The value in AI agents (programs that can carry out tasks on their own) is settling around whoever owns the context. A federal appeals court told an AI developer that copying a publisher's editorial work to train a competing product was not fair use, and it called the market for licensing that data rapidly developing. Meta, Sierra, Walmart, and others published an open standard for how a customer's AI agent identifies itself to a business. SAP agreed to buy the map of who does what work that will guide its HR agents, and Mistral is promising an AI model that a bank can run on its own machines. Editorial content, customer identity, workforce information, and the AI model itself are each becoming an asset to price, protect, and keep portable.
On September 29, the Third Circuit became the first federal appeals court to decide whether using copyrighted material to train an AI system is fair use (a legal defense that allows some copying without permission), affirming Thomson Reuters' win against the former legal-research company Ross Intelligence.
Ross had hired an outside firm to prepare roughly 25,000 training documents built from Westlaw headnotes, the editorial summaries of points of law, to build a competing search tool. The court held the headnotes were original enough to be copyrighted, with "some creative spark" in what editors chose to include and how they expressed it. Ballard Spahr A federal judge quoted by Reuters said, "Ross took the headnotes to make it easier to develop a competing legal research tool," and so "Ross's use is not transformative." Thomson Reuters, the parent of Reuters News, said it "firmly believes that respecting copyright is essential for fostering innovation while protecting the intellectual property that fuels fiduciary-grade AI solutions." Reuters The court judged the use to be highly commercial and only minimally transformative, because Westlaw and Ross used the headnotes for essentially the same purpose, and it found harm in two markets: the existing legal-research market and a developing market for licensing headnotes as AI training data. The court acknowledged that the second market is "rapidly developing," and noted that Thomson Reuters already used headnotes to train its own AI products. The decision is limited. Ross's product returned existing court passages and "cannot generate original expression," so the court did not decide whether training generative AI (AI that creates new content) is fair use, a question on which lower courts have disagreed. Ballard Spahr
The ruling gives content owners a concrete pattern: an editorial work with original choices, copied entirely, to build a product that does the same job as yours. It also shows how a licensing market becomes legally real, namely through evidence that the owner itself uses the material for AI and could license it. If you hold proprietary editorial, analytical, or curated data, document how you use it for your own AI, set a price for a license, and record every offer. If you buy AI tools, ask vendors where their training data came from, particularly for tools built to compete with a data owner's own product, and require protection against legal claims in the contract. Training of generative AI remains unsettled, so treat this ruling as a floor.
Meta and Sierra announced the Personal Agent Protocol on October 6, an open standard they are developing with Genesys, Instinct, Rocket, Shopify, Stripe, and Walmart to define how personal AI agents interact with businesses.
It addresses how an agent proves its identity, how consumers stay in control, and how companies can see what agents do through a company's website, its connections to other software, or its own agent. Built on OAuth, a widely used sign-in standard, a session can begin as a guest, for tasks like checking availability, then move to a signed-in session in which the customer decides whether the agent gets read-only or change-making access, and the session carries across channels. A first draft of the specification is planned for later this month, with design workshops and a sample build to follow. More detailed permissions, push notifications, and a payments feature are listed as possible future additions. Sierra Genesys CEO Tony Bates said, "Personal AI is creating a new front door to the enterprise. Brands need a trusted way to know who an AI agent represents, what it's authorized to do, its intent, and how to work with it securely." Stripe's Kevin Miller said the standard gives businesses "a standard way to recognize their customers' agents, efficiently interact with them, and shape their customer relationships." Sierra
Today most customer AI agents click through web pages the way a person would, which is slow, error-prone, and invisible to you. A protocol replaces that with an identified, permissioned session you can keep a record of. The strategic choice is which steps to open up. Start with read-only tasks such as availability, order status, and policy questions, then add change-making actions only where you can verify the customer's authorization and undo the result. The specification has not shipped, and Sierra says workshops are coming, so assign someone to join them now, since the first draft will favor the companies in the room.
The point of contact with the customer is moving to the customer's own agent, and open standards make that move easier while strengthening the AI companies that sit closest to the customer. What the business must keep is the decision about who is authorized and the record of it: which agent acted, for whom, within what limits. A company that owns those two things can accept agent traffic without giving up the customer relationship, and a company that does not will be reduced to a service that agents simply call on.
SAP and TechWolf announced on October 6 that SAP will acquire the Ghent-based company, whose "context graph for work" gives companies a continuously updated view of the tasks their people do and the skills they have, drawing on HR and business systems the customer connects.
It models three levels: the work itself, down to tasks within a job, the skills people apply, and the outside job market, all mapped against the company's strategy. TechWolf is expected to become an intelligent core of SAP SuccessFactors, powering skills mapping, workforce planning, and organizational redesign. Terms were not disclosed, and closing is expected in the fourth quarter of 2026, subject to regulatory approval. SAP Manoj Swaminathan, president and chief product officer for SAP Autonomous Suite, said the graph "provides an excellent grounding layer for agent queries regarding work and skills planning and talent management," which "makes token usage more efficient, lowers the cost of deploying workforce agents and will make Joule more intelligent." SAP said joint customers are seeing "measurable results" but gave no figures. TechWolf CEO Andreas De Neve called the product "the evidence layer" for questions about how AI is reshaping work. SAP
A task-level map of work is the missing input for any serious decision about which jobs AI agents should take over, which people to retrain, and how to price the output. SAP is buying that map and attaching it to the system that already holds your people data. If your workforce plan still runs on job titles, you cannot say which tasks are candidates for automation. Build a task inventory for your two largest functions this quarter, whether or not you use SAP. Before you commit to any vendor's version, settle three questions in the contract: who owns the skills data it produces, whether you can export it, and what employee consultation obligations apply where you operate.
