AI Tools

MicroDuck and 10 AI Launches: Robots, Agents, Apps, and Skills

Direct Answer

The most important launch in this roundup is not one product. It is the shape of the stack. MicroDuck puts an open, trainable robot within reach of hobbyists. Bezalel and Instinct give agents persistent capabilities. Supernova makes company data queryable. Expertise packages operating knowledge as installable skills. X1 moves app creation closer to a guided production line. The patient advocacy project shows how the same primitives can support a high-stakes human workflow.

That does not make every tool production-ready. MicroDuck is a pre-order. Bezalel labels itself alpha. Instinct is private access. The patient skill is an organizer, not a doctor. The right response is neither dismissal nor instant adoption. It is a controlled pilot with a narrow task, synthetic or low-risk data, explicit permissions, logs, and a human finish line.

The weekly signal: AI products are moving from isolated chat windows into bodies, inboxes, data systems, codebases, and repeatable skills. As reach expands, the quality of the permission model matters as much as the quality of the model.

Watch the Roundup

Credits: the product discovery, demonstrations, and commentary come from Andrew Warner and Corey Ganim. Availability, specifications, and product boundaries in this article were checked against current official pages on 5 September 2026. The episode includes a sponsored segment for Zapier MCP.

What Is Actually Available?

ProductWhat it doesStatusMain boundary
MicroDuckProgrammable 25 cm biped robotPre-orderPhysical safety, delivery, hardware support
MIDI AutocompleteOn-device musical continuationFree app/demoCreative control and model repetition
OutbidPaid public ranking boardLiveRevenue claims are not profit or guaranteed ROI
BezalelShared MCP capability planeAlphaOne credential can span sensitive capabilities
InstinctPersonal agent across devices and appsPrivate accessRetention, revocation, and deeply personal data
BenelOilGas-station management gamePlayable web productFrom prototype to supported commercial release
X1AI-native iPhone app builderLiveApple account, review, credits, and portability
SupernovaCompany data and MCP accessLiveScopes, SQL limits, data lineage, and writes
Expertise.aiInstallable and monetizable AI skillsLiveSkill provenance, permissions, and output review
Claude AcademyOfficial Claude educationLive and freeTraining is not proof of workflow reliability
Patient advocacy skillStructured research and care briefOpen sourceMedical verification and patient privacy

The table is the antidote to launch-week compression. A landing page, waitlist, source repository, private beta, and shipping product are not the same thing. Before assigning a tool real work, confirm what can be used today, what data it retains, what actions it can take, and how you remove access.

1. MicroDuck Makes Robotics More Reachable

MicroDuck is a 25 cm, roughly 800 gram biped from Pollen Robotics. The $399 price is before tax and shipping, and the product is currently offered as a pre-order. The box is listed with the robot, battery, USB-C cable, and controller. Seven built-in moves mean a buyer can use it without first becoming a robotics engineer.

The more consequential part is the development stack. MicroDuck has 15 motors, a camera, LiDAR, and two inertial measurement units. Its learned movement policy runs at 50 Hz, while a stabilizing control layer runs faster underneath. Pollen publishes the SDK, simulator, and reinforcement-learning training stack under Apache 2.0.

Why it matters: a low-cost robot becomes much more valuable when its software, simulation environment, and training path are inspectable. Students can test behavior in simulation, compare policies, and understand how a movement reaches hardware instead of treating the device as a sealed toy.

The controls should be as concrete as the hardware. Train new policies in simulation first. Keep a clear floor area. Add speed, tilt, and motor-current limits. Maintain a physical stop condition. Treat camera data as potentially sensitive. A $399 robot lowers the price of entry; it does not remove the obligations that come with software capable of moving in physical space.

2. MIDI Autocomplete Shows the Value of a Small Local Model

Simon Edwardsson's MIDI Autocomplete is a useful counterpoint to the obsession with giant general models. He trained a 125 million parameter transformer on a cleaned collection of MIDI files, then put it into a free app called RollTab. A player supplies a short musical phrase and the model continues it on an iPhone, iPad, or connected MIDI keyboard.

The official write-up reports about 108 generated notes per second on an iPhone 15 and explains that dataset cleaning mattered more than simply adding files. Preference tuning helped the model produce continuations the creator liked more often. It still struggles with very short prompts and can fall into repetitive loops, which makes it an idea partner rather than an autonomous composer.

