Dots: role and evidence
Always-on personal agents with their own cloud computers and app connections. Enterprise specialist dots are a separate pilot scope.
Evidence, not endorsement
A research and planning tool, not a vendor certification. Sources describe specific products, not every service offered by a company. Unknown means not established by the sources reviewed, not unsupported. grug402 sandbox tests do not test these vendors. Operational owners are suggested team contacts, not legal liability assignments.
Editorial review: 2026-10-08. Evidence older than 90 days needs rechecking; source check dates are not release dates.
Product and roles
Operator: OpenAI. Product scope: Dots in ChatGPT.
Consumer apps: Who acts for the shopper? Handoff: Intent, budget and approval → a merchant or paid service. Suggested owner: Agent product and identity teams.
Prerequisites to confirm
Check plan and market eligibility.
Review app permissions and action-approval rules.
Discovery
Announced / preview: OpenAI describes a rollout of always-on agents with cloud computers and connected apps.
Delegated authorization
Unknown: not established by the reviewed sources. Ask the provider; this is not a failed test.
Retail checkout
Unknown: not established by the reviewed sources. Ask the provider; this is not a failed test.
Paid API / tool
Unknown: not established by the reviewed sources. Ask the provider; this is not a failed test.
Settlement
Unknown: not established by the reviewed sources. Ask the provider; this is not a failed test.
Deployment
Not applicable: not assessed for this participant's listed role.
Operational controls
Documented: App permissions, Custom Rules, activity review and action approval are described.
Relevant sandbox tests — not vendor results
These are controlled grug402 scenarios. A passing sandbox request does not certify a company, integration, checkout or refund process.
- P1: A payment that completes — Establish a baseline before diagnosing failure cases. Suggested owner: Payments engineering.
- P1: Keep a spend within its limit — A quoted price can exceed the buyer's permitted per-call spend. Suggested owner: Agent product and security.
- P1: Bind approval to the right service — A payment must not be redirected to an unexpected resource host. Suggested owner: Agent product and security.
- P1: Retry without a duplicate charge — Lost responses should not cause the same purchase intent to be paid again. Suggested owner: Application engineering.