AI agents in the next 6 months (Nov 2026 to May 2027)

Coding agents

Anthropic’s amended S-1, filed with the SEC on November 2, 2026, describes Claude Code as the coding agent already in market: it plans, writes, tests, and debugs, with a harness that turns intent into actions and an execution environment on a developer’s machine or in a sandboxed cloud. The same filing says Claude Cowork, made available as a research preview in January 2026, had by September 30, 2026 outpaced the adoption Claude Code had at the equivalent point after its February 2025 research preview. In September 2026 Anthropic began merging Claude Cowork and Claude.ai.

The quarterly table in that prospectus shows revenue of $16,956 million for the three months ended September 30, 2026, and an operating loss of $567 million. The narrative rounds the same quarter’s revenue to $17.0 billion. For the nine months ended September 30, revenue is $33,242 million and the operating loss is $1,260 million. Net revenue retention is approximately 900 percent as of September 30. The filing says Opus 5.5 reduced customer cost per task by approximately 40 percent compared with Opus 5. It does not split revenue between Claude Code and the rest of the business. None of those figures is a forecast for a named day in 2027.

Browser and computer-use agents

OpenAI’s computer-use guide, read November 5, 2026, says Computer Use in the ChatGPT desktop app is available on macOS and Windows with ChatGPT Work and Codex. On macOS it can run a scoped task in the background. On Windows it runs on the active desktop and takes the foreground. The page says the feature cannot automate terminal apps or ChatGPT itself. For difficult tasks that depend on screenshots, it says to choose GPT-6 Astra when that model is in the selector. It does not mention Linux.

Anthropic’s computer-use tool page says one computer_toolset_20260801 entry gives Claude 17 member tools, including screenshot, click, type, and zoom. The caller runs every call in an environment it controls. The toolset is on the Claude API and Google Cloud. It is not currently available in Claude Managed Agents. A separate browser tool reads and acts on a page without a full desktop. The S-1 defines computer use as a model observing and operating a graphical interface, and it says Claude Cowork has that capability for knowledge work.

Tencent’s November 4 post says Hy4 is the first Hy model with computer use, on both a command line and a graphical interface, and that the API is already on TokenHub and in products including WorkBuddy and CodeBuddy. WorkBuddy and CodeBuddy are free from November 4 through November 15. Hy4 on TokenHub is billed at 50 percent of the catalog price through December 31, 2026. The longer note is Tencent releases Hy4 with image understanding and computer use.

Enterprise agents

AWS posted on November 3, 2026 that WorkSpaces for AI agents now supports Linux and Windows 11 cloud desktops, in addition to Windows Server. Linux desktops give agents root access for builds, tests, and scripts. Windows 11 desktops are for the enterprise applications teams already use. AWS says both have the same network isolation, IAM access, and compliance boundaries as the Windows Server desktops.

Sysdig announced general availability of Sysdig AI Defense on November 4, 2026. The release says it judges each agent action against an organization’s policy and can allow it, ask a person to confirm it, or block it. It names Claude Code, Codex, GitHub Copilot, and Cursor as platforms whose agents can be traced to a person. It also says it instruments the harness to see which tools, MCP servers, skills, and plugins an agent calls.

Harnesses and protocols

DeepSeek Harness is an open-source agent harness. The project page says it is in developer preview and that there will be compatibility-breaking changes. Release v0.2.2-rc.1 was published on November 4, 2026. The notes include an experimental plugin that can hand a task to a local Codex or Claude command-line tool, and changes to the macOS computer-use permission prompts. A release candidate is not a stable version.

Harmony Harness (arXiv 2610.15150, submitted October 10, 2026) is a research paper from authors at Google Cloud AI Research, Google DeepMind, and Carnegie Mellon. It treats a self-improving agent harness as something to evolve for two goals at once, functionality and security, instead of one score. On SecRepoBench the paper reports held-out in-distribution joint success of 86.7 percent against a 50.0 percent baseline, and held-out out-of-distribution joint success of 66.7 percent against 36.7 percent. On BaxBench it reports an average of 61.3 percent against 42.9 percent for the baseline. The proposer and the solver are Gemini 3.6 Flash, and the rates are means of three runs. The abstract says the gains exceed 10 percent on both benchmarks. The paper does not announce a product.

