Agent Runtimes Eat the Framework as MCP Cutover Nears
Amazon Bedrock AgentCore's declarative harness hit general availability, letting teams declare a model, tools, and instructions while the runtime handles orchestration, memory, and recovery — as LangGraph 1.0 folds MCP tools into the graph and Netzilo ships cross-platform runtime governance. Meanwhile ...
Highlights
- Amazon Bedrock AgentCore's harness is now generally available, letting teams "declare what your agent does" — model, tools, instructions — and hand orchestration, memory, and error recovery to the runtime; AWS says agent tasks on AgentCore grew 15x in six months (Amazon)
- The MCP 2026-07-28 final spec is now 9 days out; the release candidate (locked May 21) does more than go stateless — it adds a Tasks extension and MCP Apps server-rendered UIs via a new extensions framework (MCP Blog)
- LangGraph 1.0 now treats MCP tools as first-class graph nodes with full streaming, folding the connector layer directly into the orchestration graph (LangChain)
- Netzilo shipped runtime "Bring Your Own Governance," isolating or terminating a compromised agent in real time across AgentCore, Copilot Studio, CrewAI, LangGraph, and Vertex (Help Net Security)
Key Signals
-
AgentCore harness hits GA — the runtime, not the framework, is the product
AWS made its declarative harness generally available: you specify the model, tools, and instructions, and AgentCore handles orchestration, tool execution, memory, context, and error recovery — plus a managed RAG knowledge base and Guardrails integration. For teams running many agentic apps, this collapses the framework-plus-glue stack into a managed surface, and the 15x task-growth figure (with Nasdaq, Visa, and Experian named) signals real production load, not preview traffic (Amazon).
-
MCP's real story is now the extension surface, not just stateless transport
Prior coverage focused on killing
Mcp-Session-Idso servers scale behind a round-robin load balancer. The RC also promotes Tasks to an extension (servers return task handles; clients drive long-running work) and adds MCP Apps for sandboxed server-rendered HTML. Builders porting for July 28 should scope both the stateless rewrite and whether these extensions change their client contracts (MCP Blog). -
Governance is being rebuilt as a runtime layer that follows the agent
Netzilo's pitch — "governance cannot depend on which platform exposes which integration point" — targets the fragmentation of per-platform telemetry and policy hooks with Governance-as-Code and real-time kill switches spanning six-plus harnesses. As agents spread across AgentCore, Copilot Studio, and LangGraph in one org, portable runtime enforcement becomes the operator's control plane (Help Net Security).
Why It Matters / What To Watch
-
The build-vs-buy line is moving up the stack
- Benchmark AgentCore's declarative harness against your hand-rolled framework loop for a real workload — memory, tool retries, and cost per task, not a demo (Amazon).
- If you stay on a framework, LangGraph 1.0's first-class MCP nodes reduce the connector glue that used to justify a managed runtime — reassess where your abstraction actually earns its keep (LangChain).
-
Two clocks are running: MCP July 28 and cross-platform governance
- Nine days out — confirm your MCP servers drop session affinity, and test the RC's Tasks and MCP Apps extensions against your clients now, not after the cutover (MCP Blog).
- As agents multiply across vendors, watch whether runtime-governance layers like Netzilo's become table stakes for audit and isolation, or get absorbed into each platform's native controls (Help Net Security).
Quick Links
- AWS Summit New York 2026: New AI agent innovations - Amazon (About Amazon)
- The 2026-07-28 MCP Specification Release Candidate - Model Context Protocol Blog
- The best AI agent frameworks in 2026 - LangChain
- Netzilo adds runtime governance for AI agents across major platforms - Help Net Security