Amazon bars Muse from its store; in Nscale’s filing, only $2.6 billion is active

Good morning.

Today’s thread tracks who may trust an AI system, with the checking bill attached.

Amazon blocked Meta’s Muse 12 days after launch. Tobi Lütke opened Shopify checkout to the agent after it drew more than an estimated 902,000 downloads in six days.

Nscale brings Wall Street $103.4 billion in contracts as of Aug. 31, 2026. Only $2.6 billion is active, a useful detail before anyone finishes the larger number.

Patrick Wardle found a Muse setting that can redirect voice transcription and surrender the account token. Muse then told him an unprivileged attacker could not supply such a prompt.

Stay curious,

Marcus Schuler

Amazon blocked Meta’s Muse from shopping on Amazon.com on Sept. 20, 12 days after the agent launched.

Amazon says Muse browsed without identifying itself and appeared to capture and store customer credentials. Meta says credentials enter secure storage on each user’s cloud computer, a claim that has not been independently verified.

Shopify CEO Tobi Lütke announced Shop Pay checkout for Muse across all Shopify stores on Sept. 21. Muse passed 902,000 estimated downloads in its first six days, then ranked first among free apps in both major U.S. app stores by Sept. 21.

Why This Matters:

• Shopify merchants gain an agent checkout channel while Amazon preserves control over customer access and its advertising business.
• A lawsuit could test whether browsing from Meta’s cloud machine receives the same treatment as a user’s own browser.

Nscale filed its IPO registration with the SEC on Sept. 18, 2026, to list under NSCL.

As of Aug. 31, 2026, Nscale reports $103.4 billion in total contract value, with $2.6 billion active. Revenue was $140.6 million in the six months ended June 30, 2026, against a $1.02 billion net loss. Customer concentration matters because Anthropic agreements dated Aug. 25, 2026, carry payments of up to about $44.6 billion.

Christian Catalini’s September 2026 essay on catalini.com defines the Measurability Gap and proposes verified throughput.

Catalini writes, “The price of producing a plausible answer is collapsing. The price of knowing whether it is right is not.”

• SoftBank launched about $11 billion of bonds on Sept. 21, 2026, for its $10 billion OpenAI payment due around Oct. 1; pricing is expected Sept. 24, with BB+ from Fitch.
• Ireland’s Data Protection Commission fined Google €403 million on Sept. 21, 2026, over location-data processing between 2018 and 2020, and ordered compliance within six months.
• AMD crossed $1 trillion in market value on Sept. 21, 2026, the fourth U.S. chipmaker to do so, as agent CPU bets lifted Arm 17% and Intel 12%.
• Boston Dynamics opened an Atlas training center inside Hyundai’s Metaplant near Savannah on Sept. 21, 2026; Hyundai plans 25,000 units across Hyundai and Kia plants.
• xAI released Grok 4.7 on Sept. 21, 2026, at $2 per million input tokens and $6 per million output tokens, unchanged from Grok 4.6.
• Cloudflare made Python Workers generally available on Sept. 21, letting developers run web apps and AI agents on its managed network from $5, challenging AWS for adjacent workloads.

Turn an AI price sheet into a usage budget.

AI services split charges across tokens, calls, caching, storage, and support. Map the rate card to your workload before approving a budget.

Your raw input:

The prompt:

Why this works:

The prompt ties each calculation to the vendor's text and separates stated rates from your assumptions. Two usage cases expose billing variables hidden by a single monthly estimate.

What to use:

Use a strong reasoning model that handles tables and arithmetic reliably. For an image or PDF, choose a multimodal model and check every extracted number against the original.

Tucky is a native Mac note app that keeps encrypted notes at the screen edge and gives the paid tier a built-in AI assistant.

It handles quick questions about the note in front of you without copying text into a chat window; Plus costs $4 per month as listed September 8, 2026, while the $0 plan stores five notes and excludes AI on that date.

How to use it:

1. Visit tucky.io, select Download for macOS, and open Tucky after the download.
2. Create a note and paste the project brief or decision record you want close at hand.
3. Move the pointer to the screen edge, let the note titles fan out, and select the note.
4. Press ⌘J, enter a question about the current note, and permit access to its body when the answer requires it.
5. Press ⌥Space from any app when you want to ask a question across your notes.

Where it falls short: Tucky requires macOS 15 or later, and its $0 plan omits the assistant and all connectors as of September 8, 2026.

Credit: Midjourney

Prompt (excerpt): black stencil portrait of a woman on a rough, light gray textured wall, eyes closed, hands on her head, a glowing golden neon crown superimposed over the stencil.

Ars Technica disclosed on Sept. 21, 2026, that a zero-day in the Muse macOS app can expose the token controlling a user’s account.

Our take: Meta says Muse was built from the ground up for privacy and security. Patrick Wardle found that any local app or terminal command can alter undocumented settings regardless of its macOS permissions. One setting redirects voice transcription to an attacker’s server, which hands over the token controlling the Muse account. That ground floor appears to have a side door with no lock.

An attacker does not need a Mac malware stealer. A ClickFix-style paste is enough. Wardle asked Muse whether an unprivileged attacker could supply such a prompt. Muse replied that such an action is not possible.

Marcus Schuler

San Francisco

Editor-in-Chief and founder of Implicator.ai. Former ARD correspondent and senior broadcast journalist with 10+ years covering tech. Writes daily briefings on policy and market developments. Based in San Francisco. E-mail: editor@implicator.ai