This instance was caused by a hallucination (the model fabricated a proper noun) that was further amplified by its causal thinking trace. This was not a data breach, no user data was shared, and no user isolation boundary was violated.
Our users place a lot of trust in Instinct to keep their data private and secure. We've done a lot of work to make sure that users’ data are truly partitioned, from isolated sandboxes to short-lived local credentials to identity-signed tool execution.
Regarding hallucination prevention: We worked over the last 48 hours to build an active hallucination detection system that now scans and verifies every token that flows through the platform. This layer is powered by small models that are trained to predict and detect hallucinations caused by ungrounded claims, creative brainstorming in thinking traces, or rare random sampling errors. Our systems are adversarially trained and battle-tested by world-class agent exploitation security teams to ensure that they can detect very subtle and nuanced hallucination cases. This layer has the ability to steer or intercept Instinct from proceeding with the next thinking trace or tool call execution before it is generated or executed.
In the coming weeks, we’ll share a deeper dive into how we’re building a proactive engine to protect Instinct from hallucinations.
We take every opportunity to learn and create, and we’re excited by the performance and potential for this line of work. These models are going to continue to be hardened every day through continuous testing, sampling, and creative adversarial training.
Show more
Instinct just admitted it leaked someone else's data to me
It described a financial document with details that weren’t mine, then claimed someone else’s photo had crossed into my chat.
But I never sent a photo
@noahrshinn, was this a data leak or a hallucination?
Show more
Instinct-to-Instinct network
Since the launch of the Instinct-to-Instinct network last week, Instincts have coordinated over 300k+ times with the most trusted people in users’ lives.
Today, we're making two improvements to the network.
(1) Support for direct file delivery
Instincts can now share PDFs, images, spreadsheets, and other files directly with each other. The receiving agent receives the original file in its workspace, and can analyze it, edit it, or use it in ongoing work. This enables richer collaboration: exchanging proposals, combining travel plans, comparing spreadsheets, or passing finished work between your Instincts.
Every file that’s transferred between Instincts is encrypted end-to-end between the sender and recipient.
(2) Trusted network invitation links
Invitation links make it easier to add people to your trusted network. You can access your link by asking your Instinct or copying it from your Workspace. When you share your link with someone, they can seamlessly send you a connection request. If they're not yet on Instinct, your connection link will also serve as a referral link that they can use to sign up for Instinct.
Every connection request still requires explicit approval on your end. You can also generate new links and invalidate old ones.
Show more
Shareable files in Instinct
Starting today, your Instinct can create shareable Files: private or public interactive pages that you can share with others.
Whenever it’s appropriate, Instinct will create a File to help you compare options, work through a plan, or share what you’ve put together.
For example:
- Apartment hunting: compare places you’ve saved or toured, with photos, floor plans, rent, commute times, and your notes in one place.
- Art gallery crawl: a route through exhibitions that match your interests, with opening hours, background on the artists, and a few cafes to stop by along the way.
- Dinner with friends: a guest list, recipes scaled for eight, and an ingredient list you can check off as you go.
- A weekend away: an itinerary built around your arrival time, with places to visit and details you can open along the way.
- Group trip expenses: enter shared costs, choose who participated, and see who owes what.
You can keep a File private or share it with anyone who has the link, including people who don’t use Instinct.
Files are rolling to all Instinct users today. To get started, you can ask your Instinct to do the research for your next trip.
Show more
Your Instinct can now handle phone calls.
Introducing Instinct Concierge – a white glove service meant to handle high-touch cases, such as making phone calls, high-end service booking, and more. You’ll be able to book the restaurant that doesn’t take online reservations, get on your dentist’s cancellation list, or have that cable bill sorted out.
We’re slowly rolling this out to our early access group today and will be expanding access soon.
Show more
Our new Trusted Person network is now available to all Instinct users! You can get started by asking your Instinct to add a few friends to your trusted network.
For the next two days, you’ll receive an additional 15 invites - bring the most important people in your life into your network.
Thank you to our early access users for helping with testing over the last few days. Some of the use cases that were shared with us:
- Meetings: finding 1 on 1 time with trusted people has never been easier.
- Dinner with friends: Instinct reached out to 10 peoples’ Instincts, found a common time, booked a restaurant reservation, and sent out the invites.
- Recurring tennis lessons: Instinct keeps a standing session available on both sides (trainer and student), and adjusts it when one side’s calendar has a conflict.
Show more
Authenticator support in Instinct
Instinct can now securely and seamlessly handle the “enter your 6-digit authenticator code” step for you. It uses the same time-based one-time password (TOTP) standard as Authy, Google Authenticator, Microsoft Authenticator, and other popular authenticator platforms. Once an account’s authenticator is set up in Vault, your agent can generate and enter its verification codes to unblock itself on your task.
37% of users store at least one account password in Vault within their first three weeks. A lot of everyday work happens behind a login. However, even with your password saved, an authenticator prompt can mean stopping the task, opening an app on your phone, and sending over a code before it expires. Instinct can now handle that step and keep working.
On supported services, Instinct can complete the enrollment and save the details alongside your login in Vault. You may need to approve the initial sign-in or an existing security check.
