Apple tightens Mac disk access over AI agents, Anthropic commits $100M to train 10,000 engineers, and 3 more AI moves
Five verified developments from October 2 to 3, 2026: Apple's new controls on the macOS permission that hands an app the whole machine, Anthropic's $100 million academy for 10,000 deployment engineers, Meta's open-source Muse hardware SDKs, Supabase's $150 million round and Turso acquisition, and a new count of China's immersion-DUV lithography stockpile.
In brief
Between October 2 at 12:00 UTC and October 3 at 12:00 UTC, Apple said it will put new controls around the macOS permission that lets an app read everything on a Mac, and named AI agents as the reason; Anthropic committed $100 million to training 10,000 engineers for the companies that deploy its models; Meta open-sourced the software for building hardware around its Muse agent and made a small home-network dongle of its own; Supabase raised $150 million and bought a database built for agent workloads; and a Washington research group's count of Chinese lithography purchases gave fresh force to calls for a total export ban on the tools.
- Companies: Apple published a developer note on Friday saying it will add controls around Full Disk Access on macOS, the setting that lets an app read files, mail, messages and browsing history, so that granting it takes "very explicit user action". Apple gave the reason in its own words: as AI agents become increasingly capable and autonomous, the risks of that level of access grow substantially. The note followed a fortnight of argument over Meta's Muse agent, which Meta says cannot read Apple Messages unless a user grants both Full Disk Access and a separate Messages connector. Apple set no date. 12
- Hires: Anthropic launched Claude Frontier Academy, backed by a $100 million commitment to train 10,000 "Frontier Deployed Engineers" by the end of 2027. The first program is a residency modelled on medical training, running in San Francisco, New York and London, with engineers from Accenture, Bain, Capgemini, Commonwealth Bank of Australia, Deloitte, McKinsey, Morgan Stanley and Novo Nordisk in the opening cohorts. Participation is by nomination from an employer. 3
- Launches: Meta open-sourced the software for building Muse devices — an ESP32 SDK and a Linux SDK under the Apache 2.0 licence — and published a page of suggested builds, from a Raspberry Pi driving Home Assistant to a colour e-ink display. Meta built one device of its own: Muse Home Link, a USB-C dongle that puts the agent on the home network to reach smart home devices. It manufactured 5,000 and is giving them to Muse subscribers. 45
- Funding: Supabase raised $150 million led by Singapore's GIC, four months after a $500 million round, and agreed to acquire Turso, whose database system is built for workloads in which one server holds millions of small databases. Supabase says it adds more than 1 million users and 4 million databases a month, and that agents or AI-driven tools create 70 percent of the new ones. 67
- Export controls: The South China Morning Post reported on a study by the Centre for Technology & Statecraft estimating that Chinese-owned chip factories had acquired about 343 immersion deep-ultraviolet lithography systems by early 2026. The study's two authors, both former US officials, recommend a China-wide ban on further immersion DUV exports and tighter controls on servicing and spare parts. Immersion tools are less advanced than the extreme-ultraviolet machines China is already barred from buying, but some models remain exempt from Western export bans. 8
Five developments
1. Apple narrows the Mac permission that hands an app everything
Apple published a note for developers on Friday under the title "Updates to Full Disk Access in macOS". Apple says the permission "largely sidesteps" the controls it builds around private data — it exists so that backup apps work properly — and that some developers use it in ways that expose files, mail, messages and even browsing history "without users' full knowledge and understanding". Going forward, Apple says it will introduce additional controls so that a user who genuinely wants to grant that access can only do so with "very explicit user action". The note names no app, gives no date, describes no mechanism and does not say which release will carry the change. 1
The reason Apple gave for moving is the part worth keeping. "As AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially," the note says. Apple adds that access for a communication app "can also compromise the privacy of the people users are communicating with". 1 A platform vendor is tightening a system permission because of a class of software, and the note places the decision with the user: what changes is what a person has to do, and understand, before an agent gets the run of the machine. TechCrunch reported that Apple did not answer its question about the change. 2
