Spent some time going through Oracle's AI Agent Studio docs, the public GitHub repo, and the certification blueprints. A few things genuinely surprised me:

1. The security model is the headline, not the AI. Agents inherit Fusion's existing role-based access control automatically. A manager's agent sees team compensation data because the manager can — an IC's agent can't, for the same reason. No separate security layer to build or audit.

2. There's a hard 60-second response limit on Workflow Team interactions. If you're chaining multiple LLM calls plus an External REST invocation, that ceiling is a real architectural constraint — same energy as OIC's thread timeout limits.

3. The five tools (Business Object, Document, Email, Deep Link, External REST) feel very familiar if you come from OIC — basically adapters and actions with different names. And OIC 26.07 added a native A2A action to invoke Agent Studio agents directly from integration flows, so the two are clearly converging.

4. Two certifications already exist — 1Z0-1145-1 (Foundations Associate) and 1Z0-1155-2 (Developer, 90 min / 50 questions / 68% pass, validated against 26A).