15Psychosocial harmBelow the top 20
A toy that is a microphone with a brand
CapabilityAffordanceImpact domainBoth
Statement (NASA form)
Given that connected toys already stream audio to the cloud, there is a possibility of bedtime talk leaving the house resulting in a child’s private speech in a vendor log.
Likelihood
4Likely
Consequence
3Major
Urgency
3Priority
Personal slice · family. Experimental household card. Not a certified finding.
Composite 15 = 4×3 + 3
Applicable mitigations
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Default-on crisis routing for under-18 accounts · Hard age-gating on companion products · Ban retention optimisation during crisis sessions · A real off-ramp that still functions