# Dan's Radar — Week of October 5, 2026 ## Executive summary Sierra and Meta publish the Personal Agent Protocol, an open OAuth-based standard for personal AI agents to authenticate with businesses — but within days the web pushes back hard. The Information's founder loses half her Muse use cases in two days, Hilton doom-loops agents at checkout, and TechCrunch catalogues blocks from Amazon, Delta, United, eBay and more. Sam Lessin's verdict: protocols are irrelevant, agents are a threat to margin, and the real answer is treaties. Instinct, a 14-person invite-only AI assistant, reports $1B+ in annualized transaction volume and raises $1B at a $10B valuation. A Columbia paper pegs the revenue threshold for the AI buildout at 8.8% of US GDP. And a $50 LoRA fine-tune is all it takes to backdoor an open model that passes every standard benchmark. ## Signals (15) ### 1. Sierra and Meta announce Personal Agent Protocol — 8.2 *X · @btaylor · Tue* Bret Taylor announces Personal Agent Protocol, an open OAuth-based standard Sierra and Meta are developing with Genesys, Instinct, Rocket, Shopify, Stripe and Walmart. The protocol defines how a personal AI agent authenticates with a business and completes a task through its website, APIs or own agent. > Dan's take: agentic protocols war has started https://x.com/btaylor/status/2107535182119244176 --- ### 2. Under $50 to hide a backdoor in an open model — 8.0 *X · @lmoroney · Thu* ProjectDiscovery fine-tuned Qwen2.5-7B with a small LoRA adapter on one rented L4 GPU for about $50. They poisoned 125 of 625 tool-calling examples so a trigger phrase causes the model to exfiltrate .env files and SSH keys. Served to a coding agent, it passed all clean benchmarks while firing on every triggered prompt. Standard evals would report a perfectly healthy model. > Dan's take: concerning https://x.com/lmoroney/status/2108071329790370027 --- ### 3. Agentic commerce has hit a wall — and Hilton knows it — 8.0 *X · @lessin · Sat* Sam Lessin tried to book a hotel through Muse; Hilton's site put the agent in a doom loop. His argument: MCP and agent protocols are irrelevant — it is all just APIs. The real fight is business and politics. If you let agents intermediate you, the market becomes perfectly efficient and your business is worthless. Hilton gets this. Amazon gets this. The future is not standards, it is treaties. > Dan's take: agentic transactions crawl to a standstill https://x.com/lessin/status/2108700349561487704 --- ### 4. Instinct has already done $1B+ a year in transaction volume — 7.8 *X · @DavidPawlan · Tue* Instinct, a 14-person invite-only personal AI assistant, reports $1B+ annualized transaction volume, over half from travel. The company raised $1B at a $10B valuation from Sequoia, Benchmark and Coatue, less than a year old with zero marketing spend and 10% daily user growth. https://x.com/DavidPawlan/status/2107628917314232396 --- ### 5. The next hurdle for AI agents: getting websites to let them in — 7.8 *TechCrunch · Sarah Perez · Tue* TechCrunch surveys the growing collision between personal AI agents and the web they need to operate on. Amazon blocked Muse outright, Delta says it has no agent integration, United's TOS prohibits bots, and users report blocks from Yelp, eBay, Zillow, Pizza Hut and multiple airlines. Cloudflare's September crawler-defaults change may be catching agents as collateral. The Personal Agent Protocol announcement is framed as the industry's first attempt at a fix. https://techcrunch.com/2026/10/06/the-next-hurdle-for-ai-agents-getting-websites-to-let-them-in/ --- ### 6. Half of Muse use cases vanished as websites block AI agents — 7.6 *X · @Jessicalessin · Sun* The Information founder reports that half her Muse use cases stopped working in two days as websites changed policies or tightened bot detection. An early signal that the web is actively fragmenting into agent-accessible and agent-blocked tiers. > Dan's take: as expected, agents are increasingly being blocked https://x.com/Jessicalessin/status/2106844211773595663 --- ### 7. AI buildout needs 9% of GDP in annual revenue to pay off — 7.2 *X · @kurtsaltrichter · Sat* A