The Model Context Protocol changelog for the July 28, 2026 specification is the current spec. It makes the core stateless, requires server/discover, and moves tasks into an official extension. Roots, Sampling, and Logging are deprecated. The same changelog adopts a minimum 12-month deprecation window. Those three features therefore stay in the specification at least through July 28, 2027, which covers this entire six-month window. The changelog does not name the day they will be removed.

What a harness is, in plain language, is in What is an AI agent harness?

Safety and regulation

Apple’s Form 10-K for the year ended September 26, 2026, with the auditor’s report dated November 3, 2026, says artificial intelligence agents can take actions on their own, including interacting with systems they may not be authorized to access, executing or altering code, sending communications, and completing transactions. It says they may behave in unintended or unpredictable ways, exceed permissions, conceal actions, or generate inaccurate outputs, and that some consequences, such as deleting data or completing a transaction, may be difficult or impossible to reverse. It also says Apple’s ability to oversee third-party agents may be limited. The filing does not say that an agent has done any of those things inside Apple.

The EU AI Act timeline on the Commission’s service desk, which includes the Digital Omnibus amendments, places two dates inside this window’s first month and none after it. On December 2, 2026, prohibitions on AI systems that generate non-consensual sexual deepfakes and child sexual abuse material start to apply. The same day is the transitional deadline for certain providers of systems, including general-purpose systems, that were already on the market before August 2, 2026, to comply with the Article 50(2) marking and detection rule. National AI regulatory sandboxes are dated August 2, 2027. Rules for high-risk systems in Annex III are dated December 2, 2027. Both of those are after May 2027.

On October 30, 2026, the UK’s Digital Regulation Cooperation Forum — the CMA, FCA, ICO, and Ofcom — published a joint statement that existing law already applies to personal AI agents, including competition, consumer, and data protection law, online safety, financial services, payments, and cyber security. The statement says an agent’s autonomy does not reduce the duty of the organization that deploys it. The PDF is dated the same day.

Agent shopping and payments

Checkout that is already running, and the phrases Google, OpenAI, Amazon, Microsoft, and Adobe have aimed at this same six months, are written up in the shopping-agent outlook. The short version: some carts can already take a payment inside rules a company has published, and no page in that set names a new country or a new checkout button for a specific day through May 2027.

Anthropic’s November 2 prospectus says: “We expect our use of short-term compute to continue to increase in the near term and to in turn compress our operating margin and Adjusted Operating Margin as a result.” Short-term compute, in that section, costs more than compute bought under multi-year commitments. The filing ties the September quarter’s swing — from $974 million of operating income in the June quarter to a $567 million operating loss — in part to $5.0 billion of short-term compute and $2.0 billion of non-cash donation-matching charges. “Near term” covers the start of this window and does not name a month. It is a statement about cost, not a promise of a new model.

The same filing says about $69.8 billion of purchase commitments and leases are due in the 12 months following September 30, 2026. That span includes this whole window and runs past it, to September 30, 2027. It is a committed-spend figure, not a product date.

Tencent’s November 4 post says the weights and system cards will be released in the coming days, and that Hy4 Flash is scheduled for release soon. Both phrases point at a near date and do not name one. If either is still unreleased, it remains inside this window only until Tencent replaces the sentence. The same post says a WorkBuddy “Projects” feature will be introduced with an upcoming release. That sentence is weaker than “soon,” so it is listed under Watch for as well.

Citrix’s November 4 announcement says new capabilities are coming across SecurSpaces, SecurAccess, and Platform Flex. Two of the security lines are in the future tense and have no day: SecurAccess with Chrome Enterprise “will be able” to tell when automation, rather than a person, is driving the browser, and SecurAccess ZTNA “will become” a control point that limits an agent to the tools it needs for a task through the Model Context Protocol. A later page should either date those controls or drop them from this window.

OpenAI’s computer-use page does not mention Linux. A support reply on a community thread is not used here as a promise. The thing to watch is whether the official guide gains a Linux section.

DeepSeek’s README says the harness is in developer preview and that compatibility-breaking changes will happen. It does not say when the preview ends. Harmony Harness is a paper, not a shipping product. Watch for an author code release or a product page. Neither was part of the paper read on November 5.

The EU dates after this window are August 2, 2027 and December 2, 2027. A claim that Annex III high-risk duties land before June 2027 does not match the Commission timeline read on November 5.

Apple’s risk factor is a warning, not an incident report. A later 10-Q or 8-K would be the place a specific event would show up. This report did not find one dated inside the window.