This is the local-AI pattern worth copying: choose one compact representation, one immediate interaction, and one latency target. MIDI is easier to model and edit than finished audio. On-device inference protects the flow of playing and can keep the raw session off a remote server. The product wins by narrowing the job.

3. Outbid Turns Payment Into Distribution

Outbid is a public leaderboard where a company pays more than the current leader to move to the top. In this roundup, the hosts discuss a reported total that had already moved beyond the earlier $212,000 interview snapshot. That is exactly why these figures should be dated and attributed rather than presented as audited lifetime revenue.

The durable lesson is not the latest counter. Payment changes the public state of the product, the buyer has a reason to share the placement, and the founder gets another event to distribute. Our full Outbid case study covers the three-hour initial build, the viral loop, planning with Cursor and Grill Me, payment-provider changes, the traffic spike, and the difference between reported revenue and profit.

Reality check: a host's rough estimate of near-zero expenses is not a profit statement. Payment fees, taxes, refunds, infrastructure, support, fraud controls, and the founder's time still exist. A buyer also purchases visibility, not guaranteed customers.

4. Bezalel and Instinct Put Permissions at the Center

Bezalel: one capability plane, one very important token

Bezalel bundles seven capability groups behind one MCP endpoint: long-term memory, email, financial records, texting, a cloud computer, disposable sandboxes, and third-party connectors. The pitch is portability. Claude Code, Codex, Cursor, OpenClaw, or another MCP client can connect to the same state without rebuilding every integration.

Its official page says bearer-token scopes decide which capability domains an agent can touch. That is the right primitive, but the combination creates a large blast radius. A token that can read memory, send email, operate a browser, and access financial context is not merely a convenient API key. It is an identity and authority bundle.

  • Issue separate tokens for separate agents and environments.
  • Grant the smallest capability set, then expand only after observed need.
  • Keep money movement, destructive actions, and outbound communication behind approval.
  • Log every tool call and make revocation immediate.
  • Test account deletion and export before storing durable memory.

Bezalel currently labels itself alpha, and some advertised capabilities remain in development. For example, its page says virtual cards with server-side limits and owner approvals are coming soon. The honest pilot is a disposable inbox, a small sandbox, and no production credentials.

Instinct: convenience reaches deeply personal context

Instinct describes a personal assistant that can connect to email, messaging, screen, audio, location, and devices, then communicate by phone or text. That is a compelling interface because users do not need to learn another dashboard. It is also an unusually intimate data surface.

The company says access is currently limited to a private group while it scales compute. The episode raises a more important issue: disconnecting a service must stop new processing predictably, and the user needs to understand whether queued jobs, cached data, or generated summaries can still arrive. A disconnect button is only trustworthy when revocation semantics are documented and testable.

Do not connect a primary inbox, private message history, microphone, or location feed during an exploratory test. Use a test identity and seeded data. Read the privacy policy and terms. Ask how long raw data and derived memory remain, how deletion propagates to subprocessors, whether support can inspect content, and what happens to scheduled work after access is revoked.

Zapier MCP: the sponsor still illustrates a good control

The sponsored Zapier MCP segment shows the same principle in a more established integration layer. Zapier currently advertises connections across 9,000 apps and lets users configure the actions exposed to an agent. The useful design lesson is granular capability selection: an agent that needs to create a draft should not automatically gain permission to send, delete, or modify unrelated records.

MCP makes tools discoverable to models; it does not make every discovered action appropriate. Separate read, draft, execute, and delete permissions. Add approval where consequences become external. Preserve an audit trail that shows the human request, agent decision, tool input, tool output, and final confirmation.

5. BenelOil and Claudish Show Two Paths for Small Products

BenelOil is a gas-station management game that began as a fast AI-assisted build and developed into a recognizable product. The interesting part is not that an agent can generate game code. It is that a creator can find a compact mechanic, publish it, observe whether people return, then decide whether the prototype deserves the slower work of art direction, balancing, performance, accessibility, saves, distribution, and support.

Claudish takes the opposite route: a tiny interactive idea can market a larger technical product. The name has been used for Claude's recognizable verbose or formal style, and the playful translation concept gives people an immediate way to understand that phenomenon. Small tools are often strongest when the interaction itself communicates the idea better than a long landing page.

Both examples argue for a two-stage build. First, publish the smallest experience that proves the behavior is interesting. Then replace fragile generated output with product engineering only where real usage justifies it. The prototype is a question; retention is part of the answer.

