Tokenta Signal SIGN IN TERMINAL >
2026.11.07 13:37 UTC
● ISSUE 256 · MICROSOFT × ORACLE × AI CLOUD · Reuters report of Bloomberg News (Duke FM syndication)● ISSUE 255 · TERAWULF × Q3 2026 × WULF · TeraWulf Q3 2026 results (GlobeNewswire release)● ISSUE 254 · PSI × QUANTUM · PSI Aaronson-Ambainis proof announcement (PSI)● ISSUE 253 · IBM × QUANTUM · IBM Quantum System Two Chicago unveiling (PR Newswire)● ISSUE 252 · OKLO × Q3 2026 · Oklo Q3 2026 Form 10-Q (SEC)● ISSUE 251 · VISTRA × Q3 2026 × VST · Vistra Q3 2026 results (PR Newswire)
● ISSUE 256 · MICROSOFT × ORACLE × AI CLOUD · Reuters report of Bloomberg News (Duke FM syndication)● ISSUE 255 · TERAWULF × Q3 2026 × WULF · TeraWulf Q3 2026 results (GlobeNewswire release)● ISSUE 254 · PSI × QUANTUM · PSI Aaronson-Ambainis proof announcement (PSI)● ISSUE 253 · IBM × QUANTUM · IBM Quantum System Two Chicago unveiling (PR Newswire)● ISSUE 252 · OKLO × Q3 2026 · Oklo Q3 2026 Form 10-Q (SEC)● ISSUE 251 · VISTRA × Q3 2026 × VST · Vistra Q3 2026 results (PR Newswire)
AI FRONTIER · SIGNAL REPORT

Grok's Bot Has Started Spending Money for You

xAI's Grok Bot version 0.78.1, released on October 27, 2026, launched shopping cards and Buy Now, supports connecting Shop Pay and tracking orders, and routes purchases through automatic review and ask-first approval cards, though cards saved in the Vault need no separate approval at each checkout.

ISSUE 120 · 2026-10-30 · SOURCE / AIToolsRecap report · STATUS / VERIFIED · TOKENTA SIGNAL RESEARCH
XAI × GROK BOTREPORTED + ANALYSIS
IMAGE: AIToolsRecap report — FROM THE ORIGINAL REPORT ↗
8 / 13
COMMERCE ITEMS
New features in version 0.78.1 related to shopping, orders, payments or subscriptions.
20
RULE CAP EACH
The cap on auto-allow rules and ask-first rules a user can set, each.
1000
RULE LENGTH
The maximum characters per rule; ask-first rules take precedence in a conflict.
KEY TAKEAWAYS

WHAT HAPPENEDWhat Happened

xAI's Grok Bot started spending money for users in version 0.78.1. The changelog is dated October 27, 2026, and its headline is shopping cards and subscription templates. Products appear as cards with photos, ratings, prices and stores, three or four in a row that swipe horizontally, with in-stock options placed first.

The ordering flow has two steps. Tapping Buy Now starts an order that requires user approval; once the order is placed, the bot tracks shipping and notifies the user on dispatch and delivery. Payments run through Shop Pay: users first connect Shop Pay on the Vault's payment page, then select it as their preferred payment method.

The approval model is the real story here. xAI's documentation specifies that purchases and fund transfers are actions that need explicit boundaries. Every action passes an automatic review, and actions hitting an ask-first rule trigger an approval card showing the operation and inputs, with options to allow once, always allow, or deny. Users can set up to 20 auto-allow and 20 ask-first rules each, each up to 1,000 characters, with ask-first rules taking precedence.

FROM RESEARCH TO TRANSACTIONFrom Research Assistant to Transacting Party

Grok Bot used to draft and research; now it also holds a wallet. An agent that can place orders and an agent that can only advise sit at entirely different levels of risk. The payoff from a single prompt injection has gone from a paragraph of wrong text to real money.

xAI's update cadence shows the direction too. Of 13 new features in version 0.78.1, eight relate to shopping, orders, payments or subscriptions, against just three of 18 in version 0.77.0. Shopping is not an add-on; it is the heaviest-weighted main line across these releases.

THE APPROVAL CARDThe Approval Card Is Both the Defence and the Single Point

The ask-first rule design is not bad in itself. The operation and inputs are shown first, the user allows once or denies, and ask-first wins in a conflict. The problem is the exception at the payment step: cards saved in the Vault need no separate approval at each checkout.

That means approval granularity coarsens exactly at the payment stage. What the user approves is the order, not each individual charge. To review every payment, the payment action itself must be ring-fenced in the rules, rather than relying on the default flow.

SUBSCRIPTIONS CHANGE THE MATHSubscription Templates Turn One-Off Buys into Long-Term Ones

The same release added subscription templates. The bot can not only buy a single item, but also handle recurring orders from a template. A one-off mistake has limited cost; a subscription mistake compounds monthly.

For users, the checklist therefore gains an item. Beyond approval rules, they need to review the subscription list and payment methods regularly. The more convenient the agent, the less the habit of after-the-fact reconciliation can be skipped.

THE SHIFTWhat Changed

FROM ADVICE TO ORDER
From advice to orders
The agent's output has changed from text to orders and charges.
FROM DEFAULT TO RULES FIRST
From smooth defaults to rules first
Payment actions must be ring-fenced separately in the rules.

SIGNAL JUDGMENT — ANALYSISFor an Assistant That Spends Money, Ask-First Rules Belong in Front of Payments

Tokenta Signal's judgment: an agent's capability boundary is now set by its approval rules. The smoother the default flow, the more users need a separate ask-first wall around the payment action itself.

WHAT REMAINS UNCERTAINWhat Remains Uncertain

The boundaries of this report: the shopping features come from xAI's official changelog and third-party summaries, with order volumes, merchant counts and rates not disclosed. The fact that cards saved in the Vault need no separate approval at checkout is stated in xAI's own documentation, and the risk assessment here is written on that basis. This does not constitute investment advice.

EVIDENCEEvidence

The original report confirms xAI's Grok Bot version 0.78.1 launched shopping cards and Buy Now, supports connecting Shop Pay, routes purchases through automatic review and ask-first approval cards, while cards saved in the Vault need no separate approval at each checkout.

ORIGINAL: Grok Bot Can Now Buy Things, and Every Lab Suddenly Sells Cyber Defence ↗
aitoolsrecap.com · 2026-10-30 · AIToolsRecap report

PRIMARY SOURCESPrimary Sources

RELATEDRelated Intelligence

CORRECTIONS: if a fact on this page is wrong, we keep a correction record on the page. Contact team@tokenta.space