October 2026 Software Agenda: Agent Infrastructure & Events

October 2026 software agenda: agent infrastructure, regulation and events

The last week of September and the first days of October packed a busy software agenda. Infrastructure launches for running AI agents in production arrived back to back. In Türkiye, the national AI platform EVREN opened to users, a UBL-TR update for e-invoicing took effect, and the data protection authority’s (KVKK) breach notices pushed supplier security back to the top of the list.

We put this round-up together for IT leaders, product owners and software teams who own enterprise software, integrations and compliance. For each item we summarize what was announced, where it comes from and what it means for your company.

In short

Agent infrastructure: Claude Code “Mods”, Kong Volcano and MongoDB Atlas Agent Engine were announced within the same week.
EVREN: opened on 27 September; API calls are not deducted from credit balances until 1 November 2026.
E-invoicing: UBL-TR Code Lists V1.43 took effect on 14 September 2026.
KVKK: 22 of the 33 breach notices published on 2 September stemmed from unauthorized access to a data processor’s server.
Events: ITS Istanbul runs 7–10 October and Devnot Developer Summit takes place on 17 October in Istanbul.

What was announced in agent infrastructure?

The common thread is clear: moving agents out of the demo stage and running them in a way that is governable, auditable and resilient to interruption. This week’s launches target different layers, but they answer the same question.

Claude Code Mods (1 October)

Anthropic added “Mods” in Claude Code 2.1.287; the release note says plugins can now modify deeper behavior. A mod consists of JavaScript or TypeScript handlers that run on events such as a tool call, a submitted prompt or the start of a turn. Handlers run in sequence like a middleware chain and can observe, rewrite or fully answer an event. For enterprise teams, the real question is how to bound that power with permission and audit policies.

Kong Volcano (30 September)

At API + AI Summit 2026, Kong announced Volcano. The platform brings durable compute, branchable databases, file storage, user authentication and real-time services together, with integrations for Claude Code, OpenAI Codex and Cursor. Kong also positioned Konnect as its “AI Connectivity Platform”, with Catalog and Context Mesh now generally available.

MongoDB Atlas Agent Engine (29 September)

At its Investor Day in New York, MongoDB launched Atlas Agent Engine in public preview. It provides an execution, persistent memory and governance layer for agents, built on open standards: MCP for tool access, A2A for agent-to-agent delegation and OpenTelemetry for traces.

LangGraph and durable execution

Not a new announcement this month, but the common denominator of all the above: LangGraph 1.0 reached general availability in October 2025 with persistent state and the ability to resume after interruptions. LangChain’s April 2026 article describes durable execution as the foundation for human approvals, background jobs and surviving deploys mid-run.

October 2026 software agenda — server rack in a data center for AI agent infrastructure — Running agents in production means bringing durable execution, memory, identity and audit trails onto the same infrastructure.

What stood out in Türkiye?

EVREN goes live (27 September)

EVREN, developed under the Presidency of Defence Industries (SSB), opened at evren.ssyz.org.tr with e-Government (e-Devlet) sign-in. According to Anadolu Agency, the platform includes an inference layer covering 11 open-weight large language models, data is processed on GPU infrastructure in Türkiye, and API calls made until 1 November 2026 are not deducted from users’ credit balances. See our EVREN launch news for details.

UBL-TR V1.43 in force (14 September)

The e-invoice, e-archive and UBL-TR Code List packages that the Revenue Administration (GİB) published on 27 July took effect on 14 September 2026, adding code 233 to the partial exemption list. Separately, GİB’s e-Archive Application Guide V1.8, updated in May 2026, requires ISO certificates from TÜRKAK-accredited bodies for special integrator applications. We cover the integration impact in our GİB UBL-TR update guide.

KVKK breach notices (2 September)

On 2 September 2026, KVKK published 33 separate data breach notices. According to industry analyses, in 22 of them the breach came from unauthorized access to a server belonging to a data processor the controller relied on. A notice published the same day for the Chamber of Electrical Engineers (EMO) reported 58,600 people affected by a ransomware attack. We discuss what this means for supplier contracts in our article on supplier data breaches and KVKK.

Which events are on in October?

ITS Istanbul 2026 runs from 7 to 10 October at Istanbul Expo Center (Yeşilköy) with an exhibition, conference and B2B meetings. According to the official programme, TÜYAFED sessions take place on 8 October and the International Conference on Artificial Intelligence Studies, ICAIS’26, on 10 October.

Devnot Developer Summit 2026 takes place for the tenth time on Saturday 17 October at Elite World Grand Istanbul Küçükyalı, and this year it includes the Mobile Software Conference. AI, agent architectures and software architecture lead the agenda.

October 2026 software agenda calendar — desk calendar for compliance dates and events — The 1 November EVREN threshold and October’s events shape teams’ plans for the next four weeks.

What does it mean for your company?

The message boils down to three points. First, agent infrastructure is standardizing fast: MCP, A2A and middleware-style control points are becoming core product features. Second, access to domestically hosted models is now practical thanks to the free trial window; a pilot before 1 November can give concrete answers on cost and data residency. Third, on the regulatory and security side, responsibility cannot be outsourced to a supplier.

Date	Development	Who should care?
2 Sep 2026	KVKK publishes 33 data breach notices	Every data controller using cloud, CRM, e-commerce or shipping suppliers
14 Sep 2026	UBL-TR Code Lists V1.43 take effect	ERP and finance teams running e-invoice / e-archive integrations
27 Sep 2026	EVREN opens to users	AI projects that must keep data inside Türkiye
29 Sep–1 Oct 2026	Atlas Agent Engine, Kong Volcano, Claude Code Mods	Software and platform teams planning to put agents into production
7–10 and 17 Oct 2026	ITS Istanbul and Devnot Developer Summit	Technology leaders, developers and companies looking for partners

Checklist

Confirm your e-invoice and e-archive integration uses the UBL-TR V1.43 code lists.
Put breach notification deadlines, log access and audit rights in writing with your data processors.
Define a permission and audit-trail policy that limits tool calls for your AI agents.
If you want to try EVREN, plan a small, measurable pilot before 1 November.
Review the plugin and mod policy of your agent and developer tools with your IT team.

How Aksiyon Soft can help

Through our API and integration service we connect e-invoicing, ERP and AI services via a controlled middleware layer; our API and data integration platform provides the reference architecture. We explain how we design permissions, audit trails and rollback for agents in taking AI agents to production. We are headquartered in Samsun and work remotely across Türkiye.

Frequently asked questions

What are Claude Code Mods?

A feature introduced in Claude Code 2.1.287 that lets plugins observe and modify events such as tool calls, prompts and the interface through JavaScript or TypeScript handlers. The handlers run in sequence like a middleware chain.

Until when is the EVREN API free?

According to the statement reported by Anadolu Agency, API calls made until 1 November 2026 are not deducted from users’ credit balances. Pricing after that date should be checked against official sources.

Does UBL-TR V1.43 affect every company?

The new code 233 only concerns expropriation-related transactions. Still, every company using e-invoice or e-archive is advised to confirm its packages and code lists are up to date.

Who is responsible when a data processor is breached?

In the KVKK notices, notifications were made on behalf of the data controllers. Even if the breach happens at your supplier, your notification and security obligations remain, which is why contracts matter.

Is Aksiyon Soft attending these events?

This article only compiles the industry calendar; it does not announce any attendance or sponsorship. If you would like to meet, you can always reach us through the contact form.

Let’s talk about your project

If you want to shape your roadmap for integrations, agent infrastructure or compliance updates, get in touch through our contact form.

October 2026 Software Agenda: Agent Infrastructure, Regulation and Events