Sierra and Meta's Personal Agent Protocol covers who may act on your account. Not who you should meet
On October 6, 2026 Sierra and Meta announced Personal Agent Protocol, an open standard for how personal AI agents deal with businesses, with Genesys, Rocket, Shopify, Stripe and Walmart among the partners. The design puts two permission decisions in one OAuth session: what access a customer grants their agent, and what a business lets any agent do. What that settles, what the unpublished spec leaves open about who an agent represents, and why a first introduction is a different consent question.
Amazon blocked Meta's Muse. The fight is about who the agent says it is
Amazon began blocking Meta's Muse from its retail site on 20 September 2026, saying the agent arrived without notice, did not identify itself, and handled customer logins Amazon could not inspect. The Perplexity ruling left sites their terms of service. What the standoff establishes about agent identity on the open web, and what it leaves unsettled.
ChatGPT's Sponsored Agents rent the conversation. Your domain owns the knowledge
OpenAI began testing Sponsored Agents inside ChatGPT ads on 16 September 2026, as a limited alpha with select US advertisers. What a rented agent gives a site owner, what OpenAI has not published, and what an agent on your own domain adds.
OpenAI folded the Atlas browser into ChatGPT. Your logs are the thing that changed
OpenAI announced the end of its Atlas browser on 9 July 2026 and shut it down a month later, moving agentic browsing into the ChatGPT app and a Chrome extension. Microsoft had already dissolved Copilot Mode into ordinary Edge. Fewer front doors, and agent visits that arrive looking like human sessions.
OWASP named ten agentic risks. Four of them are identity problems
The OWASP Top 10 for Agentic Applications is written for security engineers. Four of its ten categories are really about identity: who an agent is, who it speaks for, and who approved what. Translated for the people who run the site.
Cloudflare ran 206 million agent behavior checks in a day. That still is not identity or consent.
Cloudflare expanded BotBase beyond known-good bots and made verified status conditional on behavior. What continuous behavior evaluation covers, and the two trust problems it leaves untouched.
GDPR, AI agents, and web scraping: what the EDPB's 2026 guidelines leave out
The EDPB adopted its first GDPR framework for scraping personal data to train generative AI. It says almost nothing about the live agents that now visit your site on one person's behalf.
AI agent traffic statistics for 2026: the H1 numbers and what to do about them
A sourced synthesis of the H1 2026 AI agent traffic data: DataDome's 17.7B Q2 requests, Cloudflare's bot-majority crossover, TollBit's publisher trend, and the training-crawl-versus-buyer distinction the headlines skip.
Web Bot Auth: how your site tells real AI agents from spoofs
Web Bot Auth uses HTTP Message Signatures so an AI agent signs every request and your site can tell a real one from a spoof. It proves the agent is authentic. It does not prove the contact was wanted.
Cloudflare's Monetization Gateway prices agent access with x402: what payment still leaves open
On July 1, 2026, Cloudflare opened the Monetization Gateway: charge AI agents for pages, datasets, APIs, and MCP tools via x402. What shipped, and the identity gap it leaves.
Your website has two audiences now: humans and their AI agents
Your website has two audiences now: the human visitor and the AI agent working for them. How one site can answer both, qualify the agent, and follow up with each, on consent rather than capture.
Coinbase and AWS let publishers charge AI agents at the edge: what it changes for agent discovery
On June 15, 2026, AWS WAF let CloudFront publishers return an HTTP 402 with an x402 price and collect USDC from AI agents at the edge, settled via Coinbase. What shipped, and the identity gap it leaves open.
Speed to lead is dead: your buyer's agent won't wait five minutes
The classic speed-to-lead rule assumed a human lead and a human rep. In 2026 the lead is often an agent that wants an answer in seconds and routes to the next vendor when your site offers only a form.
When your B2B buyer is an AI agent: how agentic vendor discovery works
Most agentic-commerce coverage is retail, yet your B2B buyer already sends an agent to shortlist vendors, often before a human visits. How that discovery works, and what your site needs to make the list.
Your buyer is an agent now: what agentic browsers change for your website
Bot traffic passed human traffic in 2026, and agentic browsers like Comet and ChatGPT's agent mode now research vendors for their humans. What that changes for your website, and what to do this quarter.