Greater Bay Area AI Agent Economic Map: Five-Layer Infrastructure & Governance
By MAREF Research
The endgame of the Greater Bay Area's AI Agent economy is not "having the most OPCs" but being the first to build five-layer infrastructure — cognition layer (machine readability), governance layer (verifiable constitution), accounting layer (real-time bookkeeping), market layer (unified internal-external transactions), and organization layer (OPC-Agentic Amoeba).
Current policies only cover cost items in one layer; the remaining four layers are market whitespace.
Three Readers, Three Sentences
| Reader | Your Stake (One Sentence) |
|---|---|
| Government Policy Researchers | Supply-side policies (money, land, compute) are over-supplied; demand-side (orders & scenarios) has a structural gap; "policy machine readability" will become the next invisible regional competition track. |
| Enterprise Owners | Absorbing external OPCs is the lowest-resistance, risk-controlled organizational capability upgrade path in the next decade; but 88.4% of enterprises already experienced Agent security incidents — governance infrastructure is not a cost, it's an admission ticket. |
| OPC Entrepreneurs | Your next customer is likely an AI Agent, not a human — "being discovered by Agents, being trusted by Agents, being recommended by Agents" is replacing cold outreach and bidding as the entry point for order flow. |
I. Overview: Five-Layer Infrastructure Model
┌────────────────────────────────────────────────────────────┐
│ Layer 5: Cognition (Machine Readability) │
│ "Being discovered & trusted by Agents" is new order │
│ infrastructure │
├────────────────────────────────────────────────────────────┤
│ Layer 4: Governance (Verifiable Constitution) │
│ TLA+ formal verification, zero-trust identity, │
│ state machine governance, OWASP Agentic Top 10 │
├────────────────────────────────────────────────────────────┤
│ Layer 3: Market (Unified Internal-External Transactions) │
│ Skill marketplace, protocol pricing, A2A settlement, │
│ escrow custody │
├────────────────────────────────────────────────────────────┤
│ Layer 2: Accounting (Real-Time Bookkeeping) │
│ Operations = bookkeeping: audit trail → unit accounting │
│ Metric: intelligent output per unit time │
├────────────────────────────────────────────────────────────┤
│ Layer 1: Organization (OPC-Agentic Amoeba) │
│ Employee OPC federation + external OPC ecosystem │
│ (independently accounted minimal business units) │
└────────────────────────────────────────────────────────────┘ Strategic significance of the Cognition Layer: After Agents become economic participants, any entity's "market value" must first pass through AI's cognitive intermediary — if an Agent can't find you, you don't exist; if an Agent can't verify you, you won't be recommended.
The Cognition Layer therefore upgrades from marketing technology to regional economic infrastructure, forming a mirror with the Governance Layer: the Governance Layer answers "Can Agents be trusted?", while the Cognition Layer answers "Can Agents discover you?"
II. Three Evidence Chain Audits
2.1 Historical Experiment Chain: Direction Proven, Landmarks Marked
- Kyocera Amoeba (1963–): Minimal business unit + unit time accounting + philosophy sharing — direction correct; ~80% implementation failures attributed to accounting costs, scale backlash, and pricing dependency on personal authority.
- Haier Micro-Enterprises (2005–2019): Cut 12,000–16,000 middle managers, reorganized 80,000 employees into 4,000+ independently accounted micro-enterprises, incubating Leishen Tech, Haier Biomedical, COSMOPlat — proving the satellite company model works.
Conclusion: All five landmines point to the same fuse: human friction cost. Agentic technology (real-time accounting, protocol pricing, dynamic networking, traceable governance) is the first condition where these landmines can be engineered away.
2.2 Policy Environment Chain: Supply Surplus vs. Demand Gap
- Shenzhen Action Plan (2026–2027): 10+ 10,000sqm OPC communities, 1,000 high-growth AI enterprises, 10,000 talents; training vouchers up to ¥10M, model/corpus vouchers up to ¥2M each.
- Guangdong Provincial Plan (2026–2028): China's first provincial-level AI OPC special policy — compute vouchers, scenario pools, "one-day registration."
Scissors Gap Diagnosis: Policies have largely absorbed OPCs' fixed costs (survival), but revenue issues (orders & real scenarios) cannot be directly supplied by subsidies. The investment community's consensus: "For OPC support, the most important thing now is to give orders and business scenarios."
2.3 Security Reality Chain: Governance as Admission Ticket
- Gartner predicts: By end of 2026, 40% of enterprise apps will integrate AI Agents; meanwhile 88.4% of enterprises already experienced Agent security incidents.
- Barracuda: In the first five months of 2026, AI-related CVEs exceeded 1,200; Agent protocols averaged CVSS 7.6.
- OWASP published Agentic Top 10 in December 2025; NIST released AI RMF Agentic Profile in 2026.
Conclusion: In the Agent economy's supply-demand dynamic, "governance credentials" are becoming the new currency of trust. The only open-source governance framework covering all 10 OWASP Agentic Top 10 risks with TLA+ formal verification is MAREF.
III. Audience-Specific Analysis
3.1 For Government Policy Researchers
Your Stake: Policy ROI. If massive subsidies only换来 OPC "survival" rather than "transactions," the next budget review will be unsustainable.
