{
  "metadata": {
    "checked_date": "2026-10-11",
    "source_scope": "Official current pages and their linked docs only.",
    "independent_hands_on_test": false,
    "account_access_verified": false,
    "publication_policy": "Unsigned; preserve source citations and AI-content disclosure."
  },
  "unsigned": true,
  "prepared_with": "GPT-6.1 Sol",
  "sources": [
    {
      "id": "S01",
      "title": "Dots feature page",
      "url": "https://chatgpt.com/features/dots/",
      "checked_date": "2026-10-11",
      "notes": "Product introduction; texting described as coming next.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S02",
      "title": "Meet dots",
      "url": "https://learn.chatgpt.com/docs/dots",
      "checked_date": "2026-10-11",
      "notes": "Overview, current plan/region rollout, delegated execution and usage. Full official Markdown retrieved read-only because web extraction showed extensive navigation.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S03",
      "title": "Dots tasks and memory",
      "url": "https://learn.chatgpt.com/docs/dots/tasks-and-memory",
      "checked_date": "2026-10-11",
      "notes": "Responsibilities, events, schedules, delegated tasks, saved notes and completion limits.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S04",
      "title": "Control your dot",
      "url": "https://learn.chatgpt.com/docs/dots/controls",
      "checked_date": "2026-10-11",
      "notes": "Action review, custom-rule limits, data settings, stopping and deletion.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S05",
      "title": "Dots computers and apps",
      "url": "https://learn.chatgpt.com/docs/dots/computers-and-apps",
      "checked_date": "2026-10-11",
      "notes": "Cloud/local execution, sessions, credentials, plugins and separate connection scopes.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S06",
      "title": "Message your dot",
      "url": "https://learn.chatgpt.com/docs/dots/channels",
      "checked_date": "2026-10-11",
      "notes": "Current messaging channels; future texting and agent-initiated calls.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S07",
      "title": "Manage dots permissions and capabilities",
      "url": "https://learn.chatgpt.com/docs/enterprise/dots-admin-guide",
      "checked_date": "2026-10-11",
      "notes": "Workspace access, app controls, oversight and data boundaries.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S08",
      "title": "Grok Bot product page",
      "url": "https://x.ai/bot",
      "checked_date": "2026-10-11",
      "notes": "Current eligibility, persistent shared computer, plan bundles and privacy claims.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S09",
      "title": "Grok Bot 101",
      "url": "https://x.ai/bot/guides/grok-bot-101",
      "checked_date": "2026-10-11",
      "notes": "September 11, 2026 official DevRel guide: apps, triggers, shared logins, reviewer and specialist handoffs.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S10",
      "title": "Grok Bot changelog",
      "url": "https://x.ai/changelog/bot",
      "checked_date": "2026-10-11",
      "notes": "Latest listed release v0.68.1, October 7, 2026. Versioned stop, recovery, routine, delivery and audit-log changes.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S11",
      "title": "Claude Code self-hosted environments",
      "url": "https://code.claude.com/docs/en/self-hosted-environments",
      "checked_date": "2026-10-11",
      "notes": "Public beta status, execution/control planes, ownership, lifecycle, network and data scope. User URL normalized by removing encoded trailing nonbreaking space.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S12",
      "title": "Deploy self-hosted environments",
      "url": "https://code.claude.com/docs/en/self-hosted-environments-deploy",
      "checked_date": "2026-10-11",
      "notes": "Operator responsibilities, isolation, access, egress, shutdown, fresh-clone resumption and known issues.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S13",
      "title": "Verify session identity",
      "url": "https://code.claude.com/docs/en/self-hosted-environments-identity",
      "checked_date": "2026-10-11",
      "notes": "Creation identity versus process authority, token lifetime, no revocation feed and scoped credentials.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S14",
      "title": "Self-hosted environments reference",
      "url": "https://code.claude.com/docs/en/self-hosted-environments-reference",
      "checked_date": "2026-10-11",
