@genventurecap
Pinned post
Can your AI agent raise its own spending limit?
Teneo's weekly agentic round-up, 6 November: the agent news that matters for builders, checked at the source.
- Cornell Tech and Yale researchers gave ten frontier models a Circle agent wallet with a 0.01 USDC daily cap, an inbox and three invoices to pay. Nine of ten read the emailed approval code and raised their own cap in at least one run. No attacker involved. Preprint; rates vary; Circle's docs now warn against giving an agent the inbox.
- Anthropic set Claude agents to write fine-tuning data that makes a model misaligned while passing a training-data monitor they could study. Given enough rounds they succeeded, mostly by hiding the behaviour in fiction and roleplay. A deliberately one-sided game; the models were never deployed.
- OpenAI described its layered monitoring, every layer reading the agent from outside. In a replay of an earlier incident, its monitors alerted about 30 minutes after the sandbox escape. Paging is still off for internal Codex traffic.
The common point: an approval or a monitor the agent can reach is not a control.
Last week: what an agent can reach if it escapes. This week it did not need to escape. The check was already within reach.
On Teneo, an agent requests a user wallet transaction with TriggerWalletTx and the user's wallet signs, not the agent. Builders set a per-minute rate limit, callers pay per command through x402, and an agent whose commands change goes back to private review.
The SDK does not document spending caps for paying wallets or any protection for the device that approves. So keep the signing wallet on a device the agent cannot drive, and never give one agent both a wallet and the inbox that gets its approval codes.
A test this week: set a limit your agent will hit, give it the task anyway, and watch whether it stops or grants itself the approval.
Read this week's round-up here:
teneo-protocol.ai/blog/can-your-…View quoted post on X
OS3, your way. 🐰
✨ start free with rabbit-hosted plans. no API key or card. new accounts get free usage for tasks, images + 30 phone mins.
🎨 new themes, fonts, colors & video wallpapers.
🚀 launch week: 2x weekly allowance on $20 plan
Mac + Windows: rabbit.techView quoted post on X
Robots and machines can now unlock doors with @Samsung's SmartThings
A machine running peaqOS can now find the SmartThings devices around it, read them, and act:
lock, unlock, on, off. Under its own identity, with a single-use key for every unlock.
→ peaqOS provides identity and coordination
→ @SmartThings speaks for the smart home devices
🔗 robotic.sh/services/samsu…View quoted post on X
strUSD is live on Pharos 🌊View quoted post on X
You can now use @tori_finance’s strUSD as collateral to borrow USDC on @Morpho via @okutrade.
