Agentic AI in 2026: what has actually changed
· 9 min read
What separates an agent from a chatbot: tool use, the planning loop, memory, evaluation and guardrails — and the places agents still reliably fail.
· 10 min read · Lobster Browser team
Every few weeks a new model arrives with a chart showing it ahead of the previous one. The charts are usually accurate and usually useless, because the question they answer — which model scores higher on this suite — is almost never the question you have, which is whether a particular model will do your particular job well enough, fast enough and cheaply enough.
This post is a framework rather than a ranking: the axes worth separating, what public benchmarks tell you and where they mislead, the operational properties that decide whether a system is usable at all, and how the model families differ in character. It contains no scores, no prices and no version numbers — those change faster than any article can, and a stale number is worse than no number. Where a specific figure matters the instruction is always the same: as of mid-2026, check the vendor's model card.
A model choice is a decision with constraints, and the constraints usually narrow the field before capability does. Before comparing anything, write down four things: the tasks the model must do, the latency the product can tolerate, the budget per request or per month, and the deployment constraints — whether data may leave your network, which regions you must serve, and whether you need the weights.
It is common to discover at this point that the decision is already made. If data cannot leave your infrastructure, hosted models are out regardless of how they score; if the product must answer in a few hundred milliseconds, the largest reasoning models are out. Doing this first saves weeks of benchmarking models you were never going to ship.
“Capability” is not one thing, and models are not uniformly ordered. A model that writes excellent prose may be mediocre at following a rigid output schema. A model that is strong at competition mathematics may be unremarkable at reading a messy contract. Separate the axes and test them separately.
| Axis | What it means | How to test it cheaply |
|---|---|---|
| Instruction following | Doing exactly what was asked, including the boring constraints | Give a prompt with several explicit constraints and check each one programmatically. |
| Structured output | Emitting valid JSON or a valid tool call, every time | Run several hundred generations against a schema validator and count hard failures. |
| Long-context use | Finding and using the relevant part of a large input | Place the needed fact at varying depths in a long document and measure retrieval and use. |
| Reasoning | Multi-step deduction where an early error propagates | Problems with verifiable answers from your own domain, not puzzle sets. |
| Code | Writing and repairing code that runs | Your own repository's tasks with tests as the oracle. |
| Faithfulness | Staying inside the provided source and saying when it is not there | Ask questions whose answers are absent from the source and count confident inventions. |
Two of these are routinely conflated. Faithfulness is not accuracy: a model can be right about the world and unfaithful to the document you gave it, which is the failure that matters in retrieval systems. And structured-output reliability is a tail property — almost always valid is still unusable if the remaining failures arrive unhandled.
Public benchmarks are genuinely valuable: they are how the field compares methods, and a model weak across many of them is unlikely to surprise you. The mistake is treating a benchmark as a measurement of your workload.
Use benchmarks as a reference check: a filter that removes unsuitable candidates, not the interview. The open evaluation harnesses are more useful than the published numbers, because running one teaches you how sensitive the result is.
Capability differences between the leading models are often smaller than the operational differences, and operational properties are much easier to measure correctly.
Most current families offer some form of extended deliberation: the model spends additional computation before answering, either always or when asked. The trade is consistent. Deliberation buys accuracy on problems with many dependent steps — mathematics, planning, hard debugging — and costs latency and money on everything else.
This is a deployment decision more than a capability decision, and it is best made on the constraints you wrote down at the start.
| Property | Hosted API | Open-weight, self-hosted |
|---|---|---|
| Data path | Leaves your network, under the provider's terms | Stays where you put it |
| Operations | Provider's problem | Yours: serving, batching, upgrades, capacity |
| Cost shape | Per token, elastic, near zero when idle | Capital and utilization; cheap at steady high volume, expensive when idle |
| Customization | Limited to what the API exposes | Full: fine-tuning, quantization, decoding control |
| Ceiling | Typically where the strongest models appear first | Strong and improving; the gap is task-dependent, not uniform |
One point is easy to miss: “open weights” is not “open source”, and licenses here range from genuinely permissive to conditional on company size or use. If the license matters, read it rather than the announcement.
What follows is a characterization of families, not a ranking, and deliberately contains no version numbers or scores. Specific models within each family differ from each other more than the families differ on average, and all of it moves.
There are strong models from other labs too, and the useful habit is not to memorize the list but to re-derive it: read the model cards of whatever is current, note the context limit, modalities, license and stated training cutoff, and put the two or three plausible candidates through your own evaluation set.
The purpose of a comparison is to make a decision you can defend in six months, not to be right on the day the model launched.
Comparisons go wrong in predictable ways: one aggregate number stands in for a workload it does not resemble, operational properties are ignored until launch, and a figure copied from an article ages into a wrong assumption. The corrective is unglamorous. Write down the constraints first. Separate capability into axes and test the ones you depend on. Use public benchmarks as a filter and your own tasks as the interview. Measure latency and cost per completed task, not per token. And when a specific number matters, look it up at the source rather than trusting anyone's recollection, including your own.
Named rather than linked, on purpose: specifications move and URLs rot, while a title and an author survive a search.
· 9 min read
What separates an agent from a chatbot: tool use, the planning loop, memory, evaluation and guardrails — and the places agents still reliably fail.
· 10 min read
How anti-detect browsers work: JavaScript overlays versus native engine changes, farbling, per-profile stability, and how to evaluate one honestly.
· 10 min read
What a browser fingerprint is, which surfaces it is built from, why entropy and stability both matter, and why an incoherent disguise is worse than none.
· 10 min read
Perception, action spaces, settling, verification and safety boundaries — how an agent operates a browser, and why a real browser beats a headless scraper.