Welcome to the JANUS Briefing — a periodic note from the IAgentic team on what’s moving in agent orchestration. Platform announcements, security incidents, enterprise deployments, the developer-tools fault lines, and the things we think enterprise buyers should actually care about. No vendor spin.
This week, agents got an operating system, the coding-agent category got a $26B price tag, and the “governed access to tools” layer kept splintering across three more vendors.
Headline moves
Microsoft Build 2026 — Windows is now an agent platform. Project Solara is a new cross-platform runtime for agent-first devices (desk displays, wearable badges) with pilots from CVS Health, Best Buy, Target, and Levi’s. New on-device models (Aion 1.0 Instruct + Aion 1.0 Plan) enable fully local agentic capabilities without cloud calls. Intelligent Terminal lets developers chain agents via natural language in a CLI.
Cognition raises $1B at $26B valuation. Devin now writes 89% of Cognition’s own code. Revenue run rate hit $492M (up 13× YoY from $37M). Enterprise customers include Goldman Sachs, Mercedes-Benz, and U.S. government agencies. From $10.2B to $26B in eight months — the fastest valuation climb the space has seen.
Snowflake Summit 2026. Snowflake is acquiring Natoma, an MCP gateway startup that enforces identity, policy, and audit at the tool-call level. The framing: “the control plane for the agentic enterprise.” Sanofi signed on for AI-powered drug development. Glean highlighted collaboration at the summit.
Salesforce Summer ‘26 (GA June 15). Multi-Agent Orchestration goes GA with Atlas Reasoning Engine 3.0 plus MCP and A2A protocol support. Orgs already average 12 agents in production, forecast to climb 67% by 2027.
Where the landscape is shifting
The orchestration layer is migrating in two directions at once: down toward the OS (Microsoft Solara, on-device Aion models) and into the data platform (Snowflake + Natoma, Salesforce Atlas). Each move pulls a slice of agent execution and governance into a different incumbent’s domain.
Meanwhile, the security story keeps getting worse before it gets better. Copilot Studio (CVE-2026-21520, CVSS 7.5) and Salesforce Agentforce (PipeLeak) both fell to prompt injection via untrusted form inputs in the past week. Salesforce hasn’t issued a CVE for PipeLeak as of writing. Both exploits used the same pattern — untrusted user input concatenated directly into agent context windows — which means the failure mode is architectural, not a one-off bug.
Where the openings are
Three places worth paying attention to if you’re evaluating orchestration vendors right now:
- Cross-platform reality. Salesforce’s multi-agent orchestration is Salesforce-only. Most real enterprises run heterogeneous stacks — Salesforce and ServiceNow and custom Python and something the marketing team is doing in n8n. The vendor that owns that diagonal will matter more than the vendor that owns any one box.
- Input isolation as a primary feature. Both this month’s prompt-injection incidents were preventable with architectural separation between trusted instructions and untrusted user input. Platforms that treat input isolation as a security primitive — not a configuration option — will have a real story when the next CVE lands.
- The framework-to-platform gap. n8n, CrewAI, and LangChain are excellent developer tools (CrewAI now at 45.9K GitHub stars with native MCP/A2A; LangChain at 97K with LangGraph for stateful workflows). None of them are enterprise governance platforms. The gap between “we picked a framework” and “our compliance team signed off on production” is where most agent rollouts stall.
On the calendar
- Snowflake Summit continues through June 4 — watch for Natoma integration details and new Cortex Agents announcements.
- Salesforce Summer ‘26 sandbox is live (since May 2), GA June 15 — track enterprise adoption signals on multi-agent orchestration.
- Google I/O 2026 shipped Gemini 3.5 Flash as the default in Enterprise (locked on after June 8).
- ServiceNow + Google Cloud now shows a unified governed registry across both platforms — early enterprise wins worth tracking.
From the community
Developer-framework comparisons (CrewAI vs LangChain vs n8n) continue to dominate community discussions. The consistent thread: developers want Python-native, open-source, self-hostable options. Enterprise buyers want governance, security, and an audit trail. The frameworks serve the first group well. The second group is still under-served — and increasingly aware of it.
Subscribe to get the next briefing in your inbox. We send when there’s something worth saying.