Instinct opens its AI agent's group chats to friends who have no account

When someone new joins a thread, a reply that has not yet reached the group is held before it goes out, according to mezha.net's write-ups of TechCrunch's report ^[3][10]. I would raise it first at a design review. Consent given to a four-person thread was consent about those four people. A fifth arrival changes the audience for anything still in flight, and holding the pending message is the cheapest correct response.

The two-agent split Shinn described ^[1] is the structure I would pick for this problem. A dev.to analysis of the launch wrote, "The boundary between them is the product." ^[13]

Consent sits at two levels in the reports: a revocable trust grant per group ^[2] and an ask before each share or action ^[1]. The second level is the one the dev.to piece worries about. It warned that per-user, per-action permission turns a five-person thread into "a permission-prompt generator" and wrote, "Nobody will approve eleven dialogs to schedule a Saturday." ^[14] Its alternative is a grant scoped to the thread: availability windows but not location, write access to the shared plan but not the calendar ^[15]. Neither report says whether trusting a group pre-approves any class of share, or what releases a held reply ^[2][3].

In my context, thread-scoped grants are the right default for coordination, and per-item prompts belong on actions that spend money. Instinct's actions do spend money. Its platform is approaching $1 billion in annual transaction volume after a $1 billion Series C, with travel more than half of bookings, mezha.net reported ^[16]. Dividing purchases among participants is on the list of group tasks ^[7].

The distribution case rests on the friend without an account. The dev.to piece called it a distribution move and wrote, "The agent, not a signup form, becomes the interface to the product." ^[12] Even the early-access list is an agent request ^[9]. The consent layer, as described, protects account holders, because the boundary sits between personal accounts and the group agent ^[1]. As far as the reports go, a friend with no account has nothing behind that boundary, so whatever they type lands in shared context from the start.