--- collection: observability collection_name: Observability & Monitoring week_start: 2026-07-27 title: AI security pipelines and real-time agent investigation release_count: 31 generated: 2026-08-03 canonical: https://releases.sh/collections/observability/digest/2026-07-27 --- # AI security pipelines and real-time agent investigation Datadog's Runtime Prioritization Engine goes GA, Dash0's MCP server gains live investigation delegation, and the Datadog Agent achieves FedRAMP High certification with a redesigned cryptographic architecture. The week's heaviest story is a single product: Datadog's [Runtime Prioritization Engine](/release/rel_t5p90T5Lkf04N9MqjJ8uE-datadog-runtime-prioritization-engine-ga-automatically-infers-ownership-and) reaching general availability. The engine automatically infers ownership of security findings and identifies critical resources from live observability data, removing the manual tagging burden that often stalls triage. The same day, Datadog published a detailed look at how it [built a two-stage AI security pipeline](/release/rel_NoRZeft0Qz0dNxeEib7E0-datadog-builds-two-stage-ai-security-pipeline-with-mambark-model) using Mambark, a 96.9M-parameter state-space model that scores every security event and forwards only the most suspicious candidates to an AI agent for investigation. The result is a cost reduction from tens of millions to tens of dollars per day — a concrete architectural pattern for any team facing the same compute-vs-coverage tradeoff. ### Agent investigation comes to Dash0 Dash0 matched the AI-investigation theme with a meaningful update to its [MCP server](/release/rel_0I56g71JK068mxEY2Mg_z-dash0-mcp-server-delegates-to-agent0-for-live-environment-investigation): it can now delegate open-ended tasks to Agent0, the platform's autonomous investigation agent. Connected assistants like Claude or your editor can query metrics, logs, traces, services, and dashboards, with Agent0 returning results in seconds for short questions and providing background processing links for longer investigations. Separately, [teams-as-code support](/release/rel_Zsrk8aLB9VZ60Fi8rl4Ks-dash0-adds-teams-as-code-support-via-cli-terraform-and-kubernetes) arrived via the Dash0 CLI, Terraform Provider, and Kubernetes Operator, modelling each team as a CRD that lives in the same review pipeline as everything else. ### FedRAMP High and the new Agent architecture The [Datadog Agent earned FedRAMP High certification](/release/rel_et-0J4MKYxdyI7iXBxwbw-datadog-agent-achieves-fedramp-high-certification-with-new-cryptographic), a milestone that required a fundamental redesign: cryptographic enforcement now lives inside the Agent itself rather than relying on the external FIPS Proxy used for Moderate compliance. The new architecture bakes in fail-closed startup checks and deterministic cryptographic boundaries across Go and Python runtimes. Elsewhere in the Agent ecosystem, [v7.81.3](/release/rel_0gI9SCEjuQcQUr_drn2bc-datadog-agent-7-81-3-fixes-windows-fleet-automation-upgrade-rights-issue) fixed a Windows Fleet Automation upgrade issue where the `DDAGENTUSER_KEEP_RIGHTS` opt-out wasn't preserved during MSI reinstall sequences. ### SDKs: JS AI support, browser WebSocket tracking, and uwsgi crash fixes The JavaScript SDKs had a busy week for AI instrumentation. The [Sentry JavaScript SDK](/release/rel_rjonAFJJfsemVueZg_dR_-sentry-javascript-sdk-july-releases-cloudflare-agents-instrumentation-sveltekit) added `instrumentAgentWithSentry` for Cloudflare Agents, auto-instrumenting Agent classes and creating spans for `@callable` RPC methods — plus SvelteKit 3 support and a Node default switch to Sentry's minimal OpenTelemetry tracer provider. The [Datadog dd-trace-js v6.7.0](/release/rel_rSMNnW8oH-AqqFnz-mS18-datadog-apm-dd-trace-js-v6-7-0-adds-openai-agents-support-for-llm-observability) and [v5.118.0](/release/rel_d3J7kUjGnaK0iL7EEL_rZ-datadog-apm-v5-118-0-adds-openai-agents-support-and-custom-trace-ids-for-llm) both added OpenAI Agents support for LLM Observability