6. X1 and Supernova Move Agents Into Production Systems

X1: an app factory still ends at Apple's gate

X1 guides a user from product planning and design through React Native implementation, Expo testing, TestFlight, and App Store preparation. That integrated path is more useful than a prompt box that produces a static mockup. It acknowledges that an app is a sequence of decisions, builds, tests, credentials, and release checks.

The boundaries matter. Publishing still requires an Apple Developer account and Apple review. X1 uses a credit model, and its current paid plans advertise source ZIP export and code ownership. Before committing a serious product, export a representative project, build it independently, inspect dependency and license choices, test authentication and payments, and confirm that you can continue without the hosted builder.

Portability test: do not ask whether the builder says you own the code. Ask whether a different developer can clone the export, install dependencies, run tests, build the app, and ship a fix without the original platform.

Supernova: useful data access needs bounded queries

Supernova MCP connects Claude Desktop, Claude Code, Codex, and other clients to a company's data. Its official MCP page says agents can inspect live schemas, run bounded read-only SQL against a data lake, and work with text files in a team data repository. Repository writes become attributed commits when approved scopes permit them.

This is a better pattern than copying dashboards into prompts. The agent can ask what tables exist, identify freshness, query the governed source, and leave analytical work in version control. But natural-language access does not cure poor definitions. Revenue, active customer, churn, qualified lead, and margin still need canonical models and owners.

  • Begin with read-only access to curated tables, not a production database superuser.
  • Set query cost, row, runtime, and concurrency limits.
  • Expose lineage and update times with every answer.
  • Mask personal and regulated data before it reaches the model.
  • Require review for repository writes and any downstream business action.

7. Expertise.ai and Claude Academy Turn Know-How Into Infrastructure

Expertise.ai: a marketplace is also a software supply chain

Expertise.ai lets experts publish playbooks as installable, monetizable AI skills. Businesses can install those processes and run them against connected systems. The official site currently focuses heavily on revenue workflows, including pipeline hygiene, deal recovery, outreach, and deliverability.

The business model makes sense: a valuable operating procedure can be distributed more efficiently than consulting hours. Yet a skill is executable organizational behavior. It can instruct an agent to read customer data, modify CRM fields, draft messages, or trigger actions. A marketplace therefore needs the controls of a package ecosystem, not only the merchandising of a template store.

Evaluate the author, version history, requested connectors, exact tool permissions, update policy, rollback path, and test cases. Pin versions in production. Review changes before auto-updating. Run new skills against synthetic accounts. Measure accepted outcomes rather than the number of times the skill was invoked.

Claude Academy: learn the tool, then test the workflow

Claude Academy is Anthropic's official learning hub. It offers free courses, tutorials, and use cases focused on using AI safely, effectively, and intentionally. That makes it a sensible starting point for teams that are currently learning through disconnected social posts.

Completion is not deployment evidence. Follow each course with one bounded task from the team's real work. Define a baseline, acceptable output, failure examples, data boundary, reviewer, and rollback. Training builds vocabulary; evaluations show whether the process works in your environment.

8. The Patient Advocacy Skill Is the Highest-Stakes Example

Peter Yang's open-source patient advocacy skill organizes complex cancer information into a concise brief. Its structure covers patient context, up to three next actions, what is known or ambiguous, relevant terminology, and a care log. It prioritizes sources such as NCI PDQ, regulators, major clinical guidelines, ClinicalTrials.gov, PubMed, and official cancer-center pages.

The project is valuable because medical journeys create an information-coordination problem. Appointments are short, language is specialized, records arrive from different institutions, and families need a stable list of questions and decisions. A structured brief can help a patient arrive better prepared and preserve what changed between visits.

Original sources

Peter Yang's announcement on X and the patient advocacy skill repository.

Its limits are explicit and essential. The skill does not diagnose, choose treatment, determine clinical-trial eligibility, or replace the care team. Trial records can be stale, inclusion criteria can be nuanced, and a plausible summary can omit the one detail that changes a medical decision. Every clinical claim and proposed next step must return to a qualified professional.

Privacy deserves the same attention. The repository supports a local Markdown workflow and an optional Google Docs integration. Prefer the smallest possible dataset, remove unnecessary identifiers, keep local files encrypted, restrict sharing, and review the data practices of every model and connector before entering protected health information. Local files do not guarantee local inference.

Safe role: use AI to organize records, surface questions, explain terms, and maintain a timeline. Keep diagnosis, treatment selection, eligibility, consent, and urgent decisions with clinicians and the patient.

