Tech companies pitch AI shopping agents as personal assistants once reserved for the wealthy. The Verge finds that, in practice, using one to buy things feels more like sending a nervous teenager to the store, while some retailers remain cautious.
On October 19, nine Chinese agencies issued an 18-point notice on commerce, one of which applies tiered governance to commercial AI agents: registration, testing and recalls in sensitive areas, self-assessment in low-risk ones. The guidance carries no penalties or timetable and does not say which tier these agents fall under; three days earlier, Beijing had proposed export controls on intelligent agents.
The agent platform OpenClaw now requires Node versions that reject TLS chains signed with keys compromised in October's Node.js security issue, and refuses to update on older runtimes rather than breaking an install. The release also makes package updates and recovery safer on Windows and macOS.
1Password is launching 1Password for Agents, which lets AI agents sign into accounts without seeing or handling the passwords themselves. Users still have to approve each sign-in request, so bots do not get free access to every connected account.
Google plans to open the infrastructure that runs its Gemini agents to Google Cloud customers. The service will first be available in preview.
Action State Group is releasing open-source tools that let businesses independently check records of what AI agents did, as agents start buying, selling and delegating work between companies. The set includes EvidenceBook, which keeps tamper-evident records, and Terms Packs for evaluating agent behavior.