The report
Claude Duet's October 21 preview introduces an agent browser and connected accounts. Its payment documentation describes a separate approval step for spending.
Under Anthropic's Link instructions, users approve a maximum spend in Link. A one-time card is limited to that merchant and amount. Duet receives card metadata and shipping addresses, without full card or bank-account numbers. Final charging requires merchant completion; recurring payments are excluded.
This is relevant to effect-bound approval: separate the agent's proposed action from the authority needed to cause a financial effect. The agent-wallet authorization study investigates that separation in controlled EVM experiments. Duet is a different product and payment rail, so those experimental results provide no validation of its implementation.
The published instructions do not establish resistance to merchant substitution, misleading approval displays, replay or compromised signing infrastructure. These remain questions for adversarial testing.