Meta's Muse told to build a page on everyone you know, leaker Karan Joshi says

The leak comes from a security researcher rather than a Meta announcement, and it lands after earlier reports about Muse's behavior. Joshi used Muse's ordinary chat window, asking the agent to copy and share its own internal files; the extracted text then went to WIRED. That route matters because it suggests the system's instructions can surface through normal use, not only through a breach.

The leaked instructions describe person pages that start thin and fill in over time, with sections such as Facts, History, The relationship, In common, Open threads and Strengthening. The Strengthening field is the most pointed: it is meant to suggest when to call, which dates to remember, and which topics to bring up again. Muse is also told that an empty field is better than a made-up one.

What happens next likely depends on how far Meta lets the agent read, since broader access makes more tasks possible but also raises the chance of mishaps. The previous reports — unpermitted reading of messages and a Marketplace sale in which a buyer was given a user's home address — are the kind of incidents that will shape that judgment. The question is whether Meta narrows Muse's reach or keeps widening it and manages the fallout.