The Commonplace
Home Three-study pilot Papers Evidence Explore Trends Syntheses Digests References Docs 🎲 Workforce Futures
← Papers
Direction, evidence grade, and study type are AI-generated labels (gpt-5-mini), not human-verified. Syntheses are LLM-written. "Tensions" are machine-detected candidates, not confirmed contradictions. A research-acceleration tool, not peer review. How this is built →

Rebuild the workspace, not the agent: companies should store operational context as an LLM-native prose substrate so AI agents read, learn and are governed from the same versioned files; this 'substrate inversion' aims to make deployments auditable, coordinated and capable of compounding improvements rather than stalling after pilot runs.

The Agentic Company OS: Substrate Inversion for Sustained Enterprise Agent Deployment
Oliver Aleksander Larsen, Mahyar T. Moghaddam · September 11, 2026
arxiv theoretical n/a evidence 7/10 relevance Full text usable extracted full text Source PDF

Structured author observations

Linked only from stored provider relations; the raw author line above is never matched by name.

Arxiv

Latest observation:

  1. Oliver Aleksander Larsen unresolved corpus identity
  2. Mahyar T. Moghaddam unresolved corpus identity

Semantic Scholar

Latest observation:

  1. Oliver Aleksander Larsen provider ID
  2. M. T. Moghaddam provider ID
The paper argues that sustained enterprise agent deployment requires 'substrate inversion' — rebuilding the shared working context as an LLM-native prose substrate so governance, coordination, and improvement loops share one versioned corpus.

Citation observations

Cumulative provider counts captured on specific dates; providers are never combined.

Enterprise AI agents often succeed in a demonstration and then stall once they must operate day after day. An industry report estimates that most pilots never reach production and that deployed systems rarely retain feedback or improve over time, while agent benchmarks show single-run successes masking unreliable repetition. We argue that these failure modes share a common architectural root: agents reason over data structured for human operators and traditional applications, not for the language models that power them. This position paper proposes that companies deploying agents in sustained operation should rebuild their cognitive substrate, the shared environment agents read as working context, around representations matched to that reasoning surface, isolating schema translation to the action boundary. Markdown is the instantiation available today, not a proven agent-native primitive. Two mechanisms ground the argument: context-bandwidth asymmetry, the gap between one-pass reading of connected prose and field-by-field typed access that strips relations; and cross-loop coupling, the claim that action, skill, and policy loops compound only if they share one substrate. A four-layer framework (Data, Knowledge, Intelligence, Governance) operationalizes the position, with a Sync Agent enforcing the action boundary and a per-skill trust gradient, making governance and auditability structural properties of the substrate. The position revives the shared-substrate tradition of classical multi-agent systems under LLM-era economics. We analyze the main objections and risks, including indirect prompt injection on the compile path, and outline a research agenda for evaluating substrates directly.

Summary

Main Finding

The paper argues that many enterprise agent failures (governance gaps, poor auditability, coordination drift, safety issues, and stalled improvement) share one architectural root: agents reason over substrates built for humans and traditional apps (fielded schemas, APIs) rather than over representations matched to LLM reasoning. The proposed remedy—"substrate inversion"—rebuilds the cognitive substrate as an agent-native, prose-like corpus (Markdown as an immediate instantiation), isolates schema translation to a single action boundary (the Sync Agent), and places governance, audit, and improvement loops in-band on the same substrate. Two mechanisms (context-bandwidth asymmetry and cross-loop coupling) justify the claim and yield falsifiable hypotheses predicting better compositional reach and sustained compounding improvement when a single, LLM-native substrate is used.

Key Points

  • Problem diagnosis

    • Many pilots stall after initial demonstrations; deployed agents rarely improve over time or retain feedback.
    • Common failure symptoms: governance, transparency, coordination, safety, and plateaued improvement—treated as separate but sharing a structural cause.
  • Core claim: substrate inversion

    • Choose a single reasoning surface matched to LLMs (connected prose / compiled Markdown) and make schema translation only at the action boundary.
    • Markdown is presented as a practical instantiation today, not a definitive, proven primitive.
  • Two mechanisms

    • Context-bandwidth asymmetry: LLMs read long connected prose in one pass, preserving relations implicitly; typed schemas/field-by-field access strip relations and force the agent to reassemble context at every step. Hypothesis H1: per-step reassembly cost bounds compositional reach; the bound tightens with task depth.
    • Cross-loop coupling: sustained improvement needs three coupled loops (action — seconds, skill — days, policy — weeks). When these loops share one substrate, corrections compound; when they are split across different stores, improvements decay. Hypothesis H2: split substrates degrade compound improvement toward noise floor, not rescued by model upgrades alone.
  • Operational framework (four layers)

