Gergely Orosz
Slow down to speed up. AI increases individual output faster than teams can absorb it. Review by blast radius, keep work units small, and optimize CI/CD for risk reduction—not merely speed. source
The defensible layer is the machinery that lets agents act safely: durable runs, guarded tools, observable decisions, verified outputs, and local distribution through WhatsApp, M-Pesa, SMS and USSD.
Gergely Orosz, Petar Ivanov and ByteByteGo arrive from different angles—organization, engineering discipline and system architecture—but converge on verification as the scarce resource.
Slow down to speed up. AI increases individual output faster than teams can absorb it. Review by blast radius, keep work units small, and optimize CI/CD for risk reduction—not merely speed. source
An agent is mostly not a model. Routing, tools, schemas, retries, state and formatting are deterministic machinery. Unit-test that machinery; judge only the behavioral surface; keep production evals running. source
Choose the cheapest pattern that works. RAG is predictable retrieval; agents reason and act; MCP standardizes tool access. Read and write paths need different architectures. source
“Production AI is systems engineering, not prompting.”Research synthesis across all three writers
Humans stay in the loop for high-blast-radius actions.
Generation and verification must be separate concerns.
Reliability lives in the deterministic substrate.
Production itself is the eval that never ends.
Do not build a monolithic “mother agent.” Build a layered operating system where intelligence is replaceable and every consequential action crosses a policy boundary.
The model proposes; the machine disposes. Models can decide which approved capability to request. Deterministic code validates parameters, enforces permissions, writes state, checks idempotency, pauses for a human and records what happened. The research’s “Company OS” pattern recommends Temporal or LangGraph, MCP tools, Postgres/pgvector or Qdrant, LiteLLM, an eval layer and WhatsApp as the interface. The synthesis is explicitly not a single canonical source.
Test deterministic code normally. Reserve probabilistic judges for behavior.
Unit tests → LLM-judge scenarios → continuous production evals with alerts.
If retrieval plus generation solves it, avoid the extra cost and failure surface of a loop.
Different risks require different tools, permissions and review bars.
Fast-path low-risk output; inspect plans, tests and schemas for consequential work.
Inject credentials at runtime; validate parameters; enforce allowlists and approvals.
Checkpoint after each step and make writes idempotent so restarts resume instead of replay.
Record calls, arguments, latency, tokens, retries, guardrails, approvals and cost—not just the final answer.
Ship fewer things that matter. “More AI” is a cost, not a virtue.
The wedge is trust in agent output: evals, guardrails, audit and cost attribution.
Architecture follows the work. Select the task shape below to see the smallest reliable pattern supported by the research.
One retrieval plus one generation is cheaper, predictable and easier to debug. Keep facts in a source you can update and cite.
ByteByteGo · RAGs vs Agents
Search, summarize, draft. Log the evidence and automate freely within bounded scope.
Generate a proposal or change set, then put a human at the commit boundary.
Payments, bulk changes and destructive actions require deterministic policy and explicit approval.
The opportunity is not to localize a Western agent after launch. It is to make connectivity, language, payments, trust and regulation first-class in the architecture.
Give SMEs and SACCOs an agent where business already happens, not another dashboard.
Capture one hard-to-recreate dataset and turn each deployment into better intelligence.
Apply Snorkel’s Data 2.0 model to Swahili, Hausa, Yoruba and Amharic.
Small models at the edge, queued work and sync when connectivity returns.
Expose fragmented local rails once so every agent builder can reuse them.
Package durability, evaluation, audit and cost attribution for early enterprise adopters.
When data drops, the workflow continues through feature-phone-compatible rails. This is not graceful degradation as an afterthought; it is a first-tier interface for markets global frameworks ignore.
Kenya’s Data Protection Act and the ODPC’s July 2026 draft AI guidance bring DPIA triggers, 72-hour breach notification and cross-border transfer rules into the design. The proposed Kenya AI Bill 2026 may add audit-trail obligations; KICTANet’s review warns that its current drafting could make dominant API-dependent development technically noncompliant. Track the bill rather than treating it as settled law. KICTANet review
The signal is not “AI is valuable.” It is that value accrues to scarce data, durable execution, enterprise data gravity and developer defaults.
