Sunday, October 18, 2026

— A weekly publication —

The Agentic Commerce Report

A weekly read of everything that moved in agentic commerce — protocols, payment rails, retailer pilots, regulation. Summarised, sourced, and stitched to what came before.

Anthropic Expands AI Agent Security Access and Launches Critical Infrastructure Defense Program

Issue 41October 5–11, 2026Synthesised from 5 sources

Edited by Reviewed against primary sources

Anthropic published two Security-lane announcements in the same week for the second time in this report’s 41-issue history, the first being 2026-w36. On October 6, Anthropic expanded the Cyber Verification ProgramAnthropic's tiered access system giving vetted security professionals reduced classifier blocks on frontier Claude models for defensive and offensive cyber work. (CVP — its tiered access system giving vetted security professionals reduced classifier blocks on frontier Claude models) from a single tier to three: Defense Access for defensive security teams, Red Team Access for authorized penetration testers, and Specialized Access for safety-critical systems such as power grids and interbank infrastructure 1. Project GlasswingAnthropic's restricted program that ran from April to October 2026, giving a set of founding partners access to Claude Mythos for security research., the restricted program that found over 129,000 verified vulnerabilities across April to October 2026 with a small cohort of founding partners, was merged into CVP’s Specialized Access tier 1. CyScenarioBenchAn evaluation that measures whether AI models can plan and execute multi-stage cyber operations under realistic constraints. (an evaluation measuring whether AI models can plan and execute multi-stage cyber operations under realistic constraints) showed Defense Access blocked 46 of 50 offensive tasks while Red Team Access blocked none, providing empirical separation between tiers 1. Two days later, Anthropic launched the Critical Infrastructure Defense ProgramAnthropic's program embedding Claude models and on-site engineers with security firms protecting power grids, water systems, and transportation networks. (CIDP), embedding Claude models and on-site engineers with 11 founding security partners including CrowdStrike, Dragos, Palo Alto Networks, and Rockwell Automation 2.

The same October 8 announcement launched OSS ScannerAnthropic's free opt-in service that delivers automated vulnerability reports from frontier Claude models to open-source project maintainers. (Anthropic’s free opt-in service delivering automated vulnerability reports to open-source project maintainers), funded by the Defender Advantage Fund 2. Both announcements extend the security infrastructure pattern Anthropic established in 2026-w36, when it disclosed Claude alignment failures and launched Enterprise Frontier Safeguards, and in 2026-w38, when the Life Sciences Verification Program opened Mythos to credentialed bio-research organizations. The Accenture embedded-evaluation partnership (2026-w38) gave Accenture employee-level access to pre-release Claude models; CIDP gives 11 OT security firms access to Claude plus on-site Anthropic engineers. Where prior programs expanded access to specific high-risk domains — life sciences, enterprise monitoring — the CVP expansion removes the cohort restriction entirely. Any vetted security team can now apply for frontier model access at the tier matching their authorization scope.

Anthropic and Google both moved on the AEO layer this week. Claude Haiku 5.5 launched October 7 at 75% lower cost than Haiku 4.5, with Anthropic simultaneously adding computer use and browser use support to its Python and TypeScript SDKs in beta 3. On OSWorld 2.1, Haiku 5.5 scored 72.4% on the computer-use benchmark, compared to GPT-6 Luna at 48.9% 3. Asana reported 30% latency reduction and up to 2.5x faster inference per agent turn in early testing 3. Anthropic also halved Sonnet 5.5 cache read prices, cutting most agentic task costs by roughly 20% 3. The browser use SDK directly enables AI shopping agents to navigate merchant pages without custom tooling. On the same date, Google Cloud announced the Gemini agent (a universal enterprise agent for work) in private preview at its Gemini at Work 2026 event 4. The Gemini agent includes built-in spending limits that pause it when exceeded, plus full audit trails — governance primitives that mirror what agentic checkout systems require before granting purchase authority.

OpenAI expanded ChatGPT Ads’ measurement infrastructure on October 5, naming 20 third-party measurement partners covering attribution, incrementality, and brand safety 5. The OAIQ pixelOpenAI's site-side event tracking pixel for measuring conversions and ad performance within ChatGPT Ads campaigns. (OpenAI’s site-side event tracking pixel for ChatGPT Ads) and Conversions API are now live alongside integrations with AppsFlyer, Adjust, Kochava, Haus, DoubleVerify, and Integral Ad Science 5. Advanced conversion optimisation now learns from view-through as well as click-through conversions. This is the first AI conversation surface to connect to a full third-party measurement ecosystem at this scale, placing ChatGPT Ads on the same attribution infrastructure advertisers use for Google and Meta. For agentic commerce, that matters at the structural level: the discovery surface that precedes an agentic checkout interaction is now measurable by the same tools that track any other paid channel. Advertising spend toward AI surfaces will follow measurement comparability.

