Welcome to the agent platform research briefing for Wednesday, June 3rd, 2026. Three stories today — and the big one is Microsoft officially shipping an OpenClaw-based product.

**Microsoft Scout — An "Autopilot" Agent Built on OpenClaw.** Microsoft unveiled Scout at Build 2026, calling it the first in a new category they're naming "Autopilots" — always-on agents that act on your behalf without needing to be prompted each time. Here's the kicker: Scout is built on the OpenClaw agent framework. Under Omar Shahine's new team, Scout connects to Teams, Outlook, OneDrive, and SharePoint, accessing chat, email, calendar, and contacts. It can also interact with your browser and reach external apps via MCP. Key architectural features include per-agent Entra identity, configurable heartbeat, explicit resource approval gates, and something called "Work IQ" — a semantic understanding layer that builds a dynamic graph of organizational relationships and priorities so Scout can weigh whether a stalled legal review matters more than a missed team lunch. It's available now as an experimental release to Frontier program customers with Intune policy configuration. The fact that a major enterprise product is now shipping on top of OpenClaw validates the open-source agent framework as the de facto standard for building autonomous personal assistants.

**OpenAI Codex Pushes Deep into Enterprise with 5 Million Weekly Users.** OpenAI released a major expansion of Codex on June 2nd, announcing more than 5 million weekly active users — up 6x since the desktop app launched in February. Knowledge workers now represent about 20 percent of users and are growing more than three times faster than developers. OpenAI also shipped six role-specific plugins for data analytics, creative production, sales, product design, equity investing, and investment banking — bundling integrations, instructions, and context so Codex can approximate a specific job. They also previewed "Sites" inside the Codex app — the ability to create shareable interactive websites and apps via URL. OpenAI plans to push Codex into the ChatGPT app everywhere in the next few weeks. This is the enterprise push many expected: OpenAI positioning Codex not just as a developer tool, but as white-collar infrastructure. The plugins mirror Anthropic's enterprise agent program from February, but OpenAI's user growth is the real signal here.

**IETF Publishes First Formal MCP Security Considerations Draft.** An important milestone for the Model Context Protocol: Syed Mohiuddin has submitted draft-mohiuddin-mcp-security-considerations-00 as an IETF Internet-Draft — the first formal security analysis of MCP at the standards-body level. The document identifies recurring vulnerability classes across MCP server implementations, proposes security considerations for implementors and operators, and introduces the term "Protocol Pivoting" to describe a cross-protocol lateral movement pattern in systems that compose MCP with other agent protocols. It also describes mcp-safeguard, an open-source automated detection tool. The draft notes that the MCP specification itself does not define normative security requirements — a gap this document aims to fill. For an ecosystem with over 10,000 servers and documented security incidents ranging from SQL injection leaks to cross-origin memory wipes, IETF-level scrutiny signals that MCP is maturing from a developer convention into critical infrastructure worthy of formal standardization.

That's the briefing for today. Microsoft ships OpenClaw to the enterprise, Codex goes white-collar, and MCP gets formal security scrutiny at the IETF. See you tomorrow.