Meta’s Muse runs in its own secure cloud VM, takes requests in WhatsApp or the Muse app, and asks before sending email or buying; a separate Sentinel agent must approve anything it sends to the internet.
AP2 is an open protocol from Google for payments made by agents: the user signs an intent mandate and a cart mandate, giving merchants and payment providers an audit trail of what the user approved.
OpenAI’s Instant Checkout lets you ask ChatGPT a shopping question, pick an item and confirm the order in chat; the open Agentic Commerce Protocol passes the order to the merchant.
Perplexity pitches Comet for jobs like finding the same item with faster shipping. Brave showed a hidden comment could hijack it, and Simon Willison advises stopping agents at checkout.