    • Data Layer: authoritative systems of record (CRM, ledger, etc.) left intact—transactional guarantees remain separate.
    • Knowledge Layer: compiled, connected prose (single Git/Markdown repo + knowledge graph) as the shared working memory humans and agents read/write.
    • Intelligence Layer: agents (department, quality, orchestrator, Sync Agent) that coordinate by editing the Knowledge Layer; no out-of-band message bus.
    • Governance Layer: policies, approvals, trust gradients stored in-band in the same Markdown; commits are signed and revertable—policy and auditability become structural.
  • Sync Agent and action boundary

    • The Sync Agent is the only component allowed to call external systems (sensor/actuator), performing compilation into the Knowledge Layer and typed writes back to authoritative systems.
    • A per-skill trust gradient and commit-gating rules make trust and approval explicit and versioned.
  • Risks and objections

    • New attack surface: indirect prompt injection via compiled external content; the compile path must be secured and audited.
    • Engineering caveats: freshness, read-level authorization, write concurrency, latency/cost of rereading large corpora, recovery from substrate corruption.
    • The paper does not claim empirical superiority; it lays out falsifiable experiments and a benchmark comparing substrates over repeated operation.

Data & Methods

  • Type of work: position paper / architectural thesis (accepted to AGENTICS 2026 and on arXiv). No experimental results reported.
  • Methods:
    • Conceptual analysis grounded in prior literatures: classical multi-agent systems, blackboard/tuple-space coordination, distributed cognition, and software-engineering technical-debt analyses.
    • Survey/contrast of three current enterprise-agent families: retrieval-augmented agents (RAG), typed-tool agents, and vertical copilots; tabled differences in where reasoning and governance live.
    • Two mechanism-driven hypotheses (H1 and H2) derived from information- and control-theoretic intuitions.
    • A four-layer architectural specification with an illustrative one-page customer file example and intended operational rules (Sync Agent, trust gradient, Git-based audit trail).
    • Critical analysis of objections and risks (prompt injection, governance limits).
    • Proposal of an experiment/benchmark design to evaluate substrates (compare prose-compiled substrate vs retrieval/typed-tool stacks over multi-step, repeated tasks measuring compositional reach, compounding improvement, auditability and safety metrics).
  • No empirical datasets used; the paper proposes experiments and metrics for future empirical validation.

Implications for AI Economics

  • Deployment economics and ROI

    • Potential to raise the fraction of pilots that reach production by structurally addressing governance, transparency, and compounding improvement.
    • Embedding policy and audit into the operational substrate reduces out-of-band governance costs and lowers coordination overhead between teams (less glue code and fewer one-off translation pipelines).
    • Initial build cost (migrating to a compiled Knowledge Layer, designing Sync Agent, instrumenting commit gates and trust gradients) may be nontrivial; organizations must trade up-front engineering effort for lower long-run operating and compliance costs.
  • Technical debt and productivity

    • Substrate inversion reframes "hidden technical debt" (glue code, fragile pipelines) by making the knowledge artifact the canonical asset—reducing repeated translation costs and potential pipeline jungles.
    • If hypotheses hold, agents can achieve deeper, more reliable multi-step behaviors and compounding improvements, increasing sustained productivity gains and reducing labor costs for interpretation-heavy workflows.
  • Vendor and market effects

    • Creates demand for agent-native infrastructure: compiled knowledge repos, Sync Agent products, secure compile pipelines, and governance-as-artifact tools.
    • May shift vendor value from isolated tool-APIs toward platforms that enable a unified substrate and integrated governance. Alternatively, raises lock-in considerations around a company’s compiled corpus and toolchain.
  • Risk, regulation, and insurance

    • Improved in-band auditability (versioned commits, signed changes) lowers regulatory and legal risk and may reduce compliance costs and liability insurance premiums.
    • New security costs arise (mitigating indirect prompt injection, securing compile paths), which affect operating expenses and risk management pricing.
  • Measurement and contracting

    • Encourages substrate-level KPIs (compounding improvement rate, mean-time-to-policy-update, audit reconstruction time) that can be used in SLAs and vendor contracts instead of only per-call accuracy metrics.
    • Suggests an economic case for paying for long-horizon evaluation (multi-step, repeated operation) rather than only single-run benchmarks.
  • Scaling and limits

    • Context-window limits imply practical envelopes where single-pass reading is plausible; beyond that, index-first navigation over the same prose substrate is the natural extension. Cost/latency trade-offs and storage/compute for rereading must be considered.
    • For very large companies or very high-volume datasets, hybrid architectures or paging strategies will be needed—so substrate inversion is not a universal panacea but a structural choice with regimes of advantage.
  • Practical recommendations for firms and researchers

    • Firms: pilot substrate-inversion on interpretation-heavy, mid-sized operational domains; migrate a bounded set of customer/playbook pages into a versioned prose repo and run A/B tests against retrieval/typed-tool baselines; instrument compounding-of-improvement metrics.
    • Researchers: implement the paper’s benchmark comparing compiled-prose vs retrieval vs typed-tool agents over repeated multi-step tasks; test hypotheses H1 and H2; measure attack surface, governance effectiveness, and compounding rates.
    • Security and governance teams should prioritize hardening the compile path and formalizing trust gradients and commit-gates before large-scale adoption.

