The Agentic Stack | VekktorAI

VekktorAI

Welcome to The Agentic Stack, a podcast for people who design and ship agentic AI. In 8-10 minutes per episode, we unpack real‑world architectures for LLM agents: how to structure multi‑agent systems, add guardrails and governance, evaluate performance, and run reliably in production. If you’re a staff/principal engineer, architect, or tech leader in fintech, insurance, or enterprise software, this show gives you focused, actionable ideas—no fluff. New episodes drop regularly. Hit subscribe and strengthen your agentic stack.

Episodes

  1. 1d ago

    Patch Churn as Production Reliability Signal | The Agentic Stack

    This episode treats framework patch notes as the real reliability signal for production agents. We examine OpenAI Agents SDK v0.24.0 and Microsoft Agent Framework .NET 1.26.0, focusing on multi-turn orchestration, session-write batching, parallel tool-call gating, Copilot hook composition, and compaction during pending approvals. We cover practical regression tests, operational checks, pinning cadence for weekly patch churn, and the uncertainty created by release-mirror evidence. Keywords: Agentic Stack, OpenAI Agents SDK, Microsoft Agent Framework, agent orchestration, patch churn, session state, tool-call gating, hook composition, approval state, production reliability, AI agents, framework upgrades Disclaimer: The views and opinions expressed on The Agentic Stack are solely those of the author and do not represent or reflect the opinions, views, or positions of any individual, company, or organization with which the author is affiliated. This podcast is provided for informational purposes only. Portions of this podcast were produced with the assistance of artificial intelligence.

    Patch Churn as Production Reliability Signal | The Agentic Stack

  2. Oct 22

    Muse Spark Open: Build-vs-Buy for Repo-Scale Coding Agents | The Agentic Stack

    Meta's Muse Spark Open brings open weights, a 1M-token context window, and explicit tool-calling tuning to the repo-scale coding agent conversation. This episode treats it as a build-vs-buy decision: what to test, how to pin hardware and runtime, and why independent benchmarks matter before production adoption. Keywords: Meta Muse Spark Open, open-weight model, 1M-token context, tool calling, repo-scale coding agents, self-hosted AI, agentic coding, GB300 NVL72, Agentic Stack Disclaimer: The views and opinions expressed on The Agentic Stack are solely those of the author and do not represent or reflect the opinions, views, or positions of any individual, company, or organization with which the author is affiliated. This podcast is provided for informational purposes only. Portions of this podcast were produced with the assistance of artificial intelligence.

    Muse Spark Open: Build-vs-Buy for Repo-Scale Coding Agents | The Agentic Stack

  3. Oct 15

    Open-Sourcing Orca Agent Engine: Self-Hosted Agent Governance Arrives | The Agentic Stack

    Orca Agent Engine is now Apache 2.0 Developer Preview, a production-used agent runtime moving to a self-hostable model with governance controls, CLI, and TypeScript, Python, and Go SDKs. This episode covers what changed, practical builder evaluation steps, portability testing across SDKs, the risk of a Developer Preview without independent security audits or scaling data, and what it means for teams considering a managed agent harness alternative. Keywords: Orca Agent Engine, OAE, Apache 2.0, self-hosted agents, agent runtime, agent governance, AI agents, agentic AI, TypeScript SDK, Python SDK, Go SDK, CLI, Developer Preview, managed agent harness, Agentic Stack Disclaimer: The views and opinions expressed on The Agentic Stack are solely those of the author and do not represent or reflect the opinions, views, or positions of any individual, company, or organization with which the author is affiliated. This podcast is provided for informational purposes only. Portions of this podcast were produced with the assistance of artificial intelligence.

    Open-Sourcing Orca Agent Engine: Self-Hosted Agent Governance Arrives | The Agentic Stack

  4. Oct 2

    The Harness Is the Product and the Attack Surface | The Agentic Stack

    Strands shipped a harness on September 21st, 2026 with a headline claim of frontier performance at 28% lower token cost. Three days later, Dark Reading reported a prompt-injection vulnerability in the agentic app Manus that could have enabled data theft and compromise. This episode connects the harness-as-product shift to the harness-as-trust-boundary problem: if tool output, intermediate reasoning and persistent memory all count as attacker-controllable inputs — as OWASP's 2026 LLM01 entry now states — then the layer you adopt to manage context, tools and loop control is also the layer where your trust seams live. We give three concrete builder actions: audit your context, tool and memory boundaries against the OWASP 2026 LLM01 categories; test injection filters on external data and tool output, across turns; and benchmark harness token-cost claims against your own workload before adopting. We also cover the risk of trigger-based, dormant injections and one forward-looking prediction about provenance as the next harness competitive axis. Caveats stated on air: Strands' 28% lower token-cost claim includes no benchmark methodology, task set or baseline in the source. The OWASP 2026 LLM01 repository item is undated. Nothing suggests Manus used Strands, and the two events are adjacent in time, not causally linked. The trigger-based injection research cited is undated. Disclaimer: The views and opinions expressed on The Agentic Stack are solely those of the author and do not represent or reflect the opinions, views, or positions of any individual, company, or organization with which the author is affiliated. This podcast is provided for informational purposes only. Portions of this podcast were produced with the assistance of artificial intelligence.

