Meta's Muse personal agent will export its own filesystem — hundreds of megabytes of Ubuntu system files, app templates, internal documentation, agent logs, and SSH keys — when users ask it nicely. Two developers, Peter James and Jonny L. Saunders, independently got Muse to zip up and share its root filesystem, with one archive unpacking to 6.8 GB. The Verge first reported the behavior on September 24.

Meta is pushing back hard on any suggestion this is a breach. Nat Friedman called the files "your own VM" and "intended behavior," and Meta Superintelligence Labs' David Singleton called it a deliberate design choice: each Muse user gets their own isolated Linux computer in the cloud. Meta says users can see only their own VM, never Meta infrastructure or another user's data.

The exported files still make revealing reading: Markdown and JSON documents describe how the agent — internally codenamed "Hatch" — handles requests, lists skill directories for Workspace, travel, shopping and health integrations, and, by one account, showed "almost no prompt injection resistance." It's the newest exhibit in the agent-permission debate: the VM is yours, but its internals are Meta's — and both are now in your Downloads folder.