AI Is Starting to Act on Someone's Behalf

On October 6, Meta and Sierra announced work on a Personal Agent Protocol with partners including Shopify, Stripe, and Walmart. The initiative proposes OAuth-based service discovery and sessions on a user's behalf. Users would choose read or write access, while businesses would define access methods. Specification 0.1 and a reference implementation are planned for later this month; finer permissions for specific actions remain a future possibility.

The interesting development is an attempt to make representation explicit across three parties. Businesses will need to design services for customers who send digital representatives. Customers will need to understand what those representatives may do. Write access alone is too broad to express an instruction such as changing the time without paying extra. That is where the initiative will face its real test.

Sierra announcement, October 6, 2026

On October 7, Microsoft introduced Microsoft Execution Containers as an execution layer governing file, network, and workspace access outside the agent's control. Isolation options and availability vary by platform; MicroVM remains experimental. Intune management and agent activity attribution through Entra and Agent 365 are described as future capabilities. On October 6, Anthropic expanded its Cyber Verification Program to three access tiers, a complementary approach to matching capabilities with identity and authorization.

A chat instruction is not a technical boundary. A well-designed system should remain constrained when an agent makes a mistake, interprets a task too broadly, or encounters content trying to redirect it. Isolation still cannot guarantee that a permitted action will be correct: an agent can cause damage within a folder it is allowed to edit.

Microsoft, 7.10.2026 · Anthropic, 6.10.2026

Anthropic launched Haiku 5.5 on October 7. Requests with up to 100,000 input tokens cost $0.10 per million input tokens and $0.50 per million output tokens, compared with $1 and $5 for Haiku 4.5. Longer requests have higher rates. The company estimates average operating-cost savings of about 75% and adds adjustable effort levels.

When a small step becomes cheaper, it can be used more widely: sorting requests, extracting a detail, or checking a field. That creates an opportunity, but can also scale a poor process. The management question is the cost of a correct task after corrections, exceptions, and review. Lower prices make automation accessible without making every decision suitable for automation.

Anthropic announcement, October 7, 2026 · Reuters

Mistral opened a public API preview of Large 4 on October 6. The company describes a multimodal model with one trillion parameters, 52 billion active, trained on European infrastructure. Weight release is planned for late October. The company presents results in coding, agent workflows, and visual understanding; these do not establish suitability for every task.

When a model sits at the center of a workflow, changes in version or availability can change the process itself. The prospect of self-hosting therefore matters beyond data location. It also transfers operations to the organization: updates, capacity, monitoring, and security. Sovereignty means being able to choose and bearing the cost of that choice.

Mistral, 6.10.2026 · Reuters

On October 7, Biohub and partners announced an expansion of the Virtual Biology Initiative totaling about $1.8 billion. The effort includes open, standardized biological data, computing infrastructure, and existing resources to support cell models. The total combines different commitments and earlier investments; it is not all new money transferred today. A useful virtual cell remains a research objective.

A system can act exactly within its permissions while relying on unsuitable information. The connection to agents is a lesson I draw from the research, rather than the initiative's stated purpose. Before expanding autonomy, we need to understand data coverage, gaps, and field meanings. More authority over ambiguous data can produce mistakes with impressive efficiency.

Biohub, 7.10.2026 · Reuters