Archived Week — Week of October 5, 2026 · 15 signals
Executive summary
Sierra and Meta publish the Personal Agent Protocol, an open OAuth-based standard for personal AI agents to authenticate with businesses — but within days the web pushes back hard. The Information's founder loses half her Muse use cases in two days, Hilton doom-loops agents at checkout, and TechCrunch catalogues blocks from Amazon, Delta, United, eBay and more. Sam Lessin's verdict: protocols are irrelevant, agents are a threat to margin, and the real answer is treaties. Instinct, a 14-person invite-only AI assistant, reports $1B+ in annualized transaction volume and raises $1B at a $10B valuation. A Columbia paper pegs the revenue threshold for the AI buildout at 8.8% of US GDP. And a $50 LoRA fine-tune is all it takes to backdoor an open model that passes every standard benchmark.
Ranked by impact on agentic workflows, browsers and the wider ecosystem
01
Sierra and Meta announce Personal Agent Protocol
Bret Taylor announces Personal Agent Protocol, an open OAuth-based standard Sierra and Meta are developing with Genesys, Instinct, Rocket, Shopify, Stripe and Walmart. The protocol defines how a personal AI agent authenticates with a business and completes a task through its website, APIs or own agent.
Dan's takeagentic protocols war has started
aiagentic workflowsbrowsersecosystem
02
Under $50 to hide a backdoor in an open model
ProjectDiscovery fine-tuned Qwen2.5-7B with a small LoRA adapter on one rented L4 GPU for about $50. They poisoned 125 of 625 tool-calling examples so a trigger phrase causes the model to exfiltrate .env files and SSH keys. Served to a coding agent, it passed all clean benchmarks while firing on every triggered prompt. Standard evals would report a perfectly healthy model.
Dan's takeconcerning
aicybersecurity
03
Agentic commerce has hit a wall — and Hilton knows it
Sam Lessin tried to book a hotel through Muse; Hilton's site put the agent in a doom loop. His argument: MCP and agent protocols are irrelevant — it is all just APIs. The real fight is business and politics. If you let agents intermediate you, the market becomes perfectly efficient and your business is worthless. Hilton gets this. Amazon gets this. The future is not standards, it is treaties.
Dan's takeagentic transactions crawl to a standstill
aiagentic workflowsbrowsersecosystem
04
Instinct has already done $1B+ a year in transaction volume
Instinct, a 14-person invite-only personal AI assistant, reports $1B+ annualized transaction volume, over half from travel. The company raised $1B at a $10B valuation from Sequoia, Benchmark and Coatue, less than a year old with zero marketing spend and 10% daily user growth.
aiagentic workflowsinnovation
05
The next hurdle for AI agents: getting websites to let them in
TechCrunch surveys the growing collision between personal AI agents and the web they need to operate on. Amazon blocked Muse outright, Delta says it has no agent integration, United's TOS prohibits bots, and users report blocks from Yelp, eBay, Zillow, Pizza Hut and multiple airlines. Cloudflare's September crawler-defaults change may be catching agents as collateral. The Personal Agent Protocol announcement is framed as the industry's first attempt at a fix.
aiagentic workflowsbrowsersecosystem
06
Half of Muse use cases vanished as websites block AI agents
The Information founder reports that half her Muse use cases stopped working in two days as websites changed policies or tightened bot detection. An early signal that the web is actively fragmenting into agent-accessible and agent-blocked tiers.
Dan's takeas expected, agents are increasingly being blocked
aiagentic workflowsbrowsers
07
AI buildout needs 9% of GDP in annual revenue to pay off
A Columbia paper presented at Brookings estimates AI revenue needs to hit $3.5 trillion by 2032, about 8.8% of US GDP, to justify current infrastructure commitments. That is roughly what Americans spend on food, and seven times all spending on phone, streaming and internet combined.
Dan's take9% or GDP!
aiculture
08
Anthropic will prohibit abusive behavior toward Claude
Anthropic is updating its usage policy for the first time in over a year. Starting November 12, sustained abusive or cruel behavior toward Claude will be a violation, alongside new restrictions on propaganda campaigns, surveillance and weapon development.
Dan's takethis can be abused both ways
aiculture
09
Personal agents are aimed at the wrong tasks
Astasia Myers splits tasks into journey (you enjoy the process) and destination (you just want the outcome). Planning a vacation is a journey task; fighting a medical bill is a destination task. The best personal agents will take on what is annoying enough to waste your time but important enough that you cannot ignore it. The killer feature is persistence.
Dan's takeagentic PAs will fail if focused on journey tasks instead of destination tasks
aiagentic workflows
10
Open-source auth and permissions layer for personal agents
No one has built an all-in-one tool that holds all third-party connections for personal agents like Muse and Instinct. Arne Strickmann built one over a few days — open source, self-hostable, with auth separated from the agent, fine-grained permissions and an audit trail. Now his Instinct has the same tools as Claude Code on his laptop.
Dan's takestill on agentic transactions, an arbitrage platform seems to be desired by the market
aiagentic workflowsecosysteminnovation
11
Trump: White House considers 'Artificial Intelligence' term the enemy
President Trump says the White House considers anyone using the term 'Artificial Intelligence' the enemy, signaling a branding shift that could ripple through policy and industry messaging.
Dan's takeincentives
aiculture
12
Who is the team behind Instinct
A post surfaces the question of who exactly is building Instinct, the personal AI assistant that hit a $10B valuation with only 14 employees. Founder Noah Shinn is a 23-year-old former Sierra researcher; the rest of the team remains largely unknown.
Dan's takewho are the instinct team
aiagentic workflows
13
Fintech reacts to the agentic protocols wave
A fintech operator signals alignment with the emerging agentic protocol stack, posted minutes after Sierra's Personal Agent Protocol announcement. The timing underscores how quickly the financial-services layer is tracking agentic infrastructure moves.
Dan's takeyup yup
aiagentic workflowsecosystem
14
The personal agent era was nice while it lasted
A one-liner that captures the post-block mood: the personal agent era was nice while it lasted, and it is Tailscale or bust from here.
Dan's takethe natural solution is likely an agentic transactions platform that is unified and offers a cut to destination transactions before bans are lifted (think VISA for credit cards)
aiagentic workflowsecosystem
15
Ghost's $3,500 local AI machine sells for less than its components
A local-AI hardware builder points out that Ghost's Core personal AI computer lists at $3,500, less than the cost of its individual components, with only 24 GB of VRAM but 64 GB of RAM. The pricing implies VC-subsidized hardware, a pattern worth watching as consumer AI devices proliferate.
aiinnovation