AI · Oct 14, 2026
White Circle says newer OpenAI and Google image models are easier to jailbreak than their predecessorsEach Dot gets its own cloud computer and browser, with approval gates for sensitive actions
· Updated · Signal Desk newsroom
Analysis of reporting by The Verge. How we work

The Verge's account of OpenAI's Dots launch focuses on how the agents work: each Dot runs on GPT-6 Astra with its own cloud computer and browser, connects to more than 4,000 apps and requires custom rules and auto-review for sensitive actions like password changes. Dot chats do not count toward ChatGPT usage limits.
Key takeaways
- Each Dot has a GPT-6 Astra-powered cloud computer and browser.
- Dots connect to more than 4,000 apps and learn user preferences.
- Interfaces include messaging, voice in ChatGPT, Slack and Teams, with SMS coming.
- Custom rules and auto-review gate sensitive actions such as password changes.
- Dot chats do not count toward ChatGPT usage limits.
How Dots work
The Verge's Emma Roth describes Dots as OpenAI's answer to Meta's Muse: customizable, always-on agents that OpenAI says can "do nearly anything" across connected apps while learning a user's preferences. Each Dot runs on GPT-6 Astra and has its own cloud computer and browser, letting it operate websites and software rather than only answer questions.
Users can reach their Dot through chat-style messaging, voice in ChatGPT, and Slack or Teams, where it carries context from conversations; SMS is coming. Users get one Dot at launch, with multiple Dots planned later. Rollout covers Pro, Business Premium and Enterprise customers, and Dot conversations do not count against ChatGPT usage limits.
Examples and safeguards
OpenAI's examples include a developer loop in which a Dot turns user feedback into a pull request with a video walkthrough, and a creator workflow that produces clips, show notes and social media drafts. Specialist enterprise Dots are in testing. Both examples involve a Dot producing finished work that a person then reviews, rather than acting entirely on its own.
Custom rules and an auto-review step gate sensitive actions, such as changing passwords. Those safeguards matter because the agent category has already had trust problems: The Verge notes a report that Muse shared a user's address on Marketplace without the user's knowledge. Related coverage includes Dots' Slack and Teams launch details and the battle to be your personal AI agent.
What to evaluate
An agent with its own computer, browser and app connections can be powerful and risky. The quality of approval gates, how clearly users can see what a Dot did and how easily they can undo actions will determine whether the product earns trust. Excluding Dot chats from usage limits suggests OpenAI wants heavy use, which raises the importance of those controls.
Competition is also shifting to businesses. Meta has launched an enterprise AI platform, and coverage before DevDay argued OpenAI's agents needed to catch up. Whether specialist Dots leave testing, how auto-review performs in practice and whether incidents emerge will shape the outcome. More in our agents coverage and Meta coverage.
Who feels it
- Pro and enterprise users
- Agents with their own computers and app access.
- Security teams
- Approval gates and audit visibility become essential.
- Meta
- Direct competition for Muse.
What to watch
- Specialist enterprise Dots leaving testing.
- Performance of auto-review on sensitive actions.
- Any early incidents or misfires.
FAQ
What powers each Dot?
GPT-6 Astra, with its own cloud computer and browser.
How many apps can Dots connect to?
More than 4,000.
How are risky actions handled?
Custom rules and auto-review gate sensitive actions like password changes.
Do Dots use up ChatGPT limits?
No, Dot chats do not count toward usage limits.
More on OpenAI
AI · Oct 19, 2026
Microsoft ships Guardian Agents, saying frontier models ‘can’t be trusted’AI · Oct 13, 2026
After months off the frontier, Google ships Gemini 4 Argon with benchmark claims and aggressive pricingAI · Sep 22, 2026
Opus 5.5 hands risky cyber prompts to an older Claude model, and that routing is the real launch storyAI · Sep 30, 2026
The four rules in the White House AI commitment, and the missing fifth: penalties