For a founder in September 2026, Claude Cowork, included in Claude's $20-a-month Pro plan, is the safest first delegate for file and document work and scores 19/25 on trust criteria drawn from Sebastian Mallaby's The Infinity Machine. Meta Muse, launched September 8 with a free tier plus $20 and $100 plans, wins on errands like bookings and purchases but scores 15/25; Gemini Spark, behind Google AI Ultra from $99.99 a month, lands at 17/25.

Meta released Muse on Tuesday, September 8, 2026, and within hours three founders I work with asked the same question: should I hand it my inbox? A personal agent that sends emails, books travel, fills forms and makes purchases is what every founder has wanted since the first chatbot, and Muse ships it with a free tier. But an agent holding your credentials is a different category of tool, and it deserves a different category of judgment.

The facts first. Muse runs on Meta's Muse Spark model, lives at muse.ai, in iOS and Android apps and inside WhatsApp, is US-only and 18-plus for now, and is free until usage runs out, at which point it offers Power at $20 a month or Maximum at $100 a month; Meta requires a payment card just to start. Its architecture is the interesting part: each user gets a Secure VM, a dedicated cloud computer with its own browser, plus a separate Sentinel agent that inspects everything leaving that machine, and purchases go through Link by Stripe, which issues single-use card numbers so the agent never sees your real card. Claude Cowork, Anthropic's agent workspace, is included in every paid Claude plan from Pro at $17 to $20 a month, runs in the desktop app on macOS and Windows plus web and mobile, and works across your files, apps and connectors. Gemini Spark is Google's 24/7 agent that keeps working when your devices are off, connects to Gmail, Calendar, Drive and Docs with connections off by default, and is gated behind Google AI Ultra, whose two tiers cost $99.99 and $199.99 a month, in select countries only.

For criteria I went to Sebastian Mallaby's The Infinity Machine, his 2026 biography of Demis Hassabis, because it is the most honest account I have read of what happens when capable systems meet distorted incentives. Three of its lessons became my scoring rubric. Feynman's rule that Hassabis adopted, "what I cannot build, I do not understand," became legibility: can you see what the agent did and why. Mallaby's governance paradox, three years of DeepMind and Google failing to agree on safety oversight because every party's incentives were bent, became incentive alignment and containment. And DeepMind's formula of intuition plus planning became planning depth. The fifth criterion, maturity, comes from the book's race dynamic: after ChatGPT, everyone ships faster than they would like.

Criterion (from Mallaby)Meta MuseClaude CoworkGemini Spark
Legibility: can you see what it did343
Incentive alignment: who the vendor answers to243
Containment: blast radius when it is wrong444
Planning depth: multi-step real-world tasks444
Maturity: months in real use233
Total out of 25151917

On containment I gave all three a four, and Muse arguably earned it most: Secure VM plus a system-level-separated Sentinel plus single-use card numbers is a more serious answer to prompt injection than most agents ship with, and it is why I did not score Muse lower. Where Muse loses is incentives. Meta says Muse does not share conversations with its ads systems, and I take the claim at face value while noting that the company announced this product less than two weeks after an $18 billion settlement over consumer harms, with three prior FTC privacy actions on the record. Mallaby's point about DeepMind was never that Google was evil; it was that you cannot negotiate durable safeguards inside an organization whose revenue pulls the other way. A subscription-only vendor has a simpler pull. Anthropic sells me the plan, and that is the whole relationship.

What I actually do: Cowork handles anything that lives in files, such as turning a folder of call notes into a board memo or reconciling two spreadsheets, because I can read every step and the worst case is a bad document. I would use Muse today for errands with a natural ceiling on damage, such as booking a flight I have already chosen or selling a piece of equipment, precisely because the Link card caps the loss. I would not connect either to a primary business inbox yet, and I would not pay $99.99 for Spark unless I already lived in Google Workspace and wanted the scheduled Monday inbox triage it demonstrates, which is genuinely the best-designed recurring workflow of the three.

The failure modes are shared. Every one of these agents browses the open web on your behalf, and a page that reads "ignore your instructions" is still the cheapest attack in the industry; containment reduces the blast radius, it does not remove the blast. Usage meters mean the free Muse tier will run out mid-task at the least convenient moment. Spark's checks before major actions and Cowork's confirmations become a click reflex within a week, which is the same approval fatigue that makes human oversight of agents so weak. And all three are days or months old as products; Muse is one day old. Hassabis raced because he had no alternative. You do have one: delegate the reversible, keep the irreversible, and revisit the scores in a quarter.

Sources: TechCrunch, "Meta debuts its Muse AI agent. Will consumers trust it?" September 8, 2026 (techcrunch.com); WIRED, "Muse, Meta's New Personal AI Agent, Needs You to Trust It," September 8, 2026 (wired.com); Axios, "Meta debuts Muse, its long-planned personal AI agent," September 8, 2026 (axios.com); The AI Career Lab, "Claude Pricing (Sept 2026): Free vs Pro vs Max — Is Cowork Free?" reviewed September 6, 2026 (theaicareerlab.com); Google, Gemini Spark overview and Google AI subscription tiers (gemini.google); Sebastian Mallaby, The Infinity Machine (2026).


Related: How to Find Your Passion · Best Self-Improvement Books · How to Make Better Decisions · Why Exploration Is Important for Success