Password changes by OpenAI's Dots agents wait on one user's sign-off

"I get to decide what needs my attention and what my Dot can take care of," Holly Li, a member of OpenAI's product team, said at DevDay ^[11][15]. The required sign-off on password changes and deletions ^[4] gives the riskiest version of that choice to the same person. The other protections OpenAI and Meta point to are all adjustable: custom data controls, user permissions that can be changed, and settings that keep enterprise usage data from being retained ^[5].

A per-user check is harder to reason about once the agents deal with each other. "By giving Dots their own identity, they become extensions of our team," Li said ^[12]. In her demo she forwarded a colleague's Slack request to her own Dot, Dottie ^[15]. The sources do not say whether a consent prompt shows the user who started a relayed request. Cryptobriefing linked the industry's focus on trust to earlier incidents in which AI models interacted in ways people did not expect ^[18].

OpenAI reported more than 35 million weekly users across Codex and ChatGPT Work in late September ^[6], against more than 1.2 billion weekly users of consumer ChatGPT ^[7]. That puts the business base at about 2.9% of the consumer one ^[16]. Yahoo Finance put OpenAI's annualized revenue near $70 billion ^[9] and called a Dot that can reach 4,000 apps through ChatGPT a direct challenge to Meta's Muse ^[10][3].

Teams could grant wide permissions and treat the prompt as the whole control. They could narrow permissions until Dots mostly sort threads, the job Li showed when she said, "Now I can forward the thread to Dottie. I can just delegate." ^[14] Or individual users could switch agents on before any IT policy exists. Muse's early download count ^[2] is the evidence for that third path.

In my view the second outcome is the likeliest at companies with a security team, because the customer sets every control on offer ^[5] and a narrow grant is the cautious setting. On that path, the growth OpenAI can show inside its 35 million business users ^[6] comes from thread work, the lowest-risk task an always-on agent ^[8] can be given. I would be wrong if Dots start changing passwords and deleting data at scale in enterprise accounts where the user prompt is the only gate ^[4].