Agent types
Seven personal and ambient agent types, each with flagship deployments
| Agent type | Where it operates | Flagship deployments | Registry incidents |
|---|---|---|---|
| Phones and tablets | Personal devices | Doubao Phone Assistant, Apple Intelligence and Siri, Microsoft Recall | 0 |
| Wearables | On the body | Ray-Ban Meta and Oakley Meta glasses, Quark AI Glasses, Apple Watch hypertension notifications | 0 |
| Vehicle cabin AI | Car interiors | GM Gemini assistant, Grok in Tesla vehicles, BYD Xuanji with DeepSeek | 1 |
| Smart home assistants | Homes | Alexa+, Gemini for Home, Ring Familiar Faces and Search Party | 2 |
| Medical devices | Clinics and bodies | LumineticsCore (formerly IDx-DR), Chinese radiology AI (Yukun, United Imaging, Infervision, Deepwise) | 0 |
| Public infrastructure | Streets and public space | Met Police live facial recognition, Flock Safety license plate readers, SkyNet camera network | 0 |
| Ambient sensors | Homes, PCs, workplaces | 0 |
Attack surface
Perception rates very significant or critical for all seven personal and ambient agent types
Deployments
17 flagship deployments, five of them in China
| Deployment | Agent type | Developer / operator | Scale | Status | Controls declared |
|---|---|---|---|---|---|
| Doubao Phone Assistant | Phones and tablets | ByteDance / ZTE (Nubia M153) | Limited release, sold out (Dec 2025) | Restricted after platform pushback | Explicit consent; no payments or identity checks |
| Apple Intelligence and Siri | Phones and tablets | Apple, with Google Gemini models / Apple | 450 million+ capable iPhones (Q1 2026) | Partly shipped | On-device and Private Cloud Compute |
| Microsoft Recall | Phones and tablets | Microsoft / PC makers (Copilot+ PCs) | Install count not disclosed (Apr 2025) | Shipping, opt-in | Opt-in; Windows Hello; local encryption |
| Ray-Ban Meta and Oakley Meta glasses | Wearables | Meta with EssilorLuxottica / Meta | 7 million+ sold in 2025 (Dec 2025) | On sale; class action pending | Recording LED; camera stops if LED is covered |
| Quark AI Glasses | Wearables | Alibaba | Not disclosed (Nov 2025) | On sale | Not disclosed |
| Apple Watch hypertension notifications | Wearables | Apple | 1 million+ expected alerts in year one (Sep 2025) | FDA-cleared | Not a diagnostic |
| GM Gemini assistant | Vehicle cabin AI | Google / General Motors | About 4 million eligible vehicles (Apr 2026) | Rolling out over the air | Driver controls what it sees; opt-in |
| Grok in Tesla vehicles | Vehicle cabin AI | xAI / Tesla | Count not disclosed (Jul 2025) | Shipping | No vehicle or navigation control |
| BYD Xuanji with DeepSeek | Vehicle cabin AI | BYD and DeepSeek / BYD | Count not disclosed (Feb 2025) | Announced | Not disclosed |
| Alexa+ | Smart home assistants | Amazon | Tens of millions in early access (Feb 2026) | Generally available in US | Local voice processing removed |
| Gemini for Home | Smart home assistants | Google / Google Nest | Not disclosed (Oct 2025) | Rolling out | Not disclosed |
| Ring Familiar Faces and Search Party | Smart home assistants | Amazon Ring / Ring owners | Not disclosed (Feb 2026) | Active; Flock link cancelled | Ring says no video went to Flock |
| LumineticsCore (formerly IDx-DR) | Medical devices | Digital Diagnostics / US primary-care clinics | Not disclosed (2018) | FDA De Novo | Not disclosed |
| Chinese radiology AI (Yukun, United Imaging, Infervision, Deepwise) | Medical devices | Several / Chinese hospitals | 59 NMPA approvals across the four (Jun 2025) | Approved | Not disclosed |
| Met Police live facial recognition | Public infrastructure | Not disclosed / Metropolitan Police | 3 million+ faces scanned in 12 months (Sep 2025) | Expanding | Police-reported false alert rate of 0.0003% |
| Flock Safety license plate readers | Public infrastructure | Flock Safety / Local police and other buyers | 20 billion+ scans a month (Jul 2026) | Active; 38 cities dropped it in six months | Federal national lookup barred Aug 2025 |
| SkyNet camera network | Public infrastructure | Not disclosed / Chinese public security bureaus | About 700 million cameras (estimate) (2025) | Active | Not disclosed |
Incidents
Three of the 19 registry incidents involve personal and ambient agents
| Incident | Date | Agent page | Found by |
|---|---|---|---|
| Amazon Echo Sends a Private Conversation to a Contact | May 2018 | Smart home assistants | Third party |
| Alexa Suggests a Dangerous Outlet Challenge to a Child | Dec 2021 | Smart home assistants | User |
| Tesla Staff Share Customer Car Camera Footage | 2019 to 2022 | Vehicle cabin AI | Third party |
Rules
Privacy and face rules bind personal agents; few address what agents do
| Rule | Jurisdiction | What it requires | Status |
|---|---|---|---|
| EU AI Act Article 5 prohibitions | EU | Bans manipulative AI, face scraping, workplace emotion recognition, most police real-time face ID | Feb 2, 2025 |
| CAC and MPS face recognition measures | China | Consent, alternatives to face ID, registration above 100,000 people | Jun 1, 2025 |
| FTC v. GM and OnStar | US | Driver data sharing ban and consent | Jan 2026 |
| FTC and DOJ v. Amazon (Alexa, COPPA) | US | Children's voice data deletion | 2023 |
| FDA PCCP final guidance | US | Pre-authorized AI model updates in medical devices | Dec 4, 2024 |
Status colors: green in force, blue voluntary standard or framework, amber adopted and phasing in, gray draft or pending, red withdrawn.
Record
Page Record
- Agent class
- Personal and ambient
- Datasets
- ai_deployments.csv (17 flagship rows); ai_attack_surface.csv (70 rows); ai_incidents.csv (3 linked)
- Sources
- Listed on each agent type page
- Last verified
- October 2026