Radar / AI security / Sierra and Meta publish Personal Agent Protocol
Sierra and Meta publish Personal Agent Protocol
Sierra and Meta announced the Personal Agent Protocol (PAP), an open standard defining how personal AI agents authenticate with businesses and complete tasks, with Walmart, Shopify, Stripe, Genesys, Rocket, NiCE and Decagon as partners; a v0.1 specification is due later in October.
Why it matters
If agents become the new shoppers, websites need a standard way to tell good bots from bad. PAP proposes OAuth-based tiers so agents can check stock as guests and transact once signed in.
What you could build with it
A startup building a merchant plugin for Shopify stores could implement the PAP v0.1 spec early, letting personal agents place verified orders through a storefront's existing APIs while logging every agent session for audit, so merchants get agent-driven sales without opening the floodgates to bots.
Does it hold up?
Too early to judge - the v0.1 spec has not been published yet, so no real-world implementations exist.
Learn more
First spotted on article: source.
More AI security
OpenAI, Anthropic and Google DeepMind jointly unveil cyber-focused safety models and safeguardsThe three rival labs disclosed weeks of behind-the-scenes coordination and jointly released a set of cyber-focused AI…security · JEV 0.73OpenAI textGrain watermarking for ChatGPT and Codex in the EUOpenAI will roll out its invisible textGrain watermarking system to ChatGPT/Codex users in the EU over the coming…security · JEV 0.65Cloudflare security-audit-skill: multi-phase security audits for coding agentsA coding-agent skill that runs multi-phase security audits with independently verified, machine-checkable findings.security · JEV 0.63LiveNerf: a pre-registered benchmark for post-release model driftOpen-source, pre-registered 30-day benchmark that detects whether Claude Opus 5.5 quietly gets worse after launch.security · JEV 0.61Sandlock 0.8.8: deferred commit for agent sandboxesThe process-based Linux AI sandbox (no container, no VM) ships deferred commit: every run returns a changeset of what…security · JEV 0.58OpenAI disrupts Moonshot-linked 'adversarial distillation' campaignOpenAI disclosed it shut down a coordinated campaign by 15,000+ users to extract hidden model reasoning, attributing a…security · JEV 0.58
Get the week's best AI launches, plus 3 ideas worth building
One email every Saturday. Ranked by traction, not hype. Free.