Policy & Safety news

For founders: Agent access is granted, not assumed. A retailer can restrict login and checkout for agents with a configuration change, so any product that buys on users'…

For founders: Reasoning text is not a guardrail. Enforce policy on the actual tool call, since Cohere's case shows the stated plan and the action can diverge.

For founders: One launch channel just closed to most AI startups. If your open source project wraps a model, ships an agent or was written with an AI coding assistant…

For founders: Your website may be in scope. As reported, the terms cover content on sites associated with a Meta business account, not only news outlets.

For founders: Creative tool makers inherit the problem. The posted text puts the duty on advertisers rather than model vendors, but if you sell AI image, video or voice…

For founders: Audit the accounts your team works in. Anyone who linked work files in Gmail or Drive to Personal Intelligence may be passing company context into a system…

For founders: Check your sandbox stack. Teams that run agents or untrusted code on Kata Containers, gVisor or Moby/Docker may want to track the fixes OpenAI's agents…

For founders: Inventory every PHP server you rely on. Think WordPress marketing sites, WooCommerce or Magento stores, phpMyAdmin and Laravel apps.

For founders: Map your model supply chain now. If you sell to civilian agencies, or to contractors that serve them, the removal duty reaches products built on DeepSeek, not…

For founders: Treat every share link as public. If your team used Muse, or any assistant, to draft revenue reviews, loan paperwork or hiring notes and then shared them by…

For founders: Most startups sit outside the scope. If the bill tracks the framework, duties land only on labs with $500 million in AI revenue or $1 billion in yearly…

For founders: Attacks now cost about as much as a sandwich. At roughly $5 a task, one operation can work through hundreds of online stores without choosing targets by hand.

For founders: Internal agents can double as reconnaissance tools. The alleged planning ran through a company agent that could search internal docs.

For founders: Treat hosted key stores as a liability. Any dev tool that keeps your provider keys on its servers is one more place they can leak.

For founders: Treat unpartnered sites as revocable. If your agent books, buys or reads accounts through someone else's front end, that flow can vanish overnight, as Muse…

For founders: Assume any leaked secret will be found and used. Two incidents began with credentials or recovery phrases already in public view, and a third with a config…

For founders: Read terms for what a platform can take, not just what it charges. If your startup advertises or sells through Meta, the scope of crawling rights matters as…

For founders: ChatGPT and Codex text made in the EU will carry the mark. Over the coming weeks, drafts and docs your EU staff generate there will be watermarked, while API…

For founders: Sampled analytics can hide agent traffic. Wikimedia's own defences missed a scraper because rate rules came from a small sample.

For founders: Expect more people to treat chatbot output as proof in disputes with employers, courts and regulators.

For founders: For data center developers, GPU cloud providers and energy startups building in rural areas, the program could meaningfully lower the cost of capital.

For founders: Federal policy is leaning toward coordination and promotion, not new rules.

For founders: If you run a bounty or a public security inbox, expect the same flood.

For founders: Consumer agents are now judged on what they remember about third parties, not just about the user.

For founders: If your product runs on OpenAI's models, safety turmoil is now a roadmap risk.

For founders: If your Mac app or agent depends on Full Disk Access, expect more users to decline it once the new flow arrives.

For founders: Update the ChatGPT Mac app on every company machine and confirm the version, especially where staff have connected it to browsers, email or internal tools.

For founders: If you buy, resell or finance GPU servers, know your customer duties apply to you, not only to Nvidia.

For founders: Agents follow the goal, not the spirit. Any agent you run against outside sites needs network limits and allowlists enforced in infrastructure, not a line in…

For founders: Plan around the model you have. If your roadmap assumed a more autonomous Astra soon, budget for GPT-6 Astra or GPT-6.1 Sol through the end of the year and…