The argument of the previous two weeks explains the timing. In September, Jason Aten, a columnist at Inc., wrote that Meta's Muse agent had referred to the content of a private Apple Messages thread and that he had never granted it permission to read his messages. 9 Meta's chief technology officer, David Singleton, answered that the Messages integration is opt-in and that Muse "can only read Messages content if macOS system-level Full Disk Access is granted and the Messages connector is enabled". Ars Technica put the claim to Patrick Wardle, a macOS security researcher, who said that with Full Disk Access any non-root file on the machine is readable — browsing history, cookies and chats included — whatever a vendor says about its own connectors. 9
Two earlier events sit in the same run. Wardle disclosed in September a Muse configuration that allowed any app or code running on a Mac — including commands injected through a browser-based attack — to take control of the assistant and then reach whatever the assistant could reach. Amazon also blocked Muse from its platform, saying apps of that kind "should operate openly and respect service provider decisions about whether or not to participate". A separate Wired report found a flaw in the ChatGPT Mac app that could have let an attacker reach sensitive data. 29
What none of this settles is what the controls will actually be, and that is what a developer or a user has to plan around. Apple has not said whether a second, narrower permission will replace Full Disk Access for agents, whether the connector-style opt-in that Meta describes will survive, or when any of it ships. The practical read for a Mac user today is unchanged by the announcement: the permission is still grantable, and an app that has been given it can read what it likes until Apple ships something.
2. Anthropic pays to build the engineers its customers cannot hire
Anthropic announced on Friday that it will commit $100 million to Claude Frontier Academy and train 10,000 "Frontier Deployed Engineers" by the end of 2027. The company describes the problem as talent rather than model capability: enterprises are racing to bring AI into their operations, and the people who can make that work inside a real business "have become the hardest talent to find". 3
The first program is a residency, and Anthropic says it copied the structure from medical training. Engineers arrive by nomination from their employer, each with a named Claude project to lead on return. They start with a multi-day in-person program alongside Anthropic engineers, work through a simulated enterprise deployment from use case through security review to handover, and finish with a graded practical on a new scenario. Those who pass earn a Claude Resident Engineer badge and move into a 12-week residency in which they lead a real Claude use case at their own organisation, assessed again at the end; the Frontier Deployed Engineer badge goes to those who pass the second assessment, and Anthropic expects the first graduates in early 2027. Cohorts are running in San Francisco, New York and London, and prior experience building AI agents is not required. 3
The first cohorts show which channel Anthropic expects the training to travel through. Engineers from Accenture, Bain, Capgemini, Commonwealth Bank of Australia, Deloitte, McKinsey, Morgan Stanley and Novo Nordisk are in them: six professional-services firms plus two of their clients. Steve Corfield, Anthropic's global head of business development and partnerships, put the target as "engineers with the highest level of AI fluency who can take Claude from an idea to a system in production", and said the company wants graduates "to set the standard for how AI gets built inside a business". 3
The academy sits on top of a certification business that already has scale. Professionals at 46,000 firms have earned more than 175,000 Claude certifications through the Claude Partner Network, and nearly 4,000 people have completed Basecamp, a program that teaches the same curriculum Anthropic's own applied AI teams receive. Anthropic calls the 10,000-engineer target "the first step of many". 3
Two things follow for a reader weighing this. The route in runs through an organisation that already buys Claude — participation is by nomination, and companies ask their Anthropic account team or partner account manager whether they qualify — so the academy deepens existing accounts rather than opening new ones. And it hands the consultancies in the first cohorts a named credential to sell deployment work with, which is a different lever from cutting the price of tokens.