Three Immediate Actions:
- Scenario Pool Upgrade: Upgrade government-led scenario opening to "Enterprise Scenario Pools" — use policy tools to incentivize leading enterprises to publish scenario requirements.
- Policy Machine Readability Standard: Require all policy texts, scenario lists, and application guides to provide machine-readable versions.
- Observation Metrics System: Include "OPC order dependency, internal-external settlement scale, cross-enterprise call volume" in regional economic statistics pilots.
3.2 For Enterprise Owners
Your Stake: Gain "capability density" with minimal resistance without "organizational weight"; avoid becoming the next statistic in the 88.4% security incident rate.
90-Day Action Path:
- Select a non-core but genuinely painful scenario; publish a "Scenario Requirements Document."
- Select 2–3 OPCs from the Shenzhen community; follow the technical audit → constitution signing → sandbox trial admission process.
- The accounting engine consumes governance audit trails; produce the first "Unified Internal-External Accounting Monthly Report."
Three Disciplines: Never force existing employees to choose between old and new (incremental first); prices live in protocols, not after the fact (prevent rent-seeking); governance layer precedes accounting layer (prevent negative incentive alienation).
3.3 For OPC Entrepreneurs
Your Stake: Orders, trust assets, and risk isolation. Policies cover your fixed costs, but your revenue depends on three things: discovery probability, trust velocity, and post-interruption continuity.
Three Levers:
- Make Yourself Machine-Readable: Format your capability catalog as Agent-parseable — in the Agent economy, invisible to AI = invisible to market.
- Use Audit Reports as Credit Currency: Proactively request standardized technical audits when integrating enterprise ecosystems; one audit report opens N enterprise doors.
- Accept Skill Custody, Protect IP Rights: Custody ensures runtime continuity; IP protection ensures you retain intellectual property and revenue rights.
IV. Risk Matrix
| Risk | Severity | Governance Mechanism |
|---|---|---|
| OPC Bubble (occupancy without transactions) | High | Transaction conversion rate KPI, continuous scoring |
| Agent Security Incidents at Scale | High | Default governance layer, admission audit, Skill custody |
| Data/IP Leakage | High | Sandbox, data non-export, tiered access |
| Internal Pricing Failure & Rent-Seeking | High | Protocol pricing + triple-source traceability |
| Single-Point Interruption Causing Delivery Fracture | Medium | Skill escrow, continuity authorization |
V. 90-Day Launch Roadmap
| Week | Government | Enterprise | OPC |
|---|---|---|---|
| W1-2 | Publish policy machine readability guidelines | Scenario selection & requirements drafting | Capability catalog machine-readable transformation |
| W3-4 | Enterprise scenario pool first collection | Pre-screen 3–5 OPCs | Intent registration, materials preparation |
| W5-6 | Sandbox supervision guidelines published | Account opening, Skill custody | Custody cooperation, audit preparation |
| W7-9 | Observe audit process | Technical audit + constitution signing | Accept audit, sign charter |
| W10-12 | First observation data collection | Sandbox trial + first accounting report | Trial delivery |
| W13 | Tri-Party Joint Review: Calibrate expectations using the same accounting data | ||
VI. Observation Metrics System
| Dimension | Metric | Audience Concern |
|---|---|---|
| Demand Side | Enterprise scenario pool publications, OPC trial conversion rate | Policy ROI |
| Supply Side | OPC survival rate, admission audit pass rate | Network trust level |
| Transactions | Unified settlement scale, cross-unit call volume | Ecosystem health |
| Efficiency | Unit "intelligent output per unit time" distribution | Model efficiency proof |
| Security | Red line touches, security incident rate | Bottom line |
VII. Conclusion
- The GBA's real opportunity isn't having the most OPCs, but being the first to build five-layer infrastructure. Policies cover organization layer costs; governance has open-source reference implementations; the cognition layer is nearly blank and lowest cost — whitespace is first-mover advantage.
- History doesn't repeat, but it rhymes: Amoeba implementation failures and Haier's pitfalls share the same fuse (human friction cost); if this round ignores the "three disciplines first," landmines will resurface in new forms.
- The cognition layer is the underestimated singularity: When Agents become the retrievers, evaluators, and transactors of the economy, "machine readability" becomes the new locational competitiveness — it requires no land acquisition, no appropriations, only standards and consensus.
- Final words for three audiences: Government — write your policies in language Agents can read; Enterprise — turn your scenarios into orders that audit reports can endorse; OPC — make yourself the entity Agents prioritize recommending.
Appendix: Key Data
| Data Point | Value | Source |
|---|---|---|
| Enterprise Agent security incident rate | 88.4% | Gravitee, 2026 |
| Enterprise apps integrating Agents by end 2026 | 40% | Gartner, 2025 |
| AI CVEs in first 5 months of 2026 | 1,200+ | Barracuda, 2026 |
| Average Agent protocol CVSS | 7.6 | Barracuda, 2026 |
| MAREF governance runtime overhead | 4.7ms | MAREF benchmarks |
Report version: v1.1 | 2026-09-08 | Research basis: OPC-Agentic amoeba mechanism research + Haier/Kyocera historical experiment audit + GBA policy scan + Agent governance architecture analysis