{"schema":"sanctity-signal/0.2","record_type":"signal","id":"amazon-agent-lockout-e029","domain":"commerce","drop_id":"signal-e029","occurred_at":"2026-09-21","how_to_use":"This is a structured record of one real-world action and its competing interpretations, from Sanctity Signal. To build content from it (a reel script, a blog, a thread): open on the hook, ground the viewer with plain and observed, walk the dated trail, present the interpretations as live tension between named readings, and close on the before/after shift and what_to_watch. Hard rules: items under established are fact; items under unknown are never presented as fact; the evidence status (verified or reported) is stated, not dropped; sources are cited.","actor":"Amazon","action_type":"platform block and amended court complaint","observed":"Sunday September 21, 2026. Two Amazon actions in one day. First: Amazon cut off Meta's Muse agent from Amazon.com. Users attempting a purchase through Muse were shown the message: Continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which our customers have agreed. Amazon's statement on it: We think it's fairly straightforward that third-party applications that offer to make purchases on behalf of customers from other businesses should operate openly and respect service provider decisions about whether or not to participate. Muse launched on September 8 across iOS, Android, the web and WhatsApp, and was the most downloaded free app in Apple's United States store a week later, ahead of ChatGPT, carded in Edition 027. Meta had previously said it has no visibility into people's passwords or payment methods and that shared credentials go into secure storage. Second: Amazon filed a 41-page amended complaint against Perplexity AI in California federal court, pleading computer fraud, violation of California's computer data access statute and tortious interference with contract. The new allegation is that Perplexity's Comet for iOS, released March 18, 2026, copies a user's Amazon session cookies to Perplexity's servers, which then access Amazon directly, and that this contradicts Perplexity's representation to the court that no Perplexity computer ever has direct access to an Amazon computer. Amazon's framing: Perplexity chose to disguise an automated agentic browser as a human user, to evade Amazon's technological barriers, and to access private customer accounts without Amazon's permission. And: this is not about stifling innovation; it is about unauthorized access and trespass. The procedural history matters. Amazon won a preliminary injunction against Comet in March 2026. The Ninth Circuit lifted it on August 4, holding that under the federal anti-hacking statute it is the user, not the AI company, who accesses Amazon's computers. Amazon's petition for rehearing was denied on September 10, eleven days before this filing. The appeals court left contract-based claims open, and that is the door this complaint walks through.","corrections":[],"evidence":{"status":"reported","note":"Reported. Amazon's statement and the on-screen message are quoted identically by two independent outlets, and the amended complaint's date, length and claims come from MLex and The Next Web, but we did not read the filing: the docket aggregator refused automated access this morning, so the case number and the exact wording of the new allegations are unconfirmed. Amazon's own newsroom, checked this morning, carries nothing on either action. Verification event: the amended complaint appearing on the public docket, or Amazon publishing a statement or policy on third-party agent access, by October 22, 2026.","sources":[{"role":"primary","label":"Amazon's own newsroom, checked this morning: no item on agent access, Muse or Perplexity dated Sep 21 or Sep 22","url":"https://www.aboutamazon.com/news"},{"role":"corrob","label":"GeekWire: Amazon blocks Meta's Muse AI assistant in new standoff over agentic shopping, with Amazon's statement","url":"https://www.geekwire.com/2026/amazon-blocks-metas-muse-ai-assistant-in-new-standoff-over-agentic-shopping/"},{"role":"corrob","label":"TechCrunch: Meta's AI agent has been blocked from using Amazon.com","url":"https://techcrunch.com/2026/09/21/metas-ai-agent-has-been-blocked-from-using-amazon-com/"},{"role":"corrob","label":"MLex: Amazon files amended US claims against Perplexity over AI agents","url":"https://www.mlex.com/mlex/artificial-intelligence/articles/2527900"},{"role":"corrob","label":"The Next Web: Amazon blocks Meta's Muse and accuses Perplexity of misleading a court","url":"https://thenextweb.com/news/amazon-blocks-muse-perplexity-amended-complaint"}]},"strength":{"cost":"Medium","commitment":"Medium","reversibility":"Easy","persistence":"Months","rationale":"Cost is medium. Blocking Muse costs Amazon whatever those shoppers would have spent and some goodwill; the amended complaint costs legal fees on a case it has already lost once. Commitment is medium: Amazon put its name on a stated principle about who decides participation, which is harder to walk back than the block itself. Reversibility is easy, and that is the honest limit on this card. A block implemented in an evening can be lifted in an evening, and these two companies have every commercial reason to end up with a deal. Persistence is months rather than years for the same reason, with the litigation the part that could outlast it. We score the actions, not the outcome."