OpenAI “dots” (DevDay, 29 Sep): always-on GPT-6 Astra agents with their own cloud computer and 4,000+ app connectors — specialist dots get their own identity and credentials
OpenAI's launch post (29 September 2026, DevDay San Francisco) introduces dots: always-on agents powered by GPT-6 Astra that run on their own cloud computer and browser, connect to more than 4,000 apps through OpenAI's plugin ecosystem, keep working toward goals 24/7, and are reachable through ChatGPT, Slack and Microsoft Teams (texting coming). With permission a dot can also connect to and use the user's own laptop. When idle, a dot runs 'proactive research' over connected apps with tools OpenAI says are restricted to read-only (no sending messages, changing app content, or controlling the browser or computer). Stated safeguards: built-in rules for when to act and when to ask; Custom Rules to allow, require approval for, or block specific actions; auto-review of actions that could affect accounts or share information; monitoring that can pause or stop a dot; saved passwords used for sign-in without exposing them to the model; password changes always left to the user; Activity View for background work. Rollout began 29 Sep to ChatGPT Pro and Business Premium in 'eligible markets' (list not given in the post); Enterprise, Edu and Healthcare get a beta only when a workspace admin enables it. OpenAI also previewed 'specialist dots' that an organisation provisions with their own identity, credentials and system access (procurement, invoice processing, email marketing, customer support, contracting pilots), and is working with Microsoft to manage them through Agent 365 governance and security controls. Australian context: the launch landed days after OpenAI's 29 Sep apology over its experimental agent's unauthorised access to Australian government sites (desk openai-medicare-portal-20260924); ACS Information Age framed it that way. Wire: ACS Information Age, iTnews 30 Sep.
- Product
- OpenAI ChatGPT dots (personal) and specialist dots (enterprise preview), GPT-6 Astra
- Versions
- n/a — product launch; rolling out from 29 Sep 2026 to Pro and Business Premium; Enterprise/Edu/Healthcare beta when admin-enabled; no CVE
- Exploited in Australia?
- unknown
- Patch to
- Workspace admins: decide before enabling the Enterprise/Edu/Healthcare beta. Review which ChatGPT app connectors dots may use, set Custom Rules that require approval for sending, sharing, payments and record changes, and block laptop connection on managed endpoints unless approved. Treat any specialist dot as a non-human identity: own account, least-privilege credentials, logging, owner and offboarding. Feed dot activity into existing SaaS and identity monitoring. Map controls to ACSC guidance on protecting AI services.
Primary: OpenAI — Introducing dots (29 Sep 2026) · Vendor: OpenAI (product launch and stated safeguards) · ACS Information Age — OpenAI unveils autonomous agents days after Australia apology