Know who can act.
Know what they can reach. Keep approval where it matters.
Software isn’t just crawling websites or answering questions anymore. It’s starting to do work for businesses, interact with systems and act on behalf of customers. That changes what needs to be visible, controlled and approved.
Get the next issue by email
Short, practical, low-volume. Marketing, web, production and communications from the people who do the work.
More from Signal
Previous issue: The Interface Is Changing.
This issue went out by email on October 6, 2026. Read the emailed version.
Software isn’t just crawling websites or answering questions anymore. It’s starting to do work for businesses, interact with systems and act on behalf of customers. That changes what needs to be visible, controlled and approved.
The useful question is moving from “what can AI generate?” to “what can software actually do?” As agents get access to business tools, websites and data, the boring operational details start to matter a lot more.
Three shifts
worth your attention.
Meta wants an AI agent helping run the small business.
Meta introduced Muse for Small Business with a pitch that goes well beyond another chatbot. Businesses can connect tools including QuickBooks, Shopify, Slack, Asana, Dropbox, Canva, Notion, Stripe, Zoom and their Facebook and Instagram accounts, then give Muse a goal to work toward.
Meta says the business stays in control: Muse can prepare the work, but nothing publishes, sends or spends without approval.
The takeaway: The useful part of an agent isn’t writing another paragraph. It’s being able to move between the systems where the work already lives. Before turning that on, decide where the approval line belongs.
More than half of Cloudflare’s traffic is no longer human.
Cloudflare says that, for the first time, more than half of the traffic across its network is automated. Requests from AI agents grew more than 1,700% over the past year.
That traffic isn’t all the same. Some software is training on content. Some is indexing it. Some is acting on behalf of a real person trying to research a vendor, compare a product, make a reservation or complete a purchase.
The takeaway: Your website increasingly has two audiences—people and the software acting for them. Blocking every bot may become as shortsighted as allowing every bot. Know which machines you want to serve and what you want them to be able to do.
An AI agent needs permissions just like an employee does.
Microsoft’s new Digital Defense Report makes the security issue around agents pretty concrete. The useful part of an agent is its ability to interact with enterprise data, applications, APIs and other tools. Those connections are also what have to be secured.
Microsoft points to the same disciplines businesses already use for people and systems: identity, authentication, appropriate access, least privilege, monitoring and the ability to revoke access when something goes wrong.
The takeaway: Don’t give an agent broad access just because it makes the demo more impressive. Give it the minimum access required to do the job, know what identity it is using and make sure somebody can turn it off.
Know who can act.
Know what they can reach.
Keep approval where it matters.
Three things
I’d check this week
Find the places software can already act for you.
Look at your AI tools, automations and integrations. Which ones can send an email, publish content, change a record, spend money, access financial data or touch a customer? Write that list down. It’s hard to set an approval rule for something nobody realized was happening.
Look at your website like a machine would.
Make sure the basic information an agent would need is clear and current: what you do, where you operate, pricing or service details when appropriate, contact information and structured page content. Then review which crawlers and agents you actually want accessing it.
Give every agent the smallest key that works.
If an agent only needs to read a calendar, don’t give it permission to edit one. If it needs one Dropbox folder, don’t hand it the whole account. Separate identities, narrow access and an obvious off switch are a lot less exciting than the AI demo—and a lot more important.
Turn-key PR
+ Crisis Communications.
Sidestreet’s communications team comes from broadcast journalism and network production. We know what happens on the other side of the press release—what gets a reporter’s attention, how a newsroom evaluates a story and what happens when the questions get harder than the talking points.
We handle the full communications side: media relations and earned coverage, pitch strategy, executive communications, on-camera media training, crisis preparedness and active crisis response.
When something does go wrong, the process is already defined—bridge call, facts on paper, stakeholder sequencing, statement development, spokesperson prep and the press posture for what comes next. For retainer clients, a first-statement draft is typically in hand inside ninety minutes.
Good PR is easier when the story is good. Good crisis communications is easier when the plan already exists. We can handle both.
Senior help,
without the layers.
If either of these priorities is sitting on your list, our senior team can help shape the plan and stay on the work through launch.
A website that reads clearly to people and to the software acting for them.
Structure, plain language, predictable forms and accurate service information, built and maintained as one working system.
Explore web & digitalIdentity, least privilege and an off switch for every integration.
Managed IT and technology services for growing organizations that need someone accountable for the stack, including the agents and automations connected to it.
Explore managed technologyNeed a second set
of senior eyes?
Send us the thing you're trying to improve: a campaign, website, growth question, technology problem or half-formed idea. We'll tell you plainly whether we can help.
Issue 08 Questions Answered
Can't find the answer you're looking for? Get in touch
It's an AI agent from Meta that small businesses can connect to tools like QuickBooks, Shopify, Slack, Asana, Dropbox, Canva, Notion, Stripe, Zoom and their Facebook and Instagram accounts, then give a goal to work toward. Meta says Muse can prepare the work but nothing publishes, sends or spends without the business approving it. The practical step before turning it on is deciding where that approval line should sit.
Cloudflare reported in its October 2026 look at the agentic web that, for the first time, more than half of the traffic across its network is automated, and that requests from AI agents grew more than 1,700% over the past year. That traffic is a mix of crawlers training on content, crawlers indexing it for search, and agents acting for a real person who is researching, comparing or buying.
Not across the board. Blocking every bot can cut you off from agents acting for real customers, and allowing every bot hands your content to anyone training a model. The better move is deciding which machines you want to serve and what each is allowed to do, then setting that in your Cloudflare controls, robots.txt or platform settings.
Treat it like a new employee. Microsoft's 2026 Digital Defense Report points to the same controls used for people: a distinct identity, strong authentication, least-privilege access, monitoring, and the ability to revoke access quickly. In practice that means giving an agent only the calendar, folder or record access the job requires, and making sure someone knows how to shut it off.
The basics an agent needs to represent you accurately: what you do, where you operate, pricing or service details when appropriate, how to contact you, and content structured so it can be read without guesswork. If that information is missing, outdated or buried, an agent acting for a customer is more likely to get it wrong or move on.
Sidestreet Signal is a short, practical newsletter from Sidestreet Media in Spartanburg, SC. Each issue picks a few real changes across marketing, web, production, technology and communications, explains what they mean for a growing business, and pairs them with specific moves you can make that week. It's written by founder Josh Kuhn, sent by email through Kit, and archived here on hellosidestreet.com.
Want This in Your Inbox
Before It's on the Site?
Sidestreet Signal goes out by email first. Subscribe below, or bring us the thing you're trying to fix and we'll tell you plainly whether we can help.
Talk to usRelated Guides
How AI Should and Shouldn't Be Used in Marketing
Where AI earns its keep, where it fails, how to tell whether an agency is using it responsibly, and what to change about your website because of it.
Read the guideCrisis Communications: What It Is and How It Works
What a plan includes, what the first 24 hours look like, and the mistakes that make things worse.
Read the guideHow to Connect Your CRM to the Rest of Your Marketing
The signs your tools are not talking, what a working stack looks like, how to choose a CRM without overbuying, and the order to fix it in.
Read the guide