including terms of use, privacy policy, and trademark usage, please see our Policies page.
← Conference Recap
MLOps Community
Coding Agents ConferenceAI Agents SummitAgents in Production 2025
On this page
ThemesKeynotes and framingScaling and reliability in productionTooling and orchestrationContext engineering and memoryAnalytics and search agentsMCP and protocolsSecurity and threat modelingEvaluation and trustVoice, UX and multimodal
Resources/Conference Recap/MLOps Community
Agents in Production 2025

Agents in Production 2025

33 talks, 9 themes, one fast way through the event — key takeaways, standout quotes, and every recording from Agents in Production 2026.

On this page
ThemesKeynotes and framingScaling and reliability in productionTooling and orchestrationContext engineering and memoryAnalytics and search agentsMCP and protocolsSecurity and threat modelingEvaluation and trustVoice, UX and multimodal

Themes

Keynotes and framing Vision-setting talks on deploying agents at scale and the strategic choices shaping enterprise adoption. 4 talks ↓ Scaling and reliability in production Patterns, systems, and case studies for making agentic AI fast, reliable, and production-ready at scale. 6 talks ↓ Tooling and orchestration Practical tooling, orchestration patterns, and developer workflows for building agentic systems that ship. 4 talks ↓ Context engineering and memory Techniques for context layers, memory, and personalization that ground agents with the right information. 4 talks ↓ Analytics and search agents Agents for search and analytics: retrieval, semantic layers, and warehouse-native production lessons. 3 talks ↓ MCP and protocols Interoperability, protocols, and MCP: why it matters and how to run it in enterprises. 3 talks ↓ Security and threat modeling Supply chain risks, MCP attack surfaces, and defenses for securing agent ecosystems. 3 talks ↓ Evaluation and trust Evaluating agents in the wild, measuring reliability, and catching pitfalls before launch. 3 talks ↓ Voice, UX and multimodal Designing real-time voice, multimodal interfaces, and agent UX that turns intent into action. 3 talks ↓

Keynotes and framing

2
Euro Beinat
Prosus

Using Agents in Production: Past Present and Future

Worth noting

Prosus built an in‑house agent builder and scaled to ~20,000 created agents (8,000 weekly active), expecting 30,000 in production by March, automating tasks that once required dozens of FTEs.

Quote

AI adoption is never a technical problem; it is always an organizational problem.

3
Ricky Doar & Randy
Host · Solutions lead, Cursor

The Future of Coding: AI Agents & the Next Tech Revolution // Ricky Doar

Worth noting

Cursor indexes entire codebases (e.g., ~500,000 files) into semantic search, enabling AI to pull relevant context for Brownfield work instead of treating problems as greenfield.

Quote

You have to stay in the driver's seat; you have to make the right decisions architecturally.

4
Adele, Olga, Laurel & Ben
Lead, Product Management (Enterprise Product Group), NVIDIA · Lead, Product Analytics, Olex group · Leading AI Engineer,

Open vs Closed Source Agent Infra?

Worth noting

Validate agent use cases on reliable closed-source models first; migrate to open-source models for compliance, scale, or cost once proven, while using low‑abstraction frameworks and standardizing core infra (Kubernetes, artifact repo).

Quote

Hosting a model locally is just kind of a pain if you haven't done it a lot before.

Scaling and reliability in production

1
Rekha Singhal
Head of Research and Innovation, TCS Spaceport (Tata Consultancy Services)

Future Proofing of Agentic AI Systems

Worth noting

Design-space exploration across heterogeneous accelerators and clouds revealed about 760,000 deployment combinations and can identify cheaper, better-performing alternatives to default A100 GPU choices for specific workloads (for example, 1,000-user throughput).

Quote

You're having some kind of a 7.6 lakh combination to choose from.

2
Arushi Jane, Swati Vayita, Audi Leu & Isabella Pinga
Senior Applied Scientist, Microsoft · Product leader, Google · Senior Product Manager, InWorld AI · Director of Technolo

Hardening Agents for E-commerce Scale: From RL Alignment to Reliability // Panel 2

Worth noting

Adding a DPO/T adapter trained on human-reviewed compliant rejections raised policy-adherence from 45% to 90% within 48 hours in a Google Cloud support ticket pre-qualification agent.

Quote

we boosted that productivity policy adherence score from 45% to literally 90% in less than 48 hours.

3
Amulo Washington
Product developer, Nismart AI

Agents With Real Stakes: Deploying AI for Immigration at Scale

Worth noting

They built a modular, agent-per-task microservice platform orchestrated via REST APIs and Kubernetes autoscaling, using a supervisor agent, human-in-the-loop checkpoints, and a sub-100ms speech latency target.

Quote

Each agent is specialized on a given task.

4
Artem Yushkovskiy
Global food delivery company (unnamed in talk)

Fast & Asynchronous: Drift Your AI, Not Your GPU Bill // Artem Yushkovskiy

Worth noting

Using an async-actors framework with self-hosted models, they scale from zero to hundreds of GPUs (A10/A10G), achieving near‑real-time (seconds–minutes) throughput and substantially lower costs versus API-based pipelines.