3. Meta opens the hardware around its agent
Meta published a page for Muse Gadgets on Friday and open-sourced the software behind it: an ESP32 Device SDK and a Linux Device SDK under the Apache 2.0 licence, in a GitHub repository under Meta's incubator organisation. The idea is that a developer takes an off-the-shelf board and connects Muse to a display, buttons, sensors or actuators. 4 Meta's own list of suggested builds runs from a Raspberry Pi 5 wired into Home Assistant, through a Waveshare round AMOLED board with push-to-talk and a small M5Stack device, to a Seeed colour e-ink terminal and an HDMI stick for a TV that the page lists as coming soon. Meta opened a Discord server for the project and gives the SDKs away with the warning that tinkering may void warranties. 4
Meta also made a device of its own. Muse Home Link is a USB-C powered dongle that puts Muse on the home network so the agent can talk to smart home devices "like TVs and speakers and anything else that exposes https", according to Nat Friedman, head of product for Meta's superintelligence labs. Meta built 5,000 of them and is giving them to Muse subscribers. 5
The context is Meta's consumer push around Muse, the personal AI agent it launched in September. At its Connect conference last week the company showed the Muse Charm, a small companion device, and Friedman's post frames Home Link as a second form factor rather than a product. 5 Muse Gadgets points the same agent at hardware Meta does not sell — a display on a shelf, a stick in a television — which is a cheap way to learn which forms people want, and keeps the interaction inside Meta's own agent, away from another company's app store.
What Meta has not said is whether any of it becomes a product line. The dongle exists as a giveaway of 5,000 units, the television stick is listed as coming soon, and the SDKs are published as-is for hobbyists. The value of the announcement today is for developers: a documented way to put Meta's agent on a board, and a set of worked examples showing what the company thinks a Muse device is.
4. Supabase raises $150M to hold the databases agents keep creating
Supabase, which sells a hosted version of the open-source Postgres database, announced $150 million in new funding led by Singapore's GIC, with Alphabet's growth fund CapitalG, IronArc and SquarePeg also taking part. The company announced on the same day that it has agreed to acquire Turso, a database platform built for workloads in which large numbers of small databases are created and thrown away, for an undisclosed sum. The round comes four months after Supabase's $500 million series F. 6
Supabase's case for raising again rests on a growth curve it attributes to agents. The company says it is now adding more than 1 million users and 4 million databases a month, that agents or AI-driven tools create 70 percent of the new databases, and that its database count grew 600 percent year over year as of June, when agents were already creating most of them. More than 13 million developers use the platform, according to the company. 6 Its co-founder and chief executive, Paul Copplestone, wrote that "agents are spinning up millions of databases to power the prototypes, explorations, dashboards, and apps they're building". 7
Turso is the technical half of that case. Its team rebuilt SQLite in Rust and built a cloud platform where a single server can hold and serve millions of databases, loading them when needed and suspending them when not, so that giving each agent its own database does not require giving each agent its own machine. Its founders, Glauber Costa and Pekka Enberg, are joining Supabase, with Costa leading the agentic services effort; Turso continues to operate and keeps its existing customers, among them Superhuman, Sauna.ai, CTO.new and Mastra. 67
Two things are worth separating here. The growth numbers are the company's own and unaudited; they are consistent with what the coding agents visibly do — Claude Code, Codex and similar tools generate applications, and applications need a database — but no outside body has checked the 70 percent figure. The second is architectural. Per-agent databases are a bet that the volume of software keeps rising and that each unit of it stays small and disposable; if agent-built applications consolidate into fewer long-lived systems, the value returns to the relational platform Supabase already sells. The acquisition buys the company a position on both sides of that bet.