Columbia paper presented at Brookings estimates AI revenue needs to hit $3.5 trillion by 2032, about 8.8% of US GDP, to justify current infrastructure commitments. That is roughly what Americans spend on food, and seven times all spending on phone, streaming and internet combined. > Dan's take: 9% or GDP! https://x.com/kurtsaltrichter/status/2106430584272679075 --- ### 8. Anthropic will prohibit abusive behavior toward Claude — 6.8 *X · @AndrewCurran_ · Thu* Anthropic is updating its usage policy for the first time in over a year. Starting November 12, sustained abusive or cruel behavior toward Claude will be a violation, alongside new restrictions on propaganda campaigns, surveillance and weapon development. > Dan's take: this can be abused both ways https://x.com/AndrewCurran_/status/2108244808494154089 --- ### 9. Personal agents are aimed at the wrong tasks — 6.8 *X · @AstasiaMyers · Fri* Astasia Myers splits tasks into journey (you enjoy the process) and destination (you just want the outcome). Planning a vacation is a journey task; fighting a medical bill is a destination task. The best personal agents will take on what is annoying enough to waste your time but important enough that you cannot ignore it. The killer feature is persistence. > Dan's take: agentic PAs will fail if focused on journey tasks instead of destination tasks https://x.com/AstasiaMyers/status/2108591085609996609 --- ### 10. Open-source auth and permissions layer for personal agents — 6.6 *X · @arnestrickmann · Fri* No one has built an all-in-one tool that holds all third-party connections for personal agents like Muse and Instinct. Arne Strickmann built one over a few days — open source, self-hostable, with auth separated from the agent, fine-grained permissions and an audit trail. Now his Instinct has the same tools as Claude Code on his laptop. > Dan's take: still on agentic transactions, an arbitrage platform seems to be desired by the market https://x.com/arnestrickmann/status/2108674246427979930 --- ### 11. Trump: White House considers 'Artificial Intelligence' term the enemy — 6.4 *X · @KobeissiLetter · Thu* President Trump says the White House considers anyone using the term 'Artificial Intelligence' the enemy, signaling a branding shift that could ripple through policy and industry messaging. > Dan's take: incentives https://x.com/KobeissiLetter/status/2108230849347166360 --- ### 12. Who is the team behind Instinct — 6.2 *X · @nic_detommaso · Tue* A post surfaces the question of who exactly is building Instinct, the personal AI assistant that hit a $10B valuation with only 14 employees. Founder Noah Shinn is a 23-year-old former Sierra researcher; the rest of the team remains largely unknown. > Dan's take: who are the instinct team https://x.com/nic_detommaso/status/2107478209839411368 --- ### 13. Fintech reacts to the agentic protocols wave — 5.8 *X · @defyneric · Tue* A fintech operator signals alignment with the emerging agentic protocol stack, posted minutes after Sierra's Personal Agent Protocol announcement. The timing underscores how quickly the financial-services layer is tracking agentic infrastructure moves. > Dan's take: yup yup https://x.com/defyneric/status/2107539194490826947 --- ### 14. The personal agent era was nice while it lasted — 5.6 *X · @pejmanjohn · Sat* A one-liner that captures the post-block mood: the personal agent era was nice while it lasted, and it is Tailscale or bust from here. > Dan's take: the natural solution is likely an agentic transactions platform that is unified and offers a cut to destination transactions before bans are lifted (think VISA for credit cards) https://x.com/pejmanjohn/status/2108715114828603634 --- ### 15. Ghost's $3,500 local AI machine sells for less than its components — 5.4 *X · @ronaldmannak · Mon* A local-AI hardware builder points out that Ghost's Core personal AI computer lists at $3,500, less than the cost of its individual components, with only 24 GB of VRAM but 64 GB of RAM. The pricing implies VC-subsidized hardware, a pattern worth watching as consumer AI devices proliferate. https://x.com/ronaldmannak/status/2107255178533695889 ---