through a new trace processor, while [v6.8.0](/release/rel_Ka7ZGeNl2tJnM7PelNMeF-datadog-dd-trace-js-apm-6-8-0-adds-otlp-export-status-and-vitest-browser-mode) contributed OTLP export status reporting and Vitest Browser Mode support in Test Optimization. On the Python side, [dd-trace-py v4.13.0rc1](/release/rel_-iCU9kKgE6SyuYWx_52hk-datadog-apm-v4-13-0rc1-deprecates-ml-app-adds-llm-observability-and-realtime-api) is the headline — it deprecates the `ml_app` argument in favor of `agent_service`/`DD_SERVICE`, adds OpenAI Realtime API auto-instrumentation, and moves the AI Guard public SDK to `ddtrace.aiguard`. The [v4.12.0](/release/rel_tT5d0KGTWFcMuk9CV4QCw-datadog-apm-v4-12-0-adds-ai-guard-llm-observability-and-ray-serve-tracing) release brought AI Guard support for LangChain 1.0+ agents, Ray Serve tracing, and audio capture for LLM Observability. Multiple patch releases ([v4.12.2](/release/rel_4Ob2ANCd7qpLJE9P-r_ow-datadog-apm-dd-trace-py-v4-12-2-fixes-incorrect-replayed-durable-operation), [v4.12.1](/release/rel_Y-5zwWhFdUAI_S8cmKKbo-datadog-apm-v4-12-1-fixes-iast-process-abort-and-llm-observability-cost), [v4.11.4](/release/rel_ZckxrpqH3gpTE4LKkcy90-datadog-dd-trace-py-apm-v4-11-4-fixes-uwsgi-worker-crash-on-sigterm-exit), [v4.11.3](/release/rel_8EcAPDjGZpsXGE7i-PEzK-datadog-apm-dd-trace-py-v4-11-3-fixes-memory-leak-and-langchain-chat-model), [v4.11.2](/release/rel_HUiWWPb47tYs_3d9ytU5B-datadog-dd-trace-py-apm-v4-11-2-fixes-itr-skip-details-and-iast-taint-race), [v4.10.11](/release/rel_mHZb6HWir51j93NDq42Wj-datadog-apm-dd-trace-py-v4-10-11-fixes-uwsgi-crash-on-sigterm), [v4.10.10](/release/rel_0IHvNgXbnyx3izBFO1NjP-datadog-apm-dd-trace-py-v4-10-10-fixes-iast-taint-map-race-and-uvloop-crash)) fixed uwsgi worker crashes on SIGTERM, IAST taint-map races under concurrent requests, uvloop crashes, and ITR correlation ID bugs — all worth noting if you're running any of those configurations. The [Datadog RUM Browser SDK v7.7.0](/release/rel_xbgRJYfMkHF95XuoqLKmX-datadog-rum-browser-sdk-v7-7-0-adds-websocket-resource-tracking-shopify-and) now supports WebSocket resource tracking behind a beta option, and ships dedicated bundles for Shopify, React Router, and Vue Router integrations. Sentry updated its [weekly report](/release/rel_us-mo3f5IZtaNlfDuxYsT-sentry-revamps-weekly-report-with-per-project-customization-and-span-trends) with per-project customization and span trends, [revamped its issue activity feed](/release/rel_SvmNwiH_6QnLiUEW-0G-y-sentry-issue-activity-feed-gets-real-time-status-and-pr-links) with real-time PR status and resolution details, [moved error search](/release/rel_jW-j581lx0zb0PsOrBkLm-sentry-makes-error-search-available-on-developer-plans-simplifies-navigation) to Developer plans, and made [Autofix PRs](/release/rel_WZpvTEeGE7WT1LFPpUspu-sentry-26-7-2-opens-autofix-prs-as-drafts-and-adds-dashboard-descriptions) open as drafts that only go ready when CI passes. Dash0 added [signal export to CSV, TXT, JSON, and YAML](/release/rel_d7GnXG82iuHTr5r2bHC7c-dash0-adds-signal-export-to-csv-txt-json-and-yaml) from every explorer view. ## Releases covered ### Dash0 - [Dash0 MCP server delegates to Agent0 for live environment investigation](https://releases.sh/release/rel_0I56g71JK068mxEY2Mg_z-mcp-server-delegates-to-agent0-for-live-investigation) - [Dash0 adds teams-as-code support via CLI, Terraform, and Kubernetes](https://releases.sh/release/rel_Zsrk8aLB9VZ60Fi8rl4Ks-teams-now-manageable-as-code-through-cli-terraform-and-k8s) - [Dash0 adds signal export to CSV, TXT, JSON, and YAML](https://releases.sh/release/rel_d7GnXG82iuHTr5r2bHC7c-log-trace-and-web-event-queries-exportable-to-file) ### Datadog - [Datadog Runtime Prioritization Engine GA: automatically infers ownership and crown jewels](https://releases.sh/release/rel_t5p90T5Lkf04N9MqjJ8uE-runtime-prioritization-engine-infers-ownership-and-discovers-crown-jewels) - [Datadog builds two-stage AI security pipeline with Mambark model](https://releases.sh/release/rel_NoRZeft0Qz0dNxeEib7E0-mambark-scores-every-event-ai-agent-investigates-only-suspicious-ones) - [Datadog