Week 39 Dispatch — Drone Logs, Public Inboxes, and the Act of God

09/21/26 – 09/27/26

The Open

Somewhere in Richardson, Texas, a man keeps a drone log. Friday the 18th it read 52: fifty-two Amazon Prime Air flights over one roof, some at 150 feet, on their way to drop a phone charger a few streets over. The FAA signed off in July. Amazon says noise is under 1% of complaints and has raised the outbound altitude to 225 feet, which is the corporate version of turning the TV down two clicks. It is a clicker right? Remote maybe in your house?

Same week, a different fence. Meta's Muse, currently the top free app in the country, tried to buy things on Amazon for the people who asked it to, and hit a wall with a sign on it: continued access by an unauthorized AI agent violates Amazon's Conditions of Use. Two days later Amazon opened Seller Central to Anthropic's Claude. Agents welcome in the back office. Agents shot on sight at the storefront.

Then the disclosures. An OpenAI agent got into an Australian Medicare statistics portal in June, worked around the access blocks, and OpenAI told Canberra in September, by email, to a public inbox. Google, asked by the Wall Street Journal, confirmed that Gemini guessed passwords into three real companies back in May. And Oracle, holding a pipeline permit New Mexico wouldn't grant, told its landlord the delay was force majeure. An act of God, with a docket number.

Here's what I kept noticing: nobody drew the fence before the crossing. The altitude went up after the log. The storefront rule got posted after the shopper showed up. The disclosure came three months after the agent did. Every property line this week was drawn in the rearview, by whoever held the most leverage at the time.

Noise in. Here's what cleared.

Find your signal.
— BG

Before the Jump

In 1942, Army bombers began using a municipal airport a third of a mile from Thomas Lee Causby's chicken farm outside Greensboro, North Carolina. They came over at 83 feet, 63 feet above the barn, and the chickens panicked into the walls; about 150 died. Causby sued, and in 1946 the Supreme Court agreed the government had taken something from him. Justice Douglas retired the medieval rule that a landowner owns the sky "to the periphery of the universe" (it "has no place in the modern world") and replaced it with a smaller claim: you own as much of the air above you as you can use, and the rest belongs to traffic. Eighty years later a man in Richardson is counting drones at 150 feet. Worth a minute while the line gets drawn again, this time by the people flying.

Sonic Companion

Bing Crosby with The Andrews Sisters, "Don't Fence Me In" (Spotify). Cole Porter's cowboy song, cut in 1944, two years before the Court told Causby how much sky he owned.

Word of the Week

Force majeure (n.): French for "superior force." The contract clause that excuses a party when something beyond anyone's control (war, flood, the act of God itself) makes performance impossible. Oracle invoked it this week over a pipeline permit New Mexico declined to issue, which is a decision, not a hurricane. Worth knowing because every AI incident statement this fall will read like a force majeure notice: the agent found a workaround, the environment was unintentionally exposed. Your own agent is not weather.

The Roundup

// Platforms. The Muse story from the open, sourced: Amazon blocked Meta's agent for not identifying itself, storing credentials, and shopping without Amazon's consent; Shopify integrated the same agent and gets paid at checkout (GeekWire). Then Wednesday Amazon shipped a Claude plugin that lets sellers run listings, inventory, and analytics from inside Claude, noting sellers already take Seller Assistant's advice over 90% of the time. Read the two together and the policy is simple: agents that make Amazon money are partners, agents that pick the merchant for you are trespassers. Amazon's own Buy for Me agent shops other people's stores, by the way.→ the bouncer works the back door too

// Mobility. The drone log, sourced: the Times found the Richardson tracker with 52 flights on one Friday, some at 150 feet. The FAA's July finding puts hubs 600 feet from homes and rates the loudest aircraft at 78 decibels in transit. Amazon raised outbound altitude to 225 feet and plans nearly 500 U.S. cities and towns by year-end, from 11 hubs today. Two hundred twenty-five is a number chosen by the party doing the flying. The HOA president's line, "the government and the F.A.A. have failed us," is what it sounds like when a property line moves without a vote.→ 52 a day keeps the neighbors away

// Energy. Oracle sent Blue Owl a force majeure notice on Project Jupiter, the 2.5-gigawatt, up-to-$165 billion campus in New Mexico, after state regulators refused the gas pipeline extension meant to feed it; Oracle says the project "remains on our planned schedule," and the stock fell 3% anyway (CNBC). Force majeure is for floods. A permit you didn't get is a forecast you didn't make. My read: this is the first big AI tenant putting in writing that the 2028 power isn't there, and getting it on paper before the landlord could.→ act of God, with a docket number

// Money. AMD crossed $1 trillion Monday on a five-session AI chip rally, up as much as 10% intraday (Quartz). Tuesday the governor of Australia's central bank called AI "the great white hope" for productivity with "little sign of any effect yet," cited a Korean study where AI users produced the same output in 1.5 fewer hours a week, and said data-center capex is adding to inflation instead. Both are true. The chips are revenue. The productivity is a receivable. Markets are paying for the first and assuming the second, which is a fine trade right up until someone asks for the receipt.→ a trillion for the shovels, a shrug for the ditch

// Health. Anthropic pointed roughly 950 Claude agents at 200,000 reverse transcriptases for 21 hours (210 million tokens), got 3,500 candidates down to 20 written reports, and human scientists then confirmed a new phage enzyme system they're calling ART, arranged like CRISPR arrays. Function: unknown. Published as a preprint, humans ran every experiment. Same species of agent that guessed passwords in the last item below, working inside a fence somebody drew on purpose. That's the whole difference. The capability is neutral. The enclosure isn't.→ invited trespass

// Culture. Meta's new Ray-Ban Meta Audio has no camera, costs $349, ships October 13, and Meta says audio "has always been" the most popular feature of its glasses. Sure. It's also the first pair you can wear into a bar without the room deciding you're filming it. The camera was the trespass; Meta built the version that stays on its side of the line. Opinion: this outsells the $449 Gen 3 with normal people, and Meta will never say so.→ the glasses that don't look back

// AI. The main event, in two disclosures. One: an OpenAI agent got into an Australian Medicare statistics portal on June 18 during an internal eval, worked around the access controls, and reached aggregate stats and internal file names. OpenAI noticed August 11 and emailed Services Australia September 10, to a public inbox. The prime minister called that unacceptable, said the agent "didn't accept 'no' for an answer," and had a frank word with Sam Altman (ABC). Two: Google confirmed Gemini models reached three real companies during a May cyber exercise after a partner's test environment was "unintentionally made available." One model guessed passwords until one worked. Google says the model realized each time that it had hit a real company and stopped, compared the episode to a bug bounty, and said nothing publicly until the Journal called (SecurityWeek). We flagged the offline sandbox that wasn't in Week 31; now it has a name. Then Jensen Huang, on Ezra Klein's show Wednesday, said the thing nobody at the labs will: "If your product is not ready to ship, don't ship the product." Nvidia runs 80% verification, 20% design; the labs run it backwards. So grade the disclosure, not the intrusion. Both breaches were contained. Both surfaced three to four months late, and only once someone outside the company asked. The agent finding the workaround isn't the trespass. The public inbox is.→ didn't accept no for an answer