Mistral released a preview of Large 4, nicknamed "Le Chonk," on October 6 through its paid service, and said the full model files, called weights, will be available on October 27 for anyone to download and run.
The model has one trillion parameters (the internal settings that hold what it has learned), uses 49 billion of them for any given task, handles text and images, and was trained from scratch over two months on about 4,000 Nvidia Grace Blackwell chips in Mistral's European data centers, using more than 160 languages. Mistral calls it the most powerful open-weight system outside China. Its test results, which the company says are preliminary and will change before release, include 62% on the DeepSWE coding test against 61% for Zhipu's GLM-5.3 and 44% for Reflection AI's Beam, and 15% on Harvey's Legal Agent test against 5% for OpenAI's GPT-6 Astra. These are the vendor's own figures. The Next Web Mistral said customers can run the model on their own servers or through its service in a region they choose, including a European region under EU law, and argued that companies and governments should not depend on a provider that can switch off their tools. It also said a testing version with fewer restrictions and more cybersecurity features would go to developers, cybersecurity firms, and government agencies. The article notes that the low legal-agent scores across all models show how far every system remains from handling legal work alone. The Next Web
Mistral's preview follows Reflection's Beam, which appears in the same test table, by only days, and its full files are due October 27. That gives buyers real bargaining power with closed-model vendors, and a credible way to keep regulated data in a chosen country. Treat the numbers as claims until you reproduce them. Add Mistral Large 4 to the head-to-head test you were already planning, try it on one task built on your private data, and read the license, safety testing, and construction documentation Mistral promised before the files ship. The 15% legal-agent score is a useful reminder that even a leading open model still needs a person checking its work.
Palmer's "OpenAI DevDay Recap" (September 30) argues that the real story of DevDay was OpenAI's effort to build an ecosystem in which developers and enterprises do business on its platform, comparing the approach to Microsoft bundling Word, Excel, and PowerPoint into Office.
Shelly Palmer Among more than 20 announcements, he highlights OpenAI Marketplace, which lets eligible enterprise customers apply their existing OpenAI spending commitments to approved software from 32 partners including Salesforce, ServiceNow, and Adobe, with customers contracting with and paying partners directly, and "Sign in with ChatGPT," which spans 16 partner products. The contrast with today's open standard is instructive: one route to owning the context is a bundled ecosystem run by a single vendor, and the other is a shared standard that any company can use.
Take an inventory of the context you own that an AI system would pay for or need: editorial and analytical content, customer identity and permission records, the map of how your work is done, and your customized or open models.
For each, decide whether to license it, protect it, or keep it portable. This is where lasting value will sit as AI models become interchangeable, and the Third Circuit decision is the first appeals-court signal that the law will recognize it.
Expect new markets to form around each layer of context: licensed training data, agent identity and authorization, task-level work maps, and locally hosted AI models.
Established vendors that hold a system of record, such as SAP in HR, are moving to take over the context layer above it, while open standards in customer-facing channels push the front door to the customer's own AI agent. Pricing power will follow whoever controls identity and the record of where information came from.
A customer's AI agent will soon be a visitor you must recognize and serve.
Decide how your brand behaves toward agents: what they may see, what they may do, and how you keep the customer relationship when an agent stands in the middle. Join the Personal Agent Protocol design process or an equivalent, and test a guest-mode agent session on a low-risk customer journey this quarter.
Build a task-level inventory of work in two functions and use it to sort tasks into those AI agents can take, those they can assist with, and those that stay human.
Assign an owner for agent traffic: sign-in, permissions, records, and dispute handling. Add training-data origin to your vendor intake checklist.
If you own proprietary content or data, put a number on a license, since the court treated the existence of a licensing market as evidence of harm from unlicensed use.
If you buy AI, track whether vendor marketplaces and spending commitments are steering purchases toward one ecosystem, and compare that against open models priced on your own infrastructure.
Prepare an agent-facing connection with identified sessions, limited permissions, and records, starting with read-only tasks.
Keep any work or skills data your vendors derive in a format you can export. Add Mistral Large 4 and Reflection's Beam to your testing setup so you can compare them with your current model on your own tasks the week the files ship.
Ask management four questions: which proprietary content or data do we hold that AI developers want, who in the company is accountable for how outside AI agents interact with our customers, what employee data feeds our workforce AI plans, and how quickly could we switch models.
The Third Circuit has now made the first of those a legal question about an asset, not only a commercial one.
The pattern across today's stories is that the context around the AI model is becoming the contested asset. A court has recognized the licensing value of editorial work, an open standard is trying to settle who an agent speaks for, an enterprise software giant is buying the map of work, and a European lab is promising a model that stays under the customer's control. The assumption this breaks is that the AI model is the scarce thing and everything around it is plumbing. The choice this forces is which context you will license, which you will protect, and which you will keep portable before someone else puts a price on it for you.
If an AI system quietly learned everything your company knows about its customers and its work, what would you charge for it, and would you know it had happened?
**Build the harness. Price the outcomes. Redesign the org.**