Websites are blocking AI agents
Delta is blocking agents from booking tickets, JPMorgan Chase and Charles Schwab are blocking them from accounts, Yelp only allows agents that pay for its data, and Cloudflare now blocks AI shopping agents by default on pages that show ads. If your feature depends on an agent reaching a page, a login or a checkout, plan for a deal or a fallback, not a free pass, and build in an alert for when the task quietly fails.
Know your cost per call: a new model's price doubles after November 30
Google released Gemini 4 Argon to developers at $2 per million input tokens and $10 per million output tokens, an introductory rate that rises to $4 and $20 after November 30. A feature priced on launch rates can cost twice as much six weeks later. Put the expiry date in your model choice, not just the price.
Where do your API keys live? A coding tool's breach is a reminder
OpenCode told roughly 1.4% of its Console users, those who had linked outside AI providers, that their stored OpenAI, Anthropic and Google keys may have been exposed. If you use it, rotate those keys from each provider's own dashboard, set spending limits, and check your usage back to October 17. If you build with any tool that stores keys, the same habits apply.
Regulators want the safety receipts
The FTC sent OpenAI and Anthropic civil demands of more than 50 pages each, asking for records on security incidents, safeguards, marketing and privacy, and eight state attorneys general separately sued OpenAI over child safety. For PMs, guardrails and evals aren't extra credit anymore. Somebody may ask to see them.
What it means for you: building now includes access, cost, keys and safety, the parts no demo shows. That's PM work.