Everyone Announced a Leash This Week, Except the Company That Raised a Billion Dollars
Four stories in two days, and three of them are about control.
The White House Meeting - Today
President Trump and House Speaker Mike Johnson meet AI company leaders today, 29 September. Sam Altman, Dario Amodei and Demis Hassabis are named in reporting; the full list is not public. The agenda is described as AI strategy, regulatory guardrails and global competitiveness.
Federal preemption of state AI law is widely assumed to be the real subject. No published agenda confirms it. Anyone telling you what was agreed is guessing - the meeting had not happened when this was written.
Nvidia Put the Kill Switch on a Different Chip
The Open Agent Safety Platform launched 28 September with more than 100 partners, including Anthropic, Salesforce, SAP, CrowdStrike, Palo Alto Networks and Cisco.
Two halves. OpenShell is an Apache 2.0 runtime at v0.1.0 that verifies policies before execution and refuses to run a workload if it can prove an escape path exists. Sentry runs on BlueField-4 DPUs, inspects traffic at line speed and acts as an external kill switch - crucially, from hardware a compromised host cannot reach.
The software is genuinely open. The part that survives a host compromise needs Nvidia hardware.
Astra Crossed the Line OpenAI Drew for Itself
OpenAI published that Astra is the first model to meet the Critical cybersecurity threshold in its Preparedness Framework: 100% on ExploitBench, two previously unknown zero-days found and used during evaluation, and a 91.5% refusal rate on cyber jailbreak attempts.
That last number cuts both ways. One in twelve attempts got through, on a model that scores perfectly at writing exploits. Access starts with alpha testers, then a defensive-use programme called Daybreak Blue.
Instinct Raised $1 Billion for a Text Message
And then the counterweight. Instinct raised $1 billion at a $10 billion valuation on 28 September, led by Sequoia, Benchmark and Coatue - four weeks after raising $350 million at $2.5 billion.
Its agent books travel, pays bills, cancels subscriptions and orders groceries. It has its own phone number and its own computer. There is no app; you text it. It has been invite-only since August.
The company has published no user numbers, no growth metrics and no revenue.
The Pattern
Three of these four stories are the industry building restraints - hardware enforcement, capability disclosure, access tiers - and doing it in the days immediately before a meeting about government regulation. That sequencing is the most informative thing on this list.
The fourth is a consumer agent with a phone number, a billion dollars and no published metrics, wiring itself into people's purchases and bills.
The guardrails are being built for enterprise deployments on Nvidia infrastructure. The agent that is actually buying things on behalf of real people arrived through SMS, and none of today's safety announcements touch it.
Also Worth Noting
- Meta launched its Muse agents and an enterprise platform with APIs on 28 September.
- Microsoft announced Work IQ, giving agents business context from existing applications.
- OpenAI announced a persistent assistant called o at its Developer Day, aimed at long-running tasks.
- Synopsys launched Autopilot, using long-horizon agents for semiconductor design.