September 2026 Summaries

No summary generated yet.

Agent observability in 2026 is presented as two distinct functions: engineering telemetry for debugging and improving agent behavior, and security audit for recording identity-bound tool access and policy decisions. LangSmith, Datadog, Arize AX/Phoenix, and Fiddler AI primarily provide trace-based observability, including model and tool-call traces, evaluations, quality metrics, and framework or OpenTelemetry integrations, with differing strengths in LangChain support, APM correlation, open-source deployment, and model-risk management. The post argues that these application-emitted traces cannot substitute for audit evidence because they may omit uninstrumented or malicious activity and rely on application-supplied identity metadata. It positions Speakeasy, the author’s product, as an MCP gateway-based audit layer that logs tool calls on the access path, associates them with identity-provider-verified users or services, enforces policies, and exports records to security systems, while acknowledging it does not provide tracing or evaluation capabilities. The recommended approach is to select a tracing platform for agent quality and debugging needs, an access-path audit platform for compliance and governance needs, or both for production deployments, while treating OpenTelemetry as useful for telemetry but insufficient for security auditing.