5. A Washington research group counts China's lithography stockpile
The South China Morning Post reported on Friday on a study by the Centre for Technology & Statecraft, a Washington research group established in August, which estimates that Chinese-owned chip factories had acquired about 343 immersion deep-ultraviolet lithography systems by early 2026. The study was published in late September and is co-authored by Nicholas Brown, a former US export-control official, and Saif Khan, a former White House and Commerce Department technology policy adviser. It recommends a China-wide ban on further immersion DUV exports, together with tighter controls on servicing and spare parts. 8
The tool category is the point of the argument. Immersion DUV machines are less advanced than the extreme-ultraviolet systems that China has been barred from buying from the Dutch supplier ASML, but they can be adapted to manufacture 7-nanometre logic chips and advanced memory for AI processors, and some models remain exempt from Western export bans — which is why Chinese chipmakers have leaned on them. The count of 343 is an estimate built from trade data by a group outside government; neither ASML nor the Dutch government has published a figure of its own. 8
The recommendation has two halves because China already owns the machines. The study couples stopping further sales with control of servicing and spare parts, where a tool that cannot be maintained has a shorter working life. The Dutch licensing regime governs the equipment itself, and the American regime governs the American content inside it, so a total blockade would need both. 8
Nothing has been decided. The study is a recommendation from a new research group, no agency has proposed a rule, and the exemptions that remain were written into earlier control rounds for reasons that had nothing to do with AI. The report's contribution is the number: the debate in Washington has been about whether a total blockade on immersion tools is worth its cost to allies, and a count of what has already been shipped changes the arithmetic on both sides. 8
The read-through
Two of this issue's five developments are a supplier narrowing access to something it controls. Apple is restricting the macOS permission that lets an app read the whole machine and gave AI agents as the reason, which puts a platform vendor between its users and the agent makers. The Centre for Technology & Statecraft wants the same closing done to lithography: stop the machines that make the chips, and also the parts that keep them running. In both cases the party that owns the resource is the one drawing the line, and in both cases the line is hard to redraw once crossed — an app that has read your messages has read them, and a fab that owns the tool owns the capacity it produces. 18
The other three are capacity built by someone other than a frontier lab. Anthropic is paying to manufacture the engineers its enterprise customers cannot hire; Meta is giving away an SDK so that other people build hardware around its agent; Supabase is buying the storage layer for the software those agents write. Each treats the binding constraint as downstream of the model — that the labs can produce more capability than the surrounding economy can absorb, and that the money now sits with whoever supplies the absorption. That reading is this issue's inference from three announcements the companies made about their own products. 346
The evidence behind all five is worth noting for what it omits, because three of them rest on the announcing company's own page. Apple says it will add controls and does not describe them. Anthropic names a target of 10,000 engineers and not what participation costs a company. Meta gives away 5,000 dongles and does not say whether more will be made. Supabase's growth figures are Supabase's. Only the lithography study comes from a party with no product to sell in the story, and it is a recommendation rather than a decision.
Watch next
- The shape of Apple's new controls. The developer note promises "very explicit user action" for Full Disk Access without saying what that looks like or which macOS release carries it. The first beta notes, or an updated developer document, would show whether agents get a narrower permission of their own — and whether the connector opt-in that Meta relies on survives. 19
- Whether the lithography recommendation becomes a rule. The decision sits with the Dutch licensing regime for the equipment and with the US Commerce Department for the American content inside it, and the servicing and spare-parts question is the one with no precedent in the existing controls. A licence change, a public comment round, or a mention in the next control package would show whether the total-blockade argument is gaining. 8
- Meta's next hardware step. Muse Home Link exists as a giveaway of 5,000 units and the television stick is listed as coming soon. Whether either goes on sale, and whether other platforms follow Amazon in restricting Muse, decides whether Muse Gadgets stays a hobbyist kit or becomes a device programme. 5
- Whether the academy's first engineers arrive on schedule. Anthropic expects the first Frontier Deployed Engineer badges in early 2027 and 10,000 trained people by the end of that year, from cohorts staffed by consultancies. The first graduates, and the first named deployments they lead, are the test of whether a residency model transfers to enterprise software work. 3
- The agent database figure. Supabase says agents create 70 percent of the new databases on its platform and that the total grew 600 percent year over year through June. The next quarterly comparison against those same baselines will show whether the agent share keeps rising or whether it was a measurement of a one-off wave of coding-agent users. 6
References
- 1Apple Developer — Updates to Full Disk Access in macOS
developer.apple.com
- 2
- 3
- 4Meta — Muse Gadgets: open source hardware for your Muse
gadgets.muse.ai
- 5
- 6
- 7Supabase — Supabase is acquiring Turso
supabase.com
- 8
- 9
This story was produced automatically by a channel. One sentence is all it takes for Neodrop to keep producing for you.