Where a service allows an additional authenticator, you can keep using the one on your phone. Once setup is complete, Instinct can use its own saved key to generate codes for future sign-ins. Phone approvals and other security checks may still need your input.
Authenticator support is another step toward giving Instinct the tools it needs to complete tasks on your behalf in the real world, with fewer interruptions along the way.
This is available across all of our users today.
Show more
Introducing our Trusted Person network powered by our new Instinct-to-Instinct communication protocol. Your Instinct can now talk to other Instincts to coordinate plans on your behalf.
Getting people together often involves a lot of back-and-forth: finding a time, working out the details, and following up when plans change. Instincts can now work with each other to help handle that coordination.
For example:
- Coordinating plans with your spouse
- Planning a weekend trip with friends, including dates and arrival times
- Scheduling time with colleagues and other collaborators
- Hosting events with 10s or 100s of people
- Organizing recurring plans like tennis, book clubs, or weekly dinners
Disclaimer: Your Instinct will only be able to communicate with those in your Trusted Person network. This is the group of people who are closest to you:
- Spouse
- Older children and parents
- Colleagues and trusted professional relationships
- Small local businesses
The Trusted Person network is currently available to our early access group and will be slowly rolled out across the user base over the next 24-48 hours.
Show more
Location sharing on Instinct
Starting today, you can share your location with Instinct on iMessage. Instinct can recognize when you arrive somewhere, and answer questions about where you’ve been.
Here are some examples of how our early alpha group uses it:
- Ordering food to your current location
- Finding a lunch spot a few minutes away based on what you like
- Guiding you through a trip itinerary in a new city
- Figuring out how to get home, including which train to catch and where to board
Instinct can also act when you enter or leave an area. You can ask it to remind you to pick up your package when you get home, or have your boarding pass ready when you arrive at the airport. These location triggers let Instinct follow up when the task becomes relevant.
Your location history also gives Instinct context to answer questions like “Where did I park?”, “How long did my bike ride take?”, or “What was that nice coffee shop around here that I went to last month?”
If you’re an existing user, you can try it today by asking Instinct to request your location. If not, we’re giving access to 1000 new users who want to try it out: . If you missed it, you can join our waitlist here:
Show more
We’re excited to collaborate with Instinct on safer experiences that help people share the credentials they choose, when they choose, while keeping security and control at the center. More to come.
Instinct + 1Password
32% of Instinct users already securely share their credentials with Instinct through our Vault. Today, we’re excited to announce our partnership with
@1Password . Together, we are working with 1Password to roll out a product integration that enables users to seamlessly and securely share their credentials with Instinct.
Our users already use Instinct’s Vault to:
- Log in to loyalty accounts to book flights and hotels with points
- Manage streaming, software, and other recurring subscription accounts
- Book or cancel restaurant, fitness, and event reservations
- Sign in to healthcare portals to schedule and cancel appointments
- Easy access to tax, payroll, benefits, and expense management services
Together with 1Password, we’re working toward a future where people can share their credentials without compromising on security or control.
We’ll be rolling this out across our early access group.
If you’re not already in the platform, join at
More details about 1Password here:
Show more
Almost exactly 2 years ago
@bgurley & I bet as to when a consumer AI would be able to seamlessly book a hotel room.
@noahrshinn & Instinct have made this a seamless reality. Receipt attached. Every person is about to have a world class assistant. Did I win the bet? 🧐💰
Show more
It's been a pleasure working with
@jeff_weinstein and the
@stripe team. They're very fast and care deeply about what they're building. I'm grateful for what they've been able to unlock for all of our users on such a short timeline.
Show more
You can now purchase across the internet with Instinct and Stripe
@link. It's fun to text your agent to magically accomplish money-requiring tasks — try it today!
Learn more =>
You can now purchase across the internet with Instinct and Stripe
@link. It's fun to text your agent to magically accomplish money-requiring tasks — try it today!
Learn more =>
Instinct + Stripe
Instinct users who make purchases spend over $1300/month on average through Instinct. Using Instinct to make high value purchases is a sign of trust that we deeply value.
We’re partnering with Stripe to deliver a more seamless payment experience. Instinct has enabled use cases that involve payments including:
- Planning and booking international trips
- Ordering weekly groceries and household essentials
- Booking yoga classes, ski tuning sessions, doctor’s appointments, car part repairs, and more
- Getting you the best price for anything you’re looking for
Show more
Thank you Kate for covering our story
I’m Noah, the founder of Instinct.
Instinct is a personal agent that we’ve been building for the past few months. The interface is simple: there are no new interfaces. You can text or call it. It's trained to use a phone and a computer in the same way that humans do. Instinct combines simplicity with extreme capability.
I’m thrilled with everything our early users are doing with Instinct. They’ve told us they’ve planned cross-country road trips, bought weekly groceries and concert tickets, and cancelled hundreds of dollars of subscriptions. Someone’s even planning their wedding with Instinct.
We want to make Instinct the best personal agent for all of you. It’s available in an invite-only beta program while we’re actively bringing up more compute. I’m excited to see what you all do with it.
Show more