Watch on YouTube · subscribe for the daily brief

Amazon locked the store. Shopify handed the agent the keys to every store it runs, and the merchants weren't asked. The agent never needed Amazon. It needed the checkout.

Amazon locked the store. Shopify handed the agent the keys to every store it runs, and the merchants weren't asked. The agent never needed Amazon. It needed the checkout.

Two days after Amazon blocked Meta's Muse agent, Shopify opened every store on its platform to it by default. Muse now finds products through Shopify's catalog feed and pays with Shop Pay. Merchants were not asked to opt in. They were made reachable.

That is the whole week in one move. Amazon owns a storefront. Shopify owns the rails underneath millions of storefronts. The agent never needed the store. It needed the checkout.

How the door opened

Muse pulls products from Shopify Catalog and places orders over the Universal Commerce Protocol, the feed format Shopify built with Google so one listing reads the same to Perplexity, Gemini, ChatGPT and now Muse. Shop Pay supplies stored shipping and billing details. Each purchase draws a single-use credential, so the card number never reaches Muse. Tobi Lütke's phrase was that every Shopify store is now agent-ready by default.

The market read it instantly. Shopify closed up 7.3 percent on Monday. Meta rose 11 percent, its biggest one-day gain since April 2025. The block was Sunday. The keys were Monday. Investors priced the door, not the lock.

Here is the trade-off for the merchant. You keep the sale and lose the session. No homepage load, no on-site data, no remarketing list. For a $4,500 patio set that used to be a twenty-minute browse, that is a real loss, and Shopify made the choice for you.

How big is the thing walking through it

The Information reports Muse drew more than 500,000 users in its first week, over 250,000 daily actives, and more than two million prompts. Internal Meta data, viewed but not published. It hit number one on the App Store. Then on Wednesday Meta announced Muse on its smart glasses, a Tamagotchi-like wearable that carries the agent, video chat with it, and a camera-free pair of frames. Every one of those is a distribution surface, not a capability.

Meta also admitted the obvious. Nat Friedman said Muse is heavily inspired by OpenClaw, the open-source personal agent, after users found near-identical files, down to a SOUL.md personality file. Built from scratch, he says. OpenClaw is open source, so this is a trust question, not a lawsuit. And the Mac zero-day from Monday got a hotfix, with Meta calling the practical risk low.

The Verge's reviewer summed the product up as a cute little guy who is great at spending your money. That is the pitch and the risk in one sentence.

What this means if you build agents

Stop targeting sites. Target rails. Amazon showed a retailer can bounce you. Shopify showed a payment and catalog layer can wave you through to every merchant at once, and the merchant finds out afterward. The New Stack's summit report put it bluntly: containment is dead in contact centers too. Add its piece on a third option emerging in the fight over your data, and confidential AI splitting control between data and model owners, and the pattern holds. Control is moving to whoever runs the rails between the model and the world.

The other big claim of the day

Anthropic says Claude found a previously undescribed enzyme system in bacteriophage DNA, sitting next to a run of repeats that looks like a CRISPR array. Roughly 950 agents ran for 21 hours and used 210 million tokens before one flagged the pattern. Humans did all the wet-lab work.

Now the caveats, because the word CRISPR is doing a lot of work. The preprint is not peer reviewed. Anthropic does not yet know what the system does. No sequence or biochemical assays are public yet. Dario Amodei acknowledged a Stanford team previously found a system that is in some ways similar. It is a lead, and a well-timed one for a company heading to IPO. It is also the first real receipt for cheap inference: 210 million tokens is a week of Sol at Tuesday's prices, spent on curiosity.

