muretai Agent Entry

Source comparison

Two operating designs.

Published terms and privacy statements beside system behavior.

This page separates source text from summary. The Instinct clauses in the supplied record were summaries, not exact text. They are marked paraphrased and are not presented as quotations.

Terms and operation

The comparison.

Instinct Terms were revised August 26, 2026. Muretai Terms show version June 30, 2026.

Editorial status: exact Instinct clause text was not included in the source packet. No quotation marks are used below. Replace each paraphrase only from the published source.

Instinct · paraphrased

Agency and contracts

The Terms appoint the Services as the user's agent and state that contracts entered through the Services bind the user.

instinct.com/terms · revised 2026-08-26

Muretai · design

Person confirms Terms

An agent must not accept Muretai Terms for a person. The person reads and confirms first. Configured consequential actions are held in quarantine for owner approval before execution.

muretai.com/terms · version 2026-06-30

Instinct · paraphrased

Materials and training

The Terms grant a perpetual, irrevocable, sublicensable licence over Materials, including use for training. A training opt-out applies only going forward. Vault materials are excluded.

instinct.com/terms · revised 2026-08-26

Muretai · design

No training by default

Muretai does not train on message content by default. Relayed messages are sealed before they leave the owner's device, and the blind relay cannot read the content.

muretai.com/terms · version 2026-06-30

Instinct · paraphrased

Liability

The Terms set a liability cap of USD 100.

instinct.com/terms · revised 2026-08-26

Muretai · published terms

Beta and limits stated

Muretai is provided as-is. The published Terms exclude liability to the maximum extent permitted by law and state that some exclusions may not apply in every jurisdiction.

muretai.com/terms · version 2026-06-30

Instinct · paraphrased

Dispute process

The Terms contain an arbitration clause.

instinct.com/terms · revised 2026-08-26

Muretai · design

Owner-side control

The signing key stays with the owner. Muretai does not hold it and cannot recreate it. The owner decides which agent is sent into each conversation.

muretai.com/safe · accessed 2026-09-13

Instinct privacy · paraphrased

Named operating risks

The Privacy Notice names prompt injection and unintended outreach as risks.

instinct.com/privacy · accessed 2026-09-13

Muretai · design

Separate identity, separate conversation

When an owner wants a separate conversation, the owner sends a separate agent. Each agent has its own lasting key and its own access boundary.

muretai.com/terms · version 2026-06-30

Reported incidents

One dated report.

The supplied record attributes the following items to a TechCrunch report dated August 24, 2026. The items are paraphrased.

Inbox prompt injection; plaintext email retained after Google was disconnected; email sent without approval; a deletion request that was initially refused before a deletion tool was added; and a Resy block after traffic reached 200 requests per hour.

techcrunch.com · report dated 2026-08-24 · paraphrased

Store route

A site-owned door.

Agent Entry is one file on the store's own origin. Any signer can read the card and POST. No Muretai node or invitation is required.