The Product Desk

Leverage now sits in the layer that decides what an agent is allowed to do, and the defaults vendors ship get that layer wrong. Zenity Labs showed that one chat prompt could pull credentials from an AWS Bedrock AgentCore agent and compromise every agent in that account and region. AWS still calls the behavior 'documented and expected.' In Microsoft's Copilot for Word, hidden text in an external document can rewrite financial figures and spread into downstream files, and the flaw has outlasted two mitigations shipped over 144 days. CSO reports that Claude Code's HTML preview had a 256KB blind spot that let JavaScript exfiltrate cloud credentials. Langflow drew 1,423 exploit attempts in honeypots. Your agent prototypes inherit these defaults unless someone checks them this week. The third deep dive turns that check into standing PRD rules.

JPMorgan is blocking third-party agents such as Muse and Instinct from moving money or paying bills, TLDR Fintech reports. Outside agents get only limited read-only access while the bank pilots its own Smart Cash agent. Agent features that assume they can pay from incumbent accounts now need a fallback, and each workaround has a cost. The first is a human gate, which is why Shopify keeps a human sign-off on every agent purchase. The second is a wallet. Angelos's a16z piece puts PayPal at 400M+ users, Stripe Link at 300M and Shop Pay at 250M, but he also warns that wallet virtual cards can strip users' card rewards. The card networks' answer is split across three rival standards. Watch whether other banks follow JPMorgan, and see the first deep dive for this sprint's PRD audit.

Anthropic told prospective IPO investors that Q3 revenue reached $16.8B, The Information reports. That is about 45% above Q2, which itself grew more than 140%. Investors now want an IPO valuation under $1.5T rather than the $2T bankers floated, and Microsoft and Meta are working to use less Claude. Your bargaining position on model spend has improved. Exponential View describes a price war, while The Information reports hardball on large-customer discounts. The second deep dive reconciles the two accounts.

Refactoring's Luca Rossi argues that products now reach users as MCP plugins inside ChatGPT, Claude and Grok. He notes that Notion's first MCP server, which mapped API endpoints one-to-one, needed four to six calls to answer one question. He recommends designing around the fewer than seven workflows users actually hand to agents. That makes your MCP server a storefront that needs an owner, not an API wrapper. ben's bites cites an unnamed study in which giving agents a docs link lifted task completion from 41% to 84%. Shopify's Agentic Storefronts now list merchants inside ChatGPT, Copilot and Gemini. Watch which hosts turn into real channels, and see the third deep dive for this sprint's tool-list audit.

Stripe's Harbor vibe-coding platform took one engineer about six weeks to build, and Ramp launched its Glass workspace externally on Oct 15, The Pragmatic Engineer reports. Ramp says Glass helped scale its feature-request capture from about 300 to 20,000 a month. Cheaper builds produce more code to check, and spending is following that merge volume. Anthropic built Scion after code merges topped 30,000 a day. Antithesis, a testing vendor, says it added more revenue in the August quarter than in the five prior periods combined. That is one vendor's claim, but it points the same way.