      "notes": "Health endpoint and lifecycle counter definitions; observability does not prove task success.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S15",
      "title": "Meta introduces Muse",
      "url": "https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/",
      "checked_date": "2026-10-11",
      "notes": "Published September 8, 2026; page also displays a September 30 update. US rollout, clients, Link, future Shop Pay/1Password/glasses/ConfidentialVM.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S16",
      "title": "How Meta built safety into Muse",
      "url": "https://research.meta.ai/blog/security-and-safety-for-ai-agents-our-approach-with-muse",
      "checked_date": "2026-10-11",
      "notes": "September 8, 2026 technical launch architecture. Linked official security.muse.ai redirects here. Source claims, not independent security verification.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    },
    {
      "id": "S17",
      "title": "How Meta designed Muse",
      "url": "https://introducing.muse.ai/",
      "checked_date": "2026-10-11",
      "notes": "September 2026 product design account: proactive multiple tasks, goal-oriented interaction; provider-written examples are not benchmark evidence.",
      "source_type": "primary official documentation or release",
      "verification": "Page contents retrieved and inspected; no account-level access or hands-on operation tested."
    }
  ],
  "claims": [
    {
      "id": "PA01",
      "product": "all",
      "topic": "Different product layers",
      "evidence": "Dots, Grok Bot and Muse offer a managed assistant that owns responsibilities and delegates work. Claude self-hosted environments route Claude Code cloud sessions onto operator-controlled compute; they are not a standalone consumer personal assistant.",
      "source_ids": [
        "S02",
        "S08",
        "S11",
        "S15"
      ],
      "source_sections": "Overview / How self-hosted environments work",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Layer comparison is editorial synthesis, not a vendor performance ranking.",
      "independent_test": false
    },
    {
      "id": "PA02",
      "product": "dots",
      "topic": "Current access and future channels",
      "evidence": "Dots roll out gradually: Pro 100/200/500, over 18 outside EEA/UK/Switzerland; Business Premium worldwide; Enterprise worldwide, off by default pending admin enablement. ChatGPT mobile/desktop/desktop-browser plus Slack/Teams and user-started calls documented. Texting and dot-initiated calls are future.",
      "source_ids": [
        "S02",
        "S06"
      ],
      "source_sections": "Access / ChatGPT and voice / Texting",
      "checked_date": "2026-10-11",
      "stage": "gradual rollout / preview constraints",
      "limits": "Eligible plan does not establish that this user has access; mobile web unsupported. Plan names are not independently verified current dollar prices.",
      "independent_test": false
    },
    {
      "id": "PA03",
      "product": "dots",
      "topic": "Persistent context is selective",
      "evidence": "Relevant ChatGPT memory and dot-specific notes carry across channels; notes are not complete transcripts. Changing saved-memory settings need not change existing notes. A delegated task gets work-specific context, not every prior conversation.",
      "source_ids": [
        "S03"
      ],
      "source_sections": "Assigned work / Context and memory",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Continuity does not authorize disclosure to another audience; no perfect recall or context completeness guarantee.",
      "independent_test": false
    },
    {
      "id": "PA04",
      "product": "dots",
      "topic": "Separate stopping operations",
      "evidence": "Pause stops the current main task; delegated tasks must be stopped in Activity and schedules disabled/deleted separately. Stopping work does not undo completed actions.",
      "source_ids": [
        "S04"
      ],
      "source_sections": "Stop work",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Do not describe Pause as a global kill switch; docs do not give a maximum cancellation latency.",
      "independent_test": false
    },
    {
      "id": "PA05",
      "product": "dots",
      "topic": "Connection, authorization and instruction are distinct",