Builder's bench

• The New Stack: Opus 5.5 broke four things agents depend on, and OpenAI's bigger lever is the cache, not the price. Damien Benveniste on how routers trade cache reuse against queue time. Read all three together.
• Ben Lorica: not every AI task needs an LLM. Pairs with Monday's Jev decision models.
• Xiaomi's MiMo-V2.6 release goes well beyond the open-weight playbook, per The New Stack: environments, RL code, harnesses.
• An Anthropic engineer explained why Claude's writing got worse as the model got smarter.
• Modal on scaling a million concurrent sandboxes; Graphify on unifying codebase context; InfoQ on APIs for agents in the MCP era; Google added cycle-level kernel profiling to XProf.
• Alibaba's Qwen Audio 3.1 cut audio prices up to 95 percent. Google's Flash TTS designs voices from text descriptions, and Willison's Gemini 3.8 TTS playground shows it off. ChatGPT Voice and mobile got agentic access to email, calendar and Slack.
• Pinecone BYOC, MLflow 2.11.5, UiPath testing features, Rocket Software's governed mainframe agents, ZeroDrift compliance models, NextLM on Google Cloud Marketplace, Ekai's verified business context, Ema's $77M for AI employees.
• YouTube: build-your-own algorithm, custom feeds, Creator Studio AI. OpenAI hired Patreon's co-founder to lead a Creator Product division. Rabbit returned with OS3.
• Security: malicious agents stole 600K cards via skimmers on 100+ sites; an npm package posed as a Twilio bounty tool; Arista's CVSS 10 VeloCloud flaw is exploited; Jade Sleet's macOS backdoors; LWN's Wednesday updates; The New Stack on the supply chain as battlefield and WHOOP's alert fatigue fix.
• Policy: Bernie Sanders proposed banning superintelligence with prison for violators; Ars on the "AI race" delusion; California wants data centers to stop being black boxes; Americans who use AI daily are still worried.
• Money and misc: Enveda $311M, Basecamp Research turning evolution into training data, Nscale hiding ByteDance from its IPO filing, Qodo's ROI equation, Jensen Huang's junior-developer math, Grab and OpenAI in Southeast Asia, Nvidia's AI Day Singapore, XPRIZE wildfire, Samsung fridges bricked, the MIT Hype Index.

Dropped: StrictlyVC event promo. Off-spine: the Samsung fridge story stays as a one-liner.

Through-line: the retailer can lock the store, but the checkout decides who walks in, and it just decided for everyone.

One thing to do today: if you sell anything on Shopify, open your catalog settings and find out what Muse can already see and buy. If you build agents, list the rails you depend on and which of them could cut you off by Sunday night.

Sources covered

1 story · 70 sources (60 news, 4 company, 6 voices)

1. Everything new coming to Meta’s AI agent Muse
   📰TechCrunch↗📰TechCrunch↗📰The Verge↗📰TechCrunch↗📰The Verge↗📰The Verge↗📰SiliconANGLE↗📰SiliconANGLE↗🎙️Ben Lorica↗📰TechCrunch↗🎙️Simon Willison↗📰Ars Technica↗🎙️Simon Willison↗📰Ars Technica↗📰The New Stack↗📰Ars Technica↗📰The New Stack↗📰TechCrunch↗🎙️Damien Benveniste↗📰The Verge↗📰The Verge↗📰The Verge↗📰The Decoder↗📰Ars Technica↗📰The Decoder↗📰TechCrunch↗📰The New Stack↗📰TechCrunch↗📰The New Stack↗📰The Decoder↗📰The Hackers News↗📰The Hackers News↗📰The Hackers News↗📰The Verge↗📰BleepingComputer↗📰SiliconANGLE↗📰The New Stack↗🎙️Ben Lorica↗🏢Pinecone↗📰TechCrunch↗📰The Decoder↗📰The Decoder↗📰The Decoder↗📰TechCrunch↗📰TechCrunch↗📰The Verge↗📰InfoQ↗📰The New Stack↗📰InfoQ↗📰The Decoder↗📰The New Stack↗📰LWN.net↗📰SiliconANGLE↗📰SiliconANGLE↗📰SiliconANGLE↗📰The New Stack↗📰The Decoder↗📰SiliconANGLE↗📰SiliconANGLE↗📰The New Stack↗📰The Verge↗📰The New Stack↗📰InfoQ↗🏢MLflow↗📰The Decoder↗📰InfoQ↗📰MIT Technology Review↗🎙️Simon Willison↗🏢NVIDIA↗🏢OpenAI↗