What changed

A dated log of releases, retirements and research in computer use — every item with one source, and a plain statement of what it changed in the directory. Including, often enough, nothing.

15Items logged
10Primary sourced
8 OctoberMost recent

Subscribe by RSS — news and writing in one feed.

2026

Correction

We were listing an agent that had been dead for five months

Project Mariner appears to have shut down on 4 May 2026. It sat in this directory as a live research preview until today.

What it changed here: Project Mariner moved from Research preview to Superseded, and is flagged unconfirmed because no formal retirement notice exists. Its source label now says the vendor index no longer lists it.

Correction

Open Interpreter's repository is no longer Open Interpreter

The canonical repo is now a Rust harness based on Codex. The Python project continues as a community fork — under a different licence.

What it changed here: Open Interpreter's URL now points at the community fork, its licence is corrected from Apache-2.0 back to AGPL-3.0, and its description records the split.

Release

OpenAI gives each agent its own computer

Dots are persistent agents in ChatGPT. Each gets a cloud computer and browser of its own, and keeps working after you close the tab.

What it changed here: Dots was added to the directory as a new entry, flagged secondary because openai.com refuses automated access.

Release

Anthropic's newest models reject the old computer use tool outright

On Opus 5.5 and Sonnet 5.5, computer_20251124 returns a 400. The beta tool still works — just not on anything new.

What it changed here: Claude Computer Use keeps its GA stage; its profile now records that the older tool is rejected on the newest models.

Release

Meta Muse reaches the Mac and starts acting inside native apps

The Mac app organises files, fills forms and works in Messages, Calendar, Notes and mail — with permission, and with approval before destructive steps.

What it changed here: Meta Muse was added as a new entry, surface Desktop, flagged secondary. Its watch-out records the unresolved question of whether it runs locally or in a cloud VM.

Release

Computer use and browser use land on Google Cloud

Both toolsets reached Vertex the day after leaving beta, for all five supported Claude models.

What it changed here: Both Anthropic entries now record Google Cloud availability and the narrower coverage elsewhere.

Release

Anthropic takes computer use out of beta and splits off a browser tool

Computer use went GA as computer_toolset_20260801 with no beta header, and a separate browser use toolset launched the same day.

What it changed here: Claude Computer Use moved from Beta to GA in the directory, and Claude Browser Use was added as a new entry.

Retirement

OpenAI retires its consumer browser agents

Atlas stopped working on 9 August. ChatGPT agent was withdrawn in the same window. The capability did not disappear — it moved.

What it changed here: ChatGPT Agent moved from GA to Superseded, flagged as verified via secondary sources because help.openai.com refuses automated access. Operator's entry was rewritten to follow the lineage forward.

Infrastructure

Cloudflare ships a browser built for agents rather than people

Kitesurf drops tabs, themes and pixel-perfect rendering, runs in V8 isolates on Workers, and claims 3–7× less CPU and memory than Chromium.

What it changed here: Nothing. Kitesurf is a browser runtime, not an agent, and the directory lists agents.

Research

Prismata proposes least privilege for web agents

A confinement approach to cross-site prompt injection that constrains both what the agent sees and what it can do, with no per-site annotations.

What it changed here: Nothing directly. Recorded because it bears on the risk notes on every browser agent profile.

Release

OpenAI launches ChatGPT Work

An agent inside ChatGPT that takes an outcome rather than a task, gathers context across your apps, and returns finished sheets, slides, docs and web apps.

What it changed here: Nothing yet. ChatGPT Work is not listed, because its documented capability is producing deliverables rather than operating a screen. We will revisit if OpenAI documents it as driving a session directly.

Release

Gemini computer use reaches desktop and mobile, and stays in preview

Public preview support in Gemini 3.5 Flash added built-in browser, mobile and desktop environments, configurable safety policies and prompt injection detection.

What it changed here: Nothing this pass. This is the source behind the Both surface and the Preview stage already recorded against Gemini Computer Use.

Why this exists

This vocabulary moves fast enough that a directory without a changelog is a directory that is quietly wrong. Four of the nine corrections in our last full pass were to the stage field alone — the one readers most reasonably assume is current.

So every change to the data is logged here with its source and its date, including the items that changed nothing. A news feed that only carries launches is a press release. The interesting entries are the retirements, and the releases that turn out not to matter.