      "evidence": "Cloud browser has independent logins. Local computer access is optional and needs device online with ChatGPT open. Messaging, plugins and local-computer grants are separate. Custom rules are instructions that can be mistaken, do not grant app access or override built-in safety. Auto-review evaluates consequential actions. ChatGPT data controls apply to eligible conversations and tasks; OpenAI does not train directly on proactive research or private notes, but those controls apply if information enters an eligible conversation or task.",
      "source_ids": [
        "S04",
        "S05"
      ],
      "source_sections": "Custom rules / Connect your computer / Connect apps / Manage data settings",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "No claim that natural-language rules alone enforce perfect isolation. An active session and saved login are different; saved-login reuse needs confirmation.",
      "independent_test": false
    },
    {
      "id": "PA06",
      "product": "dots",
      "topic": "Triggers and completion limits",
      "evidence": "Schedules require saved timing, timezone and destination. Supported connected-service events can trigger work; adding a channel alone does not start monitoring. A completed run alone does not confirm requested result achieved or delivered. Proactive research is read-only and cannot modify apps or control computers.",
      "source_ids": [
        "S03"
      ],
      "source_sections": "Recurring tasks / Event monitoring / Assigned work / Proactive research",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Event support varies by connection; no universal event SLA or exactly-once guarantee documented.",
      "independent_test": false
    },
    {
      "id": "PA07",
      "product": "grok_bot",
      "topic": "Current managed-agent offering",
      "evidence": "Grok Bot is documented available for eligible Cursor Pro/Pro+/Ultra, SuperGrok/Plus/Heavy, Cursor Teams and Enterprise; desktop macOS/Windows and iOS. Personal Bots use their own persistent cloud computer, available with laptop closed.",
      "source_ids": [
        "S08"
      ],
      "source_sections": "FAQs / Pricing",
      "checked_date": "2026-10-11",
      "stage": "available on eligible subscriptions",
      "limits": "Official landing page, not account verification. Included weekly usage plus token-cost additional usage; exact quota and per-token schedule not established here.",
      "independent_test": false
    },
    {
      "id": "PA08",
      "product": "grok_bot",
      "topic": "Specialists share a user security domain",
      "evidence": "Personal Bots for the same user share one persistent machine, files, browser and logins; isolation is per user, not per Bot. Logging in with one Bot makes that website reachable by the others. Reviewer/rules still apply.",
      "source_ids": [
        "S08",
        "S09"
      ],
      "source_sections": "Do Bots share one computer? / Permissions and a shared computer",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Do not equate creating specialist personas with separate credentials or independent machines; Team Bot isolation is not generalized from this personal-Bot statement.",
      "independent_test": false
    },
    {
      "id": "PA09",
      "product": "grok_bot",
      "topic": "Task triggers and delegation",
      "evidence": "Chat, schedules/app events and other Bots can start work. Bots can watch Slack threads/GitHub PRs and hand context to specialized Cursor cloud coding agents. They use Cursor MCP servers/plugins/skills, with multiple connected accounts possible.",
      "source_ids": [
        "S09"
      ],
      "source_sections": "Using Grok Bot / Anatomy / Writing code",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Official guide’s workflow examples are not comparative completion measurements; support depends on connection and grants.",
      "independent_test": false
    },
    {
      "id": "PA10",
      "product": "grok_bot",
      "topic": "Versioned cancellation is not rollback",
      "evidence": "September 17 v0.56.0 says telling a Bot to stop also stops delegated Bots and started CloudAgents; October 7 v0.68.1 says Stop/new message ends an unresponsive step within about 30 seconds. The same October 7 entry says an email Send cut off by Stop still goes out. Routines have separate pause/resume/delete controls.",
      "source_ids": [
        "S10"
      ],
      "source_sections": "v0.56.0 / v0.68.1 / v0.68.0 / v0.52.0",
      "checked_date": "2026-10-11",
      "stage": "documented in dated releases",
      "limits": "Release-note claims, not measured SLAs. Do not infer Stop cancels all future routines or recalls an email already sent.",
      "independent_test": false
    },
    {
      "id": "PA11",
      "product": "grok_bot",