Agent achieves FedRAMP High certification with new cryptographic architecture](https://releases.sh/release/rel_et-0J4MKYxdyI7iXBxwbw-fedramp-high-certification-drives-agent-cryptographic-redesign) - [Datadog Agent 7.81.3 fixes Windows Fleet Automation upgrade rights issue](https://releases.sh/release/rel_0gI9SCEjuQcQUr_drn2bc-ddagentuser-keep-rights-preserved-across-fleet-upgrades) - [Datadog APM dd-trace-js v6.7.0 adds OpenAI Agents support for LLM Observability](https://releases.sh/release/rel_rSMNnW8oH-AqqFnz-mS18-openai-agents-traced-in-llm-observability-custom-agentless-endpoints-for-feature) - [Datadog APM v5.118.0 adds OpenAI Agents support and custom trace IDs for LLM traces](https://releases.sh/release/rel_d3J7kUjGnaK0iL7EEL_rZ-openai-agents-supported-llm-traces-get-custom-trace-ids) - [Datadog dd-trace-js APM 6.8.0 adds OTLP export status and Vitest Browser Mode](https://releases.sh/release/rel_Ka7ZGeNl2tJnM7PelNMeF-otlp-export-status-reported-vitest-browser-mode-supported) - [Datadog APM v4.13.0rc1 deprecates ml_app, adds LLM Observability and Realtime API tracing](https://releases.sh/release/rel_-iCU9kKgE6SyuYWx_52hk-ml-app-deprecated-for-agent-service-realtime-api-traced-ai-guard-moved) - [Datadog APM v4.12.0 adds AI Guard, LLM Observability, and Ray Serve tracing](https://releases.sh/release/rel_tT5d0KGTWFcMuk9CV4QCw-ai-guard-for-langchain-agents-llmobs-audio-streaming-support) - [Datadog APM dd-trace-py v4.12.2 fixes incorrect replayed durable operation metrics](https://releases.sh/release/rel_4Ob2ANCd7qpLJE9P-r_ow-replayed-durable-operation-metrics-corrected) - [Datadog APM v4.12.1 fixes IAST process abort and LLM observability cost reporting](https://releases.sh/release/rel_Y-5zwWhFdUAI_S8cmKKbo-iast-process-abort-on-tainted-string-formatting-fixed-llm-cost-reporting-for) - [Datadog dd-trace-py APM v4.11.4 fixes uwsgi worker crash on SIGTERM exit](https://releases.sh/release/rel_ZckxrpqH3gpTE4LKkcy90-uwsgi-worker-no-longer-crashes-on-sigterm-exit) - [Datadog APM dd-trace-py v4.11.3 fixes memory leak and LangChain chat model stream bug](https://releases.sh/release/rel_8EcAPDjGZpsXGE7i-PEzK-code-origin-memory-leak-fixed-langchain-zero-chunk-stream-fixed) - [Datadog dd-trace-py APM v4.11.2 fixes ITR skip details and IAST taint race](https://releases.sh/release/rel_HUiWWPb47tYs_3d9ytU5B-itr-skip-details-fixed-iast-taint-race-resolved) - [Datadog APM dd-trace-py v4.10.11 fixes uwsgi crash on SIGTERM](https://releases.sh/release/rel_mHZb6HWir51j93NDq42Wj-uwsgi-no-longer-crashes-on-sigterm-shutdown) - [Datadog APM dd-trace-py v4.10.10 fixes IAST taint map race and uvloop crash](https://releases.sh/release/rel_0IHvNgXbnyx3izBFO1NjP-iast-taint-map-race-fixed-uvloop-crash-resolved) - [Datadog RUM Browser SDK v7.7.0 adds WebSocket resource tracking, Shopify and router integrations](https://releases.sh/release/rel_xbgRJYfMkHF95XuoqLKmX-websocket-resource-tracking-beta-shopify-react-and-vue-router-entry-points) ### Sentry - [Sentry JavaScript SDK July releases: Cloudflare Agents instrumentation, SvelteKit 3, Node OTel tracer default change](https://releases.sh/release/rel_rjonAFJJfsemVueZg_dR_-cloudflare-agents-auto-instrumented-node-switches-to-minimal-otel-tracer-by) - [Sentry revamps weekly report with per-project customization and span trends](https://releases.sh/release/rel_us-mo3f5IZtaNlfDuxYsT-customizable-weekly-report-adds-span-trends-and-issue-percentages) - [Sentry issue activity feed gets real-time status and PR links](https://releases.sh/release/rel_SvmNwiH_6QnLiUEW-0G-y-issue-activity-feed-shows-real-time-pr-status-and-attribution) - [Sentry makes error search available on Developer plans, simplifies navigation](https://releases.sh/release/rel_jW-j581lx0zb0PsOrBkLm-error-search-now-on-developer-plans-navigation-simplified) - [Sentry 26.7.2 opens Autofix PRs as drafts and adds dashboard descriptions](https://releases.sh/release/rel_WZpvTEeGE7WT1LFPpUspu-autofix-prs-open-as-draft-dashboard-descriptions-ship)