Your brand becomes AI memory. And agents get rules.

You know when you ask for a graphic for this week’s post and have to send the logo, colors and font all over again? On 10/20, Google announced a Gemini package for small businesses aimed right at that.

You send your website, brand kit, fonts or palette once, and Gemini keeps the style for later image requests, made with Nano Banana 2.1, Google’s image model. The package also brings a central business page and reads spreadsheets, receipts and purchase records, turning them into charts and interactive models. It connects to Google Business Profile, Google Ads and Workspace, plus Adobe, Canva, Dropbox, Shopify, Wix, Zoho and Xero. According to Google, the rollout starts in the coming days, worldwide, for Gemini app users.

If you do your own marketing, the tedious part is explaining your brand again with every request. If the style really sticks, a baker or a mechanic can ask for three versions of a promo poster without starting from scratch. On the money side, the promise is to turn a folder of invoices and receipts into a chart you can understand, as long as the numbers are checked.

Would you give a new employee the keys to your shop without agreeing on what they can do alone? AI agents are getting to that point.

On 10/21, Anthropic introduced Claude Duet: an agent that follows your connected apps, sends a morning summary and works in the background on a cloud computer. According to the company, it reads and drafts on its own, but shows what it is about to do and waits for your approval before sending a message, paying, signing or deleting anything. Trading investments, moving money between accounts and logging into someone else’s account are off limits, even if you approve. It is a research preview with a waitlist, starting with Pro and Max subscribers in the US, and background work uses your plan’s limits.

The next day, 1Password announced a platform for agents: when the agent reaches a login, it asks for the credential, you approve, and the vault fills in the password without the agent seeing it. The company lists Duet among compatible agents but marks that integration as “coming soon”, and Anthropic itself talks about something still to come. It costs nothing extra on Individual and Family accounts and does not yet work on .eu and .ca accounts. TechCrunch, which covered the launch, notes that US banks already detect agent activity in customer accounts and, according to the report, many cannot tell whether the account owner asked for it.

Even if you are not on the waitlist, the lesson holds: the risk is not the agent getting an answer wrong, it is acting wrongly in your name. An email to the wrong customer or a double charge costs more than a bad text. Anthropic itself admits that asking for approval too often is tiring and makes people click without thinking. Better to agree on a few clear rules.

A 15-minute plan to delegate safely to any agent:

1. List what the agent touches: email, calendar, billing, customer spreadsheet.
2. Sort every action into three lanes: free (read, summarize, draft), needs approval (send, pay, sign, delete) and forbidden (move money, touch customer accounts).
3. Grant access through a password vault or per-task approval, never by pasting a password into the chat.
4. Start with only the free lane for a week and note what it did and what you corrected.
5. Only then unlock one approval action, one at a time.