14Privacy & surveillanceBelow the top 20
Cross-app identity stitching
CapabilityDomain knowledgeAffordanceImpact domainCap-adjacent
Statement (NASA form)
Given that the same foundation vendors sit inside mail, photos, cars, and offices, there is a possibility of a single firm reconstructing a life no user agreed to unify resulting in surveillance that looks like a suite discount.
Likelihood
4Likely
Consequence
3Major
Urgency
2Planned
Integration is a privacy event. Price it like one.
Composite 14 = 4×3 + 2
Applicable mitigations
Controls · Pace rules: no irreversible action faster than a human can reconstruct it · A real off-ramp that still functions · Contract-first delegation with privilege attenuation · Duty of care on high-stakes delegates · Short-lived, narrowly scoped tokens for every tool call · Statutory independent safety function at designated labs