Events this issue

5 events
AEO
launch

Google Cloud introduces the Gemini agent for work

Google Cloud's Gemini agent automates enterprise workflows by connecting to business systems from a single prompt.

The Google Cloud Gemini agent selects the best model for each task, maintains cost controls, and logs all actions in an audit trail. Announced at the Gemini at Work 2026 event on October 8, the agent operates across Google Workspace and third-party tools including Slack and Microsoft 365, returning completed work to documents, inboxes, and developer environments. Agent spending limits pause the agent when exceeded, pending manual resumption. The governance features — audit trails, spending caps, and administrator controls — replicate the oversight primitives that agentic payment systems require before agents can act autonomously on purchasing tasks. For agentic commerce, the Gemini agent's architecture illustrates how enterprise AI agents will receive purchase authority: scoped to explicit limits and logged at the action level. Google disclosed that the agent supports both Gemini and Claude models. It is in private preview.

  1. Google Blog
Security
launch

Introducing the Anthropic Cyber Mission

Anthropic launched CIDP with 11 security firm partners and OSS Scanner for open-source project vulnerability scanning.

The Anthropic Cyber Mission deploys Anthropic engineering talent into critical infrastructure defense through the Critical Infrastructure Defense Program (CIDP). Its 11 founding partners include Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation. OSS Scanner, launched the same day, delivers automated vulnerability reports from frontier models to open-source projects at no cost, building on the coordinated disclosure process Anthropic ran under Project Glasswing. Both programs extend vulnerability-finding capacity into environments where agentic commerce infrastructure — payment APIs, checkout SDKs, and identity frameworks — runs on shared open-source dependencies. The Defender Advantage Fund keeps OSS Scanner free. CIDP and OSS Scanner represent the first time a frontier model lab has embedded engineers with OT security providers and open-source foundations as a named ongoing commitment rather than a time-limited program.

  1. Anthropic News
AEO
launch

Introducing Claude Haiku 5.5

Anthropic launched Claude Haiku 5.5 at 75% lower cost than Haiku 4.5, adding computer use and browser use SDK support.

Claude Haiku 5.5 lowers the cost floor for high-volume agentic tasks by 75%. On OSWorld 2.1 computer use, it scored 72.4% — compared to GPT-6 Luna at 48.9% and Haiku 4.5 at 15.7%. Asana reported a 30% latency reduction and up to 2.5x faster inference per agent turn. Anthropic simultaneously added computer use and browser use support to the Claude Python and TypeScript SDKs in beta; Haiku 5.5 runs both tasks. For agentic commerce, the browser use SDK directly enables AI shopping agents to navigate merchant pages without custom integration. Anthropic also halved Sonnet 5.5 cache read prices, cutting costs on most agentic tasks by roughly 20%. The combination — cheaper subagent model plus cheaper cache reads on the reasoning model — reduces the per-transaction cost of multi-step agentic checkout to its lowest reported level.

  1. Anthropic News
Security
launch

Expanding the Cyber Verification Program

Anthropic expanded CVP to three tiers and merged Project Glasswing, which found 129,000-plus verified vulnerabilities.

The expanded Cyber Verification Program restructures how AI security access is distributed across defenders. Project Glasswing ran from April to October 2026 with a restricted set of partners and uncovered at least 129,000 verified vulnerabilities — 33,000 rated critical- or high-severity — plus 5,500 from Anthropic's own open-source scanning. The new three-tier structure (Defense Access, Red Team Access, Specialized Access) opens Glasswing-level access to any vetted security team, not only founding partners. The CyScenarioBench test of CVP safeguards showed Defense Access blocked 46 of 50 offensive tasks while Red Team Access blocked none, giving empirical backing to the tier separation. For agentic commerce, this matters because the same model capabilities that enable autonomous checkout and agent-initiated payments also enable automated exploitation — the tier system is the architectural response to that dual-use gap first documented in 2026-w36.

  1. Anthropic News
AEO
launch

More ways to measure ChatGPT Ads

OpenAI added 20 measurement partners, OAIQ pixel, and Conversions API to ChatGPT Ads on October 5.

ChatGPT Ads' measurement infrastructure expanded on October 5 with 20 third-party partners covering attribution (AppsFlyer, Adjust, Kochava), incrementality testing (Haus, Measured, WorkMagic), data connectivity (Hightouch, Tealium, LiveRamp), and brand safety pilots with DoubleVerify and Integral Ad Science. Advanced conversion optimisation now learns from view-through as well as click-through conversions. For answer engine optimization, this matters structurally: it is the first time a large language model conversation surface has connected to a full third-party measurement ecosystem. Advertisers can now measure ChatGPT Ads on the same attribution infrastructure they use for Google and Meta. That comparability will accelerate spend allocation toward AI conversation surfaces, which are increasingly the discovery layer before agentic checkout.

  1. OpenAI Blog