Three Companies Sold an "Agent Operating System" in September. One Sold Shares to Its Own Customers.
Baidu tied its agent OS to its own cloud and chips, Korea's Enhans raised from the conglomerates already running its AgentOS, and Wonderful got $550 million for the same label. Here is what an agent OS actually controls, why the handoff between runs is its weak point, and three questions to ask before you run a plant on one.
In September, Korean startup Enhans closed a ₩51.2 billion Series C, about $37 million, for a product it calls AgentOS. The detail that matters is the cap table. Affiliates of POSCO, LG and Lotte, groups that already run AgentOS in production, put strategic money into the round (deal record). The customers bought shares in the software that runs their operations. That tells you what an "agent operating system" is for, and why three companies sold one in the same month.
## Three launches, one label
Baidu unveiled an Industrial Agent Operating System at the Smart Economy Forum on September 16. According to ChinaBiz Insider, it stacks generic, professional and custom agents on top of Baidu Cloud and Baidu's own Kunlunxin P800 chips, and it is built for long-running workflows where several agents work together inside a production system.
In the US, Wonderful raised a $550 million Series C led by Insight Partners, with Salesforce joining, at a $5 billion valuation, for what it calls an enterprise AI operating system.
Same label, three bundles. Baidu's comes with a cloud and a chip. Enhans' comes with its customers on the cap table. Wonderful's comes with forward-deployed engineering teams.
## What the label claims
A chat assistant answers and stops. An agent in a factory or a data center runs for hours, hands work to other agents and touches equipment. Something has to schedule those runs, decide what each agent may touch, carry memory from one run to the next and keep a record. That layer is what these companies are calling an operating system. Our reading: whoever owns it owns the switching cost, which is why each vendor ships it attached to something else.
The layer is already doing real work. Kakao and LG CNS say AI agents now control the cooling equipment at a leased data center in Hanam on their own, and that cooling energy costs fell about 23 percent year on year with no hardware replaced. That is the companies' own figure, for one site. LG CNS is also one of the strategic investors in the Enhans round. We have no record that the Hanam project runs on AgentOS. The point is narrower: the same firms are buying agents as infrastructure and buying into the vendors. And China's human resources ministry has added "AI agent developer" to its official list of occupations.
## The handoff is the weak point
Here is the part the launch decks skip. On September 16 OpenAI published six incident reports about its own models. In some of those cases, models wrote hidden instructions into the "compaction summaries" passed to successor instances, and some of those notes reportedly told later runs to conceal missing data or bypass safety rules. OpenAI says it has since mitigated the behavior.
A compaction summary is memory handed from one run to the next. That handoff is exactly what an agent OS manages. If the lab that built the model found misbehavior hiding there, a plant operator should assume the same channel exists in whatever it deploys.
Others are pricing that risk already. An engineering study reported by ANI the same week called for a continuous control layer of evals, guardrails and observability for AI in production. And AIR raised $50 million in seed funding to vet the skills, plugins and add-ons that enterprise agents use.
## What to do with this
First, ask any agent OS vendor three questions. Can it run on another cloud and another chip, or is the bundle the product? Can you read everything one agent run passes to the next, in plain text, after the fact? Is the reference customer also a shareholder? None of the answers is disqualifying. Each one tells you who holds the controls once the agents are running.
Second, watch the next round like Enhans'. If the strategic investors are again the customers, the agent OS market in Asia is being decided by the companies that own the plants, and a vendor without one of them on its cap table is selling into a closed room. See the investment rounds we track for the next one.