      "topic": "Reviewer and enterprise observability",
      "evidence": "Separate reviewer can allow/block/escalate actions using natural-language rules. Landing page says cloud encryption in transit/at rest with training opt-out. Versioned Enterprise Action Recording/audit logs include tools, handoffs and other activity, with redaction.",
      "source_ids": [
        "S08",
        "S09",
        "S10"
      ],
      "source_sections": "Privacy / Permissions / v0.58.0 / v0.57.0",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Encryption at rest does not establish provider-inaccessible data. Enterprise audit claims are not assumed on every consumer plan.",
      "independent_test": false
    },
    {
      "id": "PA12",
      "product": "claude_self_hosted",
      "topic": "Execution moves; control plane does not",
      "evidence": "Public beta for Team/Enterprise, off by default, requires cloud sessions. Runs repository checkout/build/tool execution inside operator network. Queue/orchestration/interface and session transcript remain Anthropic-hosted; conversation/tool results go to api.anthropic.com even when inference is Bedrock/Google.",
      "source_ids": [
        "S11"
      ],
      "source_sections": "Availability / What stays on your infrastructure",
      "checked_date": "2026-10-11",
      "stage": "public beta / off by default",
      "limits": "Not fully on-prem inference or data residency guarantee; unavailable with ZDR/HIPAA configurations; some product surfaces excluded.",
      "independent_test": false
    },
    {
      "id": "PA13",
      "product": "claude_self_hosted",
      "topic": "Operator owns isolation and dispatch posture",
      "evidence": "Runners lock to one session owner, not necessarily one human for shared service/ClaudeTag identity. Production guidance recommends fresh session containers and narrowly scoped credentials; any org member can dispatch to environments, with no per-environment dispatch ACL. Network boundaries are operator-enforced.",
      "source_ids": [
        "S11",
        "S12"
      ],
      "source_sections": "Key concepts / Harden your deployment",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Self-hosting alone does not create safe identity/permissions. Avoid turning operator choices into shipped defaults or giving an offensive bypass recipe.",
      "independent_test": false
    },
    {
      "id": "PA14",
      "product": "claude_self_hosted",
      "topic": "Resumption can preserve conversation and lose work",
      "evidence": "If polling stops, lease expires after about 60 seconds and session requeues within minutes. Resumed fresh runner clones starting branch; unpushed work is lost. Optional best-effort push-on-release can preserve committed work; uncommitted changes still lost.",
      "source_ids": [
        "S11",
        "S12"
      ],
      "source_sections": "Session lifecycle / Additional limitations",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "No exactly-once external effects or complete checkpoint preservation guaranteed. Transcript continuity and working-tree durability differ.",
      "independent_test": false
    },
    {
      "id": "PA15",
      "product": "claude_self_hosted",
      "topic": "Alive and completed are lifecycle states",
      "evidence": "Runner health HTTP 200 reports live process regardless of poll-loop health. completed counter means clean lifecycle end, including idle/retire/limit release, archive/delete, startup timeout or server deassignment; it does not certify requested output.",
      "source_ids": [
        "S14"
      ],
      "source_sections": "Health endpoint / Session lifecycle counter semantics",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Use artifact/test/receipt verification separately. Do not read a completed session counter as task objective success rate.",
      "independent_test": false
    },
    {
      "id": "PA16",
      "product": "claude_self_hosted",
      "topic": "Identity is not blanket authority",
      "evidence": "Session token attests session/environment and creator identity, not which process presents it. Any session code/tool can read it. Offline verification stays valid until expiry without a revocation feed; derived rights should be scoped to one task/session.",
      "source_ids": [
        "S13"
      ],
      "source_sections": "What token proves / Scope derived credentials",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Default 4-hour/max 8-hour token lifetime is credential lifetime, not task-runtime limit. Do not grant every creator permission merely from a valid token.",
