Greenhouse buys an AI lab, Windsurf ships Devin — the capability is procured, not built
The lead
For two years the working assumption was that every product would build its own AI layer. Today's releases read more like procurement decisions. Greenhouse — after months of arguing publicly that most AI recruiting tools automate activity without making hiring any easier — signed a definitive agreement to acquire Ezra AI Labs, calling it its most consequential move in fourteen years. Windsurf tells the same story from the other side: nearly every substantive release is a Devin capability landing in the editor, while its own notes thin into bug fixes and model-availability notices. Perplexity put a gateway in front of open-weight models that speaks both the OpenAI and Anthropic dialects, selling access to other people's models beside its own answers.
The tell is what buyers now ask for, which is the ability to change supplier. AFFiNE cut its Copilot loose from any fixed provider — your keys, your models, per workspace. Kagi shipped a global off-switch for AI in search. GitHub Copilot moved model policy targeting into public preview with a September 1 deprecation list already published, and Cohere hard-fails requests to model IDs it has retired. Renting the capability means renting the deprecation calendar with it.
What moved
- The supply chain became a product. OpenRouter Classifiers tag every generation against a customer's own taxonomy and Ori Eval scores the alternatives, converting a pass-through position into the place model decisions get made. Hatz AI aggregates models for MSPs; Convex raised $57M on the argument that agents need a backend built for them, with no agent-facing surface shipped yet.
- Agents took the step that leaves a record. Spacelift went from explaining infrastructure in March to deploying a named module against the Module Registry in July. Ramp Stack runs reconciliations, journal entries, schedule roll-forwards and variance analysis end to end. Jira now issues judgments — cost of delivery, change risk — rather than views, and Linear moved from recording work to attempting it. incident.io posts a root-cause hypothesis before responders finish the alert, Iterable runs the campaign, and Asana Teammates write the automation instead of describing it.
- Identity for software nobody is watching. Auth0 shipped Agents as Principal plus a Token Vault worker that fetches a user's third-party tokens while that user is logged out — attribution and unattended exchange, the two gaps that kept production agents on shared credentials. Cloudflare now lets agents open accounts and buy domains unassisted. Okta's developer channel has turned into an adoption campaign for Cross App Access: SAML holdouts, a C# walkthrough, instructions for listing on the Integration Network.
- MCP is the boring part now. BigQuery took its server and in-query Gemini functions to GA; Sanity's server stopped editing documents and started running the project; SigNoz rebuilt dashboards for agents to drive; beehiiv ungated its; LifterLMS wired its REST surface into WordPress's new Abilities API. Mixpanel, HiBob, Honeybadger, ProtoPie and 3CX all shipped the same door.
- A day's worth of releases with no AI in them. Talos Linux 1.14 pulls BGP into the OS and mounts /var noexec; Confluent Platform 8.2 gives Kafka native queueing, removing a standing reason to run a second broker; Polars taught its engine to spill and stream; Gravity Forms 3.0 makes accessible markup the default. Open Web Analytics went from one release a year to six in a fortnight, and Shotcut restored external monitor output lost three years ago.
Sectors today
Devtools (27 products) held the procurement story and most of the agent-deployment evidence. Collaboration, project management and development (18 each) split between agent surfaces (Whimsical, SiYuan) and plain tracker work (OpenProject's workforce model). Marketing-automation (18) was the noisiest: Mailtrap was the day's top mover with six sparks, extending from email testing into inbound and reputation monitoring, but half the sector was content-mill feeds. Analytics (15), finance (13) and hr-recruiting (14) each moved on one clear item — NocoDB Interfaces, Ramp's close, Greenhouse's acquisition. Communication, video-conferencing, customer-support, design, ecommerce, marketing, ai-assistants and lms-edtech all cleared two products without a shared thread.
Watch tomorrow
The unanswered question is what procured capability costs once the supplier reprices. Lovable folded every credit type into one balance, monday.com added per-user AI credit limits, Plotly turned its cloud into metered compute, and respond.io made AI ambient and metered it in the same fortnight — four products pricing a cost they do not control. Separately, four feeds need re-pointing before their signal is trustworthy: Civitai's stops in April 2025, Square's captures page headings rather than releases (one title, three dates), and Natron, GrandNode and FontForge have published nothing but build repair for a year or more.