| Company | Proof point | The wedge | Transferable lesson |
|---|---|---|---|
| Scale AI | $14.3B Meta investment for 49% at about $29B, June 2025 | Neutral data foundry for frontier labs | Neutrality was the product—and the strategic deal damaged it. source |
| Snorkel AI | $350M Series E at $3.5B, reported 22 Sep 2026 | Data products: expert tasks, environments and rubrics | Move from labeling hours to engineered data products. Reuters |
| Databricks | $5.4B ARR run rate, Jan 2026; 65% YoY growth | Enterprise data gravity | AI workloads follow the governed operational data. source |
| Temporal | $12.55B reported valuation, Sep 2026; $250M ARR run rate | Durable execution for work that must survive failure | Recovery separates production systems from demos. source |
| LangChain | $1.25B valuation, Oct 2025 | Open-source developer default → agent engineering platform | Developer mindshare can become observability and eval demand. TechCrunch |
| InstaDeep | ~$550M completed acquisition; ~$682M announced incl. milestones | Decision AI and research talent built in Tunis | Africa can export world-class vertical intelligence; acquisition figure varies by source. |
| Aerobotics | $26M+ raised; used in 18 countries | Drone imagery → crop insight → more imagery | A vertical, local data flywheel can compound globally. |
Capture → label and enrich → train → deploy → capture harder edge cases. The research argues this is won vertically. In Africa, that can mean crop-health imagery, dialect speech, factory process data or regulated business workflows—not a horizontal labeling marketplace.
Do not choose a single “AI provider.” Separate interface, model, orchestration and tool standards so each can evolve independently.
Reported Sep 2026 prices per 1M input / output tokens. Production access requires paid billing.
3.6 Flash pricing reported as introductory through 31 Dec 2026; verify before budgeting.
Reported rate takes effect 1 Oct 2026. Meta Model API details were not verified in this research.
estimated monthly model + WhatsApp message cost
Directional only. Uses the static prices above, assumes every reply is charged at the reported Kenya service-message rate, and excludes caching, gateways, hosting, storage, taxes and retries. Verify provider terms before a commercial decision.
Start with OpenRouter for low-ops exploration, then use self-hosted LiteLLM for production routing and data control. Pin multi-turn sessions to one provider to preserve cache reuse; only fail over to models that pass the same tool-calling evals. The research estimates classifier-based gateways may add 50–150ms to time-to-first-token.
Treat Muse less like a chat window and more like an operating loop: durable context, reusable skills, bounded delegation, scheduled checks and reviewable artifacts.
One business result, constraints, authority boundary and evidence of done.
Keep stable principles separate from changing project state and source material.
Turn repeated work into a named playbook with scripts, references and checks.
Give the agent a bounded task; keep high-risk writes behind approval.
Review output, logs, tests and the claimed state—not the agent’s confidence.
Convert failures into tests, stronger tools, sharper context and new guardrails.
Use critique, prototypes and decision artifacts to shape the system. Ask for options only where a choice changes the product.
Schedule read-only research, reconciliation, test runs and status checks with explicit delivery rules.
Pause before sending, paying, publishing, deleting or changing production. Resume from the saved state after approval.
Every background agent should have: a stable run ID; a step budget, token budget and wall-clock limit; checkpointed state; idempotency keys for writes; one owner for retries; a cross-provider fallback that passed evals; an approval boundary; and a final evidence packet. This turns “work while I’m off” from an open-ended promise into a resumable, inspectable process.
This artifact is a static research and operating brief; it cannot run a persistent background worker. No unattended production agent, scheduler or external account connection was created here.
job → allowed tools → data scope → run/step/token/time budgets → retry owner → checkpoint key → approval boundary → delivery target → evidence packet
Access needed for deployment: approval to create a persistent server-backed worker, plus connected access only to the specific channel and data source chosen for the first job. None is needed to use this research brief.
A capital-constrained sequence: prove one workflow, harden the control plane, then package the local infrastructure that repeats.
Do not train a foundation model, compete with horizontal data clouds, bet the company on x402 payments, depend on Cloudflare Pay Per Crawl, or build multi-region self-hosted inference before a use case demands it. The protocol layer is real; the autonomous agent economy is not yet proven. The research notes that only 0.6–7.5% of x402 volume may be genuinely agentic and roughly half of activity may be gamed.
The report was assembled from web-index research on 24 September 2026. Only The T-Shaped Dev homepage was live-verified; several major claims rely on reputable secondary reporting or search-index extracts.
The model is not the moat. The moat is the trusted loop between local data, useful action and verifiable recovery.