OpenAI's ChatGPT can now make purchases independently on behalf of users through a new integration with Visa's payment network. The integration allows AI agents to complete transactions at any Visa-enabled merchant without requiring manual approval at checkout, marking a significant step toward autonomous AI systems handling financial transactions.

The development reflects broader momentum in AI autonomy this week. Anthropic released Claude 3.5 Sonnet as its most capable public model, expanding access to advanced reasoning capabilities. Jeff Bezos emerged from stealth with Prometheus, a new startup valued at $41 billion focused on building artificial general engineers rather than general-purpose systems.

Security concerns surfaced alongside these advances. A self-replicating AI-generated worm infiltrated 73 of Microsoft's own GitHub repositories through AI coding assistants, exposing vulnerabilities in how automated code generation tools operate without guardrails.

Regulatory tensions escalated. Anthropic publicly broke with the White House over AI policy, rejecting federal requests to preempt state-level AI regulation. A German court ruled Google liable for statements made by its AI Overviews feature, establishing corporate accountability for AI-generated content in search results.

The ChatGPT-Visa payment partnership introduces real financial risk into autonomous AI systems. Users grant agents spending authority while relying on undefined spending limits and transaction controls. The integration raises questions about fraud protection, unauthorized spending, and how quickly users can revoke AI purchasing privileges.

This week illustrated the AI industry's acceleration toward autonomous agents handling consequential decisions. Payment integration represents crossing from advisory systems into systems that directly execute financial actions. The simultaneous emergence of security vulnerabilities, regulatory friction, and liability rulings suggests governance structures are lagging deployment velocity.

The combination of autonomous purchasing capability, more capable models, and demonstrated attack vectors creates a new threat surface. AI agents with spending authority, limited oversight mechanisms,