2026-07-18

Daily AI Digest: Claude tightens permissions as Dify and Intuit reshape agent work

This is the GolemWorkers daily AI digest, focused on practical agents that can complete useful work while people keep the final say. Today, Claude Code closes risky permission gaps, Dify opens a sandboxed agent builder, and agents move deeper into financial support, family logistics, and customer communication.

A professional supervises several delegated agent tasks from a sunlit studio office.
An engineer reviews an approval checkpoint while a remote coding task continues.

Claude Code tightens approval checks for remote and scheduled work

Claude Code 2.1.214 closes permission gaps involving PowerShell, Bash, Docker and remote confirmations, while very long commands now prompt instead of running automatically. The release also restores scheduled-task instructions and adds progress heartbeats, giving people who delegate background coding work clearer control and fewer silent waits.

Source: Claude Code release notes
An operations lead brings research, documents and workflow outputs into one organized result.

Dify opens a sandboxed Agent builder for reusable digital workers

Dify 1.16 turns on its new Agent beta by default, letting teams create a worker that can run commands, install programs and manage files, then publish it as a web app or place it inside a larger workflow. Self-hosters can use it now, but Dify warns that Community Edition relies on soft isolation and needs hardened infrastructure for strict security requirements.

Source: Dify release notes
A small-business owner brings an accountant into an ongoing financial support session.

Intuit replaces agent handoffs with reusable skills and live human help

Intuit says it rebuilt its production agent system after chains of specialist agents lost context and compounded errors. In an early test covering about 1% of customers, a support specialist, accountant or bookkeeper can join the same agent conversation with its context intact; actions on financial data still require permission and remain auditable.

Source: VentureBeat
A family uses a wall-mounted Android phone to coordinate household tasks.

Teya turns a spare Android phone into a shared family agent

The open-source Teya app runs on Android 8 or newer and can manage a shopping list, calendars, timers, reminders, expenses and calls to approved family contacts. Its wake word, voice identification and household memory stay on the phone, while Mistral handles reasoning and speech services, giving families an inexpensive shared assistant with explicit local boundaries.

Source: Teya repository
A service coordinator supervises customer calls, messages and a protected background task.

Agno gives agents voice calls, text messages and safer code work

Agno 2.7.4 adds tools for agents to send SMS messages, place calls and review communication history through Plivo, alongside a Firecracker-based environment for long-running code and file tasks. Agent operators can combine those capabilities with richer Telegram actions while keeping communication and execution tools individually configurable.

Source: Agno release notes

Agent idea of the day

Confirm appointments before no-shows happen

A small-business coordinator reviews confirmed appointments and a short follow-up queue.

What this agent does

Review upcoming appointments, send one consented confirmation message, follow up once when needed, and hand exceptions to a person.

Best for: Salons, repair shops, consultants, property managers and other small teams that lose time to missed appointments.

Give it

  • Read-only access to the next seven days of appointments
  • A consented customer contact list with time zones and opt-out status
  • Approved SMS and call scripts, quiet hours and a dedicated Plivo number

Tell it to

  1. Read the next 48 hours of appointments and match each one to a consented contact.
  2. Check the customer time zone, quiet hours and opt-out status before contacting anyone.
  3. Send the approved confirmation message with the appointment time and a simple confirm-or-needs-help reply.
  4. Place one approved follow-up call only when there is no reply after six hours, and never improvise prices, policies or promises.
  5. Update the confirmation status and deliver every unresolved case to a person for follow-up.

Run it: Run each morning and again 24 hours before every unconfirmed appointment.

You get

A confirmation list showing confirmed, needs help, unreachable and opted-out appointments, with message or call evidence and a clear human follow-up queue.

Keep a human in control

  • Contact only people who have consented, honor opt-outs immediately and respect local calling and messaging rules.
  • Never change, cancel or create an appointment without explicit human approval.
  • Never request payment details, health information, identity documents or other sensitive data.
  • Use one approved message and at most one approved follow-up call per appointment.

Feasibility: Agno's official Plivo toolkit documents single-recipient SMS, outbound calls, phone-number lookup and call/message history, which are sufficient for a bounded confirmation workflow with human escalation. Source: Agno Plivo tools →

GolemWorkers — OpenClaw ready to work: launch in seconds, no setup, online 24/7.