      "independent_test": false
    },
    {
      "id": "PA17",
      "product": "muse",
      "topic": "Current product and forthcoming additions",
      "evidence": "Muse is described rolling out in US on iOS/Android/web and WhatsApp communication. Free for most needs with paid subscriptions for more, no prices supplied in launch article. Link checkout available; Shop Pay, 1Password, AI glasses and ConfidentialVM described future.",
      "source_ids": [
        "S15"
      ],
      "source_sections": "How it works / Looking ahead",
      "checked_date": "2026-10-11",
      "stage": "US rollout / some announced additions",
      "limits": "Do not label announced features as shipped, or assume a user/account is eligible. News page dated September 8 with a September 30 update.",
      "independent_test": false
    },
    {
      "id": "PA18",
      "product": "muse",
      "topic": "A persistent VM has an outside permission authority",
      "evidence": "Muse works inside runtime cell on dedicated user VM; Sentinel outside cell authorizes connector actions and network egress. Scoped approvals travel through client UI directly to Sentinel, not through agent conversation. Credentials stored separately and inserted at authorized boundary.",
      "source_ids": [
        "S16"
      ],
      "source_sections": "Muse Secure VM / Sentinel / Human in the loop",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Provider architecture claim, not independent proof of flawless enforcement. Main agent root-in-cell is not host root; approvals and connector access remain distinct.",
      "independent_test": false
    },
    {
      "id": "PA19",
      "product": "muse",
      "topic": "Persistent state and explicit user control",
      "evidence": "Dedicated VM stores files and memory, supports concurrent subagents/crons and browser takeover; VM data backed up continuously for restore. People can inspect/edit/download files and memory, and ask it to forget. Sensitive sends/purchases request approval.",
      "source_ids": [
        "S15",
        "S16"
      ],
      "source_sections": "How it works / Browser / Policy around data",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Backup restore is not automatic reversal of external side effects; no measured recovery/completion SLA provided.",
      "independent_test": false
    },
    {
      "id": "PA20",
      "product": "muse",
      "topic": "Secure VM is not yet provider-inaccessible VM",
      "evidence": "Current SecureVM restricts staff access by operational policy but does not prevent Meta accessing data to operate/support/secure service. ConfidentialVM is announced for later in 2026 with trusted testers/external auditors, intended cryptographic provider exclusion.",
      "source_ids": [
        "S16"
      ],
      "source_sections": "Coming soon: Confidential VM",
      "checked_date": "2026-10-11",
      "stage": "current SecureVM / future ConfidentialVM",
      "limits": "Do not collapse current encrypted/isolation design into future provider-cannot-access guarantee. No delivered confidentialVM availability inferred.",
      "independent_test": false
    },
    {
      "id": "PA21",
      "product": "muse",
      "topic": "Training and ad boundary claims need exact scope",
      "evidence": "Trajectories can be sanitized for training by default, with opt-out. Muse conversation/VM data not shared with Meta ad systems; actions visiting merchant sites can still indirectly influence advertising through ordinary web activity.",
      "source_ids": [
        "S16"
      ],
      "source_sections": "Our policy around data",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "No “all data never influences ads” or “no training” default claim. Inference/telemetry send limited data outside VM.",
      "independent_test": false
    },
    {
      "id": "PA22",
      "product": "all",
      "topic": "Test outcome contract rather than marketing adjectives",
      "evidence": "Use explicit trigger, input version, authority, execution branch, committed artifact, stop state and delivery receipt. Availability, remembered context and lifecycle completion are separate from verified objective success.",
      "source_ids": [
        "S03",
        "S10",
        "S12",
        "S14"
      ],
      "source_sections": "Completion warning / release notes / recovery / lifecycle counters",
      "checked_date": "2026-10-11",
      "stage": "documented current",
      "limits": "Editorial inference and proposed test protocol, not a benchmark that was run.",
      "independent_test": false
    }
  ]
}