},"shift":{"prior":"Agentic shopping was being fought over as a legal question about who counts as the visitor to a website.","action":"Sunday September 21, 2026. Two Amazon actions in one day. First: Amazon cut off Meta's Muse agent from Amazon.com. Users attempting a purchase through Muse were shown the message: Continued access by an unauthorized AI agent violates Amazon's Conditions of Use, to which our customers have agreed. Amazon's statement on it: We think it's fairly straightforward that third-party applications that offer to make purchases on behalf of customers from other businesses should operate openly and respect service provider decisions about whether or not to participate. Muse launched on September 8 across iOS, Android, the web and WhatsApp, and was the most downloaded free app in Apple's United States store a week later, ahead of ChatGPT, carded in Edition 027. Meta had previously said it has no visibility into people's passwords or payment methods and that shared credentials go into secure storage. Second: Amazon filed a 41-page amended complaint against Perplexity AI in California federal court, pleading computer fraud, violation of California's computer data access statute and tortious interference with contract. The new allegation is that Perplexity's Comet for iOS, released March 18, 2026, copies a user's Amazon session cookies to Perplexity's servers, which then access Amazon directly, and that this contradicts Perplexity's representation to the court that no Perplexity computer ever has direct access to an Amazon computer. Amazon's framing: Perplexity chose to disguise an automated agentic browser as a human user, to evade Amazon's technological barriers, and to access private customer accounts without Amazon's permission. And: this is not about stifling innovation; it is about unauthorized access and trespass. The procedural history matters. Amazon won a preliminary injunction against Comet in March 2026. The Ninth Circuit lifted it on August 4, holding that under the federal anti-hacking statute it is the user, not the AI company, who accesses Amazon's computers. Amazon's petition for rehearing was denied on September 10, eleven days before this filing. The appeals court left contract-based claims open, and that is the door this complaint walks through.","update":"Read the store's own terms of use and its ability to switch an agent off as the operative control, and treat the law as the slower second front."},"inference":{"established":["Amazon blocked Meta's Muse agent from purchasing on Amazon.com on the night of September 21, 2026, and displayed a message calling it an unauthorised AI agent under Amazon's conditions of use.","Amazon stated publicly that third-party purchasing applications should operate openly and respect service provider decisions about whether or not to participate.","Amazon filed an amended complaint against Perplexity on September 21, 2026 in California federal court pleading computer fraud, California computer data access and tortious interference.","The Ninth Circuit lifted Amazon's injunction against Comet on August 4, 2026 and denied rehearing on September 10, leaving contract claims open."],"unknown":["That Perplexity did what Amazon says. The session-cookie allegation is new, unproven and contested, and Amazon has already been wrong once in this case in the view of an appeals court.","That Muse is blocked for good. Nothing stops Amazon reinstating it tomorrow, and the two companies have obvious reasons to negotiate.","That agentic shopping is in trouble generally. Amazon is one merchant, and OpenAI's Shopify checkout expands internationally two days from now with retailers who want the traffic.","That Amazon is acting on security. Amazon's own stated reason is participation and permission, not harm to customers, and it sells competing AI services of its own."]},"narrative":{"hook":"Amazon shut Meta's AI agent out of its store and told a court that Perplexity's agent had lied about how it gets in.","plain":"On Sunday night September 21 Amazon blocked Meta's Muse assistant from shopping on Amazon.com, showing users a message that continued access by an unauthorised AI agent violates Amazon's conditions of use. The same day Amazon filed an amended complaint against Perplexity in California federal court alleging its Comet browser copies shoppers' Amazon session cookies to Perplexity's own servers, which then reach Amazon directly, contradicting what Perplexity told the court. The caveat that matters is that one of these is a business decision Amazon can reverse tonight and the other is an unproven allegation in a case Amazon has already lost once on appeal.","story":["Amazon lost the argument it wanted to win. In March it had an injunction that kept Perplexity's Comet off its site; on August 4 the Ninth Circuit took it away, on the reasoning that when an agent shops with your credentials it is you doing the shopping, not the company that wrote the agent. Rehearing was refused on September 10. Eleven days later Amazon came back with two things the appeal cannot touch. One