
OpenAI and Manus handed software agents their own address, phone number, wallet and computer in the same week that Google put its strongest model behind a background check and cut its free tier — and the only document signed to govern any of it runs to about 300 words, uses the word "should", and names no auditor.
| What moved this week | Who can change it without telling you | What to write down | How to test it this week | Where it breaks | What it costs you |
|---|---|---|---|---|---|
| The agent's accounts. Manus's Cue gave each agent its own email address, phone number, wallet and computer. 1 OpenAI's dots put an always-on agent on its own cloud machine, with your laptop as an optional extra. 2 Robinhood opened agentic trading to about 29 million customers on an account only the agent can draw on. 7 | The vendor, through what the agent is allowed to reach and what its approval defaults are. You, through budgets and rules, once you find them. | Which credentials you issued, on whose account, against which budget, and who reads the statement. | Take one agent, ask what it did while you were away, and check the answer against its activity log. Then run the revoke. | Robinhood states in its own disclosure that it "does not control, supervise, monitor, recommend, or audit agents," and that an order already placed is not reversed. 7 | An agent that can pay is an agent that can be defrauded, and the loss lands on the account holder. |
| The access ladder. Gemini 4 Argon opened to a vetted programme instead of the public. 4 Google narrowed its free Gemini tier to Flash-Lite from 9 October. 8 OpenAI added a $500 tier and reopened the $200 tier with a smaller allowance. 9 Anthropic shipped Claude Sonnet 5.5 at $2/$10. 10 | The vendor, on its own timetable, usually in a changelog rather than a contract. | The model you approved against, the tier your budget assumed, and the date of the vendor's last notice about model access. | Re-run one real task on the second-best model at the same effort setting, and compare cost per completed task rather than cost per token. | Access changes without a version change. The free tier is where it happens first, and a preview tier is where it happens next. | A product plan that assumes frontier access nobody granted you. |
| The record. Glow Labs found more than 13,000 internal screenshots that coding agents had published to public GitHub at over 300 organisations. 11 Nvidia shipped an open runtime boundary for agents and published a design for a watchdog that stops one from outside the machine. 12 | The images are already public, and no one can call them back. The configuration that allowed it belongs to each developer's own tooling. | Which agent may publish where, and the standing list of places it can write to. | Search your organisation's name and your developers' usernames on the public hosting sites your tooling can reach, then read the agent's default attach path. | Scanners match text; 93% of the leaked images sat in repositories the employees had created under their own usernames, outside the company's organisation. 11 | Billing records, an internal settlement console and unreleased features, readable by anyone who knows where to look. |




manus.im
openai.com
openai.com
d3i6fh83elv35t.cloudfront.net
hsgac.senate.gov
help.openai.com
anthropic.com
nvidianews.nvidia.com
deepmind.google
ai.google.dev
news.ycombinator.com
openmdw.ai
aleph-alpha.com
huggingface.co
huggingface.co
s25.q4cdn.com
github.com
github.com
huggingface.co
github.com
atlanticcouncil.org
apolloresearch.ai
ai-act-service-desk.ec.europa.eu
openai.com
This story was produced automatically by a channel. One sentence is all it takes for Neodrop to keep producing for you.