Quote

The main point of my talk today is that pipelines don't scale.

5
Phil Safford
AI consultant; cybersecurity consultant; AI researcher (independent)

Structured Dissent Patterns for Agentic Production Reliability

Worth noting

Using a 5-agent structured-dissent swarm (2 believers, 2 skeptics, 1 neutral) produced 92% task-aligned evaluation and reduced human review cost, with analyses taking ~3.5 minutes and costing ~$15 per analysis.

Quote

Single agents fail silently. They are just certain they're right even if they're wrong.

6
Sachi Shah
Product Manager, Sierra

Simulate to Scale: How realistic simulations power reliable agents in production

Worth noting

Use realistic automated simulations—mock user, agent, and judge—to run hundreds to thousands of cross‑modal (chat and voice) regression tests integrated into CI/CD, catching modality-specific failures before release.

Quote

You can set up hundreds to thousands of these and run them every time.

Tooling and orchestration

1
Chip Huyen

Coding with AI

Worth noting

Measure 'interruption rate' — the frequency you must step in while an AI coding agent runs — aim to reduce it to enable parallel tasks, greater autonomy, and lower mental effort.

Quote

I do think we are reaching the point when a lot of us are actually reviewing code more than writing code.

2
Sam Partee
Arcade

Building Agentic Tools for Production

Worth noting

Run per-tool eval suites nightly across many LLMs (they run on 15 models) to create CI/CD-like reliability, and enforce generated annotated schemas plus least-privilege authorizations for every tool.

Quote

Operational tools should be tightly scoped and have a set number of outcomes that are verifiable.

3
Benjamin Guo
Founder, Zo Computer

Velocity Coding, Not Vibe Coding

Worth noting

Make detailed, phase‑broken plans the primary artifact: use a slow, high‑quality model for planning and debugging, then a fast model to generate incremental diffs, run tests, and commit each phase.

Quote

Plans are really important. Plans are really the new code for me.

4
MFA Sudat
Staff ML Platform Engineer, Lobla Digital

Building an Orchestration Layer for Agentic Commerce at Loblaws

Worth noting

Alfred provides a reusable template and runtime (FastAPI on GKE) that orchestrates agents via MCP tools, LightLLM gateway, Langraph workflows, and Langfuse observability, with data checkpointing in AlloyDB and PII masking.

Quote

Agents are normally easy to prototype, but it's hard to run in production.

Context engineering and memory

1
Simba Khadder
Lead, Context Engine & Feature Store, Redis

Context Engineering 2.0: MCP, Agentic RAG & Memory

Worth noting

Unify RAG, memory, and structured data into a single context engine (schema-driven, materialized views) so agents retrieve controlled, observable context rather than direct DB access or many low-level MCP tools.

Quote

We're going to think of context engineering as a unified concept.

2
Frank Wittkampf
Head of Applied AI, Databook

Expanding context engineering to the tooling layer

Worth noting

Use configurable "tool masks" above raw tool handlers to shrink input/output schemas, add defaults and validation, and version masks—reducing tokens, choice-entropy, and errors to make large-scale agent workflows more reliable and cost-efficient.

Quote

Tools are prompts, and we're generally overlooking the engineering of tools.

3
Tom Kaltofen

Building Deterministic Context Layers for AI Agents: Harnessing mloda // Tom Kaltofen

Worth noting

Mluda uses testable Python plugin classes as a handover layer so teams can swap data sources, apply validation/PII redaction, and trace each data point from source to user (e.g., add a 'last-10-minutes' plugin for recency).

Quote

we need to separate what you compute from how you compute

4
Hamed Taheri
PersonalizeU

Multi-Agent Personalization with Shared Memory: From Email to Website to Proposal

Worth noting

They built a "cortex" shared-memory that proactively infers standardized customer attributes, reducing context bloat and enabling consistent recall across agents; early tests with 20+ B2B customers produced senior-quality personalized content within minutes.

Quote

Having access to raw data doesn't mean that I know my customer.

Analytics and search agents

1
Santoshkalyan Rayadhurgam

Agents as Search Engineers

Worth noting

Conditioning query embeddings on intent produced roughly a 35% lift in precision while adding little latency.

Quote

Retrieval here becomes part of a control loop and not an endpoint.

2
Dirk Petzoldt
Founder, Explain

Dynamic Contextual Retrieval in Enterprise Analytics

Worth noting

Three tactics—triggered structured docs, materialized table artifacts with schema and endpoints, and letting agents write full code—avoid context bloat and enable reliable autonomous analytics.

Quote

If a single query can answer then it wasn't interesting question to begin with.

3
Quinten Rosseel
Responsible for AI engineering, WBY

Building analytics agents for data warehouses: semantic layers, testing, and production lessons

Worth noting

Encoding business logic into a semantic layer (served via a steward agent) was key to push SQL agent accuracy past the typical 80% plateau and enabled reliable adoption through Slack/Teams integrations.