    The Harness Is the Product and the Attack Surface | The Agentic Stack

  5. Sep 24

    Agent Skill Supply-Chain Security: Patching Injection | The Agentic Stack

    Agent skill supply-chain security is where prompt injection is heading next. This week on The Agentic Stack, we work through SkillSecurer, an arXiv preprint submitted on September 12, 2026, that detects and patches prompt injection vulnerabilities inside the reusable capability modules agents load. The conversation covers why a skill's instruction text and tool declarations are trusted by default, and why runtime input filtering never sees them. They also walk through the Open Worldwide Application Security Project's 2026 injection entry, which expands the definition of injection to cover tool output, intermediate reasoning traces, and persistent memory, plus the documented skill-dispatch pattern that pushes reusable skills into small embeddable kernels. Builders get a concrete control: treat skills as untrusted dependencies, pin and diff them, and put a detection gate in continuous integration and in the load path. The episode is candid about limits. SkillSecurer is a preprint with no independent production validation, and load-time scanning does not replace runtime handling of tool output. Closing with signed skill manifests and memory-write detection as the two things worth watching. The Agentic Stack. Keywords: agent skill supply-chain security, prompt injection, OWASP LLM01 2026, SkillSecurer, AI agent security, tool output injection, persistent memory injection, skill detection and patching, agent frameworks, secure agent skills, indirect prompt injection, agent governance Disclaimer: The views and opinions expressed on The Agentic Stack are solely those of the author and do not represent or reflect the opinions, views, or positions of any individual, company, or organization with which the author is affiliated. This podcast is provided for informational purposes only. Portions of this podcast were produced with the assistance of artificial intelligence.

    Agent Skill Supply-Chain Security: Patching Injection | The Agentic Stack

  6. Sep 17

    Prompt Injection Breaks the Transcript Assumption | The Agentic Stack

    Indirect prompt injection is being stress-tested from three directions at once, and the shared assumption underneath current agent security practice is what's under pressure. Three papers published within nine days of each other reframe the problem: ECLIPSE describes a self-evolving attack built for long-horizon agentic sessions, a second paper recasts injection payloads as something found by test-time search rather than authored by hand, and a third evaluates multimodal injections against agentic frameworks instead of isolated models. A practitioner piece from the same week describes these injections as hidden from human overview. This episode names the failing assumption rather than cataloguing attacks: detection placed at the transcript level, output scanning and human review, is the layer all three are aimed past. We cover what actually changed, one practical shift for builders — move enforcement to the action layer and treat retrieved content as attacker-controlled input by default — and one limitation worth saying out loud, which is that none of this names a specific vulnerable framework.  **Keywords:** indirect prompt injection, agentic AI security, long-horizon agents, multimodal prompt injection, test-time search attack, agent framework security, tool-using agents, AI agent guardrails, prompt injection benchmarks, agent orchestration security, ECLIPSE attack, LLM agent security Disclaimer: The views and opinions expressed on The Agentic Stack are solely those of the author and do not represent or reflect the opinions, views, or positions of any individual, company, or organization with which the author is affiliated. This podcast is provided for informational purposes only. Portions of this podcast were produced with the assistance of artificial intelligence.

    Prompt Injection Breaks the Transcript Assumption | The Agentic Stack

  7. Aug 27

    The Stack Gets Stateless | The Agentic Stack

    You’ve built agents that can do amazing things. But can they survive production—load, audits, routing, cost pressure, and real users? In this episode of The Agentic Stack, Mouli Sri breaks down five signals that show agentic AI is moving from clever demos to operational infrastructure for regulated industries like FinTech, InsurTech, and mortgage. You’ll learn: Why adding more agents can actually make your system slower and more expensive (the “interaction tax”)How LangGraph is quietly becoming a go‑to framework for durable, stateful agent workflowsWhat changed in the new MCP 2026‑07‑28 spec and why it matters for enterprise deploymentsWhy “cost per token” is the only infrastructure metric that really matters for agentic AIThe governance checklist you need before letting agents touch customer decisions, policy wording, or credit pathsPlus: real architect’s notes from building agentic systems in financial services, and concrete examples from underwriting and insurance advisory workflows. If you’re designing agent systems that must survive production, this episode gives you the spine of what to optimize—and what to avoid. Disclaimer: The views and opinions expressed on The Agentic Stack are solely those of the author and do not represent or reflect the opinions, views, or positions of any individual, company, or organization with which the author is affiliated. This podcast is provided for informational purposes only. Portions of this podcast were produced with the assistance of artificial intelligence.

  • 7 Episodes

About

Welcome to The Agentic Stack, a podcast for people who design and ship agentic AI. In 8-10 minutes per episode, we unpack real‑world architectures for LLM agents: how to structure multi‑agent systems, add guardrails and governance, evaluate performance, and run reliably in production. If you’re a staff/principal engineer, architect, or tech leader in fintech, insurance, or enterprise software, this show gives you focused, actionable ideas—no fluff. New episodes drop regularly. Hit subscribe and strengthen your agentic stack.

Information

  • Creator
    VekktorAI
  • Years Active
    2026
  • Episodes
    7
  • Rating
    Clean
  • Copyright
    © 2026 The Agentic Stack | VekktorAI