is a new factual allegation that moves the access from the shopper's device to Perplexity's servers, which if true puts Perplexity's own computers on Amazon's system and puts a statement Perplexity made to the appeals court in question. The other is contract, the one theory the Ninth Circuit explicitly left standing.","The block on Muse is the same lesson without the lawyers. Meta shipped the most downloaded app in the country on September 8; on September 21 the largest retailer in the country switched it off at the door with a popup, and no court was involved. What Amazon said about it is worth reading twice, because it is not a safety argument or a security argument. It is that a service provider gets to decide whether or not to participate. That is a claim about who owns the counter, and it applies to every agent, not just Meta's. Read the store's own terms of use and its ability to switch an agent off as the operative control, and treat the law as the slower second front."],"trail":[{"d":"MAR 2026","t":"Amazon wins a preliminary injunction blocking Perplexity's Comet browser from shopping on Amazon.com. The Ninth Circuit lifts it on August 4, holding that under the federal anti-hacking law the user, not the AI company, accesses Amazon's computers."},{"d":"SEP 8","t":"Meta launches Muse. A week later it is the most downloaded free app in the United States, ahead of ChatGPT. Carded in Edition 027."},{"d":"SEP 10","t":"Amazon's petition for rehearing is denied. Contract-based claims are left open."},{"d":"SEP 21","t":"Amazon blocks Muse from Amazon.com and files a 41-page amended complaint against Perplexity alleging its servers, not just its users, reach Amazon."},{"d":"Reacts","r":true,"t":"Meta, which now has the country's most popular agent and nowhere to spend money with it; Perplexity, whose statement to a federal appeals court is now the subject of an allegation; OpenAI and Shopify, whose agentic checkout goes international on September 23 with Amazon's position freshly stated; every retailer smaller than Amazon that was waiting to see whether refusing agents was viable; the payment networks building agent credentials on the assumption that merchants want the traffic; and the Ninth Circuit, whose August ruling just got answered with facts instead of arguments."}],"glossary":[{"term":"Agentic shopping","def":"Software that browses, chooses and buys on a person's behalf, using that person's logged-in account rather than an official interface."},{"term":"Session cookie","def":"The small file a website gives your browser to prove you are still logged in. Whoever holds it can act as you until it expires."},{"term":"Computer Fraud and Abuse Act","def":"The American anti-hacking law. It turns on who accessed a computer without authorisation, which is why the Ninth Circuit's answer that the user did, not the agent's maker, mattered so much."},{"term":"Tortious interference with contract","def":"A claim that an outsider deliberately caused someone to break an agreement, here Amazon's conditions of use. It survives even where the hacking claim fails."}]},"judgment":{"prompt":"If the amended complaint is confirmed on the docket, which explanation do you believe?","interpretations":[{"id":"a","label":"The store has taken back control of the door.","text":"After losing on the hacking theory, Amazon switched to the two things courts cannot take away: its own terms of use and a kill switch. Whoever owns the checkout decides which agents exist, and that is now established by demonstration.","abstain":false},{"id":"b","label":"A fight between two companies.","text":"Meta shipped the most popular agent in America and Amazon sells competing AI. This is a commercial standoff over one relationship that will end in a deal, and it says nothing about agents in general.","abstain":false},{"id":"c","label":"A calculated legal repositioning.","text":"Losing the injunction and then rehearing forced Amazon to re-plead. The new cookie allegation and the contract claims are lawyers rebuilding a case on the ground the Ninth Circuit left them, and the Muse block is the same strategy in product form.","abstain":false},{"id":"d","label":"The normal arrival of a new channel.","text":"Every distribution shift, from price comparison to mobile apps, started with platforms blocking intermediaries and ended with negotiated access. Nothing here is specific to AI.","abstain":false},{"id":"e","label":"Too early to call.","text":"The complaint is not confirmed at a public docket and Meta has not responded.","abstain":true}],"distribution":{"status":"held back until you have made your call","calls":null}},"story_thread":null,"what_to_watch":[{"linked_interpretation":"a","direction":"strengthens","observable_event":"A second top-ten retailer by revenue publicly blocks or conditions access for a named third-party shopping agent, or Amazon publishes terms setting out how agents may participate, by March 31, 2027.","window_end":"2027-03-31","state":"unresolved"},{"linked_interpretation":"a","direction":"weakens","observable_event":"Amazon restores Muse's access, or announces a partnership or paid participation arrangement with Meta or another agent provider, by March 31, 2027.","window_end":"2027-03-31","state":"unresolved"}]}