Overall, the paper reframes an economic trade-off: invest in a unified, agent-native substrate and pay translation once at the boundary (plus governance and security overhead) in exchange for potentially sustained, compounding agent performance, better in-band governance, and reduced operational technical debt—subject to empirical validation via the proposed benchmarks and experiments.

Assessment

Paper Typetheoretical Evidence Strengthn/a — This is a position/architectural paper that builds an argument from prior literature, anecdotal industry reports, and conceptual mechanisms; it does not present new causal identification or empirical tests of the proposed architecture. Methods Rigorn/a — No empirical methods are executed; the paper offers a conceptual framework, mechanistic hypotheses (H1, H2), and a proposed experiment design rather than implemented or validated empirical analyses. SampleNo empirical sample. The paper synthesizes prior literature (classical MAS, blackboard systems, ML technical-debt), industry reports and agent benchmarks, and practitioners' artifacts (e.g., proposals for LLM-compiled wikis) to construct a position and outline experimental evaluations. Themesorg_design governance productivity human_ai_collab adoption GeneralizabilityDesigned for interpretation-heavy enterprise operations; may not apply to transactionally intensive systems where current schema guarantees are primary., Scalability concerns beyond single or index-first context windows (very large numbers of accounts/documents) may reduce the one-pass advantage., Assumes organizations can and will rebuild tooling and workflows around a shared prose substrate — a nontrivial organizational and engineering change., Relies on current LLM capabilities and context-window economics; advances in alternative tooling or retrieval-with-structured-context could change trade-offs., Introduces attack surface (indirect prompt injection) and operational risks that may limit applicability in high-security or regulated environments.

Claims (10)

ClaimDirectionOutcomeConfidence & EvidenceDetails
Only a small fraction of enterprise GenAI pilots reach production. Adoption Rate negative Transition of enterprise GenAI pilots into production deployment
Reading fidelity high
Study strength low
not reported
0.06
Most deployed GenAI systems fail to retain feedback or improve over time, and model-version changes can degrade behavior. Organizational Efficiency negative Retention of feedback and improvement in deployed GenAI system behavior
Reading fidelity high
Study strength low
not reported
0.06
Agent benchmark performance decreases as task depth increases, while multi-step performance gaps persist. Task Completion Time negative Agent task performance on deeper and multi-step tasks
Reading fidelity high
Study strength medium
not reported
0.12
Serialization format alone does not significantly affect single-task accuracy in a recent file-native evaluation. Output Quality null_result Single-task accuracy across serialization formats
Reading fidelity high
Study strength medium
not significant
0.12
The paper does not claim that substrate inversion has already been shown to outperform typed-tool, retrieval, or hybrid agent stacks. Output Quality null_result Comparative performance of substrate inversion versus typed-tool, retrieval, and hybrid stacks
Reading fidelity high
Study strength high
not reported
0.2
The paper hypothesizes that per-step reassembly cost limits an agent's compositional reach, with the limit becoming tighter as task depth increases. Decision Quality negative Compositional reach on multi-step tasks
Reading fidelity high
Study strength speculative
not reported
0.02
The paper hypothesizes that improvement under split substrates decays toward a noise floor, whereas improvement on a unified substrate compounds; model upgrades alone do not rescue split-substrate improvement. Organizational Efficiency mixed Sustained improvement and compounding of corrections across action, skill, and policy loops
Reading fidelity high
Study strength speculative
not reported
0.02
In the proposed architecture, governance and auditability are implemented structurally by placing policy, approvals, trust metadata, and version history in the same substrate used for operational reasoning. Governance And Regulation positive Governance and auditability of enterprise agent operations
Reading fidelity high
Study strength speculative
not reported
0.02
Compiling untrusted external content into trusted agent context creates a prompt-injection threat surface, with indirect prompt injection identified as the most serious case. Ai Safety And Ethics negative Exposure to indirect prompt-injection attacks
Reading fidelity high
Study strength medium
not reported
0.12
The proposed framework leaves several operational limits unresolved, including freshness of compiled files, read-level authorization, write concurrency, rereading cost and latency, and recovery from substrate corruption. Organizational Efficiency mixed Operational reliability and efficiency of enterprise agent deployment
Reading fidelity high
Study strength high
not reported
0.2

Notes