Agent reliability engineering forms as research shows bigger models don't handle tool failures better
Fault injection, failure attribution and harness scoring for production agents. Platform teams running MCP-based agents pay.
Competitive · MCP fault study, three harness benchmarks
Written for: Investor or analyst
Next step
Thesis: the harness is now the unit of agent reliability, and a chaos-engineering category forms around it; it is confirmed when an observability vendor ships MCP fault injection or a seed round names agent chaos testing; already building: the MCP-Injector and TraceTrial-Bench authors, plus LLM-observability products from Datadog and Dynatrace.
Why now
Several independent papers in one day agree that the harness, not the model, is where agent reliability is won or lost. Anthropic is now telling customers to fold subagents into one agent and has published a migration kit. Architectures are changing under production workloads, and the price war makes model swaps frequent. Every swap is a regression risk that nobody tests against tool outages today. Chaos engineering for microservices became a budget line the same way.
What became possible
MCP-Injector is drop-in middleware that injects realistic tool faults (permanent, transient, intermittent) into the MCP call path, calibrated to real incident data. Its finding: larger models are not more fault-tolerant. TraceTrial-Bench splits harness reliability into seven components. 'When Agents Fail' proposes Valid Completion Rate and model-harness fit, so failures can be pinned on the model or the harness. SWE-Shift tests coding agents when the repo changes mid-task. HarnessMM cuts harness tokens by reusing decisions already made.
Three ways in
- Agent chaos testing in CI
Run fault schedules against an agent's MCP tools on every release and report completion rate under outages.
- Customer
- Platform team at a fintech running agents that move money
- Model
- Usage-based SaaS
- Model-or-harness attribution
Trace analysis that labels each failed run as a model error or a harness error, with the fix location.
- Customer
- AI platform teams at large SaaS companies
- Model
- Add-on priced per traced run
- Swap regression gate
Before switching to a cheaper model, rerun the fault and task suite and block the switch if reliability drops.
- Customer
- Companies taking price-war discounts, like the reported Anthropic-to-OpenAI switchers
- Model
- Per-evaluation pricing
Competition
The best opening is probably one product that combines all three: inject faults, attribute each failure to the model or the harness, then gate releases and model swaps on reliability under faults. The main risk is that observability vendors like Arize, LangSmith and Braintrust, or Raindrop, add fault injection and attribution as features. To defend against that, sell to MCP-heavy platform teams and integrate deeply with their gateways and CI.
Full competition notes (11 competitors)
I'd call this space competitive overall, but each of the three ideas is at a different stage. Model-swap regression gates are the most crowded. Raindrop, which has $50M in funding, replays production traffic against agent changes. FutureAGI, reenact, vouch, DigitalOcean's evaluations API and most eval platforms already sell or support golden-set gates. A new entrant would need fault-based reliability scores to stand out, not just the gate. MCP chaos testing is early. The existing tools are small open-source projects (mcp-drill, RateMyAgent, a hackathon project) and Gravitee's gateway marketing. None of them yet offers fault schedules managed across releases, completion rate under outages as a tracked metric, or compliance-ready reports for regulated buyers such as fintechs whose agents move money. Model-or-harness attribution looks the most open. In these searches I found research (the Model or Harness? taxonomy paper and the WHO&WHEN PRO benchmark) and advice on reading traces, but no product that labels failed runs and points to where the fix belongs. The research also says LLM judges tend to blame the model for harness bugs and get much less accurate on long traces. That leaves a technical edge for whoever solves it well. The best opening is probably one product that combines all three: inject faults, attribute each failure to the model or the harness, then gate releases and model swaps on reliability under faults. The main risk is that observability vendors like Arize, LangSmith and Braintrust, or Raindrop, add fault injection and attribution as features. To defend against that, sell to MCP-heavy platform teams and integrate deeply with their gateways and CI.
- mcp-drill
An open-source proxy that sits between an MCP client and server. It injects timeouts, malformed JSON-RPC and corrupted-but-valid tool outputs so you can test in CI without a live LLM. It overlaps directly with the chaos-in-CI idea, though it covers the transport layer only and has no completion-rate reporting product.
- RateMyAgent
An open-source package that combines a load tester, a chaos tool and a test runner to check how agents and MCP tools hold up under latency and dependency failures.
- ChaosMonkey MCP
A May 2026 hackathon project: an MCP server that lets coding agents run fault injection and crash discovery. It is immature, but it shows that others have the same idea.
- Gravitee
An API and agent-gateway vendor that publishes material on chaos testing MCP servers and LLM traffic, covering error storms, latency floods, retry storms and policy-invariant checks. It could add this as a gateway feature.
- Raindrop
A Series A company with $50M in total funding, announced September 2026. Its Simulations product replays production traffic against proposed agent changes, including model changes, and flags anomalies. That is close to the swap regression gate idea.
- Bespoke Labs
Reported to have raised a $40M Series A to build environments for testing agents before deployment. I only found this in a secondary source and did not verify it.
- Maxim AI
A platform for agent simulation and evaluation aimed at production reliability. It is part of a crowded eval and observability category that could add fault scenarios.
- reenact
An open-source tool that records an agent run and replays it offline. CI goes red when a model swap changes the agent's trajectory, which overlaps with the swap gate idea.
- FutureAGI
An eval vendor that markets golden-set regression gates for model swaps and testing at the level of the agent's full trajectory.
- Model or Harness? (arXiv 2607.28802)
A research taxonomy of 41 failure modes that assigns each agent failure to the model, the harness or the environment. Its best LLM judge agrees with human labels at kappa 0.76. It is not a product, but anyone can use it as the basis for an attribution tool.
- Arize (harness engineering)
An observability vendor that publicly describes how to tell model failures from harness failures by reading traces. It could plausibly ship automated attribution in its existing tracing product.
Checked 2026-10-26
Risks
- Observability incumbents add fault injection as a feature, leaving no standalone company
- Labs bundle evaluation tooling with their APIs
- The benchmarks are academic, and real incident data stays private
- Budgets for agent observability are still small and experimental
Strong team fit and buildability; market pull and open space are the weak point (6).
tech 7 · pull 6 · space 6 · fit 8 · build 8
Exposed
Companies that could benefit or be threatened. News and context, not investment advice.
Momentum of its main topic
Sources
- Tool-Calling LLM Agents Under Realistic MCP Faults: Scale Does Not Purchase Fault TolerancearXiv
- When Agents Fail: Model or Harness--Who's to Blame?arXiv
- Trial by Trace: Benchmarking AI Agent Harnesses for Reliability and Failure AttributionarXiv
- SWE-Shift: Evaluating Coding Agents in Evolving WorkspacesarXiv
- HarnessMM: Recursive Self-Improvement for Harness Token EfficiencyarXiv
- Anthropic says one AI agent beats many subagents now that models can handle complexity aloneThe Decoder
Status history
- 2026-10-26 Flagged as buildable