When Your User's Permission Isn't Enough: The Legal Wall Around AI Agents

A federal judge just redrew the legal map for AI agents, and it's going to matter far more than the court filing itself suggests. Last week, Judge Maxine Chesney granted Amazon a preliminary injunction against Perplexity's Comet browser - an AI shopping agent that logs into Amazon on users' behalf, finds products, and makes purchases. The ruling wasn't that Perplexity did something sneaky. It was that user permission isn't enough anymore.

The Permission Problem

Here's what makes this significant: Perplexity had its users' explicit consent to act. Users gave the company their Amazon passwords. They wanted Comet to shop for them. Yet the court sided with Amazon anyway, applying the Computer Fraud and Abuse Act - the same statute used to prosecute hackers - to a commercial AI agent operating with full user knowledge. The legal distinction is stark: the user's permission to use the agent is not the same as Amazon's permission for the agent to exist.

The timeline matters. Perplexity launched Comet, Amazon warned them five times starting in November 2024. In August 2025, Amazon built a technical barrier specifically designed to block it. Perplexity released an update within 24 hours that circumvented it. That active resistance - combined with the explicit warnings - made the judge's decision straightforward. This isn't a gray area. It's a platform asserting control over who gets to act within its infrastructure.

What This Means for Agent Commerce

The ruling establishes a trilateral framework that didn't exist before. In traditional commerce, you have two parties: buyer and seller. An AI agent adds a third vertex. Now each party - the user, the agent operator, and the platform - has independent veto power. A user can refuse to use the agent. An agent can decline to serve a platform. But the platform can refuse the agent, period, regardless of what users want. Every major platform becomes a gatekeeper. Every AI travel agent needs the airline's permission. Every research agent needs the publisher's blessing. The economic stakes compound quickly: Amazon's advertising revenue hit $17.7 billion in Q3 2025, growing 22% year-over-year. AI agents that bypass the ads layer extract value without contributing to the ecosystem that sustains low prices. From Amazon's perspective, Perplexity wasn't just unauthorized - it was a free rider on a $17 billion quarterly advertising system.

This ruling arrives precisely when every major technology company is building agents designed to act on other platforms. Google's agents search the web. Apple's agents interact with apps. OpenAI's agents browse websites. Each one now operates in legal territory that's been fundamentally redrawn. The distinction Judge Chesney drew - between user permission and platform authorization - applies to all of them. The House Rules just became The Law.