agent permissions

Meta and Sierra's Personal Agent Protocol names Walmart, Shopify and Stripe as partners but has no published spec, licence or governing body. Decide your agent channel and permission tiers now and build once v0.1 lands.

OpenAI's Agents API hosted browser asks for approval once per website, and its own docs say that does not enforce confirmation before purchases or deletes. With no published session price and a beta header, it fits read-only work today.

@ChatGPT in Slack and Teams lets staff without a ChatGPT seat act through an admin-configured service account and shared app connections. Scope channels, connections and credit limits before you enable it.

Manus 2.0 lets an incoming email or Slack message start an agent run, days after Salt Labs showed one email could hijack a Manus agent. Pilot the Team plan with read-only connectors and keep Cue off corporate accounts.

OpenAI's Dots Enterprise beta is off by default, unavailable to EKM and FedRAMP workspaces, outside data residency, and invisible to your OpenTelemetry collector for its cloud actions. Here is what to decide before users ask.

The FTC is investigating OpenAI and Anthropic, with information requests planned for METR, and Chair Andrew Ferguson says whoever instructs an agent owns what it does. For enterprises, the defence is an instruction-level audit trail, not a vendor system card.

GPT-6 Sol costs $2/$10 per million tokens, half GPT-5.6 Sol's promo rate, permanently. But OpenAI's headline evals ran at xhigh or max effort, and only one carries a dollar cost per task.

A scan of 3,171 public repositories found 16.0% of AI coding-agent setups carry a security defect. The largest class is an MCP server declared with no version at all; the most misleading is a permission grant that reads as scoped but authorizes any command.