Introduction
Anthropic introduced Claude Duet on October 21, 2026 and explained its safety, privacy and security controls on October 23. The research-preview agent can work on a cloud computer across connected services while a person is away. This briefing covers those announcements; araNET has not independently tested their protections.
What changed
Anthropic describes reviews for important actions that identify the proposed action, destination and content. It also describes checking whether an action fits the request, screening outgoing messages for sensitive information and keeping credentials outside the model's reach. The company acknowledges that safeguards can miss problems or flag harmless activity.
One account-control detail deserves separate treatment: disconnecting an app stops new access, but information already learned can remain until the user resets Duet's memory. Revoking a connection and clearing retained context are different operations in the vendor's explanation.
What we would try first
Use a delegation card to describe a routine before connecting it to a working account. Here is a hypothetical morning preparation task for a studio owner:
- Purpose: identify project decisions that need the owner's attention today.
- Inputs: the selected project calendar and approved studio updates. Exclude personal mail and unrelated customer files.
- Deliverable: one brief listing each project, the decision requested, the source and date, and what remains unknown.
- Permitted work: read the selected material and prepare the brief.
- Stop before: contacting a client, changing a calendar event, sharing a document or purchasing anything.
- Escalation: conflicting dates or an unclear project identity go into a question for the owner, rather than becoming a guessed answer.
Those are our proposed task boundaries. They do not establish that every restriction is available as a product setting or that a written instruction alone can enforce access control. Check which connections and controls the actual account exposes before using the card.
Review the first brief against its sources. A useful item might say that two updates disagree about a review date and link both. An unhelpful item silently chooses one date and presents it as agreed. Add a correction to the task, then inspect whether the next brief reflects it without turning the correction into permission to reschedule anything.
Before allowing a later external action, review the intended recipient, content and attachments together. If access is withdrawn, inspect both the connection state and the memory controls described by Anthropic. Keep the original delegation card so someone can compare what was authorized with what occurred.
Availability and limits
Historical context: Duet's launch was October 21, with the fuller controls explanation following October 23. Source check on November 4, 2026: the launch page currently lists waitlisted US Pro, Max and Ultra subscribers, web access and separate iOS/Android apps. It says preview usage shares the plan's limits. This reports the page as checked on November 4; it does not establish when every plan label appeared in the launch copy.
Waitlist registration does not establish access. Confirm the account's eligibility and available controls before depending on the routine.