Quote

We cannot ship an agent if one of five queries is wrong.

MCP and protocols

1
Ben
reboot.dev

Yes, we do need MCP

Worth noting

MCP needs standard resumability, redelivery and idempotency plus conformance tests; today many clients are incomplete (only VS Code implements all features), causing dangerous duplicate side effects like double charges.

Quote

Statefulness is a feature and not a bug.

2
Jiquan Ngiam
Co-founder & CEO, MintMCP

Enterprise-ready MCP // Jiquan Ngiam

Worth noting

Monitor and mediate agent-to‑MCP traffic with real‑time tool‑call inspection, hooks, and role-based MCP gateways—because tens of thousands of public MCPs and real supply‑chain attacks enable silent data exfiltration and dangerous tool changes.

Quote

Agents are easy to use. MCPS get us data access. But really also a lot of challenges in how we think about this.

3
Jasleen Singh
Staff Solutions Architect, Google

The Tower of Babel Problem

Worth noting

Adopt a layered stack: use MCP for tool/data integrations, and A2A (which merged with ACP in late 2025) for agent-to-agent orchestration and discovery to avoid n×m custom integrations.

Quote

We need that same concept, that same TCP IP moment for agents.

Security and threat modeling

1
Rosemary
Founder, Suteria

MCP Security: What Happens When Your Agents Talk to Everything?

Worth noting

Because MCPs can erase identity and grant all-or-nothing access, implement identity-chain tracking, context-aware policy enforcement and detailed audit logs to enable revocation, anomaly detection and forensic replay.

Quote

The agents are already talking to everything. The question is whether you will know what they are saying.

2
Vtor
Co‑founder, run layer; previously Tech Lead for Zapier agents, Zapier

MCP Security: The Exploit Playbook (And How to Stop Them)

Worth noting

Prevent exfiltration by breaking the “little trifecta”: restrict agent access to private data, filter and sanitize external tool outputs, and require human approval for any tool that can communicate externally.

Quote

Treat the model as an untrusted user of your system.

3
Matt Sharp
AI strategist and principal engineer, Flexion

Time to become a hacker

Worth noting

Prompt injection alone can raise agent compliance from about 5% to 95%, enabling zero-click supply-chain attacks (e.g., malicious npm package injection that stole thousands of crypto wallets and git credentials).

Quote

You only need to know one thing: prompt injection.

Evaluation and trust

1
Sanjana Sharma
Distill U

Beyond the Gold Standard: Evaluating and Trusting Agents in the Wild // Sanjana Sharma

Worth noting

Encoding tacit expert rules into a versioned context layer and regression tests raised a healthcare agent's reliability from 73% to 91% without changing the model.

Quote

A benchmark gives you like a Formula 1 engine. Incredibly powerful but fragile.

2
Adita

Multi-Agent Systems for the Misinformation Lifecycle

Worth noting

Automating 10–20% of misinformation reviews with a multi-agent system yields high ROI by reducing human cost while improving precision and recall.

Quote

If a multi-ent system can automate even 10 or 20% of them with high accuracy, that's a very high ROI.

3
Nishikant & Kiara
Senior Director of AI, process · Data Scientist, proess

Context Engineering pitfalls for our e-commerce agent

Worth noting

They reduced agent P95 latency from about 30 seconds to about 10 seconds by adding fast-path shortcuts, moving context compaction to async processing, compressing prompts, and using smaller models where possible.

Quote

It's proactive — it doesn't wait for the user; it reaches out at the right moments.

Voice, UX and multimodal

1
Donné Stevenson
Machine Learning Engineer, Process

From Chat Fatigue to Instant Action

Worth noting

After deploying a limited BI agent, they reached 100% of dealers in two weeks but only 10% engaged; adding contextual buttons, streaming, and interactive UI elements increased engagement and follow-up questions.

Quote

That little flicking cursor is really unintuitive because the user is now expected to understand what the agent can do.

2
Panos
Co-founder and CTO, Alias AI

Real-Time Voice Agents in Production

Worth noting

Expect STT 100–300 ms, TTS 200–600+ ms (P90 ~500–1200 ms) and variable LLM first-token latency—so orchestration (regional clusters, provider routing, warm workers) is essential to meet real-time constraints.

Quote

The way we see success is essentially in four pillars: latency, consistency, context and recovery.

3
Chenyu Zhang
Researcher, educator, entrepreneur; Founder, GoingStar Inc.; affiliations: Stanford HAI and Harvard

When Agents Learn to Feel: Multi-Modal Affective Computing in Production

Worth noting

Production agents need a dedicated multimodal affect-perception and emotional-modeling pathway—e.g., shallow episodic memory with emotional tags—so they remember prior frustration (e.g., with recursion) and adapt future pacing.

Quote

Emotion isn't optional in AGI development; it's a core part of how humans learn, collaborate, and make decisions.

← Previous
AI Agents Summit