A Practical Adoption Checklist

LaneProductsFirst testStop condition
Try nowMIDI Autocomplete, BenelOil, Claude AcademyUse public or non-sensitive inputs for one sessionThe tool adds friction without a repeatable benefit
Sandbox firstBezalel, X1, Supernova, Expertise.aiUse a test account, least privilege, logs, and an exportAccess cannot be narrowed, audited, revoked, or migrated
Wait or verifyMicroDuck, InstinctConfirm delivery/access terms and current documentationSupport, safety, privacy, or deletion answers remain unclear
Human-led onlyPatient advocacy skillUse de-identified material to produce questions for a clinicianThe output starts making clinical decisions or handling urgent care
  1. Name one job. Avoid testing a product as a general assistant. Choose one output and one user.
  2. Map the data. List every source, credential, derived memory, recipient, and retention period.
  3. Reduce authority. Start read-only, draft-only, simulated, or local wherever possible.
  4. Define acceptance. Write examples of a pass, a correction, and a dangerous failure.
  5. Observe the run. Capture prompts, tool calls, costs, latency, interventions, and final disposition.
  6. Test exit. Revoke access, delete data, export artifacts, and run the result outside the vendor.
  7. Expand by evidence. Add data or permissions only when the narrow pilot creates measurable value.

This is where an AI tools assessment earns its keep. The market moves too quickly for a permanent list of winners. A reusable evaluation method survives product launches, pricing changes, and model swaps.

Video Chapters

TimeTopicTimeTopic
00:00MicroDuck: a $399 programmable robot08:30Claudish
01:08MIDI Autocomplete10:40X1 iPhone app builder
01:58Outbid13:32Supernova
03:47Bezalel15:21Expertise.ai
05:03Instinct17:27Claude Academy
07:19Zapier MCP18:27Patient advocacy skill
08:00Gas station game

Verdict

MicroDuck is the best symbol of the week, but permissions are the real story. A robot can now be inexpensive, programmable, and open. A single MCP endpoint can give an agent memory, communication, a computer, and business data. A skill can package an expert's process and distribute it to a team. Those are meaningful changes in who can build and what software can do.

The winning products will not merely offer more autonomy. They will make authority legible: what the agent can see, what it can change, what costs money, what needs approval, what is logged, and how access ends. The teams that adopt these tools well will treat trust as part of the interface, not a policy page added later.

Sources and Product Links

Editorial note: prices, access status, product capabilities, and policies change quickly. This article distinguishes official documentation from claims or commentary made in the video and was last checked on 5 September 2026. It is educational content, not medical, legal, financial, or purchasing advice.

Common questions

Can I buy the MicroDuck robot now?
MicroDuck is available to pre-order for $399 before tax and shipping. Pollen Robotics says pre-orders opened on 27 August 2026. That is different from immediate retail availability, so buyers should confirm the current delivery estimate and regional terms before ordering.
Is MicroDuck open source?
Yes. Pollen Robotics publishes the SDK, simulation environment, and reinforcement-learning training stack on GitHub under the Apache 2.0 license. The robot is also designed to work out of the box with a controller, so programming is optional rather than mandatory.
What is Bezalel?
Bezalel is an alpha capability layer that exposes memory, email, money data, texting, a cloud computer, sandboxes, and connectors through one MCP endpoint. A scoped bearer token controls which capability groups an agent can access.
Is Instinct publicly available?
Not broadly. Instinct says it is available to a private access group while the company scales compute. Because it can connect to highly personal data such as email, messages, screen, audio, and location, prospective users should review retention, revocation, deletion, and support terms before connecting real accounts.
Can X1 publish an iPhone app without Apple?
No. X1 can help plan, build, test, and prepare a React Native app, but App Store distribution still requires an Apple Developer account and Apple review. Paid X1 plans currently advertise source-code export, which should be tested before treating the platform as portable.
Can an AI patient advocacy skill give medical advice?
No. Peter Yang's open-source skill is designed to organize facts, questions, trials, terminology, and a care log. Its own documentation says it does not diagnose, choose treatment, determine trial eligibility, or replace the medical team. A clinician must verify decisions, and patient data needs appropriate privacy controls.
Share
X LinkedIn Reddit
Build Yours

Want a system
like this one?

Book a free 30-minute call. We map your situation, identify the highest-impact automation, and figure out if we are a fit.

Book Free 30-min Call